The research and enhancement of Snort’s packet capturing scheme
Xin Han · Control & Automation · 2007
This paper did some research on Snort’s packet capturing scheme and proposed a enhanced sample algorithm based on Sample and hold theory due to its disadvantages on high speed network link. This algorithm greatly improved the efficiency of detecting anomalous or intrusive activities.