Collecting data areone of the aims of Honeynet, But how to analyze these collected data is the keypoint. Data mining is introduced to mark and sort the log module data prayed in Honeynet. And the sorted data were mined regularly with sort algorithm. By means of that, the attack method could be found, and good defense ways for varies attack manners would be deployed,Collecting data is one of the aims of Honeynet.