[Oisf-devel] Suricata 2.0.9 Available!

Victor Julien victor at inliniac.net
Fri Sep 25 15:24:20 UTC 2015

The OISF development team is pleased to announce Suricata 2.0.9. This
release fixes a number of issues in the 2.0 series.

Couple of important fixes: defrag evasion, a crash when using certain
rules (mixing regular content and relative bytejumps with dce option)
and better detection of TCP retransmissions with different data.

Get the new release here:


Bug #1558: stream: retransmission not detected (2.0.x)
Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438
Bug #1564: defrag: evasion issue
Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x)
Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names
Bug #1490: http_host payload validation erroring on uppercase PCRE
Bug #1501: 2.0.x backport: Add HUP coverage to output json-log
Bug #1510: 2.0.x: address var parsing issue
Bug #1513: stream_size <= and >= modifiers function as < and > (equality
is not functional) (2.0.x)

Special thanks

We'd like to thank the following people and corporations for their
contributions and feedback:

Jérémy Beaume
Erik Hjelmvik
Alessandro Guido
Alexandre Macabies
Darren Spruell
Jay MJ
Charles Smutz

Known issues & missing features

If you encounter issues, please let us know! As always, we are doing our
best to make you aware of continuing development and items within the
engine that are not yet complete or optimal. With this in mind, please
notice the list we have included of known items we are working on. See
http://redmine.openinfosecfoundation.org/projects/suricata/issues for an
up to date list and to report new issues. See
for a discussion and time line for the major issues.

Training & Support

Need help installing, updating, validating and tuning Suricata? We have
a training coming in Barcelona in November: see

For support options also see http://suricata-ids.org/support/

About Suricata

Suricata is a high performance Network IDS, IPS and Network Security
Monitoring engine. Open Source and owned by a community run non-profit
foundation, the Open Information Security Foundation (OISF). Suricata is
developed by the OISF, its supporting vendors and the community.
Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-devel mailing list