Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends -many- IP

packets, based on the average number of packets sent by all origins and using some thresholds.

In concept, the solution developed by Bob is actually:

A. Just a network monitoring tool

B. A signature-based IDS

C. A hybrid IDS

D. A behavior-based IDS