Tuesday, November 21, 2006

Tools of the Trade - 2 Grams of Fiber per Serving!

1) Insecure.org has released Nmap 4.20RC1 - Changelog
  • Fixed (I hope) a bug related to Pcap capture on Mac OS X. Thanks to Christophe Thil for reporting the problem and to Kurt Grutzmacher and Diman Todorov for helping to track it down.
  • Integrated all of your OS detection submissions since ALPHA11. The DB has increased 27% to 189 signatures. Notable additions include the Apple Airport Express, Windows Vista RC1, OpenBSD 4.0, a Sony TiVo device, and tons of broadband routers, printers, switches, and Linux kernels. Keep those submissions coming!
  • Upgraded the included LibPCRE from version 6.4 to 6.7. Thanks to Jochen Voß (voss(a)seehuhn.de) for the suggestion (he found some bugs in 6.4)

2) On Nov 16th, Snort 2.6.1 was released. Snort 2.6.1 provides new functionality including the following:

  • New pattern matcher with a significantly reduced memory footprint
  • Introduction of stream5 for experimental use
  • Improvements to stream4, including UDP session tracking and optimizations for the reassembly buffer
  • Handling for reassembly of SMB fragmented data in DCE/RPC
  • An ssh preprocessor for experimental use
  • Updated Snort decoder that can decode GRE encapsulated packets
  • Output plugin to allow Snort to configure Aruba access control
  • Bug fixes and performance improvements

No comments:

Post a Comment