+2023-06-01: 3.1.63.0
+
+* appid: changes logic in ssl pattern matching
+* http_inspect: rebuild start line
+* loggers: reuse sensor_id u2 event field for tenant_id value
+* main: add Pig destructor to free dynamic memory
+* main: allow network IDs to use up to 32 bits.
+* main: handling the return code in case of error in creation of daq instance
+* perf_monitor: fix data bus subscription
+* stream_tcp: account for data from zero window probes
+
2023-05-21: 3.1.62.0
* appid: added logic to check for encrypted appid before assigning SSL service based on port
The Snort Team
Revision History
-Revision 3.1.62.0 2023-05-21 12:06:30 EDT TST
+Revision 3.1.63.0 2023-06-01 16:02:55 EDT TST
---------------------------------------------------------------------
* multi network.checksum_eval = all: checksums to verify { all | ip
| noip | tcp | notcp | udp | noudp | icmp | noicmp | none }
* int network.id = 0: correlate unified2 events with configuration
- { 0:65535 }
+ { 0:max32 }
* int network.min_ttl = 1: alert / normalize packets with lower TTL
/ hop limit (you must enable rules and / or normalization also) {
1:255 }
(max)
* stream_tcp.zero_len_tcp_opt: number of zero length tcp options
(sum)
+ * stream_tcp.zero_win_probes: number of tcp zero window probes
+ (sum)
5.52. stream_udp
* multi network.checksum_eval = all: checksums to verify { all | ip
| noip | tcp | notcp | udp | noudp | icmp | noicmp | none }
* int network.id = 0: correlate unified2 events with configuration
- { 0:65535 }
+ { 0:max32 }
* int network.layers = 40: the maximum number of protocols that
Snort can correctly decode { 3:255 }
* int network.max_ip6_extensions = 0: the maximum number of IP6
* stream_tcp.untracked: tcp packets not tracked (sum)
* stream_tcp.zero_len_tcp_opt: number of zero length tcp options
(sum)
+ * stream_tcp.zero_win_probes: number of tcp zero window probes
+ (sum)
* stream.total_prunes: total sessions pruned (sum)
* stream_udp.created: udp session trackers created (sum)
* stream_udp.ignored: udp packets ignored (sum)