Snort mailing list archives

Re: request


From: Joel Esler <joel.esler () me com>
Date: Wed, 30 Oct 2013 17:58:45 -0400

SnortSP is a platform, the detection engine are still instances of Snort.

Snort does have anomaly detection.  Have a look at the Snort Manual at www.snort.org/docs


--
Joel Esler
AEGIS Intelligence Lead
OpenSource Community Manager
Vulnerability Research Team, Sourcefire

On Oct 13, 2013, at 4:15 AM, Irani Player <iraniplayer () yahoo com> wrote:

To whom it may be concern

I want to ask you a question about Snort Version 3(Snort SP).
Does the SnortSP have the ability to anomaly detection or not?
If yes, how we can evaluate its performance? and what kinds of anomalies can detected?
Please help me about it.

Thanks
best regards
Mr M.Ahmadi
------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: