The OISF development team is proud to announce Suricata 2.1beta3. This is the third beta release for the upcoming 2.1 version. It should be considered a development snapshot for the 2.1 branch.
Download
Get the new release here: http://www.openinfosecfoundation.org/download/suricata-2.1beta3.tar.gz
New Features
- Feature #1309: Lua support for Stats output
- Feature #1310: Modbus parsing and matching
Improvements
- Optimization #1339: flow timeout optimization
- Optimization #1371: mpm optimization
- Feature #1317: Lua: Indicator for end of flow
- Feature #1333: unix-socket: allow (easier) non-root usage
- Feature #1261: Request for Additional Lua Capabilities
Bugs
- Bug #977: WARNING on empty rules file is fatal (should not be)
- Bug #1184: pfring: cppcheck warnings
- Bug #1321: Flow memuse bookkeeping error
- Bug #1327: pcre pkt/flowvar capture broken for non-relative matches (master)
- Bug #1332: cppcheck: ioctl
- Bug #1336: modbus: CID 1257762: Logically dead code (DEADCODE)
- Bug #1351: output-json: duplicate logging (2.1.x)
- Bug #1354: coredumps on quitting on OpenBSD
- Bug #1355: Bus error when reading pcap-file on OpenBSD
- Bug #1363: Suricata does not compile on OS X/Clang due to redefinition of string functions (2.1.x)
- Bug #1365: evasion issues (2.1.x)
Special thanks
We’d like to thank the following people and corporations for their contributions and feedback:
- Ken Steele — Tilera/EZchip
- David Diallo
- Duarte Silva
- Giuseppe Longo
- Jason Ish
- Travis Green — Emerging Threats
Known issues & missing features
In a beta release like this things may not be as polished yet. So please handle with care. That said, if you encounter issues, please let us know! As always, we are doing our best to make you aware of continuing development and items within the engine that are not yet complete or optimal. With this in mind, please notice the list we have included of known items we are working on. See issues for an up to date list and to report new issues. See Known_issues for a discussion and time line for the major issues.
About Suricata
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF, its supporting vendors and the community.