security/suricata 8.0.7_1
High Performance Network IDS, IPS and Security Monitoring engine
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
9c878207a1- License
- GPLv2
- Categories
- security
- Package size
- 4301.9 KiB, 14875.5 KiB installed
Description
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF).
This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field.
OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium.
More information about the Consortium is available, as well as a list of our current Consortium Members.
Install
As a binary package — by origin, or by package name:
pkg install security/suricata
pkg install suricataFrom the ports tree:
cd /usr/ports/security/suricata/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= suricata>0:security/suricataPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 8.0.7 | 8.0.7_1 | - | 7.0.11 | 8.0.7_1 |
| FreeBSD:14:quarterly | 8.0.7 | 8.0.7 | n/a | 7.0.10_2 | 8.0.7 |
| FreeBSD:15:latest | 8.0.7_1 | 8.0.7_1 | n/a | 7.0.11 | 7.0.11 |
| FreeBSD:15:quarterly | 8.0.7 | 8.0.7 | n/a | n/a | n/a |
| FreeBSD:16:latest | 8.0.7 | 8.0.7_1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Library 5
libjansson.so: devel/janssonliblz4.so: archivers/liblz4libnet.so: net/libnetlibpcre2-8.so: devel/pcre2libyaml.so: textproc/libyaml
The full lists below include those, and their dependencies in turn.
All build dependencies 31
- archivers/brotli
- archivers/liblz4
- archivers/zstd
- converters/libiconv
- devel/autoconf
- devel/autoconf-switch
- devel/automake
- devel/gettext-runtime
- devel/gmake
- devel/jansson
- devel/libffi
- devel/libtool
- devel/libunistring
- devel/m4
- devel/pcre2
- devel/pkgconf
- devel/py-pyyaml
- devel/readline
- dns/libidn2
- dns/libpsl
- ftp/curl
- lang/perl5.42
- lang/python312
- lang/rust
- math/mpdecimal
- net/libnet
- print/indexinfo
- security/libssh2
- textproc/expat2
- textproc/libyaml
- www/libnghttp2
All run dependencies 14
No port depends on this one.
Configuration
Options name: security_suricata
| Option | Default | Description |
|---|---|---|
| GEOIP | off | GeoIP support |
| IPFW | on | IPFW and IP Divert support for inline IDP |
| LUA | off | LUA scripting support |
| LUAJIT | off | LuaJIT scripting support |
| NETMAP | on | Netmap support for inline IDP |
| NSS | off | File checksums and SSL/TLS fingerprinting |
| PORTS_PCAP | off | Use libpcap from ports |
| PYTHON | on | Python-based update and control utilities |
| REDIS | off | Redis output support |
| TESTS | off | Unit tests in suricata binary |
- USES
- autoreconf cpe gmake iconv:translit libtool localbase pathfix pkgconfig
- Service scripts
suricata
Message after installing
If you want to run Suricata in IDS mode, add to /etc/rc.conf: suricata_enable="YES" suricata_interface="<if>" NOTE: Declaring suricata_interface is MANDATORY for Suricata in IDS Mode. However, if you want to run Suricata in Inline IPS Mode in divert(4) mode, add to /etc/rc.conf: suricata_enable="YES" suricata_divertport="8000" NOTE: Suricata won't start in IDS mode without an interface configured. Therefore if you omit suricata_interface from rc.conf, FreeBSD's rc.d/suricata will automatically try to start Suricata in IPS Mode (on divert port 8000, by default). Alternatively, if you want to run Suricata in Inline IPS Mode in high-speed netmap(4) mode, add to /etc/rc.conf: suricata_enable="YES" suricata_netmap="YES" NOTE: Suricata requires additional interface settings in the configuration file to run in netmap(4) mode. RULES: Suricata IDS/IPS Engine comes without rules by default. You should add rules by yourself and set an updating strategy. To do so, please visit: http://www.openinfosecfoundation.org/documentation/rules.html http://www.openinfosecfoundation.org/documentation/emerging-threats.html You may want to try BPF in zerocopy mode to test performance improvements: sysctl -w net.bpf.zerocopy_enable=1 Don't forget to add net.bpf.zerocopy_enable=1 to /etc/sysctl.conf
Files
Manual pages 4
- suricata(1)
- suricatactl(1)
- suricatactl-filestore(1)
- suricatasc(1)
pkg-plist 131
- bin/suricata
- bin/suricata-update
- bin/suricatactl
- bin/suricatasc
- lib/suricata/python/suricata/__init__.py
- lib/suricata/python/suricata/__pycache__/__init__.pyc
- lib/suricata/python/suricata/config/__pycache__/defaults.pyc
- lib/suricata/python/suricata/config/defaults.py
- lib/suricata/python/suricata/update/__init__.py
- lib/suricata/python/suricata/update/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/__pycache__/config.pyc
- lib/suricata/python/suricata/update/__pycache__/engine.pyc
- lib/suricata/python/suricata/update/__pycache__/exceptions.pyc
- lib/suricata/python/suricata/update/__pycache__/extract.pyc
- lib/suricata/python/suricata/update/__pycache__/loghandler.pyc
- lib/suricata/python/suricata/update/__pycache__/main.pyc
- lib/suricata/python/suricata/update/__pycache__/maps.pyc
- lib/suricata/python/suricata/update/__pycache__/matchers.pyc
- lib/suricata/python/suricata/update/__pycache__/net.pyc
- lib/suricata/python/suricata/update/__pycache__/notes.pyc
- lib/suricata/python/suricata/update/__pycache__/osinfo.pyc
- lib/suricata/python/suricata/update/__pycache__/parsers.pyc
- lib/suricata/python/suricata/update/__pycache__/rule.pyc
- lib/suricata/python/suricata/update/__pycache__/sources.pyc
- lib/suricata/python/suricata/update/__pycache__/util.pyc
- lib/suricata/python/suricata/update/__pycache__/version.pyc
- lib/suricata/python/suricata/update/commands/__init__.py
- lib/suricata/python/suricata/update/commands/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/addsource.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/checkversions.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/disablesource.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/enablesource.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/listsources.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/removesource.pyc
- lib/suricata/python/suricata/update/commands/__pycache__/updatesources.pyc
- lib/suricata/python/suricata/update/commands/addsource.py
- lib/suricata/python/suricata/update/commands/checkversions.py
- lib/suricata/python/suricata/update/commands/disablesource.py
- lib/suricata/python/suricata/update/commands/enablesource.py
- lib/suricata/python/suricata/update/commands/listsources.py
- lib/suricata/python/suricata/update/commands/removesource.py
- lib/suricata/python/suricata/update/commands/updatesources.py
- lib/suricata/python/suricata/update/compat/__init__.py
- lib/suricata/python/suricata/update/compat/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/compat/__pycache__/ordereddict.pyc
- lib/suricata/python/suricata/update/compat/argparse/__init__.py
- lib/suricata/python/suricata/update/compat/argparse/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/compat/argparse/__pycache__/argparse.pyc
- lib/suricata/python/suricata/update/compat/argparse/argparse.py
- lib/suricata/python/suricata/update/compat/ordereddict.py
- lib/suricata/python/suricata/update/config.py
- lib/suricata/python/suricata/update/configs/__init__.py
- lib/suricata/python/suricata/update/configs/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/configs/disable.conf
- lib/suricata/python/suricata/update/configs/drop.conf
- lib/suricata/python/suricata/update/configs/enable.conf
- lib/suricata/python/suricata/update/configs/modify.conf
- lib/suricata/python/suricata/update/configs/threshold.in
- lib/suricata/python/suricata/update/configs/update.yaml
- lib/suricata/python/suricata/update/data/__init__.py
- lib/suricata/python/suricata/update/data/__pycache__/__init__.pyc
- lib/suricata/python/suricata/update/data/__pycache__/index.pyc
- lib/suricata/python/suricata/update/data/__pycache__/update.pyc
- lib/suricata/python/suricata/update/data/index.py
- lib/suricata/python/suricata/update/data/update.py
- lib/suricata/python/suricata/update/engine.py
- lib/suricata/python/suricata/update/exceptions.py
- lib/suricata/python/suricata/update/extract.py
- lib/suricata/python/suricata/update/loghandler.py
- lib/suricata/python/suricata/update/main.py
- lib/suricata/python/suricata/update/maps.py
- lib/suricata/python/suricata/update/matchers.py
- lib/suricata/python/suricata/update/net.py
- lib/suricata/python/suricata/update/notes.py
- lib/suricata/python/suricata/update/osinfo.py
- lib/suricata/python/suricata/update/parsers.py
- lib/suricata/python/suricata/update/rule.py
- lib/suricata/python/suricata/update/sources.py
- lib/suricata/python/suricata/update/util.py
- lib/suricata/python/suricata/update/version.py
- share/man/man1/suricata.1.gz
- share/man/man1/suricatactl-filestore.1.gz
- share/man/man1/suricatactl.1.gz
- share/man/man1/suricatasc.1.gz
- share/doc/suricata/AUTHORS
- share/doc/suricata/Basic_Setup.txt
- share/doc/suricata/INSTALL
- share/doc/suricata/NEWS
- share/doc/suricata/README
- share/doc/suricata/Setting_up_IPSinline_for_Linux.txt
- share/doc/suricata/TODO
- share/doc/suricata/Third_Party_Installation_Guides.txt
- share/suricata/rules/app-layer-events.rules
- share/suricata/rules/bittorrent-events.rules
- share/suricata/rules/decoder-events.rules
- share/suricata/rules/dhcp-events.rules
- share/suricata/rules/dnp3-events.rules
- share/suricata/rules/dns-events.rules
- share/suricata/rules/enip-events.rules
- share/suricata/rules/files.rules
The first 100 are listed.
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| suricata-8.0.7.tar.gz | 4.4520405e+07 | a9d46a9c8f40e81f8a6df3ecc2c5a9a8e8da985876299108d92da547c013ba8c |
Master sites 1
- https://www.openinfosecfoundation.org/download/
Commit history 6
| Date | Commit | Credits | Log message |
|---|---|---|---|
9c878207a1 |
Mikael Urankar | lang/rust: Bump revisions after 1.99.0 PR: 299016 |
|
618b468e88 |
Muhammad Moinur Rahman | security/suricata: Update version 8.0.6=>8.0.7 Changelog: https://forum.suricata.io/t/suricata-8-0-7-released/6467
MFH: 2026Q3 |
|
7316461925 |
Mikael Urankar | lang/rust: Bump revisions after 1.98.1 PR: 298139 |
|
f33fb05ad9 |
Muhammad Moinur Rahman | security/suricata: Fix rc file PR: 297138
Reported by: [email protected]
Fixes: b0a78ab security/suricata: Update version 8.0.5=>8.0.6 |
|
9c892d2601 |
Mikael Urankar | lang/rust: Bump revisions after 1.97.1 PR: 296645 |
The latest 5 of 6 in the history this site was built from.