CVS log for snort/configure.in
	Help

Request diff between arbitrary revisions

Updates for 2.8.3.1

Update to 2.8.3

Update files for 2.8.2.2

Updates

Update to 2.8.3.beta

Added MPLS decoding support.

Add the normal for release

update numbers

Change beta to rc1.  Some other minor fixes not associated with any bug

2.8.2 beta prep

* Added configuration option to clean up all initialization memory at shutdown.
* Pattern Matcher Caching & Rule Processing Performance Improvements.

Commit Changlog and version change

* 2.8.1 RC Prep

* 2.8.1 RC Prep

Add ability for dynamic rules to store and retrieve data on stream session.
Up version to 2.8.0.2

enforce version 6 or better for pcre

enforce version 6 or better for pcre

Add check for Phil Woods pcap so that pcap stats are computed correctly.  Thanks to John Hally for bringing this to our attention.

Add check for Phil Woods pcap so that pcap stats are computed correctly.  Thanks to John Hally for bringing this to our attention.

* replace - w/ space in version string.

* 2.8.1 prep.

* 2.8.0.1 prep

Reverse diff security related stuff.  Make dynamic-preprocessors/libs/  a library

* Add support for rule and preprocessor profiling times for Sparc v9 processors.
* Update GRE decoder to support PPTP GRE v.1 header.  Add new GRE decoder alerts and README.  Integrate with IPv6 codebase.
* Added SSL preprocessor.

* 2.7.0.2

* 2.8.0 release prep.

* 2.8.0 release prep.

* 2.8.0 RC1 Prep.

* Pass correct parameters to pcre_copy_named_string in configure test.

* Pass correct parameters to pcre_copy_named_string in configure test.

* Fix build issue on OpenBSD.

* Fix build issue on OpenBSD.

* 2.8.0.beta (not -beta).

* Added support to provide action control (alert, drop, pass, etc)
  over preprocessor and decoder generated events.
* Fixed issue with various versions of pcap reporting received &
  dropped stats differently.  Pcap versions 0.9 & higher accumulate
  stats, whereas earlier versions do not.

* Added support to provide action control (alert, drop, pass, etc)
  over preprocessor and decoder generated events.
* Fixed issue with various versions of pcap reporting received &
  dropped stats differently.  Pcap versions 0.9 & higher accumulate
  stats, whereas earlier versions do not.

2.7.0.1 staging.

* Fixed potential invalid memory access when require 3whs option is used.

* Fixed potential invalid memory access when require 3whs option is used.

* Check for wchar.h and don't try to use it if not present.A
  Fixes builds on OpenBSD 3.5 and others.

* Check for wchar.h and don't try to use it if not present.A
  Fixes builds on OpenBSD 3.5 and others.

* Add xxx/lib/mysql/libmysqlclient.* to the search path for mysql.

* Add xxx/lib/mysql/libmysqlclient.* to the search path for mysql.

* Fix morse code problem, should be a 'dot' not a 'dash'.

* Add minimal PCRE version.

* Add minimal PCRE version.

* 2.6.1.5 Staging.

* 2.6.1.4 release prep

* 2.6.1.3 prep.

* 2.7.0 Beta2 prep.

* Added support for libpcap that depends on libpfring and updated description
  as to why libpcap check might fail and what files might be missing.
* Update Stream5 configuration parsing and validation checks and fix issue
  with static flushpoints not really being static.
* Code cleanup to check that a query was not truncated when using snprintf
  and guarantee NULL terminated string.

* Added support for libpcap that depends on libpfring and updated description
  as to why libpcap check might fail and what files might be missing.
* Update Stream5 configuration parsing and validation checks and fix issue
  with static flushpoints not really being static.
* Code cleanup to check that a query was not truncated when using snprintf
  and guarantee NULL terminated string.

* Handle platforms that don't support vswprintf and vwprintf.  Thanks
  Nikns Siankin for pointing that out for OpenBSD.

* Handle platforms that don't support vswprintf and vwprintf.  Thanks
  Nikns Siankin for pointing that out for OpenBSD.

* Update for 2.7.0 Beta

* 2.6.1.2 prep.

* 2.6.1.1 Prep.

* Update to 2.6.1 non RC.

* Update for 2.6.1 RC1.

* Start a thread if running in inline mode that passes traffic through
  once pcap is opened and snort is not ready to start inspection (ie,
  loading rules, creating pattern matcher, etc).  Thread is terminated
  when snort is ready to process packets.
  Compiled in via --enable-inline-init-failopen option to configure
  script.  Disable by --disable-inline-init-failopen commandline option or
  'config disable_inline_init_failopen' in snort.conf/user.conf in the
  case that the interface is fail-closed.  Requires libpthread.

* Start a thread if running in inline mode that passes traffic through
  once pcap is opened and snort is not ready to start inspection (ie,
  loading rules, creating pattern matcher, etc).  Thread is terminated
  when snort is ready to process packets.
  Compiled in via --enable-inline-init-failopen option to configure
  script.  Disable by --disable-inline-init-failopen commandline option or
  'config disable_inline_init_failopen' in snort.conf/user.conf in the
  case that the interface is fail-closed.  Requires libpthread.

* check the gcc compiler version and disable strict aliasing (using
  -fno-strict-aliasing) for gcc version 4.x.

* check the gcc compiler version and disable strict aliasing (using
  -fno-strict-aliasing) for gcc version 4.x.

* check the gcc compiler version and disable strict aliasing (using
  -fno-strict-aliasing) for gcc version 4.x.

* Added support to decode GRE encapsulated traffic.  Only IP as transport
  protocol is supported and only one layer of encapsulation will be
  decoded - packets with multiple GRE headers will be discarded.
* Added support for communcation with an Aruba Networks wireless
  mobility authentication/access control system.

* Added support to decode GRE encapsulated traffic.  Only IP as transport
  protocol is supported and only one layer of encapsulation will be
  decoded - packets with multiple GRE headers will be discarded.
* Added support for communcation with an Aruba Networks wireless
  mobility authentication/access control system.

* Add DNS to config and RPM spec file.

* Add a dynamic preprocessor to decode and analyze DNS responses
  over TCP and UDP.  The TCP portion is stateful and requires
  stream is enabled.

* Add a dynamic preprocessor to decode and analyze DNS responses
  over TCP and UDP.  The TCP portion is stateful and requires
  stream is enabled.

* Add dns.

* 2.6.0.2 release prep.

* Fix issues with using lowmem.  It was reporting an out of
  memory error.  This was broken with the addition of the
  smaller memory Aho-Corasick pattern matcher.

* Update for Snort 2.6.1.

* Enable dynamicplugins by default.  Can override with --disable-dynamicplugin.

* 2.6.1 prep.

* New target-based Stream module.  Moved flow & flowbits to
  be part of Stream API.

* Fix race condition with daemonization.
* Add support for correct shared library extensions on HP & MAC

* Fix race condition with daemonization.
* Add support for correct shared library extensions on HP & MAC

* Add create_db2 srcipt to be included in distro.
* Fix issue with daemonization on MAC OSX and parent not exiting cleanly.
* Provide support for locking the PID file so that no additional snort
  process is able to start using the same PID file.  Can be overridden
  with --nolock-pidfile.
* Fix issue with replace option and replaced data always being placed
  at the beginning of the packet.
* FTPTelnet: Fix issue with parsing default server configuration on Win32
  platform for FTPTelnet.
* SMTP: Fix potential read beyond end of buffer and update configuration to
  use less memory.
* Fix Stream reassembly issue at session purge/end of pcap.
* HTTP: Handle additional whitespace characters on a per server configured
  basis.  Defaults are to treat Htab (\t, 9), VTab (\v, 11), Form
  Feed (\f, 12), and CR (\r, 13) as whitespace.
* Revise IP list parsing code.

* Fix issue with using postgresql and dynamic plugins.
* Fix problem when parsing multiple hosts in an IP list.
* Update to handle signals received when no traffic is flowing
  with inline/IPQ.

* Fix issue with using postgresql and dynamic plugins.
* Fix problem when parsing multiple hosts in an IP list.
* Update to handle signals received when no traffic is flowing
  with inline/IPQ.

* Update for 2.6.0.

* Updates for 2.4.5.

* Signal handler updates for SEGV and HUP.  Define CATCHSEGV in
  snort.c to trap segv signals.  Can also define NOCOREFILE to
  prevent snort from leaving a core file on receipt of a segv.

* Signal handler updates for SEGV and HUP.  Define CATCHSEGV in
  snort.c to trap segv signals.  Can also define NOCOREFILE to
  prevent snort from leaving a core file on receipt of a segv.

* 2.6.0 RC2 prep.

* Update for RC1

* Update to fix signal handling issue with libprelude and to
  disable segv signal handler when compiled for Debug mode.
* Remove pcap_setnonblock() call, reverting previous change.

* Update to fix signal handling issue with libprelude and to
  disable segv signal handler when compiled for Debug mode.
* Remove pcap_setnonblock() call, reverting previous change.

* Use pcap_setnonblock() if available to help with snort exiting
  on SIGTERM (and others) when no traffic is flowing.

* Use pcap_setnonblock() if available to help with snort exiting
  on SIGTERM (and others) when no traffic is flowing.

* Initialize pcap stats
* Fix classification info between preprocessor/decoder and rule alerts.
* Prelude output plugin update.

* Initialize pcap stats
* Fix classification info between preprocessor/decoder and rule alerts.
* Prelude output plugin update.

* Updating version to 2.4.4

* Fix error message when libnet isn't found.

* Fix error message when libnet isn't found.

* Updated to use 2.6.0 version.

* Added examples for manual of dynamic preprocessor and dynamic rule libraries.

* More updates for building dynamic preprocessors

* Fixing dynamic preprocessor Makefile

* Added use of libtool to build dynamically loadable modules,
  --enable-dynamicplugin.
* Added performance profiling, --enable-perfprofiling.
* Added separation of rules being enabled from them appearing in
  snort.conf, --enable-rulestate.
* Added pthread linkage, --enable-pthread.

2.4.3 Release notes and version updates

* src/snort.h:
  bump build number
* configure.in:
  incrementing to 2.4.2
* src/output-plugins/spo_log_tcpdump.h:
  don't try to actually open the log file when in test mode

* src/snort.c:
  New command line switch, -K, to explicitly set logging mode.  Available
  arguments are "none", "pcap" and "ascii".
  Pcap mode is now the default logging mode of Snort.
  CheckLogDir() is no longer called in IDS mode until after reading in
  the snort.conf file to prevent unncessary exiting due to logdir being
  specified in snort.conf and inadvertantly checking for the existence
  of /var/log/snort.
* src/util.c:
  Included CheckLogDir() call in CreatePidFile() on the off chance
  we have to fall back to using pv.log_dir which can happen due to
  the IDS mode logdir check being removed in src/snort.c
  Banner updated to remind people of logging changes
* src/decode.c:
  Added check for bad length of TCP SACK option.
* snort.8 README USAGE RELEASE.NOTES
  Updated for new command line switch and logging realities.

* Merging in latest Timestats from Bill Parker.  Enable with --enable-timestats.

* Added timestats functionality.  Enable via configure --enable-timestats.

* Fix configuration errors with prelude output plugin.
* Fix Stream4 Solaris problem
* Added new OpenBSD pflog support
* Added ETH_LOOPBACK statistics counter
* Merging docs, configure.in, Makefile(s), and rpm changes from 2.4 tree

* configure.in
  Fixed PostgreSQL support in config script

* rpm/snort.spec
* rpm/generate-all-rpms
    Setup for 2.4.0 release, removed inline build option from RPM generation
    for the time being

* configure.in
* Makefile.am
* doc/Makefile.am
    Updated for 2.4.0 release to remove references to sig docs and rules,
    which are now external to the distro

* etc/snort.conf
    Updated snort.conf for 2.4.0 release

* autojunk.sh
  Added automake--copy switch from Jeff Nathan <jeff@snort.org>

* configure.in
  Maintainer mode patch from Jeff Nathan <jeff@snort.org>

* doc/BUGS
  Updated BUGS file for 2.4 release.

* configure.in
  Added PostgreSQL fixes and exit code patch from Javier
  Fernandez-Sanguino Pena <jfs@computer.org>

* Added check for MUST_SPECIFY_DEVICE #ifdef, which if used,
requires either a -i or -r commandline switch to start snort.  If
not used, current behavior remains (Marc Norton).
* Added support for prelude, enable with --enable-prelude. Thanks
Yoann Vandoorselaere!

* Added check for MUST_SPECIFY_DEVICE #ifdef, which if used,
  requires either a -i or -r commandline switch to start snort.  If
  not used, current behavior remains (Marc Norton).
* Added support for prelude, enable with --enable-prelude. Thanks
  Yoann Vandoorselaere!

* Added xlink2state mini-preprocessor to catch MS Exchange buffer
  X-Link2State data overflow (amullican).
* Bump to 2.3.3.

* Sync to 2.4.0RC1

* fix for finding libnet

* fix for finding libnet

* Snort 2.4 CVS branch, build 1.
* Added support for detection of Lookback & Same src/dest attacks in
  the packet decoder. This obsoletes sids 527, 528. Thanks Marc
  Norton for the feature.
* Added global ignore ports feature. Thanks Andy Mullican for the feature. Usage:
* Provide ability for 3rd party code to take action when Snort
  indicates a packet should be dropped. Thanks Marc Norton.
* Added FTP Bounce detection Plugin. Thanks Steve Sturges for this feature.
* Performance improvement in pattern matcher from Marc Norton.
* Eliminate duplicate alerts on rebuilt streams/IP reassembled packets.
  Thanks Andy Mullican and Steve Sturges.
* Added better determination of direction for Back Orifice packets.
  Thanks Andy Mullican.
* Added handling of midstream sessions in portscan preprocessors.
  Thanks Andy Mullican.
* Stream4 fixes - Handle PAWS, NULL TCP Flags in established session,
  limit overlaps in established session, update ACK when server sends
  RST. Performance changes for cleaning up session cache. Thanks
  Steve Sturges and Andy Mullican for the patches.
* Added uri_tab_delimiter option to HttpInspect. Thanks Andy
  Mullican.
* Added categories (wire, ip defrag, tcp rebuilt, app layer) to
  PerfMon.  Also added atexitonly option to dump stats for entire life
  of snort. Thanks Steve Sturges.
* Fixed telnet decoder bug when ignoring Sub-negotiation end command.
  Thanks Steve Sturges.

* Based on feedback from the community and in support of the Bleeding
  Snort ruleset, we have removed the end-of-line parser fix. We will be
  completely reworking this for the next parser overhaul.
* This is Snort release 2.3.2

* Fixed issue with flowbits being set too low (mnorton).
* Fixed parsing of comments at end of line in config file.  In
  snort.conf, anything that follows a # on a line is considered a
  comment (ssturges).
* Spin up for 2.3.1.

* Syncing up for 2.3.0 Final release
* Fixed issue with sfPortscan reporting incorrect IP datagram length.
  Thanks Jon Hart for the test case and finding the bug.
* Threshold/Suppression now prints properly when logging to syslog.
  Thanks Sekure for pointing out the problem.
* Threshold memcap argument now correctly handles non-integer input.
  Thanks nnposter for the patch.
* Fixed issue reported by Allan Jensen where on MacOS X ppp links were
  not decoded properly.

* sync up to RC2

* slight fixes to mysql detection in configure
* banner update

* slight fixes to mysql detection in configure
* banner update

* Moving contribs to www.snort.org

* Removed obsolete contribs, relocated to www.snort.org

* Moving CVS release to RC1