pfsense/pfsense-packages — pull request #752 by bmeeks8 (2014-12-15 17:26:51+00:00)
Title: Suricata 2.0.4 pkg v2.1

Suricata 2.0.4 pkg v2.1 Update
=================
This update for the Suricata package upgrades the underlying binary to version 2.0.4, fixes six bugs and adds two new features. Details on specific bug fixes and features within the Suricata 2.0.4 binary are posted at http://suricata-ids.org/2014/09/23/suricata-2-0-4-available/.

New or Additional Features
------------------------------------
1. Added support for GeoIP. The rule option "geoip" can now be used with country codes to automatically identify IP addresses by country as defined in the free GeoLite data created by MaxMind, available from http://www.maxmind.com. These databases are updated on the first Tuesday of each month. When enabled in the Suricata package, the database files are downloaded at midnight on the 8th day of each month.

2. Added support for IP Reputation rules. The rule option "iprep" can now be used in custom rules, and the capability to auto-download the Emerging Threats IQRisk IP List is available with a valid subscription code.

Bug Fixes
-------------
1. Barnyard tab loses MySQL DB and other settings when Barnyard is disabled on an interface.

2. Rules update cron job generates a useless e-mail notification.

3. During reboot, on random occasions, duplicate Suricata or Barnyard2 processes may get created.

4. After clearing filter values on ALERTS tab, the filter dialog is hidden.

5. Packet capture log files not removed when logging directory size limit is reached.

6. Failure to auto-start a second and any other interfaces following Suricata reinstallation.