head	1.164;
access;
symbols
	RELEASE_8_3_0:1.151
	RELEASE_9_0_0:1.141
	RELEASE_7_4_0:1.127
	RELEASE_8_2_0:1.127
	RELEASE_6_EOL:1.124
	RELEASE_8_1_0:1.119
	RELEASE_7_3_0:1.117
	RELEASE_8_0_0:1.113
	RELEASE_7_2_0:1.107
	RELEASE_7_1_0:1.101
	RELEASE_6_4_0:1.101
	RELEASE_5_EOL:1.95
	RELEASE_7_0_0:1.91
	RELEASE_6_3_0:1.91
	PRE_XORG_7:1.84
	RELEASE_4_EOL:1.77
	RELEASE_6_2_0:1.73
	RELEASE_6_1_0:1.64
	RELEASE_5_5_0:1.64
	RELEASE_6_0_0:1.60
	RELEASE_5_4_0:1.57
	RELEASE_4_11_0:1.53
	RELEASE_5_3_0:1.52
	RELEASE_4_10_0:1.51
	RELEASE_5_2_1:1.41
	RELEASE_5_2_0:1.41
	RELEASE_4_9_0:1.37
	RELEASE_5_1_0:1.34
	RELEASE_4_8_0:1.33
	RELEASE_5_0_0:1.30
	RELEASE_4_7_0:1.29
	RELEASE_4_6_2:1.28
	RELEASE_4_6_1:1.28
	RELEASE_4_6_0:1.28
	RELEASE_5_0_DP1:1.27
	RELEASE_4_5_0:1.27
	RELEASE_4_4_0:1.22
	RELEASE_4_3_0:1.19
	RELEASE_4_2_0:1.13
	RELEASE_4_1_1:1.13
	RELEASE_4_1_0:1.12
	RELEASE_3_5_0:1.11
	RELEASE_4_0_0:1.7
	RELEASE_3_4_0:1.4
	RELEASE_3_3_0:1.3
	v1_2:1.1.1.1
	ROESCH:1.1.1;
locks; strict;
comment	@# @;


1.164
date	2013.03.06.13.23.46;	author svnexp;	state Exp;
branches;
next	1.163;

1.163
date	2012.12.10.19.24.04;	author svnexp;	state Exp;
branches;
next	1.162;

1.162
date	2012.12.04.16.56.49;	author svnexp;	state Exp;
branches;
next	1.161;

1.161
date	2012.11.17.06.01.20;	author svnexp;	state Exp;
branches;
next	1.160;

1.160
date	2012.10.13.02.05.14;	author zi;	state Exp;
branches;
next	1.159;

1.159
date	2012.08.10.01.29.39;	author zi;	state Exp;
branches;
next	1.158;

1.158
date	2012.08.05.23.19.36;	author dougb;	state Exp;
branches;
next	1.157;

1.157
date	2012.07.23.14.19.34;	author zi;	state Exp;
branches;
next	1.156;

1.156
date	2012.05.16.18.12.54;	author zi;	state Exp;
branches;
next	1.155;

1.155
date	2012.05.15.22.16.27;	author zi;	state Exp;
branches;
next	1.154;

1.154
date	2012.04.20.21.57.56;	author zi;	state Exp;
branches;
next	1.153;

1.153
date	2012.03.30.15.26.53;	author zi;	state Exp;
branches;
next	1.152;

1.152
date	2012.03.27.23.14.20;	author zi;	state Exp;
branches;
next	1.151;

1.151
date	2012.03.23.14.27.51;	author zi;	state Exp;
branches;
next	1.150;

1.150
date	2012.03.12.10.03.37;	author zi;	state Exp;
branches;
next	1.149;

1.149
date	2012.03.10.16.48.22;	author zi;	state Exp;
branches;
next	1.148;

1.148
date	2012.02.14.12.45.29;	author mm;	state Exp;
branches;
next	1.147;

1.147
date	2012.02.06.12.25.50;	author miwi;	state Exp;
branches;
next	1.146;

1.146
date	2012.01.21.11.59.30;	author zi;	state Exp;
branches;
next	1.145;

1.145
date	2012.01.21.02.46.23;	author zi;	state Exp;
branches;
next	1.144;

1.144
date	2011.12.16.14.45.39;	author zi;	state Exp;
branches;
next	1.143;

1.143
date	2011.12.15.00.50.34;	author zi;	state Exp;
branches;
next	1.142;

1.142
date	2011.12.14.00.58.26;	author zi;	state Exp;
branches;
next	1.141;

1.141
date	2011.10.25.20.11.35;	author zi;	state Exp;
branches;
next	1.140;

1.140
date	2011.10.22.12.01.05;	author zi;	state Exp;
branches;
next	1.139;

1.139
date	2011.10.22.11.07.01;	author zi;	state Exp;
branches;
next	1.138;

1.138
date	2011.10.21.13.44.45;	author zi;	state Exp;
branches;
next	1.137;

1.137
date	2011.10.07.13.42.13;	author zi;	state Exp;
branches;
next	1.136;

1.136
date	2011.09.23.22.25.17;	author amdmi3;	state Exp;
branches;
next	1.135;

1.135
date	2011.09.08.01.36.49;	author zi;	state Exp;
branches;
next	1.134;

1.134
date	2011.04.12.04.31.21;	author dhn;	state Exp;
branches;
next	1.133;

1.133
date	2011.02.25.06.15.44;	author ade;	state Exp;
branches;
next	1.132;

1.132
date	2011.02.18.20.06.36;	author wxs;	state Exp;
branches;
next	1.131;

1.131
date	2011.02.13.22.17.19;	author pav;	state Exp;
branches;
next	1.130;

1.130
date	2011.02.11.08.27.24;	author sunpoet;	state Exp;
branches;
next	1.129;

1.129
date	2011.02.11.08.01.39;	author sunpoet;	state Exp;
branches;
next	1.128;

1.128
date	2011.02.09.06.50.03;	author clsung;	state Exp;
branches;
next	1.127;

1.127
date	2010.12.09.01.36.35;	author clsung;	state Exp;
branches;
next	1.126;

1.126
date	2010.12.04.07.33.31;	author ade;	state Exp;
branches;
next	1.125;

1.125
date	2010.12.03.18.54.33;	author kwm;	state Exp;
branches;
next	1.124;

1.124
date	2010.09.15.18.35.10;	author ade;	state Exp;
branches;
next	1.123;

1.123
date	2010.07.28.07.21.12;	author clsung;	state Exp;
branches;
next	1.122;

1.122
date	2010.07.17.13.09.23;	author clsung;	state Exp;
branches;
next	1.121;

1.121
date	2010.07.09.12.57.30;	author clsung;	state Exp;
branches;
next	1.120;

1.120
date	2010.07.08.16.17.21;	author clsung;	state Exp;
branches;
next	1.119;

1.119
date	2010.04.20.09.23.42;	author clsung;	state Exp;
branches;
next	1.118;

1.118
date	2010.03.07.12.51.51;	author clsung;	state Exp;
branches;
next	1.117;

1.117
date	2010.01.22.03.03.07;	author clsung;	state Exp;
branches;
next	1.116;

1.116
date	2009.10.29.01.27.53;	author clsung;	state Exp;
branches;
next	1.115;

1.115
date	2009.10.28.05.02.49;	author clsung;	state Exp;
branches;
next	1.114;

1.114
date	2009.10.06.02.51.56;	author clsung;	state Exp;
branches;
next	1.113;

1.113
date	2009.09.21.10.49.50;	author miwi;	state Exp;
branches;
next	1.112;

1.112
date	2009.09.19.21.12.56;	author pav;	state Exp;
branches;
next	1.111;

1.111
date	2009.08.21.01.34.33;	author clsung;	state Exp;
branches;
next	1.110;

1.110
date	2009.08.19.09.27.02;	author miwi;	state Exp;
branches;
next	1.109;

1.109
date	2009.08.02.19.35.33;	author mezz;	state Exp;
branches;
next	1.108;

1.108
date	2009.05.07.02.26.03;	author clsung;	state Exp;
branches;
next	1.107;

1.107
date	2009.04.08.10.58.05;	author itetcu;	state Exp;
branches;
next	1.106;

1.106
date	2009.02.18.23.39.00;	author amdmi3;	state Exp;
branches;
next	1.105;

1.105
date	2009.01.12.22.59.26;	author amdmi3;	state Exp;
branches;
next	1.104;

1.104
date	2009.01.06.17.59.20;	author pav;	state Exp;
branches;
next	1.103;

1.103
date	2008.10.06.05.35.29;	author clsung;	state Exp;
branches;
next	1.102;

1.102
date	2008.09.26.09.49.37;	author clsung;	state Exp;
branches;
next	1.101;

1.101
date	2008.08.22.16.24.11;	author clsung;	state Exp;
branches;
next	1.100;

1.100
date	2008.08.21.06.18.20;	author rafan;	state Exp;
branches;
next	1.99;

1.99
date	2008.06.23.02.26.41;	author clsung;	state Exp;
branches;
next	1.98;

1.98
date	2008.06.09.06.16.02;	author clsung;	state Exp;
branches;
next	1.97;

1.97
date	2008.06.09.01.55.32;	author clsung;	state Exp;
branches;
next	1.96;

1.96
date	2008.06.09.01.50.21;	author clsung;	state Exp;
branches;
next	1.95;

1.95
date	2008.05.19.03.50.55;	author clsung;	state Exp;
branches;
next	1.94;

1.94
date	2008.05.17.01.36.54;	author clsung;	state Exp;
branches;
next	1.93;

1.93
date	2008.04.09.09.57.59;	author clsung;	state Exp;
branches;
next	1.92;

1.92
date	2008.04.08.02.22.49;	author clsung;	state Exp;
branches;
next	1.91;

1.91
date	2007.10.05.01.48.34;	author clsung;	state Exp;
branches;
next	1.90;

1.90
date	2007.08.14.00.04.49;	author clsung;	state Exp;
branches;
next	1.89;

1.89
date	2007.08.04.11.41.18;	author gabor;	state Exp;
branches;
next	1.88;

1.88
date	2007.07.24.07.05.49;	author clsung;	state Exp;
branches;
next	1.87;

1.87
date	2007.07.02.02.11.21;	author clsung;	state Exp;
branches;
next	1.86;

1.86
date	2007.06.14.02.51.00;	author clsung;	state Exp;
branches;
next	1.85;

1.85
date	2007.06.06.12.50.09;	author araujo;	state Exp;
branches;
next	1.84;

1.84
date	2007.04.18.06.42.12;	author clsung;	state Exp;
branches;
next	1.83;

1.83
date	2007.03.06.03.02.04;	author clsung;	state Exp;
branches;
next	1.82;

1.82
date	2007.02.21.10.38.23;	author clsung;	state Exp;
branches;
next	1.81;

1.81
date	2007.02.07.01.57.04;	author clsung;	state Exp;
branches;
next	1.80;

1.80
date	2007.02.07.01.36.47;	author clsung;	state Exp;
branches;
next	1.79;

1.79
date	2007.01.31.14.09.54;	author pav;	state Exp;
branches;
next	1.78;

1.78
date	2007.01.29.19.05.06;	author gabor;	state Exp;
branches;
next	1.77;

1.77
date	2007.01.17.04.01.16;	author clsung;	state Exp;
branches;
next	1.76;

1.76
date	2006.12.19.08.53.29;	author clsung;	state Exp;
branches;
next	1.75;

1.75
date	2006.12.07.08.59.54;	author clsung;	state Exp;
branches;
next	1.74;

1.74
date	2006.11.27.01.16.41;	author clsung;	state Exp;
branches;
next	1.73;

1.73
date	2006.09.22.08.47.25;	author clsung;	state Exp;
branches;
next	1.72;

1.72
date	2006.09.06.06.15.08;	author clsung;	state Exp;
branches;
next	1.71;

1.71
date	2006.09.06.02.29.30;	author clsung;	state Exp;
branches;
next	1.70;

1.70
date	2006.08.30.04.26.53;	author clsung;	state Exp;
branches;
next	1.69;

1.69
date	2006.08.06.22.09.01;	author sat;	state Exp;
branches;
next	1.68;

1.68
date	2006.06.10.11.34.06;	author pav;	state Exp;
branches;
next	1.67;

1.67
date	2006.05.13.04.15.15;	author edwin;	state Exp;
branches;
next	1.66;

1.66
date	2006.05.05.11.24.52;	author garga;	state Exp;
branches;
next	1.65;

1.65
date	2006.03.21.16.33.42;	author garga;	state Exp;
branches;
next	1.64;

1.64
date	2005.11.23.12.19.03;	author flz;	state Exp;
branches;
next	1.63;

1.63
date	2005.11.14.17.07.08;	author sem;	state Exp;
branches;
next	1.62;

1.62
date	2005.10.18.16.32.10;	author sergei;	state Exp;
branches;
next	1.61;

1.61
date	2005.10.07.15.07.30;	author sergei;	state Exp;
branches;
next	1.60;

1.60
date	2005.04.26.13.20.01;	author sergei;	state Exp;
branches;
next	1.59;

1.59
date	2005.04.12.03.26.31;	author obrien;	state Exp;
branches;
next	1.58;

1.58
date	2005.04.11.08.03.52;	author obrien;	state Exp;
branches;
next	1.57;

1.57
date	2005.03.15.07.36.06;	author sergei;	state Exp;
branches;
next	1.56;

1.56
date	2005.03.10.16.09.10;	author sergei;	state Exp;
branches;
next	1.55;

1.55
date	2005.02.07.09.35.32;	author sergei;	state Exp;
branches;
next	1.54;

1.54
date	2005.01.31.00.35.53;	author girgen;	state Exp;
branches;
next	1.53;

1.53
date	2004.10.12.07.37.21;	author sergei;	state Exp;
branches;
next	1.52;

1.52
date	2004.07.04.22.17.18;	author sergei;	state Exp;
branches;
next	1.51;

1.51
date	2004.04.20.20.59.42;	author sergei;	state Exp;
branches;
next	1.50;

1.50
date	2004.04.11.21.25.51;	author sergei;	state Exp;
branches;
next	1.49;

1.49
date	2004.02.27.08.15.50;	author sergei;	state Exp;
branches;
next	1.48;

1.48
date	2004.01.20.14.38.18;	author sergei;	state Exp;
branches;
next	1.47;

1.47
date	2004.01.20.14.26.15;	author sergei;	state Exp;
branches;
next	1.46;

1.46
date	2004.01.20.13.46.20;	author sergei;	state Exp;
branches;
next	1.45;

1.45
date	2004.01.20.09.14.10;	author marcus;	state Exp;
branches;
next	1.44;

1.44
date	2004.01.02.22.54.17;	author sergei;	state Exp;
branches;
next	1.43;

1.43
date	2003.12.23.11.30.13;	author sergei;	state Exp;
branches;
next	1.42;

1.42
date	2003.12.19.23.20.21;	author sergei;	state Exp;
branches;
next	1.41;

1.41
date	2003.11.21.16.33.27;	author osa;	state Exp;
branches;
next	1.40;

1.40
date	2003.11.21.11.39.27;	author jeh;	state Exp;
branches;
next	1.39;

1.39
date	2003.10.05.11.52.53;	author nork;	state Exp;
branches;
next	1.38;

1.38
date	2003.10.05.03.46.02;	author kris;	state Exp;
branches;
next	1.37;

1.37
date	2003.09.04.13.48.27;	author edwin;	state Exp;
branches;
next	1.36;

1.36
date	2003.08.04.01.30.47;	author kris;	state Exp;
branches;
next	1.35;

1.35
date	2003.06.27.02.50.50;	author kris;	state Exp;
branches;
next	1.34;

1.34
date	2003.04.17.21.45.03;	author kris;	state Exp;
branches;
next	1.33;

1.33
date	2003.03.07.06.10.49;	author ade;	state Exp;
branches;
next	1.32;

1.32
date	2003.03.04.07.21.22;	author kris;	state Exp;
branches;
next	1.31;

1.31
date	2003.01.04.15.53.39;	author seanc;	state Exp;
branches;
next	1.30;

1.30
date	2002.10.06.09.48.09;	author kris;	state Exp;
branches;
next	1.29;

1.29
date	2002.08.24.03.17.57;	author kris;	state Exp;
branches;
next	1.28;

1.28
date	2002.04.13.22.17.58;	author kris;	state Exp;
branches;
next	1.27;

1.27
date	2001.12.01.09.46.08;	author kris;	state Exp;
branches;
next	1.26;

1.26
date	2001.11.18.01.57.48;	author kris;	state Exp;
branches;
next	1.25;

1.25
date	2001.09.23.21.23.27;	author kris;	state Exp;
branches;
next	1.24;

1.24
date	2001.09.22.22.09.29;	author kris;	state Exp;
branches;
next	1.23;

1.23
date	2001.09.22.21.39.31;	author dirk;	state Exp;
branches;
next	1.22;

1.22
date	2001.08.16.19.49.10;	author dirk;	state Exp;
branches;
next	1.21;

1.21
date	2001.08.06.22.22.11;	author dirk;	state Exp;
branches;
next	1.20;

1.20
date	2001.07.12.08.43.28;	author dirk;	state Exp;
branches;
next	1.19;

1.19
date	2001.04.10.10.49.33;	author dirk;	state Exp;
branches;
next	1.18;

1.18
date	2001.03.29.16.34.41;	author sobomax;	state Exp;
branches;
next	1.17;

1.17
date	2001.01.27.07.55.06;	author dirk;	state Exp;
branches;
next	1.16;

1.16
date	2001.01.27.07.53.36;	author dirk;	state Exp;
branches;
next	1.15;

1.15
date	2001.01.21.15.40.45;	author dirk;	state Exp;
branches;
next	1.14;

1.14
date	2000.12.31.15.07.49;	author dirk;	state Exp;
branches;
next	1.13;

1.13
date	2000.08.03.06.11.34;	author dirk;	state Exp;
branches;
next	1.12;

1.12
date	2000.07.10.13.35.51;	author dirk;	state Exp;
branches;
next	1.11;

1.11
date	2000.06.02.03.18.51;	author will;	state Exp;
branches;
next	1.10;

1.10
date	2000.04.21.08.19.01;	author mharo;	state Exp;
branches;
next	1.9;

1.9
date	2000.04.09.18.30.32;	author cpiazza;	state Exp;
branches;
next	1.8;

1.8
date	2000.03.26.11.12.07;	author dirk;	state Exp;
branches;
next	1.7;

1.7
date	2000.01.29.14.26.12;	author dirk;	state Exp;
branches;
next	1.6;

1.6
date	2000.01.29.13.15.24;	author dirk;	state Exp;
branches;
next	1.5;

1.5
date	99.12.22.10.56.28;	author dirk;	state Exp;
branches;
next	1.4;

1.4
date	99.09.28.19.32.03;	author dirk;	state Exp;
branches;
next	1.3;

1.3
date	99.08.31.01.51.46;	author peter;	state Exp;
branches;
next	1.2;

1.2
date	99.08.07.07.27.12;	author dirk;	state Exp;
branches;
next	1.1;

1.1
date	99.08.02.10.14.10;	author dirk;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	99.08.02.10.14.10;	author dirk;	state Exp;
branches;
next	;


desc
@@


1.164
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/313471
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@# Created by: Dirk Froemberg <dirk@@FreeBSD.org>
# $FreeBSD: head/security/snort/Makefile 313471 2013-03-05 19:44:01Z zi $

PORTNAME=	snort
PORTVERSION=	2.9.4.1
CATEGORIES=	security
MASTER_SITES=	SF/snort/snort \
		http://mirrors.rit.edu/zi/

PATCH_DIST_STRIP=	-p1

MAINTAINER=	zi@@FreeBSD.org
COMMENT=	Lightweight network intrusion detection system

LICENSE=	GPLv2
LICENSE_FILE=	${WRKSRC}/LICENSE

LIB_DEPENDS=	pcre:${PORTSDIR}/devel/pcre
BUILD_DEPENDS=	daq>=1.1.1:${PORTSDIR}/net/daq \
		${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet
RUN_DEPENDS=	daq>=1.1.1:${PORTSDIR}/net/daq \
		${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet

OPTIONS_DEFINE=	IPV6 MPLS GRE TARGETBASED ZLIB NORMALIZER REACT \
		PERFPROFILE FLEXRESP3 LRGPCAP SNORTSAM SOURCEFIRE \
		DBGSNORT BARNYARD PULLEDPORK
OPTIONS_DEFAULT=IPV6 MPLS GRE ZLIB NORMALIZER REACT PERFPROFILE \
		FLEXRESP3 SOURCEFIRE TARGETBASED PULLEDPORK \
		BARNYARD

GRE_DESC=		Enable GRE support
TARGETBASED_DESC=	Enable targetbased support
ZLIB_DESC=		Enable GZIP support
NORMALIZER_DESC=	Enable normalizer
REACT_DESC=		Enable react
PERFPROFILE_DESC=	Enable performance profiling
FLEXRESP3_DESC=		Enable flexible response on events (v3)
LRGPCAP_DESC=		Enable pcaps larger than 2GB
SNORTSAM_DESC=		Enable unofficial Snortsam patch
SOURCEFIRE_DESC=	Enable Sourcefire-specific build options
DBGSNORT_DESC=		Enable debugging symbols+core dumps
BARNYARD_DESC=		Depend on Barnyard2
PULLEDPORK_DESC=	Depend on pulledpork

.include <bsd.port.options.mk>

USE_RC_SUBR=	snort
SUB_FILES=	pkg-message
GNU_CONFIGURE=	yes
MAKE_JOBS_UNSAFE=	yes

CONFIG_DIR?=	${PREFIX}/etc/snort
CONFIG_FILES=	classification.config gen-msg.map reference.config \
		snort.conf threshold.conf unicode.map
RULES_DIR=	${PREFIX}/etc/snort/rules
LOGS_DIR=	/var/log/snort

MAN8=		snort.8
DOCS=		RELEASE.NOTES doc/AUTHORS doc/BUGS doc/CREDITS \
		doc/README* doc/USAGE doc/*.pdf
PREPROC_RULE_DIR=	${RULES_DIR}/../preproc_rules
PREPROC_RULES=		decoder.rules preprocessor.rules sensitive-data.rules

USE_AUTOTOOLS=	libtool
USE_LDCONFIG=	yes
LIBNET_CONFIG?=		${LOCALBASE}/bin/libnet11-config
.if exists(${LIBNET_CONFIG})
LIBNET_CFLAGS!=	${LIBNET_CONFIG} --cflags
LIBNET_LIBS!=	${LIBNET_CONFIG} --libs
.else
LIBNET_CFLAGS=	-I${LOCALBASE}/include/libnet11
LIBNET_LIBS=	-L${LOCALBASE}/lib/libnet11 -lnet
.endif
LIBNET_INCDIR=	${LIBNET_CFLAGS:M-I*:S/-I//}
LIBNET_LIBDIR=	${LIBNET_LIBS:M-L*:S/-L//}

CFLAGS+=	-fstack-protector
CONFIGURE_ARGS=	--enable-dynamicplugin --enable-build-dynamic-examples \
		--enable-reload --enable-reload-error-restart \
		--with-dnet-includes=${LIBNET_INCDIR} \
		--with-dnet-libraries=${LIBNET_LIBDIR}

PLIST_SUB+=	DYNAMIC=""

.if empty(PORT_OPTIONS:MFLEXRESP3)
CONFIGURE_ARGS+=--disable-flexresp3 --disable-active-response
.endif

.if ${PORT_OPTIONS:MLRGPCAP}
CONFIGURE_ARGS+=--enable-large-pcap
.endif

.if ${PORT_OPTIONS:MDBGSNORT}
CONFIGURE_ARGS+=--enable-corefiles --enable-debug
MAKE_ENV+=	DONTSTRIP="yes"
.else
CONFIGURE_ARGS+=--disable-corefiles
.endif

.if ${PORT_OPTIONS:MSOURCEFIRE}
CONFIGURE_ARGS+=--enable-sourcefire
.endif

.if empty(PORT_OPTIONS:MPERFPROFILE)
CONFIGURE_ARGS+=--disable-perfprofiling --disable-ppm
.endif

.if empty(PORT_OPTIONS:MIPV6)
CONFIGURE_ARGS+=--disable-ipv6
.endif

.if empty(PORT_OPTIONS:MGRE)
CONFIGURE_ARGS+=--disable-gre
.endif

.if empty(PORT_OPTIONS:MMPLS)
CONFIGURE_ARGS+=--disable-mpls
.endif

.if empty(PORT_OPTIONS:MTARGETBASED)
CONFIGURE_ARGS+=--disable-targetbased
.endif

.if empty(PORT_OPTIONS:MZLIB)
CONFIGURE_ARGS+=--disable-zlib
.endif

.if ${PORT_OPTIONS:MNORMALIZER}
CONFIGURE_ARGS+=--enable-normalizer
.endif

.if ${PORT_OPTIONS:MREACT}
CONFIGURE_ARGS+=--enable-react
.endif

.if ${PORT_OPTIONS:MSNORTSAM}
BROKEN=		current snortsam patch fails to apply
USE_AUTOTOOLS+=	automake
USE_GNOME=	pkgconfig
PATCH_SITES+=	http://www.snortsam.net/files/snort-plugin/:snortsam
PATCHFILES+=	snortsam-2.9.2.2.diff.gz:snortsam
.endif

.if ${PORT_OPTIONS:MBARNYARD}
RUN_DEPENDS+=	barnyard2:${PORTSDIR}/security/barnyard2
.endif

.if ${PORT_OPTIONS:MPULLEDPORK}
RUN_DEPENDS+=	pulledpork.pl:${PORTSDIR}/security/pulledpork
.endif

post-patch:
	@@${FIND} ${WRKSRC} -name 'Makefile.in' | ${XARGS} ${REINPLACE_CMD} -e 's|lib/snort_|lib/snort/|g'
	@@${REINPLACE_CMD} "s,/etc/snort.conf,${CONFIG_DIR}/snort.conf," ${WRKSRC}/src/snort.c ${WRKSRC}/snort.8
	@@${REINPLACE_CMD} -e 's|lib/snort_|lib/snort/|g' ${WRKSRC}/etc/snort.conf
	@@${REINPLACE_CMD} -e 's|^dynamicdetection|#dynamicdetection|' ${WRKSRC}/etc/snort.conf
	@@${REINPLACE_CMD} -e '/var HOME_NET/s/any/[YOU_NEED_TO_SET_HOME_NET_IN_snort.conf]/' ${WRKSRC}/etc/snort.conf
	@@${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' ${WRKSRC}/Makefile.in \
		${WRKSRC}/src/dynamic-preprocessors/libs/Makefile.in ${WRKSRC}/src/dynamic-output/libs/Makefile.in
	@@${REINPLACE_CMD} -e 's|libnet-config|${LIBNET_CONFIG}|g' ${WRKSRC}/configure
.if empty(PORT_OPTIONS:MIPV6)
	@@${REINPLACE_CMD} -e 's|^ipvar |var |' ${WRKSRC}/etc/snort.conf
	@@${REINPLACE_CMD} -e '/normalize_ip6/s/^preprocessor/#preprocessor/'  ${WRKSRC}/etc/snort.conf
	@@${REINPLACE_CMD} -e '/normalize_icmp6/s/^preprocessor/#preprocessor/'  ${WRKSRC}/etc/snort.conf
.endif
	@@${REINPLACE_CMD} -e '/^# include .PREPROC_RULE/s/# include/include/' ${WRKSRC}/etc/snort.conf
.if empty(PORT_OPTIONS:MDOCS)
	@@${REINPLACE_CMD} '/SUBDIRS = /s/doc//' ${WRKSRC}/Makefile.in ${WRKSRC}/Makefile.am
	@@${REINPLACE_CMD} -e '/README.u2boat/d' \
		-e '/test.*docdir.*MKDIR.*DEST/d' ${WRKSRC}/tools/u2boat/Makefile.*
.endif

pre-configure:
.if ${PORT_OPTIONS:MSNORTSAM}
	@@${FIND} ${WRKSRC} -name 'Makefile.am' | ${XARGS} ${REINPLACE_CMD} -e 's|lib/snort_|lib/snort/|g'
	@@${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' ${WRKSRC}/Makefile.am \
		${WRKSRC}/src/dynamic-preprocessors/libs/Makefile.am \
		${WRKSRC}/src/dynamic-output/libs/Makefile.am
	@@${ECHO_MSG} "===>   Rebuilding required files for snortsam patches..."
	@@cd ${WRKSRC} && ${SH} ${WRKSRC}/autojunk.sh
	@@${ECHO_MSG} "===>   Done.  Configuring..."
.endif

post-install:
	@@${LIBTOOL} --finish ${LOCALBASE}/lib/snort/dynamicpreprocessor
	[ -d ${CONFIG_DIR} ] || ${MKDIR} ${CONFIG_DIR}
	[ -d ${RULES_DIR} ] || ${MKDIR} ${RULES_DIR}
	[ -d ${LOGS_DIR} ] || ${MKDIR} ${LOGS_DIR}
.for f in ${CONFIG_FILES}
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${CONFIG_DIR}/${f}-sample
	@@if [ ! -f ${CONFIG_DIR}/${f} ]; then \
		${CP} -p ${CONFIG_DIR}/${f}-sample ${CONFIG_DIR}/${f} ; \
	fi
.endfor
.if ${PORT_OPTIONS:MDOCS}
	@@${MKDIR} ${DOCSDIR}
	cd ${WRKSRC} && ${INSTALL_DATA} ${DOCS} ${DOCSDIR}
.endif
	@@${MKDIR} ${PREPROC_RULE_DIR}
.for f in ${PREPROC_RULES}
	${INSTALL_DATA} ${WRKSRC}/preproc_rules/${f} ${PREPROC_RULE_DIR}/${f}-sample
	@@if [ ! -f ${PREPROC_RULE_DIR}/${f} ]; then \
		${CP} -p ${PREPROC_RULE_DIR}/${f}-sample ${PREPROC_RULE_DIR}/${f} ; \
	fi
.endfor
	@@${CAT} ${PKGMESSAGE}

.include <bsd.port.mk>
@


1.163
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/308630
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r308630 | mm | 2012-12-10 19:11:11 +0000 (Mon, 10 Dec 2012) | 4 lines
## SVN ##
## SVN ## Update PCRE to 8.32
## SVN ## Introduces the UTF-32 library pcre32
## SVN ## Bump PORTREVISION in dependent ports
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 2
a2 6
# New ports collection makefile for:	snort
# Date created:		Mon Aug  2 12:04:08 CEST 1999
# Whom:			Dirk Froemberg <dirk@@FreeBSD.org>
#
# $FreeBSD: head/security/snort/Makefile 308630 2012-12-10 19:11:11Z mm $
#
d5 1
a5 2
PORTVERSION=	2.9.4
PORTREVISION=	1
d167 1
a167 1
.if defined(NOPORTDOCS)
d195 1
a195 1
.if !defined(NOPORTDOCS)
@


1.162
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/308246
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r308246 | zi | 2012-12-04 16:35:08 +0000 (Tue, 04 Dec 2012) | 4 lines
## SVN ##
## SVN ## - Update to 2.9.4
## SVN ##
## SVN ## Feature safe:	yes
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d5 1
a5 1
# $FreeBSD: head/security/snort/Makefile 308246 2012-12-04 16:35:08Z zi $
d10 1
@


1.161
log
@Switch exporter over
@
text
@d5 1
a5 1
# $FreeBSD: head/security/snort/Makefile 305809 2012-10-13 02:05:14Z zi $
d9 1
a9 1
PORTVERSION=	2.9.3.1
@


1.160
log
@SVN rev 305809 on 2012-10-13 02:05:14Z by zi

- As pulledpork/barnyard are required for most installations, depend on these by default

Feature safe:	yes
@
text
@d5 1
a5 1
# $FreeBSD$
@


1.159
log
@SVN rev 302372 on 2012-08-10 01:29:39Z by zi

- Update to 2.9.3.1
@
text
@d30 1
a30 1
		DBGSNORT
d32 2
a33 1
		FLEXRESP3 SOURCEFIRE TARGETBASED
d46 2
d148 8
@


1.158
log
@SVN rev 302141 on 2012-08-05 23:19:36Z by dougb

Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
@
text
@d9 1
a9 1
PORTVERSION=	2.9.3
@


1.157
log
@SVN rev 301399 on 2012-07-23 14:19:34Z by zi

- Update to 2.9.3
- Convert to OptionsNG
@
text
@d48 1
a48 1
USE_RC_SUBR=	snort.sh
@


1.156
log
@- Fix NOPORTDOCS with u2boat
@
text
@d9 1
a9 1
PORTVERSION=	2.9.2.3
d22 2
a23 2
LIB_DEPENDS=	pcre.1:${PORTSDIR}/devel/pcre
BUILD_DEPENDS=	daq>=0.6.2:${PORTSDIR}/net/daq \
d25 1
a25 1
RUN_DEPENDS=	daq>=0.6.2:${PORTSDIR}/net/daq \
d28 17
a44 18
OPTIONS=	IPV6 "Enable IPv6 support" on \
		MPLS "Enable MPLS support" on \
		GRE "Enable GRE support" on \
		TARGETBASED "Enable Targetbased support" off \
		DECODERPRE "Enable Decoded-Preprocessor-Rules" on \
		ZLIB "Enable GZIP support" on \
		NORMALIZER "Enable Normalizer" on \
		REACT "Enable React" on \
		PERFPROFILE "Enable Performance Profiling" on \
		FLEXRESP3 "Flexible response to events (version 3)" on \
		MYSQL "Enable MySQL support" off \
		ODBC "Enable ODBC support" off \
		POSTGRESQL "Enable PostgreSQL support" off \
		PRELUDE "Enable Prelude NIDS integration" off \
		LRGPCAP "Enable pcaps larger than 2GB" off \
		SNORTSAM "Unofficial Snortsam Patch" off \
		SOURCEFIRE "Enable Sourcefire specific build options" on \
		DBGSNORT "Enable debugging symbols+core dumps" off
d86 2
a87 3
.if defined(WITH_FLEXRESP3)
CONFIGURE_ARGS+=	--enable-flexresp3 \
			--enable-active-response
d90 2
a91 13
.if defined(WITH_MYSQL)
USE_MYSQL=		yes
CONFIGURE_ARGS+=	--with-mysql=${LOCALBASE}
.else
CONFIGURE_ARGS+=	--with-mysql=no
.endif

.if defined(WITH_ODBC)
LIB_DEPENDS+=		odbc.2:${PORTSDIR}/databases/unixODBC
CONFIGURE_ARGS+=	--with-odbc=${LOCALBASE}
LDFLAGS+=		${PTHREAD_LIBS}
.else
CONFIGURE_ARGS+=	--with-odbc=no
d94 3
a96 6
.if defined(WITH_POSTGRESQL)
USE_PGSQL=		yes
CONFIGURE_ARGS+=	--with-postgresql=${LOCALBASE}
.if exists(/usr/lib/libssl.a) && exists(/usr/lib/libcrypto.a)
LDFLAGS+=		-lssl -lcrypto
.endif
d98 1
a98 1
CONFIGURE_ARGS+=	--with-postgresql=no
d101 2
a102 18
.if defined(WITH_PRELUDE)
LIB_DEPENDS+=		prelude.20:${PORTSDIR}/security/libprelude
CONFIGURE_ARGS+=	--enable-prelude
PLIST_SUB+=		PRELUDE=""
.else
CONFIGURE_ARGS+=	--disable-prelude
PLIST_SUB+=		PRELUDE="@@comment "
.endif

.if defined(WITH_LRGPCAP)
CONFIGURE_ARGS+=	--enable-large-pcap
.endif

.if defined(WITH_DBGSNORT)
CONFIGURE_ARGS+=	--enable-corefiles --enable-debug
MAKE_ENV+=		DONTSTRIP="yes"
.else
CONFIGURE_ARGS+=	--disable-corefiles
d105 2
a106 2
.if defined(WITH_SOURCEFIRE)
CONFIGURE_ARGS+=	--enable-sourcefire
d109 2
a110 2
.if defined(WITH_PERFPROFILE)
CONFIGURE_ARGS+=	--enable-perfprofiling --enable-ppm
d113 2
a114 2
.if defined(WITHOUT_IPV6)
CONFIGURE_ARGS+=	--disable-ipv6
d117 2
a118 2
.if defined(WITH_GRE)
CONFIGURE_ARGS+=	--enable-gre
d121 2
a122 2
.if defined(WITH_MPLS)
CONFIGURE_ARGS+=	--enable-mpls
d125 2
a126 2
.if defined(WITH_TARGETBASED)
CONFIGURE_ARGS+=	--enable-targetbased
d129 2
a130 2
.if defined(WITH_DECODERPRE)
CONFIGURE_ARGS+=	--enable-decoder-preprocessor-rules
d133 2
a134 2
.if defined(WITH_ZLIB)
CONFIGURE_ARGS+=	--enable-zlib
d137 2
a138 10
.if defined(WITH_NORMALIZER)
CONFIGURE_ARGS+=	--enable-normalizer
.endif

.if defined(WITH_REACT)
CONFIGURE_ARGS+=	--enable-react
.endif

.if defined(WITH_SNORTSAM)
#BROKEN=		current snortsam patch results in build failures
d152 1
a152 1
		${WRKSRC}/src/dynamic-preprocessors/libs/Makefile.in
d154 1
a154 1
.if defined(WITHOUT_IPV6)
a158 1
.if defined(WITH_DECODERPRE)
a159 1
.endif
d167 1
a167 1
.if defined(WITH_SNORTSAM)
d170 2
a171 1
		${WRKSRC}/src/dynamic-preprocessors/libs/Makefile.am
a176 8
pre-install:
.if defined(WITH_POSTGRESQL)
	@@${REINPLACE_CMD} -e '/REQUIRE:/ s|$$| postgresql|' ${WRKDIR}/snort.sh
.endif
.if defined(WITH_MYSQL)
	@@${REINPLACE_CMD} -e '/REQUIRE:/ s|$$| mysql|' ${WRKDIR}/snort.sh
.endif

a181 4
.if !defined(NOPORTEXAMPLES)
	[ -d ${EXAMPLESDIR} ] || ${MKDIR} ${EXAMPLESDIR}
	${INSTALL_DATA} ${WRKSRC}/schemas/create* ${EXAMPLESDIR}
.endif
a191 1
.if defined(WITH_DECODERPRE)
a198 1
.endif
@


1.155
log
@- Update to 2.9.2.3
@
text
@d204 2
a205 2
	@@${REINPLACE_CMD} '/install-data-am: /s/install-dist_docDATA//' \
		${WRKSRC}/tools/u2boat/Makefile.in
@


1.154
log
@- Unbreak SNORTSAM support
- Do not bump PORTREVISION for non-default OPTION

PR:		ports/166798
Submitted by:	scheidell@@
Obtained from:	snortsam.net
@
text
@d9 1
a9 1
PORTVERSION=	2.9.2.2
@


1.153
log
@- Resolve IPV6 port logic issue when IPV6 support is disabled.

Reported by:	Dean Freeman <wfreeman@@sourcefire.com>
Feature safe:	yes
@
text
@d178 1
a178 1
BROKEN=		current snortsam patch results in build failures
d182 1
a182 1
PATCHFILES+=	snortsam-2.9.1.2.diff.gz:snortsam
a212 1
	@@${REINPLACE_CMD} -e '/README.u2boat/d' ${WRKSRC}/tools/u2boat/Makefile.am
@


1.152
log
@- Update to 2.9.2.2
- Mark SNORTSAM support as BROKEN due to build failures with 2.9.1.2 patch

Feature safe:	yes
@
text
@d194 1
a194 1
.if !defined(WITH_IPV6)
@


1.151
log
@- Update mirror URL on my ports

Feature safe:	yes
@
text
@d9 1
a9 2
PORTVERSION=	2.9.2.1
PORTREVISION=	2
d178 1
@


1.150
log
@- Fix IPv6 OPTIONS support
- Do not bump PORTREVISION

Reported by:	scheidell@@
Feature safe:	yes
@
text
@d13 1
a13 1
		http://people.rit.edu/rpsfa/distfiles/
@


1.149
log
@- Do not install examples whenever NOPORTEXAMPLES is defined [1]
- Do not install duplicate sample config files
- Do not bump PORTREVISION

PR:		ports/165800 [1]
Submitted by:	Michael Scheidell <scheidell@@FreeBSD.org> [1]
Feature safe:	yes
@
text
@d146 2
a147 2
.if defined(WITH_IPV6)
CONFIGURE_ARGS+=	--enable-ipv6
@


1.148
log
@Bump pcre library dependency due to 8.30 update
@
text
@a229 1
	[ -d ${EXAMPLESDIR} ] || ${MKDIR} ${EXAMPLESDIR}
d232 4
a237 1
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${EXAMPLESDIR}/${f}-sample
a241 1
	${INSTALL_DATA} ${WRKSRC}/schemas/create* ${EXAMPLESDIR}
@


1.147
log
@- Chase unixODBC shlib bump
@
text
@d10 1
a10 1
PORTREVISION=	1
d23 1
a23 1
LIB_DEPENDS=	pcre.0:${PORTSDIR}/devel/pcre
@


1.146
log
@- Fix issue when NOPORTDOCS and SNORTSAM are both defined
@
text
@d10 1
d101 1
a101 1
LIB_DEPENDS+=		odbc.1:${PORTSDIR}/databases/unixODBC
@


1.145
log
@- Update to 2.9.2.1
- Fix issue when NOPORTDOCS is defined
@
text
@d212 2
a213 1
	@@${ECHO_MSG} "===>   Rebuilding required files for snortsam patches"
d215 1
@


1.144
log
@- Cleanup snortsam integration
@
text
@d9 1
a9 1
PORTVERSION=	2.9.2
d203 2
@


1.143
log
@- Update to 2.9.2
@
text
@d179 1
d185 6
a190 12
.if defined(NOPORTDOCS)
	@@${REINPLACE_CMD} '/SUBDIRS = /s/doc//' ${WRKSRC}/Makefile.in
.endif

pre-configure:
	${FIND} ${WRKSRC} -name 'Makefile.in' | ${XARGS} ${REINPLACE_CMD} -e 's|lib/snort_|lib/snort/|g'
	${REINPLACE_CMD} "s,/etc/snort.conf,${CONFIG_DIR}/snort.conf," ${WRKSRC}/src/snort.c ${WRKSRC}/snort.8
	${REINPLACE_CMD} -e 's|lib/snort_|lib/snort/|g' ${WRKSRC}/etc/snort.conf
	${REINPLACE_CMD} -e 's|^dynamicdetection|#dynamicdetection|' ${WRKSRC}/etc/snort.conf
	${REINPLACE_CMD} -e '/var HOME_NET/s/any/[YOU_NEED_TO_SET_HOME_NET_IN_snort.conf]/' ${WRKSRC}/etc/snort.conf
	${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' ${WRKSRC}/Makefile.in
	${REINPLACE_CMD} -e 's|libdir)/pkgconfig|prefix)/libdata/pkgconfig|' \
d192 1
a192 1
	${REINPLACE_CMD} -e 's|libnet-config|${LIBNET_CONFIG}|g' ${WRKSRC}/configure
d194 3
a196 3
	${REINPLACE_CMD} -e 's|^ipvar |var |' ${WRKSRC}/etc/snort.conf
	${REINPLACE_CMD} -e '/normalize_ip6/s/^preprocessor/#preprocessor/'  ${WRKSRC}/etc/snort.conf
	${REINPLACE_CMD} -e '/normalize_icmp6/s/^preprocessor/#preprocessor/'  ${WRKSRC}/etc/snort.conf
d199 4
a202 1
	${REINPLACE_CMD} -e '/^# include .PREPROC_RULE/s/# include/include/' ${WRKSRC}/etc/snort.conf
d204 2
d207 4
a222 12
.if defined(WITH_SNORTSAM)
	# mss: only doing this because snortsam patch/autojunk messes up paths
	# life is too short to figure out why.
	@@${MKDIR} ${LOCALBASE}/lib/snort/dynamicrules
	@@cd ${LOCALBASE}/lib && ${MKDIR} snort/dynamicrules &&  ${MKDIR} snort/dynamicengine &&  ${MKDIR} snort/dynamicpreprocessor
	@@cd ${LOCALBASE}/lib && ${MV} snort_dynamicrules/* snort/dynamicrules
	@@cd ${LOCALBASE}/lib && ${MV} snort_dynamicengine/* snort/dynamicengine
	@@cd ${LOCALBASE}/lib && ${MV} snort_dynamicpreprocessor/* snort/dynamicpreprocessor
	@@cd ${LOCALBASE}/lib && ${RMDIR} snort_dynamic*
	@@${MKDIR} ${LOCALBASE}/libdata/pkgconfig/ && ${MV} ${LOCALBASE}/lib/pkgconfig/snort.pc ${LOCALBASE}/libdata/pkgconfig/snort.pc
	@@${RMDIR} ${LOCALBASE}/lib/pkgconfig
.endif
@


1.142
log
@- Bring back snortsam patches
- Do not bump PORTREVISION

PR:		ports/162740
Submitted by:	Michael Scheidell <scheidell@@freebsd.org>
Feature safe:	yes
@
text
@d9 1
a9 1
PORTVERSION=	2.9.1.2
@


1.141
log
@- Make SOURCEFIRE option enabled by default to ensure all rules function out of the box.

Requested by:	Dean Freeman <wfreeman@@sourcefire.com>
@
text
@a177 1
BROKEN=		snortsam patches not available for 2.9.1 yet
d180 1
a180 1
PATCHFILES+=	snortsam-2.9.1.diff.gz:snortsam
@


1.140
log
@- Rename SRCFIRE OPTION to SOURCEFIRE
@
text
@d44 1
a44 1
		SOURCEFIRE "Enable Sourcefire specific build options" off \
@


1.139
log
@- Add additional MASTER_SITES
@
text
@d44 1
a44 1
		SRCFIRE "Enable sourcefire build option" off \
d137 1
a137 1
.if defined(WITH_SRCFIRE)
@


1.138
log
@- Update to 2.9.1.2
- Add debugging OPTION to build snort with debug symbols, etc.
- Add sourcefire OPTION to build snort with --enable-sourcefire
- Take maintainership per private email conversation with current maintainer

PR:		ports/161876
Submitted by:	Ryan Steinmetz <zi@@FreeBSD.org>
Approved by:	Dean Freeman <wfreeman@@sourcefire.com> (maintainer)
@
text
@d11 2
a12 1
MASTER_SITES=	SF/snort/snort
@


1.137
log
@- Update to 2.9.1.1

PR:		ports/161347
Submitted by:	Ryan Steinmetz <zi@@FreeBSD.org>
Approved by:	Dean Freeman <wfreeman@@sourcefire.com> (maintainer)
@
text
@d9 1
a9 1
PORTVERSION=	2.9.1.1
d15 1
a15 1
MAINTAINER=	wfreeman@@sourcefire.com
d42 3
a44 1
		SNORTSAM "Unofficial Snortsam Patch" off
d78 1
a80 1
		--disable-corefiles \
d129 11
@


1.136
log
@- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
@
text
@d9 1
a9 1
PORTVERSION=	2.9.1
d22 1
a22 1
BUILD_DEPENDS=	daq>=0.6.1:${PORTSDIR}/net/daq \
d24 1
a24 1
RUN_DEPENDS=	daq>=0.6.1:${PORTSDIR}/net/daq \
@


1.135
log
@Update to 2.9.1
Add LICENSE

PR:		ports/160044
Submitted by:	zi@@
Approved by:	wxs (mentor), maintainer timeout
@
text
@a48 1
CONFIGURE_ENV=	LDFLAGS="${LDFLAGS}"
@


1.134
log
@- Update to 2.9.0.5

PR:		ports/156334
Submitted by:	Dean Freeman <wfreeman@@sourcefire.com> (maintainer)
@
text
@d9 1
a9 1
PORTVERSION=	2.9.0.5
d18 3
d22 1
a22 1
BUILD_DEPENDS=	daq>=0.5_1:${PORTSDIR}/net/daq \
d24 1
a24 1
RUN_DEPENDS=	daq>=0.5_1:${PORTSDIR}/net/daq \
d41 1
d78 1
a78 1
		--enable-reload --enable-reload-restart \
d124 4
d165 1
d168 1
a168 1
PATCHFILES+=	snortsam-2.9.0.3.diff.gz:snortsam
d183 2
@


1.133
log
@Update to libtool 2.4

Tested by:	pav (multiple -exp runs)
@
text
@d9 1
a9 2
PORTVERSION=	2.9.0.4
PORTREVISION=	2
d24 1
a24 1
OPTIONS=	IPV6 "Enable IPv6 support" off \
@


1.132
log
@Apply two patches:

- Fix build when --enable-dynamicplugins is not given to configure. [1]
- Fix a segfault in HttpInspect

PR:		ports/154868
Submitted by:	Dean Freeman <wfreeman@@sourcefire.com> (maintainer)
		[1]: Michael Scheidell
@
text
@d209 1
a209 1
	@@${LIBTOOL} --finish ${LOCALBASE}/snort/dynamicpreprocessor
@


1.131
log
@- Remove stray cmd from plist that created bogus file on pkg_add

Reported by:	pointyhat
@
text
@d10 1
a10 1
PORTREVISION=	1
@


1.130
log
@- Update MAINTAINER address
@
text
@d10 1
@


1.129
log
@- Update to 2.9.0.4
- Update snortsam checksum
- Fix LIBNET_CONFIG issue
- Pet portlint

Changes:	http://www.snort.org/downloads/740
PR:		ports/154668
Submitted by:	Dean Freeman <wfreeman@@sourcefire.com> (maintainer)
@
text
@d15 1
a15 1
MAINTAINER=	wfreeman@@gmail.com
@


1.128
log
@- Update to 2.9.0.3 [1]
- pass maintainership to William Freeman <wfreeman_AT_sourcefire dot com>

Note: This attached patch replaces the one in ports/153998.
      Also fixes the location of the dynamic libs/rules in ports/153224.
PR:		ports/154514 [1], ports/153998 [2]
Submitted by:	Michael Scheidell <scheidell_AT_secnap dot net>
@
text
@d9 1
a9 1
PORTVERSION=	2.9.0.3
d63 1
d66 4
d73 5
a77 5
CONFIGURE_ARGS+=	--enable-dynamicplugin --enable-build-dynamic-examples \
			--enable-reload --enable-reload-restart \
			--disable-corefiles \
			--with-dnet-includes=${LIBNET_INCDIR} \
			--with-dnet-libraries=${LIBNET_LIBDIR}
d157 2
a158 3
USE_AUTOTOOLS+= automake
PATCH_SITES+=	http://www.snortsam.net/files/snort-plugin/:snortsam \
		http://www.secnap.com/downloads/:snortsam
d168 2
a169 4
	${FIND} ${WRKSRC} -name 'Makefile.in' | ${XARGS} ${REINPLACE_CMD} -e \
	    's|lib/snort_|lib/snort/|g'
	${REINPLACE_CMD} "s,/etc/snort.conf,${CONFIG_DIR}/snort.conf," \
		${WRKSRC}/src/snort.c ${WRKSRC}/snort.8
d204 1
a204 1
	@@cd ${LOCALBASE}/lib && ${${RMDIR} snort_dynamic*
@


1.127
log
@- add IPv6 option

PR:		ports/152009
Submitted by:	Trond Endrestøl <Trond dot Endrestol_AT_ximalas dot info>
@
text
@d9 1
a9 1
PORTVERSION=	2.8.6.1
d11 1
a11 2
MASTER_SITES=	LOCAL
MASTER_SITE_SUBDIR=     clsung
d13 3
a15 1
MAINTAINER=	clsung@@FreeBSD.org
d19 15
a33 6

CONFLICTS?=	snort-1.* snort-2.[0-7].*

OPTIONS=	DYNAMIC "Enable dynamic plugin support" on \
		FLEXRESP "Flexible response to events" off \
		FLEXRESP2 "Flexible response to events (version 2)" off \
d38 3
a40 3
		PERPROFILE "Enable Performance Profiling" off \
		SNORTSAM "Enable output plugin to SnortSam" off \
		IPV6 "Enable IPv6 support" off
a45 1
PATCH_DIST_STRIP=	-p1
d50 1
a50 1
		sid-msg.map snort.conf threshold.conf unicode.map
d57 2
d60 2
a61 5
.include <bsd.port.pre.mk>

.if defined(WITH_FLEXRESP)
LIBNET_CONFIG?=		${LOCALBASE}/bin/libnet10-config
.elif defined(WITH_FLEXRESP2)
a62 3
.endif

.if exists(${LIBNET_CONFIG})
a66 1
.endif
d68 6
a73 4
.if !defined(WITHOUT_DYNAMIC)
USE_AUTOTOOLS=	libtool
USE_LDCONFIG=	yes
CONFIGURE_ARGS+=	--enable-dynamicplugin
a74 13
.else
PLIST_SUB+=	DYNAMIC="@@comment "
.endif

.if defined(WITH_FLEXRESP)
.if defined(WITH_FLEXRESP2)
IGNORE=			options FLEXRESP and FLEXRESP2 are mutually exclusive
.endif
BUILD_DEPENDS+=		${LIBNET_CONFIG}:${PORTSDIR}/net/libnet10
CONFIGURE_ARGS+=	--enable-flexresp \
			--with-libnet-includes=${LIBNET_INCDIR} \
			--with-libnet-libraries=${LIBNET_LIBDIR}
.endif
d76 3
a78 6
.if defined(WITH_FLEXRESP2)
LIB_DEPENDS+=		dnet.1:${PORTSDIR}/net/libdnet
BUILD_DEPENDS+=		${LIBNET_CONFIG}:${PORTSDIR}/net/libnet
CONFIGURE_ARGS+=	--enable-flexresp2 \
			--with-libnet-includes=${LIBNET_INCDIR} \
			--with-libnet-libraries=${LIBNET_LIBDIR}
d115 10
a124 2
.if defined(WITH_PERPROFILE)
CONFIGURE_ARGS+=	--enable-perfprofiling
d127 22
a148 4
.if defined(WITH_SNORTSAM)
USE_AUTOTOOLS+=	automake
PATCH_SITES+=http://www.snortsam.net/files/snort-plugin/:snortsam
PATCHFILES+=snortsam-2.8.6.diff.gz:snortsam
d151 5
a155 2
.if defined(WITH_IPV6)
CONFIGURE_ARGS+=	--enable-ipv6
a163 3
.if defined(WITH_SNORTSAM)
	@@cd ${WRKSRC} && ${SH} ${WRKSRC}/autojunk.sh
.endif
d169 2
a171 1
.if defined(WITH_FLEXRESP) || defined(WITH_FLEXRESP2)
d173 4
d178 5
a182 5
.if defined(WITHOUT_DYNAMIC)
	${REINPLACE_CMD} -e "s,-am: install-libLTLIBRARIES,-am:," \
		${WRKSRC}/src/dynamic-plugins/sf_engine/Makefile.in
	@@${CAT} ${PATCHDIR}/pkg-message-dynamicplugin
	@@sleep 5
d194 12
a205 1
.if !defined(WITHOUT_DYNAMIC)
a206 1
.endif
d223 9
d234 1
a234 1
.include <bsd.port.post.mk>
@


1.126
log
@Sync to new bsd.autotools.mk
@
text
@d29 2
a30 1
		SNORTSAM "Enable output plugin to SnortSam" off
d135 4
@


1.125
log
@Unbreak the build when the SNORTSAM option is selected.
Change a manual build depend line on automake110 (which is dead)
to a autotools line.

PR:		ports/152171
Submitted by:	"Tom Judge" <tom@@tomjudge.com>
Approved by:	maintainer timeout (clsung, 21 days)
@
text
@d64 1
a64 1
USE_AUTOTOOLS+=	libtool:22
d129 1
a129 1
USE_AUTOTOOLS+=	automake:111
@


1.124
log
@Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:	portmgr (for Mk/bsd.port.mk part)
Tested by:	Multiple -exp runs
@
text
@d64 1
a64 1
USE_AUTOTOOLS=	libtool:22
d129 1
a129 1
BUILD_DEPENDS+=		automake>=1.10.3:${PORTSDIR}/devel/automake110
@


1.123
log
@- Update snort to version 2.8.6.1.
- From the release notes:
  * Eliminate false positives when using fast_pattern:only and having only
  one http content in the pattern matcher.

  * Address false positives in FTP preprocessor with string format verification.
  Also addressed issue with handling of response codes to data transfer
  commands where the response code didn't contain a message.

PR:		ports/148878
Submitted by:	olli hauer <ohauer_AT_gmx dot de>
@
text
@d129 1
a129 1
BUILD_DEPENDS+=		automake>=1.10.1:${PORTSDIR}/devel/automake110
@


1.122
log
@- source tar ball go to LOCAL
- fix WITH_SNORTSAM knob

PR:		ports/148484, ports/148516
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>
@
text
@d9 1
a9 1
PORTVERSION=	2.8.6
@


1.121
log
@- Update to 2.8.6
- name for one patch has changed from patch-snort.conf to patch-etc__snort.conf
  (easier to build diffs with 'make makepatch')
- snort.conf was replaced with the version shiped in the rules tarball
  (Maybe users shoud be pointed to the Changelog)

PR:		ports/146155
Submitted by:	olli hauer <ohauer_AT_gmx dot de>
@
text
@d11 2
a12 2
MASTER_SITES=	http://www.snort.org/dl/ \
		http://dl.snort.org/snort-current/
d129 1
a134 3
.if defined(WITH_SNORTSAM)
BUILD_DEPENDS+=		automake>=1.10.1:${PORTSDIR}/devel/automake110
.endif
@


1.120
log
@- bump PORTREVISION
- Fix build WITH_SNORTSAM knob
- Use an updated patch from www.snortsam.net

PR:		ports/148449
Submitted by:	lioux
@
text
@d9 1
a9 2
PORTVERSION=	2.8.5.3
PORTREVISION=	2
d130 1
a130 1
PATCHFILES+=snortsam-2.8.5.3.diff.gz:snortsam
@


1.119
log
@- fix LIB_DEPENDS about libnet
- snortsam patch for snort has changed
  - ref: http://lists.snortsam.net/pipermail/snortsam-discussion/2010-March/000502.html
- bump PORTREVISION

PR:		ports/145632
Submitted by:	olli hauer <ohauer_AT_gmx dot de>
@
text
@d10 1
a10 1
PORTREVISION=	1
d131 1
a131 1
PATCHFILES+=snortsam-2.8.5.diff.gz:snortsam
@


1.118
log
@- Update to 2.8.5.3
@
text
@d10 1
d84 2
a85 2
BUILD_DEPENDS+=		${LIBNET_CONFIG}:${PORTSDIR}/net/libnet \
			libdnet*>=1.10_1:${PORTSDIR}/net/libdnet
@


1.117
log
@- update snort to version 2.8.5.2

RELEASE.NOTES
2009-12-15 - Snort 2.8.5.2

[*] Improvements
* Improvements to HTTP Inspect for handling of pipelined requests
and chunked encodings.

* Updated the documentation for output plugins and log limits.

* Fixed building on AIX 6.

* Fixed reloading of auto-iface variables when privileges had been dropped.

* Fixed issues at startup and perfstats rotation with old versions of
libc (2.2, 2.3) & linux threads.

PR:		ports/142885
Submitted by:	olli hauer <ohauer_AT_gmx dot de>
@
text
@d9 1
a9 1
PORTVERSION=	2.8.5.2
@


1.116
log
@- fix default flags setting
- bump PORTREVISION

Submitted by:	Andrea Venturoli <ml_AT_netfence dot it>
@
text
@d9 1
a9 2
PORTVERSION=	2.8.5.1
PORTREVISION=	1
@


1.115
log
@- Update to 2.8.5.1
@
text
@d10 1
@


1.114
log
@- Mark MAKE_JOBS_UNSAFE, as it fails with forced jobs
- bump PORTREVISION

PR:		ports/138644
Submitted by:	Dmitry Marakasov <amdmi3_AT_amdmi3 dot ru>
@
text
@d9 1
a9 2
PORTVERSION=	2.8.4.1
PORTREVISION=	2
d12 1
a12 2
		http://dl.snort.org/snort-current/ \
		http://dl.snort.org/snort284/
d35 1
d129 2
a130 2
PATCH_SITES+=http://www.freebsdbrasil.com.br/~urisso/files/snort/:snortsam
PATCHFILES+=snortsam-2.8.4.1.diff:snortsam
d150 1
@


1.113
log
@- Fix fetch

Reported by:	pointyhat
Hat:		portmgr
Feature safe:	yes
@
text
@d10 1
a10 1
PORTREVISION=	1
d37 1
@


1.112
log
@- Chase libprelude update

Feature safe:	yes
@
text
@d13 2
a14 1
		http://dl.snort.org/snort-current/
@


1.111
log
@- Re-enable plugin snortsam
- bump PORTREVISION

PR:		ports/137765
Submitted by:	Danton Dorati <danton_AT_freebsdbrasil dot com dot br>
@
text
@d115 1
a115 1
LIB_DEPENDS+=		prelude.19:${PORTSDIR}/security/libprelude
@


1.110
log
@- Fix fetch
@
text
@d10 1
d29 2
a30 2
		PERPROFILE "Enable Performance Profiling" off
#		SNORTSAM "Enable output plugin to SnortSam" on
d127 4
a130 4
#.if defined(WITH_SNORTSAM)
#PATCH_SITES+=http://www.freebsdbrasil.com.br/~urisso/files/snort/:snortsam
#PATCHFILES+=snortsam-2.8.2.1.diff:snortsam
#.endif
d133 3
a135 3
#.if defined(WITH_SNORTSAM)
#BUILD_DEPENDS+=		automake>=1.10.1:${PORTSDIR}/devel/automake110
#.endif
d141 3
a143 3
#.if defined(WITH_SNORTSAM)
#	@@cd ${WRKSRC} && ${SH} ${WRKSRC}/autojunk.sh
#.endif
@


1.109
log
@-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
@
text
@d11 2
a12 1
MASTER_SITES=	http://www.snort.org/dl/
@


1.108
log
@- Update to 2.8.4.1
@
text
@d61 1
a61 1
USE_AUTOTOOLS=	libtool:15
@


1.107
log
@Fix plist with -DNOPORT*.

Prompted by:	QAT QA run
Approved by:	maintainer timeout on QATMail
@
text
@d9 1
a9 2
PORTVERSION=	2.8.2.2
PORTREVISION=	3
d11 1
a11 1
MASTER_SITES=	http://www.snort.org/dl/current/
d27 2
a28 2
		PERPROFILE "Enable Performance Profiling" off \
		SNORTSAM "Enable output plugin to SnortSam" off
d125 4
a128 4
.if defined(WITH_SNORTSAM)
PATCH_SITES+=http://www.freebsdbrasil.com.br/~urisso/files/snort/:snortsam
PATCHFILES+=snortsam-2.8.2.1.diff:snortsam
.endif
d131 3
a133 3
.if defined(WITH_SNORTSAM)
BUILD_DEPENDS+=		automake>=1.10.1:${PORTSDIR}/devel/automake110
.endif
d139 3
a141 3
.if defined(WITH_SNORTSAM)
	@@cd ${WRKSRC} && ${SH} ${WRKSRC}/autojunk.sh
.endif
@


1.106
log
@- Chase security/libprelude shlib version bump

PR:		131286, 131585 (partial)
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>
@
text
@d135 3
@


1.105
log
@- Add mysql/postgresql to REQUIRE: in rc.script for correct start order

PR:		127954
Submitted by:	Helmut Schneider <jumper99 at gmx dot de>
Approved by:	maintainer timeout
@
text
@d10 1
a10 1
PORTREVISION=	2
d114 1
a114 1
LIB_DEPENDS+=		prelude.17:${PORTSDIR}/security/libprelude
@


1.104
log
@- Remove conditional checks for FreeBSD 5.x and older
@
text
@d10 1
a10 1
PORTREVISION=	1
d155 8
@


1.103
log
@- bump PORTREVISION
- fix libprelude version
One of the config options for security/snort is WITH_PRELUDE. Last
time libprelude has changed to new version, but Makefile for snort is not
updated. This patch corrects this issue.

PointyHat to:   beech (ports/127339)
PR:		ports/127818
Submitted by:	Krzysztof Stryjek <wtp_AT_bsdguru dot org>
@
text
@a47 4
.if ${OSVERSION} < 500036
EXTRA_PATCHES+=	${FILESDIR}/extra-patch-src-sf_snort_plugin_api.h
.endif

@


1.102
log
@- Update to 2.8.2.2
@
text
@d10 1
d118 1
a118 1
LIB_DEPENDS+=		prelude.14:${PORTSDIR}/security/libprelude
@


1.101
log
@- patch for enable feature to output plugin snortsam
- bump PORTREVISION

PR:		ports/126506
Submitted by:	Danton Dorati <danton_AT_freebsdbrasil dot com dot br>
@
text
@d9 1
a9 2
PORTVERSION=	2.8.2.1
PORTREVISION=	1
@


1.100
log
@Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
@
text
@d10 1
d28 2
a29 1
		PERPROFILE "Enable Performance Profiling" off
d130 5
d136 8
a154 4
.endif

pre-configure:
.if defined(WITHOUT_DYNAMIC)
@


1.99
log
@- Update to 2.8.2.1
- 2008-06-12 - Snort 2.8.2.1

  [*] Improvements
  * Fix support for pass rules that sometimes did not take precedence
  over alert and/or drop rules.

PR:		ports/124717
Submitted by:	Michael Scheidell <scheidell_AT_secnap dot net>
@
text
@a32 1
CONFIGURE_TARGET=	--build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
@


1.98
log
@- typo in files/pkg-message.in
- bump PORTREVISION

Submitted by:	kevlo
@
text
@d9 1
a9 2
PORTVERSION=	2.8.2
PORTREVISION=	1
@


1.97
log
@- Update to 2.8.2
@
text
@d10 1
@


1.96
log
@- Snort now includes an updated version of FLEXRESP2 in the main snort source code and no longer needs to be patched.
- bump PORTREVISION

PR:		ports/124048
Submitted by:	"Scot W. Hetzel" <swhetzel_AT_gmail dot com>
@
text
@d9 1
a9 2
PORTVERSION=	2.8.1
PORTREVISION=	2
@


1.95
log
@- Update libprelude dependency

PR:		ports/123659
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d10 1
a10 1
PORTREVISION=	1
a84 3
BROKEN=			FLEXRESP2 patch file does not incorporate cleanly
PATCH_SITES+=		http://cerberus.sourcefire.com/~jeff/archives/snort/sp_respond2/
PATCHFILES+=		sp_respond2.diff.gz
@


1.94
log
@- add Performance Profiling option
- bump PORTREVISION

PR:		by mail
Submitted by:	Scott MacGregor <shadowbq_AT_gmail dot com>
@
text
@d121 1
a121 1
LIB_DEPENDS+=		prelude.13:${PORTSDIR}/security/libprelude
@


1.93
log
@- Update to 2.8.1
@
text
@d10 1
d27 2
a28 1
		PRELUDE "Enable Prelude NIDS integration" off
d129 4
@


1.92
log
@- Update to 2.8.0.2

PR:		ports/121103
Submitted by:	Jo Rhett <jrhett_AT_netconsonance dot com>
Reviewed by:	clsung
@
text
@d9 1
a9 1
PORTVERSION=	2.8.0.2
@


1.91
log
@- update prelude library dependency

PR:		ports/116111
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d9 1
a9 2
PORTVERSION=	2.7.0.1
PORTREVISION=	1
d18 1
a18 2
CONFLICTS?=	snort-1.* snort-2.0.* snort-2.1.* snort-2.2.* snort-2.3.* \
		snort-2.4.*
d35 2
a36 2
CONFIG_FILES=	classification.config gen-msg.map generators reference.config \
		sid sid-msg.map snort.conf threshold.conf unicode.map
@


1.90
log
@- Update to 2.7.0.1

Tested on two systems, and until works perfectly.

Changelog snort-2.7.0.1:
* etc/snort.conf:
  Turn off flow since Stream5 is now enabled by default.
* src/snort.c:
  Fix printing of threshold counts until after all rules are read.
  This issue did not affect thresholding, only display of thresholding.
  Thanks to Jeffrey Denton for reporting the problem.
* src/sfutil/ipobj.c:
  Fix free of invalid pointer when using a negated IP list.
  This is used by sfportscan preprocessor configuration parsing.
  Thanks to Anders Ostrem for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_session.c:
  Fixed issue when experimental ICMP tracking is used without using
  the TCP or UDP session tracking.  ICMP was attempting to lookup
  TCP or UDP sessions from uninitialized session cache.  Thanks to
  Koji Shikata for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_tcp.c:
  Fixed invalid session pointer when rule tries to use flowbits after
  session ends.  Thanks to rmkml for initially reporting the problem.

PR:		ports/115294
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d10 1
d121 1
a121 1
LIB_DEPENDS+=		prelude.12:${PORTSDIR}/security/libprelude
@


1.89
log
@- Remove the DESTDIR modifications from individual ports as we have a new,
  fully chrooted DESTDIR, which does not need such any more.

Sponsored by:	Google Summer of Code 2007
Approved by:	portmgr (pav)
@
text
@d9 1
a9 1
PORTVERSION=	2.7.0
@


1.88
log
@- Update to 2.7.0

Update includes:
- Target-based stream reassembly, including handling of TCP dataoverlaps and
  anomalous TCP header flags on a per-destination basis. 11 different
  target-based policies are supported. See README.stream5 for specific
  configuration options for operating system targets.
- UDP session tracking
- Option to emulate Stream4 flushing behaviour
- Stream5 replaces BOTH Stream4 and Flow -- should disable both of these when
  Stream5 is enabled.
- Security and memory footprint improvements

PR:		ports/114806
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d39 1
a39 1
LOGS_DIR=	${DESTDIR}/var/log/snort
@


1.87
log
@- Update to 2.6.1.5

PR:		ports/114123
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d9 1
a9 1
PORTVERSION=	2.6.1.5
@


1.86
log
@- optional pcap filter in rc.conf.

  Example:
snort_expression="not net after.nat.addr.ess/24"
- bump PORTREVISION

PR:		ports/113551
Submitted by:	Tomoyuki Sakurai <cherry_AT_trombik dot org>
@
text
@d9 1
a9 2
PORTVERSION=	2.6.1.4
PORTREVISION=	2
@


1.85
log
@- Update libprelude to 0.9.14.
- Update dependent ports accordingly.
- Bump PORTVERSION to force rebuild.

PR:		ports/112703
Submitted by:	Marcelo Araujo <araujo@@FreeBSD.org>
Approved by:	stas (mentor)
@
text
@d10 1
a10 1
PORTREVISION=	1
@


1.84
log
@- Update to 2.6.1.4
- Fix initial copy of configuration files.

PR:		ports/111533
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@d10 1
d121 1
a121 1
LIB_DEPENDS+=		prelude.11:${PORTSDIR}/security/libprelude
@


1.83
log
@- fix build error when configured with FLEXRESP2

PR:		ports/109830
Submitted by:	alfss<alfss_AT_netco dot ru>
@
text
@d9 1
a9 1
PORTVERSION=	2.6.1.3
@


1.82
log
@- Update to 2.6.1.3
- security update

Security:	http://www.snort.org/docs/advisory-2007-02-19.html
@
text
@d87 1
a87 1
BUILD_DEPENDS+=		${LIBNET_CONFIG}:${PORTSDIR}/net/libnet
@


1.81
log
@- pet tinderbox
@
text
@d9 1
a9 2
PORTVERSION=	2.6.1.2
PORTREVISION=	2
@


1.80
log
@- fix configure errors when WITH_FLEXRESP, WITH_FLEXRESP2
- bump PORTREVISION
@
text
@d135 1
a135 1
.if exists(${LIBNET_CONFIG})
@


1.79
log
@- Patch net/libnet* to versioned libraries and header files, so they can
  coexist

PR:		ports/103861
Submitted by:	alepulver
Tested by:	pointyhat
With hat:	portmgr
@
text
@d10 1
a10 1
PORTREVISION=	1
d62 1
a62 1
LIBNET_LIBDIR=	${LIBNET_CFLAGS:M-L*:S/-L//}
d135 3
@


1.78
log
@Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:	portmgr (erwin), erwin (mentor)
@
text
@d52 13
d78 1
a78 1
BUILD_DEPENDS+=		libnet*<=1.1.0,1:${PORTSDIR}/net/libnet10
d80 2
a81 2
			--with-libnet-includes=${LOCALBASE}/include \
			--with-libnet-libraries=${LOCALBASE}/lib
d88 1
a88 1
BUILD_DEPENDS+=		libnet*>=1.1.2.1,1:${PORTSDIR}/net/libnet \
d91 2
a92 2
			--with-libnet-includes=${LOCALBASE}/include \
			--with-libnet-libraries=${LOCALBASE}/lib
@


1.77
log
@- updated prelude version;
- bump PORTREVISION

PR:		ports/107987
Submitted by:	Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
@
text
@a29 2
USE_GPG=	yes
SIG_SUFFIX=	.sig
@


1.76
log
@- Update to 2.6.1.2
@
text
@d10 1
d110 1
a110 1
LIB_DEPENDS+=		prelude.10:${PORTSDIR}/security/libprelude
@


1.75
log
@- Update snort to latest version (2.6.1.1)

PR:		ports/106368
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>
@
text
@d9 1
a9 1
PORTVERSION=	2.6.1.1
@


1.74
log
@- Update to 0.9.11
- library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:		ports/104328
Submitted by:	maintainer (Robin Gruyters)
Approved by:	portmgr (pav)
@
text
@d9 1
a9 1
PORTVERSION=	2.6.0.2
@


1.73
log
@- Update to 2.6.0.2
- let snort to packet sniff several different network interfaces
  - Contributed by Matthew Seaman <matthew dot seaman_AT_thebunker dot net>
@
text
@d109 1
a109 1
LIB_DEPENDS+=		prelude.[7-?]:${PORTSDIR}/security/libprelude
@


1.72
log
@- fix build error in 4.x
  "cvs update - sys/types.h should be before socket.h"

PR:		ports/102922
Submitted by:	Jez Hancock <jez.hancock_AT_munk dot me dot uk>
@
text
@d9 1
a9 2
PORTVERSION=	2.6.0
PORTREVISION=	1
@


1.71
log
@- fix location entry in snort.conf
- bump PORTREVISION

PR:		ports/102909
Submitted by:	Richard Bejtlich <taosecurity_AT_gmail dot com>
@
text
@d50 4
@


1.70
log
@- Update to 2.6.0
- I'll maintain it now.

PR:		ports/99862
Submitted by:	Linh Pham <question+fbsdports_AT_closedsrc dot org>
@
text
@d10 1
d119 1
@


1.69
log
@- Release maintainership:

I have jumped in over my head with maintaining the port, both in terms of my
skills with significantly modifying a port (particularly in getting the port
from 2.4.5 to 2.6.0), not using snort enough to really test the full package,
and not enough time to improve the port.

With that said, there still is ports/99862 that is still open (re: bring
security/snort to 2.6.0) which I have it the wall on trying to get the port
to deinstall cleanly due to the optional nature of some components. I will
continue to help out with other ports that I can take on and those that I
can still take on maintainership.

PR:		ports/101526
Submitted by:	Linh Pham <question+fbsdports@@closedsrc.org> (maintainer)
@
text
@d9 1
a9 1
PORTVERSION=	2.4.5
d13 1
a13 1
MAINTAINER=	ports@@FreeBSD.org
d18 6
a23 1
OPTIONS=	FLEXRESP "Flexible response to events" off \
d41 1
a41 1
LOGS_DIR=	/var/log/snort
d49 9
d59 3
d68 11
d114 2
d118 10
d130 3
d138 1
a138 1
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${CONFIG_DIR}/${f}.default
d140 3
@


1.68
log
@- Update to 2.4.5

PR:		ports/98773
Submitted by:	Linh Pham <question+fbsdports@@closedsrc.org> (maintainer)
@
text
@d13 1
a13 1
MAINTAINER=	question+fbsdports@@closedsrc.org
@


1.67
log
@Remove USE_REINPLACE from all categories starting with S
@
text
@d9 1
a9 2
PORTVERSION=	2.4.4
PORTREVISION=	1
d35 2
d91 3
d95 2
a96 1
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${CONFIG_DIR}/${f}-sample
a97 1
	@@${MKDIR} ${EXAMPLESDIR}
@


1.66
log
@- Chase libprelude version
- Bump PORTREVISION

PR:		ports/96758, ports/96759, ports/96760
Submitted by:	maintainer
@
text
@a26 1
USE_REINPLACE=	yes
@


1.65
log
@- Update to 2.4.4 [1]
- Chase libprelude version [2]

PR:		ports/94275 [1], ports/94412 [2]
Submitted by:	maintainer [1] [2]
@
text
@d10 1
d77 1
a77 1
LIB_DEPENDS+=		prelude.7:${PORTSDIR}/security/libprelude
@


1.64
log
@- Fix dependency on prelude (shlib version has been bumped recently).

PR:		ports/89191
Submitted by:	Krzysztof Stryjek <wtp+snort@@bsdguru.org>
Approved by:	maintainer
@
text
@d9 1
a9 2
PORTVERSION=	2.4.3
PORTREVISION=	1
d76 1
a76 1
LIB_DEPENDS+=		prelude.2:${PORTSDIR}/security/libprelude
@


1.63
log
@libnet update:
- move 1.0 obsoleted version to net/libnet10
  net/libnet is latest Stable Version
  net/libnet is latest Beta Version

- Fix all depended ports with a new DEPENDS scheme

- While I'm here fix security/yersinia build on 4.x
  (getopt_long and ncurses issues)

PR:		ports/85519 (based on)
Submitted by:	Stas Yakovlev <stas.yakovlev_at_gmail.com>
@
text
@d77 1
a77 1
LIB_DEPENDS+=		prelude.1:${PORTSDIR}/security/libprelude
@


1.62
log
@- Update to 2.4.3, which includes a fix for a potential buffer overflow
  in the Back Orifice preprocessor.
- Transfer maintainership to the submitter, who seems to be tracking
  Snort development much closer than I do, and submitted most of
  the Snort update PRs in last couple of years

PR:		ports/87628
Submitted by:	Linh Pham <question+fbsdports@@closedsrc.org>
@
text
@d10 1
d45 1
a45 1
BUILD_DEPENDS+=		${LOCALBASE}/lib/libnet.a:${PORTSDIR}/net/libnet
@


1.61
log
@- Update to 2.4.1
- Snort distribution no longer includes rules - download them seperately
  (or consider using security/oinkmaster to simplify that process)
- Change default config dir to ${PREFIX}/etc/snort (to avoid cluttering)
- Install database schemas scripts into EXAMPLESDIR
@
text
@d9 1
a9 1
PORTVERSION=	2.4.1
d13 1
a13 1
MAINTAINER=	sergei@@FreeBSD.org
@


1.60
log
@- Update to 2.3.3
- Update MASTER_SITE path for Prelude patch

PR:		ports/80338
Submitted by:	Linh Pham <question+fbsdports@@closedsrc.org>
@
text
@d9 1
a9 1
PORTVERSION=	2.3.3
a11 1
DISTFILES=	${DISTNAME}${EXTRACT_SUFX}
d22 1
a22 1
		PRELUDE "Enable patch for Prelude integration" off
d25 1
a25 1
SIG_SUFFIX=	.asc
d27 2
a28 2
USE_RC_SUBR=	yes
RC_SCRIPTS_SUB=	PREFIX=${PREFIX} RC_SUBR=${RC_SUBR}
d33 4
d38 2
a39 2
DOCS=		ChangeLog doc/AUTHORS doc/BUGS doc/CREDITS doc/NEWS \
		doc/README* doc/TODO doc/USAGE doc/*.pdf
a75 8
#BROKEN=			Prelude reporting patch have not been updated for Snort 2.2.0
PRELUDE_PATCH=		0.3.6
MASTER_SITES+=		http://prelude-ids.org/download/releases/old/:prelude
SIGNED_FILES=		${DISTNAME}${EXTRACT_SUFX}
DISTFILES+=		snort-prelude-reporting-patch-${PRELUDE_PATCH}.tar.gz:prelude
EXTRA_PATCHES+=		${WRKDIR}/snort-2.2.0-prelude-${PRELUDE_PATCH}.diff
USE_AUTOMAKE_VER=	19
USE_AUTOCONF_VER=	259
d77 1
a77 1
CONFIGURE_ARGS+=	--with-prelude=yes
a78 4

pre-configure:
	cd ${WRKSRC} && ${ACLOCAL} && ${AUTOMAKE} && ${AUTOCONF}
	${RM} ${WRKSRC}/doc/README.Prelude.orig
d80 1
a80 1
CONFIGURE_ARGS+=	--with-prelude=no
d85 2
a86 3
	${REINPLACE_CMD} "s,%%PREFIX%%,${PREFIX}," ${WRKSRC}/src/snort.c
	@@${SED} ${RC_SCRIPTS_SUB:S/$/!g/:S/^/ -e s!%%/:S/=/%%!/} \
		${FILESDIR}/snort.sh > ${WRKDIR}/snort.sh
d89 3
a91 17
	${INSTALL_SCRIPT} -m 751 ${WRKDIR}/snort.sh ${PREFIX}/etc/rc.d/snort.sh
	@@${MKDIR} ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/rules/[^l]*.rules ${DATADIR}
.for f in local.rules
	${INSTALL_DATA} ${WRKSRC}/rules/${f} ${DATADIR}/${f}-sample
	[ -f ${DATADIR}/${f} ] || \
	    ${INSTALL_DATA} ${WRKSRC}/rules/${f} ${DATADIR}/${f}
.endfor
.for f in classification.config reference.config
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${DATADIR}/${f}-sample
	[ -f ${DATADIR}/${f} ] || \
	    ${INSTALL_DATA} ${WRKSRC}/etc/${f} ${DATADIR}/${f}
.endfor
.for f in snort.conf unicode.map threshold.conf
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}-sample
	[ -f ${PREFIX}/etc/${f} ] || \
	    ${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}
d93 2
a94 7
.if defined(WITH_PRELUDE)
.for f in prelude-classification.config
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}-sample
	[ -f ${PREFIX}/etc/${f} ] || \
	    ${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}
.endfor
.endif
@


1.59
log
@At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.
@
text
@d9 1
a9 1
PORTVERSION=	2.3.2
d75 1
a75 1
MASTER_SITES+=		http://prelude-ids.org/download/releases/:prelude
@


1.58
log
@Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
@
text
@d32 1
a32 1
CONFIGURE_TARGET=	--build=${ARCH}-portbld-freebsd${OSREL}
@


1.57
log
@- Update to 2.3.2:
  - Removed end-of-line parser fix (introduced in 2.3.1) in favor of
    completely reworking this at the next parser overhaul.

PR:		ports/78846
Submitted by:	Linh Pham <question+fbsdports@@closedsrc.org>
@
text
@d32 1
a32 1
CONFIGURE_TARGET=	--build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
@


1.56
log
@- Update to 2.3.1
- Update MASTER_SITES

Prompted by:	Fafa Diliha Romanova <fteg@@london.com>
@
text
@d9 1
a9 1
PORTVERSION=	2.3.1
@


1.55
log
@- Upgrade to 2.3.0 [1]
- Add WITH_PRELUDE knob to enable integration with Prelude IDS [2]

PR:             ports/76679 [1]
Submitted by:   Linh Pham <question+fbsdports@@closedsrc.org> [1]
Prompted by:    Roberto Bosticardo <roberto.bosticardo@@csp.it> [2]
@
text
@d9 1
a9 1
PORTVERSION=	2.3.0
d11 1
a11 1
MASTER_SITES=	http://www.snort.org/dl/
@


1.54
log
@Split the postgresql ports into a server and a client part.

All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.

PR:		75344
Approved by:	portmgr@@ (kris), ade & sean (mentors)
@
text
@d9 1
a9 1
PORTVERSION=	2.2.0
d12 1
d22 2
a23 1
		POSTGRESQL "Enable PostgreSQL support" off
d35 2
a36 2
DOCS=		ChangeLog doc/AUTHORS doc/BUGS doc/CREDITS doc/FAQ doc/NEWS \
		doc/README* doc/TODO doc/USAGE doc/snort_manual.pdf
d72 21
d117 7
@


1.53
log
@- Upgrade to 2.2.0 [1]
- Prevent local.rules from being clobbered [2]
- Revive OPTIONS - the time has come... ;)

PR:		ports/70332 [1], ports/70814 [2]
Submitted by:	Linh Pham <question+freebsdpr@@closedsrc.org> [1],
		Jez Hancock <jez.hancock@@munk.nu> [2]
@
text
@d61 1
a61 2
POSTGRESQL_PORT?=	databases/postgresql7
LIB_DEPENDS+=		pq.3:${PORTSDIR}/${POSTGRESQL_PORT}
@


1.52
log
@- Update to 2.1.3 [1]
- Use rcNG startup script [2]

PR:		ports/67842 [1], ports/67935 [2]
Submitted by:	Linh Pham <question+freebsdpr@@closedsrc.org> [1],
		Renato Botelho <renato@@galle.com.br> [2]
@
text
@d9 1
a9 1
PORTVERSION=	2.1.3
d18 4
a21 4
#OPTIONS=	FLEXRESP "Flexible response to events" off \
#		MYSQL "Enable MySQL support" off \
#		ODBC "Enable ODBC support" off \
#		POSTGRESQL "Enable PostgreSQL support" off
d26 2
d32 6
a70 7
MAN8=	snort.8
DOCS=	ChangeLog doc/AUTHORS doc/BUGS doc/CREDITS doc/FAQ doc/NEWS \
	doc/README* doc/TODO doc/USAGE doc/snort_manual.pdf

USE_RC_SUBR=	yes
RC_SCRIPTS_SUB=	PREFIX=${PREFIX} RC_SUBR=${RC_SUBR}

a75 6
pre-configure:
	@@${ECHO} ""
	@@${ECHO} "Set WITH_FLEXRESP, WITH_MYSQL, WITH_ODBC or WITH_POSTGRESQL"
	@@${ECHO} "to get additional support."
	@@${ECHO} ""

d77 1
d79 11
a89 11
	${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
		${DATADIR}/classification.config-sample
	[ -f ${DATADIR}/classification.config ] || \
	    ${CP} ${DATADIR}/classification.config-sample \
	    	${DATADIR}/classification.config
	${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
		${DATADIR}/reference.config-sample
	[ -f ${DATADIR}/reference.config ] ||  \
	    ${CP} ${DATADIR}/reference.config-sample ${DATADIR}/reference.config
	${INSTALL_SCRIPT} -m 751 ${WRKDIR}/snort.sh ${PREFIX}/etc/rc.d/snort.sh
d101 1
a101 1
.include <bsd.port.mk>
@


1.51
log
@- Rename WITH_POSTGRES knob to WITH_POSTGRESQL to be consistent
  with other ports

PR:		ports/62557 (part)
Submitted by:	Ulrich Spoerlein <q@@uni.de>
@
text
@d9 1
a9 1
PORTVERSION=	2.1.2
d67 3
d72 2
d93 1
a93 1
	${INSTALL_DATA} ${FILESDIR}/snort.sh.sample ${PREFIX}/etc/rc.d
d103 1
@


1.50
log
@- Update to 2.1.2

PR:		ports/65373
Submitted by:	Linh Pham <question+freebsdpr@@closedsrc.org>
@
text
@d21 1
a21 1
#		POSTGRES "Enable PostgreSQL support" off
d52 1
a52 1
.if defined(WITH_POSTGRES)
d72 1
a72 1
	@@${ECHO} "Set WITH_FLEXRESP, WITH_MYSQL, WITH_ODBC or WITH_POSTGRES"
@


1.49
log
@- Update to 2.1.1
- Remove patches not needed anymore

PR:		ports/63373
Submitted by:	Linh Pham <question+freebsdpr@@closedsrc.org>
@
text
@d9 1
a9 1
PORTVERSION=	2.1.1
d23 2
a24 2
#USE_GPG=	yes
#SIG_SUFFIX=	.asc
@


1.48
log
@Comment out OPTIONS for now.
Let's wait till the dust settles. ;)

Sometimes it helps when you read freebsd-ports *before* committing...
@
text
@d9 1
a9 2
PORTVERSION=	2.1.0
PORTREVISION=	2
@


1.47
log
@Oops - marcus did add OPTIONS already <blush>
I still prefer to have near the top of the Makefile -
right after the dependencies section
@
text
@d19 4
a22 4
OPTIONS=	FLEXRESP "Flexible response to events" off \
		MYSQL "Enable MySQL support" off \
		ODBC "Enable ODBC support" off \
		POSTGRES "Enable PostgreSQL support" off
@


1.46
log
@Use OPTIONS infrastructure from bsd.port.mk
@
text
@a67 7
OPTIONS=	FLEXRESP "Flexible response to events" off \
		MYSQL "Mysql logging" off \
		ODBC "ODBC logging" off \
		POSTGRES "Postgresql logging" off

.include <bsd.port.pre.mk>

d100 1
a100 1
.include <bsd.port.post.mk>
@


1.45
log
@Here come the patches!

* Add ghostscript knobs [1]
* Add per-port persistent build options with a menu-driven front-end [2]
* Allow porters to override the message generated when do-configure fails [3]
* Add patch to obviate many pkg-plist files [4]
* Fix the PKG_DBDIR comment [5]
* Make ports framework more robust with regard to make index [6]
* Add new command macros to bsd.port.mk [7]
* Remove direct command use from bsd.port.mk [8]
* Make the ports system respect WITHOUT_CPU_CFLAGS [9]
* Break the SDL code out into bsd.sdl.mk [10]
* Add working support for USE_SIZE [11]
* Fix RANDOMIZE_MASTER_SITES on -CURRENT [12]
* Convert some spaces to tabs [13]
* Add new physcial categories accessibility and x11-themes [14]
* Speed up GNU configure scripts [15]
* Remove "//" from MLINKS items in PLISTs and fix make -s install and
  make -s deinstall [16]
* Be more specific about looking for files in distinfo [17]
* Add new run-autotools target, and resort configure targets [18]
* Make CONFLICTS compare prefix for installed packages and PREFIX [19]
* Change directory to ${.CURDIR} before running certain make commands [20]
* When INSTALL_AS_USER is set, run ldconfig with failures ignored [21]
* Speed up the security check phase [22]
* Fix some corner cases in the PORTDOCS code [23]
* Add a new DEPRECATED macro [24]
* Make INDEX breakage more informative [25]

Look for a full write-up to follow on ports@@ and ports-developers@@.

PR:		36112 [1]
		59909 [4]
		61351 [6]
		59058 [7]
		59058 [8]
		59493 [9]
		55494 [10]
		59058 [11]
		59315 [12]
		59058 [13]
		59811 [15]
		59058 [16]
		59058 [17]
		60882 [18]
		58149 [19]
		59058 [20]
		61133 [21]
		55331 [22]
		59070 [23]
		59362 [24]
		59626 [25]
Submitted by:	linimon [1]
		eivind [2]
		marcus [3]
		trevor [4]
		gerald [5]
		linimon [6]
		eik [7]
		eik [8]
		jeh [9]
		edwin [10]
		eik [11]
		Sergey Matveychuk <sem@@ciam.ru> [12]
		eik [13]
		trevor gnome [14]
		adamw [15]
		eik [16]
		eik [17]
		edwin [18]
		clement [19]
		eik [20]
		edwin lev [21]
		Eugene M. Kim <ab@@astralblue.com> [22]
		eik [23]
		linimon [24]
		eik [25]
@
text
@d19 5
@


1.44
log
@- Install missing config files: unicode.map and threshold.conf
  (snort fails to run without them present in ${PREFIX}/etc)
- Bump PORTREVISION

Noticed by:	Kirby Kuehl <kkuehl@@cisco.com>
@
text
@d63 7
d102 1
a102 1
.include <bsd.port.mk>
@


1.43
log
@- Add missing dependency on devel/pcre (mandatory)
- Bump PORTREVISION

PR:		60520
Submitted by:	Kenneth Ingham <freebsdpr@@i-pi.com>

While I'm here:
- Fix configure's search for libnet (needed for WITH_FLEXRESP)
  when LOCALBASE != /usr/local
- Add CONFIGURE_TARGET to silence warning
- Use DOCSDIR in pkg-plist and re-sort
- Take maintainership (until someone else step up)
@
text
@d10 1
a10 1
PORTREVISION=	1
d19 2
d73 17
a93 22
	@@${MKDIR} ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${DATADIR}; \
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
		${DATADIR}/classification.config-sample; \
	if [ ! -f ${DATADIR}/classification.config ]; then \
	    ${CP} ${DATADIR}/classification.config-sample \
		${DATADIR}/classification.config; \
	fi; \
	${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
		${DATADIR}/reference.config-sample; \
	if [ ! -f ${DATADIR}/reference.config ]; then \
	    ${CP} ${DATADIR}/reference.config-sample \
		${DATADIR}/reference.config; \
	fi; \
	${INSTALL_DATA} ${FILESDIR}/snort.sh.sample \
		${PREFIX}/etc/rc.d/snort.sh.sample; \
	${INSTALL_DATA} ${WRKSRC}/etc/snort.conf \
		${PREFIX}/etc/snort.conf-sample; \
	if [ ! -f ${PREFIX}/etc/snort.conf ]; then \
	    ${CP} ${PREFIX}/etc/snort.conf-sample \
		${PREFIX}/etc/snort.conf; \
	fi
@


1.42
log
@- Update to 2.1.0 [1]
- Install some additional documentation [1]
- Fix WITH_MYSQL, WITH_ODBC and WITH_POSTGRES knobs [2]

PR:		60400 [1], 59445 [2]
Submitted by:	Nicolas Jombart <ecu@@ipv42.net> [1],
		Ken Stailey <kstailey@@yahoo.com> [2]
@
text
@d10 1
d14 1
a14 1
MAINTAINER=	ports@@FreeBSD.org
d17 2
d21 2
d25 4
a28 5
BUILD_DEPENDS=		${LOCALBASE}/lib/libnet.a:${PORTSDIR}/net/libnet
CONFIGURE_ARGS=		--enable-flexresp
CONFIGURE_ENV=		CPPFLAGS="-I${LOCALBASE}/include" \
			LDFLAGS="${LDFLAGS}"
LDFLAGS+=		"-L${LOCALBASE}/lib"
d58 2
a59 4
DOCS=	AUTHORS NEWS README.csv BUGS README README.database \
	CREDITS README.FLEXRESP FAQ snort_manual.pdf \
	README.PLUGINS USAGE README.thresholding README.flow \
	README.flow-portscan README.http_inspect README.wireless
d73 1
a73 1
	cd ${WRKSRC}/doc && ${INSTALL_DATA} ${DOCS} ${DOCSDIR}
d77 2
a78 1
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config ${DATADIR}/classification.config-sample; \
@


1.41
log
@Update to 2.0.5 [1]
Use %%DOCSDIR%% and %%DATADIR%% macros [2]

Submitted by:	Linh Pham <question@@closedsrc.org> [1], osa [2]
PR:		59510
@
text
@d9 1
a9 1
PORTVERSION=	2.0.5
d16 1
a17 2
CONFIGURE_ARGS=	--with-mysql=no --with-odbc=no --with-postgresql=no
MAN8=		snort.8
d20 5
a24 4
BUILD_DEPENDS+=	${LOCALBASE}/lib/libnet.a:${PORTSDIR}/net/libnet
CONFIGURE_ARGS+=--enable-flexresp
CONFIGURE_ENV+=	CPPFLAGS="-I${LOCALBASE}/include"
LDFLAGS+=	"-L${LOCALBASE}/lib"
d28 4
a31 2
USE_MYSQL=	yes
CONFIGURE_ARGS+=--with-mysql=${LOCALBASE}
d35 5
a39 3
LIB_DEPENDS+=	odbc.1:${PORTSDIR}/databases/unixODBC
CONFIGURE_ARGS+=--with-odbc=${LOCALBASE}
LDFLAGS+=	${PTHREAD_LIBS}
d44 2
a45 2
LIB_DEPENDS+=	pq.3:${PORTSDIR}/${POSTGRESQL_PORT}
CONFIGURE_ARGS+=--with-postgresql=${LOCALBASE}/pgsql
d47 1
a47 1
LDFLAGS+=	-lssl -lcrypto
d49 2
d53 5
a57 2
CONFIGURE_ENV+=	LDFLAGS="${LDFLAGS}"
USE_REINPLACE=	yes
a67 4
DOCS=	AUTHORS NEWS README.csv BUGS README README.database \
	CREDITS README.FLEXRESP RULES.todo FAQ \
	SnortUsersManual.pdf README.PLUGINS USAGE README.thresholding

a68 1
	${MKDIR} ${DATADIR}
d70 2
a71 4
	${MKDIR} ${DOCSDIR}
.for i in ${DOCS}
	${INSTALL_DATA} ${WRKSRC}/doc/${i} ${DOCSDIR}
.endfor
d73 2
a74 1
	@@${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${DATADIR}; \
@


1.40
log
@Update security/snort from 2.0.2 to 2.0.4

PR:		59148
Submitted by:	Linh Pham
@
text
@d9 1
a9 1
PORTVERSION=	2.0.4
@


1.39
log
@Update to 2.0.2.

PR:		ports/57604
Submitted by:	Alex Dupre <sysadmin@@alexdupre.com>
@
text
@d9 1
a9 1
PORTVERSION=	2.0.2
@


1.38
log
@Drop maintainership.
@
text
@d9 1
a9 1
PORTVERSION=	2.0.1
d28 1
a28 1
LIB_DEPENDS+=	mysqlclient.10:${PORTSDIR}/databases/mysql323-client
d61 1
a61 1
	SnortUsersManual.pdf README.PLUGINS USAGE
@


1.37
log
@irc.d script for security/snort

	This is a sample script for ${PREFIX}/etc/rc.d that will
	wake snort up on boot, and take it down on shutdown. Nothing
	fancy here.  This is needed, because I'm planning on teaching
	ACID many new things, and ACID expects snort to help itself.
	There is only one thing that requires thinking here: This
	should run only after {MySQL|PostgreSQL} server is up, as
	snort might want to report to the local server.

PR:		ports/49047
Submitted by:	Yonatan@@xpert.com <Yonatan@@xpert.com>
Approved by:	maintainer timeout
@
text
@d13 1
a13 1
MAINTAINER=	kris@@FreeBSD.org
@


1.36
log
@Update to snort 2.0.1

PR:		ports/55218
Submitted by:	mharo
@
text
@d83 2
@


1.35
log
@Fix detection of sparc64.

Obtained from:	OpenBSD
@
text
@d9 1
a9 2
PORTVERSION=	2.0.0
PORTREVISION=	1
@


1.34
log
@Update to snort 2.0.0.  This fixes a security vulnerability:

  The Sourcefire Vulnerability Research Team has learned of an integer
  overflow in the Snort stream4 preprocessor used by the Sourcefire
  Network Sensor product line. The Snort stream4 preprocessor
  (spp_stream4) incorrectly calculates segment size parameters during
  stream reassembly for certain sequence number ranges which can lead to
  an integer overflow that can be expanded to a heap overflow.

PR:	51106
Submitted by:	Sergey A. Osokin <osa@@FreeBSD.org.ru>
@
text
@d10 1
@


1.33
log
@Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
@
text
@d9 1
a9 1
PORTVERSION=	1.9.1
d60 1
a60 1
	CREDITS README.SNMP README.xml README.FLEXRESP RULES.todo FAQ \
@


1.32
log
@Update to snort-1.9.1.  This is an important security update:

A buffer overflow has been found in the snort RPC normalization
routines by ISS X-Force. This can cause snort to execute
arbitrary code embedded within sniffed network packets. This
preprocessor is enabled by default.
@
text
@d14 1
@


1.31
log
@Chase libpq version bump.
@
text
@d9 1
a9 1
PORTVERSION=	1.9.0
@


1.30
log
@Update to snort 1.9.0.  Tweak the default config files so it can actually
find its installed ruleset [1].  Install config files by default if there is
not already one present, and remove on deinstall if they are unchanged
from the default.

Submitted by:	The Anarcat <anarcat@@anarcat.dyndns.org> [1] (based on)
PR:		ports/33887 [1]
@
text
@d38 2
a39 1
LIB_DEPENDS+=	pq.2:${PORTSDIR}/databases/postgresql7
@


1.29
log
@Update to snort-1.8.7

Submitted by:	Paul Marquis <pmarquis@@pobox.com>
PR:		ports/40528
@
text
@d9 1
a9 1
PORTVERSION=	1.8.7
d46 4
d57 4
d63 24
a86 7
	${INSTALL_DATA} ${WRKSRC}/CREDITS ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/RULES.SAMPLE ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/USAGE ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/*.rules ${DATADIR}
	${INSTALL_DATA} ${WRKSRC}/classification.config ${PREFIX}/etc/classification.config-sample
	${INSTALL_DATA} ${WRKSRC}/snort.conf ${PREFIX}/etc/snort.conf-sample
	@@${SED} -e 's#/usr/local#${PREFIX}#g' ${PKGMESSAGE}
@


1.28
log
@Upgrade to snort 1.8.6.  The previous two versions (1.8.4 and 1.8.5) were
buggy and short-lived; hopefully this one is better.
@
text
@d9 1
a9 1
PORTVERSION=	1.8.6
d54 5
a58 10
	${MKDIR} ${PREFIX}/share/snort
.for i in CREDITS RULES.SAMPLE USAGE attack-responses.rules backdoor.rules \
	bad-traffic.rules ddos.rules dns.rules dos.rules exploit.rules \
	finger.rules ftp.rules icmp.rules icmp-info.rules info.rules local.rules \
	misc.rules netbios.rules policy.rules porn.rules rpc.rules rservices.rules \
	scan.rules shellcode.rules smtp.rules sql.rules telnet.rules tftp.rules \
	virus.rules web-attacks.rules web-cgi.rules web-coldfusion.rules \
	web-frontpage.rules web-iis.rules web-misc.rules x11.rules
	${INSTALL_DATA} ${WRKSRC}/$i ${PREFIX}/share/snort
.endfor
@


1.27
log
@Update to snort 1.8.3, a stability and bugfix release.

Also install the complete set of rules files; some were missed in the
last upgrade.

PR:	ports/32112 (rules updates)
Submitted by:	Rob Simmons <rsimmons@@mail.wlcg.com>
@
text
@d9 1
a9 1
PORTVERSION=	1.8.3
d11 1
a11 1
MASTER_SITES=	http://snort.sourcefire.com/releases/
@


1.26
log
@Update to snort 1.8.2, a bugfix/stability release.
@
text
@d9 1
a9 1
PORTVERSION=	1.8.2
d55 7
a61 6
.for i in CREDITS RULES.SAMPLE USAGE backdoor.rules ddos.rules dns.rules dos.rules \
	  exploit.rules finger.rules ftp.rules info.rules icmp.rules local.rules \
	  misc.rules netbios.rules policy.rules rpc.rules rservices.rules scan.rules \
	  shellcode.rules smtp.rules sql.rules telnet.rules web-cgi.rules \
	  web-coldfusion.rules web-frontpage.rules web-iis.rules web-misc.rules \
	  x11.rules
@


1.25
log
@Remove a stray line-continuation which was breaking the fetch.
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.24 2001/09/22 22:09:29 kris Exp $
d9 1
a9 2
PORTVERSION=	1.8.1
PORTREVISION=	1
a11 1
DISTNAME=	${PORTNAME}-1.8.1-RELEASE
a14 1
WRKSRC=		${WRKDIR}/snort-1.8.1-RELEASE
@


1.24
log
@Take maintainership
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.23 2001/09/22 21:39:31 dirk Exp $
d12 1
a12 1
MASTER_SITES=	http://snort.sourcefire.com/releases/ \
@


1.23
log
@Drop maintainership.
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.22 2001/08/16 19:49:10 dirk Exp $
d15 1
a15 1
MAINTAINER=	ports@@FreeBSD.org
@


1.22
log
@Update to 1.8.1-RELEASE.

Submitted by:	Michael Boman <michael@@ayeka.dyndns.org>
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.21 2001/08/06 22:22:11 dirk Exp $
a12 1
		http://www.physik.TU-Berlin.DE/~ibex/ports/distfiles/
d15 1
a15 1
MAINTAINER=	dirk@@FreeBSD.org
@


1.21
log
@Upgrade to 1.8p1.

PR:		ports/29488
Submitted by:	Rob Simmons <rsimmons@@wlcg.com>
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.20 2001/07/12 08:43:28 dirk Exp $
d10 1
d12 1
a12 1
MASTER_SITES=	http://www.snort.org/Files/ \
d14 1
a14 1
DISTNAME=	${PORTNAME}-1.8p1
d18 1
a18 1
WRKSRC=		${WRKDIR}/snort
d60 1
a60 1
	  exploit.rules finger.rules ftp.rules icmp-info.rules icmp.rules info.rules local.rules \
d62 1
a62 1
	  shellcode.rules smtp.rules sql.rules telnet.rules virus.rules web-cgi.rules \
d67 3
@


1.20
log
@Upgrade to 1.8-RELEASE.

Submitted by:	Michael Boman <michael@@ayeka.dyndns.org>
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.19 2001/04/10 10:49:33 dirk Exp $
d9 1
a9 1
PORTVERSION=	1.8
d13 1
a13 1
DISTNAME=	${PORTNAME}-${PORTVERSION}-RELEASE
d17 1
d59 1
a59 1
	  exploit.rules finger.rules ftp.rules icmp.rules info.rules local.rules \
d61 1
a61 1
	  shellcode.rules smtp.rules sql.rules telnet.rules web-cgi.rules \
@


1.19
log
@Fix WITH_MYSQL, WITH_ODBC and WITH_POSTGRES.

PR:		ports/25803
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.18 2001/03/29 16:34:41 sobomax Exp $
d9 1
a9 1
PORTVERSION=	1.7
d13 1
d57 6
a62 3
.for i in CREDITS RULES.SAMPLE USAGE backdoor-lib ddos-lib finger-lib ftp-lib \
	  misc-lib netbios-lib overflow-lib ping-lib rpc-lib scan-lib smtp-lib \
	  telnet-lib web-lib webcf-lib webcgi-lib webfp-lib webiis-lib webmisc-lib
@


1.18
log
@-pthread --> ${PTHREAD_LIBS}
-D_THREAD_SAFE --> ${PTHREAD_CFLAGS}

Note: my first intention was to test this out on bento/beta, but per ade's
requiest I opted to do it quickly.
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.17 2001/01/27 07:55:06 dirk Exp $
d29 1
a29 2
CONFIGURE_ARGS+=--with-mysql-includes=${LOCALBASE}/include/mysql \
		--with-mysql-libraries=${LOCALBASE}/lib/mysql
d34 1
a34 2
CONFIGURE_ARGS+=--with-unixodbc-includes=${LOCALBASE}/include \
		--with-unixodbc-libraries=${LOCALBASE}/lib
d39 2
a40 3
LIB_DEPENDS+=	pq.2:${PORTSDIR}/databases/postgresql
CONFIGURE_ARGS+=--with-libpq-includes=${LOCALBASE}/pgsql/include \
		--with-libpq-libraries=${LOCALBASE}/pgsql/lib
@


1.17
log
@Upgrade to 1.7.

Submitted by:	kris
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.16 2001/01/27 07:53:36 dirk Exp $
d37 1
a37 1
LDFLAGS+=	-pthread
@


1.16
log
@Set reasonable defaults for mysql, postgresql and odbc support so
the package dependencies aren't screwed up in case a package is
installed but the corresponding WITH_* option isn't given.
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.15 2001/01/21 15:40:45 dirk Exp $
d9 1
a9 1
PORTVERSION=	1.6.3
d61 1
a61 1
	  snort-lib telnet-lib webcf-lib webcgi-lib webfp-lib webiis-lib webmisc-lib
@


1.15
log
@Switch from mysql322-{client,server} to mysql323-{client,server}.

mysql323-client installs libmysqlclient.so.10 (instead of
libmysqlclient.so.6).

mysql323-{client,server} are production quality, now (according to
MySQL AB at least).
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.14 2000/12/31 15:07:49 dirk Exp $
d17 1
@


1.14
log
@Add additional options (WITH_FLEXRESP, WITH_MYSQL, WITH_ODBC
and WITH_POSTGRES).

PR:		ports/20156
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.13 2000/08/03 06:11:34 dirk Exp $
d27 1
a27 1
LIB_DEPENDS+=	mysqlclient.6:${PORTSDIR}/databases/mysql322-client
@


1.13
log
@Upgrade to 1.6.3.

PR:		ports/20156 (part of), ports/20366
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.12 2000/07/10 13:35:51 dirk Exp $
d18 37
@


1.12
log
@Upgrade to 1.6.2.2.

Upgrade to 1.6.2 submitted by:	Michael Vasilenko <acid@@cn.ua>
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.11 2000/06/02 03:18:51 will Exp $
d9 1
a9 1
PORTVERSION=	1.6.2.2
@


1.11
log
@Remove redundant/inappropriate CATEGORIES.  People need to start reading
the Porter's Handbook.  :-)
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.10 2000/04/21 08:19:01 mharo Exp $
d9 1
a9 1
PORTVERSION=	1.6
d11 1
a11 1
MASTER_SITES=	http://www.clark.net/~roesch/ \
d21 3
a23 2
.for i in CREDITS RULES.SAMPLE USAGE backdoor-lib misc-lib overflow-lib \
          scan-lib snort-lib web-lib
a25 1
	${INSTALL_MAN} ${WRKSRC}/${MAN8} ${PREFIX}/man/man8
@


1.10
log
@Correct whitespace introduced during PORTNAME conversion and portlint
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.9 2000/04/09 18:30:32 cpiazza Exp $
d10 1
a10 1
CATEGORIES=	security net
@


1.9
log
@Update with the new PORTNAME/PORTVERSION variables
@
text
@d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.8 2000/03/26 11:12:07 dirk Exp $
d9 1
a9 1
PORTVERSION= 	1.6
@


1.8
log
@Upgrade to 1.6.

Submitted by:	kris
@
text
@a1 1
# Version required:	1.6
d5 1
a5 1
# $FreeBSD: ports/security/snort/Makefile,v 1.7 2000/01/29 14:26:12 dirk Exp $
d8 2
a9 1
DISTNAME=	snort-1.6
@


1.7
log
@snort has a manpage, now.
@
text
@d2 1
a2 1
# Version required:	1.5.1
d6 1
a6 1
# $FreeBSD: ports/security/snort/Makefile,v 1.6 2000/01/29 13:15:24 dirk Exp $
d9 1
a9 1
DISTNAME=	snort-1.5.1
@


1.6
log
@Upgrade to 1.5.1.
@
text
@d6 1
a6 1
# $FreeBSD: ports/security/snort/Makefile,v 1.5 1999/12/22 10:56:28 dirk Exp $
d17 1
d25 1
@


1.5
log
@Upgrade to 1.5.
@
text
@d2 1
a2 1
# Version required:	1.5
d6 1
a6 1
# $FreeBSD: ports/security/snort/Makefile,v 1.4 1999/09/28 19:32:03 dirk Exp $
d9 1
a9 1
DISTNAME=	snort-1.5
@


1.4
log
@Upgrade to 1.3.
@
text
@d2 1
a2 1
# Version required:	1.3
d6 1
a6 1
# $FreeBSD: ports/security/snort/Makefile,v 1.3 1999/08/31 01:51:46 peter Exp $
d9 1
a9 1
DISTNAME=	snort-1.3
@


1.3
log
@$Id$ -> $FreeBSD$
@
text
@d2 1
a2 1
# Version required:	1.2
d6 1
a6 1
# $FreeBSD$
d9 1
a9 1
DISTNAME=	snort-1.2.1
@


1.2
log
@Upgrade to 1.2.1.
@
text
@d6 1
a6 1
# $Id: Makefile,v 1.1.1.1 1999/08/02 10:14:10 dirk Exp $
@


1.1
log
@Initial revision
@
text
@d6 1
a6 1
# $Id$
d9 1
a9 1
DISTNAME=	snort-1.2
@


1.1.1.1
log
@Initial import of snort-1.2, a

lightweight network intrusion detection system.
@
text
@@
