Snort mailing list archives

Re: Snort-2.9.9 ETA?


From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Fri, 18 Nov 2016 12:57:50 +0000

The RC is on snort.org/downloads<http://snort.org/downloads> under “Snort Development release”.


But yes, we’ll be releasing 2.9.9.0 in the next month or so.


--
Joel Esler | Talos: Manager | jesler () cisco com<mailto:jesler () cisco com>






On Nov 17, 2016, at 6:22 PM, Joshua Kinard <kumba () gentoo org<mailto:kumba () gentoo org>> wrote:

Out of curiosity, is Snort-2.9.9 due to be released in the near future?
Last I saw was the beta announcement back in July, but it looks like a RC
was rolled in mid-August, however I can't find any downloads on the main
snort.org<http://snort.org> site, nor any announcements of it.  Fossies has a copy of the RC
archive, but that's it.

Also, kinda of an irritation with the new "byte_math" keyword, but given
that the other three byte_* keywords take unnamed arguments, why was
byte_math written to use named arguments?

E.g., "byte_test" is:
byte_test:<bytes>,<oper>,<value>,<offset>[,optional args];

But "byte_math" is:
byte_math:bytes <bytes>,offset <offset>,oper <oper>,rvalue <rvalue>,result
<result>[,optional args];

Why couldn't it have been coded:
byte_math:<bytes>,<offset>,<oper>,<rvalue>,<result>[,optional args];?


Thanks,

--
Joshua Kinard
Gentoo/MIPS
kumba () gentoo org<mailto:kumba () gentoo org>
6144R/F5C6C943 2015-04-27
177C 1972 1FB8 F254 BAD0 3E72 5C63 F4E3 F5C6 C943

"The past tempts us, the present confuses us, the future frightens us.  And
our lives slip away, moment by moment, lost in that vast, terrible in-between."

--Emperor Turhan, Centauri Republic

------------------------------------------------------------------------------
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: