Hello, Update for Suricata to 8.0.6:
https://github.com/OISF/suricata/releases/tag/suricata-8.0.6 OK? Comments? Cheers.- Index: Makefile =================================================================== RCS file: /cvs/ports/security/suricata/Makefile,v retrieving revision 1.75 diff -u -p -r1.75 Makefile --- Makefile 21 Aug 2025 15:55:08 -0000 1.75 +++ Makefile 28 Aug 2026 15:33:17 -0000 @@ -3,13 +3,11 @@ NOT_FOR_ARCHS = powerpc64 riscv64 COMMENT = high performance network IDS, IPS and security monitoring -SURICATA_V = 7.0.7 -SUPDATE_V = 1.3.3 +SURICATA_V = 8.0.6 +SUPDATE_V = 1.3.6 DISTNAME = suricata-${SURICATA_V} CATEGORIES = security -SHARED_LIBS += htp 0.1 # 2.0 -REVISION = 0 HOMEPAGE = https://suricata.io/ Index: distinfo =================================================================== RCS file: /cvs/ports/security/suricata/distinfo,v retrieving revision 1.26 diff -u -p -r1.26 distinfo --- distinfo 9 Oct 2024 13:54:21 -0000 1.26 +++ distinfo 28 Aug 2026 15:33:17 -0000 @@ -1,2 +1,2 @@ -SHA256 (suricata-7.0.7.tar.gz) = JtCjYZTVMID8iwm5mbK1qDxASfQK0H72rmnHIlpyi4Y= -SIZE (suricata-7.0.7.tar.gz) = 23652958 +SHA256 (suricata-8.0.6.tar.gz) = smRYTt2ko7K0YgUAmcfFT081rAxxZOQQhL6bIWwJD4w= +SIZE (suricata-8.0.6.tar.gz) = 44411503 Index: patches/patch-configure_ac =================================================================== RCS file: /cvs/ports/security/suricata/patches/patch-configure_ac,v retrieving revision 1.15 diff -u -p -r1.15 patch-configure_ac --- patches/patch-configure_ac 9 Oct 2024 13:54:21 -0000 1.15 +++ patches/patch-configure_ac 28 Aug 2026 15:33:17 -0000 @@ -3,7 +3,7 @@ To remove the pid file, its directory mu Index: configure.ac --- configure.ac.orig +++ configure.ac -@@ -2599,7 +2599,7 @@ if test "$WINDOWS_PATH" = "yes"; then +@@ -2519,7 +2519,7 @@ if test "$WINDOWS_PATH" = "yes"; then fi else EXPAND_VARIABLE(localstatedir, e_logdir, "/log/suricata/") Index: patches/patch-doc_userguide_conf_py =================================================================== RCS file: patches/patch-doc_userguide_conf_py diff -N patches/patch-doc_userguide_conf_py --- patches/patch-doc_userguide_conf_py 22 Aug 2025 07:47:23 -0000 1.4 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,17 +0,0 @@ -WARNING: Calling get_html_theme_path is deprecated. If you are calling it to define html_theme_path, you are safe to remove that code. -[...] -build finished with problems, 1 warning (with warnings treated as errors). - -https://github.com/OISF/suricata/pull/13742 - -Index: doc/userguide/conf.py ---- doc/userguide/conf.py.orig -+++ doc/userguide/conf.py -@@ -138,7 +138,6 @@ if not on_rtd: - try: - import sphinx_rtd_theme - html_theme = 'sphinx_rtd_theme' -- html_theme_path = [sphinx_rtd_theme.get_html_theme_path()] - except: - html_theme = 'default' - else: Index: patches/patch-src_suricata_c =================================================================== RCS file: /cvs/ports/security/suricata/patches/patch-src_suricata_c,v retrieving revision 1.16 diff -u -p -r1.16 patch-src_suricata_c --- patches/patch-src_suricata_c 2 Jul 2024 14:31:58 -0000 1.16 +++ patches/patch-src_suricata_c 28 Aug 2026 15:33:17 -0000 @@ -4,7 +4,7 @@ Suricata uses libcap-ng on Linux and run Index: src/suricata.c --- src/suricata.c.orig +++ src/suricata.c -@@ -1609,7 +1609,7 @@ static TmEcode ParseCommandLine(int argc, char** argv, +@@ -1686,7 +1686,7 @@ TmEcode SCParseCommandLine(int argc, char **argv) return TM_ECODE_FAILED; #endif /* UNITTESTS */ } else if (strcmp((long_opts[option_index]).name, "user") == 0) { @@ -13,8 +13,8 @@ Index: src/suricata.c SCLogError("libcap-ng is required to" " drop privileges, but it was not compiled into Suricata."); return TM_ECODE_FAILED; -@@ -1618,7 +1618,7 @@ static TmEcode ParseCommandLine(int argc, char** argv, - suri->do_setuid = TRUE; +@@ -1695,7 +1695,7 @@ TmEcode SCParseCommandLine(int argc, char **argv) + suri->do_setuid = true; #endif /* HAVE_LIBCAP_NG */ } else if (strcmp((long_opts[option_index]).name, "group") == 0) { -#ifndef HAVE_LIBCAP_NG @@ -22,11 +22,3 @@ Index: src/suricata.c SCLogError("libcap-ng is required to" " drop privileges, but it was not compiled into Suricata."); return TM_ECODE_FAILED; -@@ -3055,6 +3055,7 @@ int SuricataMain(int argc, char **argv) - SystemHugepageSnapshotDestroy(prerun_snap); - SystemHugepageSnapshotDestroy(postrun_snap); - } -+ SCSetUserID(suricata.userid, suricata.groupid); - SCPledge(); - SuricataMainLoop(&suricata); - Index: patches/patch-src_util-privs_c =================================================================== RCS file: /cvs/ports/security/suricata/patches/patch-src_util-privs_c,v retrieving revision 1.7 diff -u -p -r1.7 patch-src_util-privs_c --- patches/patch-src_util-privs_c 18 Mar 2024 17:46:37 -0000 1.7 +++ patches/patch-src_util-privs_c 28 Aug 2026 15:33:17 -0000 @@ -4,7 +4,7 @@ Suricata uses libcap-ng on Linux and run Index: src/util-privs.c --- src/util-privs.c.orig +++ src/util-privs.c -@@ -244,6 +244,27 @@ void SCGetGroupID(const char *group_name, uint32_t *gi +@@ -237,6 +237,27 @@ void SCGetGroupID(const char *group_name, uint32_t *gi *gid = grpid; } Index: patches/patch-suricata_yaml_in =================================================================== RCS file: /cvs/ports/security/suricata/patches/patch-suricata_yaml_in,v retrieving revision 1.23 diff -u -p -r1.23 patch-suricata_yaml_in --- patches/patch-suricata_yaml_in 9 Oct 2024 13:54:21 -0000 1.23 +++ patches/patch-suricata_yaml_in 28 Aug 2026 15:33:17 -0000 @@ -8,7 +8,7 @@ Index: suricata.yaml.in --- suricata.yaml.in.orig +++ suricata.yaml.in -@@ -58,7 +58,7 @@ vars: +@@ -59,7 +59,7 @@ vars: # The default logging directory. Any log or output file will be # placed here if it's not specified with a full path name. This can be # overridden with the -l command line parameter. @@ -17,7 +17,7 @@ Index: suricata.yaml.in # Global stats configuration stats: -@@ -84,14 +84,16 @@ outputs: +@@ -91,14 +91,16 @@ outputs: - fast: enabled: yes filename: fast.log @@ -35,23 +35,7 @@ Index: suricata.yaml.in # Enable for multi-threaded eve.json output; output files are amended with # an identifier, e.g., eve.9.json #threaded: false -@@ -341,6 +343,7 @@ outputs: - - http-log: - enabled: no - filename: http.log -+ filemode: 664 - append: yes - #extended: yes # enable this for extended logging information - #custom: yes # enable the custom logging format (defined by customformat) -@@ -351,6 +354,7 @@ outputs: - - tls-log: - enabled: no # Log TLS connections. - filename: tls.log # File to store TLS logs. -+ filemode: 664 - append: yes - #extended: yes # Log extended information like fingerprint - #custom: yes # enabled the custom logging format (defined by customformat) -@@ -398,6 +402,7 @@ outputs: +@@ -424,6 +426,7 @@ outputs: - pcap-log: enabled: no filename: log.pcap @@ -59,7 +43,7 @@ Index: suricata.yaml.in # File size limit. Can be specified in kb, mb, gb. Just a number # is parsed as bytes. -@@ -436,6 +441,7 @@ outputs: +@@ -466,6 +469,7 @@ outputs: - alert-debug: enabled: no filename: alert-debug.log @@ -67,7 +51,7 @@ Index: suricata.yaml.in append: yes #filetype: regular # 'regular', 'unix_stream' or 'unix_dgram' -@@ -443,6 +449,7 @@ outputs: +@@ -473,6 +477,7 @@ outputs: - stats: enabled: yes filename: stats.log @@ -75,7 +59,7 @@ Index: suricata.yaml.in append: yes # append to file (yes) or overwrite it (no) totals: yes # stats for all threads merged together threads: no # per thread stats -@@ -536,6 +543,7 @@ outputs: +@@ -556,6 +561,7 @@ outputs: enabled: no type: file filename: tcp-data.log @@ -83,7 +67,7 @@ Index: suricata.yaml.in # Log HTTP body data after normalization, de-chunking and unzipping. # Two types: file or dir. -@@ -549,6 +557,7 @@ outputs: +@@ -569,6 +575,7 @@ outputs: enabled: no type: file filename: http-data.log @@ -91,7 +75,7 @@ Index: suricata.yaml.in # Lua Output Support - execute lua script to generate alert and event # output. -@@ -1206,9 +1215,9 @@ datasets: +@@ -1325,9 +1332,9 @@ datasets: ## # Run Suricata with a specific user-id and group-id: @@ -104,7 +88,7 @@ Index: suricata.yaml.in security: # if true, prevents process creation from Suricata by calling -@@ -1219,13 +1228,11 @@ security: +@@ -1338,13 +1345,11 @@ security: enabled: no directories: #write: @@ -117,8 +101,8 @@ Index: suricata.yaml.in - - @e_sysconfdir@ lua: - # Allow Lua rules. Disabled by default. -@@ -1238,7 +1245,7 @@ security: + # Allow Lua rules. Enabled by default. +@@ -1357,7 +1362,7 @@ security: # Default location of the pid file. The pid file is only used in # daemon mode (start Suricata with -D). If not running in daemon mode # the --pidfile command line option must be used to create a pid file. @@ -127,7 +111,7 @@ Index: suricata.yaml.in # Daemon working directory # Suricata will change directory to this one if provided -@@ -1306,8 +1313,7 @@ unix-command: +@@ -1425,8 +1430,7 @@ unix-command: #filename: custom.socket # Magic file. The extension .mgc is added to the value here. @@ -137,7 +121,7 @@ Index: suricata.yaml.in # GeoIP2 database file. Specify path and filename of GeoIP2 database # if using rules with "geoip" rule option. -@@ -1345,8 +1351,8 @@ legacy: +@@ -1464,8 +1468,8 @@ legacy: exception-policy: auto # IP Reputation @@ -148,7 +132,7 @@ Index: suricata.yaml.in #reputation-files: # - reputation.list -@@ -1828,7 +1834,7 @@ profiling: +@@ -1991,7 +1995,7 @@ profiling: limit: 10 # output to json @@ -157,7 +141,7 @@ Index: suricata.yaml.in # per keyword profiling keywords: -@@ -2158,22 +2164,44 @@ napatech: +@@ -2321,22 +2325,44 @@ napatech: # hashmode: hash5tuplesorted @@ -207,4 +191,4 @@ Index: suricata.yaml.in +# threshold-file: ${SYSCONFDIR}/suricata/threshold.config ## - ## Include other configs + ## Suricata as a Firewall options (experimental) Index: pkg/PLIST =================================================================== RCS file: /cvs/ports/security/suricata/pkg/PLIST,v retrieving revision 1.29 diff -u -p -r1.29 PLIST --- pkg/PLIST 23 Oct 2025 13:20:20 -0000 1.29 +++ pkg/PLIST 28 Aug 2026 15:33:17 -0000 @@ -5,32 +5,8 @@ @rcscript ${RCDIR}/suricata @bin bin/suricata bin/suricata-update -bin/suricatactl -bin/suricatasc -include/htp/ -include/htp/bstr.h -include/htp/bstr_builder.h -include/htp/htp.h -include/htp/htp_base64.h -include/htp/htp_config.h -include/htp/htp_connection_parser.h -include/htp/htp_core.h -include/htp/htp_decompressors.h -include/htp/htp_hooks.h -include/htp/htp_list.h -include/htp/htp_multipart.h -include/htp/htp_table.h -include/htp/htp_transaction.h -include/htp/htp_urlencoded.h -include/htp/htp_utf8_decoder.h -include/htp/htp_version.h -include/htp/lzma/ -include/htp/lzma/7zTypes.h -include/htp/lzma/LzmaDec.h -@static-lib lib/libhtp.a -lib/libhtp.la -@lib lib/libhtp.so.${LIBhtp_VERSION} -lib/pkgconfig/htp.pc +@bin bin/suricatactl +@bin bin/suricatasc lib/suricata/ lib/suricata/python/ lib/suricata/python/suricata/ @@ -39,41 +15,10 @@ lib/suricata/python/suricata/${MODPY_PYC lib/suricata/python/suricata/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} lib/suricata/python/suricata/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc lib/suricata/python/suricata/config/ -lib/suricata/python/suricata/config/__init__.py lib/suricata/python/suricata/config/${MODPY_PYCACHE}/ -lib/suricata/python/suricata/config/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/config/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc lib/suricata/python/suricata/config/${MODPY_PYCACHE}defaults.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} lib/suricata/python/suricata/config/${MODPY_PYCACHE}defaults.${MODPY_PYC_MAGIC_TAG}pyc lib/suricata/python/suricata/config/defaults.py -lib/suricata/python/suricata/ctl/ -lib/suricata/python/suricata/ctl/__init__.py -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}/ -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}filestore.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}filestore.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}loghandler.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}loghandler.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}main.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}main.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}test_filestore.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}test_filestore.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/ctl/filestore.py -lib/suricata/python/suricata/ctl/loghandler.py -lib/suricata/python/suricata/ctl/main.py -lib/suricata/python/suricata/ctl/test_filestore.py -lib/suricata/python/suricata/sc/ -lib/suricata/python/suricata/sc/__init__.py -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}/ -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}specs.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}specs.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}suricatasc.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricata/sc/${MODPY_PYCACHE}suricatasc.${MODPY_PYC_MAGIC_TAG}pyc -lib/suricata/python/suricata/sc/specs.py -lib/suricata/python/suricata/sc/suricatasc.py lib/suricata/python/suricata/update/ lib/suricata/python/suricata/update/__init__.py lib/suricata/python/suricata/update/${MODPY_PYCACHE}/ @@ -191,11 +136,6 @@ lib/suricata/python/suricata/update/rule lib/suricata/python/suricata/update/sources.py lib/suricata/python/suricata/update/util.py lib/suricata/python/suricata/update/version.py -lib/suricata/python/suricatasc/ -lib/suricata/python/suricatasc/__init__.py -lib/suricata/python/suricatasc/${MODPY_PYCACHE}/ -lib/suricata/python/suricatasc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION} -lib/suricata/python/suricatasc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc @man man/man1/suricata.1 @man man/man1/suricatactl-filestore.1 @man man/man1/suricatactl.1 @@ -216,6 +156,8 @@ share/suricata/rules/ @sample ${SYSCONFDIR}/suricata/rules/ share/suricata/rules/app-layer-events.rules @sample ${SYSCONFDIR}/suricata/rules/app-layer-events.rules +share/suricata/rules/bittorrent-events.rules +@sample ${SYSCONFDIR}/suricata/rules/bittorrent-events.rules share/suricata/rules/decoder-events.rules @sample ${SYSCONFDIR}/suricata/rules/decoder-events.rules share/suricata/rules/dhcp-events.rules @@ -224,6 +166,8 @@ share/suricata/rules/dnp3-events.rules @sample ${SYSCONFDIR}/suricata/rules/dnp3-events.rules share/suricata/rules/dns-events.rules @sample ${SYSCONFDIR}/suricata/rules/dns-events.rules +share/suricata/rules/enip-events.rules +@sample ${SYSCONFDIR}/suricata/rules/enip-events.rules share/suricata/rules/files.rules @sample ${SYSCONFDIR}/suricata/rules/files.rules share/suricata/rules/ftp-events.rules @@ -236,6 +180,10 @@ share/suricata/rules/ipsec-events.rules @sample ${SYSCONFDIR}/suricata/rules/ipsec-events.rules share/suricata/rules/kerberos-events.rules @sample ${SYSCONFDIR}/suricata/rules/kerberos-events.rules +share/suricata/rules/ldap-events.rules +@sample ${SYSCONFDIR}/suricata/rules/ldap-events.rules +share/suricata/rules/mdns-events.rules +@sample ${SYSCONFDIR}/suricata/rules/mdns-events.rules share/suricata/rules/modbus-events.rules @sample ${SYSCONFDIR}/suricata/rules/modbus-events.rules share/suricata/rules/mqtt-events.rules @@ -244,6 +192,10 @@ share/suricata/rules/nfs-events.rules @sample ${SYSCONFDIR}/suricata/rules/nfs-events.rules share/suricata/rules/ntp-events.rules @sample ${SYSCONFDIR}/suricata/rules/ntp-events.rules +share/suricata/rules/pgsql-events.rules +@sample ${SYSCONFDIR}/suricata/rules/pgsql-events.rules +share/suricata/rules/pop3-events.rules +@sample ${SYSCONFDIR}/suricata/rules/pop3-events.rules share/suricata/rules/quic-events.rules @sample ${SYSCONFDIR}/suricata/rules/quic-events.rules share/suricata/rules/rfb-events.rules @@ -252,12 +204,16 @@ share/suricata/rules/smb-events.rules @sample ${SYSCONFDIR}/suricata/rules/smb-events.rules share/suricata/rules/smtp-events.rules @sample ${SYSCONFDIR}/suricata/rules/smtp-events.rules +share/suricata/rules/snmp-events.rules +@sample ${SYSCONFDIR}/suricata/rules/snmp-events.rules share/suricata/rules/ssh-events.rules @sample ${SYSCONFDIR}/suricata/rules/ssh-events.rules share/suricata/rules/stream-events.rules @sample ${SYSCONFDIR}/suricata/rules/stream-events.rules share/suricata/rules/tls-events.rules @sample ${SYSCONFDIR}/suricata/rules/tls-events.rules +share/suricata/rules/websocket-events.rules +@sample ${SYSCONFDIR}/suricata/rules/websocket-events.rules @owner _suricata @group _suricata @sample ${LOCALSTATEDIR}/suricata/
