[Snort-devel] Snort 1.9.0beta5

Chris Green cmg at ...402...
Wed Aug 14 17:32:10 EDT 2002


* uri_count bug fixed ( caused wrong alert to be generated occasionally
  for http trafic )

* -R flag for pid file ids ( Phil Wood )

* preprocessor conversation: allowed_ip_protocols 1 6 17, alert_odd_protocols

(cause snort to alert on ip protocols that you didn't allow)

Please test this out as much as you can.  This is incredibly stable
and lots of outstanding bugs have been hammered out recently ( bugs
that even affect 1.8.7 )

Unix Users:

I need packet statistics of larger networks so we can help create a
local testing suite for different types of network environments so we
can help make snort better.

If you can please help us out by mailing me privately the following

1) ./configure --enable-perfmonitor
1) save the attached perftest.conf to the snort/etc directory
3) from the snort directory
    src/snort -c etc/perftest.conf -A none -N  \
             -l /tmp 2>&1 | tee perfmonitor-30sec.txt

Email me perfmonitor-30sec.txt with a small description of your

- network link type ( 10/100/GigE ) (tap/monitor port/hub)
- network connection rate ( 1.5Mbit/45Mbit/155Mbit..)
- number of hosts
- average network speed

I won't send these out to anyone nor identify you aside from saying
thanks to you :)  Thanks to everyone on snort-devel that has already
sent me statistics.

The windows implementation is being thought about a bit more and
should be included with the next beta.

now that you've read that...

Here's the URLs so you can wget:

Chris Green <cmg at ...402...>
Laugh and the world laughs with you, snore and you sleep alone.

More information about the Snort-devel mailing list