# 2.0beta2 12/18/2013 * Feature #234: add option disable/enable individual app layer protocol inspection modules * Feature #417: ip fragmentation time out feature in yaml * Bug #463: Suricata not fire on http reply detect if request are not http * Feature #478: XFF (X-Forwarded-For) * Optimization #583: improve Packet_ structure layout * Feature #602: availability for http.log output - identical to apache log format * Feature #622: Specify number of pf_ring/af_packet receive threads on the command line * Bug #640: app-layer-event:http.host_header_ambiguous set when it shouldn't * Bug #714: some logs not created in daemon mode * Feature #727: Explore the support for negated alprotos in sigs. * Feature #746: Decoding API modification * Feature #751: Add invalid packet counter * Feature #752: Improve checksum detection algorithm * Feature #789: Clean-up start and stop code * Bug #810: Alerts on http traffic storing the wrong packet as the IDS event payload * Feature #813: VLAN flow support * Bug #815: address parsing with negation * Bug #820: several issues found by clang 3.2 * Bug #837: Af-packet statistics inconsistent under very high traffic * Feature #878: add storage api * Bug #882: MpmACCudaRegister shouldn't call PatternMatchDefaultMatcher * Bug #887: http.log printing unknown hostname most of the time * Bug #890: af-packet segv * Bug #892: detect-engine.profile - custom - does not err out in incorrect toclient/srv values - suricata.yaml * Bug #895: response: rst packet bug * Bug #896: pfring dna mode issue * Bug #897: make install-full fails if wget is missing * Feature #901: VLAN defrag support * Bug #903: libhtp valgrind warning * Feature #904: store tx id when generating an alert * Bug #907: icmp_seq and icmp_id keyword with icmpv6 traffic (master) * Bug #910: make check fails w/o sudo/root privs * Bug #911: HUP signal * Bug #912: 1.4.3: Unit test in util-debug.c: line too long. * Bug #914: Having a high number of pickup queues (216+) makes suricata crash * Bug #915: 1.4.3: log-pcap.c: crash on printing a null filename * Bug #917: 1.4.5: decode-ipv6.c: void function cannot return value * Bug #920: Suricata failed to parse address * Bug #922: trackers value in suricata.yaml * Bug #925: prealloc-sessions value bigger than allowed in suricata.yaml * Bug #926: prealloc host value in suricata.yaml * Bug #927: detect-thread-ratio given a non numeric value in suricata.yaml * Bug #928: Max number of threads * Bug #932: wrong IP version - on stacked layers * Bug #939: thread name buffers are sized inconsistently * Feature #940: randomize http body chunks sizes * Bug #943: pfring: see if we can report that the module is not loaded * Feature #944: detect nic offloading * Bug #948: apple ppc64 build broken: thread-local storage not supported for this target * Feature #956: Implement IPv6 reject * Feature #957: reject: iface setup * Security #958: SSL parsing issue (master) * Feature #959: Move post config initialisation code to PostConfLoadedSetup * Bug #963: XFF compile failure on OSX * Bug #964: Modify negated content handling * Bug #967: threshold rule clobbers suppress rules * Bug #968: unified2 not logging tagged packets * Bug #970: AC memory read error * Bug #973: Use different ids for content patterns which are the same, but one of them has a fast_pattern chop set on it. * Bug #976: ip_rep supplying different no of alerts for 2 different but semantically similar rules * Bug #979: clean up app layer protocol detection memory * Feature #981: Update all switch case fall throughs with comments on false throughs * Bug #982: http events missing * Feature #983: Provide rule support for specifying icmpv4 and icmpv6. * Feature #986: set htp request and response size limits * Bug #987: default config generates error(s) * Bug #988: suricata don't exit in live mode * Bug #989: Segfault in HTPStateGetTxCnt after a few minutes * Bug #991: threshold mem leak * Bug #994: valgrind warnings in unittests * Bug #995: tag keyword: tagging sessions per time is broken * Bug #998: rule reload triggers app-layer-event FP's * Bug #999: delayed detect inits thresholds before de_ctx * Bug #1003: Segmentation fault * Feature #1008: Optionally have http_uri buffer start with uri path for use in proxied environments * Feature #1009: Yaml file inclusion support * Optimization #1018: clean up counters api * Bug #1023: block rule reloads during delayed detect init * Bug #1026: pfring: update configure to link with -lrt * Feature #1028: How to identify which rule called the lua script * Bug #1031: Fix IPv6 stream pseudo packets * Feature #1032: profiling: per keyword stats * Bug #1035: http uri/query normalization normalizes 'plus' sign to space * Optimization #1041: remove mkinstalldirs from git * Bug #1042: Can't match "emailAddress" field in tls.subject and tls.issuerdn * Bug #1061: Multiple flowbit set in one rule