This is false negative. To be marked for alert.
<u>Explanation:</u>
The network administrator or network engineer when he or she is analyzing IDS logs and founded the ip address is same on source and destination both in outside side.
So the either TCPIP address has to change to be scanned across the network. Since same IP address is same pinging rate will high and pinging the same workstation or desktop or laptop.
Alert will not generate because both tcpip address same and if pinging is success. Ids logs generates based true negative, true positive and false positive will not generate any alert.
Http://www.dem.ri.gov/topics/erp/7b_1.pdf
check this pdf you might get the answer
Click-stream is the type of monitoring technique used for web surfing sessions. Browsers maintain cookies for the websites being visited from a machine ( computer, mobile... ), this technique gathers the surfing data from here. Moreover a timer is set for every web page clicked to calculate the amount of time the user stayed on it. Purchasing done by the user is also stored in the cookies section as well.
<?php and ?> will be the answer here. =)