Network Intrusion Detection Systems has 3 main concerns:
- Capture: data link layer packaging capture library
- Detection: pattern/signature
- Alter: