更新:suricata 1.1rc1
发布:wpulog | 发布时间: 2011年11月6日 The Suricata Engine是一个开源的下一代入侵检测与防护引擎。旧版本的一些介绍参见这里:http://www.pulog.org/tools/542/ids-Suricata/。Suricata Engine和the HTP Library在GPLv2许可下使用。The HTP Library是一个HTTP的标准化和解析工具,它能够为Suricata Engine提供先进的HTTP流处理功能。目前,Suricata 更新至1.1rc1版,新版主要改变如下:
New features:
* extended HTTP request logging for use with (among other things) http_agent for Sguil (#38)
* AF_PACKET report drop stats on shutdown (#325)
* new counters in stats.log for flow and stream engines (#348)
Improvements:
* SMTP parsing code support for BDAT command (#347)
* HTTP URI normalization no longer converts to lowercase (#362)
* AF_PACKET works with privileges dropping now (#361)
* Prelude output for state matches (#264, #355)
Under the hood:
* update of the pattern matching code that should improve accuracy
* rule parser was made more strict (#295, #312)
Notable Fixes & Changes:
* multiple event suppressions for the same SID was fixed (#366)
* several accuracy fixes
* removal of the unified1 output plugins (#353)
工具下载:http://www.openinfosecfoundation.org/download/suricata-1.1rc1.tar.gz
发表评论
◎欢迎参与讨论,请在这里发表您的看法、交流您的观点。



