Snort mailing list archives

Snort++ build 223 is now available on Snort.org!


From: Snort Releases <snortreleases () snort org>
Date: Thu, 22 Dec 2016 11:49:25 -0500

Snort++ build 223 is now available on snort.org.  This is the latest monthly
update available for download <https://snort.org/downloads/#snort-3.0>. You can also get the latest updates from github (snortadmin/snort3 <https://github.com/snortadmin/snort3>) which is updated weekly.

There are too many changes to list here so check the ChangeLog <https://github.com/snortadmin/snort3/blob/master/ChangeLog> for details.

Enhancements:

* port 2983 smb active response updates
* add JavaScript normalization to new http_inspect
* add MIME file processing to new http_inspect
* add alternate fast patterns for dce_udp endianness
* add dce auto detect to wizard

Bug Fixes:

* fix appid service dispatch handling issue
 thanks to João Soares <joaosoares11 () hotmail com> for reporting the issue
* fix paf-type flushing of single segments
 thanks to João Soares for reporting the issue
* fix modbus_data handling to not skip options
 thanks to FabianMalte.Kopp () b-tu de for reporting the issue
* fix comment in snort.lua re install directory use;
 thanks to Yang Wang for sending the pull request
* fix fast pattern selection when multiple designated
 thanks to j.mcdowell () titanicsystems com for reporting the issue
* fix image sizes to fit page
 thanks to wyatuestc for reporting the issue
* change -L to -K in README and manual
 thanks to jncornett for reporting the issue
* fix daemonization
 thanks to João Soares for reporting the issue

Other Changes:

* appid overhaul to address threading issues, leaks, and sanitizer and
 analyzer issues
* fix appid pattern matching for http
* fix reload crash with file inspector
* fix various race conditions reported by thread sanitizer
* fix thread termination segfaults after DAQ module initialization fails
* several build fixes for non-x86, Illumos, and others
* create pid file after dropping privileges
* user manual was reorganized and expanded

Please submit bugs, questions, and feedback to bugs () snort org or the
Snort-Users mailing list.

Happy Snorting!
The Snort Release Team

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: