Snort 3.0
-
I think i posted this in the wrong forum earlier
but here it is again
http://blog.snort.org/2014/12/introducing-snort-30.html
Is this coming to PfSense ?
-
Could be but not for a long time…
-
Is there a site that explains what the process of writing a pf sense package is like? I'm wondering why it would take a long time to port new packages to pfsense.
-
The notice of Snort 3.0 APLHA just come out yesterday.
"This Alpha release is for you to play with. It’s for you to break, it’s for you to test and get back to us about. We need you to break it; we want you to break it. This is not ready for production and should not be used for production, so that gives us the full freedom to work with our community to make Snort 3.0 as strong as possible."
No doubt Bill will be working on it when the time is right.
-
Yes, I will keep tabs on Snort 3.0. Hopefully it will make it into pfSense. The only reason I say "hopefully" is to hedge things in case there is some fundamental kernel level incompatibility or something (not likely, but not impossible).
It looks like it will be a while since it is in an early ALPHA stage. Multithreading Snort with a more "automatic" configuration sounds quite interesting!
Bill
