20:22 Nuno Teixeira (eduardo) 

security/snort: Move man pages to share/man

Approved by:	portmgr (blanket)

    0d69cb6

20:02 Dan Langille (dvl) 

security/snort: Update to 2.9.20

[*] New Additions

        Added support for dns root queries and underflow.
        Added support to get extra data from SMTP and HTTP into IPS event.
        Added support for login success and failure eventing for IMAP and POP3.
        Added support to handle empty string for SNI/CN/SAN/ORG.

[*] Improvements / Fix

        Fixed a scenario where SSL traffic was not detected correctly.
        Fixed security zones info in intrusion events.
        Fixed URL lookup failure.

    0839acb

19:01 Dan Langille (dvl) 

security/snort: Update to 2.9.19

re: https://blog.snort.org/2021/12/open-source-version-of-snort-29190.html

    3174656

19:52 Dan Langille (dvl) 

security/snort: Fixes for aarch64 and armv6/7

This patch does a few things:

1. Update depends to a newer version of net/daq, in the ports tree for a
   long time already, but explicitly depend on it.
2. Split out corefiles separate from debug options
3. Switch from luajit to luajit-openresty so that snort can build on
   aarch64
4. Fix crashing on armv7 due to misaligned memory access (from mjg@)

While here, in pkg-plist change deprecated @unexec to @postunexec

PR:		257747
Reported by:	brd

    c2a4ab1

17:05 Dan Langille (dvl) 

security/snort: Update to 2.9.18

    45ccf3d

16:48 dvl 

Update to 2.9.17

re: https://blog.snort.org/2020/11/snort-29170-has-been-released.html

 

21:00 dvl 

Upgrade to Upgrade to 2.9.14.1

Take maintainership.

PR:		239667
Submitted by:	Gilbert Morgan <gmm@tutanota.com>
Approved by:	zi (maintainer)

 

14:21 dvl 

Fix build when APPID is on

Approved by:	zi (maintainer)

 

01:12 zi 

- Update to 2.9.11.1

 

18:03 dvl 

Fix broken build related to missing %%APPID%% prefixes in pkg-plist
bump PORTREVISION

PR:		219459

 

15:23 dvl 

upgrade to 2.9.9.0

Approved by:	zi (maintainer)

 

09:41 bapt 

Convert to @sample

 

16:50 zi 

- Update to 2.9.8.0

 

13:19 zi 

- Add missing conf/doc/library when FILEINSPECT is enabled

PR:		194955
Submitted by:	Bill Meeks <bmeeks8@bellsouth.net>

 

01:14 zi 

- Add support for new experimental features
- Remove old features

 

23:34 zi 

- Update to 2.9.7.0

 

19:34 zi 

- Update to 2.9.6.1

 

01:14 bdrewery 

- Fix plist to have proper 'rmdir DIR' ordering.
  Pkgng will not detect the directory otherwise. This was due to
  incorrectly advise in the check-stagedir.sh script, fixed in
  r351587

With hat:	portmgr

 

22:58 zi 

- Update to 2.9.6.0

 

23:40 bapt 

Fix properties on pkg-plist

 

18:34 zi 

- Update to 2.9.5.6
- Add STAGE support [1]
- Remove SNORTSAM support due to lack of upstream support [1]
- Makefile cleanup [1]
- Use new configure magic [1]

PR:		ports/185274 [1]
Submitted by:	ohauer@ [1]

 

21:01 zi 

- Update to 2.9.5.3
- Don't build example dynamic preprocessor

 

03:21 miwi 

- Do not remove directories not created by this port

Reported by:	pkg (DEVELOPER_MODE)

 

16:35 zi 

- Update to 2.9.4

Feature safe:	yes

 

14:19 zi 

- Update to 2.9.3
- Convert to OptionsNG

19:26 zi 

- Do not install examples whenever NOPORTEXAMPLES is defined [1]
- Do not install duplicate sample config files
- Do not bump PORTREVISION

PR:             ports/165800 [1]
Submitted by:   Michael Scheidell <scheidell@FreeBSD.org> [1]
Feature safe:   yes

00:50 zi 

- Update to 2.9.2

13:42 zi 

- Update to 2.9.1.1

PR:             ports/161347
Submitted by:   Ryan Steinmetz <zi@FreeBSD.org>
Approved by:    Dean Freeman <wfreeman@sourcefire.com> (maintainer)

01:36 zi 

Update to 2.9.1
Add LICENSE

PR:             ports/160044
Submitted by:   zi@
Approved by:    wxs (mentor), maintainer timeout

22:17 pav 

- Remove stray cmd from plist that created bogus file on pkg_add

Reported by:    pointyhat

08:01 sunpoet 

- Update to 2.9.0.4
- Update snortsam checksum
- Fix LIBNET_CONFIG issue
- Pet portlint

Changes:        http://www.snort.org/downloads/740
PR:             ports/154668
Submitted by:   Dean Freeman <wfreeman@sourcefire.com> (maintainer)

06:50 clsung 

- Update to 2.9.0.3 [1]
- pass maintainership to William Freeman <wfreeman_AT_sourcefire dot com>

Note: This attached patch replaces the one in ports/153998.
      Also fixes the location of the dynamic libs/rules in ports/153224.
PR:             ports/154514 [1], ports/153998 [2]
Submitted by:   Michael Scheidell <scheidell_AT_secnap dot net>

12:57 clsung 

- Update to 2.8.6
- name for one patch has changed from patch-snort.conf to patch-etc__snort.conf
  (easier to build diffs with 'make makepatch')
- snort.conf was replaced with the version shiped in the rules tarball
  (Maybe users shoud be pointed to the Changelog)

PR:             ports/146155
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

03:03 clsung 

- update snort to version 2.8.5.2

RELEASE.NOTES
2009-12-15 - Snort 2.8.5.2

[*] Improvements
* Improvements to HTTP Inspect for handling of pipelined requests
and chunked encodings.

* Updated the documentation for output plugins and log limits.

* Fixed building on AIX 6.

* Fixed reloading of auto-iface variables when privileges had been dropped.

* Fixed issues at startup and perfstats rotation with old versions of
libc (2.2, 2.3) & linux threads.

PR:             ports/142885
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

05:02 clsung 

- Update to 2.8.5.1

02:26 clsung 

- Update to 2.8.4.1

02:26 clsung 

- Update to 2.8.2.1
- 2008-06-12 - Snort 2.8.2.1

  [*] Improvements
  * Fix support for pass rules that sometimes did not take precedence
  over alert and/or drop rules.

PR:             ports/124717
Submitted by:   Michael Scheidell <scheidell_AT_secnap dot net>

09:57 clsung 

- Update to 2.8.1

02:22 clsung 

- Update to 2.8.0.2

PR:             ports/121103
Submitted by:   Jo Rhett <jrhett_AT_netconsonance dot com>
Reviewed by:    clsung

06:42 clsung 

- Update to 2.6.1.4
- Fix initial copy of configuration files.

PR:             ports/111533
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

08:59 clsung 

- Update snort to latest version (2.6.1.1)

PR:             ports/106368
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>

08:47 clsung 

- Update to 2.6.0.2
- let snort to packet sniff several different network interfaces
  - Contributed by Matthew Seaman <matthew dot seaman_AT_thebunker dot net>

04:26 clsung 

- Update to 2.6.0
- I'll maintain it now.

PR:             ports/99862
Submitted by:   Linh Pham <question+fbsdports_AT_closedsrc dot org>

11:34 pav 

- Update to 2.4.5

PR:             ports/98773
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org> (maintainer)

02:50 edwin 

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

15:07 sergei 

- Update to 2.4.1
- Snort distribution no longer includes rules - download them seperately
  (or consider using security/oinkmaster to simplify that process)
- Change default config dir to ${PREFIX}/etc/snort (to avoid cluttering)
- Install database schemas scripts into EXAMPLESDIR

09:35 sergei 

- Upgrade to 2.3.0 [1]
- Add WITH_PRELUDE knob to enable integration with Prelude IDS [2]

PR:             ports/76679 [1]
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org> [1]
Prompted by:    Roberto Bosticardo <roberto.bosticardo@csp.it> [2]

07:37 sergei 

- Upgrade to 2.2.0 [1]
- Prevent local.rules from being clobbered [2]
- Revive OPTIONS - the time has come... ;)

PR:             ports/70332 [1], ports/70814 [2]
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org> [1],
                Jez Hancock <jez.hancock@munk.nu> [2]

22:17 sergei 

- Update to 2.1.3 [1]
- Use rcNG startup script [2]

PR:             ports/67842 [1], ports/67935 [2]
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org> [1],
                Renato Botelho <renato@galle.com.br> [2]

08:15 sergei 

- Update to 2.1.1
- Remove patches not needed anymore

PR:             ports/63373
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org>

22:54 sergei 

- Install missing config files: unicode.map and threshold.conf
  (snort fails to run without them present in ${PREFIX}/etc)
- Bump PORTREVISION

Noticed by:     Kirby Kuehl <kkuehl@cisco.com>

11:30 sergei 

- Add missing dependency on devel/pcre (mandatory)
- Bump PORTREVISION

PR:             60520
Submitted by:   Kenneth Ingham <freebsdpr@i-pi.com>

While I'm here:
- Fix configure's search for libnet (needed for WITH_FLEXRESP)
  when LOCALBASE != /usr/local
- Add CONFIGURE_TARGET to silence warning
- Use DOCSDIR in pkg-plist and re-sort
- Take maintainership (until someone else step up)

23:20 sergei 

- Update to 2.1.0 [1]
- Install some additional documentation [1]
- Fix WITH_MYSQL, WITH_ODBC and WITH_POSTGRES knobs [2]

PR:             60400 [1], 59445 [2]
Submitted by:   Nicolas Jombart <ecu@ipv42.net> [1],
                Ken Stailey <kstailey@yahoo.com> [2]

16:33 osa 

Update to 2.0.5 [1]
Use %%DOCSDIR%% and %%DATADIR%% macros [2]

Submitted by:   Linh Pham <question@closedsrc.org> [1], osa [2]
PR:             59510

11:52 nork 

Update to 2.0.2.

PR:             ports/57604
Submitted by:   Alex Dupre <sysadmin@alexdupre.com>

13:48 edwin 

irc.d script for security/snort

        This is a sample script for ${PREFIX}/etc/rc.d that will
        wake snort up on boot, and take it down on shutdown. Nothing
        fancy here.  This is needed, because I'm planning on teaching
        ACID many new things, and ACID expects snort to help itself.
        There is only one thing that requires thinking here: This
        should run only after {MySQL|PostgreSQL} server is up, as
        snort might want to report to the local server.

PR:             ports/49047
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>
Approved by:    maintainer timeout

21:45 kris 

Update to snort 2.0.0.  This fixes a security vulnerability:

  The Sourcefire Vulnerability Research Team has learned of an integer
  overflow in the Snort stream4 preprocessor used by the Sourcefire
  Network Sensor product line. The Snort stream4 preprocessor
  (spp_stream4) incorrectly calculates segment size parameters during
  stream reassembly for certain sequence number ranges which can lead to
  an integer overflow that can be expanded to a heap overflow.

PR:     51106
Submitted by:   Sergey A. Osokin <osa@FreeBSD.org.ru>

07:21 kris 

Update to snort-1.9.1.  This is an important security update:

A buffer overflow has been found in the snort RPC normalization
routines by ISS X-Force. This can cause snort to execute
arbitrary code embedded within sniffed network packets. This
preprocessor is enabled by default.

09:48 kris 

Update to snort 1.9.0.  Tweak the default config files so it can actually
find its installed ruleset [1].  Install config files by default if there is
not already one present, and remove on deinstall if they are unchanged
from the default.

Submitted by:   The Anarcat <anarcat@anarcat.dyndns.org> [1] (based on)
PR:             ports/33887 [1]

09:46 kris 

Update to snort 1.8.3, a stability and bugfix release.    

20:49 dirk 

Update to 1.8.1-RELEASE.    

23:22 dirk 

Upgrade to 1.8p1.    

09:43 dirk 

Upgrade to 1.8-RELEASE.    

07:55 dirk 

Upgrade to 1.7.