Vortex is a near real time IDS and network surveillance engine for TCP stream data. Vortex decouples packet capture, stream reassembly, and real time constraints from analysis. Vortex is used to provide TCP stream data to a separate analyzer program.
- Good enough performance
- Flexible, agile paradigm
- True multithreading with use of xpipes
Vortex-ids is perfect! Thanks.