security advisorynetwork securityconnection tracking
Yes, it's true, it's finally here! We're proud to announce the release of the new stable branch of snort, 2.1, and the first release, 2.1.0. This release can be found at the usual place, / . . .. Date: Thu, 18 Dec 2003 12:39:25 -0500 From: Jeremy Hewlett To: This email address is being protected from spambots. You need JavaScript enabled to view it. Cc: This email address is being protected from spambots. You need JavaScript enabled to view it. , This email address is being protected from spambots. You need JavaScript enabled to view it. Subject: [Snort-announce] Snort 2.1.0 is now available! Yes, it's true, it's finally here! We're proud to announce the release of the new stable branch of snort, 2.1, and the first release, 2.1.0. This release can be found at the usual place, https://www.snort.org/. Major 2.1 features include: * A new connection tracking module, Flow (replaces conversation) * A new portscan detector based off of Flow, Flow-Portscan (replaces portscan2) * A new http preprocessor, HttpInspect (replaces http_decode) * Alert Thresholding and Suppression * PCRE rule keyword (Perl Compat Regular Expressions) * isdataat rule keyword (buffer length detection) * A ton of new and updated rules. This release also includes all the fixes from version 2.0.6. The Snort manual has been updated to reflect v2.1 and address the many suggestions from users. The manual is still a work in progress. Many thanks to all those who have contributed to the Snort project, this release wouldn't have been possible without you! Cheers, The Snort Team . Snort 2.1.0 introduces advanced connection monitoring and port scanning capabilities, boosting the security framework against potential intrusions.. Snort, Connection Tracking, Portscan Detection, Intrusion Detection. . LinuxSecurity.com Team
Dec 30, 2003
•
LinuxSecurity.com Team
Security Projects