SPELL=snort VERSION=2.8.6 SECURITY_PATCH=1 SOURCE=$SPELL-$VERSION.tar.gz SOURCE3=$SOURCE.sig SOURCE2=Community-Rules-2.4.tar.gz SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION SOURCE_URL[0]=http://dl.snort.org/snort-current/$SOURCE SOURCE3_URL[0]=${SOURCE_URL[0]}.sig SOURCE2_URL[0]=http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/$SOURCE2 SOURCE_GPG=CA87AD28.gpg:$SOURCE3:UPSTREAM_KEY SOURCE3_IGNORE=signature SOURCE2_IGNORE=volatile WEB_SITE=http://www.snort.org/ ENTERED=20011022 LICENSE[0]=GPL LICENSE[1]=GPL KEYWORDS="security" SHORT="Lightweight network intrustion detection program." cat << EOF Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Snort uses a flexible rule based language to describe traffic that it should collect or pass, and a modular detection engine. Snort has a real-time alerting capability, with alert mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients using Samba's smbclient. EOF