Now available for download from the link here, 2.9.0.5 brings many improvements to Snort in terms of bug fixes. Below is a cut and paste from the Changelog.
2011-03-23 Steven Sturges <ssturges@sourcefire.com>
* src/build.h:
Increment Snort build number to 134
* src/: decode.h, encode.c:
* src/dynamic-plugins/sf_engine/: sf_snort_packet.h:
* src/preprocessors/: spp_sfportscan.c, spp_frag3.c:
* src/output-plugins/: spo_alert_fast.c:
* src/preprocessors/Stream5/: stream5_common.c:
Updated portscan to set protocol correctly in raw packet for
IPv6 and changed the encoder to recognize portscan packets as pseudo
packets so that the checksum isn't calculated
* src/: sfdaq.c, util.c:
Improve handling of DAQ failure codes when Snort is shutting down.
* src/preprocessors/spp_perfmonitor.c:
Update perfmonitor to create now files prior to dropping privs
2011-03-16 Ryan Jordan <ryan.jordan@sourcefire.com>
Snort 2.9.0.5
* src/build.h:
Increment Snort build number to 132
* src/snort.c:
* src/preprocessors/: normalize.c, perf-base.c, perf-base.h,
Stream5/snort_stream5_tcp.c:
TCP timestamp options are only NOPed by the Normalization preprocessor
if Stream5 has seen a full 3-way handshake, and timestamps weren't
negotiated.
The IPS mode reassembly policy has been refactored to do stream
normalization within the first policy.
Packets injected by the normalization preprocessor are now counted
in the packet statistics.
* doc/snort_manual.tex:
* src/: parser.c, parser.h:
* src/preprocessors/: spp_frag3.c, Stream5/snort_stream5_session.c:
Added a "config vlan_agnostic" setting that globally disables Stream's
use of vlan tag in session tracking.
* src/: snort.c, preprocessors/normalize.c,
preprocessors/spp_normalize.c, preprocessors/spp_normalize.h,
preprocessors/perf-base.c, preprocessors/perf-base.h:
Read more: Snort.org blog
Read more: Snort
Posts
0 comments:
Post a Comment