Seems they use something like SNORT and added some additional code.
Time to think about real countermeasures. This also threatens the citizens of the USA, the original code does not distinguish between "abroad" and "home", this is just an addition - ridiculous of course, since a 'terrorist' by definition may hide anywhere and is NOT linked to a certain country. Otherwise it would be war.
Oh wait, Bush defined it as a war against terrorism. So it also is a war against own citizens
And if you use Tor you are an extremist and a potential terrorist as well. The world is soo simple, i just did not understand it right.
Explained by an NSA Member:
Cheers.