Introduction - If you have any usage issues, please Google them yourself
Data TCP libnids restructuring, when libnids status to NIDS_JUST_EST, said the TCP connection is established, at the same time adds a flow_id to TCP flow is used to identify this connection When libnids status to NIDS_DATA, accepted data, when new data arrives, according to flow_id to push data to the corresponding flow table, prepare the way for after data analysis. Can be increased on this framework, therefore, in accordance with the application of the HTTP protocol parsing