Snort 2.9.0.4 was released with a bug affecting http processing. Snort.org has issued a new release of 2.9.0.4 which they are calling build 111 to fix the issue. They did not bump the version number as there are no other enhancements. See announcement here: http://blog.snort.org/2011/02/snort-2904-build-111-posted.html Reproducible: Always
Looks like all that needs to be done is to change the SRC_URI in the ebuild to "http://www.snort.org/downloads/808 -> ${P}.tar.gz".
snort-2.9.0.4-r1 was added to portage to resolve this. This bug can be marked resolved. Thx for the bug Brett!
Done!