A real-life example of how a honeypot can be used to a network administrator's advantage is as follows: one of the first ever honeypots was spawned in 1991 to defend against a group of Dutch hackers who attempted to break into a system at Bell Labs. The incident spanned over five months and was documented by Bell Labs employee Bill Cheswick. The intruder referred to as Berferd was monitored by Cheswick; Cheswick noted “I could buy them some time to lock down machines, build tools, and trace him. I decided that my goal was to make Berferd spend more time on the problem than I did … We wanted to watch the cracker's keystrokes, to trace him, learn his techniques, and warn his victims. The best solution was to lure him to a sacrificial machine
