snort can do this?

["gohometa" <gohome97 () tatung com>]

I f we detect a intrusion by just detect a packet,may be it is not correct
If I want to detect sequential packet to decide wether
they are from same source,and assure some one intrude me ,How can T do?
  snort can do this?