blackholes and honeypots blackhole networks large, unused networks or subnets shouldn't be hit any traffic there is interesting has background noise low levels of data honeypots small number of hosts emulate services lots of data any traffic should be interesting