18:04 Fernando Apesteguía (fernape)  Author: Franco Fichtner

security/suricata: update man page location

PR:		276642
Reported by:	franco@opnsense.org (maintainer)

    2a22acd

19:17 Nuno Teixeira (eduardo)  Author: Franco Fichtner

security/suricata: Update to 7.0.0

* The (broken) Prelude support was removed upstream.
* Netmap API support requires version 14 now. Otherwise it has to be
  disabled to build.
* Caveats may still apply as no stable release was published yet.

  OPNsense users are reporting instability issues with Netmap compared to
  version 6.0.13, but as these things move quite slowly and demand is high
  the update shall go in since it is an official release.

ChangeLog:	https://suricata.io/2023/07/18/suricata-7-0-0-released/
PR:		267688

    62bc0ae

16:53 Robert Clausecker (fuz)  Author: Franco Fichtner

security/suricata: update to 6.0.12

Changelog: https://redmine.openinfosecfoundation.org/versions/189

PR:		271840

    eb72fc1

16:05 Fernando Apesteguía (fernape)  Author: Franco Fichtner

security/suricata: update to 6.0.8

ChangeLog: https://suricata.io/2022/09/27/suricata-6-0-7-released/

Suricata 6.0.8 fixes 2 issues in the 6.0.7 distribution:

 * libhtp 0.5.41 was not actually included
 * Suricata-Update 1.3.0dev0 was included instead of 1.2.5

PR:		266715
Reported by:	franco@opnsense.org (maintainer)
MFH:		2022Q4 (bugfix release)

    37bdde4

15:15 Fernando Apesteguía (fernape)  Author: Franco Fichtner

security/suricata: update to 6.0.6

ChangeLog: https://redmine.openinfosecfoundation.org/versions/176

PR:	265331
Reported by:	franco@opnsense.org (maintainer)

    7ac9d14

18:38 Li-Wen Hsu (lwhsu)  Author: Franco Fichtner

security/suricata: improve plist handling after setuptools changes

Substitute the suricata-update version for less noise.

PR:		264543

    c790c08

13:59 Po-Chuan Hsieh (sunpoet) 

security/suricata: Fix build with setuptools 58.0.0+

- Bump PORTREVISION for package change

With hat:	python

    6efcbee

19:33 Neel Chauhan (nc)  Author: Franco Fichtner

security/suricata: update to 6.0.5

Changes: https://forum.suricata.io/t/suricata-6-0-5-and-5-0-9-released/2415

PR:	263466

    6c203d0

17:08 Dries Michiels (driesm)  Author: Franco Fichtner

security/suricata: Update to 6.0.4

While here pet portfmt.

Changes:		https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942
PR:			260250
Approved by:		0mp (mentor)
MFH:			2021Q4
Differential Revision:	https://reviews.freebsd.org/D33335

    3571a07

20:38 Craig Leres (leres) 

security/suricata: Update to 6.0.3

PR:		257603
Approved by:	Franco Fichtner (maintainer)

    bcdd89f

15:09 Kevin Bowling (kbowling)  Author: Franco Fichtner

security/suricata: Fix plist issues

suricata-update is failing to find certain python modules when trying
to update rules.

PR:		255397
Reported by:	Ian Dickens <ian@south-border.com>
Approved by:	maintainer
MFH:		2021Q2

    b0e101e

19:53 Neel Chauhan (nc) 

security/suricata: update to 6.0.2

Changes: https://redmine.openinfosecfoundation.org/versions/162

PR:             255342
Submitted by:   Franco Fichtner <franco AT opnsense DOT org> (maintainer)

    68b4bca

14:13 rhurlin 

security/suricata: Update to 5.0.6

Changelog: https://redmine.openinfosecfoundation.org/versions/164

PR:		254579
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

10:44 pi 

security/suricata: update 5.0.2 -> 5.0.4

PR:		246093
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Relnotes:	https://suricata-ids.org/2020/04/28/suricata-5-0-3-released/
		https://suricata-ids.org/2020/10/08/suricata-4-1-9-and-5-0-4-released/
MFH:		2020Q4

 

13:30 amdmi3 

- Update to 5.0.1

PR:		242658
Submitted by:	franco@opnsense.org (maintainer)

 

13:25 tcberner 

security/suricata: update to 5.0.0

PR:		241452
Submitted by:	Franco Fichtner <franco@opnsense.org>  (maintainer)

 

22:09 garga 

security/suricata: Update to 4.1.5

PR:		240793
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
MFH:		2019Q3
Security:	CVE-2019-16410 CVE-2019-16411
Sponsored by:	Rubicon Communications, LLC (Netgate)

 

08:40 joneum 

Update to 4.1.4

Changelog: https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/

PR:		237684
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Sponsored by:	Netzkommune GmbH

 

14:35 garga 

- Update security/suricata to 4.1.3 [1]
- Add support to python 3.x [2]

PR:		236385
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer) [1]
		garga [2]
Approved by:	Franco Fichtner <franco@opnsense.org> (maintainer) [2]
Obtained from:	pfSense [2]
Sponsored by:	Rubicon Communications, LLC (Netgate) [2]

 

11:17 joneum 

Update to 4.1.2

Changelog: https://suricata-ids.org/2018/12/21/suricata-4-1-2-released/

PR:		234271
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Sponsored by:	Netzkommune GmbH

 

06:37 joneum 

Update to 4.1.1

Changelog: https://suricata-ids.org/2018/12/17/suricata-4-1-1-available/

PR:		234128
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Sponsored by:	Netzkommune GmbH

 

16:04 swills 

security/suricata: multiple changes to previous update

* Rename SC to PYTHON to reflect the new state of the option
* Remove PRELUDE from defaults
* Add PYTHON to defaults
* Add RUST to defaults

PR:		231839
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

20:18 swills 

security/suricata: Fix plist with SC option on

PR:		231839
Reported by:	antoine

 

01:31 swills 

security/suricata: update to 4.1

PR:		231839
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)

 

14:50 joneum 

- security/suricata: Update from 3.2.2 to 3.2.3
- Changelog: https://suricata-ids.org/2017/07/13/suricata-3-2-3-available/

PR:		220758
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Approved by:	miwi (mentor)
Differential Revision:	https://reviews.freebsd.org/D11639

 

15:06 ultima 

* Updated to 3.2.2
* Depends on libhtp 0.5.24 or greater
* Listen on multiple PCAP interfaces via RC script
* Dependencies added in the 3.2.1 update move to the PRELUDE option where they
belong

 - Support additional runmodes for unix-socket
 - make install-full can have race conditions on OSX
 - af-packet: faulty VLAN handling in tpacket-v3 mode
 - bad checksum 0xffff
 - ippair: xbit unset memory leak
 - file store: file log / file store mismatch with multiple files
 - app-layer: fix memleak on bad traffic
 - http body handling: failed assertion
 - ippair: pair is direction sensitive
 - defrag - overlap issue in linux policy
 - unix socket: race condition on start up

PR:		220026
Submitted by:	Franco Fichtner <franco@opnsense.org> (maintainer)
Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D11251

 

13:33 mat 

Update to 3.2.1.

Pass maintainership to submitter.

PR:		217143
Submitted by:	Franco Fichtner
Approved by:	maintainer timeout
Sponsored by:	Absolight

 

02:30 koobs 

security/suricata: Update to 3.1.2

- Update PORTVERSION and distinfo checksum (3.1.2)
- Update pkg-plist


  https://github.com/inliniac/suricata/blob/suricata-3.1.2/ChangeLog

PR:		212815
Submitted by:	Franco Fichtner <franco opnsense org>

 

05:12 koobs 

security/suricata: Fix plist with HTP_PORT option disabled

Update pkg-plist entry for shared library version missed due to not testing
with HTP_PORT disabled.

Pointyhat:	koobs

PR:		210490
Reported by:	Franco Fichtner <franco opnsense org>

 

14:21 koobs 

security/suricata: Update to 3.1.1

* Update PORTVERSION and distinfo checksum (3.1.1) [1]
* Update pkg-plist for shared library bump [2]
* Use postunexec instead of unexec in pkg-plist
* Group common OPTIONS_* entries
* Group *_TARGET entries


  https://github.com/inliniac/suricata/blob/suricata-3.1.1/ChangeLog

PR:		210490 [1][2]
Submitted by:	Stewart Morgan <stewart.morgan gmail com> [1]
Submitted by:	Franco Fichtner <franco opnsense org> [2]

 

05:42 koobs 

security/suricata: Add rules files, netmap startup support

- Install missing rules files [1]
- Add netmap support and simplify pid file naming [2]

PR:		204838 [1], 204834 [2]
Submitted by:	Bill Meeks <bmeeks8 bellsouth net> [1]
Submitted by:	Franco Fichtner <franco opnsense org> [2]

 

11:25 koobs 

security/suricata: Update to 3.0 RC1

- Update to 3.0 release candidate 1 (Welcome Netmap support!)
- Update pkg-plist accordingly
- Add NETMAP option (Enabled by default for packages)
- Sort OPTIONS_* alphabetically
- Enable verbose builds
- Remove patches (upstreamed)
- Update test target

 

16:05 antoine 

- Add JSON to OPTIONS_DEFAULT to match default configuration where eve-log
  support is enabled
- Package threshold.config configuration file

PR:		197937
Approved by:	koobs (maintainer)

 

07:12 koobs 

security/suricata: Update to 2.0.6, add lots of OPTIONS

- Update to 2.0.6
- Update pkg-plist
- Add LICENSE_FILE
- Add OPTIONS for:

  * LUA scripting support
  * LUAjit scripting support
  * Suricata socket client

- Fix a reverse logic bug for JSON option
- Suricata links to nspr as a dependent of nss, add it to LIB_DEPENDS
- Create LOGS_DIR post-install
- Add patch to fix upstream issue 1353 [1]

[1] https://redmine.openinfosecfoundation.org/issues/1353

PR:		196801
Submitted by:	cheffo freebsd-bg org (with changes)

 

15:11 koobs 

security/suricata: Update to 2.0.5, Add NSS support

- Update to 2.0.5
- Add NSS option for file checksum and fingerprint support [1]
- Add default rules files [1]
- Add USES=autoreconf, remove USE_AUTOTOOLS and friends
- Override PATHFIX_MAKEFILEIN
- Use the install-strip target
- Fix HTP_PORT_CONFLICT_OFF typo (CONFLICT*S*)
- USES=iconv when using the bundled HTP version
- Cleanup and fix OPTION descriptions
- Sort OPTIONS and helpers
- Use the existing NO_HTP_PORT variable in pkg-plist (OPTIONS_SUB), remove
  MHTP_PORT conditional accordingly

PR:		194953 [1]
Submitted by:	Bill Meeks <bmeeks8 bellsouth net> [1]

 

15:57 garga 

- Update suricata to 2.0.4 [1]
- Added JSON knob - this allows Suricata to be compiled with JSON output support
- Added GEOIP knob - this allows Suricata to support rules with geoip word
- Added HTP_PORT knob - this make the use of www/libhtp-suricata optional. E.g.
  user can choose between build-in and port version.
- Unbreak PLIST renaming sample files from -sample to .sample

PR:		193220 [1]
Submitted by:	cheffo [1]
Approved by:	maintainer timeout (> 2 months)
Security:	CVE-2014-6603

 

15:40 bapt 

Simplify plist by using @sample and @dir

 

03:09 koobs 

security/suricata: Update to 1.4.6, Switch to libhtp-suricata, Un-BROKEN Clang.

- Update to 1.4.6
- Switch to the correct library in www/libhtp-suricata
- Take maintainership
- Enable STAGE support
- Remove uneccessary patches
- Configure: Add libhtp include and library location
- Configure: Add /var to --localstatedir
- Configure: Disable Python support explicitly
- QA: Remove BROKEN with clang
- QA: Update to new LIB_DEPENDS format
- QA: Use ETCDIR instead of custom path for CONFIG_DIR and RULES_DIR
- QA: Replace hardcoded strings with ${PORTNAME}
- QA: Add documentation and %%DOCSDIR%% to pkg-plist
- QA: Add TESTS option to include unit tests in binary
- QA: Add regression-test target (TMPDIR is not prefix safe)
- QA: Replace USE_GMAKE with USES=gmake
- QA: Remove automake from USE_AUTOTOOLS
- QA: Remove LICENSE_FILE for those listed in bsd.licenses.db.mk
- QA: Remove post-patch target
- QA: Sort USE/USES and combine LIB_DEPENDS
- QA: Clarify and tweak OPTIONS descriptions

Reviewed by:	wxs, mva, Johannes Meixner
Approved by:	wxs (maintainer)

 

12:04 zi 

- Do not overwrite files from devel/libhtp [1]
- Do not overwrite customized config files [1]
- Optionally depend on libpcap from ports (off by default) [1]
- Detect and use gcc hardening options by default
- Cleanup language/whitespace
- Bump PORTREVISION

PR:             ports/164237 [1]
Submitted by:   Geoffroy Desvernay <dgeo@centrale-marseille.fr> [1]
Feature safe:   yes

19:34 wxs 

- Update to 1.1.1.
- Use libhtp from ports instead of the bundled one.
- Remove check for 6.x.

PR:             ports/163603
Submitted by:   wxs@
Approved by:    eksffa@freebsdbrasil.com.br (maintiner timeout)

15:31 jmelo 

The Suricata Engine is an Open Source Next Generation Intrusion Detection and
Prevention Engine developed by the Open Information Security Foundation (OISF).

This engine is not intended to just replace or emulate the existing tools in
the industry, but will bring new ideas and technologies to the field.

OISF is part of and funded by the Department of Homeland Security's Directorate
for Science and Technology HOST program (Homeland Open Security Technology),
by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as
through the very generous support of the members of the OISF Consortium.

More information about the Consortium is available, as well as a list of our
current Consortium Members.

The Suricata Engine and the HTP Library are available to use under the GPLv2.

The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of
Mod Security fame for the OISF. This integrates and provides very advanced
processing of HTTP streams for Suricata. The HTP library is required by the
engine but may also be used independently in a range of applications and tools.

WWW: http://openinfosecfoundation.org

PR:             ports/150191
Submitted by:   Patrick Tracanelli <eksffa@freebsdbrasil.com.br>