My 11th Snort Report on Snort Limitations has been posted. Snort is not a “badness-ometer” — it’s not just a “packet grepper” Instead of demonstrating technical capabilities, we’ll consider what you can do with a network inspection and control system like Snort. The editors titled this piece “SnortLimitations” — I didn’t. It’s a Snort report on the Snort system’s limitations, but it’s a good way to think properly about its use.”]
Source: https://taosecurity.blogspot.com/2007/12/snort-report-11-posted.html