Gentoo Packages

Search

Install

Install this package:

emerge -a net-analyzer/snort

Package Information

Description:

Snort is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and approximately 300,000 registered users, Snort has become the de facto standard for IPS.

Homepage:

https://www.snort.org

License:

GPL-2

Versions

Metadata

Description

• Snort is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and approximately 300,000 registered users, Snort has become the de facto standard for IPS.

Maintainers

• Patrick Lauer (patrick@gentoo.org) - Type: person
• Gentoo network monitoring and analysis project (netmon@gentoo.org) - Type: project

Upstream

• Bugs: https://snort.org/community#bugs
• Changelog: https://www.snort.org/downloads

<pkgmetadata>
	<maintainer type="person">
		<email>patrick@gentoo.org</email>
		<name>Patrick Lauer</name>
	</maintainer>
	<maintainer type="project">
		<email>netmon@gentoo.org</email>
		<name>Gentoo network monitoring and analysis project</name>
	</maintainer>
	<longdescription>
		Snort is an open source network intrusion prevention and detection
		system (IDS/IPS) developed by Sourcefire. Combining the benefits of
		signature, protocol, and anomaly-based inspection, Snort is the most
		widely deployed IDS/IPS technology worldwide. With millions of downloads
		and approximately 300,000 registered users, Snort has become the de facto
		standard for IPS.
	</longdescription>
	<use>
		<flag name="control-socket">
			Enables Snort's control socket.
		</flag>
		<flag name="file-inspect">
			Enables extended file inspection capabilities.
		</flag>
		<flag name="gre">
			Enable support for inspecting and processing Generic Routing
			Encapsulation (GRE) packet headers. Only needed if you are
			monitoring GRE tunnels.
		</flag>
		<flag name="high-availability">
			Enables high-availability state sharing.
		</flag>
		<flag name="inline-init-failopen">
			Enables support to allow traffic to pass (fail-open) through
			inline deployments while snort is starting and not ready to begin
			inspecting traffic. If this option is not enabled, network
			traffic will not pass (fail-closed) until snort has fully started
			and is ready to perform packet inspection.
		</flag>
		<flag name="linux-smp-stats">
			Enable accurate statistics reporting through /proc on systems with
			multiple processors.
		</flag>
		<flag name="non-ether-decoders">
			Enable decoding of non-ethernet protocols such as TokenRing, FDDI,
			IPX, etc.
		</flag>
		<flag name="open-appid">
			Enable OpenAppID, an open, application-focused detection language
			and processing module for Snort that enables users to create, share,
			and implement application detection. Requires <pkg>dev-lang/luajit</pkg>.
		</flag>
		<flag name="perfprofiling">
			Enables support for preprocessor and rule performance profiling
			using the perfmonitor preprocessor.
		</flag>
		<flag name="ppm">
			Enables support for setting per rule or per packet latency limits.
			Helps protect against introducing network latency with inline
			deployments.
		</flag>
		<flag name="react">
			Enables support for the react rule keyword. Supports interception,
			termination, and redirection of HTTP connections.
		</flag>
		<flag name="shared-rep">
			Enables the use of shared memory for the Reputation Preprocessor
			(Only available on Linux systems)
		</flag>
		<flag name="side-channel">
			Enables Snort's side channel.
		</flag>
		<flag name="sourcefire">
			Enables Sourcefire specific build options, which include
			--enable-perfprofiling and --enable-ppm.
		</flag>
		<flag name="reload-error-restart">
			Enables support for completely restarting snort if an error is
			detected during a reload.
		</flag>
		<flag name="active-response">
			Enables support for automatically sending TCP resets and ICMP
			unreachable messages to terminate connections. Used with inline
			deployments.
		</flag>
		<flag name="flexresp3">
			Enables support for new flexable response preprocessor for enabling
			connection tearing for inline deployments. Replaces flexresp and
			flexresp2.
		</flag>
		<flag name="large-pcap-64bit">
			Allows Snort to read pcap files that are larger than 2 GB. ONLY
			VALID FOR 64bit SYSTEMS!
		</flag>
		<flag name="libtirpc">
			Build against <pkg>net-libs/libtirpc</pkg> for RPC support
		</flag>
	</use>
	<upstream>
		<maintainer>
			<email>snort-team@sourcefire.com</email>
			<name>Snort Team</name>
		</maintainer>
		<changelog>https://www.snort.org/downloads</changelog>
		<doc>https://snort.org/documents#OfficialDocumentation</doc>
		<bugs-to>https://snort.org/community#bugs</bugs-to>
	</upstream>
</pkgmetadata>

Lint Warnings

• [Warning] Ebuild 2.9.20 uses POSIX test '['. Use bash conditions '[[ ... ]]' instead.
• [Warning] Ebuild 2.9.20 uses POSIX test '['. Use bash conditions '[[ ... ]]' instead.
• [Warning] Ebuild 2.9.20 uses POSIX test '['. Use bash conditions '[[ ... ]]' instead.
• [Warning] Ebuild 2.9.20 uses POSIX test '['. Use bash conditions '[[ ... ]]' instead.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 162.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 163.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 168.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 177.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 192.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 195.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 207.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 161.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 162.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 167.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 176.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 191.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 194.
• [Warning] Ebuild 2.9.20 has a line exceeding 80 positions on line 206.
• [Warning] USE flag 'debug' in ebuild 2.9.20 is not documented in metadata.xml
• [Warning] USE flag 'selinux' in ebuild 2.9.20 is not documented in metadata.xml
• [Warning] USE flag 'threads' in ebuild 2.9.20 is not documented in metadata.xml
• [Warning] USE flag 'debug' in ebuild 2.9.20 is not documented in metadata.xml
• [Warning] USE flag 'selinux' in ebuild 2.9.20 is not documented in metadata.xml
• [Warning] USE flag 'threads' in ebuild 2.9.20 is not documented in metadata.xml
• [Error] Manifest entry for unused DIST file 'snort-2.9.20.tar.gz'
• [Error] Repository is missing a repo-name in metadata/layout.conf or profiles/repo_name
• [Notice] Package has only unstable keywords for arch(es): [ amd64, arm, arm64, mips, ppc, ppc64, sparc, x86 ], all versions are unstable: [ 2.9.20, 2.9.20 ]
• [Warning] Ebuild 2.9.20 uses USE flag 'selinux' purely for an optional RDEPEND. USE-controlled optional RDEPs are not acceptable except under very specific circumstances (PG0001).
• [Warning] Ebuild 2.9.20 uses USE flag 'selinux' purely for an optional RDEPEND. USE-controlled optional RDEPs are not acceptable except under very specific circumstances (PG0001).

USE Flags

Manage flags for this package: euse -i <flag> -p net-analyzer/snort | euse -E <flag> -p net-analyzer/snort | euse -D <flag> -p net-analyzer/snort

Files

• snort-2.9.12-snort.pc.patch
• snort-2.9.20-gcc-15-fix.patch
• snort-2.9.8.3-no-implicit.patch
• snort-2.9.8.3-rpc.patch
• snort.confd.2
• snort.rc12
• snort.tmpfiles
• snort_at.service

Manifest