Oinkmaster v2.0 released.
Andreas Östling <[email protected]> Sat, 18 Feb 2006 17:04:05 +0100
| Newsgroups | gmane.comp.security.ids.snort.announce |
|---|---|
| Message-ID | <200602181704.20841.andreaso__43004.0743355223$1141866405$gmane$org@it.su.se> |
--nextPart6274294.JEnv2kBjlb Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hello, Oinkmaster v2.0 has been released, get it from http://oinkmaster.sourceforge.net/ MD5 (oinkmaster-2.0.tar.gz) =3D d2a1b56f51cf40e919c63206ca4ec8f8 SHA1 (oinkmaster-2.0.tar.gz) =3D 01a0d774195670a11af5ff3e302773d962b34224 Changes from v1.2: o Major version bump to celebrate that Oinkmaster has now turned 5 years old! o When using the -U argument to merge new variables, you can now also specify -S <file> to specify which files in the downloaded rules archive(s) to search for new variables. If -S is not specified, only snort.conf is searched, just like before. As usual, no variable merge is done unless -U is specified. You may specify multiple -S <file> arguments to search for variables in multiple files, e.g. "... -S snort.conf -S foo.conf ...". o Handle multi-line variable definitions when merging variables. o Obfuscate the oinkcode when printing URLs, unless running in verbose mode. o Added ability to grab rules files from a local directory by specifying dir://<directory> as URL. o Suppress warnings about using modifysid on non-existent SIDs when running in quiet mode. o Added some modifysid sanity checks o Added Q33 to the FAQ on how to disable all rules by default and only activate specific ones, with example how to automatically update only a few selected rules from Bleeding Snort. o Other documentation updates. o Misc improvements to the config file parser. o You can now set the HTTP User-Agent header string for Oinkmaster by specifying "user_agent =3D ..." in oinkmaster.conf. The default User-Agent string is unchanged, i.e. the string that LWP or wget set it to by default. Based on patch from Derek Edwards. o Make contrib/addmsg.pl handle some multi-line statements. o contrib/create-sidmap.pl: - don't ignore rules that are commented out - ignore the file deleted.rules by default (you don't use it, do=20 you?!) /Andreas --nextPart6274294.JEnv2kBjlb Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (OpenBSD) iD8DBQBD90WEytHlY5LIf/YRAmVbAKCfAhpIY0W5HQcGB7uVKYP9vPpWhQCcDGna S+jOG8TIPVJrdEPSq72oQJE= =SUIp -----END PGP SIGNATURE----- --nextPart6274294.JEnv2kBjlb-- ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642