Snort 2.0.1

Tools
  • fix host endianess problem in udp decoder
  • vlan decoding fixes from Michael Pomraning
  • add tcp state checking to httpflow
  • ignoring bad checksums throughout snort if checksumming is turned on
  • config disable_ttcp_alerts is now also config disable_tcpopt_ttcp_alerts
  • better initialization handling of low memory conditions pointing to the low memory search engine
  • byte_jump / byte_test 2 byte cases handled and unified
  • correctly assign port numbers on tcpoption events
  • pass rule logic changed to "win" in specific multiple event cases
  • named interface support for win32 from the winpcap folks
  • spp_bo now also will work with log-only output plugins
  • added window detection plugin documentation to manual
  • lots of new rules and tons of rule documentation