[Snort-devel] beta7 available

Martin Roesch roesch at ...48...
Sun Dec 3 12:24:04 EST 2000

OK, beta 7 is available on sourceforge CVS and via my website at

There is one big change to it:

IP LISTS DO NOT USE "[" or "]" delimiters any more, just a straight comma
delimited (with no spaces) list of addresses will work.  For example:


alert tcp !$HOME_NET any -> $HOME_NET any (flags: SF; msg: "SYN FIN scan!";)

Thanks to Phil Wood for this contribution.

Other than that, there have been a bunch of tweaks to the rules parsers and a
lot of strncpy()'s with associated strlen()'s have been fixed thanks to Paul

Download it and give it a try, if we get a clean release we may be able to do
a general public beta release in the next few days.


Martin Roesch
roesch at ...48...

More information about the Snort-devel mailing list