Download raw body.
UPDATE: Suricata-8.0.6
Hello,
Update for Suricata to 8.0.6:
https://github.com/OISF/suricata/releases/tag/suricata-8.0.6
OK? Comments?
Cheers.-
Index: Makefile
===================================================================
RCS file: /cvs/ports/security/suricata/Makefile,v
retrieving revision 1.75
diff -u -p -r1.75 Makefile
--- Makefile 21 Aug 2025 15:55:08 -0000 1.75
+++ Makefile 28 Aug 2026 15:33:17 -0000
@@ -3,13 +3,11 @@ NOT_FOR_ARCHS = powerpc64 riscv64
COMMENT = high performance network IDS, IPS and security monitoring
-SURICATA_V = 7.0.7
-SUPDATE_V = 1.3.3
+SURICATA_V = 8.0.6
+SUPDATE_V = 1.3.6
DISTNAME = suricata-${SURICATA_V}
CATEGORIES = security
-SHARED_LIBS += htp 0.1 # 2.0
-REVISION = 0
HOMEPAGE = https://suricata.io/
Index: distinfo
===================================================================
RCS file: /cvs/ports/security/suricata/distinfo,v
retrieving revision 1.26
diff -u -p -r1.26 distinfo
--- distinfo 9 Oct 2024 13:54:21 -0000 1.26
+++ distinfo 28 Aug 2026 15:33:17 -0000
@@ -1,2 +1,2 @@
-SHA256 (suricata-7.0.7.tar.gz) = JtCjYZTVMID8iwm5mbK1qDxASfQK0H72rmnHIlpyi4Y=
-SIZE (suricata-7.0.7.tar.gz) = 23652958
+SHA256 (suricata-8.0.6.tar.gz) = smRYTt2ko7K0YgUAmcfFT081rAxxZOQQhL6bIWwJD4w=
+SIZE (suricata-8.0.6.tar.gz) = 44411503
Index: patches/patch-configure_ac
===================================================================
RCS file: /cvs/ports/security/suricata/patches/patch-configure_ac,v
retrieving revision 1.15
diff -u -p -r1.15 patch-configure_ac
--- patches/patch-configure_ac 9 Oct 2024 13:54:21 -0000 1.15
+++ patches/patch-configure_ac 28 Aug 2026 15:33:17 -0000
@@ -3,7 +3,7 @@ To remove the pid file, its directory mu
Index: configure.ac
--- configure.ac.orig
+++ configure.ac
-@@ -2599,7 +2599,7 @@ if test "$WINDOWS_PATH" = "yes"; then
+@@ -2519,7 +2519,7 @@ if test "$WINDOWS_PATH" = "yes"; then
fi
else
EXPAND_VARIABLE(localstatedir, e_logdir, "/log/suricata/")
Index: patches/patch-doc_userguide_conf_py
===================================================================
RCS file: patches/patch-doc_userguide_conf_py
diff -N patches/patch-doc_userguide_conf_py
--- patches/patch-doc_userguide_conf_py 22 Aug 2025 07:47:23 -0000 1.4
+++ /dev/null 1 Jan 1970 00:00:00 -0000
@@ -1,17 +0,0 @@
-WARNING: Calling get_html_theme_path is deprecated. If you are calling it to define html_theme_path, you are safe to remove that code.
-[...]
-build finished with problems, 1 warning (with warnings treated as errors).
-
-https://github.com/OISF/suricata/pull/13742
-
-Index: doc/userguide/conf.py
---- doc/userguide/conf.py.orig
-+++ doc/userguide/conf.py
-@@ -138,7 +138,6 @@ if not on_rtd:
- try:
- import sphinx_rtd_theme
- html_theme = 'sphinx_rtd_theme'
-- html_theme_path = [sphinx_rtd_theme.get_html_theme_path()]
- except:
- html_theme = 'default'
- else:
Index: patches/patch-src_suricata_c
===================================================================
RCS file: /cvs/ports/security/suricata/patches/patch-src_suricata_c,v
retrieving revision 1.16
diff -u -p -r1.16 patch-src_suricata_c
--- patches/patch-src_suricata_c 2 Jul 2024 14:31:58 -0000 1.16
+++ patches/patch-src_suricata_c 28 Aug 2026 15:33:17 -0000
@@ -4,7 +4,7 @@ Suricata uses libcap-ng on Linux and run
Index: src/suricata.c
--- src/suricata.c.orig
+++ src/suricata.c
-@@ -1609,7 +1609,7 @@ static TmEcode ParseCommandLine(int argc, char** argv,
+@@ -1686,7 +1686,7 @@ TmEcode SCParseCommandLine(int argc, char **argv)
return TM_ECODE_FAILED;
#endif /* UNITTESTS */
} else if (strcmp((long_opts[option_index]).name, "user") == 0) {
@@ -13,8 +13,8 @@ Index: src/suricata.c
SCLogError("libcap-ng is required to"
" drop privileges, but it was not compiled into Suricata.");
return TM_ECODE_FAILED;
-@@ -1618,7 +1618,7 @@ static TmEcode ParseCommandLine(int argc, char** argv,
- suri->do_setuid = TRUE;
+@@ -1695,7 +1695,7 @@ TmEcode SCParseCommandLine(int argc, char **argv)
+ suri->do_setuid = true;
#endif /* HAVE_LIBCAP_NG */
} else if (strcmp((long_opts[option_index]).name, "group") == 0) {
-#ifndef HAVE_LIBCAP_NG
@@ -22,11 +22,3 @@ Index: src/suricata.c
SCLogError("libcap-ng is required to"
" drop privileges, but it was not compiled into Suricata.");
return TM_ECODE_FAILED;
-@@ -3055,6 +3055,7 @@ int SuricataMain(int argc, char **argv)
- SystemHugepageSnapshotDestroy(prerun_snap);
- SystemHugepageSnapshotDestroy(postrun_snap);
- }
-+ SCSetUserID(suricata.userid, suricata.groupid);
- SCPledge();
- SuricataMainLoop(&suricata);
-
Index: patches/patch-src_util-privs_c
===================================================================
RCS file: /cvs/ports/security/suricata/patches/patch-src_util-privs_c,v
retrieving revision 1.7
diff -u -p -r1.7 patch-src_util-privs_c
--- patches/patch-src_util-privs_c 18 Mar 2024 17:46:37 -0000 1.7
+++ patches/patch-src_util-privs_c 28 Aug 2026 15:33:17 -0000
@@ -4,7 +4,7 @@ Suricata uses libcap-ng on Linux and run
Index: src/util-privs.c
--- src/util-privs.c.orig
+++ src/util-privs.c
-@@ -244,6 +244,27 @@ void SCGetGroupID(const char *group_name, uint32_t *gi
+@@ -237,6 +237,27 @@ void SCGetGroupID(const char *group_name, uint32_t *gi
*gid = grpid;
}
Index: patches/patch-suricata_yaml_in
===================================================================
RCS file: /cvs/ports/security/suricata/patches/patch-suricata_yaml_in,v
retrieving revision 1.23
diff -u -p -r1.23 patch-suricata_yaml_in
--- patches/patch-suricata_yaml_in 9 Oct 2024 13:54:21 -0000 1.23
+++ patches/patch-suricata_yaml_in 28 Aug 2026 15:33:17 -0000
@@ -8,7 +8,7 @@
Index: suricata.yaml.in
--- suricata.yaml.in.orig
+++ suricata.yaml.in
-@@ -58,7 +58,7 @@ vars:
+@@ -59,7 +59,7 @@ vars:
# The default logging directory. Any log or output file will be
# placed here if it's not specified with a full path name. This can be
# overridden with the -l command line parameter.
@@ -17,7 +17,7 @@ Index: suricata.yaml.in
# Global stats configuration
stats:
-@@ -84,14 +84,16 @@ outputs:
+@@ -91,14 +91,16 @@ outputs:
- fast:
enabled: yes
filename: fast.log
@@ -35,23 +35,7 @@ Index: suricata.yaml.in
# Enable for multi-threaded eve.json output; output files are amended with
# an identifier, e.g., eve.9.json
#threaded: false
-@@ -341,6 +343,7 @@ outputs:
- - http-log:
- enabled: no
- filename: http.log
-+ filemode: 664
- append: yes
- #extended: yes # enable this for extended logging information
- #custom: yes # enable the custom logging format (defined by customformat)
-@@ -351,6 +354,7 @@ outputs:
- - tls-log:
- enabled: no # Log TLS connections.
- filename: tls.log # File to store TLS logs.
-+ filemode: 664
- append: yes
- #extended: yes # Log extended information like fingerprint
- #custom: yes # enabled the custom logging format (defined by customformat)
-@@ -398,6 +402,7 @@ outputs:
+@@ -424,6 +426,7 @@ outputs:
- pcap-log:
enabled: no
filename: log.pcap
@@ -59,7 +43,7 @@ Index: suricata.yaml.in
# File size limit. Can be specified in kb, mb, gb. Just a number
# is parsed as bytes.
-@@ -436,6 +441,7 @@ outputs:
+@@ -466,6 +469,7 @@ outputs:
- alert-debug:
enabled: no
filename: alert-debug.log
@@ -67,7 +51,7 @@ Index: suricata.yaml.in
append: yes
#filetype: regular # 'regular', 'unix_stream' or 'unix_dgram'
-@@ -443,6 +449,7 @@ outputs:
+@@ -473,6 +477,7 @@ outputs:
- stats:
enabled: yes
filename: stats.log
@@ -75,7 +59,7 @@ Index: suricata.yaml.in
append: yes # append to file (yes) or overwrite it (no)
totals: yes # stats for all threads merged together
threads: no # per thread stats
-@@ -536,6 +543,7 @@ outputs:
+@@ -556,6 +561,7 @@ outputs:
enabled: no
type: file
filename: tcp-data.log
@@ -83,7 +67,7 @@ Index: suricata.yaml.in
# Log HTTP body data after normalization, de-chunking and unzipping.
# Two types: file or dir.
-@@ -549,6 +557,7 @@ outputs:
+@@ -569,6 +575,7 @@ outputs:
enabled: no
type: file
filename: http-data.log
@@ -91,7 +75,7 @@ Index: suricata.yaml.in
# Lua Output Support - execute lua script to generate alert and event
# output.
-@@ -1206,9 +1215,9 @@ datasets:
+@@ -1325,9 +1332,9 @@ datasets:
##
# Run Suricata with a specific user-id and group-id:
@@ -104,7 +88,7 @@ Index: suricata.yaml.in
security:
# if true, prevents process creation from Suricata by calling
-@@ -1219,13 +1228,11 @@ security:
+@@ -1338,13 +1345,11 @@ security:
enabled: no
directories:
#write:
@@ -117,8 +101,8 @@ Index: suricata.yaml.in
- - @e_sysconfdir@
lua:
- # Allow Lua rules. Disabled by default.
-@@ -1238,7 +1245,7 @@ security:
+ # Allow Lua rules. Enabled by default.
+@@ -1357,7 +1362,7 @@ security:
# Default location of the pid file. The pid file is only used in
# daemon mode (start Suricata with -D). If not running in daemon mode
# the --pidfile command line option must be used to create a pid file.
@@ -127,7 +111,7 @@ Index: suricata.yaml.in
# Daemon working directory
# Suricata will change directory to this one if provided
-@@ -1306,8 +1313,7 @@ unix-command:
+@@ -1425,8 +1430,7 @@ unix-command:
#filename: custom.socket
# Magic file. The extension .mgc is added to the value here.
@@ -137,7 +121,7 @@ Index: suricata.yaml.in
# GeoIP2 database file. Specify path and filename of GeoIP2 database
# if using rules with "geoip" rule option.
-@@ -1345,8 +1351,8 @@ legacy:
+@@ -1464,8 +1468,8 @@ legacy:
exception-policy: auto
# IP Reputation
@@ -148,7 +132,7 @@ Index: suricata.yaml.in
#reputation-files:
# - reputation.list
-@@ -1828,7 +1834,7 @@ profiling:
+@@ -1991,7 +1995,7 @@ profiling:
limit: 10
# output to json
@@ -157,7 +141,7 @@ Index: suricata.yaml.in
# per keyword profiling
keywords:
-@@ -2158,22 +2164,44 @@ napatech:
+@@ -2321,22 +2325,44 @@ napatech:
#
hashmode: hash5tuplesorted
@@ -207,4 +191,4 @@ Index: suricata.yaml.in
+# threshold-file: ${SYSCONFDIR}/suricata/threshold.config
##
- ## Include other configs
+ ## Suricata as a Firewall options (experimental)
Index: pkg/PLIST
===================================================================
RCS file: /cvs/ports/security/suricata/pkg/PLIST,v
retrieving revision 1.29
diff -u -p -r1.29 PLIST
--- pkg/PLIST 23 Oct 2025 13:20:20 -0000 1.29
+++ pkg/PLIST 28 Aug 2026 15:33:17 -0000
@@ -5,32 +5,8 @@
@rcscript ${RCDIR}/suricata
@bin bin/suricata
bin/suricata-update
-bin/suricatactl
-bin/suricatasc
-include/htp/
-include/htp/bstr.h
-include/htp/bstr_builder.h
-include/htp/htp.h
-include/htp/htp_base64.h
-include/htp/htp_config.h
-include/htp/htp_connection_parser.h
-include/htp/htp_core.h
-include/htp/htp_decompressors.h
-include/htp/htp_hooks.h
-include/htp/htp_list.h
-include/htp/htp_multipart.h
-include/htp/htp_table.h
-include/htp/htp_transaction.h
-include/htp/htp_urlencoded.h
-include/htp/htp_utf8_decoder.h
-include/htp/htp_version.h
-include/htp/lzma/
-include/htp/lzma/7zTypes.h
-include/htp/lzma/LzmaDec.h
-@static-lib lib/libhtp.a
-lib/libhtp.la
-@lib lib/libhtp.so.${LIBhtp_VERSION}
-lib/pkgconfig/htp.pc
+@bin bin/suricatactl
+@bin bin/suricatasc
lib/suricata/
lib/suricata/python/
lib/suricata/python/suricata/
@@ -39,41 +15,10 @@ lib/suricata/python/suricata/${MODPY_PYC
lib/suricata/python/suricata/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
lib/suricata/python/suricata/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc
lib/suricata/python/suricata/config/
-lib/suricata/python/suricata/config/__init__.py
lib/suricata/python/suricata/config/${MODPY_PYCACHE}/
-lib/suricata/python/suricata/config/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/config/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc
lib/suricata/python/suricata/config/${MODPY_PYCACHE}defaults.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
lib/suricata/python/suricata/config/${MODPY_PYCACHE}defaults.${MODPY_PYC_MAGIC_TAG}pyc
lib/suricata/python/suricata/config/defaults.py
-lib/suricata/python/suricata/ctl/
-lib/suricata/python/suricata/ctl/__init__.py
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}/
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}filestore.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}filestore.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}loghandler.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}loghandler.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}main.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}main.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}test_filestore.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/ctl/${MODPY_PYCACHE}test_filestore.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/ctl/filestore.py
-lib/suricata/python/suricata/ctl/loghandler.py
-lib/suricata/python/suricata/ctl/main.py
-lib/suricata/python/suricata/ctl/test_filestore.py
-lib/suricata/python/suricata/sc/
-lib/suricata/python/suricata/sc/__init__.py
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}/
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}specs.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}specs.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}suricatasc.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricata/sc/${MODPY_PYCACHE}suricatasc.${MODPY_PYC_MAGIC_TAG}pyc
-lib/suricata/python/suricata/sc/specs.py
-lib/suricata/python/suricata/sc/suricatasc.py
lib/suricata/python/suricata/update/
lib/suricata/python/suricata/update/__init__.py
lib/suricata/python/suricata/update/${MODPY_PYCACHE}/
@@ -191,11 +136,6 @@ lib/suricata/python/suricata/update/rule
lib/suricata/python/suricata/update/sources.py
lib/suricata/python/suricata/update/util.py
lib/suricata/python/suricata/update/version.py
-lib/suricata/python/suricatasc/
-lib/suricata/python/suricatasc/__init__.py
-lib/suricata/python/suricatasc/${MODPY_PYCACHE}/
-lib/suricata/python/suricatasc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
-lib/suricata/python/suricatasc/${MODPY_PYCACHE}__init__.${MODPY_PYC_MAGIC_TAG}pyc
@man man/man1/suricata.1
@man man/man1/suricatactl-filestore.1
@man man/man1/suricatactl.1
@@ -216,6 +156,8 @@ share/suricata/rules/
@sample ${SYSCONFDIR}/suricata/rules/
share/suricata/rules/app-layer-events.rules
@sample ${SYSCONFDIR}/suricata/rules/app-layer-events.rules
+share/suricata/rules/bittorrent-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/bittorrent-events.rules
share/suricata/rules/decoder-events.rules
@sample ${SYSCONFDIR}/suricata/rules/decoder-events.rules
share/suricata/rules/dhcp-events.rules
@@ -224,6 +166,8 @@ share/suricata/rules/dnp3-events.rules
@sample ${SYSCONFDIR}/suricata/rules/dnp3-events.rules
share/suricata/rules/dns-events.rules
@sample ${SYSCONFDIR}/suricata/rules/dns-events.rules
+share/suricata/rules/enip-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/enip-events.rules
share/suricata/rules/files.rules
@sample ${SYSCONFDIR}/suricata/rules/files.rules
share/suricata/rules/ftp-events.rules
@@ -236,6 +180,10 @@ share/suricata/rules/ipsec-events.rules
@sample ${SYSCONFDIR}/suricata/rules/ipsec-events.rules
share/suricata/rules/kerberos-events.rules
@sample ${SYSCONFDIR}/suricata/rules/kerberos-events.rules
+share/suricata/rules/ldap-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/ldap-events.rules
+share/suricata/rules/mdns-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/mdns-events.rules
share/suricata/rules/modbus-events.rules
@sample ${SYSCONFDIR}/suricata/rules/modbus-events.rules
share/suricata/rules/mqtt-events.rules
@@ -244,6 +192,10 @@ share/suricata/rules/nfs-events.rules
@sample ${SYSCONFDIR}/suricata/rules/nfs-events.rules
share/suricata/rules/ntp-events.rules
@sample ${SYSCONFDIR}/suricata/rules/ntp-events.rules
+share/suricata/rules/pgsql-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/pgsql-events.rules
+share/suricata/rules/pop3-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/pop3-events.rules
share/suricata/rules/quic-events.rules
@sample ${SYSCONFDIR}/suricata/rules/quic-events.rules
share/suricata/rules/rfb-events.rules
@@ -252,12 +204,16 @@ share/suricata/rules/smb-events.rules
@sample ${SYSCONFDIR}/suricata/rules/smb-events.rules
share/suricata/rules/smtp-events.rules
@sample ${SYSCONFDIR}/suricata/rules/smtp-events.rules
+share/suricata/rules/snmp-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/snmp-events.rules
share/suricata/rules/ssh-events.rules
@sample ${SYSCONFDIR}/suricata/rules/ssh-events.rules
share/suricata/rules/stream-events.rules
@sample ${SYSCONFDIR}/suricata/rules/stream-events.rules
share/suricata/rules/tls-events.rules
@sample ${SYSCONFDIR}/suricata/rules/tls-events.rules
+share/suricata/rules/websocket-events.rules
+@sample ${SYSCONFDIR}/suricata/rules/websocket-events.rules
@owner _suricata
@group _suricata
@sample ${LOCALSTATEDIR}/suricata/
UPDATE: Suricata-8.0.6