Copyright © Andrew Lockhart Section 2.2 taken from Snort Users Manual, © 1998-2003 Martin Roesch, © 2001-2003 Chris Green, © 2003 Sourcefire, Inc.