Very detailed in TRAC's operational description. http://trac.prelude-ids.org/trac.cgi/wiki/traconwindows?version=1&diff=yes