A new connection tracking module, Flow (replaces conversation) A new portscan detector based off of Flow, Flow-Portscan (replaces portscan2) A new http preprocessor, HttpInspect (replaces http_decode) Alert Thresholding and Suppression PCRE rule keyword (Perl Compat Regular Expressions) isdataat rule keyword (buffer length detection) A ton of new and updated rules. This release also includes all the fixes from version 2.0.6.
The Snort manual has been updated to reflect v2.1 and address the many suggestions from users. The manual is still a work in progress.
Theres a linux version as well, this comes from snort.org I decided to post the win32 version because its what I use -Nexy
franz|gans
Jan 18 2004, 11:26 AM
looks nice, will have a try
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
