SIFT: Snort Intrusion Filter for TCP
Stateful intrusion detection for high-speed network's