aboutsummaryrefslogtreecommitdiff
path: root/security/snort
Commit message (Collapse)AuthorAgeFilesLines
* - Mark MAKE_JOBS_UNSAFE, as it fails with forced jobsCheng-Lung Sung2009-10-061-1/+2
| | | | | | | | | | - bump PORTREVISION PR: ports/138644 Submitted by: Dmitry Marakasov <amdmi3_AT_amdmi3 dot ru> Notes: svn path=/head/; revision=242502
* - Fix fetchMartin Wilke2009-09-211-1/+2
| | | | | | | | | Reported by: pointyhat Hat: portmgr Feature safe: yes Notes: svn path=/head/; revision=241858
* - Chase libprelude updatePav Lucistnik2009-09-191-1/+1
| | | | | | | Feature safe: yes Notes: svn path=/head/; revision=241775
* - Re-enable plugin snortsamCheng-Lung Sung2009-08-212-12/+16
| | | | | | | | | | - bump PORTREVISION PR: ports/137765 Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br> Notes: svn path=/head/; revision=240003
* - Fix fetchMartin Wilke2009-08-191-1/+2
| | | | Notes: svn path=/head/; revision=239935
* -Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.Jeremy Messenger2009-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | | -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr Notes: svn path=/head/; revision=238781
* - Update to 2.8.4.1Cheng-Lung Sung2009-05-073-24/+22
| | | | Notes: svn path=/head/; revision=233337
* Fix plist with -DNOPORT*.Ion-Mihai Tetcu2009-04-081-0/+3
| | | | | | | | Prompted by: QAT QA run Approved by: maintainer timeout on QATMail Notes: svn path=/head/; revision=231873
* - Chase security/libprelude shlib version bumpDmitry Marakasov2009-02-181-2/+2
| | | | | | | | PR: 131286, 131585 (partial) Submitted by: Vladimir Korkodinov <viper at perm dot raid dot ru> Notes: svn path=/head/; revision=228623
* - Add mysql/postgresql to REQUIRE: in rc.script for correct start orderDmitry Marakasov2009-01-121-1/+9
| | | | | | | | | PR: 127954 Submitted by: Helmut Schneider <jumper99 at gmx dot de> Approved by: maintainer timeout Notes: svn path=/head/; revision=225892
* - Remove conditional checks for FreeBSD 5.x and olderPav Lucistnik2009-01-062-16/+0
| | | | Notes: svn path=/head/; revision=225335
* - bump PORTREVISIONCheng-Lung Sung2008-10-061-1/+2
| | | | | | | | | | | | | | - fix libprelude version One of the config options for security/snort is WITH_PRELUDE. Last time libprelude has changed to new version, but Makefile for snort is not updated. This patch corrects this issue. PointyHat to: beech (ports/127339) PR: ports/127818 Submitted by: Krzysztof Stryjek <wtp_AT_bsdguru dot org> Notes: svn path=/head/; revision=221266
* - Update to 2.8.2.2Cheng-Lung Sung2008-09-262-5/+4
| | | | Notes: svn path=/head/; revision=220828
* - patch for enable feature to output plugin snortsamCheng-Lung Sung2008-08-222-5/+19
| | | | | | | | | | - bump PORTREVISION PR: ports/126506 Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br> Notes: svn path=/head/; revision=218997
* Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.Rong-En Fan2008-08-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases. To workaround this issue, many ports hack the CONFIGURE_TARGET variable so that it contains the ``--build='' prefix. To solve this issue, under the fact that some ports still have configure script generated by the old autoconf, we use runtime detection in the do-configure target so that the proper argument can be used. Changes to Mk/*: - Add runtime detection magic in bsd.port.mk - Remove CONFIGURE_TARGET hack in various bsd.*.mk - USE_GNOME=gnometarget is now an no-op Changes to individual ports, other than removing the CONFIGURE_TARGET hack: = pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables) - comms/gnuradio - science/abinit - science/elmer-fem - science/elmer-matc - science/elmer-meshgen2d - science/elmerfront - science/elmerpost = use x86_64 as ARCH - devel/g-wrap = other changes - print/magicfilter GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf Total # of ports modified: 1,027 Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes) PR: 126524 (obsoletes 52917) Submitted by: rafan Tested on: two pointyhat 7-amd64 exp runs (by pav) Approved by: portmgr (pav) Notes: svn path=/head/; revision=218938
* - Update to 2.8.2.1Cheng-Lung Sung2008-06-233-5/+5
| | | | | | | | | | | | | | - 2008-06-12 - Snort 2.8.2.1 [*] Improvements * Fix support for pass rules that sometimes did not take precedence over alert and/or drop rules. PR: ports/124717 Submitted by: Michael Scheidell <scheidell_AT_secnap dot net> Notes: svn path=/head/; revision=215584
* - typo in files/pkg-message.inCheng-Lung Sung2008-06-092-1/+2
| | | | | | | | | - bump PORTREVISION Submitted by: kevlo Notes: svn path=/head/; revision=214532
* - Update to 2.8.2Cheng-Lung Sung2008-06-092-5/+4
| | | | Notes: svn path=/head/; revision=214526
* - Snort now includes an updated version of FLEXRESP2 in the main snort ↵Cheng-Lung Sung2008-06-091-4/+1
| | | | | | | | | | | | source code and no longer needs to be patched. - bump PORTREVISION PR: ports/124048 Submitted by: "Scot W. Hetzel" <swhetzel_AT_gmail dot com> Notes: svn path=/head/; revision=214523
* - Update libprelude dependencyCheng-Lung Sung2008-05-191-1/+1
| | | | | | | | PR: ports/123659 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=213309
* - add Performance Profiling optionCheng-Lung Sung2008-05-171-1/+7
| | | | | | | | | | - bump PORTREVISION PR: by mail Submitted by: Scott MacGregor <shadowbq_AT_gmail dot com> Notes: svn path=/head/; revision=213181
* - Update to 2.8.1Cheng-Lung Sung2008-04-093-4/+12
| | | | Notes: svn path=/head/; revision=210920
* - Update to 2.8.0.2Cheng-Lung Sung2008-04-084-36/+48
| | | | | | | | | PR: ports/121103 Submitted by: Jo Rhett <jrhett_AT_netconsonance dot com> Reviewed by: clsung Notes: svn path=/head/; revision=210804
* - update prelude library dependencyCheng-Lung Sung2007-10-051-1/+2
| | | | | | | | PR: ports/116111 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=200882
* - Update to 2.7.0.1Cheng-Lung Sung2007-08-142-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tested on two systems, and until works perfectly. Changelog snort-2.7.0.1: * etc/snort.conf: Turn off flow since Stream5 is now enabled by default. * src/snort.c: Fix printing of threshold counts until after all rules are read. This issue did not affect thresholding, only display of thresholding. Thanks to Jeffrey Denton for reporting the problem. * src/sfutil/ipobj.c: Fix free of invalid pointer when using a negated IP list. This is used by sfportscan preprocessor configuration parsing. Thanks to Anders Ostrem for reporting the problem. * src/preprocessors/Stream5/snort_stream5_session.c: Fixed issue when experimental ICMP tracking is used without using the TCP or UDP session tracking. ICMP was attempting to lookup TCP or UDP sessions from uninitialized session cache. Thanks to Koji Shikata for reporting the problem. * src/preprocessors/Stream5/snort_stream5_tcp.c: Fixed invalid session pointer when rule tries to use flowbits after session ends. Thanks to rmkml for initially reporting the problem. PR: ports/115294 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=197613
* - Remove the DESTDIR modifications from individual ports as we have a new,Gabor Kovesdan2007-08-041-1/+1
| | | | | | | | | | fully chrooted DESTDIR, which does not need such any more. Sponsored by: Google Summer of Code 2007 Approved by: portmgr (pav) Notes: svn path=/head/; revision=197075
* - Update to 2.7.0Cheng-Lung Sung2007-07-242-4/+4
| | | | | | | | | | | | | | | | | | | Update includes: - Target-based stream reassembly, including handling of TCP dataoverlaps and anomalous TCP header flags on a per-destination basis. 11 different target-based policies are supported. See README.stream5 for specific configuration options for operating system targets. - UDP session tracking - Option to emulate Stream4 flushing behaviour - Stream5 replaces BOTH Stream4 and Flow -- should disable both of these when Stream5 is enabled. - Security and memory footprint improvements PR: ports/114806 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=196170
* - Update to 2.6.1.5Cheng-Lung Sung2007-07-022-5/+4
| | | | | | | | PR: ports/114123 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=194592
* - optional pcap filter in rc.conf.Cheng-Lung Sung2007-06-142-1/+8
| | | | | | | | | | | | Example: snort_expression="not net after.nat.addr.ess/24" - bump PORTREVISION PR: ports/113551 Submitted by: Tomoyuki Sakurai <cherry_AT_trombik dot org> Notes: svn path=/head/; revision=193441
* - Update libprelude to 0.9.14.Marcelo Araujo2007-06-061-1/+2
| | | | | | | | | | | | - Update dependent ports accordingly. - Bump PORTVERSION to force rebuild. PR: ports/112703 Submitted by: Marcelo Araujo <araujo@FreeBSD.org> Approved by: stas (mentor) Notes: svn path=/head/; revision=192913
* - Update to 2.6.1.4Cheng-Lung Sung2007-04-183-11/+11
| | | | | | | | | | - Fix initial copy of configuration files. PR: ports/111533 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=190268
* - fix build error when configured with FLEXRESP2Cheng-Lung Sung2007-03-061-1/+1
| | | | | | | | PR: ports/109830 Submitted by: alfss<alfss_AT_netco dot ru> Notes: svn path=/head/; revision=186621
* - Update to 2.6.1.3Cheng-Lung Sung2007-02-212-5/+4
| | | | | | | | | - security update Security: http://www.snort.org/docs/advisory-2007-02-19.html Notes: svn path=/head/; revision=185606
* - pet tinderboxCheng-Lung Sung2007-02-071-1/+1
| | | | Notes: svn path=/head/; revision=184451
* - fix configure errors when WITH_FLEXRESP, WITH_FLEXRESP2Cheng-Lung Sung2007-02-071-2/+5
| | | | | | | - bump PORTREVISION Notes: svn path=/head/; revision=184449
* - Patch net/libnet* to versioned libraries and header files, so they canPav Lucistnik2007-01-311-6/+19
| | | | | | | | | | | | coexist PR: ports/103861 Submitted by: alepulver Tested by: pointyhat With hat: portmgr Notes: svn path=/head/; revision=183770
* Remove USE_GPG from all effected ports. This knob is a no-op and the way itGabor Kovesdan2007-01-291-2/+0
| | | | | | | | | | | | was supposed to work is useless, because if we can't trust the distfile from the remote machine, we can't trust the signature from the same machine either. Our MD5 and SHA256 are good for checking both the sanity and the trustiness of distfiles. Approved by: portmgr (erwin), erwin (mentor) Notes: svn path=/head/; revision=183644
* - updated prelude version;Cheng-Lung Sung2007-01-171-1/+2
| | | | | | | | | | - bump PORTREVISION PR: ports/107987 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=182571
* - Update to 2.6.1.2Cheng-Lung Sung2006-12-192-4/+4
| | | | Notes: svn path=/head/; revision=180133
* - Update snort to latest version (2.6.1.1)Cheng-Lung Sung2006-12-073-4/+20
| | | | | | | | PR: ports/106368 Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net> Notes: svn path=/head/; revision=179093
* - Update to 0.9.11Cheng-Lung Sung2006-11-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - library version update of related ports Changelog libprelude: - Hook class comparison function. Accept NULL, equal, not equal operator. - Introduce better error checking in the idmef-class API, which is now considered public and might be used by external application. Rename error code to reflect the API. - Change to the way IDMEF listed element are handled. Specifying negative number as the position of the element from the low level API now allow to position the element at the specified (reversed) index. Using the high level API a negative index permit to address a list of element backward (replace an element). - Build fixes for SWIG > 1.3.27. - Modify idmef_value_match() so that it always unroll listed value (do it for both val1 and val2. Remove assertion, and let idmef_value_type_compare() return an error code in case there is an issue. - Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as path using an undefined list index on idmef_path_get() call. - Make criteria parser accept (*) list index. - Implement comparison function for all IDMEF object. PR: ports/104328 Submitted by: maintainer (Robin Gruyters) Approved by: portmgr (pav) Notes: svn path=/head/; revision=178081
* - Update to 2.6.0.2Cheng-Lung Sung2006-09-224-12/+12
| | | | | | | | - let snort to packet sniff several different network interfaces - Contributed by Matthew Seaman <matthew dot seaman_AT_thebunker dot net> Notes: svn path=/head/; revision=173583
* - fix build error in 4.xCheng-Lung Sung2006-09-062-0/+16
| | | | | | | | | | "cvs update - sys/types.h should be before socket.h" PR: ports/102922 Submitted by: Jez Hancock <jez.hancock_AT_munk dot me dot uk> Notes: svn path=/head/; revision=172377
* - fix location entry in snort.confCheng-Lung Sung2006-09-061-0/+2
| | | | | | | | | | - bump PORTREVISION PR: ports/102909 Submitted by: Richard Bejtlich <taosecurity_AT_gmail dot com> Notes: svn path=/head/; revision=172369
* - Update to 2.6.0Cheng-Lung Sung2006-08-304-34/+149
| | | | | | | | | | - I'll maintain it now. PR: ports/99862 Submitted by: Linh Pham <question+fbsdports_AT_closedsrc dot org> Notes: svn path=/head/; revision=171654
* - Release maintainership:Andrew Pantyukhin2006-08-061-1/+1
| | | | | | | | | | | | | | | | | | | I have jumped in over my head with maintaining the port, both in terms of my skills with significantly modifying a port (particularly in getting the port from 2.4.5 to 2.6.0), not using snort enough to really test the full package, and not enough time to improve the port. With that said, there still is ports/99862 that is still open (re: bring security/snort to 2.6.0) which I have it the wall on trying to get the port to deinstall cleanly due to the optional nature of some components. I will continue to help out with other ports that I can take on and those that I can still take on maintainership. PR: ports/101526 Submitted by: Linh Pham <question+fbsdports@closedsrc.org> (maintainer) Notes: svn path=/head/; revision=169861
* - Update to 2.4.5Pav Lucistnik2006-06-103-19/+33
| | | | | | | | PR: ports/98773 Submitted by: Linh Pham <question+fbsdports@closedsrc.org> (maintainer) Notes: svn path=/head/; revision=165011
* Remove USE_REINPLACE from all categories starting with SEdwin Groothuis2006-05-131-1/+0
| | | | Notes: svn path=/head/; revision=162215
* - Chase libprelude versionRenato Botelho2006-05-051-1/+2
| | | | | | | | | | - Bump PORTREVISION PR: ports/96758, ports/96759, ports/96760 Submitted by: maintainer Notes: svn path=/head/; revision=161417
* - Tarball was rerolledRenato Botelho2006-04-191-5/+5
| | | | | | | | | | | | | SourceFire, the maintainers of Snort, have updated the tarball for Snort 2.4.4 to include support for building binaries. The updated tarball has a different size and checksum and I have verified with the Snort team that the change is in fact valid. PR: ports/96017 Submitted by: maintainer Notes: svn path=/head/; revision=159909