Rule:--Sid:1760--Summary:This event is generated when network traffic indicating the use of anIDS system on the protected network is detected.--Impact:These tools may be used to compromise data on the network or mayindicate mis-use of other IDS systems.--Detailed Information:This event indicates the use of an IDS tool. The source of the eventshould be investigated carefully. These tools may be used to gather datapresent in traffic on the protected network.--Affected Systems:	All networks.--Attack Scenarios:An unathorized user could use an IDS to gather data and observe trafficpresent on the network.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--