[Snort-users] Snort 2.9.0.2 to be released

Randal T. Rioux randy at ...13561...
Tue Nov 30 20:39:11 EST 2010


On 11/30/2010 07:19 PM, Joel Esler wrote:
> All --
> 
> This is a "pre-release" announcement for Snort version 2.9.0.2.  This is
> a bug-fix release for the Snort 2.9.0 tree.  The following issues are
> addressed in this version:
> 
> [*] Improvements
>  * The HTTP Inspect "server_flow_depth" option is now applied once per
>    HTTP session, instead of once per packet. This will improve performance
>    by causing less packets to be inspected.
> 
>  * Fixed an issue with the handling of TCP urgent data.
> 
>  * Fixed an issue with using file_data:mime within shared library rules.
> 
>  * Fixed an issue with TCP reassembly of single packets
> ---
> 
> I'd like to call attention especially to the first and last items above:
> The first, is a performance increase in the http_inspect preprocessor.  
> The last, an issue with the TCP reassembly of single packets was an
> issue brought to us by Eoin Miller.  (Thanks Eoin!)
> 
> Keep an eye out for this release!

Does it work with OpenBSD yet?

Randy




More information about the Snort-users mailing list