PL-1195 include VRT 2931 rules and mechanism to switch between the two. Also huge deployment changes because debian testing is too unreliable.
PL-1195 host all external tarballs in s3 for extra reliability.
PL-1195 left some debugging in.
PL-1195 wait for snort to finish before processing its logs
write credentials even when not creating a cluster
snort comparison
fix loader args
fix snort_comparison.pig output
update pig_comparison script to include two output
uncomment rules for 2012-4681
user_info + geo city
fix a counter issue, and remote-ise user_info.pig
hadoop sucks
filter attacker information by severity 1 alerts only
Some mods for the Ruxcon presentation.
Removed silly debug line