--- ../../_orig/security/volatility/Portfile	2013-07-15 12:03:51.000000000 -0400
+++ Portfile	2014-03-09 21:54:51.000000000 -0400
@@ -1,11 +1,10 @@
 # $Id: Portfile 70206 2010-08-01 23:28:25Z ryandesign@macports.org $

 PortSystem          1.0
-PortGroup           python26 1.0
+PortGroup           python 1.0

 name                volatility
-set my_name         Volatility
-version             1.1.2
+version             2.3.1
 categories          security
 platforms           darwin
 maintainers         yahoo.fr:jul_bsd openmaintainer
@@ -25,15 +24,14 @@
                     volatile memory samples and provide a platform for \
                     further work into this exciting area of research.

-homepage            https://www.volatilesystems.com/default/volatility
-master_sites        https://www.volatilesystems.com/volatility/${version}/
-distname            ${my_name}-${version}
-
-checksums           md5     e8272a7fa2f361880cf79d93b100f64a \
-                    sha1    15bac31c4b0026a5422637f439dce499b1e19ac1 \
-                    rmd160  89778cc7d6ad58ef12d87c00228efbc894474ad8
+homepage            https://code.google.com/p/volatility/
+distfiles-append    MacProfilesAll.zip

 supported_archs     noarch
+python.versions     26 27
+python.default_version     27
+
+depends_run-append  port:yara

 post-patch {
     reinplace "s|import sys|import sys\\\nsys.path.append('${python.pkgd}')|" \
@@ -43,26 +41,50 @@
 }

 post-destroot {
-    xinstall -m 755 -W ${worksrcpath} \
-        volatility \
-        ${destroot}${prefix}/bin
-
-    xinstall -d ${destroot}${prefix}/share/doc/${name}
-    xinstall -m 644 -W ${worksrcpath} \
-        AUTHORS.txt \
-        CREDITS.txt \
-        LEGAL.txt \
-        LICENSE.txt \
-        README.txt \
-        ${destroot}${prefix}/share/doc/${name}
-
-    xinstall -m 644 -W ${worksrcpath} \
-        vmodules.py \
-        vsyms.py \
-        vtypes.py \
-        vutils.py \
-        ${destroot}${python.pkgd}
+	xinstall -d ${destroot}${prefix}/share/doc/${name}
+	xinstall -m 644 -W ${worksrcpath} \
+		AUTHORS.txt \
+		CHANGELOG.txt \
+		CREDITS.txt \
+		LEGAL.txt \
+		LICENSE.txt \
+		README.txt \
+		${destroot}${prefix}/share/doc/${name}
+
+	xinstall -d ${destroot}${prefix}/share/examples/${name}
+	copy ${distpath}/MacProfilesAll.zip ${destroot}${prefix}/share/examples/${name}/
 }

+if {${subport} eq ${name}} {
+
+	master_sites        googlecode
+
+	checksums           volatility-2.3.1.tar.gz \
+        	            rmd160  621de1bf164e604314baeca42de9114c5289e67a \
+	      	            sha256  bb1411fc671e0bf550a31e534fb1991b2f940f1dce1ebe4ce2fb627aec40726c \
+                	    MacProfilesAll.zip \
+        	            rmd160  b52ed3412093f72b75a2cc167a589c49d2cf3d6f \
+	                    sha256  455815a7b51e7ff1d6cbcae1850433174020687d0c3cd080fd81d2def21a789b
+
+}
+
+subport ${name}-devel {
+	conflicts  ${name}
+
+	fetch.type          svn
+	svn.url             http://volatility.googlecode.com/svn/trunk
+	## Note: currently not tag/branch outside of releases
+	#svn.revision        x
+	worksrcdir          trunk
+        checksums      	    MacProfilesAll.zip \
+        	            rmd160  b52ed3412093f72b75a2cc167a589c49d2cf3d6f \
+	                    sha256  455815a7b51e7ff1d6cbcae1850433174020687d0c3cd080fd81d2def21a789b
+}
+
+notes "
+You may need some kernel profile depending on memory image you want to analyze.
+See https://code.google.com/p/volatility/wiki/MacMemoryForensics
+"
+
 livecheck.type      regex
-livecheck.regex     ${my_name}-(\[0-9.\]+)\\.tar
+livecheck.regex     "Download the latest release: <a href=\"https://code.google.com/p/volatility/downloads/list\" rel=\"nofollow\">Volatility Framework (\\d+(?:\\.\\d+)*)</a>"