<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>Little known fact. The current Snort is threaded for certain things.   <br>
<br>
<div>--</div>
<div><b>Joel Esler</b> </div>
Sent from my iPhone</div>
<div><br>
On Dec 15, 2014, at 4:51 AM, "<a href="mailto:elof@...6680...">elof@...6680...</a>" <<a href="mailto:elof@...6680...">elof@...6680...</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div><span></span><br>
<span>Threaded snort!?! YAY!!!</span><br>
<span>Will look closely into this as it sounds like the most important change in </span>
<br>
<span>years.</span><br>
<span></span><br>
<span>/Elof</span><br>
<span></span><br>
<span></span><br>
<span>On Thu, 11 Dec 2014, Snort Releases wrote:</span><br>
<span></span><br>
<blockquote type="cite"><span>The Snort team is happy to announce the first alpha release of Snort 3.0,
</span><br>
</blockquote>
<blockquote type="cite"><span>which includes the</span><br>
</blockquote>
<blockquote type="cite"><span>following features:</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>* Support for multiple packet processing threads</span><br>
</blockquote>
<blockquote type="cite"><span>* Use of a shared configuration and attribute table across different threads</span><br>
</blockquote>
<blockquote type="cite"><span>* A simple, scriptable configuration with strict grammar</span><br>
</blockquote>
<blockquote type="cite"><span>* Updates to make key components plugable</span><br>
</blockquote>
<blockquote type="cite"><span>* Auto-detection of services for port-less configuration</span><br>
</blockquote>
<blockquote type="cite"><span>* Support sticky buffers in rules</span><br>
</blockquote>
<blockquote type="cite"><span>* Auto-generation of reference documentation</span><br>
</blockquote>
<blockquote type="cite"><span>* Improved support for cross platform building/deployment</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>The code can be obtained from <a href="http://snort.org">
snort.org</a> under </span><br>
</blockquote>
<blockquote type="cite"><span><a href="http://www.snort.org/downloads/snortplus">http://www.snort.org/downloads/snortplus</a>.</span><br>
</blockquote>
<blockquote type="cite"><span>The code can also be obtained via a github repository
</span><br>
</blockquote>
<blockquote type="cite"><span>_git://github.com/snortadmin/snort3.git_.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>Snort 3.0 is a complete overhaul of Snort 2.x, and the focus has been on the
</span><br>
</blockquote>
<blockquote type="cite"><span>framework,</span><br>
</blockquote>
<blockquote type="cite"><span>configuration and grammar, and it is initially based from an early build of
</span><br>
</blockquote>
<blockquote type="cite"><span>Snort 2.9.6</span><br>
</blockquote>
<blockquote type="cite"><span>with just HTTP Inspect and FTP.  Information about Snort 3.0 can be found on
</span><br>
</blockquote>
<blockquote type="cite"><span>the</span><br>
</blockquote>
<blockquote type="cite"><span>website under <a href="http://www.snort.org/snort3">
http://www.snort.org/snort3</a>.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>Look for blogs with additional information, how to guides, etc as well as
</span><br>
</blockquote>
<blockquote type="cite"><span>updates to the</span><br>
</blockquote>
<blockquote type="cite"><span>Alpha as we hear about issues, requests for changes and improvements, and
</span><br>
</blockquote>
<blockquote type="cite"><span>roll out</span><br>
</blockquote>
<blockquote type="cite"><span>additional dynamic inspectors, bringing the functionality up to more recent
</span><br>
</blockquote>
<blockquote type="cite"><span>Snort versions</span><br>
</blockquote>
<blockquote type="cite"><span>over the next few weeks and months.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>We're looking forward to hearing all of your feedback, positive and negative!</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>Happy Snorting!</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<span></span><br>
<span>------------------------------------------------------------------------------</span><br>
<span>Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server</span><br>
<span>from Actuate! Instantly Supercharge Your Business Reports and Dashboards</span><br>
<span>with Interactivity, Sharing, Native Excel Exports, App Integration & more</span><br>
<span>Get technology previously reserved for billion-dollar corporations, FREE</span><br>
<span><a href="http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk">http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk</a></span><br>
<span>_______________________________________________</span><br>
<span>Snort-users mailing list</span><br>
<span><a href="mailto:Snort-users@lists.sourceforge.net">Snort-users@...1753...s.sourceforge.net</a></span><br>
<span>Go to this URL to change user options or unsubscribe:</span><br>
<span><a href="https://lists.sourceforge.net/lists/listinfo/snort-users">https://lists.sourceforge.net/lists/listinfo/snort-users</a></span><br>
<span>Snort-users list archive:</span><br>
<span><a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a></span><br>
<span></span><br>
<span>Please visit <a href="http://blog.snort.org">http://blog.snort.org</a> to stay current on all the latest Snort news!</span><br>
</div>
</blockquote>
</body>
</html>