Snort 2.8.4

Sort is a network intrusion prevention and detection system that uses a rule-driven language, which combines the benefits of protocol, signature and anomaly based inspection methods.
Snort is the most widely deployed intrusion detection and prevention technology worldwide and has become the de facto standard for the industry.

System requirements:
-

Enhancements
New Additions:
- Revised DCE/RPC preprocessor to provide new rule options, additional SMB command support, and updated defragmentation models
- Support for IPv6 with Frag3 and all application preprocessors (SMTP, FTP/Telnet, DCE/RPC, SSL, DNS, Portscan)
- Improved target-based support within application preprocessors
- Addition to automatically pre-filter traffic that is not explicitly configured for inspection to improve performance.
- HttpInspect update to limit number of HTTP Header fields and alert if limit is reached.
- Support for multiple IP Addresses and/or CIDRs in HTTP Inspect and FTP/Telnet Server/Client specific configurations
Improvements:
- Update to allow rules with only negated content