SIFT: Snort Intrusion Filter for TCP