Stateful Inspection

• Look at the data inside the packets

  • Is basically a layering violation
  • But so is looking at TCP headers!!

• If one ignores the fragmentation problems, it is a very quick way to look at application data and take appropriate actions, without having the burden of complete applications

Notes: