Index: head/security/suricata/Makefile =================================================================== --- head/security/suricata/Makefile (revision 402435) +++ head/security/suricata/Makefile (revision 402436) @@ -1,149 +1,148 @@ # Created by: Patrick Tracanelli # $FreeBSD$ PORTNAME= suricata -PORTVERSION= 2.0.9 +DISTVERSION= 3.0RC1 CATEGORIES= security MASTER_SITES= http://www.openinfosecfoundation.org/download/ MAINTAINER= koobs@FreeBSD.org COMMENT= High Performance Network IDS, IPS and Security Monitoring engine LICENSE= GPLv2 LICENSE_FILE= ${WRKSRC}/LICENSE LIB_DEPENDS= libpcre.so:${PORTSDIR}/devel/pcre \ libnet.so:${PORTSDIR}/net/libnet \ libyaml.so:${PORTSDIR}/textproc/libyaml USES= autoreconf cpe gmake libtool pathfix pkgconfig USE_LDCONFIG= yes USE_RC_SUBR= ${PORTNAME} GNU_CONFIGURE= yes CPE_VENDOR= openinfosecfoundation INSTALL_TARGET= install-strip PATHFIX_MAKEFILEIN= Makefile.am -OPTIONS_DEFINE= GEOIP HTP_PORT IPFW JSON NSS PORTS_PCAP PRELUDE SC TESTS -OPTIONS_DEFAULT= HTP_PORT IPFW JSON PRELUDE +OPTIONS_DEFINE= GEOIP HTP_PORT IPFW JSON NETMAP NSS PORTS_PCAP PRELUDE SC TESTS +OPTIONS_DEFAULT= HTP_PORT IPFW JSON NETMAP PRELUDE + OPTIONS_RADIO= SCRIPTS OPTIONS_RADIO_SCRIPTS= LUA LUAJIT + OPTIONS_SUB= yes SCRIPTS_DESC= Scripting GEOIP_DESC= GeoIP support HTP_PORT_DESC= Use libhtp from ports IPFW_DESC= IPFW and IP Divert support for inline IDP JSON_DESC= JSON output support LUA_DESC= LUA scripting support LUAJIT_DESC= LuaJIT scripting support +NETMAP_DESC= Netmap support for inline IDP NSS_DESC= File checksums and SSL/TLS fingerprinting PORTS_PCAP_DESC= Use libpcap from ports PRELUDE_DESC= Prelude support for NIDS alerts SC_DESC= Suricata socket client (suricatasc) TESTS_DESC= Unit tests in suricata binary GEOIP_LIB_DEPENDS= libGeoIP.so:${PORTSDIR}/net/GeoIP GEOIP_CONFIGURE_ON= --enable-geoip HTP_PORT_LIB_DEPENDS= libhtp.so:${PORTSDIR}/devel/libhtp HTP_PORT_CONFIGURE_ON= --enable-non-bundled-htp HTP_PORT_CONFIGURE_OFF= --enable-bundled-htp HTP_PORT_CONFLICTS_INSTALL_OFF= libhtp-[0-9]* libhtp-suricata HTP_PORT_USES_OFF= iconv:translit IPFW_CONFIGURE_ON= --enable-ipfw -PORTS_PCAP_LIB_DEPENDS= libpcap.so:${PORTSDIR}/net/libpcap -PORTS_PCAP_CONFIGURE_ON= --with-libpcap-includes=${LOCALBASE}/include \ - --with-libpcap-libraries=${LOCALBASE}/lib -PORTS_PCAP_CONFIGURE_OFF= --with-libpcap-includes=/usr/include \ - --with-libpcap-libraries=/usr/lib - -PRELUDE_LIB_DEPENDS= libprelude.so:${PORTSDIR}/security/libprelude -PRELUDE_CONFIGURE_ENABLE= prelude -PRELUDE_CONFIGURE_ON= --with-libprelude-prefix=${LOCALBASE} - JSON_LIB_DEPENDS= libjansson.so:${PORTSDIR}/devel/jansson JSON_CONFIGURE_ON= --with-libjansson-includes=${LOCALBASE}/include \ --with-libjansson-libraries=${LOCALBASE}/lib LUA_USES= lua:51 LUA_CONFIGURE_ON= --enable-lua \ --with-liblua-includes=${LUA_INCDIR} \ --with-liblua-libraries=${LUA_LIBDIR} LUAJIT_LIB_DEPENDS= libluajit-5.1.so:${PORTSDIR}/lang/luajit LUAJIT_CONFIGURE_ON= --enable-luajit NSS_LIB_DEPENDS= libnss3.so:${PORTSDIR}/security/nss \ libnspr4.so:${PORTSDIR}/devel/nspr NSS_CONFIGURE_ON= --with-libnss-includes=${LOCALBASE}/include/nss/nss \ --with-libnss-libraries=${LOCALBASE}/lib \ --with-libnspr-libraries=${LOCALBASE}/lib \ --with-libnspr-includes=${LOCALBASE}/include/nspr +NETMAP_CONFIGURE_ENABLE= netmap + +PORTS_PCAP_LIB_DEPENDS= libpcap.so:${PORTSDIR}/net/libpcap +PORTS_PCAP_CONFIGURE_ON= --with-libpcap-includes=${LOCALBASE}/include \ + --with-libpcap-libraries=${LOCALBASE}/lib +PORTS_PCAP_CONFIGURE_OFF= --with-libpcap-includes=/usr/include \ + --with-libpcap-libraries=/usr/lib + +PRELUDE_LIB_DEPENDS= libprelude.so:${PORTSDIR}/security/libprelude +PRELUDE_CONFIGURE_ENABLE= prelude +PRELUDE_CONFIGURE_ON= --with-libprelude-prefix=${LOCALBASE} + SC_USES= python SC_CONFIGURE_ENV= ac_cv_path_HAVE_PYTHON_CONFIG=yes SC_CONFIGURE_ENV_OFF= ac_cv_path_HAVE_PYTHON_CONFIG=no TESTS_CONFIGURE_ENABLE= unittests SUB_FILES= pkg-message CONFIGURE_ARGS+=--enable-gccprotect \ + --disable-silent-rules \ --with-libpcre-includes=${LOCALBASE}/include \ --with-libpcre-libraries=${LOCALBASE}/lib \ --with-libyaml-includes=${LOCALBASE}/include \ --with-libyaml-libraries=${LOCALBASE}/lib \ --with-libnet-includes=${LOCALBASE}/include/libnet11 \ --with-libnet-libraries=${LOCALBASE}/lib/libnet11 \ --with-libhtp-includes=${LOCALBASE}/include/ \ --with-libhtp-libraries=${LOCALBASE}/lib \ --disable-gccmarch-native \ --localstatedir=/var/ LIBNET_CONFIG?= ${LOCALBASE}/bin/libnet11-config CONFIG_DIR?= ${ETCDIR} CONFIG_FILES= suricata.yaml classification.config reference.config threshold.config RULES_DIR= ${CONFIG_DIR}/rules RULES_FILES= decoder-events.rules dns-events.rules files.rules http-events.rules smtp-events.rules stream-events.rules tls-events.rules LOGS_DIR?= /var/log/${PORTNAME} .include pre-patch: ${CP} ${FILESDIR}/ax_check_compile_flag.m4 ${WRKSRC}/m4 post-install: ${MKDIR} ${STAGEDIR}${CONFIG_DIR} ${MKDIR} ${STAGEDIR}${RULES_DIR} ${MKDIR} ${STAGEDIR}${LOGS_DIR} .for f in ${CONFIG_FILES} ${INSTALL_DATA} ${WRKSRC}/${f} ${STAGEDIR}${CONFIG_DIR}/${f}.sample .endfor .for f in ${RULES_FILES} ${INSTALL_DATA} ${WRKSRC}/rules/${f} ${STAGEDIR}${RULES_DIR}/${f} .endfor .if ${PORT_OPTIONS:MSC} (cd ${STAGEDIR}${PREFIX} \ && ${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py \ -d ${PYTHONPREFIX_SITELIBDIR} -f ${PYTHONPREFIX_SITELIBDIR:S;${PREFIX}/;;}) .endif -TMPDIR?= /tmp -TESTDIR= ${TMPDIR}/${PORTNAME} - -regression-test: build - ${RM} -rf ${TESTDIR} - ${MKDIR} ${TESTDIR} - cd ${WRKSRC}/src && ./suricata -u -l ${TESTDIR} - ${RM} -rf ${TESTDIR} +TEST_TARGET= check .include Index: head/security/suricata/distinfo =================================================================== --- head/security/suricata/distinfo (revision 402435) +++ head/security/suricata/distinfo (revision 402436) @@ -1,2 +1,2 @@ -SHA256 (suricata-2.0.9.tar.gz) = 4a19214d7673f9c0eba2e4e5ac78152309464186d16df48944b8f5644faa802d -SIZE (suricata-2.0.9.tar.gz) = 3089593 +SHA256 (suricata-3.0RC1.tar.gz) = 61b22ef3931c6fa37bb84ab9b7b26b6a363bde2444d6dd7b563044e8109ecbff +SIZE (suricata-3.0RC1.tar.gz) = 3292713 Index: head/security/suricata/files/patch-PR1416 =================================================================== --- head/security/suricata/files/patch-PR1416 (revision 402435) +++ head/security/suricata/files/patch-PR1416 (nonexistent) @@ -1,264 +0,0 @@ -#From d3b1545e77fc75bdc2ba2e39e307c36b4683d237 Mon Sep 17 00:00:00 2001 -#From: Victor Julien -#Subject: [PATCH] pcap: implement LINKTYPE_NULL -# Implement LINKTYPE_NULL for pcap live and pcap file. -# https://github.com/inliniac/suricata/pull/1416 - -diff -rupN ./rules/decoder-events.rules ./rules.new/decoder-events.rules ---- ./rules/decoder-events.rules 2015-02-25 07:31:10.000000000 -0500 -+++ ./rules.new/decoder-events.rules 2015-04-16 21:32:05.000000000 -0400 -@@ -116,5 +116,10 @@ alert pkthdr any any -> any any (msg:"SU - alert pkthdr any any -> any any (msg:"SURICATA IPv6-in-IPv6 packet too short"; decode-event:ipv6.ipv6_in_ipv6_too_small; sid:2200084; rev:1;) - alert pkthdr any any -> any any (msg:"SURICATA IPv6-in-IPv6 invalid protocol"; decode-event:ipv6.ipv6_in_ipv6_wrong_version; sid:2200085; rev:1;) - --# next sid is 2200098 -+# linktype null -+alert pkthdr any any -> any any (msg:"SURICATA NULL pkt too small"; decode-event:ltnull.pkt_too_small; sid: 2200103; rev:1;) -+# packet has type not supported by Suricata's decoders -+alert pkthdr any any -> any any (msg:"SURICATA NULL unsupported type"; decode-event:ltnull.unsupported_type; sid: 2200104; rev:1;) -+ -+# next sid is 2200105 - -diff -rupN ./src/Makefile.am new/src/Makefile.am ---- ./src/Makefile.am 2015-02-25 07:31:10.000000000 -0500 -+++ ./src.new/Makefile.am 2015-04-16 21:33:58.000000000 -0400 -@@ -47,6 +47,7 @@ decode-icmpv4.c decode-icmpv4.h \ - decode-icmpv6.c decode-icmpv6.h \ - decode-ipv4.c decode-ipv4.h \ - decode-ipv6.c decode-ipv6.h \ -+decode-null.c decode-null.h \ - decode-ppp.c decode-ppp.h \ - decode-pppoe.c decode-pppoe.h \ - decode-raw.c decode-raw.h \ -diff -rupN ./src/decode-events.h ./src.new/decode-events.h ---- ./src/decode-events.h 2015-02-25 07:31:10.000000000 -0500 -+++ ./src.new/decode-events.h 2015-04-16 21:36:01.000000000 -0400 -@@ -145,6 +145,10 @@ enum { - /* RAW EVENTS */ - IPRAW_INVALID_IPV, /**< invalid ip version in ip raw */ - -+ /* LINKTYPE NULL EVENTS */ -+ LTNULL_PKT_TOO_SMALL, /**< pkt too small for lt:null */ -+ LTNULL_UNSUPPORTED_TYPE, /**< pkt has a type that the decoder doesn't support */ -+ - /* STREAM EVENTS */ - STREAM_3WHS_ACK_IN_WRONG_DIR, - STREAM_3WHS_ASYNC_WRONG_SEQ, -diff -rupN ./src/decode-null.c ./src.new/decode-null.c ---- ./src/decode-null.c 1969-12-31 19:00:00.000000000 -0500 -+++ ./src.new/decode-null.c 2015-04-16 20:53:44.000000000 -0400 -@@ -0,0 +1,89 @@ -+/* Copyright (C) 2015 Open Information Security Foundation -+ * -+ * You can copy, redistribute or modify this Program under the terms of -+ * the GNU General Public License version 2 as published by the Free -+ * Software Foundation. -+ * -+ * This program is distributed in the hope that it will be useful, -+ * but WITHOUT ANY WARRANTY; without even the implied warranty of -+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -+ * GNU General Public License for more details. -+ * -+ * You should have received a copy of the GNU General Public License -+ * version 2 along with this program; if not, write to the Free Software -+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA -+ * 02110-1301, USA. -+ */ -+ -+/** -+ * \ingroup decode -+ * -+ * @{ -+ */ -+ -+ -+/** -+ * \file -+ * -+ * \author Victor Julien -+ * -+ * Decode linkype null: -+ * http://www.tcpdump.org/linktypes.html -+ */ -+ -+#include "suricata-common.h" -+#include "decode.h" -+#include "decode-raw.h" -+#include "decode-events.h" -+ -+#include "util-unittest.h" -+#include "util-debug.h" -+ -+#include "pkt-var.h" -+#include "util-profiling.h" -+#include "host.h" -+ -+#define HDR_SIZE 4 -+ -+int DecodeNull(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, uint8_t *pkt, uint16_t len, PacketQueue *pq) -+{ -+ SCPerfCounterIncr(dtv->counter_null, tv->sc_perf_pca); -+ -+ if (unlikely(len < HDR_SIZE)) { -+ ENGINE_SET_INVALID_EVENT(p, LTNULL_PKT_TOO_SMALL); -+ return TM_ECODE_FAILED; -+ } -+ -+ uint32_t type = *((uint32_t *)pkt); -+ switch(type) { -+ case AF_INET: -+ SCLogDebug("IPV4 Packet"); -+ DecodeIPV4(tv, dtv, p, GET_PKT_DATA(p)+HDR_SIZE, GET_PKT_LEN(p)-HDR_SIZE, pq); -+ break; -+ case AF_INET6: -+ SCLogDebug("IPV6 Packet"); -+ DecodeIPV6(tv, dtv, p, GET_PKT_DATA(p)+HDR_SIZE, GET_PKT_LEN(p)-HDR_SIZE, pq); -+ break; -+ default: -+ SCLogDebug("Unknown Null packet type version %" PRIu32 "", type); -+ ENGINE_SET_EVENT(p, LTNULL_UNSUPPORTED_TYPE); -+ break; -+ } -+ return TM_ECODE_OK; -+} -+ -+#ifdef UNITTESTS -+ -+#endif /* UNITTESTS */ -+ -+/** -+ * \brief Registers Null unit tests -+ */ -+void DecodeNullRegisterTests(void) -+{ -+#ifdef UNITTESTS -+#endif /* UNITTESTS */ -+} -+/** -+ * @} -+ */ -diff -rupN ./src/decode-null.h ./src.new/decode-null.h ---- ./src/decode-null.h 1969-12-31 19:00:00.000000000 -0500 -+++ ./src.new/decode-null.h 2015-04-16 20:53:44.000000000 -0400 -@@ -0,0 +1,28 @@ -+/* Copyright (C) 2007-2010 Open Information Security Foundation -+ * -+ * You can copy, redistribute or modify this Program under the terms of -+ * the GNU General Public License version 2 as published by the Free -+ * Software Foundation. -+ * -+ * This program is distributed in the hope that it will be useful, -+ * but WITHOUT ANY WARRANTY; without even the implied warranty of -+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -+ * GNU General Public License for more details. -+ * -+ * You should have received a copy of the GNU General Public License -+ * version 2 along with this program; if not, write to the Free Software -+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA -+ * 02110-1301, USA. -+ */ -+ -+/** -+ * \file -+ * -+ * \author Victor Julien -+ */ -+ -+#ifndef __DECODE_NULL_H__ -+#define __DECODE_NULL_H__ -+void DecodeNullRegisterTests(void); -+#endif /* __DECODE_NULL_H__ */ -+ -diff -rupN ./src/decode.c ./src.new/decode.c ---- ./src/decode.c 2015-02-25 07:31:10.000000000 -0500 -+++ ./src.new/decode.c 2015-04-16 21:38:28.000000000 -0400 -@@ -387,6 +387,8 @@ void DecodeRegisterPerfCounters(DecodeTh - SC_PERF_TYPE_UINT64, "NULL"); - dtv->counter_raw = SCPerfTVRegisterCounter("decoder.raw", tv, - SC_PERF_TYPE_UINT64, "NULL"); -+ dtv->counter_null = SCPerfTVRegisterCounter("decoder.null", tv, -+ SC_PERF_TYPE_UINT64, "NULL"); - dtv->counter_sll = SCPerfTVRegisterCounter("decoder.sll", tv, - SC_PERF_TYPE_UINT64, "NULL"); - dtv->counter_tcp = SCPerfTVRegisterCounter("decoder.tcp", tv, -diff -rupN ./src/decode.h ./src.new/decode.h ---- ./src/decode.h 2015-02-25 07:31:10.000000000 -0500 -+++ ./src.new/decode.h 2015-04-16 21:42:38.000000000 -0400 -@@ -78,6 +78,7 @@ enum PktSrcEnum { - #include "decode-udp.h" - #include "decode-sctp.h" - #include "decode-raw.h" -+#include "decode-null.h" - #include "decode-vlan.h" - - #include "detect-reference.h" -@@ -576,6 +577,7 @@ typedef struct DecodeThreadVars_ - uint16_t counter_eth; - uint16_t counter_sll; - uint16_t counter_raw; -+ uint16_t counter_null; - uint16_t counter_tcp; - uint16_t counter_udp; - uint16_t counter_sctp; -@@ -821,6 +823,7 @@ int DecodePPP(ThreadVars *, DecodeThread - int DecodePPPOESession(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); - int DecodePPPOEDiscovery(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); - int DecodeTunnel(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *, uint8_t) __attribute__ ((warn_unused_result)); -+int DecodeNull(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); - int DecodeRaw(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); - int DecodeIPV4(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); - int DecodeIPV6(ThreadVars *, DecodeThreadVars *, Packet *, uint8_t *, uint16_t, PacketQueue *); -@@ -921,8 +924,13 @@ void AddressDebugPrint(Address *); - #endif - #endif - -+#ifndef DLT_NULL -+#define DLT_NULL 0 -+#endif -+ - /** libpcap shows us the way to linktype codes - * \todo we need more & maybe put them in a separate file? */ -+#define LINKTYPE_NULL DLT_NULL - #define LINKTYPE_ETHERNET DLT_EN10MB - #define LINKTYPE_LINUX_SLL 113 - #define LINKTYPE_PPP 9 -diff -rupN ./src/detect-engine-event.h ./src.new/detect-engine-event.h ---- ./src/detect-engine-event.h 2015-02-25 07:31:10.000000000 -0500 -+++ ./src.new/detect-engine-event.h 2015-04-16 21:44:38.000000000 -0400 -@@ -154,6 +154,10 @@ struct DetectEngineEvents_ { - /* RAW EVENTS */ - { "ipraw.invalid_ip_version",IPRAW_INVALID_IPV, }, - -+ /* LINKTYPE NULL EVENTS */ -+ { "ltnull.pkt_too_small", LTNULL_PKT_TOO_SMALL, }, -+ { "ltnull.unsupported_type", LTNULL_UNSUPPORTED_TYPE, }, -+ - /* STREAM EVENTS */ - { "stream.3whs_ack_in_wrong_dir", STREAM_3WHS_ACK_IN_WRONG_DIR, }, - { "stream.3whs_async_wrong_seq", STREAM_3WHS_ASYNC_WRONG_SEQ, }, -diff -rupN ./src/source-pcap-file.c ./src.new/source-pcap-file.c ---- ./src/source-pcap-file.c 2015-02-25 07:31:12.000000000 -0500 -+++ ./src.new/source-pcap-file.c 2015-04-16 21:47:27.000000000 -0400 -@@ -320,6 +320,9 @@ TmEcode ReceivePcapFileThreadInit(Thread - case LINKTYPE_RAW: - pcap_g.Decoder = DecodeRaw; - break; -+ case LINKTYPE_NULL: -+ pcap_g.Decoder = DecodeNull; -+ break; - - default: - SCLogError(SC_ERR_UNIMPLEMENTED, "datalink type %" PRId32 " not " -diff -rupN ./src/source-pcap.c ./src.new/source-pcap.c ---- ./src/source-pcap.c 2015-02-25 07:31:12.000000000 -0500 -+++ ./src.new/source-pcap.c 2015-04-16 21:46:10.000000000 -0400 -@@ -741,6 +741,9 @@ TmEcode DecodePcap(ThreadVars *tv, Packe - case LINKTYPE_RAW: - DecodeRaw(tv, dtv, p, GET_PKT_DATA(p), GET_PKT_LEN(p), pq); - break; -+ case LINKTYPE_NULL: -+ DecodeNull(tv, dtv, p, GET_PKT_DATA(p), GET_PKT_LEN(p), pq); -+ break; - default: - SCLogError(SC_ERR_DATALINK_UNIMPLEMENTED, "Error: datalink type %" PRId32 " not yet supported in module DecodePcap", p->datalink); - break; Property changes on: head/security/suricata/files/patch-PR1416 ___________________________________________________________________ Deleted: fbsd:nokeywords ## -1 +0,0 ## -yes \ No newline at end of property Deleted: svn:eol-style ## -1 +0,0 ## -native \ No newline at end of property Deleted: svn:mime-type ## -1 +0,0 ## -text/plain \ No newline at end of property Index: head/security/suricata/files/patch-scripts_suricatasc_suricatasc.in =================================================================== --- head/security/suricata/files/patch-scripts_suricatasc_suricatasc.in (revision 402435) +++ head/security/suricata/files/patch-scripts_suricatasc_suricatasc.in (nonexistent) @@ -1,11 +0,0 @@ ---- scripts/suricatasc/suricatasc.in.orig 2014-12-19 17:49:20.651663649 +0200 -+++ scripts/suricatasc/suricatasc.in 2014-12-19 17:49:59.921665563 +0200 -@@ -24,7 +24,7 @@ - args = parser.parse_args() - - if args.socket != None: -- SOCKET_PATH = "@e_localstatedir@/" + args.socket[0] -+ SOCKET_PATH = args.socket - else: - SOCKET_PATH = "@e_localstatedir@/suricata-command.socket" - Property changes on: head/security/suricata/files/patch-scripts_suricatasc_suricatasc.in ___________________________________________________________________ Deleted: fbsd:nokeywords ## -1 +0,0 ## -yes \ No newline at end of property Deleted: svn:eol-style ## -1 +0,0 ## -native \ No newline at end of property Deleted: svn:mime-type ## -1 +0,0 ## -text/plain \ No newline at end of property Index: head/security/suricata/pkg-plist =================================================================== --- head/security/suricata/pkg-plist (revision 402435) +++ head/security/suricata/pkg-plist (revision 402436) @@ -1,74 +1,74 @@ bin/suricata %%SC%%bin/suricatasc %%DOCSDIR%%/AUTHORS %%DOCSDIR%%/Basic_Setup.txt %%DOCSDIR%%/CentOS5.txt %%DOCSDIR%%/CentOS_56_Installation.txt %%DOCSDIR%%/Debian_Installation.txt %%DOCSDIR%%/Fedora_Core.txt %%DOCSDIR%%/FreeBSD_8.txt %%DOCSDIR%%/GITGUIDE %%DOCSDIR%%/HTP_library_installation.txt %%DOCSDIR%%/INSTALL %%DOCSDIR%%/INSTALL.PF_RING %%DOCSDIR%%/INSTALL.WINDOWS %%DOCSDIR%%/Installation_from_GIT_with_PCRE-JIT.txt %%DOCSDIR%%/Installation_from_GIT_with_PF_RING_on_Ubuntu_server_1104.txt %%DOCSDIR%%/Installation_with_CUDA_and_PFRING_on_Scientific_Linux_6.txt %%DOCSDIR%%/Installation_with_CUDA_and_PF_RING_on_Ubuntu_server_1104.txt %%DOCSDIR%%/Installation_with_CUDA_on_Scientific_Linux_6.txt %%DOCSDIR%%/Installation_with_CUDA_on_Ubuntu_server_1104.txt %%DOCSDIR%%/Installation_with_PF_RING.txt %%DOCSDIR%%/Mac_OS_X_106x.txt %%DOCSDIR%%/NEWS %%DOCSDIR%%/OpenBSD_Installation_from_GIT.txt %%DOCSDIR%%/README %%DOCSDIR%%/Setting_up_IPSinline_for_Linux.txt %%DOCSDIR%%/TODO %%DOCSDIR%%/Third_Party_Installation_Guides.txt %%DOCSDIR%%/Ubuntu_Installation.txt %%DOCSDIR%%/Ubuntu_Installation_from_GIT.txt %%DOCSDIR%%/Windows.txt %%NO_HTP_PORT%%include/htp/bstr.h %%NO_HTP_PORT%%include/htp/bstr_builder.h %%NO_HTP_PORT%%include/htp/htp.h %%NO_HTP_PORT%%include/htp/htp_base64.h %%NO_HTP_PORT%%include/htp/htp_config.h %%NO_HTP_PORT%%include/htp/htp_connection_parser.h %%NO_HTP_PORT%%include/htp/htp_core.h %%NO_HTP_PORT%%include/htp/htp_decompressors.h %%NO_HTP_PORT%%include/htp/htp_hooks.h %%NO_HTP_PORT%%include/htp/htp_list.h %%NO_HTP_PORT%%include/htp/htp_multipart.h %%NO_HTP_PORT%%include/htp/htp_table.h %%NO_HTP_PORT%%include/htp/htp_transaction.h %%NO_HTP_PORT%%include/htp/htp_urlencoded.h %%NO_HTP_PORT%%include/htp/htp_utf8_decoder.h %%NO_HTP_PORT%%include/htp/htp_version.h -%%NO_HTP_PORT%%lib/libhtp-0.5.16.so.1 -%%NO_HTP_PORT%%lib/libhtp-0.5.16.so.1.0.0 +%%NO_HTP_PORT%%lib/libhtp-0.5.18.so.1 +%%NO_HTP_PORT%%lib/libhtp-0.5.18.so.1.0.0 %%NO_HTP_PORT%%lib/libhtp.a %%NO_HTP_PORT%%lib/libhtp.so %%NO_HTP_PORT%%libdata/pkgconfig/htp.pc %%NO_HTP_PORT%%@dir include/htp %%SC%%%%PYTHON_SITELIBDIR%%/suricatasc-0.9-py%%PYTHON_VER%%.egg-info %%SC%%%%PYTHON_SITELIBDIR%%/suricatasc/__init__.py %%SC%%%%PYTHON_SITELIBDIR%%/suricatasc/__init__.pyc %%SC%%%%PYTHON_SITELIBDIR%%/suricatasc/suricatasc.py %%SC%%%%PYTHON_SITELIBDIR%%/suricatasc/suricatasc.pyc @sample %%ETCDIR%%/suricata.yaml.sample @sample %%ETCDIR%%/classification.config.sample @sample %%ETCDIR%%/reference.config.sample @sample %%ETCDIR%%/threshold.config.sample %%ETCDIR%%/rules/decoder-events.rules %%ETCDIR%%/rules/dns-events.rules %%ETCDIR%%/rules/files.rules %%ETCDIR%%/rules/http-events.rules %%ETCDIR%%/rules/smtp-events.rules %%ETCDIR%%/rules/stream-events.rules %%ETCDIR%%/rules/tls-events.rules @dir etc/suricata/rules @dir etc/suricata @dir(root,wheel,0700) /var/log/suricata @unexec if [ -d %D/%%ETCDIR%% ]; then echo "==> If you are permanently removing this port, you should do a ``rm -rf ${PKG_PREFIX}/etc/suricata`` to remove any configuration files left."; fi @dir %%DOCSDIR%%