cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d899556f21
openbsd-ports/net/snort/pkg/PLIST

33 lines
1.0 KiB
Plaintext
Raw Normal View History

* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
@comment $OpenBSD: PLIST,v 1.6 2001/07/29 19:56:52 bmc Exp $
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net>
2000-02-02 22:58:54 -05:00
bin/snort
man/man8/snort.8
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/backdoor.rules
share/examples/snort/classification.config
share/examples/snort/ddos.rules
share/examples/snort/dns.rules
share/examples/snort/dos.rules
share/examples/snort/exploit.rules
share/examples/snort/finger.rules
share/examples/snort/ftp.rules
share/examples/snort/icmp.rules
share/examples/snort/info.rules
share/examples/snort/local.rules
share/examples/snort/misc.rules
share/examples/snort/netbios.rules
share/examples/snort/policy.rules
share/examples/snort/rpc.rules
share/examples/snort/rservices.rules
share/examples/snort/scan.rules
share/examples/snort/shellcode.rules
share/examples/snort/smtp.rules
snort PLIST.
2001-02-11 21:12:31 -05:00
share/examples/snort/snort.conf
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com>
2001-07-29 15:56:52 -04:00
share/examples/snort/sql.rules
share/examples/snort/telnet.rules
share/examples/snort/web-cgi.rules
share/examples/snort/web-coldfusion.rules
share/examples/snort/web-frontpage.rules
share/examples/snort/web-iis.rules
share/examples/snort/web-misc.rules
share/examples/snort/x11.rules
snort PLIST.
2001-02-11 21:12:31 -05:00
@dirrm share/examples/snort
Reference in New Issue Copy Permalink