[Snort-users] beta has been released!

Snort Releases snortreleases at snort.org
Thu Aug 10 14:56:29 EDT 2017

> beta has been released!
> Join us as we welcome Snort to the family, in beta form!
> Right of the bat, you will notice that we are going from to 
>, skipping over  Just to clarify, was an 
> internal only release. We decided not to ship it to the public because 
> timing of back to back 2.9.10 and 2.9.11 releases, and thought it 
> would be better for the community to just release one instead of two. 
>  All 2.9.10 features and fixes are in 2.9.11, so you're not missing 
> anything, just making it easier on the community.
> We will be modifying the EOL slightly, as we are going to be keeping 
> versions around a little longer.  We aren't quite sure what this will 
> look like yet, but rest assured we will be updating the blog when we do.
> Here's some release notes:
>   * New additions
>       o Changes to eliminate Snort restart when there are changes to
>         the memory allocated for preprocessors, by releasing unused or
>         least recently used memory when needed.
>   * Improvements
>       o Enhanced RTSP metadata parsing to match the user-agent field
>         to detect RTSP traffic over Windows Media.
>       o Performance improvement when SYN rate limit has reached and
>         drop is configured as next action
>       o Control-socket and side-channel support for FreeBSD platform.
>       o Fixed an issue where IoQ driver was getting into bad state due
>         to non-graceful exit.
>       o Fixed issue in file signature lookup for retransmitted FTP packet.
>       o Enhanced the processing of SIP/RTP future flows without
>         ignoring them.
>       o Changes made in PDF/SWF decompression by adding boundary to
>         the size of the decompressed data.
>       o Added a null check to prevent copy unless debugHostIp is
>         configured in AppId.
>       o Fixed issue where FTP file type block doesn't work for retried
>         download.
>       o Resolved issue where Snort is inappropriately handling traffic
>         for which AppId was creating future flow.
>       o Performance improvements for SIP/RTP audio and video data flow
>         in AppId.
>       o Performance and stability improvements in FTP preprocessor
>         like incorrect referencing of ftp_data_session after its pruned.
>       o Stability improvement by resolving valgrind reported issues in
>         AppId.
>       o Improved flushing mechanism for HTTP POST header.
> Check out Snort, available for download on our site 
> <https://snort.org/downloads#snort>.**
> <mailto:jesler at cisco.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170810/0e36ae84/attachment.html>

More information about the Snort-users mailing list