Attribute Grammars for Normalization: A modern NIDS must normalize traffic or be vulnerable to evasion attacks. The normalizers that perform this task are often hand-coded and prone to bugs. This software contains a modified version of Snort- that performs normalization using attribute grammars.
  • ag.tgz : tar file containing Snort- with modifications to HTTPInspect, ftptelnet, and smtp preprocessors.