Snort mailing list archives
Spade version 030117.1 available
From: James Hoagland <jim () SiliconDefense com>
Date: Fri, 17 Jan 2003 13:44:26 -0800
Greeting all,Silicon Defense is pleased to announce the availability of version 030117.1 of Spade, it's anomaly detection plugin for Snort. These are the changes since the previous version:
+ fixed problem wherein sometimes Spade wouldn't accept a valid homenet [fix by Risto Vaarandi] + fixed a bug or two that could cause a seg fault in certain circumstances + distributed spade.conf now enables fewer detectors than previously; the ones left are the ones that most reliably report on interesting traffic. spade.more.conf has more detectors enabled; use this to look for additional types of anomalous traffic. + you can now reverse the response waiting type for a Spade detector with the advanced option revwaitrpt + scalehalflife advanced option added to help set the half life of observations + reminder added to installation output about installing when you don't have automake installed + Spade internals now better documented + updated documentationThis update is recommended for all Spade users. You can download the package and learn more here:
http://www.silicondefense.com/software/spice/ Best regards, JimP.s. Spade seems to work fine without modification with Snort 2.0, though we haven't tested it thoroughly. Please let us know if you have any problems with it in either 1.9 or 2.0.
-- |* Jim Hoagland, Associate Researcher, Silicon Defense *| |* --- Silicon Defense: IDS Solutions --- *| |* jim () SiliconDefense com, http://www.silicondefense.com/ *| |* Voice: (530) 756-7317 Fax: (530) 756-7297 *| ------------------------------------------------------- This SF.NET email is sponsored by: Thawte.com - A 128-bit supercerts willallow you to extend the highest allowed 128 bit encryption to all your clients even if they use browsers that are limited to 40 bit encryption. Get a guide here:http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0030en
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Spade version 030117.1 available James Hoagland (Jan 17)
- <Possible follow-ups>
- Spade version 030117.1 available James Hoagland (Jan 21)