head 1.8; access; symbols pkgsrc-2013Q2:1.8.0.54 pkgsrc-2013Q2-base:1.8 pkgsrc-2012Q4:1.8.0.52 pkgsrc-2012Q4-base:1.8 pkgsrc-2011Q4:1.8.0.50 pkgsrc-2011Q4-base:1.8 pkgsrc-2011Q2:1.8.0.48 pkgsrc-2011Q2-base:1.8 pkgsrc-2009Q4:1.8.0.46 pkgsrc-2009Q4-base:1.8 pkgsrc-2008Q4:1.8.0.44 pkgsrc-2008Q4-base:1.8 pkgsrc-2008Q3:1.8.0.42 pkgsrc-2008Q3-base:1.8 cube-native-xorg:1.8.0.40 cube-native-xorg-base:1.8 pkgsrc-2008Q2:1.8.0.38 pkgsrc-2008Q2-base:1.8 pkgsrc-2008Q1:1.8.0.36 pkgsrc-2008Q1-base:1.8 pkgsrc-2007Q4:1.8.0.34 pkgsrc-2007Q4-base:1.8 pkgsrc-2007Q3:1.8.0.32 pkgsrc-2007Q3-base:1.8 pkgsrc-2007Q2:1.8.0.30 pkgsrc-2007Q2-base:1.8 pkgsrc-2007Q1:1.8.0.28 pkgsrc-2007Q1-base:1.8 pkgsrc-2006Q4:1.8.0.26 pkgsrc-2006Q4-base:1.8 pkgsrc-2006Q3:1.8.0.24 pkgsrc-2006Q3-base:1.8 pkgsrc-2006Q2:1.8.0.22 pkgsrc-2006Q2-base:1.8 pkgsrc-2006Q1:1.8.0.20 pkgsrc-2006Q1-base:1.8 pkgsrc-2005Q4:1.8.0.18 pkgsrc-2005Q4-base:1.8 pkgsrc-2005Q3:1.8.0.16 pkgsrc-2005Q3-base:1.8 pkgsrc-2005Q2:1.8.0.14 pkgsrc-2005Q2-base:1.8 pkgsrc-2005Q1:1.8.0.12 pkgsrc-2005Q1-base:1.8 pkgsrc-2004Q4:1.8.0.10 pkgsrc-2004Q4-base:1.8 pkgsrc-2004Q3:1.8.0.8 pkgsrc-2004Q3-base:1.8 pkgsrc-2004Q2:1.8.0.6 pkgsrc-2004Q2-base:1.8 pkgsrc-2004Q1:1.8.0.4 pkgsrc-2004Q1-base:1.8 pkgsrc-2003Q4:1.8.0.2 pkgsrc-2003Q4-base:1.8 buildlink2-base:1.8 netbsd-1-5-RELEASE:1.5 netbsd-1-4-PATCH003:1.5 netbsd-1-4-PATCH002:1.3 comdex-fall-1999:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.8 date 2001.04.17.11.53.37; author agc; state dead; branches; next 1.7; 1.7 date 2001.02.26.20.43.27; author wiz; state Exp; branches; next 1.6; 1.6 date 2000.12.27.10.08.35; author rh; state Exp; branches; next 1.5; 1.5 date 2000.05.28.10.33.52; author wiz; state Exp; branches; next 1.4; 1.4 date 2000.03.20.12.03.46; author agc; state Exp; branches; next 1.3; 1.3 date 2000.02.04.16.18.02; author rh; state Exp; branches; next 1.2; 1.2 date 2000.01.15.21.58.29; author wiz; state Exp; branches; next 1.1; 1.1 date 99.09.10.15.48.02; author rh; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 99.09.10.15.48.02; author rh; state Exp; branches; next ; desc @@ 1.8 log @+ move the distfile digest/checksum value from files/md5 to distinfo + move the patch digest/checksum values from files/patch-sum to distinfo @ text @$NetBSD: md5,v 1.7 2001/02/26 20:43:27 wiz Exp $ MD5 (snort-1.7.tar.gz) = 0eae2f987f663a2fbf236e38d1f8e960 @ 1.7 log @Update to 1.7, provided by Mipam in private mail. Changes: lots of bugfixes, many new plugins, SPADE (statistical anomaly detector), and more. @ text @d1 1 a1 1 $NetBSD: md5,v 1.6 2000/12/27 10:08:35 rh Exp $ @ 1.6 log @Update snort to 1.6.3.2. Notable changes include: Fixes and additions: * Fixed compilation problems on all non-BSD operating systems * Added better configuration support for locating libpcap * Fixed ICMP ping packet id/sequence printouts * Made allowances for 64-bit machines in the decoders * Updated the portscan detector to the latest version * Disabled the defragmenter by default (in the rules file) * Added a patch from Dave Dittrich to make daemon mode alerts filenames conform * to the data in the documentation * Revamped the ICMP data structures to mimic those found in *BSD and provide for higher fidelity decoding/printout in the future * Repaired the output plugins so that they operate properly now * For the record, the payload dump conforms to the length of the IP datagram now and does not show pad bytes added by the minimum Ethernet frame size * Applied Chris Cramer's byte ordering patch to the flexresp code Other updates and changes since version 1.6: * New preprocessor plugin: IP defragmentation!! * New output plugins cover all old logging and alerting options * New output plugin no logs to MySQL, PostgreSQL, unixODBC databases * Updated portscan detection functionality * Added quote removal for most plugin parsers * -C crash bug fixed * PID/PATH_VARRUN file fixes * Converted many putc(3) calls to fputc(3) for portability * Transport layer decoders use ip_len field for length metric now * String tokenizer code modified for more reliable operation * Fixed flexible response code sequence prediction * Fixed DEBUG ifdef's so DEBUG mode code will compile correctly on all platforms * Set automake options so that people don't need gmake anymore to build Snort on BSD systems * Fixed SMB alert code large tmp file hole * Added sigsetmask code to fix SIGHUP weirdness * Added execvp option for SIGHUP restart code * Added ARP header printout validation * Added Session logging file integrity checking * Added -u/-g setuid/gid capability switches * Added -O IP address obfuscation switch * Added -t chroot switch * Fixed non-TCP/UDP/ICMP transport layer decoding & logging * Fixes and additions to the portscan preprocessor * Fixed Tru64 u_int* type declarations * Added check for pcap.h into configuration script * Fixed timeval problems on Linux boxen * Database logging plugin has been modified extensively, see the www.incident.org website for more information * Switched TCP flags printout routine to ensure proper RFP output scan output. ;) * Fixed default log/alert function code so that these functions are never NULL @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 MD5 (snort-1.6.3-patch2.tar.gz) = 6fd76cac4a5c65a020e13954f850481e @ 1.5 log @Update checksum, distfile seems to have changed. Fixes pkg/9892. @ text @d3 1 a3 1 MD5 (snort-1.6.tar.gz) = 48193b9ff13a0ce50329ce17272eac59 @ 1.4 log @Upgrade snort to version 1.6. Changes since version 1.5.1 include: New features: * Token Ring and FDDI decoder support * Snort ported to Tru64/Alpha, IRIX 6.X, and AIX * Output plugins added (modular output system) * John Wilson greatly improved the speed of the content pattern matcher * Added FlexResp (active response) plugin from Christian Lademann * Snort man page now ships with the distribution * Snort now generates a PID file for easier integration with scripting * Added support for "stealthed" network interfaces New command line switches: * -q => quiet mode (no stdout printing) * -C => print payload ASCII content only * -P => set explicit snaplen for packet collection Plugins: * Added Postgres SQL DB logging output module from Jed Pickel * Added portscan detection plugin from Patrick Mullen * HTTP decode preprocessor largely rewritten and much more accurate * Minfrag rule moved to preprocessor module * Added ICMP ECHO ID check plugin * Added ICMP ECHO sequence check plugin * Added RPC analysis plugin from Mark Hindess * Added IP option analysis plugin * Added nocase plugin (makes content rules work with case insensitivity) * Added syslog output module with user definable syslog facility * Added tcpdump output module (and building without patches on Solaris). @ text @d3 1 a3 1 MD5 (snort-1.6.tar.gz) = 3659c1416ca7c7ec3f939d369c513bec @ 1.3 log @Update snort to 1.5.1 Changes are: * fixed a problem with pass rules not being applied properly * fixed a #include ordering statement for Slackware 4.0 installs * fixed banner output for the -V option * Token Ring decoding is now fully functional * Added packet buffer cleanup code to all protocol decoders * fixed a problem with improper TCP option output * Added a Snort man page @ text @d3 1 a3 1 MD5 (snort-1.5.1.tar.gz) = fbfb89265c1a6804091191ff2bb8f626 @ 1.2 log @update snort to 1.5; added distribution sites, install example configs. From the Readme: Version 1.5 adds major new functionality! Detection and preprocessing plugins, session logging, rules file variables and includes, five new network layer decoders including ISDN and Token Ring support, new detection functionality, and a bunch of other cool stuff. @ text @d3 1 a3 1 MD5 (snort-1.5.tar.gz) = 3272654ca7edbdf195f2532a7047ce7d @ 1.1 log @Initial revision @ text @d3 1 a3 1 MD5 (snort-1.2.1.tar.gz) = 9cc1356c98c7c504a3045df7b6341d3b @ 1.1.1.1 log @Initial import of snort-1.2.1, a libpcap-based packet sniffer/logger. @ text @@