Can the scripts take action?
Yes. Scripts generate a number of output files recording the activity seen on the network (including normal, non-attack activity). They also can generate alerts signifying that a problem has been seen. In addition, scripts can execute programs, which can terminate existing connections, block traffic from hostile hosts (by inserting blocks into a router access control list), send e-mail messages, or page the on-call staff.
