1. A computer-implemented method comprising: intercepting packets being transmitted over a network at a distributed match agent of a document registration system; reassembling the packets into an intercepted document; generating a set of signatures associated with the intercepted document; comparing the set of signatures associated with the intercepted document with signatures associated with registered documents, wherein the signatures associated with the registered documents are stored in a local signature database of the distributed match agent; and determining whether to notify a manager agent of the registration system based on the result of the comparison.