If you're running a honeywall, honeysnap will help you out.

http://www.ukhoneynet.org/tools/honeysnap/