aboutsummaryrefslogtreecommitdiffstats
path: root/config/snort-dev/snort.inc
diff options
context:
space:
mode:
authorrobiscool <robrob2626@yahoo.com>2012-06-17 23:07:26 -0700
committerrobiscool <robrob2626@yahoo.com>2012-06-17 23:07:26 -0700
commit5b30f0e1acec35a572e99ee47e152e7db24b50b7 (patch)
treeaa4c7abc068fb14965849219e77b3395f4f78108 /config/snort-dev/snort.inc
parent35928427c5396b7a6d6a3d7574b3af020070dafc (diff)
downloadpfsense-packages-5b30f0e1acec35a572e99ee47e152e7db24b50b7.tar.gz
pfsense-packages-5b30f0e1acec35a572e99ee47e152e7db24b50b7.tar.bz2
pfsense-packages-5b30f0e1acec35a572e99ee47e152e7db24b50b7.zip
snort-dev, fix snort-dev/snort_alerts.php, disable new preproc GTP until GUI is built.
Diffstat (limited to 'config/snort-dev/snort.inc')
-rw-r--r--config/snort-dev/snort.inc8
1 files changed, 5 insertions, 3 deletions
diff --git a/config/snort-dev/snort.inc b/config/snort-dev/snort.inc
index 629c250a..b72c806e 100644
--- a/config/snort-dev/snort.inc
+++ b/config/snort-dev/snort.inc
@@ -274,6 +274,7 @@ function Running_Stop($snort_uuid, $if_real, $id) {
/*
* TODO: Add a GUI option that lets the user keep full logs
*/
+ /*
if ($start_up != '') {
@exec("/bin/kill {$start_up}");
@exec("/bin/rm /var/log/snort/run/snort_{$if_real}{$snort_uuid}*");
@@ -287,6 +288,7 @@ function Running_Stop($snort_uuid, $if_real, $id) {
@exec("/bin/rm /var/log/snort/barnyard2/{$snort_uuid}_{$if_real}/snort.u1*");
@exec("/bin/rm /var/log/snort/barnyard2/{$snort_uuid}_{$if_real}/snort.u2*");
}
+ */
/* Log Iface stop */
exec("/usr/bin/logger -p daemon.info -i -t SnortStartup 'Interface Rule STOP for {$snort_uuid}_{$if_real}...'");
@@ -1330,7 +1332,7 @@ function generate_snort_conf($id, $if_real, $snort_uuid)
*/
$snortalertcvs_type = "";
if ($snortcfg['snortalertcvs'] == "on")
- $snortalertcvs_type = "output alert_csv: /var/log/alert.csv default 128";
+ $snortalertcvs_type = "output alert_csv: /var/log/snort/{$snort_uuid}_{$if_real}/alert.csv default 128";
/* define snortalertlogtype */
if ($config['installedpackages']['snortglobal']['snortalertlogtype'] == "fast")
@@ -1642,7 +1644,7 @@ function generate_snort_conf($id, $if_real, $snort_uuid)
$enabled_rulesets = $snortcfg['rulesets'];
$selected_rules_sections = "";
if (!empty($enabled_rulesets)) {
- $enabled_rulesets_array = split("\|\|", $enabled_rulesets);
+ $enabled_rulesets_array = explode("\|\|", $enabled_rulesets);
foreach($enabled_rulesets_array as $enabled_item)
$selected_rules_sections .= "include \$RULE_PATH/{$enabled_item}\n";
}
@@ -2246,7 +2248,7 @@ dynamicdetection directory /usr/local/lib/snort/dynamicrules
# TODO: gui needed for pfsense
# GTP Control Channle Preprocessor, README.GTP
-preprocessor gtp: ports { 2123 3386 2152 }
+# preprocessor gtp: ports { 2123 3386 2152 }
####################################################
# Inline packet normalization, README.normalize