diff options
Diffstat (limited to 'net-analyzer/snort/snort-2.4.0.ebuild')
| -rw-r--r-- | net-analyzer/snort/snort-2.4.0.ebuild | 141 |
1 files changed, 141 insertions, 0 deletions
diff --git a/net-analyzer/snort/snort-2.4.0.ebuild b/net-analyzer/snort/snort-2.4.0.ebuild new file mode 100644 index 000000000000..706a41988268 --- /dev/null +++ b/net-analyzer/snort/snort-2.4.0.ebuild @@ -0,0 +1,141 @@ +# Copyright 1999-2005 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.4.0.ebuild,v 1.1 2005/07/29 04:06:17 vanquirius Exp $ + +inherit eutils gnuconfig flag-o-matic + +DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" +HOMEPAGE="http://www.snort.org/" +SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz + http://dev.gentoo.org/~vanquirius/files/snort-2.4.0-genpatches.tar.bz2 + snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" + # mirror://gentoo/snort-2.4.0-genpatches.tar.bz2 + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="-alpha ~amd64 ~ppc ~ppc64 -sparc ~x86" +IUSE="ssl postgres mysql flexresp selinux snortsam odbc prelude inline sguil" + +DEPEND="virtual/libc + >=dev-libs/libpcre-4.2-r1 + virtual/libpcap + flexresp? ( ~net-libs/libnet-1.0.2a ) + postgres? ( >=dev-db/postgresql-7.2 ) + mysql? ( >=dev-db/mysql-3.23.26 ) + ssl? ( >=dev-libs/openssl-0.9.6b ) + prelude? ( >=dev-libs/libprelude-0.9.0_rc1 ) + odbc? ( dev-db/unixODBC ) + inline? ( + ~net-libs/libnet-1.0.2a + net-firewall/iptables + )" + +RDEPEND="${DEPEND} + dev-lang/perl + selinux? ( sec-policy/selinux-snort ) + snortsam? ( net-analyzer/snortsam )" + +pkg_setup() { + enewgroup snort + enewuser snort -1 /bin/false /dev/null snort +} + +src_unpack() { + unpack ${A} + cd ${S} + gnuconfig_update + + if use flexresp || use inline ; then + epatch ${WORKDIR}/2.4.0-libnet-1.0.patch + fi + + sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ + etc/snort.conf || die "sed snort.conf failed" + + if use prelude ; then + sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in \ + || die "sed configure.in failed" + fi + + if use sguil ; then + epatch ${WORKDIR}/2.4.0-spp_portscan_sguil.patch || die + epatch ${WORKDIR}/2.4.0-spp_stream4_sguil.patch || die + fi + + if use snortsam ; then + cd .. + einfo "Applying snortsam patch" + ./patchsnort.sh ${S} || die "snortsam patch failed" + cd ${S} + fi + + einfo "Regenerating autoconf/automake files" + autoreconf -f -i || die "autoreconf failed" +} + +src_compile() { + local myconf + + # There is no --diable-flexresp, cannot use use_enable + use flexresp && myconf="${myconf} --enable-flexresp" + + use inline && append-flags -I/usr/include/libipq + + econf \ + $(use_with postgres postgresql) \ + $(use_with mysql) \ + $(use_with ssl openssl) \ + $(use_with odbc) \ + --without-oracle \ + $(use_with prelude) \ + $(use_with sguil) \ + $(use_enable inline) \ + ${myconf} || die "bad ./configure" + + emake || die "compile problem" +} + +src_install() { + make DESTDIR="${D}" install || die "make install failed" + + keepdir /var/log/snort/ + + dodoc COPYING LICENSE doc/* + docinto schemas ; dodoc schemas/* + + insinto /etc/snort + doins etc/reference.config etc/classification.config \ + etc/*.map etc/threshold.conf + newins etc/snort.conf snort.conf.distrib + + # use prelude && doins etc/prelude-classification.config + + newinitd ${FILESDIR}/snort.rc6 snort + newconfd ${FILESDIR}/snort.confd snort + + chown snort:snort ${D}/var/log/snort + chmod 0770 ${D}/var/log/snort + + # create directory to store rules in + dodir ${D}/etc/snort/rules +} + +pkg_postinst() { + if use mysql || use postgres || use odbc ; then + einfo "To use a database as a backend for snort you will have to" + einfo "import the correct tables to the database." + einfo "You will have to setup a database called snort first." + einfo + use mysql && \ + einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" + use postgres && \ + einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" + use odbc && einfo "SQL tables need to be created - look at /usr/share/doc/${PF}/schemas/" + einfo + einfo "Also, read the following Gentoo forums article:" + einfo ' http://forums.gentoo.org/viewtopic.php?t=78718' + fi + ewarn "Rules are no longer included with snort." + ewarn "Please add your rules to /etc/snort/rules." + ewarn "For more information, visit ${HOMEPAGE}." +} |