Maybe worth for Sophos to look into it for the UTM?
Deep dive into QUANTUM INSERT | Fox-IT International blog
Also a good point for Snort itself to include it. What do you think?
This thread was automatically locked due to age.