e1048a5d4e
Notable changes: * Consolidation of IPv6 -- now only a single build supports both IPv4 & IPv6, and removal of the IPv4 "only" code paths. * File API and improvements to file processing for HTTP downloads and email attachments via SMTP, POP, and IMAP to facilitate broader file support * Use of address space ID for tracking Frag & Stream connections when it is available with the DAQ * Logging of packet data that triggers PPM for post-analysis via Snort event * Decoding of IPv6 with PPPoE This commit also includes a patch to snort.conf that was done by myself with feedback from Markus. The snort.conf patch ensures that Snort will load the latest Snort ruleset since the rule files have been reorganized by upstream. It also excludes local.rules by default, since rule managers like Oinkmaster skip that file when downloading rules. Tested by Markus on i386 and sparc64, Rodolfo Gouveia on 5.2/amd64 with his own snort.conf, and myself on amd64 and i386. OK sthen@
148 lines
5.5 KiB
Plaintext
148 lines
5.5 KiB
Plaintext
@comment $OpenBSD: PLIST,v 1.23 2013/01/16 04:52:53 lteo Exp $
|
|
@pkgpath net/snort[,flexresp][,mysql][,prelude][,postgresql]
|
|
@newgroup _snort:557
|
|
@newuser _snort:557:_snort:daemon:Snort Account:/nonexistent:/sbin/nologin
|
|
@bin bin/snort
|
|
@bin bin/u2boat
|
|
@bin bin/u2spewfoo
|
|
lib/pkgconfig/snort.pc
|
|
lib/snort_dynamicengine/
|
|
lib/snort_dynamicengine/libsf_engine.a
|
|
@comment lib/snort_dynamicengine/libsf_engine.la
|
|
lib/snort_dynamicengine/libsf_engine.so
|
|
lib/snort_dynamicpreprocessor/
|
|
lib/snort_dynamicpreprocessor/libsf_dce2_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_dce2_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_dce2_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_dnp3_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_dnp3_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_dnp3_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_dns_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_dns_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_dns_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_ftptelnet_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_gtp_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_gtp_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_gtp_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_imap_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_imap_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_imap_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_modbus_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_modbus_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_modbus_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_pop_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_pop_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_pop_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_reputation_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_reputation_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_reputation_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_sdf_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_sdf_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_sdf_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_sip_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_sip_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_sip_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_smtp_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_smtp_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_smtp_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_ssh_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_ssh_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_ssh_preproc.so
|
|
lib/snort_dynamicpreprocessor/libsf_ssl_preproc.a
|
|
@comment lib/snort_dynamicpreprocessor/libsf_ssl_preproc.la
|
|
lib/snort_dynamicpreprocessor/libsf_ssl_preproc.so
|
|
lib/snort_dynamicrules/
|
|
@man man/man8/snort.8
|
|
share/doc/pkg-readmes/${FULLPKGNAME}
|
|
share/doc/snort/
|
|
share/doc/snort/AUTHORS
|
|
share/doc/snort/BUGS
|
|
share/doc/snort/CREDITS
|
|
share/doc/snort/INSTALL
|
|
share/doc/snort/NEWS
|
|
share/doc/snort/PROBLEMS
|
|
share/doc/snort/README
|
|
share/doc/snort/README.GTP
|
|
share/doc/snort/README.PLUGINS
|
|
share/doc/snort/README.PerfProfiling
|
|
share/doc/snort/README.SMTP
|
|
share/doc/snort/README.UNSOCK
|
|
@comment share/doc/snort/README.WIN32
|
|
share/doc/snort/README.active
|
|
share/doc/snort/README.alert_order
|
|
share/doc/snort/README.asn1
|
|
share/doc/snort/README.counts
|
|
share/doc/snort/README.csv
|
|
share/doc/snort/README.daq
|
|
share/doc/snort/README.dcerpc2
|
|
share/doc/snort/README.decode
|
|
share/doc/snort/README.decoder_preproc_rules
|
|
share/doc/snort/README.dnp3
|
|
share/doc/snort/README.dns
|
|
share/doc/snort/README.event_queue
|
|
share/doc/snort/README.file
|
|
share/doc/snort/README.filters
|
|
share/doc/snort/README.flowbits
|
|
share/doc/snort/README.frag3
|
|
share/doc/snort/README.ftptelnet
|
|
share/doc/snort/README.gre
|
|
share/doc/snort/README.http_inspect
|
|
share/doc/snort/README.imap
|
|
share/doc/snort/README.ipip
|
|
share/doc/snort/README.ipv6
|
|
share/doc/snort/README.modbus
|
|
share/doc/snort/README.multipleconfigs
|
|
share/doc/snort/README.normalize
|
|
share/doc/snort/README.pcap_readmode
|
|
share/doc/snort/README.pop
|
|
share/doc/snort/README.ppm
|
|
share/doc/snort/README.reload
|
|
share/doc/snort/README.reputation
|
|
share/doc/snort/README.rzb_saac
|
|
share/doc/snort/README.sensitive_data
|
|
share/doc/snort/README.sfportscan
|
|
share/doc/snort/README.sip
|
|
share/doc/snort/README.ssh
|
|
share/doc/snort/README.ssl
|
|
share/doc/snort/README.stream5
|
|
share/doc/snort/README.tag
|
|
share/doc/snort/README.thresholding
|
|
share/doc/snort/README.u2boat
|
|
share/doc/snort/README.unified2
|
|
share/doc/snort/README.variables
|
|
share/doc/snort/TODO
|
|
share/doc/snort/USAGE
|
|
share/doc/snort/WISHLIST
|
|
share/doc/snort/faq.pdf
|
|
share/doc/snort/generators
|
|
share/doc/snort/snort_manual.pdf
|
|
share/examples/snort/
|
|
@sample ${SYSCONFDIR}/snort/
|
|
@sample ${SYSCONFDIR}/snort/rules/
|
|
@sample ${SYSCONFDIR}/snort/preproc_rules/
|
|
share/examples/snort/classification.config
|
|
@sample ${SYSCONFDIR}/snort/classification.config
|
|
share/examples/snort/decoder.rules
|
|
@sample ${SYSCONFDIR}/snort/preproc_rules/decoder.rules
|
|
share/examples/snort/gen-msg.map
|
|
@sample ${SYSCONFDIR}/snort/gen-msg.map
|
|
share/examples/snort/generators
|
|
@sample ${SYSCONFDIR}/snort/generators
|
|
share/examples/snort/preprocessor.rules
|
|
@sample ${SYSCONFDIR}/snort/preproc_rules/preprocessor.rules
|
|
share/examples/snort/reference.config
|
|
@sample ${SYSCONFDIR}/snort/reference.config
|
|
share/examples/snort/snort.conf
|
|
@sample ${SYSCONFDIR}/snort/snort.conf
|
|
share/examples/snort/threshold.conf
|
|
@sample ${SYSCONFDIR}/snort/threshold.conf
|
|
share/examples/snort/unicode.map
|
|
@sample ${SYSCONFDIR}/snort/unicode.map
|
|
@owner _snort
|
|
@group _snort
|
|
@sample /var/snort/
|
|
@sample /var/snort/log/
|
|
@rcscript ${RCDIR}/snort
|