Snort overview
Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Snort uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plugin architecture. Snort has a real-time alerting capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients using Samba's smbclient.
What’s new in version 3.1.39.0
Updated on Aug 11 2022
- cmake: add --enable-luajit-static option to enable LuaJit linked statically
- http_inspect: request and response shouldn't be available for pkt_data
- ips_options: remove obfuscate_pii caching in sd_pattern option
- main, managers: remove the reload_module command
- netflow: pass a flag if the initiator and responder were swapped
- parser: remove 138 from builtin GID exceptions
- rna: Added log message for missing 'rna.conf' path
- utils: fix compilation warning [-Wcomma]
- utils: fix JS split to reflect tokens correction and re-normalization
- utils: validate escaped JavaScript identifiers
Information
App requirements
- Intel 64
- Intel 32
- Mac OS X 10.4 or later
What customer like
What needs improvements
(0 Reviews of )
Comments
User Ratings
