pfsense/pfsense-packages — pull request #717 by bmeeks8 (2014-10-10 00:05:05+00:00)
Title: Snort 2.9.6.2 package v3.1.3

Snort 2.9.6.2 package update v3.1.3
------------------------------------------------
This update for the Snort package contains five bug fixes, five new features and seven improvements to existing features.

Bug Fixes
-------------
1. Barnyard2 SENSOR_NAME parameter should not contain spaces, but input value is not validated.

2. When cloning a Snort interface using the DUP icon, the UUID is not changed resulting in duplicate UUIDs.

3. When Barnyard2 is disabled on an interface, existing MySQL and other settings are lost.

4. The automatic rules update cron task generates a useless e-mail alert with progress bar output in it.

5. Snort and Suricata share some similarly named string CONSTANTS. These conflict and cause issues when both packages are installed together.

Improvements
-------------------
1. Changes in startup script should help prevent occasional duplicate Snort processes being created for an interface on reboots.

2. Unnecessary calls to write_config() and install_cron_job() were eliminated to reduce log spam and not trigger as many auto-config backups.

3. A number of formerly hard-coded system paths now use the corresponding system globals instead.

4. Generation of HOME_NET and EXTERNAL_NET variables is improved and a VIEW LIST button has been added to allow viewing of EXTERNAL_NET contents.

5. In a number of places in the package, operating system calls have been replaced with the corresponding pfSense wrapper functions.

6. The CARP package sync process is improved, and when configured, auto-SID management conf files are replicated from the master to slaves.

7. The Snort Dashboard Widget now displays the more useful rule Description field instead of the Priority and Classification fields.

New Features
-------------------
1. Add filter dialog function to ALERTS tab to allow filtering of alerts display.

2. Add automatic SID management using PulledPork and Oinkmaster compatible conf files.

3. Add new LOGS MGMT tab for managing log rotation and retention times.

4. Add new LOGS VIEW tab to each configured Snort interface for viewing certain text logs.

5. Add FACILITY and PRIORITY parameters to syslog output configuration for alerts and Barnyard2 output.