CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/passivedns 1.2.1.25_1

Network sniffer that logs DNS replies for use in passive DNS setups

Port info

Maintainer
shadowbq@gmail.com
Packages
latest: 1.2.1.25_1
Upstream
up to date
Last update
to 1.2.1.25_1 · 1774d2af0a
Quarterly
2026Q4: 1.2.1.25_1
WWW
https://github.com/gamelinux/passivedns
Links
cgit · VuXML

Install

Package
# pkg install passivedns
installs 1.2.1.25_1 from latest; from quarterly (2026Q4) 1.2.1.25_1
Port
# cd /usr/ports/security/passivedns && make install clean
# make -C /usr/ports/security/passivedns config  # change options first
Size
29 KiB download · 72 KiB installed
Depends on
devel/jansson 2.15.1_1, dns/ldns 1.9.2
License
GPLv2
Options
1 of 1 on in the package: JSON
pkg-message
Shown after installing
A startup script 'passivedns' was installed in /usr/local/etc/rc.d/.

Type "passivedns -h" on the commandline for usage instructions.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.2.1.25_11.2.1.25_1–
FreeBSD 151.2.1.25_11.2.1.25_1–
FreeBSD 141.2.1.25_11.2.1.25_11.2.1.25_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.2.1.25_11.2.1.25_1–
FreeBSD 141.2.1.25_11.2.1.25_11.2.1.25_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.2.1.25_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (19)

Vladimir Druzenko (vvd) · 1.2.1.25_1
*/*: Bump consumers of dns/ldns after update to 1.9.0

Force rebuild comsumers - upstream changed ABI without bump soname.

ldns 1.9.0 inserted LDNS_RDF_TYPE_INT64 at enum position 5, shifting
every subsequent value by +1. But port kept the shared library as
libldns.so.3.6.0 - no SONAME bump - so consumers wasn't flagged for
rebuild and still has the old 1.8.x enum constants baked in.

Example of error for opendnssec:
[adapter] error parsing RR at line 2 (Syntax error, could not parse
the RR's rdata)

PR:		291573
Reported by:	bdrewery (via email)
Sponsored by:	UNIS Labs
MFH:		2026Q2
1774d2af0a
Stefan Eßer (se) · 1.2.1.25
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.2.1.25
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Fernando Apesteguía (fernape) · 1.2.1.25
security/passivedns: Update to 1.2.1-25

Add support for loopback devices (lo, wg, gif, etc)

PR:	260911
Reported by:	freebsd@monkeyspunk.net
Approved by:	shadowbq@gmail.com (maintainer, timeout > 1 month)
5d15897836
Jason Helfman (jgh) · 1.2.1.22_1
security/passivedns: add JSON option

PR:	254435 (based on)
Submitted by: freebsd@monkeyspunk.net
Approved by: maintainer timeout
f51671acbd
Li-Wen Hsu (lwhsu) · 1.2.1.22
security/passivedns: Update to 1.2.1-22

This fixes build on FreeBSD 13+

PR:		255599
2287e8f627
Mathieu Arnold (mat) · 1.2.1.10
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.2.1.10
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.2.1.10
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mark Linimon (linimon) · 1.2.1.10
Mark BROKEN in 13/14 (via latest llvm update).
02d14ecbd5
Jason Helfman (jgh) · 1.2.1.10
- update to 1.2.1.10 - pet portlint on USES

PR:		240034 (based on)
Submitted by:	lytboris@gmail.com
Approved by:	shadowbq@gmail.com (maintainer timeout)
f62b292497
Steve Wills (swills) · 1.1.3.60_2
Bump PORTREVISION on ldns consumers

Shared lib version changed in update

Reported by:	sunpoet
a432d98d9d
Mathieu Arnold (mat) · 1.1.3.60_1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Martin Wilke (miwi) · 1.1.3.60_1
- Chase ldns shlip bump

PR:		217495
6d14406a13
Mathieu Arnold (mat) · 1.1.3.60
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Jan Beich (jbeich) · 1.1.3.60
security/passivedns: restore consistency in snapshot naming after r386136

Pass git-describe(1) output to github API as is. This changes
fetch url, checksum and WRKSRC but the content remains the same.

Tested by:	diff -urN
Submitted by:	mat
Approved by:	mat's portmgr hat
cd20e720d5
Jan Beich (jbeich) · 1.1.3.60
security/passivedns: unbreak build

- Fix versioning scheme but keep git-describe(1) format
- Respect LOCALBASE != PREFIX
- Drop unnecessary bsd.port.options.mk
- Drop unused AUTOMAKE_ARGS
- Drop deprecated author line from pkg-descr

PR:		198499
Pointy hat:	lme (2 weeks no fix)
Reported by:	pkg-fallout, DPorts
Approved by:	portmgr blanket
48bacdcb35
Bryan Drewery (bdrewery) · a6.c7.e26
USE_GITHUB: For the new support, fix DISTNAME to be more consistent.

When using GH_TAGNAME the DISTNAME would have GH_PROJECT and GH_ACCOUNT in
it. When not using GH_TAGNAME it would not have this. Now both cases
will add in the GH_PROJECT and GH_ACCOUNT.

Add special care to ensure that the DISTVERSION is not added in twice. If
a port does GH_TAGNAME=v${PORTVERSION} it will be added in twice though. For
that case DISTVERSIONPREFIX=v should be set and no GH_TAGNAME should be used.

empty() is used rather than (!defined || !${}) to support fmake.

The purpose of setting DISTNAME at all in these cases is to make it more clear
that the distfile is from *GITHUB* and to avoid collisions if a project were
to be renamed or moved. Without adding in GH_PROJECT and GH_ACCOUNT then there
are real risks that collisions on filenames would happen on renamed or moved
projects, which is fairly common. A GITHUB-generated file may not match
a custom-rolled or git-archive-rolled distfile.

PR:		199069
With hat:	portmgr
Testing done:	All USE_GITHUB ports without GH_COMMIT were checksum/fetch/extract/WRKSRC tested.
aa6ad6e726
Lars Engels (lme) · a6.c7.e26
Add security/passivedns:

A tool to collect DNS records passively to aid Incident handling, Network
Security Monitoring (NSM) and general digital forensics.

PassiveDNS sniffs traffic from an interface or reads a pcap-file and outputs
the DNS-server answers to a log file. PassiveDNS can cache/aggregate duplicate
DNS answers in-memory, limiting the amount of data in the logfile without
losing the essense in the DNS answer.

WWW: https://github.com/gamelinux/passivedns

PR:		198499
Submitted by:	shadowbq@gmail.com
8e9e078da0