Date format in Snort



  • Hello,
    Would it be possible to amend the date format in the Snort GUI to adhere to the pfSense long format that is used in the logs e.g. Apr 13 12:04:31
    or provide an option to switch to DD/MM/YY

    You crazy Americans with your MM/DD/YY format is so confusing  :o  :)



  • Hmm…I don't think Snort itself can be changed, but it's possible I may be able to work on how the GUI displays the alerts in the web interface.  I will add that to my feature request list.

    Bill



  • Ooh. Convenient finding this thread as it saves me creating a new one. I've just implemented Snort on pfSense and encountered the same date format issue (In Australia)

    I'd also hoped to display in DD/MM/YYYY format. When diagnosing logged alerts you have to remember you're not driving in the left hand lane ;-)

    Bill, your suggestion sounds like a feasible workaround for my purposes even though it makes me twitch a little as it's not addressed at root cause. But I understand it's a bigger issue than I can hope to have addressed.



  • The next update to the Snort GUI package contains a fix to display the date in ISO-8601 format on the ALERTS and BLOCKED tabs.  Unfortunately the raw alert log will still be in the U.S. format of MM-DD-YY with the two-digit year.  The GUI display format will be YYYY-mm-dd.

    This new version will be 3.2.9.1_14 and should show up soon.

    Bill



  • Thanks Bill!


Log in to reply