You might set up a honeypot with an iptables rule to redirect all port 9050 traffic to an internal tor proxy configured to just log everything.
/* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
