layer7 filtering

[Donatas]

I wonder if there's any person who did some scripting like 
application layer analysis with network sniffer (like tcpdump) + apropriate firewall rule generation(like statefull ipfw rules) ?
Because of an abscence of layer7 analysis in bsd firewalls i'm made to think about such combinations.
What could be the perfomance of such machine?May BSD6 save work in this case and introduce some alternatives?

any thoughts are welcome...



_________________________________
Donatas Gendvilas
SC Lithuanian Radio And Television Center
Data Transfers Department - N.O.C.