CVS log for snort/doc/Makefile.am
	Help

Request diff between arbitrary revisions

Add README.decoder_preproc_rules to Makefile.am

Add README.decoder_preproc_rules to Makefile.am

add reading pcaps README to dist

Add reading pcaps README to dist

Disable PPP decoding if architecture requires word alignment, e.g. SPARC machines.
Added README doc for IP in IP decoding.

Disable PPP decoding if architecture requires word alignment, e.g. SPARC machines.
Added README doc for IP in IP decoding.

* Update to include new README files.

* Update to include new README files.

* 2.8.0 Prep

* 2.8.0 Prep

* Update description for ftp/telnet detect_anomalies option.
* Changed README.stream to README.stream5.

* Update description for ftp/telnet detect_anomalies option.
* Changed README.stream to README.stream5.

* Finally a description for Stream4.  Thanks Todd!

* Finally a description for Stream4.  Thanks Todd!

* Remove RULES.todo
* Update manual.

* Remove RULES.todo
* Update manual.

* Added support to decode GRE encapsulated traffic.  Only IP as transport
  protocol is supported and only one layer of encapsulation will be
  decoded - packets with multiple GRE headers will be discarded.
* Added support for communcation with an Aruba Networks wireless
  mobility authentication/access control system.

* Added support to decode GRE encapsulated traffic.  Only IP as transport
  protocol is supported and only one layer of encapsulation will be
  decoded - packets with multiple GRE headers will be discarded.
* Added support for communcation with an Aruba Networks wireless
  mobility authentication/access control system.

* Add DNS to config and RPM spec file.

* Add DNS to config and RPM spec file.

* Add a dynamic preprocessor to decode and analyze DNS responses
  over TCP and UDP.  The TCP portion is stateful and requires
  stream is enabled.

* Add a dynamic preprocessor to decode and analyze DNS responses
  over TCP and UDP.  The TCP portion is stateful and requires
  stream is enabled.

* Add a dynamic preprocessor to decode and analyze DNS responses
  over TCP and UDP.  The TCP portion is stateful and requires
  stream is enabled.

* Added SSH and DCE/RPC preprocessor sections and description of
  new command line options.

* Added a few READMEs

* Updated for new files and 2.6.0 release preparation.

* Fix configuration errors with prelude output plugin.
* Fix Stream4 Solaris problem
* Added new OpenBSD pflog support
* Added ETH_LOOPBACK statistics counter
* Merging docs, configure.in, Makefile(s), and rpm changes from 2.4 tree

* rpm/snort.spec
* rpm/generate-all-rpms
    Setup for 2.4.0 release, removed inline build option from RPM generation
    for the time being

* configure.in
* Makefile.am
* doc/Makefile.am
    Updated for 2.4.0 release to remove references to sig docs and rules,
    which are now external to the distro

* etc/snort.conf
    Updated snort.conf for 2.4.0 release

* doc/comment updating

* minor doc updates again

* Snort 2.4 CVS branch, build 1.
* Added support for detection of Lookback & Same src/dest attacks in
  the packet decoder. This obsoletes sids 527, 528. Thanks Marc
  Norton for the feature.
* Added global ignore ports feature. Thanks Andy Mullican for the feature. Usage:
* Provide ability for 3rd party code to take action when Snort
  indicates a packet should be dropped. Thanks Marc Norton.
* Added FTP Bounce detection Plugin. Thanks Steve Sturges for this feature.
* Performance improvement in pattern matcher from Marc Norton.
* Eliminate duplicate alerts on rebuilt streams/IP reassembled packets.
  Thanks Andy Mullican and Steve Sturges.
* Added better determination of direction for Back Orifice packets.
  Thanks Andy Mullican.
* Added handling of midstream sessions in portscan preprocessors.
  Thanks Andy Mullican.
* Stream4 fixes - Handle PAWS, NULL TCP Flags in established session,
  limit overlaps in established session, update ACK when server sends
  RST. Performance changes for cleaning up session cache. Thanks
  Steve Sturges and Andy Mullican for the patches.
* Added uri_tab_delimiter option to HttpInspect. Thanks Andy
  Mullican.
* Added categories (wire, ip defrag, tcp rebuilt, app layer) to
  PerfMon.  Also added atexitonly option to dump stats for entire life
  of snort. Thanks Steve Sturges.
* Fixed telnet decoder bug when ignoring Sub-negotiation end command.
  Thanks Steve Sturges.

add the pdfs back to DISTFILECLEAN

add the pdfs back to DISTFILECLEAN

* remove old faq.  PDF faq only now...

remove txt faq

* start of the removing of the BAD BAD JUJU

yes, we are now moving the FAQ to LaTeX.  Soon, we will start updating the FAQ
again. :P

* Adding Response2

* sync 2.3 code

* sync fixes from stable into head.

* pdf addition

* Makefile fix for README.event_queue

* Include README.asn1

* Bringing STABLE up to 2.1.3 RC1

Bringing STABLE up to Snort v2.1.2

* Fixed conversation parsing faults so users can operate this preprocessor
* Detect non-rfc standard chunk encodings (thanks H.D. Moore).  Detect
  abnormal HTTP requests with newlines, spaces, etc. before the request
  method (thanks, Kanatoko <anvil@jumperz.net>).
* Fix invalid ptr reference that occurred on Fedora.  Thanks to
  Owen_Crow@bmc.com for posting details to the list.  This should also
  help reduce any false positive 'U Decoding' alerts.
* Fix possible condition where request pipeline URL gets inspected, but
  the rest of a packet doesn't.  Thanks jh@sourcefire.com for finding
  this condition.
* Fix negative stats output on snort exit or SIGUSR1.  Thanks to
  Owen_Crow@bmc.com and others.

2004-03-09 mfr <roesch@sourcefire.com>
    * src/parser.c:
      Added FatalError() in ProcessIP if closing IP-list '[' isn't found

    * src/util.c:
      Revamped DropStats() function to use screen real estate more efficiently

    * src/event_wrapper.c:
      QueueEvent checks to see if we're in MODE_IDS before queuing events and
      ClearEventQueue() checks to make sure that the event_list has been
      initialized.

    * src/sfutil/acsmx2.c:
      Fixed _toupper/_tolower calls on non-Win32 machines.

    * src/sfutil/acsmx2.c:
      Fixed acsmx.h call to acsmx2.h.

    * doc/Makefile.am:
      Mark snort_manual.pdf for cleanup too.

* Syncing SNORT_2_1 wtih RC1 updates. Hooray!

* Added flowbits

* 2.1.1-RC1

* bring Makefile.am foo up to reality (bunch of missing files)

* cleanup ourselves during make distclean phase

* rename the manual to snort_manual, so building it can be done directly

* Major add/commit of 2.1 feature set...

  Will do a tag and then remove the "moved" files

* Added Thresholding and Suppression features (Marc Norton/Sourcefire)
* Fixed TCP RST processing bug found (Shai Rubin)
* Cleanup of spp_arpspoof (Jeff Nathan)
* Cleanup of win32 version including proper Event Log support (Chris Reid)
* Munged data fixes for stream4 (Chris Green)

* snort 2.0.1
  - see change log for details

* updates from jeff
* add doc/signatures to official tarball

* hint at lowmem option when we fatalerror the mwm pattern matcher
* allow the doc/Makefile.am to work with older automakes

* documentation updates

* rc1 -- dear god that took a long time.
  see snort-users for annouce
  changelog for details

* changing to use .SNMP :-)

* src/output-plugins/spo_SnmpTrap.c:
* src/output-plugins/spo_alert_smb.c:
* src/detections-plugins/sp_react.c:
    - fixes for new SigInfo system

* src/output-plugins/spo_idmef.c:
* src/output-plugins/spo_idmef.h:
* doc/README.IDMEF:
* src/plugbase.c:
* src/plugin_enum.h:
    - remove IDMEF instead of leaving it in a broken state

* start work on cleaning up the output API

* src/parser.c :
    Add support for "special" output plugins

* src/output-plugins/spo_unified.h :
* src/output-plugins/spo_unified.c :
    Initial work towards a true unified output.

* all unstable/orphaned/unmaintained/deprecated code is getting the axe
  before we proceed to 2.0