Refinements to the 3-tuple detection engine