1. Snort requires the use of at least one preprocessor to be able to analyze patterns in network traffic spanning multiple packets.
2. Snort generates an alert as soon as a detection rule is matched.
Additional information
These false or true problem related to Computer Science and they explain about snort requiring use of at least one preprocessor to be able to analyze patterns in network traffic spanning multiple packets.