Changelog for snort-2.9.8.3-1.fc23.i686.rpm :

* Tue Apr 26 2016 Lawrence R. Rogers 2.9.8.3-1- Release 2.9.8.3-1 2016-04-26 Rahul Burman Snort 2.9.8.3
* src/build.h: updating build number to 383
* configure.in, src/preprocessors/HttpInspect/server/hi_server.c: Modified Http header parsing of multiline content-encoding header.
* src/preprocessors/: snort_httpinspect.c, HttpInspect/server/hi_server.c: Fixed an issue where file position pointer was incorrectly set for HTTP response containing chunked and gzip data.
* src/preprocessors/Stream6/: snort_stream_tcp.c Added sanity check to TCP trimming in out-of-order FIN case.
* src/parser.c: Disabled port groups that are not useful unless adapative profiling is enabled.
* src/: dynamic-preprocessors/sdf/spp_sdf.c, obfuscation.c: Fixed an issue of incorrect masking of sensitive data. 2016-03-18 Gaurav Nagare Snort 2.9.8.2
* src/build.h: updating build number to 335
* src/dynamic-plugins/: sf_engine/examples/detection_lib_meta.h, sf_dynamic_meta.h: Updated detection API version to 2.6 to use the latest snort SO rules.
* src/: dynamic-preprocessors/sdf/spp_sdf.c, preprocessors/Stream6/snort_stream_tcp.c, obfuscation.c: Fixed several issues with SDF and obfuscation.
* src/: profiler.h, preprocessors/perf_indicators.c, preprocessors/perf_indicators.h: Resolved snort build issue with \"--disable-perfprofiling\" configure option.
* src/: decode.c, decode.h: Added Double VLAN tagging support.
* src/file-process/file_mime_process.c: Enhanced mime parsing by adding support for detecting files after unknown headers and no headers.
* src/preprocessors/HttpInspect/server/hi_server.c: Fixed memory leak.
* src/preprocessors/HttpInspect/utils/hi_paf.c: Fixed issue with gzip decompression. If the server response specifies Content-Encoding as GZIP, but no Content-Length field for HTTP version 1.0.
* doc/snort_manual.pdf, src/preprocessors/snort_httpinspect.c, src/preprocessors/spp_httpinspect.c: Fixed Snort memory leak in parsing HTTP xff options.
* src/preprocessors/spp_httpinspect.c: Fixed Coverity issues.
* src/preprocessors/: snort_httpinspect.c, snort_httpinspect.h, HttpInspect/include/hi_paf.h, HttpInspect/server/hi_server.c, HttpInspect/utils/hi_paf.c: Improved End of Header(EOH) identification for response header spanning multiple reassembled packets.
* src/preprocessors/: HttpInspect/utils/hi_paf.c, Stream6/snort_stream_tcp.c, Stream6/stream_paf.c: Improved packet reassembly for HTTP, added code to purge segment correctly when PAF decides to ignore packet upon reaching paf_max.
* src/fpdetect.c: Fixed to use outer header callback functions when checking IP rule against outer IPs and inner header callback when checking against inner IPs.
* src/preprocessors/spp_httpinspect.c: Fixed an issue where http_inspect current and default config had different file depth.
* src/dynamic-preprocessors/appid/detector_plugins/detector_dns.c: Handled malformed DNS host in AppId.
* src/file-process/: file_api.h, file_segment_process.c, file_service.c: Prevented access to file contexts which are pruned when memcap is reached.
* src/dynamic-preprocessors/appid/: app_forecast.c, app_forecast.h, flow.h, fw_appid.c, spp_appid.c, thirdparty_appid_types.h: Performance improvements to AppID.
* src/dynamic-preprocessors/appid/luaDetectorApi.c: Created a future-flow API for lua detector. Exposed DNS API to lua detector.
* src/dynamic-preprocessors/ftptelnet/pp_ftp.c: Fixed an issue where unexpected SSL negotiation starts for FTP with explicit SSL.
* src/preprocessors/HttpInspect/utils/hi_paf.c: Updated HTTP PAF to accept all tokens between method and version string in request URI.
* src/preprocessors/HttpInspect/files/file_decomp_SWF.c: Fixed Flash LZMA decompression issue.
* src/preprocessors/spp_httpinspect.c: Fixed file_depth intialization issue during Snort reload.
* Tue Nov 17 2015 Lawrence R. Rogers 2.9.8.0-1- Release 2.9.8.0-1 [
*] New additions
* SMBv2/SMBv3 support for file inspection.
* Port override for metadata service in IPS rules.
* AppID Lua detector performance profiling.
* Perfmon dumps stats at fixed intervals from absolute time.
* New preprocessor alert (120:18) to detect SSH tunneling over HTTP
* New config option |disable_replace| to disable replace rule option.
* New Stream configuration |log_asymmetric_traffic| to control logging to syslog.
* New shell script in tools to create simple Lua detectors for AppID. [
*] Improvements
* sfip_t refactored to use struct in6_addr for all ip addresses.
* Post-detection callback for preprocessors.
* AppID support for multiple server/client detectors evaluating on same flow.
* AppID API for DNS packets.
* Memory optimizations throughout.
* Support sending UDP active responses.
* Fix perfmon tracking of pruned packets.
* Stability improvements for AppID.
* Stability improvements for Stream6 preprocessor.
* Added improved support to block malware in FTP preprocessor.
* Added support to differentiate between active and passive FTP connections.
* Improvements done in Stream6 preprocessor to avoid having duplicate packets in the DAQ retry queue.
* Resolved an issue where reputation config incorrectly displayed \'blacklist\' in priority field even though \'whitelist\' option was configured.
* Added support for multiple expected sessions created per packet
* Active response now supports MPLS
* Thu Aug 13 2015 Lawrence R. Rogers 2.9.7.6-1- Release 2.9.7.6-1
* src/build.h: updating build number to 285
* src/dynamic-preprocessors/reputation/reputation_config.c: Fixed unexpected behaviour in reputation config where blacklist is displayed in priority field even though whitelist option is set [reported by Mike Cox].
* src/preprocessors/Stream6/snort_stream_tcp.c: Fixed issue where XFF/ExtraData is not always logged when \'drop\' rules trigger [reported by Mike Cox]. Fixed issue in TCP session deletion when being called from Stream5 HA.
* src/: active.h, file-process/file_service.c: ACTIVE_DROP is changed to ACTIVE_FORCE_DROP when file_verdict is pending.
* src/dynamic-preprocessors/appid/fw_appid.c: Fixed issue where openappid does not provide the Content-Type field for use with CHPAddAction.
* doc/snort_manual.tex: Corrected errors in snort_manual.tex [reported by Gabriel Corre].
* preproc_rules/preprocessor.rules src/preprocessors/: session_api.h, snort_httpinspect.c, HttpInspect/event_output/hi_eo_log.c, HttpInspect/include/hi_eo_events.h Stream6/snort_stream_tcp.c: Enhancement done to detect \'SSH tunneling over HTTP\'.
* src/sfutil/sfportobject.c: Fixed Memory leaks [reported by Bill Parker].
* doc/snort_manual.tex: Corrected the information about unified2 record structure [reported by Avery Rozar].
* etc/snort.conf, src/preprocessors/snort_httpinspect.c, src/preprocessors/snort_httpinspect.h, src/preprocessors/HttpInspect/client/hi_client.c, src/preprocessors/HttpInspect/server/hi_server.c, src/preprocessors/Stream6/stream_paf.c: Fixed issue where original client IP in intrusion event is incorrectly populated with XFF of the last GET request.
* src/preprocessors/: snort_httpinspect.c, snort_httpinspect.h, HttpInspect/server/hi_server.c, snort_httpinspect.c, snort_httpinspect.h, HttpInspect/server/hi_server.c: Http unlimited decompression will now decompress the entire stream.
* src/decode.c: Added a check so that min_ttl decoder do not drop packet in alert mode.
* etc/snort.conf, src/preprocessors/snort_httpinspect.c, src/preprocessors/snort_httpinspect.h, src/preprocessors/HttpInspect/client/hi_client.c, src/preprocessors/HttpInspect/server/hi_server.c Fixed issue where original client IP in intrusion event is incorrectly populated with XFF of the last GET request.
* Wed Jul 01 2015 Lawrence R. Rogers 2.9.7.5-1- Release 2.9.7.5-1
* src/build.h: updating build number to 262
* src/preprocessors/Stream6/snort_stream_tcp.c: Improved handling of asymmetric traffic
* src/active.c: Active responses no longer set the FIN flag on the last segment transmitted
* src/dynamic-preprocessors/appid/luaDetectorApi.c: Added sanity checks to client api
* doc/snort_manual.pdf, src/: dynamic-preprocessors/dcerpc2/dce2_paf.c, dynamic-preprocessors/dnp3/dnp3_paf.c, dynamic-preprocessors/ftptelnet/snort_ftptelnet.c, dynamic-preprocessors/imap/imap_paf.c, dynamic-preprocessors/pop/pop_paf.c, dynamic-preprocessors/sip/sip_paf.c, dynamic-preprocessors/smtp/smtp_paf.c, preprocessors/session_api.h, preprocessors/spp_stream6.c, preprocessors/stream_api.h, preprocessors/HttpInspect/utils/hi_paf.c, preprocessors/Session/session_common.h, preprocessors/Stream6/snort_stream_tcp.c, preprocessors/Stream6/snort_stream_tcp.h, preprocessors/Stream6/stream_paf.c, preprocessors/Stream6/stream_paf.h: Multiple PAF clients can Read/Write to the same user data
* src/: file-process/file_api.h, file-process/file_mail_common.h, file-process/file_mime_process.c, sfutil/sf_email_attach_decode.c, sfutil/sf_email_attach_decode.h: Fixed filename parsing from Mime body for UUencoded MIME
* src/preprocessors/perf-base.c, src/preprocessors/Stream6/snort_stream_tcp.c: Prunes triggered by timeouts are now accounted by perfmonitor.
* src/preprocessors/spp_session.c: Log warning instead of Fatal Error if a stream5_global config is in a non-default policy
* src/detection-plugins/sp_base64_decode.c: Removed unused checks
* src/snort.c: Improved reliability of configuration reloads
* src/preprocessors/snort_httpinspect.c: Fixed issue in http file processing where SHAs may not always be correct.
* doc/snort_manual.pdf, src/sfutil/sf_email_attach_decode.c: Fixed handling new line chars in QP encoding
* src/preprocessors/snort_httpinspect.c: Fixed inconsistent behavior when configuring \"max_gzip_mem -1\"
* Wed Apr 22 2015 Lawrence R. Rogers 2.9.7.3-1- Release 2.9.7.3-1
* src/build.h: updating build number to 217
* src/: decode.h, detection-plugins/sp_clientserver.c, dynamic-plugins/sf_engine/sf_snort_packet.h, dynamic-plugins/sf_engine/sf_snort_plugin_api.c, dynamic-preprocessors/dcerpc2/dce2_session.h, dynamic-preprocessors/sdf/spp_sdf.c, preprocessors/HttpInspect/server/hi_server.c, preprocessors/Stream6/snort_stream_tcp.c, preprocessors/snort_httpinspect.c, preprocessors/spp_normalize.c: Added mode safety checks to normalization. Fixed an issue in PAF where the start of the PDU after flushing was not being set correctly in some case. Improved Stream reassembly of HTTPS sessions
* src/dynamic-preprocessors/ftptelnet/snort_ftptelnet.c: Stability improvements for ftp_telnet preprocessor
* doc/snort_manual.pdf, doc/snort_manual.tex, src/detection-plugins/sp_base64_decode.c, src/detection-plugins/sp_base64_decode.h, src/detection-plugins/sp_file_data.c: Improved performance for file preprocessor Documentation changes
* src/dynamic-preprocessors/appid/: service_plugins/service_base.c, service_state.c: Various OpenAppId improvements
* configure.in: Fixed issue with configure script handling of -Werror compiler flags
* src/decode.c: Improved decoding of IPv6 extensions
* src/detection-plugins/detection_options.c: Fixed an issue where the protected_content rule option was not backtracking correctly in some cases
* src/snort.c: Fixed snort handling of PID files
* tools/: u2openappid/u2openappid.c, u2spewfoo/u2spewfoo.c: Fixed usage info.
* src/dynamic-preprocessors/sip/: Makefile.am, sf_sip.dsp, sip_dialog.c, sip_parser.c, spp_sip.c: Added PAF support for TCP traffic
* src/: log_text.c, log_text.h, output-plugins/spo_alert_fast.c, output-plugins/spo_alert_full.c: Extended support for OpenAppId logging to cmg and console output loggers
* src/dynamic-preprocessors/appid/service_plugins/service_ssl.c: Improved SSLv3 handling for OpenAppId
* Mon Mar 23 2015 Lawrence R. Rogers 2.9.7.2-2- Release 2.9.7.2-2 Added the following tools to /usr/bin u2openappid u2streamer snort_dump_packets_control
* Wed Dec 24 2014 Lawrence R. Rogers 2.9.7.2-1- Release 2.9.7.2-1 Snort 2.9.7.2
* src/build.h: updating build number to 177
* src/preprocessors/Stream6/snort_stream_tcp.c: Documentation: Fixed issue in which TCP trim normalization would occur when it was not necessary.
* src/decode.c, src/encode.c: Added support for Cisco FabricPath decoding/encoding. Ensure flow_id is copied into the DAQ_PktHdr_t.
* src/snort.h, src/sfutil/sfrt.c, src/sfutil/sfrt.h src/target-based/sftarget_reader.c: Moved ntohl conversion inside of the sfrt api for both IPv4 and IPv6.
* src/target-based/sftarget_protocol_reference.c Lookup application protocol id only after the session is established. Assign application protocol id to the session when using host attribute table.
* src/util.c: Changes for suppressing configuration logging.
* src/file-process/file_service.c: Assign the file config to a file context prior to checking if HTTP continuation.
* Fri Oct 10 2014 Lawrence R. Rogers 2.9.7.0-1- Release 2.9.7.0-1 See https://github.com/jasonish/snort/blob/master/ChangeLog for the list of changes.
* Wed Jul 09 2014 Lawrence R. Rogers 2.9.6.2-1- Release 2.9.6.2-1
* src/build.h: updating build number to 77
* src/: encode.c, encode.h : Fixed handling of ICMPv6 traffic.
* src/preprocessors/Stream5/snort_stream5_tcp.c : Fixed inline stream reassembly during file processing.
* src/preprocessors/spp_perfmonitor.c : Fixed race condition in performance monitor.
* src/preprocessors/: snort_httpinspect.c, HttpInspect/client/hi_client.c, HttpInspect/include/hi_client.h, HttpInspect/include/hi_ui_config.h, HttpInspect/user_interface/hi_ui_config.c : Added the ability to specify additional custom \'x-forwarder-for\' http field names. A new http inspection configuration element is used to specify a set of field names and their respective precedence order.
* src/preprocessors/Stream5/snort_stream5_session.c : Add cache flow timeout for ip.
* Thu Jul 03 2014 Dilbagh Chahal 2.9.7- added --with openappid command line option
* Wed Apr 23 2014 Lawrence R. Rogers 2.9.6.1-1- Release 2.9.6.1-1 See http://www.snort.org/downloads/2895 for a list of changes.
* Mon Dec 30 2013 Lawrence R. Rogers 2.9.6.0-1- Release 2.9.6.0-1 See http://www.snort.org/downloads/2771 for a list of changes.
* Tue Sep 03 2013 Lawrence R. Rogers 2.9.5.5-1- Release 2.9.5.5-1 See http://www.snort.org/downloads/2539 for a list of changes.
* Wed Jul 03 2013 Lawrence R. Rogers 2.9.5.3-1- Release 2.9.5.3-1 See http://www.snort.org/downloads/2469 for a list of changes.
* Thu Apr 18 2013 Lawrence R. Rogers 2.9.4.6-1- Release 2.9.4.6-1
* src/build.h: updating build number to 73
* doc/README.counts, doc/snort_manual.pdf, doc/snort_manual.tex, src/decode.c, src/parser.c, src/snort.h: Added config tunnel_verdicts and tunnel bypass for whitelist and blacklist verdicts for 6in4 or 4in6 encapsulated traffic.
* src/preprocessors/spp_frag3.c: Don\'t update IP options length and count in frag3 after allocating option buffer when receiving duplicate 0 offset fragments with IP options.
* Wed Apr 03 2013 Lawrence R. Rogers 2.9.4.5-1- Release 2.9.4.5-1
* src/build.h: updating build number to 71
* src/preprocessors/Stream5/snort_stream5_tcp.c: prevent pruning when dup\'ing a seglist node to avoid broken flushed packets
* src/detection-plugins/detection_options.c: recursively search patterns within the HTTP uri buffers until the buffer ends.
* src/preprocessors/HttpInspect/: client/hi_client.c, client/hi_client_norm.c, include/hi_client.h: Remove proxy information from the normalized URI buffer. Thanks to L0rd Ch0de1m0rt for reporting the issue.
* src/: control/sfcontrol.c, preprocessors/Stream5/snort_stream5_tcp.c: fix logging of unified2 packet data when alerting on a packet containing multiple HTTP PDUs
* Tue Feb 19 2013 Lawrence R. Rogers 2.9.4.1- See http://www.snort.org/downloads/2209 for a list of changes.
* Wed May 09 2012 Todd Wease 2.9.3- Removed --enable-decoder-preprocessor-rules since this is now the default- behavior and not configurable.
* Fri Apr 27 2012 Russ Combs 2.9.3- Removed schemas related foo.
* Fri Mar 30 2012 Steve Sturges 2.9.3- Removed --with flexresp, --with inline, database output specific builds.
* Wed Apr 02 2008 Steve Sturges 2.8.3- Added --enable-targetbased --enable-decoder-preprocessor-rules by default.
* Wed Apr 02 2008 Steve Sturges 2.8.1- Added ssl
* Fri Aug 03 2007 Russ Combs 2.8.0- Removed README.build_rpms from description- Removed 2nd \"doc/\" component from doc install path- Changed doc file attributes to mode 0644- Moved schemas from doc to data dir- Added installation of schemas/create_
*- Removed redundant \'/\'s from mkdir path specs- Eliminated find warning by moving -maxdepth ahead of -type- Fixed \"warning: File listed twice: ...\" for libsf so files
* Wed Feb 28 2007 Steve Sturges 2.7.0- Removed smp flags to make command
* Wed Jan 17 2007 Steve Sturges 2.7.0- Updated version to 2.7.0
* Tue Nov 07 2006 Steve Sturges 2.6.0- Updated version to 2.6.1
* Thu Aug 31 2006 Steve Sturges 2.6.0- Added dynamic DNS preprocessor
* Wed May 24 2006 Steve Sturges 2.6.0- Updated to version 2.6.0
* Fri Apr 14 2006 Justin Heath 2.6.0RC1- Added conf fix for dynamic engine paths- Added conf fix for dynamic preprocessors paths- Added dynamic attributes in file list- Added epoch to Requires for postgres, oracle and unixodbc- Removed rule/signature references as these are not distributed with this tarball
* Thu Apr 13 2006 Steve Sturges 2.6.0RC1- Updated to 2.6.0RC1- Added targets for dynamic engine- Added targets for dynamic preprocessors
* Sun Dec 11 2005 Vlatko Kosturjak 2.6.0RC1- Added unixODBC support
* Sun Oct 16 2005 Marc Norton 2.4.3- Fixed buffer overflow in bo preprocessor- Added alert for potential buffer overflow attack against snort- Added noalert and drop options for all bo preprocessor events
* Fri Jul 22 2005 Martin Roesch 2.4.0- Modified to reflect rules not being distributed with Snort distros
* Tue May 03 2005 Daniel Wittenberg 2.4.0RC1- Removed more Fedora-specific options - Renamed spec from snort.org.spec to snort.spec- Removed CHANGES.rpms file since we have a changelog here no sense- in maintaining two of them- Replaced a ton of program names with macros to make more portable- Removed all references to rpmsAATTsnort.org since it just gets used- for spam so the address is being nuked- Updates to inline support for 2.4.0 Release and fedora changes- Replaced initDir with system-provided _initdir macro for more portability- Added Epoch back in so that way upgrades will work correctly. It will be- removed at some point breaking upgrades for that version
* Tue Mar 29 2005 Jeremy Hewlett - Added Inline capability to RPMs. Thanks Matt Brannigan- for helping with the RPM foo.
* Fri Mar 25 2005 Jeremy Hewlett - Add schemas to rpm distro- Add sharedscripts to logrotate- Remove installing unnecessary contrib remnants
* Sun Mar 13 2005 Daniel Wittenberg - Updates to conform to new Fedora Packageing guidelines
* Wed Dec 01 2004 Jeff Ball - Added initDir and noShell for more building compatibility.
* Wed Nov 17 2004 Brian Caswell 2.3.0RC1- handle the moving of RPM and the axing of contrib
* Thu Jun 03 2004 JP Vossen - Bugfix for \'snortd condrestart\' redirect to /dev/null in %postun
* Wed May 12 2004 JP Vossen - Added code for cAos autobuilder- Added buildrequires and requires for libpcap
* Thu May 06 2004 Daniel Wittenberg - Added JP\'s stats option to the standard rc script
* Sat Mar 06 2004 JP Vossen - Added gen-msg.map and sid-msg.map to /etc/snort
* Sat Feb 07 2004 Daniel Wittenberg - Applied postun/snortd patches from Nick Urbanik * Mon Dec 22 2003 Daniel Wittenberg - Added threshold.conf, unicode.map and generators to /etc/snort thanks- to notes from Nick Urbanik
* Sat Dec 20 2003 Daniel Wittenberg 2.1.0-2- Added condrestart option to rc script from patch by- Nick Urbanik - Fixed condrestart bug for installs- Fixed gzip bug that happens on some builds
* Wed Dec 10 2003 JP Vossen - Removed flexresp from plain rpm package description- Added a line about pcre to the package description- Trivial tweaks to package description
* Sat Nov 29 2003 Daniel Wittenberg 2.1.0-1- Applied some updates from rh0212msAATTarcor.de- Applied some updates from Torsten Schuetze - Applied some updates from Nick Urbanik - Fixed ALERTMODE rc script error reported by DFarinoAATTStamps.com- Fixed CONF rc script error reported by ??- Gzip signature files to save some space- Added BuildRequires pcre-devel and Requires pcre- Re-did %post sections so the links are added and removed- correctly when you add/remove various packages
* Fri Nov 07 2003 Daniel WIttenberg - Updated snort.logrotate
* Thu Nov 06 2003 Daniel Wittenberg 2.0.4- Minor updates for 2.0.4
* Tue Nov 04 2003 Daniel Wittenberg 2.0.3- Updated for 2.0.3- Removed 2.0.2 patch- Remove flexresp2 as it caused too many build problems and doesn\'t work- cleanly with 2.0.3 anyway- Minor documentation updated for 2.0.3
* Mon Oct 20 2003 Daniel Wittenberg 2.0.2-6- New release version- Changed /etc/rc.d/init.d to /etc/init.d for more compatibility
* Fri Oct 17 2003 Daniel Wittenberg - Changed as many hard-coded references to programs and paths to use- standard defined macros
* Fri Oct 10 2003 Daniel Wittenberg - Include SnortRulesDir in %files section- Added classification.config and reference.config in %files section- Minor cleanup of the for_fedora macro
* Sat Oct 04 2003 Dainel Wittenberg - Nuked post-install message as it caused too many problems- Changed default ruledir to /etc/snort/rules- Fixed problem with non-snort-plain symlinks getting created
* Fri Oct 03 2003 Dainel Wittenberg - Somehow the snort.logrotate cvs file got copied into the build tree- and the wrong file got pushed out- snort.logrotate wasn\'t included in the %files section, so added- it as a config(noreplace) file
* Thu Oct 02 2003 Dainel Wittenberg 2.0.2-5- Added --with fedora for building Fedora RPM\'s- Removed references to old snort config patch- Added noreplace option to /etc/rc.d/init.d/snortd just in case- Gzip the man page to save (a small tiny) amount of space and make it- more \"standard\"- Added version number to changelog entries to denote when packages were- released
* Wed Oct 01 2003 Dainel Wittenberg - Fixed permission problem with /etc/snort being 644- Added noreplace option to /etc/sysconfig/snort
* Fri Sep 26 2003 Daniel Wittenberg - Fixed incorrect Version string in cvs version of the spec- Added snort logrotate file- Removed |more from output as it confuses some package managers
* Tue Sep 23 2003 Daniel Wittenberg 2.0.2-4- Released 2.0.2-3 and then 2.0.2-4
* Sat Sep 20 2003 Daniel Wittenberg - Added --with flexresp2 build option
* Fri Sep 19 2003 Daniel Wittenberg 2.0.2-2- Gave into JP and changed version back to stable :)
* Fri Sep 19 2003 Daniel Wittenberg - Fixed problems in snortd with \"ALL\" interfaces working correctly- Removed history from individual files as they will get too big- and unreadable quickly
* Thu Sep 18 2003 Daniel Wittenberg 2.0.2-1- Updated for 2.0.2 and release 2.0.2-1
* Tue Aug 26 2003 JP Vossen - Added code to run autojunk.sh for CVS tarball builds
* Mon Aug 25 2003 JP Vossen - Added missing comments to changelog
* Wed Aug 20 2003 Daniel Wittenberg - Moved snortd and snortd.sysconfig to contrib/rpm- Changed contrib install to a cp -a so the build stops complaining
* Mon Aug 11 2003 JP Vossen - Removed the commented patch clutter and a TO DO note- Fussed with white space
* Sun Aug 10 2003 Daniel Wittenberg - Fixed a couple minor install complaints- userdel/groupdel added back into %postun- useradd/groupadd added to %pre
* Sat Aug 09 2003 JP Vossen - Doubled all percent signs in this changelog due to crazy RH9 RPM bug.- http://www.fedora.us/pipermail/fedora-devel/2003-June/001561.html- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=88620- Turn off rpm debug due to RH9 RPM issue- http://www.cs.helsinki.fi/linux/linux-kernel/2003-15/0763.html- Removed unnecessary SourceX: since they will be in the tarball
* Thu Aug 07 2003 JP Vossen - Changed perms from 755 to 644 for %{_mandir}/man8/snort.8
*
* Sun Aug 03 2003 JP Vossen - Removed the conf patch (again) as we moved the funcationality- Added sed to buildrequires and sed it to fix RULE_PATH- Removed Dan\'s SPEC code that made a default sysconfig/snort file.
* Sun Aug 03 2003 JP Vossen - Trivial changes and additions to documentation and references- Added --with flexresp option- Changed libnet buildrequires per Chris- Added docs and contrib back in, and moved sig docs out of doc.- Moved CSV and signature \'fixes\' into %install where they should have- been. Also fixed them.- Added Dan\'s new snortd and snort.sysconfig- Commented out alternate method of creating /etc/sysconfig/snort- Created %{OracleHome}- Added BuildRequires: findutils- Uncommented the patch and added the patch file
* Sat Jul 26 2003 Daniel Wittenberg - commented out the patch for now since it doesn\'t exist- if doing a new install echo \"INTERFACE=eth0\" > /etc/sysconfig/snort- changed --with-libpcap-includes=/usr/include/pcap to /usr/include since- that is where the libpcap-snort rpm Chris sent puts things- added missing \" at the end of the SNORT_BASE_CONFIG- minor change to the ./configure for plain so it actually works- during an rpm -e of snort do a rm -f to make it a little more quiet in- case of problems- massive re-write of multi-package build system- initial support for compiling with Oracle
* Sun Jul 20 2003 JP Vossen - Took over maintenance of Snort.org RPM releases just before v2.0.1- Various cleanup of SPEC file and changes to support building from tarball- Removed some old packages (like SNMP and Bloat), per Chris- First attempt at using --with option for multi-package build system- Added a patch to snort.conf for $RULE_PATH and default output plugins
* Wed Sep 25 2002 Chris Green - updated to 1.9.0
* Tue Nov 06 2001 Chris Green - merged in Hugo\'s changes- updated to 1.8.3- fixing symlinks on upgrades
* Tue Nov 06 2001 Hugo van der Kooij - added libpcap to the list as configure couldn\'t find it on RedHat 7.2- added several packages to the build requirements
* Fri Nov 02 2001 Chris Green - updated to 1.8.2-RELEASE- adding SQL defines- created tons of packages so that all popular snort configs are accounted for
* Sat Aug 18 2001 Chris Green - 1.8.1-RELEASE- cleaned up enough to release to general public
* Tue May 08 2001 Chris Green - moved to 1.8cvs- changed rules files- removed initial configuration
* Mon Nov 27 2000 Chris Green - removed strip- upgrade to cvs version- moved /var/snort/dev/null creation to install time
* Tue Nov 21 2000 Chris Green - changed to %{SnortPrefix}- upgrade to patch2
* Mon Jul 31 2000 Wim Vandersmissen - Integrated the -t (chroot) option and build a /home/snort chroot jail- Installs a statically linked/stripped snort- Updated /etc/rc.d/init.d/snortd to work with the chroot option
* Tue Jul 25 2000 Wim Vandersmissen - Added some checks to find out if we\'re upgrading or removing the package
* Sat Jul 22 2000 Wim Vandersmissen - Updated to version 1.6.3- Fixed the user/group stuff (moved to %post)- Added userdel/groupdel to %postun- Automagically adds the right IP, nameservers to /etc/snort/rules.base
* Sat Jul 08 2000 Dave Wreski - Updated to version 1.6.2- Removed references to xntpd- Fixed minor problems with snortd init script
* Fri Jul 07 2000 Dave Wreski - Updated to version 1.6.1- Added user/group snort
* Sat Jun 10 2000 Dave Wreski - Added snort init.d script (snortd)- Added Dave Dittrich\'s snort rules header file (ruiles.base)- Added Dave Dittrich\'s wget rules fetch script (check-snort)- Fixed permissions on /var/log/snort- Created /var/log/snort/archive for archival of snort logs- Added post/preun to add/remove snortd to/from rc?.d directories- Defined configuration files as %config
* Tue Mar 28 2000 William Stearns - Quick update to 1.6.- Sanity checks before doing rm-rf in install and clean
* Fri Dec 10 1999 Henri Gomez - 1.5-0 Initial RPM release