security/snort3 3.12.2.0_1,1
Lightweight network intrusion detection system
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
ab49c19b42- License
- GPLv2
- Categories
- security
- Package size
- 2436.7 KiB, 11736.7 KiB installed
Description
Snort 3 is the next major release of the Snort utility:
Here are some key features of Snort 3:
Support multiple packet processing threads
Use a shared configuration and attribute table
Use a simple, scriptable configuration
Make key components pluggable
Autodetect services for portless configuration
Support sticky buffers in rules
Autogenerate reference documentation
Provide better cross platform support
Facilitate component testing
Additional features on the roadmap include:
Use a shared network map
Support pipelining of packet processing
Support hardware offload and data plane integration
Support proxy mode
Windows support
Install
As a binary package — by origin, or by package name:
pkg install security/snort3
pkg install snort3From the ports tree:
cd /usr/ports/security/snort3/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= snort3>0:security/snort3Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 3.12.2.0_1,1 | 3.12.2.0_1,1 | 3.1.50.0,1 | 3.9.3.0,1 | 3.12.2.0_1,1 |
| FreeBSD:14:quarterly | 3.12.2.0,1 | 3.12.2.0,1 | n/a | 3.8.1.0_1,1 | 3.12.2.0,1 |
| FreeBSD:15:latest | 3.12.2.0_1,1 | 3.12.2.0_1,1 | n/a | 3.9.3.0,1 | 3.9.3.0,1 |
| FreeBSD:15:quarterly | 3.12.2.0,1 | 3.12.2.0,1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 3.12.2.0,1 | 3.12.2.0_1,1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Library 6
libdaq.so: net/libdaqlibdnet.so: net/libdnetlibhwloc.so: devel/hwloc2libpcap.so.1: net/libpcaplibpcre2-8.so: devel/pcre2libuuid.so: misc/libuuid
The full lists below include those, and their dependencies in turn.
All build dependencies 28
- devel/cmake-core
- devel/gettext-runtime
- devel/hwloc2
- devel/jsoncpp
- devel/level-zero
- devel/libffi
- devel/libpciaccess
- devel/libunistring
- devel/libuv
- devel/ninja
- devel/pcre2
- devel/pkgconf
- devel/readline
- dns/libidn2
- lang/luajit
- lang/python312
- math/mpdecimal
- misc/hwdata
- misc/libuuid
- net/libdaq
- net/libdnet
- net/libpcap
- net/libpfctl
- ports-mgmt/pkg
- print/indexinfo
- security/rhash
- textproc/expat2
- textproc/libxml2
All run dependencies 14
No port depends on this one.
Configuration
Options name: security_snort
| Option | Default | Description |
|---|---|---|
| ADDRESSSANITIZER | off | Enable address sanitizer |
| DEBUG | off | Build with debugging support |
| DOCS | off | Build and/or install documentation |
| FLATBUFFERS | off | Enable flatbuffers support |
| HYPERSCAN | off | Enable high-performance regular expression lib |
| LARGEPCAP | off | Enable support for pcaps larger than 2 GB |
| LIBUNWIND | off | Print stack trace in case of crash |
| PIE | off | Enable PIE (Broken) |
| STATICDAQ | on | Link static DAQ modules |
| THREADSANITIZER | off | Enable thread sanitizer |
| TSC | off | Use timestamp counter register clock (x86 only) |
- USES
- cmake compiler:c++14-lang cpe iconv localbase luajit pathfix pkgconfig shebangfix ssl
- Service scripts
- none
- Conflicts with
- snort-2*
Files
pkg-plist 346
- bin/appid_detector_builder.sh
- bin/show_flows
- bin/snort
- bin/snort2lua
- bin/u2boat
- bin/u2spewfoo
- etc/snort3/balanced.lua
- etc/snort3/connectivity.lua
- etc/snort3/file_magic.rules
- etc/snort3/inline.lua
- etc/snort3/max_detect.lua
- etc/snort3/security.lua
- etc/snort3/sensitive_data.rules
- etc/snort3/snort.lua
- etc/snort3/snort_defaults.lua
- etc/snort3/talos.lua
- include/snort/codecs/codec_module.h
- include/snort/control/control.h
- include/snort/daq/daq_user.h
- include/snort/decompress/file_decomp.h
- include/snort/detection/detection_buf.h
- include/snort/detection/detection_engine.h
- include/snort/detection/extract.h
- include/snort/detection/ips_context.h
- include/snort/detection/ips_context_chain.h
- include/snort/detection/ips_context_data.h
- include/snort/detection/pattern_match_data.h
- include/snort/detection/rule_option_types.h
- include/snort/events/event.h
- include/snort/file_api/file_api.h
- include/snort/file_api/file_capture.h
- include/snort/file_api/file_flows.h
- include/snort/file_api/file_lib.h
- include/snort/file_api/file_service.h
- include/snort/flow/deferred_trust.h
- include/snort/flow/dump_flows.h
- include/snort/flow/dump_flows_descriptor.h
- include/snort/flow/dump_flows_serializer.h
- include/snort/flow/expect_flow.h
- include/snort/flow/flow.h
- include/snort/flow/flow_data.h
- include/snort/flow/flow_key.h
- include/snort/flow/flow_stash.h
- include/snort/flow/ha.h
- include/snort/flow/prune_stats.h
- include/snort/flow/session.h
- include/snort/flow/stream_flow.h
- include/snort/framework/api_options.h
- include/snort/framework/base_api.h
- include/snort/framework/codec.h
- include/snort/framework/connector.h
- include/snort/framework/counts.h
- include/snort/framework/cursor.h
- include/snort/framework/data_bus.h
- include/snort/framework/decode_data.h
- include/snort/framework/endianness.h
- include/snort/framework/inspector.h
- include/snort/framework/ips_action.h
- include/snort/framework/ips_option.h
- include/snort/framework/logger.h
- include/snort/framework/module.h
- include/snort/framework/mp_data_bus.h
- include/snort/framework/mp_transport.h
- include/snort/framework/mpse.h
- include/snort/framework/mpse_batch.h
- include/snort/framework/parameter.h
- include/snort/framework/pdu_section.h
- include/snort/framework/pig_pen.h
- include/snort/framework/plugins.h
- include/snort/framework/policy_selector.h
- include/snort/framework/range.h
- include/snort/framework/snort_api.h
- include/snort/framework/so_rule.h
- include/snort/framework/tracer.h
- include/snort/framework/value.h
- include/snort/hash/hash_key_operations.h
- include/snort/hash/hashes.h
- include/snort/hash/lru_cache_local.h
- include/snort/hash/lru_cache_shared.h
- include/snort/hash/lru_segmented_cache_shared.h
- include/snort/hash/xhash.h
- include/snort/helpers/base64_encoder.h
- include/snort/helpers/ber.h
- include/snort/helpers/bitop.h
- include/snort/helpers/boyer_moore.h
- include/snort/helpers/boyer_moore_search.h
- include/snort/helpers/buffer_data.h
- include/snort/helpers/event_gen.h
- include/snort/helpers/hyper_scratch_allocator.h
- include/snort/helpers/hyper_search.h
- include/snort/helpers/infractions.h
- include/snort/helpers/json_stream.h
- include/snort/helpers/literal_search.h
- include/snort/helpers/lockless_ring.h
- include/snort/helpers/memcap_allocator.h
- include/snort/helpers/ring2.h
- include/snort/helpers/scratch_allocator.h
- include/snort/helpers/sigsafe.h
- include/snort/helpers/utf.h
- include/snort/host_tracker/cache_allocator.h
The first 100 are listed.
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| snort3-snort3-3.12.2.0_GH0.tar.gz | 3.734879e+06 | 43000d6b0e0307bc1a735874d00deb61e8b6a96d074f8cc9b2fe2cde0058720b |