|
From: freshmeat.net <no...@fr...> - 2010-10-05 05:16:19
|
Dear freshmeat.net subscriber, rrioux just announced version 2.9.0 of Snort on freshmeat.net. The changes are as follows: This release added a feature-rich IPS mode, including improvements to Stream, a Data Acquisition API (DAQ) that supports many different packet access methods, and a new 'byte_extract' rule option that allows extracted values to be used in subsequent rule options for isdataat, byte_test, byte_jump, and content distance/within/depth/offset. Two new rule options were added to support Base64 decoding of certain pieces of data and inspection of the Base64 data via subsequent rule options. A new pattern matcher that supports Intel's Quick Assist Technology for improved performance on supported hardware platforms was added. Project description: Snort is a network intrusion detection and prevention system. It is the most widely deployed technology of its kind in the world. It performs detection using a variety of methods including rules-based detection, anomaly detection, and heuristic analysis of network traffic. Its rules language is open source and available to the public as well. Detailed history and release notes are available here: http://freshmeat.net/projects/snort#release_322725 If you want to change your subscription to this project, please log in to: http://freshmeat.net/account/subscriptions Best regards, freshmeat.net -- This email was sent to dev...@li.... |