Home page logo

snort logo Snort mailing list archives

Re: Snort to be released
From: "Randal T. Rioux" <randy () procyonlabs com>
Date: Tue, 30 Nov 2010 20:39:11 -0500

On 11/30/2010 07:19 PM, Joel Esler wrote:
All --

This is a "pre-release" announcement for Snort version  This is
a bug-fix release for the Snort 2.9.0 tree.  The following issues are
addressed in this version:

[*] Improvements
 * The HTTP Inspect "server_flow_depth" option is now applied once per
   HTTP session, instead of once per packet. This will improve performance
   by causing less packets to be inspected.

 * Fixed an issue with the handling of TCP urgent data.

 * Fixed an issue with using file_data:mime within shared library rules.

 * Fixed an issue with TCP reassembly of single packets

I'd like to call attention especially to the first and last items above:
The first, is a performance increase in the http_inspect preprocessor.  
The last, an issue with the TCP reassembly of single packets was an
issue brought to us by Eoin Miller.  (Thanks Eoin!)

Keep an eye out for this release!

Does it work with OpenBSD yet?


Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]