From: Russ Combs <rucombs@cisco.com>
Date: Thu, 15 Jun 2017 11:14:41 +0000 (-0400)
Subject: build 236
X-Git-Tag: 3.0.0-239~47
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c00d3bcb88c078574f18a2840ffdcc248947bc65;p=thirdparty%2Fsnort3.git

build 236
---

diff --git a/ChangeLog b/ChangeLog
index 06f57afec..fbd349a41 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,21 @@
+17/06/15 - build 236
+
+-- appid: clean up shutdown stats
+-- appid: fix memory leak
+-- conf: update defaults
+-- decode: updated ipv6 valid next headers
+-- detection: avoid superfluous leaf nodes in detection option trees
+-- http_inspect: improved handling of badly terminated chunks
+-- http_inspect: improved transfer-encoding header processing
+-- ips options: add validation for range check types such as dsize
+-- perf_monitor: add more tcp and udp peg counts
+-- perf_monitor: update cpu tracker output to thread_#.cpu_*
+-- port_scan: alert on all scan attempts so blocking is possible
+-- port_scan: make fully configurable
+-- sip: fix get body buffer for fast patterns
+-- ssl: use stop-and-wait splitter (protocol aware splitter is next)
+-- stream_ip: fix 123:7
+
 17/06/01 - build 235
 
 -- http_inspect: improve handling of improper bare \r separator
diff --git a/doc/differences.txt b/doc/differences.txt
index 7aa180060..e5a605f78 100644
--- a/doc/differences.txt
+++ b/doc/differences.txt
@@ -94,6 +94,10 @@ Some things Snort++ can do today that Snort can not do as well:
   (Snort 2 requires rules directly in or included in conf)
 * simple, clean, uniform startup and shutdown output
   (Snort 2 is heavy and inconsistent)
+* port_scan is fully configurable
+  (Snort 2 hard codes most of the configuration)
+* port_scan can block scans
+  (Snort 2 can only detect scans)
 * better modularity 346K/1534 = 226 lines/file, max=2700
   (Snort 2 has 440K/1021 = 431 lines/file, max=13K)
 
diff --git a/src/main/build.h b/src/main/build.h
index 77160341f..433e7830c 100644
--- a/src/main/build.h
+++ b/src/main/build.h
@@ -10,7 +10,7 @@
 //                                               //
 //-----------------------------------------------//
 
-#define BUILD "235"
+#define BUILD "236"
 
 #endif