Commit Graph

33 Commits

Author SHA1 Message Date
Pascal Wittmann
255130b340
bro: 2.5.1 -> 2.5.2 2017-10-21 23:59:51 +02:00
Franz Pletz
80848ce10d
bro: 2.5 -> 2.5.1 2017-08-28 00:54:43 +02:00
mimadrid
09e0cc7cc7
Update homepage attributes: http -> https
Homepage link "http://.../" is a permanent redirect to "https://.../" and should be updated
https://repology.org/repository/nix_stable/problems
2017-08-03 11:56:15 +02:00
Sophie Taylor
ffa225336c bro: 2.4.1 -> 2.5 2016-11-18 23:20:58 +10:00
Tuomas Tynkkynen
4f398dfd13 bro: Broken on Darwin
http://hydra.nixos.org/build/38312081
2016-08-06 17:06:45 +03:00
Tuomas Tynkkynen
21f17d69f6 treewide: Add lots of meta.platforms
Build-tested on x86_64 Linux & Mac.
2016-08-02 21:42:43 +03:00
Aycan iRiCAN
379559702e snort: 2.9.7.2 -> 2.9.8.2 2016-05-21 10:08:36 +03:00
William A. Kennington III
6602f49495 Revert "Revert "Merge pull request #9543 from NixOS/staging.post-15.06""
This reverts commit 741bf840dad05cd1728481045466811ae8ae8281.

This reverts the fallout from reverting the major changes.
2015-11-14 12:32:51 -08:00
William A. Kennington III
4251612faa Merge branch 'master.upstream' into staging.upstream 2015-11-04 01:00:48 -08:00
Pascal Wittmann
7fd0048a93 bro: 2.4 -> 2.4.1 2015-11-02 21:26:56 +01:00
Vladimír Čunát
52ea05187a snort: fix evaluation 2015-10-15 21:46:13 +02:00
William A. Kennington III
8a44a36ca4 Merge branch 'master.upstream' into staging.upstream 2015-10-15 10:22:28 -07:00
Eelco Dolstra
741bf840da Revert "Merge pull request #9543 from NixOS/staging.post-15.06"
This reverts commit f61176c5396ed513f3d399f73f38ab78a066667f, reversing
changes made to a27ca029ee2b39e04d7d2a516a7228f4b62067fb.

Conflicts:
	pkgs/development/libraries/ncurses/default.nix
2015-10-06 15:24:20 +02:00
Aycan iRiCAN
4e9f5328a5 snort: move dynamic path defs to wrapper script. 2015-10-03 17:22:40 +03:00
Aycan iRiCAN
5d952d68de snort: typo fix 2015-10-02 12:08:25 +03:00
Aycan iRiCAN
0e69d85980 snort: provide dynamic preprocessor path via wrapper 2015-10-02 11:43:03 +03:00
Aycan iRiCAN
8d8457d9ae add wrapProgram to buildInputs 2015-10-02 10:18:55 +03:00
Aycan iRiCAN
6b84f5cd61 snort: introducing inline snort support via nfq daq 2015-10-02 10:11:04 +03:00
Pascal Wittmann
bd65e8afb4 bro: update from 2.3.2 to 2.4 2015-06-29 12:50:34 +02:00
Vladimír Čunát
bba6880aa6 snort.org: switch downloads to SourceForge
On snort.org they only seem to keep the latest release, which is annoying.
Fixes #8065. /cc maintainer @aycanirican.
2015-05-31 17:11:40 +02:00
Peter Simons
06f3c4dba5 daq: update to version 2.0.5
Fixes https://github.com/NixOS/nixpkgs/issues/7947.
2015-05-22 20:41:59 +02:00
devhell
77c40224d2 snort: 2.9.7.0 -> 2.9.7.2
This includes a slight refactor.

2014-11-24 - Snort 2.9.7.2
[*] New additions
* Application Identification Preprocessor, when used in conjunction with
  open app ID detector content, that will identify application protocol,
  client, server, and web applications (including those using SSL) and
  include the info in Snort alert data. In addition, a new rule option
  keyword 'appid' that can be used to constrain Snort rules based on one
  or more applications that are identified for the connection.
  See README.appid for details.

* A new protected_content rule option that is used to match against a content
  that is hashed.  It can be used to obscure the full context of the rule from
  the administrator.

* Protocol Aware Flushing (PAF) improvements for SMTP, POP, and IMAP to
  more accurately process different portions of email messages and file
  attachments.

* Added ability to test normalization behavior without modifying network traffic.
  When configured using na_policy_mode:inline-test, statistics will be gathered
  on packet normalizations that would have occurred, allowing less disruptive
  testing of inline deployments.

* The HTTP Inspection preprocessor now has the ability to decompress
  DEFLATE and LZMA compressed flash content and DEFLATE compressed PDF
  content from http responses when configured with the new decompress_swf
  and decompress_pdf options. This enhancement can be used with existing rule
  options that already match against decompressed equivalents.

* Added improved XFF support to HttpInspect. It is now possible to specify custom
  HTTP headers to use in place of 'X-Fowarded-For'. In situations where traffic may
  contain multiple XFF-like headers, it is possible to specify which headers hold
  precedence.

* Added control socket command to dump packets.

* The Stream5 preprocessor functionality is now split between the new Session and Stream preprocessors.

* Added decoding capaiblity for Cisco FabricPath

[*] Improvements
* Update active response to allow for responses of 1500+ bytes that span
  multiple TCP packets.

* Check limits of multiple configurations to not exceed a maximum ID of 4095.

* Updated the error output of byte_test, byte_jump, byte_extract to
  including details on offending options for a given rule.

* Update build and install scripts to install preprocessor and engine libraries
  into user specified libdir.

* Improved performance of IP Reputation preprocessor.

* The control socket will now report success when reloading empty IP Reputation whitelists/blacklists.

* All TCP normalizations can now be enabled individually. See README.normalize for details on using
  the new options. For consistency with other options, the "urp" tcp normalization keyword now
  enables the normalization instead of disabling it.

* Lowered memory demand of Unicode -> ASCII mapping in HttpInspect.

* Updated profiler output to remove duplicate results when using multiple configurations.

* Improved performance of FTP reassembly.
2015-03-16 00:07:00 +00:00
Pascal Wittmann
6b5658bf23 bro: update from 2.3.1 to 2.3.2 2015-02-09 12:20:10 +01:00
Aycan iRiCAN
073c764f6c Bump snort to 2.9.7.0 and daq to 2.0.4 2014-11-27 09:57:59 +02:00
Pascal Wittmann
a0e82a304f bro: update from 2.1 to 2.3.1 2014-09-27 19:34:20 +02:00
Aycan iRiCAN
d2b1644939 Fixed typo 2014-09-24 11:43:51 +03:00
Aycan iRiCAN
082167400f Added myself to maintainers 2014-09-24 11:24:47 +03:00
Aycan iRiCAN
9103b8b512 Bump snort and daq 2014-08-31 12:31:39 +01:00
Bjørn Forsman
c9baba9212 Fix many package descriptions
(My OCD kicked in today...)

Remove repeated package names, capitalize first word, remove trailing
periods and move overlong descriptions to longDescription.

I also simplified some descriptions as well, when they were particularly
long or technical, often based on Arch Linux' package descriptions.

I've tried to stay away from generated expressions (and I think I
succeeded).

Some specifics worth mentioning:
 * cron, has "Vixie Cron" in its description. The "Vixie" part is not
   mentioned anywhere else. I kept it in a parenthesis at the end of the
   description.

 * ctags description started with "Exuberant Ctags ...", and the
   "exuberant" part is not mentioned elsewhere. Kept it in a parenthesis
   at the end of description.

 * nix has the description "The Nix Deployment System". Since that
   doesn't really say much what it is/does (especially after removing
   the package name!), I changed that to "Powerful package manager that
   makes package management reliable and reproducible" (borrowed from
   nixos.org).

 * Tons of "GNU Foo, Foo is a [the important bits]" descriptions
   is changed to just [the important bits]. If the package name doesn't
   contain GNU I don't think it's needed to say it in the description
   either.
2014-08-24 22:31:37 +02:00
Mateusz Kowalczyk
7a45996233 Turn some license strings into lib.licenses values 2014-07-28 11:31:14 +02:00
Bjørn Forsman
28ac782583 Some description fixes
There are many more packages to fix, this is just a start.

Rules:
 * Don't repeat the package name (not always that easy...)
 * Start with capital letter
 * Don't end with full stop
 * Don't start with "The ..." or "A ..."

I've also added descriptions to some packages and rewritten others.
2013-10-05 19:36:23 +02:00
Rob Vermaas
298f8fc459 Added bro 2.1 2013-05-30 18:13:50 +02:00
Rob Vermaas
7c3c250a2c Add snort-2.9.4.6 2013-05-30 15:05:39 +02:00