The Suricata Engine is an Open Source Next Generation Intrusion Detection and
Prevention Engine developed by the Open Information Security Foundation (OISF).
This engine is not intended to just replace or emulate the existing tools in
the industry, but will bring new ideas and technologies to the field.
OISF is part of and funded by the Department of Homeland Security's Directorate
for Science and Technology HOST program (Homeland Open Security Technology),
by the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as
through the very generous support of the members of the OISF Consortium.
More information about the Consortium is available, as well as a list of our
current Consortium Members.
@postunexec if [ -d %D/etc/suricata ]; then echo "==> If you are permanently removing this port, run ``rm -rf ${PKG_PREFIX}/etc/suricata`` to remove configuration files."; fi
===> The following configuration options are available for suricata-8.0.7_1:
GEOIP=off: GeoIP support
HYPERSCAN=off: Hyperscan support
IPFW=on: IPFW and IP Divert support for inline IDP
NETMAP=on: Netmap support for inline IDP
NSS=off: File checksums and SSL/TLS fingerprinting
PORTS_PCAP=off: Use libpcap from ports
PYTHON=on: Python-based update and control utilities
REDIS=off: Redis output support
TESTS=off: Unit tests in suricata binary
====> Scripting: you can only select none or one of them
LUA=off: LUA scripting support
LUAJIT=off: LuaJIT scripting support
===> Use 'make config' to modify these settings
lang/luajit: update to v2.1
Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.
Discussed with: adamw
PR: 225342
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc
EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.
Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.
(Only the first 15 lines of the commit message are shown above )
security/suricata: Update to 7.0.0
* The (broken) Prelude support was removed upstream.
* Netmap API support requires version 14 now. Otherwise it has to be
disabled to build.
* Caveats may still apply as no stable release was published yet.
OPNsense users are reporting instability issues with Netmap compared to
version 6.0.13, but as these things move quite slowly and demand is high
the update shall go in since it is an official release.
ChangeLog: https://suricata.io/2023/07/18/suricata-7-0-0-released/
PR: 267688
security/suricata: update to 6.0.11
ChangeLog: https://forum.suricata.io/t/suricata-6-0-11-released/3409
* LibHTP has been updated to 0.5.43. This is a required version that is bundled
with the release.
* Various security, performance, accuracy, and stability issues have been fixed
PR: 270945
Reported by: franco@opnsense.org (maintainer)
security/suricata: update to 6.0.9
ChangeLog: https://suricata.io/2022/11/29/suricata-6-0-9-released/
LibHTP has been updated to 0.5.42 and is bundled with the release.
Various security, performance, accuracy and stability issues have been fixed.
PR: 268347
Reported by: franco@opnsense.org (maintainer)
security/suricata: update to 6.0.8
ChangeLog: https://suricata.io/2022/09/27/suricata-6-0-7-released/
Suricata 6.0.8 fixes 2 issues in the 6.0.7 distribution:
* libhtp 0.5.41 was not actually included
* Suricata-Update 1.3.0dev0 was included instead of 1.2.5
PR: 266715
Reported by: franco@opnsense.org (maintainer)
MFH: 2022Q4 (bugfix release)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
rust: bring back update to 1.63
Revert back the revert of the update of rust and related commits
This revert was drive by beside validation by portmgr via exp-run
and not respectful of the etiquette we have between committers
This reverts commit 8ecb1f8141144c1603eb4026122d2e60eeaccd64.
This reverts commit 04d257baa182926cff158f32cf459e560426add0.
This reverts commit 2757c63bd0e6d01f9f0657fe03bb3a7b49adcae2.
This reverts commit 75f4713de5e3fbd1c6a0cb572e08121814a4072e.
This reverts commit e88e592111c86fdd1c0ac8717dbef9342e15e27c.
This reverts commit 783c056d7d681d66e2c5c59251c275d65274028e.
With hat: portmgr
security/suricata: Add patch for upstream locking fix
https://redmine.openinfosecfoundation.org/issues/4478
- Suricata 6 may stop forwarding traffic due to lock/unlock executed
between CPUs, which is undetermined behaviour.
PR: 258335
Approved by: Franco Fichtner (maintainer)
security/suricata: Use lang/luajit-openresty
Change optional LUAJIT dependency to lang/luajit-openresty and make it
possible to build it on aarch64
PR: 257749
Approved by: Franco Fichtner <franco@opnsense.org> (maintainer)
Obtained from: pfSense
Sponsored by: Rubicon Communications, LLC ("Netgate")
security/suricata: Fix plist issues
suricata-update is failing to find certain python modules when trying
to update rules.
PR: 255397
Reported by: Ian Dickens <ian@south-border.com>
Approved by: maintainer
MFH: 2021Q2
