pfsense/pfsense-packages — pull request #455 by bmeeks8 (2013-06-04 01:47:07+00:00)
Title: Snort Pkg 2.5.8 Fix for User-Reported Bug and a few minor updates

Snort Package version 2.5.8 Update
==================================================================
Change Log -- Date 06/03/2013
-------------------------------------------------------------------------------------------------------------------
At least two pfSense forum users reported blank pages when attempting to display all the rules in the IPS Security policy set. These users also had large numbers (as in pretty much all) of the Emerging Threats and Snort GPLv2 Community Rules selected as well. The source of the blank page was traced to PHP blowing up at the 128 MB default process memory limit. It was trying to allocate additional memory to hold the large global array of rules and was hitting the limit. This halted HTML output and thus the user saw a blank page.

One fix was to up the PHP process limit, but that would only mask the problem. Turns out that a different method for releasing no longer needed global variables fixed the problem even without bumping up the PHP process memory limit. Just for safety's sake, this change also bumps the PHP process memory limit for Snort to 192 MB (up from the default of 128 MB).

The Snort Package Version remains at 2.5.8 with this fix.

BUG FIX
--------------
1. Fixed out-of-memory condition when attempting to view large rule sets such as the Snort VRT IPS Security policy rules when also having a large number of Emerging Threats and/or GPLv2 Community Rules selected. This was resulting in a blank page when attempting to view the IPS Security policy rule set with large number of ET rules also selected.

UPDATE
------------
1. Added a rule counter and display to the RULES tab that shows the total number of displayed rules for the selected category.