Commit graph

32 commits

Author SHA1 Message Date
Ben Siraphob e03c068af5 treewide: makeWrapper buildInputs to nativeBuildInputs 2021-02-19 20:09:16 +07:00
Ben Siraphob 5d566c43b4 pkgs/applications: pkgconfig -> pkg-config 2021-01-16 23:49:59 -08:00
Ben Siraphob 108bdac3d9 pkgs/applications: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Jonathan Ringer 548649c00c snort: fix whitespace
to make the CI happy
2020-10-07 22:45:32 -07:00
WORLDofPEACE 34aaac6d7c Merge branch 'staging-next' into staging 2020-09-20 18:41:15 -04:00
Vladimír Čunát 66f0303a29
snort: trailing whitespace
I mainly mind because of annoying red cross in CI :-)
https://github.com/NixOS/nixpkgs/runs/1106746284
2020-09-13 09:52:14 +02:00
Maximilian Bosch 92eae6a36d
snort: 2.9.16 -> 2.9.16.1, fix build w/glibc-2.32 2020-09-12 23:04:46 +02:00
Aycan iRiCAN 2dfbe24bad
snort: 2.9.11.1 -> 2.9.16 (#88981) 2020-05-26 14:29:57 -07:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
volth 46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
John Ericson db965063b3 treewide: Make configureFlags lists 2018-08-03 17:06:03 -04:00
Ryan Mulligan 038a0c9a60 treewide: http to https 2018-04-30 21:39:20 -07:00
Ryan Mulligan 6aad4bf55e snort: 2.9.8.2 -> 2.9.11.1 (#36026)
Semi-automatic update. These checks were performed:

- built on NixOS
- ran `/nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1/bin/snort -V` and found version 2.9.11.1
- ran `/nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1/bin/snort --version` and found version 2.9.11.1
- ran `/nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1/bin/u2spewfoo help` got 0 exit code
- ran `/nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1/bin/.snort-wrapped -V` and found version 2.9.11.1
- ran `/nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1/bin/.snort-wrapped --version` and found version 2.9.11.1
- found 2.9.11.1 with grep in /nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1
- found 2.9.11.1 in filename of file in /nix/store/qan26dfxzzbh27cd91hcvad69ls7xnhw-snort-2.9.11.1

cc "@aycanirican"
2018-02-28 12:35:35 +03:00
Tuomas Tynkkynen 21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Aycan iRiCAN 379559702e snort: 2.9.7.2 -> 2.9.8.2 2016-05-21 10:08:36 +03:00
Vladimír Čunát 52ea05187a snort: fix evaluation 2015-10-15 21:46:13 +02:00
William A. Kennington III 8a44a36ca4 Merge branch 'master.upstream' into staging.upstream 2015-10-15 10:22:28 -07:00
Eelco Dolstra 741bf840da Revert "Merge pull request #9543 from NixOS/staging.post-15.06"
This reverts commit f61176c539, reversing
changes made to a27ca029ee.

Conflicts:
	pkgs/development/libraries/ncurses/default.nix
2015-10-06 15:24:20 +02:00
Aycan iRiCAN 4e9f5328a5 snort: move dynamic path defs to wrapper script. 2015-10-03 17:22:40 +03:00
Aycan iRiCAN 5d952d68de snort: typo fix 2015-10-02 12:08:25 +03:00
Aycan iRiCAN 0e69d85980 snort: provide dynamic preprocessor path via wrapper 2015-10-02 11:43:03 +03:00
Aycan iRiCAN 8d8457d9ae add wrapProgram to buildInputs 2015-10-02 10:18:55 +03:00
Aycan iRiCAN 6b84f5cd61 snort: introducing inline snort support via nfq daq 2015-10-02 10:11:04 +03:00
Vladimír Čunát bba6880aa6 snort.org: switch downloads to SourceForge
On snort.org they only seem to keep the latest release, which is annoying.
Fixes #8065. /cc maintainer @aycanirican.
2015-05-31 17:11:40 +02:00
devhell 77c40224d2 snort: 2.9.7.0 -> 2.9.7.2
This includes a slight refactor.

2014-11-24 - Snort 2.9.7.2
[*] New additions
* Application Identification Preprocessor, when used in conjunction with
  open app ID detector content, that will identify application protocol,
  client, server, and web applications (including those using SSL) and
  include the info in Snort alert data. In addition, a new rule option
  keyword 'appid' that can be used to constrain Snort rules based on one
  or more applications that are identified for the connection.
  See README.appid for details.

* A new protected_content rule option that is used to match against a content
  that is hashed.  It can be used to obscure the full context of the rule from
  the administrator.

* Protocol Aware Flushing (PAF) improvements for SMTP, POP, and IMAP to
  more accurately process different portions of email messages and file
  attachments.

* Added ability to test normalization behavior without modifying network traffic.
  When configured using na_policy_mode:inline-test, statistics will be gathered
  on packet normalizations that would have occurred, allowing less disruptive
  testing of inline deployments.

* The HTTP Inspection preprocessor now has the ability to decompress
  DEFLATE and LZMA compressed flash content and DEFLATE compressed PDF
  content from http responses when configured with the new decompress_swf
  and decompress_pdf options. This enhancement can be used with existing rule
  options that already match against decompressed equivalents.

* Added improved XFF support to HttpInspect. It is now possible to specify custom
  HTTP headers to use in place of 'X-Fowarded-For'. In situations where traffic may
  contain multiple XFF-like headers, it is possible to specify which headers hold
  precedence.

* Added control socket command to dump packets.

* The Stream5 preprocessor functionality is now split between the new Session and Stream preprocessors.

* Added decoding capaiblity for Cisco FabricPath

[*] Improvements
* Update active response to allow for responses of 1500+ bytes that span
  multiple TCP packets.

* Check limits of multiple configurations to not exceed a maximum ID of 4095.

* Updated the error output of byte_test, byte_jump, byte_extract to
  including details on offending options for a given rule.

* Update build and install scripts to install preprocessor and engine libraries
  into user specified libdir.

* Improved performance of IP Reputation preprocessor.

* The control socket will now report success when reloading empty IP Reputation whitelists/blacklists.

* All TCP normalizations can now be enabled individually. See README.normalize for details on using
  the new options. For consistency with other options, the "urp" tcp normalization keyword now
  enables the normalization instead of disabling it.

* Lowered memory demand of Unicode -> ASCII mapping in HttpInspect.

* Updated profiler output to remove duplicate results when using multiple configurations.

* Improved performance of FTP reassembly.
2015-03-16 00:07:00 +00:00
Aycan iRiCAN 073c764f6c Bump snort to 2.9.7.0 and daq to 2.0.4 2014-11-27 09:57:59 +02:00
Aycan iRiCAN d2b1644939 Fixed typo 2014-09-24 11:43:51 +03:00
Aycan iRiCAN 082167400f Added myself to maintainers 2014-09-24 11:24:47 +03:00
Aycan iRiCAN 9103b8b512 Bump snort and daq 2014-08-31 12:31:39 +01:00
Bjørn Forsman c9baba9212 Fix many package descriptions
(My OCD kicked in today...)

Remove repeated package names, capitalize first word, remove trailing
periods and move overlong descriptions to longDescription.

I also simplified some descriptions as well, when they were particularly
long or technical, often based on Arch Linux' package descriptions.

I've tried to stay away from generated expressions (and I think I
succeeded).

Some specifics worth mentioning:
 * cron, has "Vixie Cron" in its description. The "Vixie" part is not
   mentioned anywhere else. I kept it in a parenthesis at the end of the
   description.

 * ctags description started with "Exuberant Ctags ...", and the
   "exuberant" part is not mentioned elsewhere. Kept it in a parenthesis
   at the end of description.

 * nix has the description "The Nix Deployment System". Since that
   doesn't really say much what it is/does (especially after removing
   the package name!), I changed that to "Powerful package manager that
   makes package management reliable and reproducible" (borrowed from
   nixos.org).

 * Tons of "GNU Foo, Foo is a [the important bits]" descriptions
   is changed to just [the important bits]. If the package name doesn't
   contain GNU I don't think it's needed to say it in the description
   either.
2014-08-24 22:31:37 +02:00
Mateusz Kowalczyk 7a45996233 Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
Rob Vermaas 7c3c250a2c Add snort-2.9.4.6 2013-05-30 15:05:39 +02:00