Snort showing hell-threads as what they are makes it so much easier to block them than nostrgram.