http://www.andrew.cmu.edu/~rdanyliw/snort/snortacid.html