We are happy to announce the latest STABLE release v2.1-13 which was tagged a few hours ago ( ) This release is a bug fix release that also introduce a few new features and enhancements.

UPGRADE REQUIREMENTS If you are upgrading to barnyard2 2-1.13 (build 327) or above from a previous version and using output database.

You will need to delete every row in your sigreference table.

DELETE FROM sigreference;) The table will be re-populated at startup, and has no impact on historical data.

FEATURE REQUESTS Phil Daws - add interface and hostname field to spoalertcsv if specified.

Barnyard2 Snort Full Support For

Jorge Pinto - sposyslogfull support for ASCII,BASE64 payload Jason Brvenik - variables.

P) Martin Olsson - remove some useless verbosity unless.configure --enable-debug is specified and proper flag are used ( spodatabase and sid-msg.mapv2 ) All other barnyard2 users who help and contribute.

BUG REPORTS Martin Olsson - bug in sigreference generation and good discussions.

Barnyard2 Snort Install Is Not

Rewrote the code al John Eure and others - autogen.sh could cause some issue on some system so autoreconf -fv --install is not set to autoreconf -fvi John Naggets - spodatabase: could stop barnyard2 from processing new event if some packets with ip option where processed and optionlen was null.

Fbu Hufi - sposyslogfull: in complete mode was printing wrong ip version information and ip header length.

Jeremy Hoel - identified issue with suppression range in 2-1.13-BETA (fixed in release) Bill Green - identified is with signature insertion mainly preprocessor in 2-1.13-BETA (fixed in release) All other barnyard2 users who help and contribute.

A new sig-msg.map format can be generated by pulledpok (upcomming release, already in svn).

Detection of sid-msg.map version is done by a simple header in the file that shouldnt be altered if you want it to be processed correctly.

Read docREADME.sigsuppression 3.

Configuration file variables.

You can now use var VARNAME value in the barnyard2 configuration file and every instance of VARNAME will get replaced by value.

Note that variable declaration order is important only you include a variable with in a variable.

Keywords connectionlimit and reconnectsleeptime where added in 2-1.10 but where undocumented and shouldnt be modified unless you encounter an issue.

Note: This option will speedup the process, especialy if you use sid-msg.mapv2 file or have alot of signature already in databases.

Make sure that you do not need that information before enabling this) So we hope you enjoy the new release, as a side note the RELEASE.NOTES file has not been updated and will be removed in the next version.

Its honestly the most laborious part of release time;) Regards, The barnyard2 team.

Barnyard2 Download Snort