Package labrea

Tarpit (slow to a crawl) worms and port scanners

http://sourceforge.net/projects/labrea/

Intrusion detection "sticky" honey pot technology using virtual
servers to detect and trap worms, hackers, and other malware.

General Commands (Section 1)
labrea
labrea creates virtual machines for unused IP addresses in the specified block of IP addresses. LaBrea sits and listens for ARP "who-has" requests. When an ARP...
File Formats (Section 5)
labrea.conf
Generalities labrea.conf is the configuration file for the labrea(1) program. Each line consists of a selector field, followed by an action verb. Whitespace is...