netmon Libpcap-based packet sniffer/logger/lightweight IDS Enable ability to dynamically load preprocessors, detection engine, and rules library Enable new connection tearing (not recommended) Enable new connection tearing Enable GRE support Enable snort-inline for accepting packets from net-firewall/iptables, via libipq, rather than net-libs/libpcap. Enable statistics reporting through proc on smp systems Enable preprocessor and rule performance profiling Enable interception and termination of offending HTTP accesses Enable sguil (The Analyst Console for Network Security Monitoring) support patches net-analyzer/snort for use with net-analyzer/snortsam Enable TimeStats functionality