最后，在研究网络数据流重组的基础上，深入讨论了网络应用协议还原。
At last based on studying network flow restructure, this paper discusses the network application protocol revert deeply.
在协议分析的基础上，采用IP数据包分片重组、TCP数据流还原等技术，降低漏报率，减少误报率。
On the base of protocol analysis, the system USES the technology of the fragment reassembly of IP packet, TCP data flow reverting, etc. It reduces leak and mistake alert of the intrusion.
应用推荐