Port details |
- snort3 Lightweight network intrusion detection system
- 3.9.1.0_1,1 security
=6 3.8.1.0,1Version of this port present on the latest quarterly branch. - Maintainer: bofh@FreeBSD.org
 - Port Added: 2017-12-13 20:32:49
- Last Update: 2025-07-09 03:05:09
- Commit Hash: 0af0578
- People watching this port, also watch:: rust, samba419, openssl, samba416, suricata
- License: GPLv2
- WWW:
- https://www.snort.org/
- Description:
- Snort 3 is the next major release of the Snort utility:
Here are some key features of Snort 3:
Support multiple packet processing threads
Use a shared configuration and attribute table
Use a simple, scriptable configuration
Make key components pluggable
Autodetect services for portless configuration
Support sticky buffers in rules
Autogenerate reference documentation
Provide better cross platform support
Facilitate component testing
Additional features on the roadmap include:
Use a shared network map
Support pipelining of packet processing
Support hardware offload and data plane integration
Support proxy mode
Windows support
¦ ¦ ¦ ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- Conflicts:
- CONFLICTS:
- To install the port:
- cd /usr/ports/security/snort3/ && make install clean
- To add the package, run one of these commands:
- pkg install security/snort3
- pkg install snort3
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: snort3
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1751623929
SHA256 (snort3-snort3-3.9.1.0_GH0.tar.gz) = fc19f20cd34192eb78f28d7f128c79c5d0096733277f2b630a8cf892b10f33ce
SIZE (snort3-snort3-3.9.1.0_GH0.tar.gz) = 3501016
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- cmake : devel/cmake-core
- ninja : devel/ninja
- pkgconf>=1.3.0_1 : devel/pkgconf
- Library dependencies:
-
- libdaq.so : net/libdaq
- libdnet.so : net/libdnet
- libhwloc.so : devel/hwloc2
- libpcap.so : net/libpcap
- libpcre2-8.so : devel/pcre2
- libuuid.so : misc/libuuid
- libhs.so : devel/hyperscan
- libluajit-5.1.so : lang/luajit
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for snort3-3.9.1.0_1,1:
ADDRESSSANITIZER=off: Enable address sanitizer
DEBUG=off: Build with debugging support
DOCS=on: Build and/or install documentation
FLATBUFFERS=off: Enable flatbuffers support
HYPERSCAN=on: Enable high-performance regular expression lib
LARGEPCAP=off: Enable support for pcaps larger than 2 GB
LIBUNWIND=off: Print stack trace in case of crash
PIE=off: Enable PIE (Broken)
STATICDAQ=on: Link static DAQ modules
THREADSANITIZER=off: Enable thread sanitizer
TSC=off: Use timestamp counter register clock (x86 only)
===> Use 'make config' to modify these settings
- Options name:
- security_snort3
- USES:
- cmake compiler:c++14-lang cpe iconv localbase luajit pathfix pkgconfig shebangfix ssl
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
3.1.3.0_1,1 11 May 2021 19:49:07
    |
Yuri Victorovich (yuri)  |
devel/flatbuffers: Update 1.12.0 -> 2.0.0
Reported by: portscout |
3.1.3.0,1 01 May 2021 22:01:07
    |
Piotr Kubaj (pkubaj)  |
security/snort3: fix packaging on non-amd64 by making HYPERSCAN option available
everywhere
pkg-static: Unable to access file
/wrkdirs/usr/ports/security/snort3/work/stage/usr/local/%%HYPERSCAN%%include/snort/helpers/hyper_scratch_allocator.h:No
such file or directory
pkg-static: Unable to access file
/wrkdirs/usr/ports/security/snort3/work/stage/usr/local/%%HYPERSCAN%%include/snort/helpers/hyper_search.h:No
such file or directory |
3.1.3.0,1 20 Apr 2021 19:46:10
    |
Muhammad Moinur Rahman (bofh)  |
security/snort3: Update version 3.1.1.0=>3.1.3.0
- Mark BROKEN for 11.X and 12.X. Cannot detect flex from ports. There is
an ongoing issue at upstream.
https://github.com/snort3/snort3/issues/168
- Use OPTIONSNG for couple of OPTIONS
Reported by: adridg |
3.1.1.0,1 06 Apr 2021 14:31:07
    |
Mathieu Arnold (mat)  |
Remove # $FreeBSD$ from Makefiles. |
3.1.1.0,1 14 Feb 2021 17:43:05
  |
pkubaj  |
security/snort3: fix build on powerpc64le |
3.1.1.0,1 10 Feb 2021 23:21:42
  |
bofh  |
security/snort3: Upsate version 3.1.0.0=>3.1.1.0
Relnotes: https://github.com/snort3/snort3/releases/tag/3.1.1.0 |
3.1.0.0,1 26 Jan 2021 18:17:44
  |
bofh  |
security/snort3: Update version 3.0.3-6=>3.1.0.0
- Switch from devel/hwloc to devel/hwloc2 [1]
PR: 252527 [1]
Submitted by: jwb [1]
Relnotes: https://github.com/snort3/snort3/releases/tag/3.1.0.0 |
3.0.3.6,1 07 Jan 2021 16:32:15
  |
bofh  |
security/snort3: Update version 3.0.3-4=>3.0.3-6
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.3-6 |
3.0.3.4,1 29 Oct 2020 21:28:31
  |
bofh  |
security/snort3: Update version 3.0.3-3=>3.0.3-4
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.3-4 |
3.0.3.3,1 25 Oct 2020 23:40:01
  |
bofh  |
security/snort3: Update version 3.0.3-1=>3.0.3-3
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.3-3 |
3.0.3.1,1 30 Sep 2020 03:39:25
  |
bofh  |
security/snort3: Update version 3.0.2-5=>3.0.3-1
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.3-1 |
3.0.2.5,1 23 Sep 2020 17:35:50
  |
pkubaj  |
security/snort3: fix build on powerpc64
Use luajit-openresty on powerpc64 since luajit doesn't support powerpc64.
Still fails to build on elfv1, but builds on elfv2. |
3.0.2.5,1 02 Sep 2020 22:24:11
  |
bofh  |
security/snort3: Update version 3.0.2-4=>3.0.2-5
Reported by: ozkan@mersin.edu.tr
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.2-5 |
3.0.2.4,1 09 Aug 2020 10:13:39
  |
bofh  |
security/snort3: Update version 3.0.2-2=>3.0.2-4
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.2-4 |
3.0.2.2,1 22 Jul 2020 05:07:39
  |
bofh  |
security/snort3: Update version 3.0.2-1=>3.0.2-2
PR: 248148
Submitted by: dvl
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.2-2 |
3.0.2.1,1 11 Jul 2020 02:03:43
  |
bofh  |
security/snort3: Update version 3.0.1-5=>3.0.2-1
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.2-1 |
3.0.1.5,1 22 Jun 2020 17:35:45
  |
bofh  |
security/snort3: Update version 3.0.1-4=>3.0.1-5
Relnotes: https://github.com/snort3/snort3/releases |
3.0.1.4,1 30 May 2020 00:10:06
  |
bofh  |
security/snort3: Update version 3.0.1-2=>3.0.1-4
Relnotes: https://github.com/snort3/snort3/releases |
3.0.1.2,1 29 Apr 2020 20:18:00
  |
bofh  |
security/snort3: Update version 3.0.0-270=>3.0.1-2
Reported by: dvl
Relnotes: https://github.com/snort3/snort3/releases/tag/3.0.1-2 |
3.0.0.270,1 04 Apr 2020 12:44:03
  |
bofh  |
security/snort3: UNBREAK
- Update version 3.0.0-258=>3.0.0-270
- Remove BUILD_DEPENDS and RUN_DEPENDS into LIB_DEPENDS
- Change compiler to use c++14-lang
- Make HYPERSCAN default for amd64
- Remove DEBUG_DESC and DOCS_DESC for the defaults DESC
net/libdaq: Update version 3.0.0-alpha3=>3.0.0-alpha4
Submitted by: dvl
MFH: 2020Q2 (buildtime fix)
Differential Revision: https://reviews.freebsd.org/D24263 |
3.0.0.258,1 26 Sep 2019 17:42:25
  |
antoine  |
Mark BROKEN: fails to build
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:223:28:
error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_ADDRESSES'
if ((raw.pkth->flags & DAQ_PKT_FLAG_REAL_ADDRESSES) and codec.ip_layer_cnt
== 1)
^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:227:33:
error: no member named 'real_sIP' in '_daq_pkt_hdr'
real_src.set(&raw.pkth->real_sIP,
~~~~~~~~ ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:228:33:
error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_SIP_V6'
((raw.pkth->flags & DAQ_PKT_FLAG_REAL_SIP_V6) ? AF_INET6 :
AF_INET));
^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:229:33:
error: no member named 'real_dIP' in '_daq_pkt_hdr'
real_dst.set(&raw.pkth->real_dIP,
~~~~~~~~ ^
/wrkdirs/usr/ports/security/snort3/work/snort3-3.0.0-258/src/codecs/ip/cd_ipv4.cc:230:33:
error: use of undeclared identifier 'DAQ_PKT_FLAG_REAL_DIP_V6'
((raw.pkth->flags & DAQ_PKT_FLAG_REAL_DIP_V6) ? AF_INET6 :
AF_INET));
^
Reported by: pkg-fallout |
3.0.0.258,1 31 Jul 2019 19:27:54
  |
bofh  |
security/snort3: Update version 3.0.0-255=>3.0.0-258
- Change RUN_DEPENDS to libdaq-3*
- Add USES=localbase
- Add FLATBUFFERS option
Reported by: ozkan.kirik@gmail.com |
3.0.0.255_1,1 26 Jul 2019 20:46:57
  |
gerald  |
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330 |
3.0.0.255,1 08 May 2019 11:38:42
  |
bofh  |
security/snort3: Update version 3.0.0-254=>3.0.0-255 |
3.0.0.254,1 27 Apr 2019 17:31:39
  |
bofh  |
security/snort3: Update version 3.0.0_253=>3.0.0-254 |
3.0.0.253,1 19 Apr 2019 22:58:35
  |
bofh  |
security/snort3: Update version 3.0.0-252=>3.0.0_253 |
3.0.0.252,1 12 Apr 2019 20:50:52
  |
bofh  |
security/snort3: Update version 3.0.0-251=>3.0.0-252 |
3.0.0.251,1 04 Apr 2019 23:10:44
  |
bofh  |
security/snort3: Update version 3.0.0-250=>3.0.0-251 |
3.0.0.250,1 21 Feb 2019 00:07:29
  |
bofh  |
security/snort3: Update version 3.0.0-a4.243=>3.0.0-250
- Take MAINTAINERSHIP |
3.0.0.a4.243_3 12 Dec 2018 01:35:36
  |
gerald  |
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590 |
3.0.0.a4.243_2 02 Oct 2018 19:21:50
  |
feld  |
Reset maintainer for misc ports I do not interact with anymore |
3.0.0.a4.243_2 30 Aug 2018 04:05:08
  |
danfe  |
Remove redundant DOCS, NLS, EXAMPLES, and IPV6 from OPTIONS_DEFAULT as they
are put there by the framework (see line 200 of Mk/bsd.options.mk), except
for `finance/quantlib' which makes very unorthodoxal usage of port options. |
3.0.0.a4.243_2 29 Jul 2018 22:18:46
  |
gerald  |
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542 |
3.0.0.a4.243_1 07 May 2018 22:29:46
  |
jbeich  |
Drop FreeBSD 10.3 support
Reviewed by: yuri (SoPlex), sunpoet (nghttp2), cpm (chromium), brooks (llvm*)
Approved by: portmgr (rene)
Differential Revision: https://reviews.freebsd.org/D15238 |
3.0.0.a4.243_1 20 Mar 2018 15:33:09
  |
dvl  |
Unbreak and update to 3.0.0-a4.243
Submitted by: Daniel Engberg
Differential Revision: https://reviews.freebsd.org/D14582 |
3.0.0.a4.242_1 18 Feb 2018 09:34:58
  |
antoine  |
Mark BROKEN: fails to package
Reported by: pkg-fallout
MFH: 2018Q1 |
3.0.0.a4.242_1 01 Feb 2018 22:52:29
  |
feld  |
security/snort3: Fix build with FreeBSD 10.3
Reference: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210890
MFH: 2018Q1 |
3.0.0.a4.242_1 01 Feb 2018 21:57:09
  |
feld  |
security/snort3: Bump PORTREVISION
Bump for sanity
Add missing DOCS to OPTIONS_DEFINE |
3.0.0.a4.242 01 Feb 2018 21:53:19
  |
feld  |
security/snort3: Update to Alpha BUILD_242
- Use cmake now as autotools will be going away
- Fix segfaulting which was actually caused by devel/hwloc |
3.0.0.a4.242 30 Jan 2018 15:46:52
  |
mat  |
Unbreak last commit.
Pointy hat: dvl
Sponsored by: Absolight |
3.0.0.a4.242 30 Jan 2018 14:39:20
  |
dvl  |
Upgrade to build 242
Approved by: feld (maintainer) |
3.0.0.a4 13 Dec 2017 20:32:39
  |
feld  |
Snort 3 is the next major release of the Snort utility:
Here are some key features of Snort 3:
Support multiple packet processing threads
Use a shared configuration and attribute table
Use a simple, scriptable configuration
Make key components pluggable
Autodetect services for portless configuration
Support sticky buffers in rules
Autogenerate reference documentation
Provide better cross platform support
Facilitate component testing
Additional features on the roadmap include:
Use a shared network map
Support pipelining of packet processing
Support hardware offload and data plane integration
Support proxy mode
Windows support
WWW: http://www.snort.org/ |