Announcement: Snort - Next Generation

[Christopher Kruegel <chris () infosys tuwien ac at>]

[Please excuse multiple copies of this message]

Snort - Next Generation is a patch that replaces and improves the detection 
engine of Snort (http://www.snort.org). Patches for Snort 1.8.6 and Snort 
1.8.7 as well as additional information is available for download under

http://www.infosys.tuwien.ac.at/snort-ng


We noticed that the performance of Snort decreases considerably as the number 
of signatures increases. Therefore, we replaced its two-dimensional list 
structure by a decision tree that allows us to reduce the number of redundant 
checks for each incoming packet. This resulted in a significant speed up 
compared to the original Snort, especially for large rule sets. In addition, 
current Snort configuration and rule files can be used without modification.


Please send any comments or bug reports to

snort-ng () infosys tuwien ac at



-------------------------------------------------------
This sf.net email is sponsored by: DEDICATED SERVERS only $89!
Linux or FreeBSD, FREE setup, FAST network. Get your own server
today at http://www.ServePath.com/indexfm.htm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users