Compelling approach. Can it be executed using existing Sourcefire / SNORT technical mechanisms or will other mechanisms be required?