I saw Marty Roesch give a presentation on it at last year's SANS Fire in D.C. @ the time, the idea was strictly for the sourcefire product (whih looks REAL nice) and when asked about incorporating it into the Open source community (SNORT), he said NO. So, it is nice to see him implement his Real Time Awareness (as they call it) into something those of use that do not have the $40K to plop down on the sourcefire appliances are, able to enjoy
.