Network based Intrusion Detection Systems (NIDS) are typically configured to passively monitor network traffic on a segment by way of a hardware tap.
Also most of the NIDS are pattern based!! to alert the combination of TCP flags in the header. How does fragroute escape from this pattern matching??
