Snort mailing list archives

Re: Snort 2.4.1 Available


From: Jennifer Steffens <jennifer.steffens () sourcefire com>
Date: Sat, 17 Sep 2005 17:37:17 -0400

I apologize if the note was not as detailed as it could have been. We expedited the release of the 2.4.1 source in response to numerous bugs including a possible DoS. All users, including those with Windows environments, are able to upgrade with the current release.

We will be continuing to work on the release to provide RPMs and win32 builds. As always, we will provide builds as quickly possible and address the most commonly used platforms first.

If there is something else I am missing, please let me know.

Thanks,
Jennifer

Michael Steele wrote:
Well, it seems that Sourcefire has done it again. Can you tell us WHY you
(Sourcefire) have updated Snort for UNIX only? Are the powers to be sending
a message to the Windows users telling them that there environment is less
important? Apparently Marty needs to step in and see to it that the Windows
Pre-Compiled binaries are made available at the same time as the UNIX
releases.

This is a VERY old subject and I can remember it from 5 years ago. Is it not
time that Sourcefire puts some validity to the use of Snort in the Windows
environment. Sourcefire needs to do this by releasing timely updates, not
only for UNIX, but for Windows, and at the same time.

Kindest regards,
Michael...

WINSNORT.com Management Team Member
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Jennifer
Steffens
Sent: Friday, September 16, 2005 4:40 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort 2.4.1 Available

Hey Everyone,

Snort 2.4.1 has been released and addresses a bug in TCP SACK processing that could result in a DoS for some text based logging methods. In addition, this release includes changes and fixes for several issues reported by the community, such as:
     * Pcap logging is now the default for Snort at startup, use
       "-K ascii"
       to revert to old behavior.
     * Change ip_proto to ip for portscan configuration.  Thanks David
       Bianco
       for pointing this out.
     * Added support for new OpenBSD pflog format.  Older pflog format,
       OpenBSD 3.3 and earlier is still supported.  Thanks Breno Leitao
       and Christian Reis for the patch.
     * ...

Snort 2.4.1 can be found at http://www.snort.org/dl/current/snort-2.4.1.tar.gz. Please remember that rules are no longer included with releases but can be downloaded at http://www.snort.org/pub-bin/downloads.cgi.

If you have any questions, let us know at snort-team () sourcefire com.

Cheers,
Jennifer


--
Jennifer Steffens
Snort Product Management
Sourcefire, Inc.


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users







-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: