Honeyd Evaluation Performance measurements: TCP measurements still ongoing. Using internal Python service, Honeyd can keep up with 2000 TCP connections per second on a 1 GHz Pentium-III: Each connection to an internal service consumes two file descriptors and some memory. Nmap evaluation: Set up B-class network populated with virtual honeypots for every Nmap fingerprint. 600 distinct fingerprints in database. Nmap results: 555 personalities uniquely identified. 37 results that contained the simulated personality. 8 identification failures.