Packet display in snort alerts
Here's a quick hack to allow optional display of snort alerts packets.
Default is to not display. A checkbox is provided to Show Packets. When the Save button is clicked then the code to display packet contents is activated and a column is added to the page. It overflows the page a bit depending on the theme page background.
It only displays packets from the current run of snort. Previous alert packets are displayed as 'empty'.
Also added a whois lookup from dnsstuff for the source and destination ip addresses.