Snort is the most powerful IPS in the world, setting the standard for intrusion detection. So when we started thinking about what the next generation of IPS looked like we started from scratch.
Features
Support multiple packet processing threadsShared configuration and attribute tableUse a simple, scriptable configurationMake key components pluggableAutodetect services for portless configurationSupport sticky buffers in rulesAutogenerate reference documentationProvide better cross platform support