Matt Jonkman: development avancement

 Suricata  Add comments
Sep 192011
 
Phase 2 development is almost over now. Among the completed major features:
  • Multithread
  • protocol discovery
  • smb logging
  • HTTP logging
  • flowvars
One of the advantage of Suricata over Snort is protocol discovery combined to HTTP parsing by libhtp. It provides a huge improvement over Snort as a lot of bad flow are using HTTP on non standard ports.

 Leave a Reply

(required)

(required)

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>