A small but important fix for Honeyd2MySQL script: honeyd logs both the start (S) and ending (E) of connections to specific ports. The initial version was copying every event from the logfile to the database, while we only need the (S) lines.
Please donwload the new version from here: honeyd2mysql-0.2
MD5 Checksum: 13AA3BF59777515B6A5A5E454A09C9D2
SHA-1 Checksum: EF1CB85FCECF2DD2B36DABC2C81FD34F739CB45C
For comments, suggestions, fixes, please use the Honeyd2MySQL page: http://bruteforcelab.com/honeyd2mysql