Monday, March 4, 2013

Snort 2.9.4.1 has been released!

We are pleased to announce the immediate availability of Snort 2.9.4.1.

The following is an excerpt from the ChangeLog detailing the changes:

[*] Improvements

* Updated File processing for partial HTTP content and MIME attachments.
* Addition of new config option max_attribute_services_per_host and improve memory usage within attribute table.
* Handle excessive overlaps in frag3.
* Stream API updates to return session key for a session.
* Reduce false positives for TCP window slam events.
* Updates to provide better encoding for TCP packets generated for respond and react. 
* Disable non-ethernet decoders by default for performance reasons. If needed, use --enable-non-ether-decoders with configure.

Snort 2.9.4.1 can be downloaded immediately at: https://www.snort.org/downloads

Thanks for your support of Snort!