+2023-06-15: 3.1.64.0
+
+* appid: always publish a change message after do not decrypt
+* detection: handle case when no rule tree node is found for a policy ID.
+* flow: introduced granular counters for idle_prunes
+* http_inspect: remove stream interface abstraction for http/1.1 flows
+* stream_ip: fix session counters in timeout and cleanup cases
+
2023-06-01: 3.1.63.0
* appid: changes logic in ssl pattern matching
The Snort Team
Revision History
-Revision 3.1.63.0 2023-06-01 16:02:55 EDT TST
+Revision 3.1.64.0 2023-06-15 21:19:24 EDT TST
---------------------------------------------------------------------
* stream.flows: total sessions (sum)
* stream.total_prunes: total sessions pruned (sum)
- * stream.idle_prunes: sessions pruned due to timeout (sum)
+ * stream.idle_prunes_max_flows: sessions pruned due to pruning
+ timeout since max flows is reached (sum)
+ * stream.idle_prunes_proto_timeout: sessions pruned due to protocol
+ timeout (sum)
* stream.excess_prunes: sessions pruned due to excess (sum)
* stream.uni_prunes: uni sessions pruned (sum)
* stream.memcap_prunes: sessions pruned due to memcap (sum)
* stream_icmp.released: icmp session trackers released (sum)
* stream_icmp.sessions: total icmp sessions (sum)
* stream_icmp.timeouts: icmp session timeouts (sum)
- * stream.idle_prunes: sessions pruned due to timeout (sum)
+ * stream.idle_prunes_max_flows: sessions pruned due to pruning
+ timeout since max flows is reached (sum)
+ * stream.idle_prunes_proto_timeout: sessions pruned due to protocol
+ timeout (sum)
* stream_ip.alerts: alerts generated (sum)
* stream_ip.anomalies: anomalies detected (sum)
* stream_ip.created: ip session trackers created (sum)