Honeyd Implementation TCP ports may be connected to an arbitrary service. add template tcp port 80 "sh scripts/web.sh" Honeyd forks child process to execute service application. Stdin/out is connected via socketpair to TCP stream. Stderr is just a pipe and used for service syslog. Libevent handles incoming and outgoing data: New I/O channels just get added without extra complication for the application.