kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/pulledpork/pkg-descr

22 lines
837 B
Text
Raw Normal View History

pulledpork is a Perl script which helps to update your Snort 2.8+ rules. The sample config file comes predefined with the new settings for snort.org downloads, which will change in June 2010. BE SURE to read through the master pulledpork.conf file thoroughly, as there are many changes as of snort 2.8.6.0 that WILL affect you, even if you are NOT yet running 2.8.6.0! Features: * Flowbit tracking! * capability to specify base ruleset (see README.RULESETS) in master pulledpork.conf file. * Handle preprocessor and sensitive-information rulesets * Ability to define sid ranges in any of the sid modification .conf files * Ability to specify references in any of the sid modification .conf files * Ability to ignore entire rule categories (i.e. not include them) * Specify locally stored rules files that need their meta data included in sid-msg.map * Ability to specify your arch for so_rules * Rules are written to only two distinct files * Support metadata based VRT recommended rulesets * Maintain an optional rule changelog * Support for setting rules to Drop * Support for multi-line rules * Rule modification, i.e. disabling of specific rules within rule sets * Outputs changes in rules files if any rules have been added / modified * Compares new rules files with current rule sets * Automated retrieval of certain variables (Distro, Snort Version.. etc) * Downloads latest rules file * Verifies MD5 of local rules file * If MD5 has not changed from snort.org.. doesn't fetch files again * handle both rules and so_rules * Capability to generate stub files WWW: http://code.google.com/p/pulledpork/ PR: ports/146239 Submitted by: Olli Hauer
2010-05-10 04:53:35 +02:00
pulledpork is a Perl script which helps to update your Snort 2.8+ rules.
- update pulledpork to version 0.5.0 - replace pkg-descr text with feature list from README - update my email address Approved by: glarkin (maintainer, implicit)
2010-10-31 22:03:28 +01:00
-= Features and Capabilities =-
pulledpork is a Perl script which helps to update your Snort 2.8+ rules. The sample config file comes predefined with the new settings for snort.org downloads, which will change in June 2010. BE SURE to read through the master pulledpork.conf file thoroughly, as there are many changes as of snort 2.8.6.0 that WILL affect you, even if you are NOT yet running 2.8.6.0! Features: * Flowbit tracking! * capability to specify base ruleset (see README.RULESETS) in master pulledpork.conf file. * Handle preprocessor and sensitive-information rulesets * Ability to define sid ranges in any of the sid modification .conf files * Ability to specify references in any of the sid modification .conf files * Ability to ignore entire rule categories (i.e. not include them) * Specify locally stored rules files that need their meta data included in sid-msg.map * Ability to specify your arch for so_rules * Rules are written to only two distinct files * Support metadata based VRT recommended rulesets * Maintain an optional rule changelog * Support for setting rules to Drop * Support for multi-line rules * Rule modification, i.e. disabling of specific rules within rule sets * Outputs changes in rules files if any rules have been added / modified * Compares new rules files with current rule sets * Automated retrieval of certain variables (Distro, Snort Version.. etc) * Downloads latest rules file * Verifies MD5 of local rules file * If MD5 has not changed from snort.org.. doesn't fetch files again * handle both rules and so_rules * Capability to generate stub files WWW: http://code.google.com/p/pulledpork/ PR: ports/146239 Submitted by: Olli Hauer
2010-05-10 04:53:35 +02:00
- update pulledpork to version 0.5.0 - replace pkg-descr text with feature list from README - update my email address Approved by: glarkin (maintainer, implicit)
2010-10-31 22:03:28 +01:00
* Automated downloading, parsing, state modification and rule
modification for all of your snort rulesets.
* Checksum verification for all major rule downloads
* Automatic generation of updated sid-msg.map file
* Capability to include your local.rules in sid-msg.map file
* Capability to pull rules tarballs from custom urls
* Complete Shared Object support
* Capability to download multiple disparate rulesets at once
* Maintains accurate changelog
* Capability to HUP processes after rules download
* Aids in tuning of rulesets
* Verbose output so that you know EXACTLY what is happening
* Minimal Perl Module dependencies
* A sweet smokey flavor throughout the pork!
pulledpork is a Perl script which helps to update your Snort 2.8+ rules. The sample config file comes predefined with the new settings for snort.org downloads, which will change in June 2010. BE SURE to read through the master pulledpork.conf file thoroughly, as there are many changes as of snort 2.8.6.0 that WILL affect you, even if you are NOT yet running 2.8.6.0! Features: * Flowbit tracking! * capability to specify base ruleset (see README.RULESETS) in master pulledpork.conf file. * Handle preprocessor and sensitive-information rulesets * Ability to define sid ranges in any of the sid modification .conf files * Ability to specify references in any of the sid modification .conf files * Ability to ignore entire rule categories (i.e. not include them) * Specify locally stored rules files that need their meta data included in sid-msg.map * Ability to specify your arch for so_rules * Rules are written to only two distinct files * Support metadata based VRT recommended rulesets * Maintain an optional rule changelog * Support for setting rules to Drop * Support for multi-line rules * Rule modification, i.e. disabling of specific rules within rule sets * Outputs changes in rules files if any rules have been added / modified * Compares new rules files with current rule sets * Automated retrieval of certain variables (Distro, Snort Version.. etc) * Downloads latest rules file * Verifies MD5 of local rules file * If MD5 has not changed from snort.org.. doesn't fetch files again * handle both rules and so_rules * Capability to generate stub files WWW: http://code.google.com/p/pulledpork/ PR: ports/146239 Submitted by: Olli Hauer
2010-05-10 04:53:35 +02:00
WWW: http://code.google.com/p/pulledpork/
Reference in a new issue Copy permalink