*/*: Bump consumers of dns/ldns after update to 1.9.0 Force rebuild comsumers - upstream changed ABI without bump soname. ldns 1.9.0 inserted LDNS_RDF_TYPE_INT64 at enum position 5, shifting every subsequent value by +1. But port kept the shared library as libldns.so.3.6.0 - no SONAME bump - so consumers wasn't flagged for rebuild and still has the old 1.8.x enum constants baked in. Example of error for opendnssec: [adapter] error parsing RR at line 2 (Syntax error, could not parse the RR's rdata) PR: 291573 Reported by: bdrewery (via email) Sponsored by: UNIS Labs MFH: 2026Q21774d2af0a
Port details
security/passivedns 1.2.1.25_1
Network sniffer that logs DNS replies for use in passive DNS setups
Port info
- Maintainer
- shadowbq@gmail.com
- Packages
- latest: 1.2.1.25_1
- Upstream
- up to date
- Last update
- to 1.2.1.25_1 · 1774d2af0a
- Quarterly
- 2026Q4: 1.2.1.25_1
- WWW
- https://github.com/gamelinux/passivedns
- Links
- cgit · VuXML
Install
- Package
# pkg install passivednsinstalls 1.2.1.25_1 fromlatest; fromquarterly(2026Q4) 1.2.1.25_1- Port
# cd /usr/ports/security/passivedns && make install clean# make -C /usr/ports/security/passivedns config # change options first
- Size
- 29 KiB download · 72 KiB installed
- Depends on
- devel/jansson 2.15.1_1, dns/ldns 1.9.2
- License
- GPLv2
- Options
- 1 of 1 on in the package: JSON
- pkg-message
Shown after installing
A startup script 'passivedns' was installed in /usr/local/etc/rc.d/. Type "passivedns -h" on the commandline for usage instructions.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.2.1.25_1 | 1.2.1.25_1 | – |
| FreeBSD 15 | 1.2.1.25_1 | 1.2.1.25_1 | – |
| FreeBSD 14 | 1.2.1.25_1 | 1.2.1.25_1 | 1.2.1.25_1 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.2.1.25_1 | 1.2.1.25_1 | – |
| FreeBSD 14 | 1.2.1.25_1 | 1.2.1.25_1 | 1.2.1.25_1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.2.1.25_1.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (19)
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
security/passivedns: Update to 1.2.1-25 Add support for loopback devices (lo, wg, gif, etc) PR: 260911 Reported by: freebsd@monkeyspunk.net Approved by: shadowbq@gmail.com (maintainer, timeout > 1 month)5d15897836
security/passivedns: add JSON option PR: 254435 (based on) Submitted by: freebsd@monkeyspunk.net Approved by: maintainer timeoutf51671acbd
security/passivedns: Update to 1.2.1-22 This fixes build on FreeBSD 13+ PR: 2555992287e8f627
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
Mark BROKEN in 13/14 (via latest llvm update).02d14ecbd5
- update to 1.2.1.10 - pet portlint on USES PR: 240034 (based on) Submitted by: lytboris@gmail.com Approved by: shadowbq@gmail.com (maintainer timeout)f62b292497
Bump PORTREVISION on ldns consumers Shared lib version changed in update Reported by: sunpoeta432d98d9d
Convert to UCL & cleanup pkg-message (categories s)bc89cd3d2c
- Chase ldns shlip bump PR: 2174956d14406a13
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47basecurity/passivedns: restore consistency in snapshot naming after r386136 Pass git-describe(1) output to github API as is. This changes fetch url, checksum and WRKSRC but the content remains the same. Tested by: diff -urN Submitted by: mat Approved by: mat's portmgr hatcd20e720d5
security/passivedns: unbreak build - Fix versioning scheme but keep git-describe(1) format - Respect LOCALBASE != PREFIX - Drop unnecessary bsd.port.options.mk - Drop unused AUTOMAKE_ARGS - Drop deprecated author line from pkg-descr PR: 198499 Pointy hat: lme (2 weeks no fix) Reported by: pkg-fallout, DPorts Approved by: portmgr blanket48bacdcb35
USE_GITHUB: For the new support, fix DISTNAME to be more consistent.
When using GH_TAGNAME the DISTNAME would have GH_PROJECT and GH_ACCOUNT in
it. When not using GH_TAGNAME it would not have this. Now both cases
will add in the GH_PROJECT and GH_ACCOUNT.
Add special care to ensure that the DISTVERSION is not added in twice. If
a port does GH_TAGNAME=v${PORTVERSION} it will be added in twice though. For
that case DISTVERSIONPREFIX=v should be set and no GH_TAGNAME should be used.
empty() is used rather than (!defined || !${}) to support fmake.
The purpose of setting DISTNAME at all in these cases is to make it more clear
that the distfile is from *GITHUB* and to avoid collisions if a project were
to be renamed or moved. Without adding in GH_PROJECT and GH_ACCOUNT then there
are real risks that collisions on filenames would happen on renamed or moved
projects, which is fairly common. A GITHUB-generated file may not match
a custom-rolled or git-archive-rolled distfile.
PR: 199069
With hat: portmgr
Testing done: All USE_GITHUB ports without GH_COMMIT were checksum/fetch/extract/WRKSRC tested.aa6ad6e726Add security/passivedns: A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring (NSM) and general digital forensics. PassiveDNS sniffs traffic from an interface or reads a pcap-file and outputs the DNS-server answers to a log file. PassiveDNS can cache/aggregate duplicate DNS answers in-memory, limiting the amount of data in the logfile without losing the essense in the DNS answer. WWW: https://github.com/gamelinux/passivedns PR: 198499 Submitted by: shadowbq@gmail.com8e9e078da0