Re: [Snort-devel] Snort 1.8.1 released!

["Michael H. Warfield" <mhw () wittsend com>]

On Wed, Aug 15, 2001 at 03:08:14AM -0400, Martin Roesch wrote:
> Hi everyone,
>      Snort 1.8.1 is available on our brand new web site!  Please head on
> over to http://www.snort.org and have a look at the new site and check
> out the new release.  For the impatient, you can get the latest tarball
> straight from http://www.snort.org/releases/snort-1.8.1-RELEASE.tar.gz.  

        When I go to the "tarball" URL I get bounced to the www.snort.org
home page.  The download section of the site tells me that the correct
URL is really this:

        http://snort.sourcefire.com/releases/snort-1.8.1-RELEASE.tar.gz

        This does seem to work (unlike the last two, beta5 and rc1, which
gave me not found errors the other night) and I've been able to download
it now.   Thanks!

> What's new and different about this release, you ask?  Here's the scoop:
>
> * SNMP alerting support added by Glenn Mansfield Keeni & K. Jayanthi
> * IDMEF output support compiled in by default now
> * regex keyword code repaired, limited regex/wildcards now available in
> the rules language
> * new packet counters added to Snort stats output for frags and streams
> * http_decode preprocessor modified to normalize %u encoding
> * new detection modes in frag2, Snort picks up fragmentation 
>   attacks (teardrop, etc) much better now
> * repaired frag2 IP defragmenter, now highly stable and functional
> * tweaks made to stream4 TCP stream reassembler, now highly stable
> * Win32 code integrated with main Snort source now
> * fix for -r mode crash when no other command line options specified
> * fix for logfile names using ":" under win32
> * tag code repaired, tags now work as expected (perhaps better even!)
> * spp_arpspoof repaired
> * stream4 alerts are now off by default
> * syslog alerts now support standard GEN:SID:REV data
>
> As always, the cast of characters that made this all possible is a
> lengthy list of great people, and I'd like to mention just a few who
> were especially helpful and supportive as we got things going for this
> release:  Phil Wood, Fyodor Yarochkin, Brian Caswell, Bill Gercken,
> Roman Danyliw, Jed Pickel, and Joe McAlerney.  
>
> Enjoy!
>
>      -Marty
>
> --
> Martin Roesch
> roesch () sourcefire com
> http://www.sourcefire.com - http://www.snort.org
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> http://lists.sourceforge.net/lists/listinfo/snort-devel

-- 
 Michael H. Warfield    |  (770) 985-6132   |  mhw () WittsEnd com
  (The Mad Wizard)      |  (678) 463-0932   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users