Works fine for me too when upgrading from 2.9.7.x<span></span><br><br>On Tuesday, December 1, 2015, Rafael Paris <<a href="mailto:raparis@...13610...7...">raparis@...11827...</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Good afternoon everyone.<br><br></div>I have upgraded to snort 2.9.8.0 on 2 sensors with 2.9.7.6 signatures with no problems. They usually works fine.<br><br></div>Cheers,<br><br></div>Rafael Paris<br></div><div class="gmail_extra"><br><div class="gmail_quote">2015-11-30 21:06 GMT-04:30 Dr. Stephen Gantz <span dir="ltr"><<a href="javascript:_e(%7B%7D,'cvml','stephen.gantz@...16854...');" target="_blank">stephen.gantz@...16854...</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Any issue with running 2.9.7.6 rules with this release pending a 2.9.8 ruleset?</div><div><br></div><div><br></div><div><br></div><div><span>Dr. Stephen D. Gantz</span><div>CISSP-ISSAP, CEH, CGEIT, CRISC, CIPP/G, C|CISO</div><div><span style="font-size:13.001pt">Professor of Information Assurance</span></div><div>The Graduate School</div><div>University of Maryland University College</div><div><a href="javascript:_e(%7B%7D,'cvml','stephen.gantz@...16854...');" style="font-size:11.211pt" target="_blank">stephen.gantz@...16854...</a></div></div><div><div><div style="font-size:100%;color:#000000"><div>-------- Original message --------</div><div>From: Snort Releases <<a href="javascript:_e(%7B%7D,'cvml','snortreleases@...950...');" target="_blank">snortreleases@...950...</a>> </div><div>Date: 11/30/2015  2:30 PM  (GMT-05:00) </div><div>To: <a href="javascript:_e(%7B%7D,'cvml','snort-devel@lists.sourceforge.net');" target="_blank">snort-devel@lists.sourceforge.net</a>, <a href="javascript:_e(%7B%7D,'cvml','snort-users@lists.sourceforge.net');" target="_blank">snort-users@lists.sourceforge.net</a> </div><div>Subject: [Snort-users] Snort 2.9.8 Now Available </div><div><br></div></div>
    <pre>Snort 2.9.8 is now available on <a href="http://snort.org" target="_blank">snort.org</a> at

<a href="http://www.snort.org/downloads" target="_blank">http://www.snort.org/downloads</a> in the Snort Stable Release section.

2015-11-17 - Snort 2.9.8.0
[*] New additions
 *  SMBv2/SMBv3 support for file inspection.

 *  Port override for metadata service in IPS rules.

 *  AppID Lua detector performance profiling.

 *  Perfmon dumps stats at fixed intervals from absolute time.

 *  New preprocessor alert (120:18) to detect SSH tunneling over HTTP

 *  New config option <code><span>|</span>disable_replace<span>|</span></code> to disable replace rule option.

 *  New Stream configuration <code><span>|</span>log_asymmetric_traffic<span>|</span></code> to control logging to syslog.

 *  New shell script in tools to create simple Lua detectors for AppID.

[*] Improvements
 *  sfip_t refactored to use struct in6_addr for all ip addresses.

 *  Post-detection callback for preprocessors.

 *  AppID support for multiple server/client detectors evaluating on same flow.

 *  AppID API for DNS packets.

 *  Memory optimizations throughout.

 *  Support sending UDP active responses.

 *  Fix perfmon tracking of pruned packets.
 
 *  Stability improvements for AppID.

 *  Stability improvements for Stream6 preprocessor.

 *  Added improved support to block malware in FTP preprocessor.

 *  Added support to differentiate between active and passive FTP connections.

 *  Improvements done in Stream6 preprocessor to avoid having duplicate packets 
    in the DAQ retry queue.
 
 *  Resolved an issue where reputation config incorrectly displayed 'blacklist' in
    priority field even though 'whitelist' option was configured.

 *  Added support for multiple expected sessions created per packet

 *  Active response now supports MPLS



Please submit bugs, questions, and feedback to  <a href="javascript:_e(%7B%7D,'cvml','tobugs@...950...');" target="_blank">bugs@...846....950...</a>  or the

Snort-Users mailing list.



Happy Snorting!

The Snort Release Team

</pre>
  </div></div></div><br>------------------------------------------------------------------------------<br>
Go from Idea to Many App Stores Faster with Intel(R) XDK<br>
Give your users amazing mobile app experiences with Intel(R) XDK.<br>
Use one codebase in this all-in-one HTML5 development environment.<br>
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.<br>
<a href="http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140" rel="noreferrer" target="_blank">http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140</a><br>_______________________________________________<br>
Snort-users mailing list<br>
<a href="javascript:_e(%7B%7D,'cvml','Snort-users@...635...eforge.net');" target="_blank">Snort-users@lists.sourceforge.net</a><br>
Go to this URL to change user options or unsubscribe:<br>
<a href="https://lists.sourceforge.net/lists/listinfo/snort-users" rel="noreferrer" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br>
Snort-users list archive:<br>
<a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users" rel="noreferrer" target="_blank">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br>
<br>
Please visit <a href="http://blog.snort.org" rel="noreferrer" target="_blank">http://blog.snort.org</a> to stay current on all the latest Snort news!<br></blockquote></div><br></div>
</blockquote>