Ah.. Counter attacking isn't something that I've seen in all honeypots. In fact, from what I've read this isn't the preferred method. The reason is that the attacker may be using an innocent bystanders computer (so to speak) or could be spoofing (blind and half blind attacks) against the honeypot.

Unlike Senator Hatch, who thinks this is appropriate, it's not. Better to use to gain information and press charges than attack and be charged.