Gimme Back My Data

Network intrusion detection systems identify security threats by detecting malicious activity such as scans, denial of service attacks and unauthorised access through the examination of network traffic. They are installed at strategic points on the network to monitor traffic to and from all hosts on the network. Unlike a packet filter or firewall, where a packet filtering decision is made on weather or not to allow traffic to continue, network intrusion detection systems do not interfere with network traffic in any way. In simple terms these systems could be described as a packet sniffer that also analyses the captured packets.

read the full article