Update: Snort 2.9.3.1!

Wubi · August 11, 2012

Oink time guys! Snort was updated a few days ago! We now have the latest release - Snort version 2.9.3.1! Our old post regarding Snort can be found here. Had we not been busy and posted it today, it would have been TWO Snort releases in the last month!

“Snort is an open source network intrusion prevention system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.”

Official Snort 2.9.3.1 release notes:

Corrected check for TCP RST flags to prevent sending resets to reset packets with inline and active response.
Update hashing for internal storage of rule options for 64bit platforms when checking uniqueness to remove duplicate copies in memory.
Address some small memory leaks from parsing snort.conf.
src/build.h: Updated build number to 40
src/sfutil/acsmx2.c: Release memory during return.
src/dynamic-preprocessors/sip/sip_config.c: Free method struct when method->methodName is NULL.
src/: detection-plugins/detection_options.c, detection-plugins/sp_byte_check.c, detection-plugins/sp_byte_extract.c, detection-plugins/sp_byte_jump.c, dynamic-plugins/sp_dynamic.c, dynamic-plugins/sp_preprocopt.c: Fix constant expression in hashing routines for 64bit platforms.
src/dynamic-preprocessors/dcerpc2/dce2_smb.c: Fix Samba chained OpenAndX -> Write command handling.
src/active.c: Check for TCP RST flag regardless of other flags to block resetting resets.
src/: active.c, decode.c, detection-plugins/sp_pcre.c, dynamic-plugins/sf_convert_dynamic.c, dynamic-plugins/sf_dynamic_plugins.c, dynamic-plugins/sf_dynamic_preprocessor.h,
dynamic-plugins/sp_dynamic.c, dynamic-preprocessors/dnp3/dnp3_map.c, dynamic-preprocessors/reputation/reputation_config.c, dynamic-preprocessors/sdf/spp_sdf.c, dynamic-preprocessors/sip/sip_config.c, dynamic-preprocessors/sip/sip_roptions.c, dynamic-preprocessors/smtp/spp_smtp.c, output-plugins/spo_alert_unixsock.c, preprocessors/spp_httpinspect.c, preprocessors/spp_perfmonitor.c, preprocessors/HttpInspect/client/hi_client.c, preprocessors/HttpInspect/server/hi_server.c, sfutil/bnfa_search.c, sfutil/sf_iph.c, target-based/sf_attribute_table_parser.l: Parse time memory cleanup
src/dynamic-preprocessors/dcerpc2/dce2_utils.h: Fixed issue on big endian systems where behaviour was incorrect.