[Snort-users] wish list...

Fyodor fygrave at ...121...
Sat Sep 30 09:52:24 EDT 2000


~ :They both require tcp stream assembly which, AFAIK, is not yet functional
~ :in Snort.

sort of ;)

~ :  Once TCP streams are managed, we will want protocol decodes for
~ :just about everything - the binary content matches should eventually go
~ :away.  Fast regex might be nice too since we're wishing :)
~ :

 I don't think implemented regex is slow.. :-) althrough it lacks many
feature :-) (frankly speaking only `?' and `*' metacharacters support is
there...) :)




More information about the Snort-users mailing list