+17/06/15 - build 236
+
+-- appid: clean up shutdown stats
+-- appid: fix memory leak
+-- conf: update defaults
+-- decode: updated ipv6 valid next headers
+-- detection: avoid superfluous leaf nodes in detection option trees
+-- http_inspect: improved handling of badly terminated chunks
+-- http_inspect: improved transfer-encoding header processing
+-- ips options: add validation for range check types such as dsize
+-- perf_monitor: add more tcp and udp peg counts
+-- perf_monitor: update cpu tracker output to thread_#.cpu_*
+-- port_scan: alert on all scan attempts so blocking is possible
+-- port_scan: make fully configurable
+-- sip: fix get body buffer for fast patterns
+-- ssl: use stop-and-wait splitter (protocol aware splitter is next)
+-- stream_ip: fix 123:7
+
17/06/01 - build 235
-- http_inspect: improve handling of improper bare \r separator
(Snort 2 requires rules directly in or included in conf)
* simple, clean, uniform startup and shutdown output
(Snort 2 is heavy and inconsistent)
+* port_scan is fully configurable
+ (Snort 2 hard codes most of the configuration)
+* port_scan can block scans
+ (Snort 2 can only detect scans)
* better modularity 346K/1534 = 226 lines/file, max=2700
(Snort 2 has 440K/1021 = 431 lines/file, max=13K)