Snort 2.9.2.1 Upgrade?
-
Would it be possible to upgrade the snort package to snort 2.9.2.1 for one simple reason - JavaScript Deobfuscation? That will help detect a lot more attacks which have been hidden for users and obfuscation is very typical in common web client attacks. Also since the version used here there is SCADA preprocessors as well as SIP ones too as well as various fixes and improvements to the engine.
http://blog.snort.org/2012/01/snort-2920-javascript-normalization.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Snort+%28Snort%29
Thank you.
Kindest Regards,
Kevin Ross