This repository contains a standalone prototype developed to explore and validate connection-holding logic related to the Honeynet Project's Event Horizon initiative.
This tool simulates a network sinkhole (tarpit). It accepts incoming connections and uses an asynchronous event loop to keep them open indefinitely. The objective is to maximize connection retention while minimizing CPU and memory usage.
- Asynchronous Concurrency: Built using Python's
asyncioto manage thousands of idle sockets within a single event loop. - State-Driven Logic: Uses a simple finite-state model to transition connections from acceptance to indefinite holding.
- Exploratory Design: Implemented as a preliminary study to understand tarpitting behavior prior to official mentor guidance.
Architectural assumptions made during the absence of an official reference repository are documented here:
Note: This prototype is intended for logic verification and local testing only.
- Run the script:
trapit.py - Test connection handling using
ncortelneton the configured port.