[Snort-devel] [Snort-users] Snort 2.8.4 RC1 Released

Steven Sturges steve.sturges at ...402...
Wed Feb 18 14:52:30 EST 2009


If this is turned on, Snort won't inspect traffic for which
there is not a specific configuration in either a preprocessor
or rule that looks at that traffic.  There allows the user
the flexibility of making their on decision for the
performance vs inspection tradeoff.

Cheers.

snort user wrote:
>> Option to automatically pre-filter traffic that is not inspected in order to
>> improve performance
> 
> Is this related to the entry in Changelog that says
> 
> "Port and service based filtering to improve performance.  Stream5 will
>  ignore traffic (if it is configured to do so) for which there are no
>  rules or preprocessors configured to look at this traffic."
> 
> 
> This is possible only when there are no ANY src port to ANY dst port rules.
> Is that correct? or am i missing something?
> 
> 
> Thanks
> 
> 
> On Tue, Feb 10, 2009 at 1:03 PM, Mike Guiterman
> <mguiterman at ...402...> wrote:
>> A release candidate version of Snort 2.8.4 is now available on snort.org, at
>> http://www.snort.org/dl/
>>
>> Snort 2.8.4 introduces:
>>
>> A revised DCE/RPC preprocessor with more rule options
>> Support for IPv6 in Frag3 and all application preprocessors
>> Improved target-based support in preprocessors
>> Option to automatically pre-filter traffic that is not inspected in order to
>> improve performance
>> Several other improvements and fixes
>>
>> Please see the release notes and changelog for more details.
>>
>> Please submit bugs, questions, and feedback to snort-beta at ...2780...
>>
>> Happy Snorting!
>> The Snort Release Team
>> ------------------------------------------------------------------------------
>> Create and Deploy Rich Internet Apps outside the browser with
>> Adobe(R)AIR(TM)
>> software. With Adobe AIR, Ajax developers can use existing skills and code
>> to
>> build responsive, highly engaging applications that combine the power of
>> local
>> resources and data with the reach of the web. Download the Adobe AIR SDK and
>> Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
> 
> ------------------------------------------------------------------------------
> Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
> software. With Adobe AIR, Ajax developers can use existing skills and code to
> build responsive, highly engaging applications that combine the power of local
> resources and data with the reach of the web. Download the Adobe AIR SDK and
> Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 




More information about the Snort-devel mailing list