net/snort - The NetBSD Packages Collection

The Open Source Network Intrusion Detection System

  Snort is a libpcap-based packet sniffer/logger which can be used
as a lightweight network intrusion detection system.  It features
rules based logging and can perform protocol analysis, content
searching/matching and can be used to detect a variety of attacks
and probes, such as buffer overflows, stealth port scans, CGI
attacks, SMB probes, OS fingerprinting attempts, and much more.

  Snort has a real-time alerting capability, with alerts being sent
to syslog or a separate "alert" file.   As of version 1.1 it can
also send WinPopup messages via Samba.

Build dependencies

devel/flex devel/bison devel/libtool-base pkgtools/mktools shells/bash devel/pkgconf pkgtools/cwrappers

Runtime dependencies

net/daq www/nghttp2 lang/LuaJIT2 net/libdnet devel/pcre www/nghttp2 net/libdnet devel/pcre

Binary packages

NetBSD 8.0i386snort-
NetBSD 8.0i386snort-
NetBSD 8.0powerpcsnort-
NetBSD 8.0powerpcsnort-
NetBSD 8.0x86_64snort-
NetBSD 8.0x86_64snort-
NetBSD 9.0i386snort-
NetBSD 9.0i386snort-
NetBSD 9.0powerpcsnort-
NetBSD 9.0powerpcsnort-
NetBSD 9.0x86_64snort-
NetBSD 9.0x86_64snort-
NetBSD 9.3x86_64snort-
NetBSD 9.3x86_64snort-

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

Available build options

Enable debugging facilities in the package.
Enable SNMP support.
Enable support for the Prelude Hybrid IDS system.
Enable SSL support.
Flexible responses on hostile connection attempts.
Newer flexible responses on hostile connection attempts.

Known vulnerabilities

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.

Problem reports, updates or suggestions for this package should be reported with send-pr.