Re: Snort 3.0 Alpha 1 b130 Now Available

["Joel Esler (jesler)" <jesler () cisco com>]

Little known fact. The current Snort is threaded for certain things.

--
Joel Esler
Sent from my iPhone

On Dec 15, 2014, at 4:51 AM, "elof () sentor se<mailto:elof () sentor se>" <elof () sentor se<mailto:elof () sentor 
se>> wrote:


Threaded snort!?! YAY!!!
Will look closely into this as it sounds like the most important change in
years.

/Elof


On Thu, 11 Dec 2014, Snort Releases wrote:

The Snort team is happy to announce the first alpha release of Snort 3.0,
which includes the
following features:

* Support for multiple packet processing threads
* Use of a shared configuration and attribute table across different threads
* A simple, scriptable configuration with strict grammar
* Updates to make key components plugable
* Auto-detection of services for port-less configuration
* Support sticky buffers in rules
* Auto-generation of reference documentation
* Improved support for cross platform building/deployment

The code can be obtained from snort.org<http://snort.org> under
http://www.snort.org/downloads/snortplus.
The code can also be obtained via a github repository
_git://github.com/snortadmin/snort3.git_.

Snort 3.0 is a complete overhaul of Snort 2.x, and the focus has been on the
framework,
configuration and grammar, and it is initially based from an early build of
Snort 2.9.6
with just HTTP Inspect and FTP.  Information about Snort 3.0 can be found on
the
website under http://www.snort.org/snort3.

Look for blogs with additional information, how to guides, etc as well as
updates to the
Alpha as we hear about issues, requests for changes and improvements, and
roll out
additional dynamic inspectors, bringing the functionality up to more recent
Snort versions
over the next few weeks and months.

We're looking forward to hearing all of your feedback, positive and negative!

Happy Snorting!


------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!