Marketing.

But really -- its the ability to do deterministic analysis of a packet or packets against a reference context. So the engine understands what SNMP traffic should look like, if it sees things that that are travelling on port 161/udp that are not formatted as it believes it should be -- it will alarm. As opposed to taking each packet, and comparing it against a list of known signatures and alerting on a match.

-brkn!