is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.
| differences.txt (snort3-3.1.29.0) | : | differences.txt (snort3-3.1.30.0) |
|---|
| === Features New to Snort 3 | | === Features New to Snort 3 |
| | |
| Some things Snort++ can do today that Snort can not do: | | Some things Snort++ can do today that Snort can not do: |
| | |
| * regex fast patterns, not just literals | | * regex fast patterns, not just literals |
|
| * FlatBuffers and JSON perf monitor logs | | * JSON perf monitor logs |
| * LuaJIT scriptable rule options and loggers | | * LuaJIT scriptable rule options and loggers |
| * pub/sub inspection events (currently used by sip and http_inspect to appid) | | * pub/sub inspection events (currently used by sip and http_inspect to appid) |
| * JIT buffer stuffers (notably with new http_inspect) | | * JIT buffer stuffers (notably with new http_inspect) |
| * C-style comments in rules | | * C-style comments in rules |
| * #begin ... #end comment blocks in rules | | * #begin ... #end comment blocks in rules |
| * rule remarks (comment is part of rule, not just in it) | | * rule remarks (comment is part of rule, not just in it) |
| * process raw files (eg read a PDF and do file processing) | | * process raw files (eg read a PDF and do file processing) |
| * process raw payload (eg bridge 2 sockets and do inspection) | | * process raw payload (eg bridge 2 sockets and do inspection) |
| * fast pattern offload to separate thread (experimental) | | * fast pattern offload to separate thread (experimental) |
| * add or override any config item on command line | | * add or override any config item on command line |
| | | |
| End of changes. 1 change blocks. |
|---|
| 1 lines changed or deleted | | 1 lines changed or added |
|---|
"Fossies" - the Fresh Open Source Software Archive 