summaryrefslogtreecommitdiff
path: root/net/snort/distinfo
diff options
context:
space:
mode:
authoradrianp <adrianp@pkgsrc.org>2005-08-13 19:56:47 +0000
committeradrianp <adrianp@pkgsrc.org>2005-08-13 19:56:47 +0000
commit8ab84e9d390910e5db82ff34d1772ab0e6a2251d (patch)
tree84a060fd2c2481e7937a652e2635ff337142539d /net/snort/distinfo
parentcc1e46bc65e594b2d7b9e07476e2703d07b4beaf (diff)
downloadpkgsrc-8ab84e9d390910e5db82ff34d1772ab0e6a2251d.tar.gz
Update snort to 2.4.0
If you are using this package make note of the distribution change mentioned below. I have update the MESSAGE to inform users of this and there is now also a net/snort-rules package with the community rules. > [*] Distribution Change > * Rules are no longer distributed as part of the Snort releases, they are > available as a separate download from snort.org. This was done for > three reasons: > 1) To better manage the new rules licensing. > 2) To reduce the size of the engine download. > 3) To move the thousands of documentation files for the rules into > the rules tarballs. If you've ever checked Snort out of CVS you'll > know why this is a Good Thing. > > [*] New additions > * Added new IP defragmentation preprocessor, Frag3. The frag3 preprocessor > is a target-based IP defragmentation module, and is intended as a > replacement for the frag2 module. Check out the README.frag3 for full > info on this new preprocessor. > > * Libprelude support has been added (enable with --enable-prelude). > Thanks Yoann Vandoorselaere! > > * An "ftpbounce" rule detection plugin was added for easier detection of > FTP bounce attacks. > > * Added a new Snort config option, "ignore_ports," to ignore packets > based on port number. This is similar to bpf filters, but done within > snort.conf. > > [*] Improvements > * Snort startup messages printed in syslog now contain a PID before each > entry. Thanks Sekure for initially bringing this up. > > * Stream4: Performance improvements. > > * Stream4: Added 'max_session_limit' option which limits number of > concurrent sessions tracked. Added favor_old/favor_new options that > affect order in which packets are put together for reassembly. > > * Stream4: New configuration options to manage flushpoints for improved > anti-evasion. The flush_behavior option selects flushpoint management > mode. New flush_base, flush_range, and flush_seed manage randomized > flushing. Check out the snort.conf file for full config data on the > new flush options. > > * Added two more alerts for BackOrifice client and server packets. This > allows specific alerts to be suppressed. > > * PerfMon preprocessor updated to include more detailed stats for rebuilt > packets (applayer, wire, fragmented & TCP). Also added 'atexitonly' > option that dumps stats at exit of snort, and command line -Z flag to > specify the file to which stats are logged. > > * Added new Http Inspect config item, "tab_uri_delimiter," which if > specified, lets a tab character (0x09) act as the delimiter for a URI. > > * Added a '-G' command line flag to snort that specifies the Snort > instance log identifier. It takes a single argument that can be either > hex (prefaced with 0x) or decimal. The unified log files will include > the instance ID when the -G flag is used. > > * "Same SRC/DST" (sid 527) and "Loopback Traffic" (sid 528) are now > handled in the IP decoder. Those sids are now considered obsolete. > > * Http_Inspect "flow_depth" option now accepts a -1 value which tells > Snort to ignore all server-side traffic. > > * RPMs have been updated to be more portable, and also now include a > "--with inline" option for those wanting to build Inline RPMs. Thanks > Daniel Wittenberg and JP Vossen for your help! > > * Many, many bug fixes have also gone into this release, please see the > ChangeLog for details.
Diffstat (limited to 'net/snort/distinfo')
-rw-r--r--net/snort/distinfo11
1 files changed, 5 insertions, 6 deletions
diff --git a/net/snort/distinfo b/net/snort/distinfo
index eebd7ffe40d..dd54a7983b6 100644
--- a/net/snort/distinfo
+++ b/net/snort/distinfo
@@ -1,10 +1,9 @@
-$NetBSD: distinfo,v 1.27 2005/04/27 18:36:25 adrianp Exp $
+$NetBSD: distinfo,v 1.28 2005/08/13 19:56:47 adrianp Exp $
-SHA1 (snort-2.3.3.tar.gz) = 6d05c995f0eef5adde9d63157436c0088747d435
-RMD160 (snort-2.3.3.tar.gz) = 6bb635df1c62d293d8dd4b2fec55cfa486916908
-Size (snort-2.3.3.tar.gz) = 2631270 bytes
-SHA1 (patch-aa) = 08bbfc795c7db4d06f1a1a887369df2c6b1a0a79
+SHA1 (snort-2.4.0.tar.gz) = 9fb3fd59a9bb0a4232beece59f21cc4f346545bb
+RMD160 (snort-2.4.0.tar.gz) = 8a7e602e5ae8f86d8849bdffc2c259668cf0eedc
+Size (snort-2.4.0.tar.gz) = 2126176 bytes
+SHA1 (patch-aa) = f8cd982f2fbc5ed828bf021a489097408f1c9d43
SHA1 (patch-ab) = 0ea7deb91de5d3d68558a30e80dcbd8bd81f8a5e
SHA1 (patch-ac) = 6cdf26fcaeb8dad9cd9562b77377bd56b49c9f38
-SHA1 (patch-ad) = 983317cb82d13de66ac88127d3eea7d3b3186da4
SHA1 (patch-ae) = 4a669e664ccbce2b9e689fe3d281c46f6549b72c