Here is an update to 2.4.3 similar to what others have posted but without any rules. The licensing on the rules has changed and and we can't bundle the GPLed community rules because of the distfile constantly changing. I think it's kinda pointless to bundle rules anyway since you will almost always want to get the latest ones after install. I don't know if I like the exact wording in MESSAGE, but you get the idea.
Also apparently snort-2.3.3 is broken on sparc64 so I'm guessing this one is too. Brad was looking at it. David Index: net/snort/Makefile =================================================================== RCS file: /cvs/ports/net/snort/Makefile,v retrieving revision 1.38 diff -u -p -r1.38 Makefile --- net/snort/Makefile 4 Jan 2006 04:15:18 -0000 1.38 +++ net/snort/Makefile 4 Jan 2006 06:10:56 -0000 @@ -2,8 +2,7 @@ COMMENT= "highly flexible sniffer/NIDS" -DISTNAME= snort-2.3.3 -PKGNAME= ${DISTNAME}p1 +DISTNAME= snort-2.4.3 CATEGORIES= net security MASTER_SITES= ${HOMEPAGE}/dl/current/ @@ -59,6 +58,5 @@ post-install: ${PREFIX}/share/examples/snort ${INSTALL_DATA} ${WRKSRC}/etc/reference.config \ ${PREFIX}/share/examples/snort - ${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${PREFIX}/share/examples/snort .include <bsd.port.mk> Index: net/snort/distinfo =================================================================== RCS file: /cvs/ports/net/snort/distinfo,v retrieving revision 1.9 diff -u -p -r1.9 distinfo --- net/snort/distinfo 29 Jun 2005 06:01:38 -0000 1.9 +++ net/snort/distinfo 4 Jan 2006 06:10:56 -0000 @@ -1,4 +1,4 @@ -MD5 (snort-2.3.3.tar.gz) = 06bf140893e7cb120aaa9372d10a0100 -RMD160 (snort-2.3.3.tar.gz) = 6bb635df1c62d293d8dd4b2fec55cfa486916908 -SHA1 (snort-2.3.3.tar.gz) = 6d05c995f0eef5adde9d63157436c0088747d435 -SIZE (snort-2.3.3.tar.gz) = 2631270 +MD5 (snort-2.4.3.tar.gz) = 5c3c8c69f2459bbe0c1f2057966c88a7 +RMD160 (snort-2.4.3.tar.gz) = 1cba0a9d843da1cfa8c8dbaae5b18a16574cb7d2 +SHA1 (snort-2.4.3.tar.gz) = 5b38b558b73252c048f23dba2499bcd902ebdd9e +SIZE (snort-2.4.3.tar.gz) = 2733590 Index: net/snort/patches/patch-configure =================================================================== RCS file: /cvs/ports/net/snort/patches/patch-configure,v retrieving revision 1.1 diff -u -p -r1.1 patch-configure --- net/snort/patches/patch-configure 24 May 2005 04:39:05 -0000 1.1 +++ net/snort/patches/patch-configure 4 Jan 2006 06:10:56 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-configure,v 1.1 2005/05/24 04:39:05 mjc Exp $ ---- configure.orig Wed Mar 31 13:31:57 2004 -+++ configure Mon May 23 18:11:16 2005 -@@ -6575,20 +6575,20 @@ fi; +--- configure.orig Mon Oct 17 08:50:23 2005 ++++ configure Tue Jan 3 23:41:30 2006 +@@ -7884,20 +7884,20 @@ fi # Check whether --enable-flexresp or --disable-flexresp was given. if test "${enable_flexresp+set}" = set; then enableval="$enable_flexresp" @@ -27,7 +27,7 @@ $OpenBSD: patch-configure,v 1.1 2005/05/ { echo "$as_me:$LINENO: WARNING: are using a precompiled package please notify the" >&5 echo "$as_me: WARNING: are using a precompiled package please notify the" >&2;} { echo "$as_me:$LINENO: WARNING: maintainer." >&5 -@@ -6732,7 +6732,7 @@ echo $ECHO_N "checking for libnet versio +@@ -8069,7 +8069,7 @@ echo $ECHO_N "checking for libnet versio libnet_dir="/usr/include /usr/local/include /sw/include" fi else Index: net/snort/patches/patch-src_output-plugins_spo_database_c =================================================================== RCS file: net/snort/patches/patch-src_output-plugins_spo_database_c diff -N net/snort/patches/patch-src_output-plugins_spo_database_c --- net/snort/patches/patch-src_output-plugins_spo_database_c 4 Jan 2006 04:15:19 -0000 1.1 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,28 +0,0 @@ -$OpenBSD: patch-src_output-plugins_spo_database_c,v 1.1 2006/01/04 04:15:19 david Exp $ ---- src/output-plugins/spo_database.c.orig Mon Sep 13 12:44:49 2004 -+++ src/output-plugins/spo_database.c Tue Jan 3 16:26:09 2006 -@@ -1910,9 +1910,23 @@ int CheckDBVersion(DatabaseData * data) - else - #endif - { -- snprintf(select0, MAX_QUERY_LENGTH, -+#if defined(ENABLE_MYSQL) -+ if (data->shared->dbtype_id == DB_MYSQL) -+ { -+ /* "schema" is a keyword in MYSQL, so use `schema` -+ * to indicate that we are referring to the table -+ */ -+ snprintf(select0, MAX_QUERY_LENGTH, - "SELECT vseq " -+ "FROM `schema`"); -+ } -+ else -+#endif -+ { -+ snprintf(select0, MAX_QUERY_LENGTH, -+ "SELECT vseq " - "FROM schema"); -+ } - } - - schema_version = Select(select0,data); Index: net/snort/pkg/MESSAGE =================================================================== RCS file: /cvs/ports/net/snort/pkg/MESSAGE,v retrieving revision 1.2 diff -u -p -r1.2 MESSAGE --- net/snort/pkg/MESSAGE 9 Mar 2001 20:24:53 -0000 1.2 +++ net/snort/pkg/MESSAGE 4 Jan 2006 06:10:56 -0000 @@ -1 +1,2 @@ -The Snort rule examples have been installed in ${PREFIX}/share/examples/snort +A set of rules is needed for Snort to be useful. The oinkmaster port can +be used to download the latest rules from several different sources. Index: net/snort/pkg/PLIST =================================================================== RCS file: /cvs/ports/net/snort/pkg/PLIST,v retrieving revision 1.13 diff -u -p -r1.13 PLIST --- net/snort/pkg/PLIST 15 Sep 2004 18:17:46 -0000 1.13 +++ net/snort/pkg/PLIST 4 Jan 2006 06:10:56 -0000 @@ -2,57 +2,9 @@ bin/snort @man man/man8/snort.8 share/examples/snort/ -share/examples/snort/attack-responses.rules -share/examples/snort/backdoor.rules -share/examples/snort/bad-traffic.rules -share/examples/snort/chat.rules share/examples/snort/classification.config -share/examples/snort/ddos.rules -share/examples/snort/deleted.rules -share/examples/snort/dns.rules -share/examples/snort/dos.rules -share/examples/snort/experimental.rules -share/examples/snort/exploit.rules -share/examples/snort/finger.rules -share/examples/snort/ftp.rules -share/examples/snort/icmp-info.rules -share/examples/snort/icmp.rules -share/examples/snort/imap.rules -share/examples/snort/info.rules -share/examples/snort/local.rules -share/examples/snort/misc.rules -share/examples/snort/multimedia.rules -share/examples/snort/mysql.rules -share/examples/snort/netbios.rules -share/examples/snort/nntp.rules -share/examples/snort/oracle.rules -share/examples/snort/other-ids.rules -share/examples/snort/p2p.rules -share/examples/snort/policy.rules -share/examples/snort/pop2.rules -share/examples/snort/pop3.rules -share/examples/snort/porn.rules share/examples/snort/reference.config -share/examples/snort/rpc.rules -share/examples/snort/rservices.rules -share/examples/snort/scan.rules -share/examples/snort/shellcode.rules share/examples/snort/sid-msg.map -share/examples/snort/smtp.rules -share/examples/snort/snmp.rules share/examples/snort/snort.conf -share/examples/snort/sql.rules -share/examples/snort/telnet.rules -share/examples/snort/tftp.rules share/examples/snort/threshold.conf share/examples/snort/unicode.map -share/examples/snort/virus.rules -share/examples/snort/web-attacks.rules -share/examples/snort/web-cgi.rules -share/examples/snort/web-client.rules -share/examples/snort/web-coldfusion.rules -share/examples/snort/web-frontpage.rules -share/examples/snort/web-iis.rules -share/examples/snort/web-misc.rules -share/examples/snort/web-php.rules -share/examples/snort/x11.rules