aka "Cornish Rams Bladders", aka "Finally, TCP stream reassembly!", aka "Finally, a GUI!". This release has many more goodies than just that as you can see from the details below. This release is not recommended for stable environments due to the sheer amount of new stuff to play with, actually it is mainly targeted at testers and hackers. So can we have success reports and bug reports please :) BUGS FIXED * Fix bug in IPX decoder which could cause tcpdump converter to fail * Many portability fixes, should fully build on FreeBSD now * Fix prelude plugin bitrot * Fixed longstanding bugs in dsize matcher * Snort compatible 'offset' modifier * Fix bug in log plugin displaying IP addresses in ipfrag alerts * Fix crash bug in ipfrag (when reassembly times out) * Don't alert on retransmit of SYN packets NEW FEATURES * Balance alerts between alert spools * Setwise string matching (MASSIVE performance increase) * Rule ordering is preserved * Basic GUI for reading elogs * Increased disk performance for logging and disk capture * Patch for ethereal to read elogs * Intelligent TCP stream reassembly * Greatly improved HTTP decode facility * IPX snort rule support Thank you and farewell. -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part