RE: Snort 2.4.1 Available

["Ron Jenkins" <rjenkins () dibr net>]

I believe that the UNIX platform should always be first.  Setting it up
on a Windows platform is a real waste of time and performance.  You will
gain more on a UNIX platform, because of Windows large over head.

I have been working with Microsoft since before there was Windows and it
has always require more hardware then the other OS's such as Netware and
Unix; which was many years more experience in the operating system
platform arena then Microsoft.  

So I believe that it is not because Windows is less important, but my
opinion is that Windows has its place and IDS is not one of them.

So you should give Sourcefire a break on this one and let them release
on there designated timeframe.

Just my thoughts...

Thanks...



-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Michael
Steele
Sent: Saturday, September 17, 2005 3:52 PM
To: 'Jennifer Steffens'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Snort 2.4.1 Available

Well, it seems that Sourcefire has done it again. Can you tell us WHY
you
(Sourcefire) have updated Snort for UNIX only? Are the powers to be
sending
a message to the Windows users telling them that there environment is
less
important? Apparently Marty needs to step in and see to it that the
Windows
Pre-Compiled binaries are made available at the same time as the UNIX
releases.

This is a VERY old subject and I can remember it from 5 years ago. Is it
not
time that Sourcefire puts some validity to the use of Snort in the
Windows
environment. Sourcefire needs to do this by releasing timely updates,
not
only for UNIX, but for Windows, and at the same time.

Kindest regards,
Michael...

WINSNORT.com Management Team Member
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Jennifer
Steffens
Sent: Friday, September 16, 2005 4:40 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort 2.4.1 Available

Hey Everyone,

Snort 2.4.1 has been released and addresses a bug in TCP SACK processing

that could result in a DoS for some text based logging methods. In 
addition, this release includes changes and fixes for several issues 
reported by the community, such as:
     * Pcap logging is now the default for Snort at startup, use
       "-K ascii"
       to revert to old behavior.
     * Change ip_proto to ip for portscan configuration.  Thanks David
       Bianco
       for pointing this out.
     * Added support for new OpenBSD pflog format.  Older pflog format,
       OpenBSD 3.3 and earlier is still supported.  Thanks Breno Leitao
       and Christian Reis for the patch.
     * ...

Snort 2.4.1 can be found at 
http://www.snort.org/dl/current/snort-2.4.1.tar.gz. Please remember that

rules are no longer included with releases but can be downloaded at 
http://www.snort.org/pub-bin/downloads.cgi.

If you have any questions, let us know at snort-team () sourcefire com.

Cheers,
Jennifer


--
Jennifer Steffens
Snort Product Management
Sourcefire, Inc.


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users







-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users