cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b8665d4e54
openbsd-ports/net/snort/pkg/PLIST

41 lines
1.3 KiB
Plaintext
Raw Normal View History

Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures
2002-04-26 08:51:39 -04:00
@comment $OpenBSD: PLIST,v 1.9 2002/04/26 12:51:39 bmc Exp $
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net>
2000-02-02 22:58:54 -05:00
bin/snort
man/man8/snort.8
* update to 1.8.2
2001-11-19 07:39:25 -05:00
share/examples/snort/attack-responses.rules
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/backdoor.rules
* update to 1.8.2
2001-11-19 07:39:25 -05:00
share/examples/snort/bad-traffic.rules
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/classification.config
share/examples/snort/ddos.rules
share/examples/snort/dns.rules
share/examples/snort/dos.rules
share/examples/snort/exploit.rules
share/examples/snort/finger.rules
share/examples/snort/ftp.rules
* update to 1.8.2
2001-11-19 07:39:25 -05:00
share/examples/snort/icmp-info.rules
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/icmp.rules
share/examples/snort/info.rules
share/examples/snort/local.rules
share/examples/snort/misc.rules
share/examples/snort/netbios.rules
share/examples/snort/policy.rules
* update to 1.8.2
2001-11-19 07:39:25 -05:00
share/examples/snort/porn.rules
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/rpc.rules
share/examples/snort/rservices.rules
share/examples/snort/scan.rules
share/examples/snort/shellcode.rules
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures
2002-04-26 08:51:39 -04:00
share/examples/snort/sid-msg.map
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/smtp.rules
snort PLIST.
2001-02-11 21:12:31 -05:00
share/examples/snort/snort.conf
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/sql.rules
share/examples/snort/telnet.rules
* update to 1.8.2
2001-11-19 07:39:25 -05:00
share/examples/snort/tftp.rules
share/examples/snort/virus.rules
share/examples/snort/web-attacks.rules
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/web-cgi.rules
share/examples/snort/web-coldfusion.rules
share/examples/snort/web-frontpage.rules
share/examples/snort/web-iis.rules
share/examples/snort/web-misc.rules
share/examples/snort/x11.rules
snort PLIST.
2001-02-11 21:12:31 -05:00
@dirrm share/examples/snort
Reference in New Issue Copy Permalink