bro 1.2_1 security =9

IS INTERACTIVE: yes
System for detecting Network Intruders in real-time
Maintained by: pauls@utdallas.edu
Port Added: unknown

---

---

Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS)
that passively monitors network traffic and looks for suspicious activity.
Bro detects intrusions by first parsing network traffic to extract is
application-level semantics and then executing event-oriented analyzers that
compare the activity with patterns deemed troublesome. Its analysis includes
detection of specific attacks (including those defined by signatures, but
also those defined in terms of events) and unusual activities (e.g., certain
hosts connecting to certain services, or patterns of failed connection
attempts).

Bro is documented in the USENIX 1998 Security Conference proceedings.

-- Paul
   pauls@utdallas.edu

WWW: http://bro-ids.org/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: devel/bison, lang/perl5.8
Required To Run: lang/perl5.8

---

To install the port: cd /usr/ports/security/bro/ && make install clean
To add the package: pkg_add -r bro

---

Configuration Options

===> The following configuration options are available for bro-1.2_1:
     GPG=Off (default) "Support encrypted email"
     DOCS=Off (default) "Install documentation (not recommended)"
===> Use 'make config' to modify these settings

---

Master Sites:

ftp://bro-ids.org/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

- Remove duplicates from MAKE_ENV after inclusion of CC and CXX in default
MAKE_ENV

- Add CONFLICTS for sysutils/lbl-cf sysutils/lbl-hf

PR:             ports/123681
Submitted by:   tabthorpe
Approved by:    Paul Schmehl <pauls utdallas.edu> (maintainer)

Migration from bison 1.x to 2.x

PR:             117086
Tested by:      -exp runs

Undo changes to the header.

security/bro, port upgrade to version 1.2.1, take over maintainership

        This is an upgrade of the security/bro port to the current
        stable version.  The port is very complex, so it needs to
        be tested carefully to make sure that I'm not screwing
        anything up or using wrong conventions. Also, I'm willing
        to take over maintainership of the port if it's accepted
        into the tree.

        Please note, there are several files that need to be removed
        from the port and quite a few that need to be added. All
        these files are in FILESDIR.  I have provided blank patches
        for the files that need to be removed, so the patches will
        create blank files.

Added IS_INTERACTIVE to the port
Left original freebsd header comments in it.
Next time please use one big patch-file instead of lots of little ones :-)

PR:             ports/114999
Submitted by:   Paul Schmehl <pauls@utdallas.edu>

Fix build with gcc41

Remove USE_REINPLACE from all categories starting with S

- Add SHA256

Revert back to devel/bison

- Switch bison dependency to bison175 port

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

- unbreak this port on 5.x

PR:             71853
Submitted by:   leeym
Approved by:    portmgr (marcus)

BROKEN on 5.x: Does not compile

Approved by:    portmgr (self)

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

SIZEify.

Fix broken (checksum mismatch) by change suffix of distro
from "-current" to "a37".

No changes for MD5.

Mark BROKEN (see bento logs).  These ports are scheduled for removal
after Feb 2 2004 if they are still broken at that time and no fixes
have been submitted by PR.

Update to 0.8, fix RESTRICTED.

Make portlint(1) happy by changing strip to ${STRIP_CMD}

Submitted by:   Oleg Karachevtsev <ok@etrust.ru>
PR:             56998

De-pkg-comment.

To ports@freebsd.org.

Remove duplicate words where appropriate.    

Add $FreeBSD$'s which help me in problem reports.    

Convert category security to new layout.  

Remove redundant/inappropriate CATEGORIES.  People need to start reading   the
Porter's Handbook.  :-)    

9 vulnerabilities affecting 12 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities