Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Snort 2.1.0 Release: Major Updates for Enhanced Security

Calendar Dec 30, 2003 • User Avatar Anthony Pell
1 - 2 min read
General Esm H500
Topics%20covered

Topics Covered

security advisory network security connection tracking snort 2.1 portscan detection
Yes, it's true, it's finally here! We're proud to announce the release of the new stable branch of snort, 2.1, and the first release, 2.1.0. This release can be found at the usual place, / . . . Date: Thu, 18 Dec 2003 12:39:25 -0500
From: Jeremy Hewlett
To: This email address is being protected from spambots. You need JavaScript enabled to view it.
Cc: This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.
Subject: [Snort-announce] Snort 2.1.0 is now available!

Yes, it's true, it's finally here! We're proud to announce the release of the new stable branch of snort, 2.1, and the first release, 2.1.0. This release can be found at the usual place, https://www.snort.org/.

Major 2.1 features include:

* A new connection tracking module, Flow (replaces conversation)
* A new portscan detector based off of Flow, Flow-Portscan (replaces
portscan2)
* A new http preprocessor, HttpInspect (replaces http_decode)
* Alert Thresholding and Suppression
* PCRE rule keyword (Perl Compat Regular Expressions)
* isdataat rule keyword (buffer length detection)
* A ton of new and updated rules.

This release also includes all the fixes from version 2.0.6.

The Snort manual has been updated to reflect v2.1 and address the many
suggestions from users. The manual is still a work in progress.

Many thanks to all those who have contributed to the Snort project,
this release wouldn't have been possible without you!

Cheers,
The Snort Team

Your message here