[MacPorts] #49863: snort @2.9.7.6: update to 2.9.8.0

MacPorts noreply at macports.org
Mon Nov 30 13:51:34 PST 2015


#49863: snort @2.9.7.6: update to 2.9.8.0
----------------------------+--------------------------------
 Reporter:  mschamschula@…  |      Owner:  macports-tickets@…
     Type:  update          |     Status:  new
 Priority:  Normal          |  Milestone:
Component:  ports           |    Version:  2.3.4
 Keywords:  haspatch        |       Port:  snort
----------------------------+--------------------------------
 snort has been updated to version 2.9.8.0.New this version:

 ** New additions
 *  SMBv2/SMBv3 support for file inspection.
 *  Port override for metadata service in IPS rules.
 *  AppID Lua detector performance profiling.
 *  Perfmon dumps stats at fixed intervals from absolute time.
 *  New preprocessor alert (120:18) to detect SSH tunneling over HTTP
 *  New config option |disable_replace| to disable replace rule option.
 *  New Stream configuration |log_asymmetric_traffic| to control logging to
 syslog.
 *  New shell script in tools to create simple Lua detectors for AppID.

 ** Improvements
 *  sfip_t refactored to use struct in6_addr for all ip addresses.
 *  Post-detection callback for preprocessors.
 *  AppID support for multiple server/client detectors evaluating on same
 flow.
 *  AppID API for DNS packets.
 *  Memory optimizations throughout.
 *  Support sending UDP active responses.
 *  Fix perfmon tracking of pruned packets.
 *  Stability improvements for AppID.
 *  Stability improvements for Stream6 preprocessor.
 *  Added improved support to block malware in FTP preprocessor.
 *  Added support to differentiate between active and passive FTP
 connections.
 *  Improvements done in Stream6 preprocessor to avoid having duplicate
 packets in the DAQ retry queue.
 *  Resolved an issue where reputation config incorrectly displayed
 'blacklist' in priority field even though 'whitelist' option was
 configured.
 *  Added support for multiple expected sessions created per packet
 *  Active response now supports MPLS

-- 
Ticket URL: <https://trac.macports.org/ticket/49863>
MacPorts <https://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list