Tuesday, January 20, 2015

Snort++ github Update

Just pushed:

  • fixes for large file support on 32-bit Linux systems (reported by Y M)
  • changed u2 base file name to unified2.log
  • updated doc based on tips/tricks blog
  • fixed active rule actions (react, reject, rewrite)
  • moved http_inspect profile defaults to snort_defaults.lua
  • add generalized infractions tracking to new_http_inspect
  • updated snort2lua to override default tables (x = { t = v }; x.t.a = 1)
  • additional codec refactoring
  • added pflog codecs
  • fixed stream_size rule option