“Snort 2.9.1 introduces the following new capabilities:
- Protocol aware reassembly support for HTTP and DCE/RPC
preprocessors. Updates to Stream5 allowing Snort to more
intelligently inspect HTTP and DCE/RPC requests and responses. See
README.stream5 subsection related to Protocol Aware Flushing
(PAF).- IP Reputation preprocessor, allowing Snort to blacklist or
whitelist packets based on their IP addresses. This preprocessor is
still in an experimental state, so please report any issues to the
Snort team.
Snort 2.9.1 has been released, including Protocol Aware Flushing and IP Reputation Preprocessor
By
Get the Free Newsletter!
Subscribe to Developer Insider for top news, trends, & analysis