Snort 3.1.70.0 available to download now.

Changes in this release since 3.1.70.0:

  *   appid, http_inspect, http2_inspect: create appid session if not present in decrypt event handler, add message section as part of StreamFlowIntf for httpx
  *   codecs: Add IPv6 Reserved Address to GID:116 Rules
  *   detection: avoid multiple fixups of duplicated trees
  *   detection: fix of default ips policy switching
  *   flow: allow reinspection for blocked icmp flows after reload
  *   flow: generate flow setup and established events for ha flows
  *   host_cache: cppcheck fix
  *   http2_inspect: fix http2 frame length for logging
  *   main: fix signals handling after failed started instances
  *   main: reset_stats argument type improvement
  *   parser: add file_id rule syntax evaluation
  *   smtp: add alert for mixed LF and CRLF
  *   smtp: process DATA\n (no \r)
  *   stream: extend list of arguments for extra data logging
  *   stream_tcp: ensure all data segments after a zero window are blocked when NAP is inline
  *   stream_tcp: examine whether a segment plugs a hole before blocking due to exceeding queue_limit

Snort 3.1.70.0 can be downloaded here:
https://snort.org/downloads/snortplus/snort3-3.1.71.0.tar.gz

If you have any questions or would like to connect with other Snort users please join our discord:
https://discord.gg/e7VGeaumKz

Join the Snort Discord Server!<https://discord.gg/e7VGeaumKz>
Check out the Snort community on Discord - hang out with 366 other members and enjoy free voice and text chat.
discord.gg

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette