Snort 2.8.5 introduces:
- Ability to specify multiple configurations (snort.conf and everything
it includes), bound either by Vlan ID or IP Address. This allows you
to run one instance of Snort with multiple snort.conf files, rather
than having separate processes. See README.multipleconfigs for
details.
- Continued inspection of traffic while reloading a configuration.
Add --enable-reload option to your configure script prior to building.
See README.reload for details.
- Rate Based Attack Prevention for Connection Attempts, Concurrent
Connections, and improved rule/event filtering. See README.filters
for details.
- SSH preprocessor
- Performance improvements in various places
Please see the Release Notes and ChangeLog for more details.
http://www.snort.org/downloads
kthyx
JJC
