05:04 Don Lewis (truckman) 

dns/dnstable-convert: Move man pages to share/man

Move the man pages.  We no longer need post-install to install them.

Sponsored by:	DomainTools LLC

    b75402a

05:35 Don Lewis (truckman) 

net/nmsg: 1.1.0

1.1.0:
 * Multiple performance improvements to JSON formatting.

 * Multiple performance and concurrency improvements in nmsg_io loop.

 * Add new dnsobs message type for raw passive DNS observations.

 * Format DNS messages as JSON in base:dnsqr, base:dnstap, and
   base:dnsobs.

 * Format base:encode payload in human readable form in JSON output.

 * Replace yajl with json-c for JSON parsing.

 * nmsgtool: exit with nonzero status when interrupted by signal.

 * Correct container size calculation when sequencing.

 * Address doxygen deprecations.

Build fails with JSON_C option turned off, mark BROKEN.  Reported
upstream.

Bump PORTREVISION of dependent ports

MFH:		2023Q3
Sponsored by:	DomainTools LLC

    c08c8db

03:16 Don Lewis (truckman) 

dns/dnstable-convert: Upgrade to 0.12.0

* dnstable_convert: add -p option to not remove generated mtbl file
  with no records.

* dnstable_convert: additional logging at startup and exit.

* dnstable_convert: increase file descriptor resource limit at startup.

* dnstable_unconvert: sort rdata values in "wdns_sort_rrset" order
  for consistency with other dnstable data sources.

The problem fixed by patch-dnstable__convert.c has been fixed upstream.

Sponsored by:	DomainTools LLC

    38d711f

21:10 Stefan Eßer (se) 

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

    b7f0544

05:31 Don Lewis (truckman) 

dns/wdns: Upgrade to version 0.11.0

  * Improve support for CAA records. (CAA was previously rendered as a
    "generic" rdata type.)

  * Bug fix for NSEC/NSEC3/CSYNC: do not output empty rrtype bitmaps
    per RFC6840 section 6.4.

  * Fix parsing of A6 records that ommit and address portion. Correct
    parsing of A6 records with prefix length 0. Correct handling of
    A6 address bytes. The address bytes of an A6 record are an address
    suffix relative to the prefix represented by the domain name, and
    so must be copied to and from the lower order bytes of the internal
    address representation. These A6 code updates were for the purposes
    of clearing "round trip" test errors in the existing code base.
    (A6 is deprecated and was moved to historic status.)

  * Fix bug in IPv6 prefix length processing in
    _wdns_str_to_rdata_ubuf().

  * Add support for SVCB and HTTPS resource record types. This is based
    on an Internet-Draft but is widely used in the real world.
    https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-https-08

Bump PORTREVISION of dependent ports due to shared library version
change.

Sponsored by:	DomainTools

    9c3e1c5

04:46 Don Lewis (truckman) 

dns/dnstable-convert: Upgrade to version 0.11.0

dnstable-convert 0.11.0:

  * Add new tool dnstable_unconvert which converts the RRSET entries of
    a dnstable file to the equivalent NMSG format.

  * Add SVCB and HTTPS records indexing support, based upon
    draft-ietf-dnsop-svcb-https-07. Note that the hostname portion in
    the RDATA is downcased in the sliced encoding and reversed name
    entry.

  * Put CDS, CDNSKEY, and TA resource record types into dnssec.*
    output files. To duplicate these three DNSSEC types to the dns.*
    output files for compatibility, use the new dnstable_convert -D
    option.

  * Put RRtype in the currently empty value portion of RRSET_NAME_FWD
    and RDATA_NAME_REV indexes if it's in range (1 to 65535). Use an
    8-bit integer if it is less than 256, else uses a 16-bit little
    endian integer.

  * Generate ENTRY_TYPE_TIME_RANGE and ENTRY_TYPE_VERSION metadata
    entries in output dnstable files.

  * The versions of the following entries are:

    ENTRY_TYPE_RRSET = 0
    // Initial version.

    ENTRY_TYPE_RRSET_NAME_FWD = 1
    // Add rrtype union as value.

    ENTRY_TYPE_RDATA = 1
    // Fix the SRV slicing and add SVCB/HTTPS sliced entries.

    ENTRY_TYPE_RDATA_NAME_REV = 1
    // Add SOA, SVCB, and HTTPS name indexing; add rrtype union
    // as value.

  * dnstable_convert: use input file - (dash) for standard input
    (stdin).

  * dnstable_convert: add -c compression option to set type of
    compression used. This defaults to zlib.

  * dnstable_convert: add -l compression option to set compression
    level.

  * dnstable_convert: add -m option to specify maximum megabytes of
    memory to use for in-memory sorting. It defaults to 2048 MB.

  * Various changes to the status output from dnstable_convert when it
    runs.

  * Documentation and testing improvements.

Sponsored by:	Farsight Security, Inc.

    260f366

19:49 Don Lewis (truckman) 

net/nmsg: upgrade to version 1.0.0

  The network encapsulation library, nmsg, version 1.0.0 is released.
  This release deprecates Crossroads I/O (libxs) support in favor of
  ZeroMQ (libzmq). Note command-line updates enabling ZeroMQ socket
  connections for nmsgtool, as described in its man page. In addition
  the treatment of unknown rrtypes was amended for nmsgtool JSON
  output. In detail:

    Replace libXS with ZeroMQ and associated calls.

    Developer API functions nmsg_input_open_xs(),
    nmsg_input_open_xs_endpoint(), nmsg_io_add_input_xs_channel(),
    nmsg_output_open_xs(), and nmsg_output_open_xs_endpoint() are
    deprecated and replaced with respectively: nmsg_input_open_zmq(),
    nmsg_input_open_zmq_endpoint(), nmsg_io_add_input_zmq_channel(),
    nmsg_output_open_zmq(), and nmsg_output_open_zmq_endpoint().

    Update nmsgtool command-line options: --readzchan replaces --readzsock,
    --writezsock replaces --writexsock, --readzsock replaces --readxsock.

    Change format of unknown rrtypes in nmsgtool JSON output to "TYPE"
    followed by number.

Expose --without-yajl and --without-libzmq configure flags as port options.

This upgrade changes the libnmsg.so version number, bump PORTREVISION
of the dependent ports.

Sponsored by:	Farsight Security, Inc.

    05a4690

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

17:14 truckman 

New port dns/dnstable_convert.  It was split out of dnstable to reduce the
dependencies of dnstable.

dnstable_convert is a conversion utility for passive DNS data in
dnstable format.

Sponsored by:	Farsight Security, Inc.