Snort Blog: Snort 2.9.14.0 has been released!
"Joel Esler \(jesler\) via Snort-devel" <[email protected]> Thu, 18 Jul 2019 20:42:33 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <5662390D-6DC6-48CF-9475-E4534163B4F9__2746.21423320554$1563482828$gmane$org@cisco.com> |
--===============4673815045056735166==
Content-Language: en-US
Content-Type: multipart/signed;
boundary="Apple-Mail=_4E16199B-CFAF-4306-9C41-E9A27AE0F355";
protocol="application/pkcs7-signature";
micalg=sha-256
--Apple-Mail=_4E16199B-CFAF-4306-9C41-E9A27AE0F355
Content-Type: multipart/alternative;
boundary="Apple-Mail=_E0C4DDF1-46C9-4E59-A947-814DDD938257"
--Apple-Mail=_E0C4DDF1-46C9-4E59-A947-814DDD938257
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
https://blog.snort.org/2019/07/snort-29140-has-been-released.html =
<https://blog.snort.org/2019/07/snort-29140-has-been-released.html>
>=20
> Snort 2.9.14.0 has been released!
>=20
> Please join us as we welcome SNORT=E2=93=87 2.9.14.0 to the family.
>=20
> The release notes for the newest version are below:
>=20
> New Additions
>=20
> Added support for wild card port numbers in host cache and overwriting =
port service AppId.
> Added new client patterns to prompt client validation.
> Added SMTP Microsoft Outlook client for Mac.
> Added a new preprocessor alert 120:27 to alert if there is not proper =
end of header.
>=20
> Improvements
>=20
> Improved appId detection for proxied traffic.
> Fix to ensure Snort is ready for packet commencing before DAQ starts.=20=
> Fix for enabling flow profiling mode without restarting snort =
detection engine.
>=20
> Feedback and discussion is always welcome on the Snort-Users mailing =
lists: https://snort.org/community <https://snort.org/community>
>=20
> Downloads of Snort 2.9.14.0 are available here: =
https://snort.org/downloads <https://snort.org/downloads>
--
Joel Esler
Manager, Communities Division
Cisco Talos Intelligence Group
http://www.talosintelligence.com=
--Apple-Mail=_E0C4DDF1-46C9-4E59-A947-814DDD938257
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"><base></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><base=
class=3D""><div class=3D"Apple-Mail-URLShareUserContentTopClass"><a =
href=3D"https://blog.snort.org/2019/07/snort-29140-has-been-released.html"=
=
class=3D"">https://blog.snort.org/2019/07/snort-29140-has-been-released.ht=
ml</a></div><div class=3D"Apple-Mail-URLShareWrapperClass"><blockquote =
type=3D"cite" style=3D"border-left-style: none; color: inherit; padding: =
inherit; margin: inherit;" class=3D""><div class=3D""><div =
class=3D"original-url"><br class=3D""></div><div id=3D"article" =
role=3D"article" style=3D"text-rendering: optimizeLegibility; =
font-family: -apple-system-font; font-size: 1.2em; line-height: 1.5em; =
margin: 0px; padding: 0px;" class=3D"system exported">
<!-- This node will contain a number of div.page. -->
<div class=3D"page" style=3D"word-wrap: break-word; max-width: =
100%;"><h1 class=3D"title" style=3D"font-size: 1.95552em; line-height: =
1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: 100%;">Snort =
2.9.14.0 has been released!</h1>
Please join us as we welcome SNORT=E2=93=87 2.9.14.0 to the family.<br =
style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
The release notes for the newest version are below:<br style=3D"max-width:=
100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
New Additions<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Added support for wild card =
port numbers in host cache and overwriting port service AppId.</li>
<li style=3D"max-width: 100%;" class=3D"">Added new client patterns to =
prompt client validation.</li>
<li style=3D"max-width: 100%;" class=3D"">Added SMTP Microsoft Outlook =
client for Mac.</li>
<li style=3D"max-width: 100%;" class=3D"">Added a new preprocessor alert =
120:27 to alert if there is not proper end of header.</li>
</ul>
<br style=3D"max-width: 100%;" class=3D"">
Improvements<br style=3D"max-width: 100%;" class=3D"">
<br style=3D"max-width: 100%;" class=3D"">
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Improved appId detection for =
proxied traffic.</li>
<li style=3D"max-width: 100%;" class=3D"">Fix to ensure Snort is ready =
for packet commencing before DAQ starts. </li>
<li style=3D"max-width: 100%;" class=3D"">Fix for enabling flow =
profiling mode without restarting snort detection engine.</li>
</ul><div style=3D"max-width: 100%;" class=3D"">
<br class=3D"webkit-block-placeholder"></div>
<br style=3D"max-width: 100%; display: none;" class=3D"">
<div style=3D"max-width: 100%;" class=3D"">
Feedback and discussion is always welcome on the Snort-Users mailing =
lists: <a href=3D"https://snort.org/community" target=3D"_blank" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://snort.org/community</a></div><div style=3D"max-width: =
100%;" class=3D"">
<br class=3D"webkit-block-placeholder"></div>
<div style=3D"max-width: 100%;" class=3D"">
Downloads of Snort 2.9.14.0 are available here: <a =
href=3D"https://snort.org/downloads" target=3D"_blank" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://snort.org/downloads</a></div></div></div></div></blockq=
uote><br class=3D""></div><div =
class=3D"Apple-Mail-URLShareWrapperClass"><br class=3D""></div><div =
class=3D"Apple-Mail-URLShareWrapperClass"><div =
class=3D"Apple-Mail-URLShareWrapperClass">--</div><div =
class=3D"Apple-Mail-URLShareWrapperClass">Joel Esler</div><div =
class=3D"Apple-Mail-URLShareWrapperClass">Manager, Communities =
Division</div><div class=3D"Apple-Mail-URLShareWrapperClass">Cisco Talos =
Intelligence Group</div><div class=3D"Apple-Mail-URLShareWrapperClass"><a =
href=3D"http://www.talosintelligence.com" =
class=3D"">http://www.talosintelligence.com</a></div></div></body></html>=
--Apple-Mail=_E0C4DDF1-46C9-4E59-A947-814DDD938257--
--Apple-Mail=_4E16199B-CFAF-4306-9C41-E9A27AE0F355
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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==
--Apple-Mail=_4E16199B-CFAF-4306-9C41-E9A27AE0F355--
--===============4673815045056735166==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel
Please visit http://blog.snort.org for the latest news about Snort!
--===============4673815045056735166==--