Nepenthes can determine the malware activity on a network by deploying a nepenthes sensor (i.e. honey pot). The programm emulates different well known vulnerabilities waiting for malicious connections trying to exploit them. WWW: http://nepenthes.carnivore.it/