Re: [snort] Re: Snort 1.5

["The Roesch's" <roesch@clark.net>]

Feel free to commit it, but there's probably going to be a new release (1.5.1,
maybe I'll call it 1.6) in the next week or so.  New stuff will include:
* Token Ring support
* FDDI support
* A few bug fixes
* Active response (automatic connection shootdown/termination)
* Man page (thanks Ian!)

Possibly by next week:
* Output/alerting plugins
* Statistics proprocesser (ala ntop)

Am I forgetting anything guys?  I'd like to look at Fyodor's IAP toy a little
more closely too.  Does it really want you to escape encode the packet
contents?  That could be a pain in the heat of an attack.  Looks like it might
be another job for the "unsock" alerter. :)

   -Marty

--
Martin & Anna Roesch
roesch@clark.net
http://www.clark.net/~roesch