Ryan Barnett has taken a few utilities from util-linux and patched the source to make a better honeypot. You can see the detailed outline of everything here:
http://mywebpages.comcast.net/rbarne...practical.html and you can see an example of what the log looks like there:
http://mywebpages.comcast.net/rbarne...ider_test.html
