Snort mailing list archives
Re: Snort 2.8.4 Beta Now Available
From: Todd Wease <twease () sourcefire com>
Date: Tue, 14 Oct 2008 16:49:04 -0400
You don't need to do anything special. Just enable stream5 and if tracking is on, it will query rules and preprocessors for ports (client and server) that are important them. If neither the rules nor preprocessors are interested in a session, then stream5 will not track it and it will disable processing by the preprocessors and detection engine. snort user wrote:
Option to automatically pre-filter traffic that is not inspected inorder to improve performance To take advantage of this, does the user need to know what traffic is not to be inspected prior to running the IDS? Thanks On Tue, Oct 14, 2008 at 2:08 PM, Snort Releases <snortreleases () snort org> wrote:A beta version of Snort 2.8.4 is now available on snort.org, at http://www.snort.org/dl/ Snort 2.8.4 introduces: - A revised DCE/RPC preprocessor with more rule options - Support for IPv6 in Frag3 and all application preprocessors - Improved target-based support in preprocessors - Option to automatically pre-filter traffic that is not inspected in order to improve performance - Several other improvements and fixes Please see the release notes and changelog for more details. Please submit bugs, questions, and feedback to snort-beta () sourcefire com. Happy Snorting! The Snort Release Team ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.8.4 Beta Now Available Snort Releases (Oct 14)
- Re: Snort 2.8.4 Beta Now Available snort user (Oct 14)
- Re: Snort 2.8.4 Beta Now Available Todd Wease (Oct 14)
- Re: Snort 2.8.4 Beta Now Available snort user (Oct 14)
- Re: Snort 2.8.4 Beta Now Available Todd Wease (Oct 14)
- Re: Snort 2.8.4 Beta Now Available Todd Wease (Oct 14)
- Re: Snort 2.8.4 Beta Now Available snort user (Oct 14)