diff options
author | salo <salo@pkgsrc.org> | 2003-12-31 14:11:42 +0000 |
---|---|---|
committer | salo <salo@pkgsrc.org> | 2003-12-31 14:11:42 +0000 |
commit | 495195d60a075036cddb5776ab12130a4799767f (patch) | |
tree | 98bdd7cb073aaeb4e8d964549c19a948953ae81d /net/snort/patches | |
parent | d918b4cec81ec0bf52b2b3835e9cacd9d0ef5f9f (diff) | |
download | pkgsrc-495195d60a075036cddb5776ab12130a4799767f.tar.gz |
Update to version 2.1.0.
Changes:
2.1.0:
======
- A new connection tracking module, Flow (replaces conversation)
- A new portscan detector based off of Flow, Flow-Portscan (replaces
portscan2)
- A new http preprocessor, HttpInspect (replaces http_decode)
- Alert Thresholding and Suppression
- PCRE rule keyword (Perl Compat Regular Expressions)
- isdataat rule keyword (buffer length detection)
- A ton of new and updated rules.
2.0.6:
======
- 64-bit update for detection engine. (Thanks, Silio d'Angelo)
- Added better PPP decoding. (Thanks Jesper Peterson)
- Updated ip_proto optimization for high-speed detection engine.
- Fixed infinite loop problem that was introduced by the recursive pattern
matching patch. Reported by Lawrence Reed, thanks for testing out the
changes for us!
- Various changes to help respond (version 1) work a little better.
- spp_http_decode 64-bit patch from Dirk Mueller.
- Out-of-order ACK problem from Andrew Rucker. Also, updated stream4 to the
most recent version from HEAD.
- Minor fixes to tagging related to 'src' and 'dst' directives
- When counting one byte patterns in 'ningroup' added a check for
psLen==1 (wu-manber pattern matcher). Thanks Josh Sakofsky and Dennis
McGuire for helping us test this.
2.0.5:
======
- Stream4 fixes from Andrew Rucker Jones.
- Allow memcap to be configured for threshold features.
2.0.4:
======
- Fixed a core dump introduced with 2.0.3 when dealing with negated patterns
2.0.3:
======
- doe_ptr handling in byte_test/byte_jump slightly modified to work
better with the pcre patch
- content processing is now recursive to make distance/within processing
better ( thanks to Shai Rubin for patch! )
- fixed a bug in the mwm.c pattern matcher that resulted in some alerts
not firing in a particular configuration of rules
2.0.2:
======
- Added Thresholding and Suppression features (Marc Norton/Sourcefire)
- Fixed TCP RST processing bug found (Shai Rubin)
- Cleanup of spp_arpspoof (Jeff Nathan)
- Cleanup of win32 version including proper Event Log support (Chris Reid)
- Munged data fixes for stream4 (Chris Green)
Diffstat (limited to 'net/snort/patches')
-rw-r--r-- | net/snort/patches/patch-ae | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/net/snort/patches/patch-ae b/net/snort/patches/patch-ae index 49b0ca26d84..9d57194f5f0 100644 --- a/net/snort/patches/patch-ae +++ b/net/snort/patches/patch-ae @@ -1,13 +1,13 @@ -$NetBSD: patch-ae,v 1.2 2003/04/16 06:37:20 salo Exp $ +$NetBSD: patch-ae,v 1.3 2003/12/31 14:11:42 salo Exp $ ---- etc/snort.conf.orig 2003-04-03 23:10:50.000000000 +0200 -+++ etc/snort.conf 2003-04-16 08:09:48.000000000 +0200 -@@ -99,7 +99,7 @@ +--- etc/snort.conf.orig 2003-12-18 18:14:35.000000000 +0100 ++++ etc/snort.conf 2003-12-30 02:25:47.000000000 +0100 +@@ -104,7 +104,7 @@ var AIM_SERVERS [64.12.24.0/24,64.12.25.0/24,64.12.26.14/24,64.12.28.0/24,64.12.29.0/24,64.12.161.0/24,64.12.163.0/24,205.188.5.0/24,205.188.9.0/24] # Path to your rules files (this can be a relative path) -var RULE_PATH ../rules +var RULE_PATH @PREFIX@/share/snort/rules - # Configure the snort decoder: + # Configure the snort decoder # ============================ |