aboutsummaryrefslogtreecommitdiff
path: root/security/snort
Commit message (Collapse)AuthorAgeFilesLines
* Autotools update. Read ports/UPDATING 20100915 for details.Ade Lovett2010-09-151-1/+1
| | | | | | | | Approved by: portmgr (for Mk/bsd.port.mk part) Tested by: Multiple -exp runs Notes: svn path=/head/; revision=261230
* - Update snort to version 2.8.6.1.Cheng-Lung Sung2010-07-283-7/+7
| | | | | | | | | | | | | | | | - From the release notes: * Eliminate false positives when using fast_pattern:only and having only one http content in the pattern matcher. * Address false positives in FTP preprocessor with string format verification. Also addressed issue with handling of response codes to data transfer commands where the response code didn't contain a message. PR: ports/148878 Submitted by: olli hauer <ohauer_AT_gmx dot de> Notes: svn path=/head/; revision=258360
* - source tar ball go to LOCALCheng-Lung Sung2010-07-171-5/+3
| | | | | | | | | | - fix WITH_SNORTSAM knob PR: ports/148484, ports/148516 Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net> Notes: svn path=/head/; revision=257887
* - distinfo is not updated with last commitCheng-Lung Sung2010-07-111-6/+6
| | | | | | | Failed by: me Notes: svn path=/head/; revision=257628
* - Update to 2.8.6Cheng-Lung Sung2010-07-094-24/+28
| | | | | | | | | | | | | - name for one patch has changed from patch-snort.conf to patch-etc__snort.conf (easier to build diffs with 'make makepatch') - snort.conf was replaced with the version shiped in the rules tarball (Maybe users shoud be pointed to the Changelog) PR: ports/146155 Submitted by: olli hauer <ohauer_AT_gmx dot de> Notes: svn path=/head/; revision=257559
* - bump PORTREVISIONCheng-Lung Sung2010-07-082-5/+5
| | | | | | | | | | | - Fix build WITH_SNORTSAM knob - Use an updated patch from www.snortsam.net PR: ports/148449 Submitted by: lioux Notes: svn path=/head/; revision=257530
* - fix LIB_DEPENDS about libnetCheng-Lung Sung2010-04-202-5/+6
| | | | | | | | | | | | - snortsam patch for snort has changed - ref: http://lists.snortsam.net/pipermail/snortsam-discussion/2010-March/000502.html - bump PORTREVISION PR: ports/145632 Submitted by: olli hauer <ohauer_AT_gmx dot de> Notes: svn path=/head/; revision=252953
* Begin the process of deprecating sysutils/rc_subr byDoug Barton2010-03-271-1/+1
| | | | | | | s#. %%RC_SUBR%%#. /etc/rc.subr# Notes: svn path=/head/; revision=251553
* - restore snortsam checksumCheng-Lung Sung2010-03-231-0/+3
| | | | | | | | PR: ports/144715 Submitted by: olli hauer <ohauer_AT_gmx dot de> Notes: svn path=/head/; revision=251400
* - Update to 2.8.5.3Cheng-Lung Sung2010-03-072-7/+4
| | | | Notes: svn path=/head/; revision=250658
* - update snort to version 2.8.5.2Cheng-Lung Sung2010-01-223-5/+8
| | | | | | | | | | | | | | | | | | | | | | | | RELEASE.NOTES 2009-12-15 - Snort 2.8.5.2 [*] Improvements * Improvements to HTTP Inspect for handling of pipelined requests and chunked encodings. * Updated the documentation for output plugins and log limits. * Fixed building on AIX 6. * Fixed reloading of auto-iface variables when privileges had been dropped. * Fixed issues at startup and perfstats rotation with old versions of libc (2.2, 2.3) & linux threads. PR: ports/142885 Submitted by: olli hauer <ohauer_AT_gmx dot de> Notes: svn path=/head/; revision=248346
* - fix default flags settingCheng-Lung Sung2009-10-292-2/+3
| | | | | | | | | - bump PORTREVISION Submitted by: Andrea Venturoli <ml_AT_netfence dot it> Notes: svn path=/head/; revision=243438
* - Update to 2.8.5.1Cheng-Lung Sung2009-10-283-12/+18
| | | | Notes: svn path=/head/; revision=243402
* - Mark MAKE_JOBS_UNSAFE, as it fails with forced jobsCheng-Lung Sung2009-10-061-1/+2
| | | | | | | | | | - bump PORTREVISION PR: ports/138644 Submitted by: Dmitry Marakasov <amdmi3_AT_amdmi3 dot ru> Notes: svn path=/head/; revision=242502
* - Fix fetchMartin Wilke2009-09-211-1/+2
| | | | | | | | | Reported by: pointyhat Hat: portmgr Feature safe: yes Notes: svn path=/head/; revision=241858
* - Chase libprelude updatePav Lucistnik2009-09-191-1/+1
| | | | | | | Feature safe: yes Notes: svn path=/head/; revision=241775
* - Re-enable plugin snortsamCheng-Lung Sung2009-08-212-12/+16
| | | | | | | | | | - bump PORTREVISION PR: ports/137765 Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br> Notes: svn path=/head/; revision=240003
* - Fix fetchMartin Wilke2009-08-191-1/+2
| | | | Notes: svn path=/head/; revision=239935
* -Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.Jeremy Messenger2009-08-021-1/+1
| | | | | | | | | | | | | | | | | | | | | -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr Notes: svn path=/head/; revision=238781
* - Update to 2.8.4.1Cheng-Lung Sung2009-05-073-24/+22
| | | | Notes: svn path=/head/; revision=233337
* Fix plist with -DNOPORT*.Ion-Mihai Tetcu2009-04-081-0/+3
| | | | | | | | Prompted by: QAT QA run Approved by: maintainer timeout on QATMail Notes: svn path=/head/; revision=231873
* - Chase security/libprelude shlib version bumpDmitry Marakasov2009-02-181-2/+2
| | | | | | | | PR: 131286, 131585 (partial) Submitted by: Vladimir Korkodinov <viper at perm dot raid dot ru> Notes: svn path=/head/; revision=228623
* - Add mysql/postgresql to REQUIRE: in rc.script for correct start orderDmitry Marakasov2009-01-121-1/+9
| | | | | | | | | PR: 127954 Submitted by: Helmut Schneider <jumper99 at gmx dot de> Approved by: maintainer timeout Notes: svn path=/head/; revision=225892
* - Remove conditional checks for FreeBSD 5.x and olderPav Lucistnik2009-01-062-16/+0
| | | | Notes: svn path=/head/; revision=225335
* - bump PORTREVISIONCheng-Lung Sung2008-10-061-1/+2
| | | | | | | | | | | | | | - fix libprelude version One of the config options for security/snort is WITH_PRELUDE. Last time libprelude has changed to new version, but Makefile for snort is not updated. This patch corrects this issue. PointyHat to: beech (ports/127339) PR: ports/127818 Submitted by: Krzysztof Stryjek <wtp_AT_bsdguru dot org> Notes: svn path=/head/; revision=221266
* - Update to 2.8.2.2Cheng-Lung Sung2008-09-262-5/+4
| | | | Notes: svn path=/head/; revision=220828
* - patch for enable feature to output plugin snortsamCheng-Lung Sung2008-08-222-5/+19
| | | | | | | | | | - bump PORTREVISION PR: ports/126506 Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br> Notes: svn path=/head/; revision=218997
* Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.Rong-En Fan2008-08-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases. To workaround this issue, many ports hack the CONFIGURE_TARGET variable so that it contains the ``--build='' prefix. To solve this issue, under the fact that some ports still have configure script generated by the old autoconf, we use runtime detection in the do-configure target so that the proper argument can be used. Changes to Mk/*: - Add runtime detection magic in bsd.port.mk - Remove CONFIGURE_TARGET hack in various bsd.*.mk - USE_GNOME=gnometarget is now an no-op Changes to individual ports, other than removing the CONFIGURE_TARGET hack: = pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables) - comms/gnuradio - science/abinit - science/elmer-fem - science/elmer-matc - science/elmer-meshgen2d - science/elmerfront - science/elmerpost = use x86_64 as ARCH - devel/g-wrap = other changes - print/magicfilter GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf Total # of ports modified: 1,027 Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes) PR: 126524 (obsoletes 52917) Submitted by: rafan Tested on: two pointyhat 7-amd64 exp runs (by pav) Approved by: portmgr (pav) Notes: svn path=/head/; revision=218938
* - Update to 2.8.2.1Cheng-Lung Sung2008-06-233-5/+5
| | | | | | | | | | | | | | - 2008-06-12 - Snort 2.8.2.1 [*] Improvements * Fix support for pass rules that sometimes did not take precedence over alert and/or drop rules. PR: ports/124717 Submitted by: Michael Scheidell <scheidell_AT_secnap dot net> Notes: svn path=/head/; revision=215584
* - typo in files/pkg-message.inCheng-Lung Sung2008-06-092-1/+2
| | | | | | | | | - bump PORTREVISION Submitted by: kevlo Notes: svn path=/head/; revision=214532
* - Update to 2.8.2Cheng-Lung Sung2008-06-092-5/+4
| | | | Notes: svn path=/head/; revision=214526
* - Snort now includes an updated version of FLEXRESP2 in the main snort ↵Cheng-Lung Sung2008-06-091-4/+1
| | | | | | | | | | | | source code and no longer needs to be patched. - bump PORTREVISION PR: ports/124048 Submitted by: "Scot W. Hetzel" <swhetzel_AT_gmail dot com> Notes: svn path=/head/; revision=214523
* - Update libprelude dependencyCheng-Lung Sung2008-05-191-1/+1
| | | | | | | | PR: ports/123659 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=213309
* - add Performance Profiling optionCheng-Lung Sung2008-05-171-1/+7
| | | | | | | | | | - bump PORTREVISION PR: by mail Submitted by: Scott MacGregor <shadowbq_AT_gmail dot com> Notes: svn path=/head/; revision=213181
* - Update to 2.8.1Cheng-Lung Sung2008-04-093-4/+12
| | | | Notes: svn path=/head/; revision=210920
* - Update to 2.8.0.2Cheng-Lung Sung2008-04-084-36/+48
| | | | | | | | | PR: ports/121103 Submitted by: Jo Rhett <jrhett_AT_netconsonance dot com> Reviewed by: clsung Notes: svn path=/head/; revision=210804
* - update prelude library dependencyCheng-Lung Sung2007-10-051-1/+2
| | | | | | | | PR: ports/116111 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=200882
* - Update to 2.7.0.1Cheng-Lung Sung2007-08-142-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tested on two systems, and until works perfectly. Changelog snort-2.7.0.1: * etc/snort.conf: Turn off flow since Stream5 is now enabled by default. * src/snort.c: Fix printing of threshold counts until after all rules are read. This issue did not affect thresholding, only display of thresholding. Thanks to Jeffrey Denton for reporting the problem. * src/sfutil/ipobj.c: Fix free of invalid pointer when using a negated IP list. This is used by sfportscan preprocessor configuration parsing. Thanks to Anders Ostrem for reporting the problem. * src/preprocessors/Stream5/snort_stream5_session.c: Fixed issue when experimental ICMP tracking is used without using the TCP or UDP session tracking. ICMP was attempting to lookup TCP or UDP sessions from uninitialized session cache. Thanks to Koji Shikata for reporting the problem. * src/preprocessors/Stream5/snort_stream5_tcp.c: Fixed invalid session pointer when rule tries to use flowbits after session ends. Thanks to rmkml for initially reporting the problem. PR: ports/115294 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=197613
* - Remove the DESTDIR modifications from individual ports as we have a new,Gabor Kovesdan2007-08-041-1/+1
| | | | | | | | | | fully chrooted DESTDIR, which does not need such any more. Sponsored by: Google Summer of Code 2007 Approved by: portmgr (pav) Notes: svn path=/head/; revision=197075
* - Update to 2.7.0Cheng-Lung Sung2007-07-242-4/+4
| | | | | | | | | | | | | | | | | | | Update includes: - Target-based stream reassembly, including handling of TCP dataoverlaps and anomalous TCP header flags on a per-destination basis. 11 different target-based policies are supported. See README.stream5 for specific configuration options for operating system targets. - UDP session tracking - Option to emulate Stream4 flushing behaviour - Stream5 replaces BOTH Stream4 and Flow -- should disable both of these when Stream5 is enabled. - Security and memory footprint improvements PR: ports/114806 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=196170
* - Update to 2.6.1.5Cheng-Lung Sung2007-07-022-5/+4
| | | | | | | | PR: ports/114123 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=194592
* - optional pcap filter in rc.conf.Cheng-Lung Sung2007-06-142-1/+8
| | | | | | | | | | | | Example: snort_expression="not net after.nat.addr.ess/24" - bump PORTREVISION PR: ports/113551 Submitted by: Tomoyuki Sakurai <cherry_AT_trombik dot org> Notes: svn path=/head/; revision=193441
* - Update libprelude to 0.9.14.Marcelo Araujo2007-06-061-1/+2
| | | | | | | | | | | | - Update dependent ports accordingly. - Bump PORTVERSION to force rebuild. PR: ports/112703 Submitted by: Marcelo Araujo <araujo@FreeBSD.org> Approved by: stas (mentor) Notes: svn path=/head/; revision=192913
* - Update to 2.6.1.4Cheng-Lung Sung2007-04-183-11/+11
| | | | | | | | | | - Fix initial copy of configuration files. PR: ports/111533 Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl> Notes: svn path=/head/; revision=190268
* - fix build error when configured with FLEXRESP2Cheng-Lung Sung2007-03-061-1/+1
| | | | | | | | PR: ports/109830 Submitted by: alfss<alfss_AT_netco dot ru> Notes: svn path=/head/; revision=186621
* - Update to 2.6.1.3Cheng-Lung Sung2007-02-212-5/+4
| | | | | | | | | - security update Security: http://www.snort.org/docs/advisory-2007-02-19.html Notes: svn path=/head/; revision=185606
* - pet tinderboxCheng-Lung Sung2007-02-071-1/+1
| | | | Notes: svn path=/head/; revision=184451
* - fix configure errors when WITH_FLEXRESP, WITH_FLEXRESP2Cheng-Lung Sung2007-02-071-2/+5
| | | | | | | - bump PORTREVISION Notes: svn path=/head/; revision=184449
* - Patch net/libnet* to versioned libraries and header files, so they canPav Lucistnik2007-01-311-6/+19
| | | | | | | | | | | | coexist PR: ports/103861 Submitted by: alepulver Tested by: pointyhat With hat: portmgr Notes: svn path=/head/; revision=183770
* Remove USE_GPG from all effected ports. This knob is a no-op and the way itGabor Kovesdan2007-01-291-2/+0
| | | | | | | | | | | | was supposed to work is useless, because if we can't trust the distfile from the remote machine, we can't trust the signature from the same machine either. Our MD5 and SHA256 are good for checking both the sanity and the trustiness of distfiles. Approved by: portmgr (erwin), erwin (mentor) Notes: svn path=/head/; revision=183644