Which preprocessor plays a role in detecting the reconnaissance phase of an attack?

Which preprocessor plays a role in detecting the reconnaissance phase of an attack?
A. sfPortscan
B. frag3
C. telnet_decode
D. rpc_decode