Snort 1.81Beta6 build 64 broken stream4?

["Andrew Cogger" <andrew.cogger () innovonics com au>]

G'day,

Updated from 1.81beta5 build 59 to 1.81beta6 build 60 (and then 64), only to find snort died overnight. Also, although 
snort is going mad logging http scans from CoderedII infected machines, snort is no longer capturing alerts aimed at 
our web site, which up until beta6 were being captured fine. Even telneting into our web site and typing in content 
strings which should be triggering alerts caused none to be logged.
Could there be a prob with the stream plugin??

System - redhat 7.1, snort beta6 build 64, logging to mysql.

Anyone else had problems with beta6?

Also....anyone know where I can get beta5build59 source from (sheepish grin).....

Thanks-muchly........


AJ

--
Andrew Cogger B.E. (Elec) (Hons)                          
Electrical & Computing Systems Manager   
Innovonics Ltd                           
346 Macaulay Road                        
Kensington                               
VIC 3031 AUSTRALIA                       

P: +61 (0)3 9376 6671
F: +61 (0)3 9376 0507
M: 0425 792 004

e: andrew.cogger () innovonics com au

http://www.innovonics.com.au
http://www.innovonics.net

PGP Key ID: 0xC546109D
--



****************************************************************
This email and any files transmitted with it are confidential 
and intended solely for the use of the individual or entity to
whom they are addressed. If you are not the intended recipient 
you must not use, disclose or distribute this email or any 
attachment(s). Please notify the sender immediately and then
delete this email. All sent and received email from/to 
Innovonics Ltd is automatically scanned for the presence 
of computer viruses, security issues and inappropriate content. 
We have taken precautions to minimise the risk of transmitting 
viruses, but we advise that you carry out your own virus 
checking on this email and any attachments. If email you 
receive has a virus or contains inappropriate content please
contact: admin () innovonics com au 
****************************************************************

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users