Many advanced techniques have been developed recently to help fight against intrusion. Significant power in this direction can be gained by better taking advantage of the patterns available in the data passing through the network. We have conceived various software agents, distributed over
a network, that are able to collect and filter the data and also consider the firewall rules. Preliminary experiments show a significant gain.