1 "gag" is a program to scan for "stacheldraht" agents, which are part
2 of an active "stacheldraht" network. It will not detect trinoo,
3 the original Tribe Flood Network (TFN), or TFN2K agents. For methods
4 of detecting trinoo and Tribe Flood Network, see:
6 http://staff.washington.edu/dittrich/misc/trinoo.analysis
7 http://staff.washington.edu/dittrich/misc/tfn.analysis
9 (Why "gag"? Its supposed to be a running joke I started in the trinoo
10 analysis. trinoo/trinot, "tribe"/civilize, gag/sicken&gesundheit!.
11 Read the ddos trilogy to find out!)