February 4th, 2004, 02:43
I finally gave Snort 2.1.0_2 a try. From what I've collected, it seems to be a lot more optimized than the previous 2.0.x versions. Although this is my first hour of using it, it seems to be working out a lot better than the 2.0.4 that was there originally. The seetup was a bit more involved, and the http_decode is now replaced with http_inspect, yet I really don't know the actual difference yet. All in all, I must say I'm quite happy with the changeover. :)