diff options
Diffstat (limited to 'security')
| -rw-r--r-- | security/snort/Makefile | 21 | ||||
| -rw-r--r-- | security/snort/distinfo | 6 | ||||
| -rw-r--r-- | security/snort/pkg-plist | 63 |
3 files changed, 80 insertions, 10 deletions
diff --git a/security/snort/Makefile b/security/snort/Makefile index 151bfd091f63..146bbd6a408d 100644 --- a/security/snort/Makefile +++ b/security/snort/Makefile @@ -6,7 +6,7 @@ # PORTNAME= snort -PORTVERSION= 2.9.0.5 +PORTVERSION= 2.9.1 CATEGORIES= security MASTER_SITES= SF/snort/snort @@ -15,10 +15,13 @@ PATCH_DIST_STRIP= -p1 MAINTAINER= wfreeman@sourcefire.com COMMENT= Lightweight network intrusion detection system +LICENSE= GPLv2 +LICENSE_FILE= ${WRKSRC}/LICENSE + LIB_DEPENDS= pcre.0:${PORTSDIR}/devel/pcre -BUILD_DEPENDS= daq>=0.5_1:${PORTSDIR}/net/daq \ +BUILD_DEPENDS= daq>=0.6.1:${PORTSDIR}/net/daq \ ${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet -RUN_DEPENDS= daq>=0.5_1:${PORTSDIR}/net/daq \ +RUN_DEPENDS= daq>=0.6.1:${PORTSDIR}/net/daq \ ${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet OPTIONS= IPV6 "Enable IPv6 support" on \ @@ -35,6 +38,7 @@ OPTIONS= IPV6 "Enable IPv6 support" on \ ODBC "Enable ODBC support" off \ POSTGRESQL "Enable PostgreSQL support" off \ PRELUDE "Enable Prelude NIDS integration" off \ + LRGPCAP "Enable pcaps larger than 2GB" off \ SNORTSAM "Unofficial Snortsam Patch" off .include <bsd.port.options.mk> @@ -71,7 +75,7 @@ LIBNET_INCDIR= ${LIBNET_CFLAGS:M-I*:S/-I//} LIBNET_LIBDIR= ${LIBNET_LIBS:M-L*:S/-L//} CONFIGURE_ARGS= --enable-dynamicplugin --enable-build-dynamic-examples \ - --enable-reload --enable-reload-restart \ + --enable-reload --enable-reload-error-restart \ --disable-corefiles \ --with-dnet-includes=${LIBNET_INCDIR} \ --with-dnet-libraries=${LIBNET_LIBDIR} @@ -117,6 +121,10 @@ CONFIGURE_ARGS+= --disable-prelude PLIST_SUB+= PRELUDE="@comment " .endif +.if defined(WITH_LRGPCAP) +CONFIGURE_ARGS+= --enable-large-pcap +.endif + .if defined(WITH_PERFPROFILE) CONFIGURE_ARGS+= --enable-perfprofiling --enable-ppm .endif @@ -154,9 +162,10 @@ CONFIGURE_ARGS+= --enable-react .endif .if defined(WITH_SNORTSAM) +BROKEN= snortsam patches not available for 2.9.1 yet USE_AUTOTOOLS+= automake PATCH_SITES+= http://www.snortsam.net/files/snort-plugin/:snortsam -PATCHFILES+= snortsam-2.9.0.3.diff.gz:snortsam +PATCHFILES+= snortsam-2.9.1.diff.gz:snortsam .endif post-patch: @@ -171,6 +180,8 @@ pre-configure: ${REINPLACE_CMD} -e 's|^dynamicdetection|#dynamicdetection|' ${WRKSRC}/etc/snort.conf ${REINPLACE_CMD} -e '/var HOME_NET/s/any/[YOU_NEED_TO_SET_HOME_NET_IN_snort.conf]/' ${WRKSRC}/etc/snort.conf ${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' ${WRKSRC}/Makefile.in + ${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' \ + ${WRKSRC}/src/dynamic-preprocessors/libs/Makefile.in ${REINPLACE_CMD} -e 's|libnet-config|${LIBNET_CONFIG}|g' ${WRKSRC}/configure .if !defined(WITH_IPV6) ${REINPLACE_CMD} -e 's|^ipvar |var |' ${WRKSRC}/etc/snort.conf diff --git a/security/snort/distinfo b/security/snort/distinfo index 933a0990dda6..fd544c5dfeb3 100644 --- a/security/snort/distinfo +++ b/security/snort/distinfo @@ -1,4 +1,2 @@ -SHA256 (snort-2.9.0.5.tar.gz) = f997fddbbd1a5f7ccdd4153610b0916fcbe105ea3316d4ed3487fd0054287e94 -SIZE (snort-2.9.0.5.tar.gz) = 5867934 -SHA256 (snortsam-2.9.0.3.diff.gz) = da0f9567f213c69e3682bfda4c6310090ce255b0495c02984b3f7e089b19e149 -SIZE (snortsam-2.9.0.3.diff.gz) = 28889 +SHA256 (snort-2.9.1.tar.gz) = cf7e792e3df872eb4345c2af160be2b9e49765ac3d41c292f4f8f96d2d7da089 +SIZE (snort-2.9.1.tar.gz) = 6265578 diff --git a/security/snort/pkg-plist b/security/snort/pkg-plist index 53998b9960c0..3e80838fdcfe 100644 --- a/security/snort/pkg-plist +++ b/security/snort/pkg-plist @@ -33,7 +33,6 @@ etc/snort/preproc_rules/sensitive-data.rules-sample @dirrmtry etc/snort/preproc_rules @dirrmtry etc/snort %%DYNAMIC%%src/snort_dynamicsrc/bitop.h -%%DYNAMIC%%src/snort_dynamicsrc/debug.h %%DYNAMIC%%src/snort_dynamicsrc/event.h %%DYNAMIC%%src/snort_dynamicsrc/obfuscation.h %%DYNAMIC%%src/snort_dynamicsrc/pcap_pkthdr32.h @@ -41,6 +40,7 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%DYNAMIC%%src/snort_dynamicsrc/preprocids.h %%DYNAMIC%%src/snort_dynamicsrc/profiler.h %%DYNAMIC%%src/snort_dynamicsrc/rule_option_types.h +%%DYNAMIC%%src/snort_dynamicsrc/snort_debug.h %%DYNAMIC%%src/snort_dynamicsrc/sfPolicyUserData.c %%DYNAMIC%%src/snort_dynamicsrc/sfPolicyUserData.h %%DYNAMIC%%src/snort_dynamicsrc/sf_base64decode.c @@ -52,7 +52,11 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%DYNAMIC%%src/snort_dynamicsrc/sf_dynamic_preproc_lib.c %%DYNAMIC%%src/snort_dynamicsrc/sf_dynamic_preproc_lib.h %%DYNAMIC%%src/snort_dynamicsrc/sf_dynamic_preprocessor.h +%%DYNAMIC%%src/snort_dynamicsrc/sf_email_attach_decode.h +%%DYNAMIC%%src/snort_dynamicsrc/sf_email_attach_decode.c %%DYNAMIC%%src/snort_dynamicsrc/sf_ip.h +%%DYNAMIC%%src/snort_dynamicsrc/sf_decompression.h +%%DYNAMIC%%src/snort_dynamicsrc/sf_protocols.h %%DYNAMIC%%src/snort_dynamicsrc/sf_snort_packet.h %%DYNAMIC%%src/snort_dynamicsrc/sf_snort_plugin_api.h %%DYNAMIC%%src/snort_dynamicsrc/sf_types.h @@ -64,8 +68,44 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%DYNAMIC%%src/snort_dynamicsrc/str_search.h %%DYNAMIC%%src/snort_dynamicsrc/stream_api.h %%DYNAMIC%%src/snort_dynamicsrc/treenodes.h +%%DYNAMIC%%src/snort_dynamicsrc/util_unfold.h +%%DYNAMIC%%src/snort_dynamicsrc/util_unfold.c +%%DYNAMIC%%src/snort_dynamicsrc/Unified2_common.h %%DYNAMIC%%@dirrmtry src/snort_dynamicsrc %%DYNAMIC%%@dirrmtry src +%%DYNAMIC%%include/snort/dynamic_preproc/ssl.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfcommon.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_preproc_info.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_snort_packet.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_protocols.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_snort_plugin_api.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_decompression.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfPolicyUserData.h +%%DYNAMIC%%include/snort/dynamic_preproc/snort_debug.h +%%DYNAMIC%%include/snort/dynamic_preproc/snort_bounds.h +%%DYNAMIC%%include/snort/dynamic_preproc/cpuclock.h +%%DYNAMIC%%include/snort/dynamic_preproc/profiler.h +%%DYNAMIC%%include/snort/dynamic_preproc/bitop.h +%%DYNAMIC%%include/snort/dynamic_preproc/mempool.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_sdlist_types.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_ip.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_common.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_engine.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_define.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_meta.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_preprocessor.h +%%DYNAMIC%%include/snort/dynamic_preproc/sf_dynamic_preproc_lib.h +%%DYNAMIC%%include/snort/dynamic_preproc/ipv6_port.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfPolicy.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfrt.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfrt_dir.h +%%DYNAMIC%%include/snort/dynamic_preproc/sfrt_trie.h +%%DYNAMIC%%include/snort/dynamic_preproc/obfuscation.h +%%DYNAMIC%%include/snort/dynamic_preproc/stream_api.h +%%DYNAMIC%%include/snort/dynamic_preproc/str_search.h +%%DYNAMIC%%include/snort/dynamic_preproc/preprocids.h +%%DYNAMIC%%@dirrmtry include/snort/dynamic_preproc +@dirrmtry include/snort %%DYNAMIC%%lib/snort/dynamicengine/libsf_engine.so %%DYNAMIC%%lib/snort/dynamicengine/libsf_engine.so.0 %%DYNAMIC%%lib/snort/dynamicengine/libsf_engine.la @@ -75,6 +115,9 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%DYNAMIC%%lib/snort/dynamicrules/lib_sfdynamic_example_rule.so.0 %%DYNAMIC%%lib/snort/dynamicrules/lib_sfdynamic_example_rule.so %%DYNAMIC%%@dirrmtry lib/snort/dynamicrules +%%DYNAMIC%%lib/snort/dynamic_preproc/libsf_dynamic_preproc.la +%%DYNAMIC%%lib/snort/dynamic_preproc/libsf_dynamic_preproc.a +%%DYNAMIC%%@dirrmtry lib/snort/dynamic_preproc %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_dce2_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_dce2_preproc.so %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_dce2_preproc.so.0 @@ -84,9 +127,21 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_ftptelnet_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_ftptelnet_preproc.so %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_ftptelnet_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_imap_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_imap_preproc.so +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_imap_preproc.la +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_pop_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_pop_preproc.so +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_pop_preproc.la +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_reputation_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_reputation_preproc.so +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_reputation_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sdf_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sdf_preproc.so %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sdf_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sip_preproc.so.0 +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sip_preproc.so +%%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_sip_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_smtp_preproc.la %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_smtp_preproc.so %%DYNAMIC%%lib/snort/dynamicpreprocessor/libsf_smtp_preproc.so.0 @@ -130,6 +185,7 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%PORTDOCS%%%%DOCSDIR%%/README.active %%PORTDOCS%%%%DOCSDIR%%/README.alert_order %%PORTDOCS%%%%DOCSDIR%%/README.asn1 +%%PORTDOCS%%%%DOCSDIR%%/README.counts %%PORTDOCS%%%%DOCSDIR%%/README.csv %%PORTDOCS%%%%DOCSDIR%%/README.database %%PORTDOCS%%%%DOCSDIR%%/README.daq @@ -144,15 +200,19 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%PORTDOCS%%%%DOCSDIR%%/README.ftptelnet %%PORTDOCS%%%%DOCSDIR%%/README.gre %%PORTDOCS%%%%DOCSDIR%%/README.http_inspect +%%PORTDOCS%%%%DOCSDIR%%/README.imap %%PORTDOCS%%%%DOCSDIR%%/README.ipip %%PORTDOCS%%%%DOCSDIR%%/README.ipv6 %%PORTDOCS%%%%DOCSDIR%%/README.multipleconfigs %%PORTDOCS%%%%DOCSDIR%%/README.normalize %%PORTDOCS%%%%DOCSDIR%%/README.pcap_readmode +%%PORTDOCS%%%%DOCSDIR%%/README.pop %%PORTDOCS%%%%DOCSDIR%%/README.ppm %%PORTDOCS%%%%DOCSDIR%%/README.reload +%%PORTDOCS%%%%DOCSDIR%%/README.reputation %%PORTDOCS%%%%DOCSDIR%%/README.sensitive_data %%PORTDOCS%%%%DOCSDIR%%/README.sfportscan +%%PORTDOCS%%%%DOCSDIR%%/README.sip %%PORTDOCS%%%%DOCSDIR%%/README.ssh %%PORTDOCS%%%%DOCSDIR%%/README.ssl %%PORTDOCS%%%%DOCSDIR%%/README.stream5 @@ -171,3 +231,4 @@ etc/snort/preproc_rules/sensitive-data.rules-sample %%PORTDOCS%%%%DOCSDIR%%/snort_schema_v106.pdf %%PORTDOCS%%@dirrm %%DOCSDIR%% libdata/pkgconfig/snort.pc +libdata/pkgconfig/snort_preproc.pc |