+15/11/20 - build 179
+
+-- user manaul updates
+-- fix perf_monitor.max_file_size default to work on 32-bit systems, thanks
+ to noah_dietrich@86penny.org for reporting the issue
+-- fix bogus 116:431 events
+-- decode past excess ip6 extensions and bad options
+-- add iface to alert_csv.fields
+-- add hyperscan fast pattern search engine - functional but not yet used
+-- remote --enable-perf-profiling so it is always built
+-- perf profiling changes in preparation for memory profiling
+-- remove obsolete LibDAQ preprocessor conditionals
+-- fix arp inspection
+-- search engine refactoring
+
15/11/13 - build 178
-- document runtime link issue with hyperscan on osx
into the Snort binary. For a full list of build features, run ./configure
--help.
-* *--enable-ppm*: enable packet and rule performance monitoring and coarse
- latency enforcement.
+* *--enable-ppm*: enable building packet and rule performance monitoring
+ and coarse latency enforcement.
-* *--enable-perf-profiling*: enable module and rule performance profiling.
-
-* *--enable-shell*: enable local and remote command line shell support.
+* *--enable-shell*: enable building local and remote command line shell
+ support.
These features are built only if the required libraries and headers are
present. There is no need to explicitly enable.
-* *lzma*: from http://www.7-zip.org/sdk.html for decompression of SWF fles.
+* *lzma*: for decompression of SWF and PDF files.
-* *openssl*: from https://www.openssl.org for SHA and MD5 file signatures and
- the protected_content rule option.
+* *openssl*: for SHA and MD5 file signatures and the protected_content rule
+ option.
* *intel-soft-cpm": an optional pattern matcher based on a library from
Intel.
+* hyperscan for the regex rule option and hyperscan search engine.
+
If you need to use headers and/or libraries in non-standard locations, you
can use these options:
* *--with-pkg-libraries*: specify the directory containing the package
libraries.
-These can be use for pcap, luajit, pcre, dnet, daq, lzma, openssl, and
-intel-soft-cpm packages.
+These can be use for pcap, luajit, pcre, dnet, daq, lzma, openssl,
+intel-soft-cpm, and hyperscan packages. For more information on these
+libraries see the Getting Started section of the manual.