2010年4月27日

[installer 2346] snort-2.8.6

snort-2.8.6 出ています。

☆ snort-2.8.6
http://www.snort.org/
http://dl.snort.org/snort-current/snort-2.8.6.tar.gz

2010-04-22 - Snort 2.8.6

[*] New Additions
* HTTP Inspect now splits requests into 5 components -
Method, URI, Header (non-cookie), Cookies, Body.
Content and PCRE rule options can now search one or more of these buffers.

HTTP server-specific configurations to normalize the HTTP header and/or
cookies have been added.

Support gzip decompression across multiple packets.

* Added a Sensitive Data preprocessor, which performs detection of
Personally Identifiable Information (PII). A new rule option is available
to define new PII. See README.sensitive_data and the Snort Manual
for configuration details.

* Added a new pattern matcher and related configurations. The new pattern
matcher is optimized to use less memory and perform at AC speed.

[*] Improvements
* Addressed problem to resolve output obfuscation affecting packets
when Snort is inline.

* Preprocessors with memcap settings can now be configured in a "disabled"
state. This allows you to configure that memcap globally, but only enable
the preprocessor in targeted configurations.

----
こがよういちろう


投稿者 xml-rpc : 2010年4月27日 17:48
役に立ちました?:
過去のフィードバック 平均:(0) 総合:(0) 投票回数:(0)
本記事へのTrackback: http://hoop.euqset.org/blog/mt-tb2006.cgi/95448
トラックバック
コメント
コメントする




画像の中に見える文字を入力してください。