Snort 2.9.8 Beta Available Now

Snort 2.9.8 Beta is now available on snort.org at 
http://www.snort.org/downloads in the Snort Development Release section.

2015-08-05 - Snort 2.9.8 Beta
[*] New additions
*  AppID is no longer experimental.

*  SMBv2/SMBv3 support for file inspection.

*  Port override for metadata service in IPS rules.

*  AppID Lua detector performance profiling.

*  Perfmon dumps stats at fixed intervals from absolute time.

*  New preprocessor alert (18:120) to detect SSH tunneling over HTTP

*  New config option |disable_replace| to disable replace rule option.

*  New Stream configraution |log_asymmetric_traffic| to control logging 
to syslog.

*  New shell script in tools to create simple Lua detetors for AppID.


[*] Improvements
*  sfip_t refactored to use struct in6_addr for all ip addresses.

*  Post-detection callback for preprocessors.

*  AppID support for multiple server/client detectors evaluting on same 
flow.

*  AppID API for DNS packets.

*  Memory optimizations throughout.

*  Support sending UDP active responses.

*  Fix permon tracking of pruned packets.

*  Improved support for expected sessions.
See the Release Notes and ChangeLog for more details.

Please submit bugs, questions, and [email protected].

Happy Snorting!
The Snort Release Team

------------------------------------------------------------------------------

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!