[Snort-devel] Snort 2.9.4 Beta Now Available

Snort Releases snortreleases at ...835...
Wed Oct 3 16:19:16 EDT 2012


Snort 2.9.4 Beta is now available on snort.org, at
http://www.snort.org/snort-downloads/ in the Latest Release section.

************
Please note:
2.9.3.1 & later packages are signed with a new PGP key
(that key is signed with the previous key).
************

Snort 2.9.4 includes changes for the following:

[*] New additions

  * Consolidation of IPv6 -- now only a single build supports both
    IPv4 & IPv6, and removal of the IPv4 "only" code paths.

  * File API and infrastructure improvements to file processing for
    HTTP downloads and email attachments via SMTP, POP, and IMAP to
    facilitate broader file support

  * Use of address space ID for tracking Frag & Stream connections
    when it is available with the DAQ

  * Logging of packet data that triggers PPM for post-analysis via
    Snort event

  * Decoding of IPv6 with PPPoE

[*] Improvements

  * Update to Stream5 PAF for handling gaps in the sequence numbers of
    packets being reassembled.

  * Selection of the Stream TCP policy based on the server rather than
    the destination of first packet seen by Snort

  * Allow disabling of global thresholds via a count of -1

  * Prevent blocking duplicate SYNs when using inline normalization

  * Add SSLv3 backwards compatibility support for SSLv2 ClientHello
    messages

Please see the Release Notes and ChangeLog for more details.

Please submit bugs, questions, and feedback to bugs at ...2256...

Happy Snorting!
The Snort Release Team





More information about the Snort-devel mailing list