The Stream Handler plugin examines the data from the Collector and performs IP reassembly, if necessary, and then adds the data to the correct stream. If the data is a TCP packet, then the Stream performs two extra functions:
The Stream Handler notifies the Stream Analyzers of every packet added to a Stream. It also tests for Stream completion and notifies the Action Analyzer for those Streams. |