Snort 2.1.0

G

Gordon Darling

Snort 2.1.0

http://www.snort.org/

Snort 2.1.0 is now available! Brian @ Thu Dec 18 17:27:52 2003 GMT
Yes, it's true, it's finally here! We're proud to announce the release
of the new stable branch of snort, 2.1, and the first release, 2.1.0.

Major 2.1 features include:

a.. A new connection tracking module, Flow (replaces conversation)
b.. A new portscan detector based off of Flow, Flow-Portscan
(replaces portscan2)
c.. A new http preprocessor, HttpInspect (replaces http_decode)
d.. Alert Thresholding and Suppression
e.. PCRE rule keyword (Perl Compat Regular Expressions)
f.. isdataat rule keyword (buffer length detection)
g.. A ton of new and updated rules.
This release also includes all the fixes from version 2.0.6.

The Snort manual has been updated to reflect v2.1 and address the many
suggestions from users. The manual is still a work in progress.

Many thanks to all those who have contributed to the Snort project,
this release wouldn't have been possible without you!

Cheers,
The Snort Team


Snort 2.0.6 is available! Brian @ Thu Dec 18 17:24:51 2003 GMT
Snort 2.0.6 is now available, this release includes the following
changes:
a.. 64-bit update for detection engine. (Thanks, Silio d'Angelo)
b.. Added better PPP decoding. (Thanks Jesper Peterson)
c.. Updated ip_proto optimization for high-speed detection engine.
d.. Fixed infinite loop problem that was introduced by the recursive
pattern matching patch. Reported by Lawrence Reed, thanks for testing out
the changes for us!
e.. Various changes to help respond (version 1) work a little
better.
f.. spp_http_decode 64-bit patch from Dirk Mueller.
g.. Out-of-order ACK problem from Andrew Rucker. Also, updated
stream4 to the most recent version from HEAD.
h.. Minor fixes to tagging related to 'src' and 'dst' directives
i.. When counting one byte patterns in 'ningroup' added a check for
j.. psLen==1 (wu-manber pattern matcher). Thanks Josh Sakofsky and
Dennis McGuire for helping us test this.
Please note that this is the last release of the 2.0 branch. We are
asking the everyone upgrade to 2.1.0 (to be released today) at their
leisure.

Cheers!
The Snort Team.

Regards
Gordon
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top