On Fri, Jul 08, 2011 at 11:47:07AM +1200, Hugh Davenport wrote: > I was wondering whether there was a reason that IPv6 is not enabled in > snort by default.
IPv6 support in 2.8 was 'experimental' and consequently was not enabled. There was even a security bug (CVE-2009-3641: DoS when printing packages) found related to this support. In the 2.9 release IPv6 is fully supported although the database plugins and schemas have not been updated to be able to handle addresses in IPv6 format. Consequently, I'm going to enable the support of IPv6 in the 'normal' package but not in the snort-mysql or snort-pgsql packages in the next Snort packages uploaded to Debian. Best regards, Javier
signature.asc
Description: Digital signature
