Snort 2.9.0.2

Выход Snort, популярной свободной системы обнаружения атак (IDS), версии 2.4.5 завершает развитие ветки 2.4.x. И одновременно с ней выпущена первая версия новой ветки проекта — Snort 2.6.0.
В Snort 2.6 проведена работа по увеличению производительности, появилась реализация системы динамических правил и динамических предпроцессоров.
В обеих версиях усовершенствована обработка RPC-вызовов, улучшена работа систем определения факта сканирования портов и контроля HTTP-соединений.

---

Home_http://www.snort.org/
Downloads (~3,17 Mb)_http://www.snort.org/...t-2.6.0.tar.gz
2.4.5 (~2,69 Mb)_http://www.snort.org/...t-2.4.5.tar.gz

---

ChangeLog_http://www.snort.org/...notes_2613.txt
Downloads_http://www.snort.org/...2.6.1.3.tar.gz

---

Downloads_http://www.snort.org/...2.6.1.4.tar.gz

---

Downloads_http://www.snort.org/...2.7.0.1.tar.gz

Feature highlights:

* Port lists

* IPv6 support

* Packet performance monitoring

* Experimental support for target-based stream and IP frag reassembly

* Ability to take actions on preprocessor events

* Detection for TCP session hijacking based on MAC address

* Unified2 output plugin

* Improved performance and detection capabilities

---

Downloads_http://www.snort.org/...t-2.8.0.tar.gz

Snort 2.8.0.1:

* Updates PCRE libraries used in Windows builds
* Fixes an issue with Stream5 debugging
* Corrects a calculation in perfmonitor

---

Downloads_http://www.snort.org/...2.8.0.1.tar.gz

Snort 2.8.0.2

Release notes:
_http://www.snort.org/...notes_2802.txt

Скачать:
http://www.snort.org/...2.8.0.2.tar.gz

---

Downloads (~4.2 Mb)_http://www.snort.org/...t-2.8.1.tar.gz

New rules:
13844 <-> SPECIFIC-THREATS BDAT size longer than contents exploit attempt (specific-threats.rules)
13845 <-> SPECIFIC-THREATS BDAT size public exploit attempt (specific-threats.rules)
13846 <-> SPECIFIC-THREATS Veritas Backup Agent password overflow attempt (specific-threats.rules)

Updated rules:
3599 <-> NETBIOS DCERPC NCADG-IP-UDP mqqm QMDeleteObject little endian object call overflow attempt (netbios.rules)
12279 <-> WEB-CLIENT Microsoft XML substringData integer overflow attempt (web-client.rules)
13620 <-> SPECIFIC-THREATS CA Brightstor discovery service alternate buffer overflow attempt (specific-threats.rules)
13817 <-> SPECIFIC-THREATS xmlrpc.php command injection attempt (specific-threats.rules)
13818 <-> SPECIFIC-THREATS alternate xmlrpc.php command injection attempt (specific-threats.rules)

---

Downloads (~4,2 Mb)_http://www.snort.org/...2.8.2.1.tar.gz

2008-07-24 - Snort 2.8.2.2
[*] Improvements
* Fix issue with evaluating PCRE rule options with /U modifier that
are followed by a relative content rule option.

* Fix issue with dsize range check.

2008-06-12 - Snort 2.8.2.1
[*] Improvements
* Fix support for pass rules that sometimes did not take precedence
over alert and/or drop rules.

2008-05-28 - Snort 2.8.2
[*] New Additions
* Performance improvements in fast pattern matcher CPU caching and rules
processing for common rule options.

---

Downloads (~4,2 Mb)_http://www.snort.org/...2.8.2.2.tar.gz