Decodes IDS alerts and sends them to sguil SANCP TCP/IP session records Tcpflow Extract an ASCII dump of a given TCP session p0f Operating system fingerprinting...