This is the master branch of nixpkgs, initially pulled from commit 8debf2f9a63d54ae4f28994290437ba54c681c7b The intent of this repo is to be merged onto nixpkgs master. This will also be of help for https://git.suyu.dev/BoomMicrophone/suyu-nix-test which I will need in order for development (it will also be helpful to know what to do for setting up the environment for the master server. Currently I am focusing on this so I can actually see what is still missing) This repo will be removed once the PR to the nixpkgs github goes through
Find a file
devhell 77c40224d2 snort: 2.9.7.0 -> 2.9.7.2
This includes a slight refactor.

2014-11-24 - Snort 2.9.7.2
[*] New additions
* Application Identification Preprocessor, when used in conjunction with
  open app ID detector content, that will identify application protocol,
  client, server, and web applications (including those using SSL) and
  include the info in Snort alert data. In addition, a new rule option
  keyword 'appid' that can be used to constrain Snort rules based on one
  or more applications that are identified for the connection.
  See README.appid for details.

* A new protected_content rule option that is used to match against a content
  that is hashed.  It can be used to obscure the full context of the rule from
  the administrator.

* Protocol Aware Flushing (PAF) improvements for SMTP, POP, and IMAP to
  more accurately process different portions of email messages and file
  attachments.

* Added ability to test normalization behavior without modifying network traffic.
  When configured using na_policy_mode:inline-test, statistics will be gathered
  on packet normalizations that would have occurred, allowing less disruptive
  testing of inline deployments.

* The HTTP Inspection preprocessor now has the ability to decompress
  DEFLATE and LZMA compressed flash content and DEFLATE compressed PDF
  content from http responses when configured with the new decompress_swf
  and decompress_pdf options. This enhancement can be used with existing rule
  options that already match against decompressed equivalents.

* Added improved XFF support to HttpInspect. It is now possible to specify custom
  HTTP headers to use in place of 'X-Fowarded-For'. In situations where traffic may
  contain multiple XFF-like headers, it is possible to specify which headers hold
  precedence.

* Added control socket command to dump packets.

* The Stream5 preprocessor functionality is now split between the new Session and Stream preprocessors.

* Added decoding capaiblity for Cisco FabricPath

[*] Improvements
* Update active response to allow for responses of 1500+ bytes that span
  multiple TCP packets.

* Check limits of multiple configurations to not exceed a maximum ID of 4095.

* Updated the error output of byte_test, byte_jump, byte_extract to
  including details on offending options for a given rule.

* Update build and install scripts to install preprocessor and engine libraries
  into user specified libdir.

* Improved performance of IP Reputation preprocessor.

* The control socket will now report success when reloading empty IP Reputation whitelists/blacklists.

* All TCP normalizations can now be enabled individually. See README.normalize for details on using
  the new options. For consistency with other options, the "urp" tcp normalization keyword now
  enables the normalization instead of disabling it.

* Lowered memory demand of Unicode -> ASCII mapping in HttpInspect.

* Updated profiler output to remove duplicate results when using multiple configurations.

* Improved performance of FTP reassembly.
2015-03-16 00:07:00 +00:00
doc doc: fix programlistin formatting 2015-02-15 18:29:52 +01:00
lib Added derivation for google ceres-solver optimization library for C++ 2015-03-12 16:04:04 -04:00
maintainers Travis: disable tarball creating check, because travis can't handle it 2015-03-04 15:28:09 +01:00
nixos Merge pull request #6771 from joachifm/apparmor-2.9 2015-03-15 14:16:24 -05:00
pkgs snort: 2.9.7.0 -> 2.9.7.2 2015-03-16 00:07:00 +00:00
.gitignore gitignore: pkgs/development/libraries/qt-5/*/tmp/ 2015-02-21 11:39:20 -06:00
.travis.yml Travis: chop build in install and build phases 2014-10-15 11:05:12 +02:00
.version release: 15.04 -> 15.05 2014-12-09 15:09:06 +01:00
COPYING
default.nix if we abort with too old Nix, hint docs 2015-01-21 21:41:40 +01:00
README.md add statuses to nixpkgs 2015-02-08 22:54:29 +03:00