From the doc: 'a library that provides a functionality of one of NIDS (Network Intrusion Detection System) components, namely E-component... libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information on them to analyzing modules of NIDS. Libnids performs: assembly of TCP segments into TCP streams IP defragmentation & TCP port scan detection'.