security/snort: Move man pages to share/man

Approved by:	portmgr (blanket)

security/snort: Use USES=luajit (defaults to luajit-devel)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>

security/snort: Update to 2.9.20

[*] New Additions

        Added support for dns root queries and underflow.
        Added support to get extra data from SMTP and HTTP into IPS event.
        Added support for login success and failure eventing for IMAP and POP3.
        Added support to handle empty string for SNI/CN/SAN/ORG.

[*] Improvements / Fix

        Fixed a scenario where SSL traffic was not detected correctly.
        Fixed security zones info in intrusion events.
        Fixed URL lookup failure.

security/snort: Update to 2.9.19

re: https://blog.snort.org/2021/12/open-source-version-of-snort-29190.html

security/snort: Fixes for aarch64 and armv6/7

This patch does a few things:

1. Update depends to a newer version of net/daq, in the ports tree for a
   long time already, but explicitly depend on it.
2. Split out corefiles separate from debug options
3. Switch from luajit to luajit-openresty so that snort can build on
   aarch64
4. Fix crashing on armv7 due to misaligned memory access (from mjg@)

While here, in pkg-plist change deprecated @unexec to @postunexec

PR:		257747
Reported by:	brd

security/snort: Update to 2.9.18

security/snort: add another master site which unbreaks fetch

When a new release comes out, the old tarball gets moved to the
archive/snort directory. This change stops the port from breaking
when that move happens.

security/snort: Update to 2.9.17.1

Cherry-pick 018217c from pfsense/FreeBSD-ports:
    Update Snort binary to latest 2.9.17.1 version from upstream.

Approved by:	dvl (maintainer)
Sponsored by:	Rubicon Communications, LLC ("Netgate")

security/snort: Pull in patches from pfsense/FreeBSD-ports to improve armv6/v7

- avoid unaligned access to packet memory
- disable compiler optimization

Approved by:	dvl (maintainer)
Sponsored by:	Rubicon Communications, LLC ("Netgate")

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

Update to 2.9.17

re: https://blog.snort.org/2020/11/snort-29170-has-been-released.html

- Switch to options helpers
- Only install docs when requested
- Update WWW

Approved by:	portmgr blanket

Update to 2.9.16.1

re: https://blog.snort.org/2020/08/snort-29161-has-been-released.html

* Added support for GCC version 10.1.1
* Added packet counters to make sure flows with one-way data don't pend forever.
* Fixed potential race condition between reload and exit path.

Notes for versions this port has skipped over:

re: https://blog.snort.org/2020/04/snort-29160-has-been-released.html

Update to 2.9.15.1

* Added support for glibc version 2.30.
* Fixed Snort core seen during SSL re-configuration.
* Fixed file access issues on files from SMB share.

https://blog.snort.org/2020/01/snort-29151-has-been-released.html

Update to 2.9.15

[*] New Additions

 * Added new debugs to print detection, file_processing and Preproc time
consumption info and verdict.
 * Added support to detect new Korean file formats .egg and .alg in the file
preprocessor.
 * Added support to detect new RAR file-type in the file preprocessor.

[*] Improvements / Fix

 * Fix to generate ALERT if TEID value is zero in GTP v1 and v2 packets.
 * Fix to whitelist ftp data sessions when no file policy exists.
 * Fix RTF file magic to a more generic value to prevent evasions.

Remove a bunch of unused *_DESC

Convert to UCL & cleanup pkg-message (categories s)

Upgrade to Upgrade to 2.9.14.1

Take maintainership.

PR:		239667
Submitted by:	Gilbert Morgan <gmm@tutanota.com>
Approved by:	zi (maintainer)

- Explicitly depend on bison
- Bump PORTREVISION

PR:		238220
Submitted by:	Bill Meeks <bmeeks8@bellsouth.net>

Undeprecate the BARNYARD option now that the dependent ports
(security/barnyard and security/bro) have been undeprecated.

PR:		235724
Approved by:	zi (maintainer), matthew (mentor, implicit)

Deprecate everything that depends on net/GeoIP and everything that depends
on those ports.

- Add CONFLICTS for security/snort3
- Pet portlint

PR:		234699
Requested by:	Vinicius Zavam <egypcio@FreeBSD.org>

- Update to 2.9.12

Fix build when APPID is on

Approved by:	zi (maintainer)

- Update to 2.9.11.1

- MASTER_SITES cleanup

Fix broken build related to missing %%APPID%% prefixes in pkg-plist
bump PORTREVISION

PR:		219459

upgrade to 2.9.9.0

Approved by:	zi (maintainer)

- Update to 2.9.8.3

Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by
default anyway and don't need to be listed

Approved by:	portmgr blanket

- Fix trailing whitespace in pkg-descrs, categories [p-x]*

Approved by:	portmgr blanket

Convert to @sample

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Install net/libnet headers and libraries back in the location where other
ports expect it.  The files were put in a different location to avoid a
conflict with net/libnet10 but this port has been removed a while ago now.

PR:		208122
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- Update to 2.9.8.0

- Fix various distinfo issues

Approved by:	portmgr blanket

- Fix broken MASTER_SITES

- Update to 2.9.7.6

Reviewed by: zi (maintainer)
Differential Revision: https://reviews.freebsd.org/D3963

- Update to 2.9.7.5

Fix spell

- Update to 2.9.7.3

- Add CPE info

Approved by:	portmgr blanket

- Update to 2.9.7.2

- Add missing conf/doc/library when FILEINSPECT is enabled

PR:		194955
Submitted by:	Bill Meeks <bmeeks8@bellsouth.net>

- Fix runtime issue with APPID enabled

PR:		195019
Submitted by:	Bill Meeks <bmeeks8@bellsouth.net>

- Actually define FILEINSPECT as an available OPTION

Reported by:	sunpoet

- Add support for new experimental features
- Remove old features

- Remove configurable options as they break the build when they are disabled.

- Update to 2.9.7.0

- Update to 2.9.6.2
- Disable OPTION for FLEXRESP3 as it breaks the build if it is disabled

- Convert net/libnet to USES=libtool and bump dependent ports
- Add INSTALL_TARGET=install-strip

Approved by:	portmgr (implicit, bump unstaged port)

- Update to 2.9.6.1

- Fix plist to have proper 'rmdir DIR' ordering.
  Pkgng will not detect the directory otherwise. This was due to
  incorrectly advise in the check-stagedir.sh script, fixed in
  r351587

With hat:	portmgr

- Update to 2.9.6.0

Fix properties on pkg-plist

- Update to 2.9.5.6
- Add STAGE support [1]
- Remove SNORTSAM support due to lack of upstream support [1]
- Makefile cleanup [1]
- Use new configure magic [1]

PR:		ports/185274 [1]
Submitted by:	ohauer@ [1]

- Update to 2.9.5.5

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- Add OPTION to enable non-Ethernet decoders

Requested by:	Andrew Nichols <andrew@quadrant.net>

Eradicate USE_GNOME=pkgconfig from security
While here:
- Trim headers
- Convert USE_GMAKE to USES=gmake
- Convert USE_GNOME=gnomehack to USES=pathfix
- Convert USE_PERL5 to USES=perl5

- Update to 2.9.5.3
- Don't build example dynamic preprocessor

- Do not remove directories not created by this port

Reported by:	pkg (DEVELOPER_MODE)

- Update to 2.9.4.6

- Update to 2.9.4.5

Feature safe:	yes

- Update to 2.9.4.1
- Migrate to new 'created by' header

Update PCRE to 8.32
Introduces the UTF-32 library pcre32
Bump PORTREVISION in dependent ports

- Update to 2.9.4

Feature safe:	yes

- As pulledpork/barnyard are required for most installations, depend on these by
default

Feature safe:	yes

- Update to 2.9.3.1

Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op

- Update to 2.9.3
- Convert to OptionsNG

- Add tip to pkg-message
- Do not bump PORTREVISION

- Fix NOPORTDOCS with u2boat

- Update to 2.9.2.3

- Unbreak SNORTSAM support
- Do not bump PORTREVISION for non-default OPTION

PR:             ports/166798
Submitted by:   scheidell@
Obtained from:  snortsam.net

- Resolve IPV6 port logic issue when IPV6 support is disabled.

Reported by:    Dean Freeman <wfreeman@sourcefire.com>
Feature safe:   yes

- Update to 2.9.2.2
- Mark SNORTSAM support as BROKEN due to build failures with 2.9.1.2 patch

Feature safe:   yes

- Update mirror URL on my ports

Feature safe:   yes

- Fix IPv6 OPTIONS support
- Do not bump PORTREVISION

Reported by:    scheidell@
Feature safe:   yes

- Do not install examples whenever NOPORTEXAMPLES is defined [1]
- Do not install duplicate sample config files
- Do not bump PORTREVISION

PR:             ports/165800 [1]
Submitted by:   Michael Scheidell <scheidell@FreeBSD.org> [1]
Feature safe:   yes

- Do not install examples whenever NOPORTEXAMPLES is defined [1]
- Do not install duplicate sample config files
- Do not bump PORTREVISION

PR:             ports/165800 [1]
Submitted by:   Michael Scheidell <scheidell@FreeBSD.org> [1]
Feature safe:   yes

Bump pcre library dependency due to 8.30 update

- Chase unixODBC shlib bump

- Fix issue when NOPORTDOCS and SNORTSAM are both defined

- Update to 2.9.2.1
- Fix issue when NOPORTDOCS is defined

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

- Cleanup snortsam integration

- Update to 2.9.2

- Bring back snortsam patches
- Do not bump PORTREVISION

PR:             ports/162740
Submitted by:   Michael Scheidell <scheidell@freebsd.org>
Feature safe:   yes

- Introduce multi-interface/instance support in rc script

PR:             ports/161286
Submitted by:   Michael Scheidell <scheidell@secnap.net>
Feature safe:   yes

- Revert previous commit

Feature safe:   yes

- Update hash to reflect file deployed to the official mirrors.  (source code
was diff'd--no code changes detected)
- Not bumping PORTREVISION

Feature safe:   yes

- Make SOURCEFIRE option enabled by default to ensure all rules function out of
the box.

Requested by:   Dean Freeman <wfreeman@sourcefire.com>

- Rename SRCFIRE OPTION to SOURCEFIRE

- Add additional MASTER_SITES

- Update to 2.9.1.2
- Add debugging OPTION to build snort with debug symbols, etc.
- Add sourcefire OPTION to build snort with --enable-sourcefire
- Take maintainership per private email conversation with current maintainer

PR:             ports/161876
Submitted by:   Ryan Steinmetz <zi@FreeBSD.org>
Approved by:    Dean Freeman <wfreeman@sourcefire.com> (maintainer)