[Snort-devel] Snort 2.8.5 Beta Now Available
jason.r.wallace at ...2499...
Fri May 15 11:13:10 EDT 2009
I notice the --enable-memory-cleanup ./configure option is missing.
Has this been removed?
On Thu, May 14, 2009 at 11:14 AM, Russ Combs <rcombs at ...402...> wrote:
> Thanks for reporting this issue. We've already opened a bug on this and are
> working on a fix.
> On Thu, May 14, 2009 at 9:39 AM, rmkml <rmkml at ...879...> wrote:
>> First, Congratulations SF team for this new version!
>> Im found a segfault with this new version with this rule:
>> alert tcp any any -> any any (msg:"snort v2.8.5 beta SegFault";
>> content:"test"; within:; nocase; sid:987654321; rev:1;)
>> Yes, within keyword don't have value! and snort crash with nocasei
>> look my very simple snort.conf:
>> dynamicpreprocessor directory
>> dynamicengine dynamic-plugins/sf_engine/.libs/libsf_engine.so
>> preprocessor stream5_global: max_tcp 8192, track_tcp yes, track_udp no
>> and sid 987654321 of course!
>> Please add my pseudo to Credits file and my company: Crusoe Researches.
>> Happy Detect (snort,bro,azwalaro)
>> On Thu, 14 May 2009, Snort Releases wrote:
>>> A beta version of Snort 2.8.5 is now available on snort.org, at
>>> Snort 2.8.5 introduces:
>>> - Ability to specify multiple configurations (snort.conf and everything
>>> it includes), bound either by Vlan ID or IP Address. This allows you
>>> to run one instance of Snort with multiple snort.conf, rather than
>>> having separate processes.
>>> - Continued inspection of traffic while reloading a configuration.
>>> Add --enable-reload option to your configure script prior to building.
>>> - Rate Based Attack prevention for Connection Attempts, Concurrent
>>> Connections, and improved rule/event filtering. See README.filters
>>> for details.
>>> - SSH preprocessor (no longer experimental)
>>> - Performance improvements in various places
>>> Please see the Release Notes and ChangeLog for more details.
>>> Please submit bugs, questions, and feedback to snort-beta at ...2780...
>>> Happy Snorting!
>>> The Snort Release Team
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK
> Series Scanner you'll get full speed at 300 dpi even with all image
> processing features enabled. http://p.sf.net/sfu/kodak-com
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
More information about the Snort-devel