In the mid-90s, there was a honeypot product called CyberCop Sting[1], which predated Secure Networks' Ballista[2]. CyberCop Sting could simulate TCP and UDP se

In the mid-90s, there was a honeypot product called CyberCop Sting[1], which predated Secure Networks' Ballista[2]. CyberCop Sting could simulate TCP and UDP services across various implementations. If I recall correctly, it also allowed the configuration of TCP/IP stacks to mimic the behavior of different operating systems. These features were particularly innovative almost 30 years ago. [1] https://theswissbay.ch/pdf/Gentoomen%20Library/Security/0321108957.Addison-Wesley%20Professional.Honeypots-%20Tracking%20Hackers.pdf https://theswissbay.ch/pdf/Gentoomen%20Library/Security/0321... [2] https://news.ycombinator.com/item?id=26440139 https://news.ycombinator.com/item?id=26440139