mirror of
https://git.FreeBSD.org/ports.git
synced 2024-10-20 20:09:11 +00:00
13b2aeec3d
This is an upgrade of the security/bro port to the current stable version. The port is very complex, so it needs to be tested carefully to make sure that I'm not screwing anything up or using wrong conventions. Also, I'm willing to take over maintainership of the port if it's accepted into the tree. Please note, there are several files that need to be removed from the port and quite a few that need to be added. All these files are in FILESDIR. I have provided blank patches for the files that need to be removed, so the patches will create blank files. Added IS_INTERACTIVE to the port Left original freebsd header comments in it. Next time please use one big patch-file instead of lots of little ones :-) PR: ports/114999 Submitted by: Paul Schmehl <pauls@utdallas.edu>
17 lines
736 B
Plaintext
17 lines
736 B
Plaintext
Bro is an open-source, Unix-based Network Intrusion Detection System (NIDS)
|
|
that passively monitors network traffic and looks for suspicious activity.
|
|
Bro detects intrusions by first parsing network traffic to extract is
|
|
application-level semantics and then executing event-oriented analyzers that
|
|
compare the activity with patterns deemed troublesome. Its analysis includes
|
|
detection of specific attacks (including those defined by signatures, but
|
|
also those defined in terms of events) and unusual activities (e.g., certain
|
|
hosts connecting to certain services, or patterns of failed connection
|
|
attempts).
|
|
|
|
Bro is documented in the USENIX 1998 Security Conference proceedings.
|
|
|
|
-- Paul
|
|
pauls@utdallas.edu
|
|
|
|
WWW: http://bro-ids.org/
|