Pete,
So still in Beta right?
Not being a beta tester I'll patiently wait till you go Golden Master.
Just wanted to make sure this was not the GM version....
On Oct 17, 2007, at 3:57 PM, Pete McNeil wrote:
Hello Sniffer folks,
Please find the latest SNF V2-9 distribution files here:
http://kb.armresearch.com/index.php?
title=Message_Sniffer.GettingStarted.Distributions#NEW_SNF_V2-9_Wide_B
eta
If you are running a previous version of SNF V2-9, please upgrade as
soon as possible.
The newest version includes some bug fixes. From the change log:
20071017 - SNF2-9b1.5.exe
Added a missing #include directive to the networking.hpp file. The
missing #include was not a factor on Linux and Windows systems but
caused compiler errors on BSD systems.
Corrected a bug in the GBUdb White Range code where any message with a
white range source IP was being forced to the white result code. The
engine now (correctly) only forces the result and records the event
when
a black pattern rule was matched and the White Range IP causes that
scan result to be overturned. If the scan result was not a black
pattern
match then the original scan result is allowed to pass through.
Corrected a bug in the Header Analysis filter chain module that would
cause the first header in the message to be ignored in some cases.
Corrected an XML log format problem so that <s/> elements are
correctly
open ended <s ....> or closed (empty) <s..../> according to whether
they
have subordinate elements.
Adjusted the GBUdb header info format. The order of the Confidence
figure and Probabilty figure is now the same as in the XML log files
(C then P). The confidence and probability figures are now preceeded
with c= and p= respectively so that it's easy to tell which is which.
Thanks!
_M
--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <sniffer-
[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
Regards,
Steve Guluk
SGDesign
(949) 661-9333
ICQ: 7230769
