Sancp is a network security tool designed to collect
statistical information regarding network traffic, as
well as, collect the traffic itself in pcap format, all
for the purpose of: auditing, historical analysis, and
network activity discovery. Rules can be used to distinguish
normal from abnormal traffic and support tagging connections
with: rule id, node id, and status id. From an intrusion
detection standpoint, every connection is an event that must
be validated through some means. Sancp uses rules to identify,
record, and tag traffic of interest. 'Tagging' a connection
is a new feature since v1.4.0 Connections ('stats') can be
loaded into a database for further analysis.
===> The following configuration options are available for sancp-1.6.1_7:
DOCS=on: Build and/or install documentation
===> Use 'make config' to modify these settings
security/sancp: Mark DEPRECATED
- Upstream unmaintained and last release was in 2007
- Upstream WWW domain is up for sale so point to SF site
- Set EXPIRATION_DATE 2024-04-13
- Pet portclippy
If someone needs this port feel free to undeprecate and takeover
maintainership.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
security/sancp: Fix build with Clang 6
In file included from build_acl.cc:2:
In file included from ./sancp.h:47:
In file included from ./gvars.h:6:
./pcapFileHandle.h:19:30: error: constant expression evaluates to 212 which
cannot be narrowed to type 'char' [-Wc++11-narrowing]
const char pcap_header[] = {
0xd4,0xc3,0xb2,0xa1,0x02,0x00,0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x20,0x4e,0x00,0x00,0x01,0x00,0x00,0x00
};
^~~~
http://beefy12.nyi.freebsd.org/data/head-amd64-default/p477696_s338122/logs/errors/sancp-1.6.1_6.log
- Make sure CXXFLAGS is respected
PR: 230878
Submitted by: tobik
Approved by: bofh (maintainer timeout, 2 weeks)
security/sancp: Ports cleanup
- Unmute INSTALL_*
- Wrap conditional DOCS installation
- Remove pkg-install/pkg-deinstall as those have been shifted to @dir
framework
- Update pkg-plist to make proper use of @sample and @dir
- Pass Maintainership [1]
Differential Revision: https://reviews.freebsd.org/D1511
Submitted by: pauls@utdallas.edu [1]
Approved by: marino(mentor)
Fix installation of ports that rely on cp -n for installing files. r245960
changed cp to exit with a non-zero exit code if the file exists and is not
overwritten thus causing ports to fail installing when e.g. trying to cp
.default -> .conf files that already exist.
We just ignore the error and continue, as we used to.
Reported by: jaset
Approved by: portmgr (bapt)
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
Dont declare ${sancp_flags} in command_args.
Drop .sh extension from RC script.
Drop MD5 checksum from distinfo.
Switch from adding & removing users by hand to using USERS & GROUPS.
Dont remove data gathered by app on uninstall, notify user to do it manually
should they wish to.
PR: ports/152225, ports/152226
Submitted by: Sevan Janiyan <venture37@geeklan.co.uk>
Approved by: pauls@utdallas.edu (maintainer timeout)
- Use the preferred way of setting default rc parameters
- Move startup options to rc script
- Bump PORTREVISION
PR: ports/123916 (based on)
Submitted by: Paul Schmehl <pauls at utdallas.edu> (maintainer)
Two new patches have been released, one resolves compiler issues on x86-64
architectures, the other fixes a critical problem that causes the program to
use 100% of the CPU. Both added them to the port.
PR: ports/99596
Submitted by: maintainer
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
- Update MASTER_SITES
- Add two vendor patches
- Fix config file handling
- Use SUB_FILES for pkg-message and better of USE_RC_SUBR
PR: ports/89178
Submitted by: Paul Schmehl <pauls@utdallas.edu> (maintainer)
New port based on submission by Paul Schmehl
Sancp is a network security tool designed to collect
statistical information regarding network traffic, as
well as, collect the traffic itself in pcap format, all
for the purpose of: auditing, historical analysis, and
network activity discovery.
PR: ports/77426
Submitted by: Paul Schmehl
Approved by: nectar (mentor)
