inverse-inc/packetfence — pull request #142 by GodfatherOfBandwidth (2014-04-29 22:03:29+00:00)
Title: Create pfdetect_SO

Adding this as a new file because it will break the current way PF parses SNORT logs if it replaced the stock pfdetect.

With a separate file it is possible to run this version and the stock version at the same time should you be crazy and have both system deployed.

It is a copy of the current pfdetect with the parsing logic re-written for use with Security Onion.

It also adds a new dependency; File::Tail, which AFAIK does not introduce any performance penalty or memory issues.