Snort mailing list archives
Re: [Snort-devel] Snort 1.8.1 released!
From: "Michael H. Warfield" <mhw () wittsend com>
Date: Wed, 15 Aug 2001 10:33:45 -0400
On Wed, Aug 15, 2001 at 03:08:14AM -0400, Martin Roesch wrote:
Hi everyone, Snort 1.8.1 is available on our brand new web site! Please head on over to http://www.snort.org and have a look at the new site and check out the new release. For the impatient, you can get the latest tarball straight from http://www.snort.org/releases/snort-1.8.1-RELEASE.tar.gz.
When I go to the "tarball" URL I get bounced to the www.snort.org home page. The download section of the site tells me that the correct URL is really this: http://snort.sourcefire.com/releases/snort-1.8.1-RELEASE.tar.gz This does seem to work (unlike the last two, beta5 and rc1, which gave me not found errors the other night) and I've been able to download it now. Thanks!
What's new and different about this release, you ask? Here's the scoop: * SNMP alerting support added by Glenn Mansfield Keeni & K. Jayanthi * IDMEF output support compiled in by default now * regex keyword code repaired, limited regex/wildcards now available in the rules language * new packet counters added to Snort stats output for frags and streams * http_decode preprocessor modified to normalize %u encoding * new detection modes in frag2, Snort picks up fragmentation attacks (teardrop, etc) much better now * repaired frag2 IP defragmenter, now highly stable and functional * tweaks made to stream4 TCP stream reassembler, now highly stable * Win32 code integrated with main Snort source now * fix for -r mode crash when no other command line options specified * fix for logfile names using ":" under win32 * tag code repaired, tags now work as expected (perhaps better even!) * spp_arpspoof repaired * stream4 alerts are now off by default * syslog alerts now support standard GEN:SID:REV data As always, the cast of characters that made this all possible is a lengthy list of great people, and I'd like to mention just a few who were especially helpful and supportive as we got things going for this release: Phil Wood, Fyodor Yarochkin, Brian Caswell, Bill Gercken, Roman Danyliw, Jed Pickel, and Joe McAlerney. Enjoy! -Marty -- Martin Roesch roesch () sourcefire com http://www.sourcefire.com - http://www.snort.org _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net http://lists.sourceforge.net/lists/listinfo/snort-devel
-- Michael H. Warfield | (770) 985-6132 | mhw () WittsEnd com (The Mad Wizard) | (678) 463-0932 | http://www.wittsend.com/mhw/ NIC whois: MHW9 | An optimist believes we live in the best of all PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it! _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 1.8.1 released! Martin Roesch (Aug 15)
- Re: Snort 1.8.1 released! Jörgen Persson (Aug 15)
- Re: [Snort-devel] Snort 1.8.1 released! Michael H. Warfield (Aug 15)
- Re: [Snort-announce] Snort 1.8.1 released! Grant Bayley (Aug 15)
- RE: Re: [Snort-announce] Snort 1.8.1 released! Skeeve Stevens (Aug 15)
- Re: IDS: RE: Re: [Snort-announce] Snort 1.8.1 released! Dragos Ruiu (Aug 15)
- RE: Re: [Snort-announce] Snort 1.8.1 released! Skeeve Stevens (Aug 15)
- Re: Snort 1.8.1 released! Jason Haar (Aug 15)
- Re: Snort 1.8.1 released! Martin Roesch (Aug 16)
- Re: Snort 1.8.1 released! John Sage (Aug 18)
- Re: Snort 1.8.1 released! Brian Caswell (Aug 18)
- Re: Snort 1.8.1 released! John Sage (Aug 18)
- RE: Snort 1.8.1 released! Jason Lewis (Aug 18)
- Re: Snort 1.8.1 released! John Sage (Aug 18)