[Snort-devel] 2.9.11.0 beta has been released!

Snort Releases snortreleases at snort.org
Thu Aug 10 14:56:29 EDT 2017


http://blog.snort.org/2017/08/29110-beta-has-been-released.html
>
>
>   2.9.11.0 beta has been released!
>
> Join us as we welcome Snort 2.9.11.0 to the family, in beta form!
>
> Right of the bat, you will notice that we are going from 2.9.9.0 to 
> 2.9.11.0, skipping over 2.9.10.0.  Just to clarify, 2.9.10.0 was an 
> internal only release. We decided not to ship it to the public because 
> timing of back to back 2.9.10 and 2.9.11 releases, and thought it 
> would be better for the community to just release one instead of two. 
>  All 2.9.10 features and fixes are in 2.9.11, so you're not missing 
> anything, just making it easier on the community.
>
> We will be modifying the EOL slightly, as we are going to be keeping 
> versions around a little longer.  We aren't quite sure what this will 
> look like yet, but rest assured we will be updating the blog when we do.
>
> Here's some release notes:
>
>   * New additions
>       o Changes to eliminate Snort restart when there are changes to
>         the memory allocated for preprocessors, by releasing unused or
>         least recently used memory when needed.
>
>   * Improvements
>       o Enhanced RTSP metadata parsing to match the user-agent field
>         to detect RTSP traffic over Windows Media.
>       o Performance improvement when SYN rate limit has reached and
>         drop is configured as next action
>       o Control-socket and side-channel support for FreeBSD platform.
>       o Fixed an issue where IoQ driver was getting into bad state due
>         to non-graceful exit.
>       o Fixed issue in file signature lookup for retransmitted FTP packet.
>       o Enhanced the processing of SIP/RTP future flows without
>         ignoring them.
>       o Changes made in PDF/SWF decompression by adding boundary to
>         the size of the decompressed data.
>       o Added a null check to prevent copy unless debugHostIp is
>         configured in AppId.
>       o Fixed issue where FTP file type block doesn't work for retried
>         download.
>       o Resolved issue where Snort is inappropriately handling traffic
>         for which AppId was creating future flow.
>       o Performance improvements for SIP/RTP audio and video data flow
>         in AppId.
>       o Performance and stability improvements in FTP preprocessor
>         like incorrect referencing of ftp_data_session after its pruned.
>       o Stability improvement by resolving valgrind reported issues in
>         AppId.
>       o Improved flushing mechanism for HTTP POST header.
>
>
>
> Check out Snort 2.9.11.0, available for download on our site 
> <https://snort.org/downloads#snort>.**
>
> <mailto:jesler at cisco.com>
>





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20170810/0e36ae84/attachment.html>


More information about the Snort-devel mailing list