[Snort-users] Snort 3.0 Alpha 1 b130 Now Available

Joel Esler (jesler) jesler at ...589...
Mon Dec 15 06:58:59 EST 2014

Little known fact. The current Snort is threaded for certain things.

Joel Esler
Sent from my iPhone

On Dec 15, 2014, at 4:51 AM, "elof at ...6680...<mailto:elof at ...6680...>" <elof at ...6680...<mailto:elof at ...6680...>> wrote:

Threaded snort!?! YAY!!!
Will look closely into this as it sounds like the most important change in


On Thu, 11 Dec 2014, Snort Releases wrote:

The Snort team is happy to announce the first alpha release of Snort 3.0,
which includes the
following features:

* Support for multiple packet processing threads
* Use of a shared configuration and attribute table across different threads
* A simple, scriptable configuration with strict grammar
* Updates to make key components plugable
* Auto-detection of services for port-less configuration
* Support sticky buffers in rules
* Auto-generation of reference documentation
* Improved support for cross platform building/deployment

The code can be obtained from snort.org<http://snort.org> under
The code can also be obtained via a github repository

Snort 3.0 is a complete overhaul of Snort 2.x, and the focus has been on the
configuration and grammar, and it is initially based from an early build of
Snort 2.9.6
with just HTTP Inspect and FTP.  Information about Snort 3.0 can be found on
website under http://www.snort.org/snort3.

Look for blogs with additional information, how to guides, etc as well as
updates to the
Alpha as we hear about issues, requests for changes and improvements, and
roll out
additional dynamic inspectors, bringing the functionality up to more recent
Snort versions
over the next few weeks and months.

We're looking forward to hearing all of your feedback, positive and negative!

Happy Snorting!

Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20141215/bcb9e928/attachment.html>

More information about the Snort-users mailing list