11. A networking device adapted to detect a network activity of interest, comprising: a network port adapted to connect to a network, wherein the network port is adapted to (a) obtain a plurality of network packets from the network, wherein the obtained plurality of network packets comprises network packets categorized as Transmission Control Protocol (TCP) packets and Internet Protocol (IP) packets, wherein the obtained plurality of network packets include the network activity of interest; one or more processors operatively coupled to the network port, wherein the processor is adapted to: (b) create a combined packet from at least two network packets of the plurality of network packets, wherein creating the combined packet comprises converting, bitwise, content from a portion of a first network packet and a portion of a second network packet into a plurality of integers, wherein the first network packet represents a communication from a first node to a second node, and wherein the second network packet represents a communication from the second node to the first node; (c) obtain a stored meta-expression that: comprises a plurality of integers in an order, and corresponds to presence of the network activity of interest in network traffic; (d) determine whether the meta-expression obtained in c) appears in the combined packet created in (b); and (e) in response to determining that the meta-expression obtained in (c) appears in the combined packet created in (b), initiating an operation; and a memory operatively coupled to the one or more processors, wherein the memory is adapted to store the meta-expression.
11. A networking device adapted to detect a network activity of interest, comprising: a network port adapted to connect to a network, wherein the network port is adapted to (a) obtain a plurality of network packets from the network, wherein the obtained plurality of network packets comprises network packets categorized as Transmission Control Protocol (TCP) packets and Internet Protocol (IP) packets, wherein the obtained plurality of network packets include the network activity of interest; one or more processors operatively coupled to the network port, wherein the processor is adapted to: (b) create a combined packet from at least two network packets of the plurality of network packets, wherein creating the combined packet comprises converting, bitwise, content from a portion of a first network packet and a portion of a second network packet into a plurality of integers, wherein the first network packet represents a communication from a first node to a second node, and wherein the second network packet represents a communication from the second node to the first node; (c) obtain a stored meta-expression that: comprises a plurality of integers in an order, and corresponds to presence of the network activity of interest in network traffic; (d) determine whether the meta-expression obtained in c) appears in the combined packet created in (b); and (e) in response to determining that the meta-expression obtained in (c) appears in the combined packet created in (b), initiating an operation; and a memory operatively coupled to the one or more processors, wherein the memory is adapted to store the meta-expression. 23. The networking device of claim 11 , wherein the networking device is a desktop computer, a laptop computer, or a tablet computer.