- Prevent outgoing messages / firewalls. - ICMP time exceeded in transit - Packet throttling: - packets per second. Management Console: =================== Provide interactive access to configuration. - halt (halt a honeypot) - reboot (restart a honeypot or start a halted honeypot) - delete template or port Detection: ========== - SR packet. - An ACK of a FIN when the service had detached already resulted in a FIN|ACK flood. - No reordering - No congestion control. - No DF for some operating systems.