From: Russ Combs Date: Fri, 20 Nov 2015 12:20:37 +0000 (-0500) Subject: build 179 X-Git-Tag: 3.0.0-233~717 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b802d9a8616dae44199fa308ebff355e1687f4b3;p=thirdparty%2Fsnort3.git build 179 --- diff --git a/ChangeLog b/ChangeLog index 9b5f263a3..f83ece548 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,18 @@ +15/11/20 - build 179 + +-- user manaul updates +-- fix perf_monitor.max_file_size default to work on 32-bit systems, thanks + to noah_dietrich@86penny.org for reporting the issue +-- fix bogus 116:431 events +-- decode past excess ip6 extensions and bad options +-- add iface to alert_csv.fields +-- add hyperscan fast pattern search engine - functional but not yet used +-- remote --enable-perf-profiling so it is always built +-- perf profiling changes in preparation for memory profiling +-- remove obsolete LibDAQ preprocessor conditionals +-- fix arp inspection +-- search engine refactoring + 15/11/13 - build 178 -- document runtime link issue with hyperscan on osx diff --git a/doc/features.txt b/doc/features.txt index 6d58ea7c6..690ec721d 100644 --- a/doc/features.txt +++ b/doc/features.txt @@ -2,24 +2,25 @@ The features listed below must be explicitly enabled so they are built into the Snort binary. For a full list of build features, run ./configure --help. -* *--enable-ppm*: enable packet and rule performance monitoring and coarse - latency enforcement. +* *--enable-ppm*: enable building packet and rule performance monitoring + and coarse latency enforcement. -* *--enable-perf-profiling*: enable module and rule performance profiling. - -* *--enable-shell*: enable local and remote command line shell support. +* *--enable-shell*: enable building local and remote command line shell + support. These features are built only if the required libraries and headers are present. There is no need to explicitly enable. -* *lzma*: from http://www.7-zip.org/sdk.html for decompression of SWF fles. +* *lzma*: for decompression of SWF and PDF files. -* *openssl*: from https://www.openssl.org for SHA and MD5 file signatures and - the protected_content rule option. +* *openssl*: for SHA and MD5 file signatures and the protected_content rule + option. * *intel-soft-cpm": an optional pattern matcher based on a library from Intel. +* hyperscan for the regex rule option and hyperscan search engine. + If you need to use headers and/or libraries in non-standard locations, you can use these options: @@ -29,6 +30,7 @@ can use these options: * *--with-pkg-libraries*: specify the directory containing the package libraries. -These can be use for pcap, luajit, pcre, dnet, daq, lzma, openssl, and -intel-soft-cpm packages. +These can be use for pcap, luajit, pcre, dnet, daq, lzma, openssl, +intel-soft-cpm, and hyperscan packages. For more information on these +libraries see the Getting Started section of the manual. diff --git a/doc/start.txt b/doc/start.txt index 2b341350f..b01cc9a6b 100644 --- a/doc/start.txt +++ b/doc/start.txt @@ -26,7 +26,8 @@ Required: Optional: -* lzma >= 5.1.2 from http://tukaani.org/xz/ for decompression of SWF fles +* lzma >= 5.1.2 from http://tukaani.org/xz/ for decompression of SWF and + PDF files * openssl from https://www.openssl.org for SHA and MD5 file signatures and the protected_content rule option diff --git a/src/decompress/dev_notes.txt b/src/decompress/dev_notes.txt index afd6938a1..712fe3fb0 100644 --- a/src/decompress/dev_notes.txt +++ b/src/decompress/dev_notes.txt @@ -10,7 +10,7 @@ In particular the components support these decompression options: This is only available if Snort ++ is built with the optional LZMA support. -3. Decompress the Deflate compressed portions if PDF files. +3. Decompress the Deflate compressed portions of PDF files. The three modes are individually enabled/disabled at initialization time. diff --git a/src/main/build.h b/src/main/build.h index 821931ce4..d51e01977 100644 --- a/src/main/build.h +++ b/src/main/build.h @@ -10,7 +10,7 @@ // // //-----------------------------------------------// -#define BUILD "178" +#define BUILD "179" #endif