Nowdays firewall technology in the field of the network security has been used widely, however, facing to various means of attacks, the vulnerability and limitations of firewall technology are more obvious. The paper discusses the honeypot technology in the field of the network security technology. According to the existed shortage of honeypot system, the distributed honeypot intrusion system based on intrusion tracking was proposed. The system uses distributed deployment. It expands the network area, and uses the package marking technology to identify sources of real attacks. The existed network is protected better.