Download Suricata 2.0.9

Version 2.0.9 of Suricata has been released. Suricata is an open source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. Development is overseen by the Open Information Security Foundation, with support from the community and various manufacturers. The main change in version 2.0 is Eve, a fully op json based logging system. Eve can, among other things, with log stash are used to display information graphically again at to give. The changelog for this release looks like this:

Suricata 2.0.9 Available!

The OISF development team is pleased to announce Suricata 2.0.9. This release fixes a number of issues in the 2.0 series. Couple of important fixes: defrag evasion, a crash when using certain rules (mixing regular content and relative bytejumps with dce option) and better detection of TCP retransmissions with different data.

changes

• Bug#1558: stream: retransmission not detected (2.0.x)
• Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438
• Bug #1564: defrag: evasion issue
• Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x)
• Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names
• Bug #1490: http_host payload validation erroring on uppercase PCRE metacharacters
• Bug #1501: 2.0.x backport: Add HUP coverage to output json-log
• Bug #1510: 2.0.x: address var parsing issue
• Bug #1513: stream_size <= and >= modifiers function as < and > (equality is not functional) (2.0.x)
• Update bundled libhtp to 0.5.18