\label{bibliography}
\begin{thebibliography}{RFC1832}

\bibitem[RFC2373]{RFC2373}
R. Hinden and S. Deering,
``IP Version 6 Addressing Architecture,''
RFC~2373,
\mbox{Jul.~1998.}

\bibitem[MJ93]{bpf}
S. McCanne and V. Jacobson,
``The BSD Packet Filter:  A New Architecture for User-level Packet Capture,''
{\em Proc.\ 1993 Winter USENIX Conference\/}, San Diego, CA.

\bibitem[MLJ94]{pcap} 
S. McCanne, C. Leres and V. Jacobson,
{\tt libpcap\/},
available via anonymous ftp to ftp.ee.lbl.gov,~1994.

\bibitem[Pa98]{bro-usenix-98}
V.\ Paxson,
``Bro: A System for Detecting Network Intruders in Real-Time,''
Proc.~7th USENIX Security Symposium, Jan.\ 1998.

\bibitem[Pa99]{bro-comp-networks-99}
V.\ Paxson,
``Bro: A System for Detecting Network Intruders
in Real-Time,'' \emph{Computer Networks} special issue on intrusion detection,
31(23--24), pp. 2435--2463, Dec.\ 1999.

\bibitem[PN98]{ptacek98}
T.\ Ptacek and T.\ Newsham,
``Insertion, Evasion, and Denial of Service: Eluding Network
Intrusion Detection,''
Secure Networks, Inc.,
http://www.aciri.org/vern/Ptacek-Newsham-Evasion-98.ps,
Jan.\ 1998.

\bibitem[RFC791]{RFC791}
J. Postel,
``Internet Protocol,''
RFC~791,
\mbox{Sep.~1981.}

\bibitem[RFC793]{RFC793}
J. Postel,
``Transmission Control Protocol,''
RFC~793,
\mbox{Sep.~1981.}

\bibitem[RFC854]{rfc-telnet}
J. Postel and J. Reynolds,
``Telnet Protocol Specification,''
RFC~854,
\mbox{May~1983.}

\bibitem[RFC855]{rfc-telnet-options}
J. Postel and J. Reynolds,
``Telnet Option Specifications,''
RFC~855,
\mbox{May~1983.}

\bibitem[RFC959]{rfc-ftp}
J. Postel and J. Reynolds,
``File Transfer Protocol (FTP),''
RFC~959,
\mbox{Oct.~1985.}

\bibitem[RFC1013]{rfc-x11}
R. Scheifler,
``X Window System Protocol, version 11: Alpha update,''
RFC~1013, \mbox{Apr.~1987.}

\bibitem[RFC1094]{RFC-NFS2}
Sun Microsystems,
``NFS: Network File System Protocol specification,''
RFC~1094, \mbox{Mar.~1989.}

\bibitem[RFC1122]{RFC1122}
B. Braden,
``Requirements for Internet hosts - communication layers,''
RFC~1122,
\mbox{Oct.~1989.}

\bibitem[RFC1282]{rfc-rlogin}
B. Kantor,
``BSD Rlogin,''
RFC~1282,
\mbox{Dec.~1991.}

\bibitem[RFC1288]{rfc-finger}
D. Zimmerman,
``The Finger User Information Protocol,''
RFC~1288,
\mbox{Dec.~1991.}

\bibitem[RFC1413]{rfc-ident}
M. St. Johns,
``Identification Protocol,''
RFC~1413,
\mbox{Jan.~1993.}

\bibitem[RFC1644]{RFC1644}
B. Braden,
``T/TCP -- TCP Extensions for Transactions Functional Specification,''
RFC~1644,
\mbox{Jul.~1994.}

\bibitem[RFC1813]{RFC-NFS3}
B. Callaghan, B. Pawlowski, P. Staubach,
``NFS Version 3 Protocol Specification,''
RFC~1813, June 1995.

\bibitem[RFC1831]{rfc-rpc}
R. Srinivasan,
``RPC: Remote Procedure Call Protocol Specification Version 2,''
RFC~1831,
\mbox{Aug.~1995.}

\bibitem[RFC1832]{rfc-xdr}
R. Srinivasan,
``XDR: External Data Representation Standard,''
RFC~1832,
\mbox{Aug.~1995.}

\bibitem[RFC1939]{rfc-pop3}
J. Myers and M. Rose,
``Post Office Protocol - Version 3,''
RFC~1939,
\mbox{May~1996.}

\bibitem[RFC1945]{rfc-http-1-0}
T. Berners-Lee, R. Fielding and H. Frystyk,
``Hypertext Transfer Protocol -- HTTP/1.0,''
RFC~1945,
\mbox{May~1996.}

\bibitem[RFC2616]{rfc-http-1-1}
J. Mogul, H. Frystyk, L. Masinter, P. Leach, T. Berners-Lee,
``Hypertext Transfer Protocol -- HTTP/1.1,''
RFC~2626,
\mbox{Jun.~1999.}

\bibitem[YKSRL00]{rfc-ssh}
T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne and S. Lehtinen,
``SSH Connection Protocol,'' Internet Draft,
\emph{draft-ietf-secsh-connect-07.txt}, May~2000.

\end{thebibliography}
