The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Packet searches

Prev Next

Traffic flows that are not identified as belonging to any particular protocol are passed to the packet search protocol specification engine for further parsing. Trellix IPS presents each direction of the flow to Trellix IPS-supplied attacks and any Custom Attacks. Tests against packet search traffic typically take the form of specific ordered pattern matches so as to prevent false positives and performance problems.