Snort 2.2.0 Final Released


http://www.snort.org/

・ Updated database schema diagram from Chris Reid.
Schema can be found in ./doc/snort_schema_v106.pdf

・ Added --include-pcre* configuration option to help
cross compiling. Thanks Erik de Castro Lopo.

・ Fixed thresholding/suppression issue with queuing
multiple events per packet. Thanks Andreas Ostling.

・ When a rebuilt stream causes an alert, log out the
original packets instead of the rebuilt packet. Thanks
sekure@gmail.com for the report.

・ Turned off http_inspect alerts that were causing false
positives in the preset webserver profiles
(Thanks Dan Roelker).

・ Turn off encoding alerts in HTTP parameter field. The
parameter field is still normalized, it just doesn't
alert. This helps reduce alerts that are generated from
complex parameter queries
(Thanks Dan Roelker).

・ Fixed memory leak in "fast" output. Thanks for your
bug report sekure@gmail.com.

・ Clear error code which under Windows was causing a
subsequent false failure in parsing threshold rules. (Thanks to Rich Adamson)