diff options
author | Patrick Lauer <patrick@gentoo.org> | 2009-05-31 22:39:54 +0000 |
---|---|---|
committer | Patrick Lauer <patrick@gentoo.org> | 2009-05-31 22:39:54 +0000 |
commit | 80f3c1cc43b18a6325f0f673e1d161fdf2e9eab9 (patch) | |
tree | cbe163ea2e330cebd677bbc845aac9d5b0c8bf37 /net-analyzer/snort | |
parent | amd64 stable, bug #271266 (diff) | |
download | gentoo-2-80f3c1cc43b18a6325f0f673e1d161fdf2e9eab9.tar.gz gentoo-2-80f3c1cc43b18a6325f0f673e1d161fdf2e9eab9.tar.bz2 gentoo-2-80f3c1cc43b18a6325f0f673e1d161fdf2e9eab9.zip |
Removing old
(Portage version: 2.2_rc33/cvs/Linux x86_64)
Diffstat (limited to 'net-analyzer/snort')
-rw-r--r-- | net-analyzer/snort/ChangeLog | 7 | ||||
-rw-r--r-- | net-analyzer/snort/metadata.xml | 5 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.6.1.3-r1.ebuild | 191 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.6.1.4-r1.ebuild | 193 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.6.1.4.ebuild | 192 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.7.0.1.ebuild | 182 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.8.3.1.ebuild | 295 | ||||
-rw-r--r-- | net-analyzer/snort/snort-2.8.4-r2.ebuild | 388 |
8 files changed, 6 insertions, 1447 deletions
diff --git a/net-analyzer/snort/ChangeLog b/net-analyzer/snort/ChangeLog index 18045b674d27..2c567f2cbfa2 100644 --- a/net-analyzer/snort/ChangeLog +++ b/net-analyzer/snort/ChangeLog @@ -1,6 +1,11 @@ # ChangeLog for net-analyzer/snort # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.150 2009/05/31 21:07:41 patrick Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.151 2009/05/31 22:39:54 patrick Exp $ + + 31 May 2009; Patrick Lauer <patrick@gentoo.org> -snort-2.6.1.3-r1.ebuild, + -snort-2.6.1.4.ebuild, -snort-2.6.1.4-r1.ebuild, -snort-2.7.0.1.ebuild, + -snort-2.8.3.1.ebuild, -snort-2.8.4-r2.ebuild, metadata.xml: + Removing old 31 May 2009; Patrick Lauer <patrick@gentoo.org> -snort-2.4.5.ebuild: Removing old for #271680 diff --git a/net-analyzer/snort/metadata.xml b/net-analyzer/snort/metadata.xml index edc13a3a4111..56776e5556bb 100644 --- a/net-analyzer/snort/metadata.xml +++ b/net-analyzer/snort/metadata.xml @@ -15,7 +15,6 @@ <use> <flag name='aruba'>Enable Aruba support</flag> -<flag name='community-rules'>Include Community rules</flag> <flag name='decoder-preprocessor-rules'></flag> <flag name='dynamicplugin'>Enable ability to dynamically load preprocessors, detection engine, and rules library</flag> <flag name='flexresp'>Enable new connection tearing (not recommended)</flag> @@ -30,10 +29,6 @@ <flag name='perfprofiling'>Enable preprocessor and rule performance profiling</flag> <flag name='ppm'>Enable ppm support</flag> <flag name='react'>Enable interception and termination of offending HTTP accesses</flag> -<flag name='ruleperf'>Enable ruleperf support</flag> -<flag name='sguil'>Enable sguil (The Analyst Console for Network Security Monitoring) support</flag> -<flag name='snortsam'>patches <pkg>net-analyzer/snort</pkg> for use with <pkg>net-analyzer/snortsam</pkg></flag> -<flag name='stream4udp'>Enable stream4udp support</flag> <flag name='targetbased'>Enable targetbased support</flag> <flag name='timestats'>Enable TimeStats functionality</flag> </use> diff --git a/net-analyzer/snort/snort-2.6.1.3-r1.ebuild b/net-analyzer/snort/snort-2.6.1.3-r1.ebuild deleted file mode 100644 index c632fc76d505..000000000000 --- a/net-analyzer/snort/snort-2.6.1.3-r1.ebuild +++ /dev/null @@ -1,191 +0,0 @@ -# Copyright 1999-2008 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.3-r1.ebuild,v 1.5 2008/05/21 18:50:56 dev-zero Exp $ - -WANT_AUTOCONF="latest" -WANT_AUTOMAKE="latest" -AT_M4DIR=m4 - -inherit eutils autotools - -DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz - snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha amd64 ppc ppc64 ~sparc x86" -IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin -timestats perfprofiling linux-smp-stats flexresp2 react sguil gre" - -DEPEND="virtual/libc - >=dev-libs/libpcre-4.2-r1 - virtual/libpcap - flexresp? ( ~net-libs/libnet-1.0.2a ) - flexresp2? ( dev-libs/libdnet ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - odbc? ( dev-db/unixODBC ) - >=sys-devel/libtool-1.4 - inline? ( - ~net-libs/libnet-1.0.2a - net-firewall/iptables - )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort ) - snortsam? ( net-analyzer/snortsam )" - -pkg_setup() { - enewgroup snort - enewuser snort -1 -1 /dev/null snort - - if use flexresp && use flexresp2 ; then - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' or 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch" - epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch" - use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch" - sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ - etc/snort.conf - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - if use snortsam ; then - cd .. - einfo "Applying snortsam patch" - sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed" - ./patchsnort.sh "${S}" || die "snortsam patch failed" - cd "${S}" - fi - - einfo "Regenerating autoconf/automake files" - eautoreconf -} - -src_compile() { - local myconf - - if use flexresp2; then - myconf="${myconf} --enable-flexresp2" - elif use flexresp; then - myconf="${myconf} --enable-flexresp" - fi - - if use react && ! use flexresp; then - myconf="${myconf} --enable-react" - fi - - use gre && myconf="${myconf} --enable-gre" - - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - $(use_enable prelude) \ - $(use_enable inline) \ - $(use_enable dynamicplugin) \ - $(use_enable timestats) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas ; dodoc schemas/* - - insinto /etc/snort - doins etc/reference.config etc/classification.config \ - etc/*.map etc/threshold.conf - use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf - sed -i -e 's:/usr/local/:/usr/:g' etc/snort.conf - newins etc/snort.conf snort.conf - - newinitd "${FILESDIR}/snort.rc8" snort - newconfd "${FILESDIR}/snort.confd" snort - - fowners snort:snort /var/log/snort - fperms 0770 /var/log/snort - - # install rules - insinto /etc/snort/rules - doins -r "${WORKDIR}"/rules/* -} - -pkg_postinst() { - ewarn - ewarn "Users upgrading from snort 2.4.x should take care when updating" - ewarn "their snort.conf. A number of significant changes have been" - ewarn "have been added to snort 2.6 including the addition of" - ewarn "dynamically loadable preprocessors, detection engine and rules." - ewarn "Snort 2.6 also includes the addition of performance profiling" - ewarn "for rules & preprocessors and uses a new default pattern matcher" - ewarn "which provides faster matching at the expense of being very" - ewarn "memory intensive." - ewarn - ewarn "If you find that snort is using too much memory, your system" - ewarn "freezes, or snort crashes after a few minutes try adding the" - ewarn "following to your snort.conf..." - ewarn - ewarn "'config detection: search-method ac-sparsebands'" - ewarn - ewarn "This will provide high pattern matching performance at a much" - ewarn "lower cost to memory. For more information on the new features" - ewarn "in snort 2.6, please take a look at the release notes located in..." - ewarn - ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2" - ewarn - einfo "To use a database as a backend for snort you will have to" - einfo "import the correct tables to the database." - einfo "You will have to setup a database called snort before doing the" - einfo "following..." - einfo - einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" - einfo - einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" - einfo - einfo " ODBC: look at /usr/share/doc/${PF}/schemas/" - einfo - einfo "Users using the unified output plugin and barnyard do not need to" - einfo "compile database support into snort, but still need to set up their" - einfo "database as shown above." - einfo - ewarn "Only a basic set of rules was installed." - ewarn "Please add your other sets of rules to /etc/snort/rules." - ewarn "For more information on rules, visit ${HOMEPAGE}." - if use sguil ; then - elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL" - elog "you should unmerge ${P} and emerge snort-2.4.x" - fi -} diff --git a/net-analyzer/snort/snort-2.6.1.4-r1.ebuild b/net-analyzer/snort/snort-2.6.1.4-r1.ebuild deleted file mode 100644 index ae014ccfc7b5..000000000000 --- a/net-analyzer/snort/snort-2.6.1.4-r1.ebuild +++ /dev/null @@ -1,193 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.4-r1.ebuild,v 1.3 2009/03/01 19:16:21 patrick Exp $ - -WANT_AUTOCONF="latest" -WANT_AUTOMAKE="latest" -AT_M4DIR=m4 - -inherit eutils autotools - -DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz - snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86" -IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin -timestats perfprofiling linux-smp-stats flexresp2 react sguil gre" - -DEPEND="virtual/libc - >=dev-libs/libpcre-4.2-r1 - virtual/libpcap - flexresp? ( ~net-libs/libnet-1.0.2a ) - flexresp2? ( dev-libs/libdnet ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - odbc? ( dev-db/unixODBC ) - >=sys-devel/libtool-1.4 - inline? ( - ~net-libs/libnet-1.0.2a - net-firewall/iptables - )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort ) - snortsam? ( net-analyzer/snortsam )" - -pkg_setup() { - enewgroup snort - enewuser snort -1 -1 /dev/null snort - - if use flexresp && use flexresp2 ; then - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' or 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch" - epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch" - epatch "${FILESDIR}/${P}-libdnet-ip6.patch" - epatch "${FILESDIR}/${P}-server_stats.patch" - use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch" - sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ - etc/snort.conf - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - if use snortsam ; then - cd .. - einfo "Applying snortsam patch" - sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed" - ./patchsnort.sh "${S}" || die "snortsam patch failed" - cd "${S}" - fi - - einfo "Regenerating autoconf/automake files" - eautoreconf -} - -src_compile() { - local myconf - - if use flexresp2; then - myconf="${myconf} --enable-flexresp2" - elif use flexresp; then - myconf="${myconf} --enable-flexresp" - fi - - if use react && ! use flexresp; then - myconf="${myconf} --enable-react" - fi - - use gre && myconf="${myconf} --enable-gre" - - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - $(use_enable prelude) \ - $(use_enable inline) \ - $(use_enable dynamicplugin) \ - $(use_enable timestats) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas ; dodoc schemas/* - - insinto /etc/snort - doins etc/reference.config etc/classification.config \ - etc/*.map etc/threshold.conf - use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf - sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \ - etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib - - newinitd "${FILESDIR}/snort.rc8" snort - newconfd "${FILESDIR}/snort.confd" snort - - fowners snort:snort /var/log/snort - fperms 0770 /var/log/snort - - # install rules - insinto /etc/snort/rules - doins -r "${WORKDIR}"/rules/* -} - -pkg_postinst() { - ewarn - ewarn "Users upgrading from snort 2.4.x should take care when updating" - ewarn "their snort.conf. A number of significant changes have been" - ewarn "have been added to snort 2.6 including the addition of" - ewarn "dynamically loadable preprocessors, detection engine and rules." - ewarn "Snort 2.6 also includes the addition of performance profiling" - ewarn "for rules & preprocessors and uses a new default pattern matcher" - ewarn "which provides faster matching at the expense of being very" - ewarn "memory intensive." - ewarn - ewarn "If you find that snort is using too much memory, your system" - ewarn "freezes, or snort crashes after a few minutes try adding the" - ewarn "following to your snort.conf..." - ewarn - ewarn "'config detection: search-method ac-sparsebands'" - ewarn - ewarn "This will provide high pattern matching performance at a much" - ewarn "lower cost to memory. For more information on the new features" - ewarn "in snort 2.6, please take a look at the release notes located in..." - ewarn - ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2" - ewarn - einfo "To use a database as a backend for snort you will have to" - einfo "import the correct tables to the database." - einfo "You will have to setup a database called snort before doing the" - einfo "following..." - einfo - einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" - einfo - einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" - einfo - einfo " ODBC: look at /usr/share/doc/${PF}/schemas/" - einfo - einfo "Users using the unified output plugin and barnyard do not need to" - einfo "compile database support into snort, but still need to set up their" - einfo "database as shown above." - einfo - ewarn "Only a basic set of rules was installed." - ewarn "Please add your other sets of rules to /etc/snort/rules." - ewarn "For more information on rules, visit ${HOMEPAGE}." - if use sguil ; then - elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL" - elog "you should unmerge ${P} and emerge snort-2.4.x" - fi -} diff --git a/net-analyzer/snort/snort-2.6.1.4.ebuild b/net-analyzer/snort/snort-2.6.1.4.ebuild deleted file mode 100644 index a3d2418c6fbe..000000000000 --- a/net-analyzer/snort/snort-2.6.1.4.ebuild +++ /dev/null @@ -1,192 +0,0 @@ -# Copyright 1999-2008 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.4.ebuild,v 1.6 2008/05/21 18:50:56 dev-zero Exp $ - -WANT_AUTOCONF="latest" -WANT_AUTOMAKE="latest" -AT_M4DIR=m4 - -inherit eutils autotools - -DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz - snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86" -IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin -timestats perfprofiling linux-smp-stats flexresp2 react sguil gre" - -DEPEND="virtual/libc - >=dev-libs/libpcre-4.2-r1 - virtual/libpcap - flexresp? ( ~net-libs/libnet-1.0.2a ) - flexresp2? ( dev-libs/libdnet ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - odbc? ( dev-db/unixODBC ) - >=sys-devel/libtool-1.4 - inline? ( - ~net-libs/libnet-1.0.2a - net-firewall/iptables - )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort ) - snortsam? ( net-analyzer/snortsam )" - -pkg_setup() { - enewgroup snort - enewuser snort -1 -1 /dev/null snort - - if use flexresp && use flexresp2 ; then - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' or 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch" - epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch" - epatch "${FILESDIR}/${P}-libdnet-ip6.patch" - use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch" - sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ - etc/snort.conf - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - if use snortsam ; then - cd .. - einfo "Applying snortsam patch" - sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed" - ./patchsnort.sh "${S}" || die "snortsam patch failed" - cd "${S}" - fi - - einfo "Regenerating autoconf/automake files" - eautoreconf -} - -src_compile() { - local myconf - - if use flexresp2; then - myconf="${myconf} --enable-flexresp2" - elif use flexresp; then - myconf="${myconf} --enable-flexresp" - fi - - if use react && ! use flexresp; then - myconf="${myconf} --enable-react" - fi - - use gre && myconf="${myconf} --enable-gre" - - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - $(use_enable prelude) \ - $(use_enable inline) \ - $(use_enable dynamicplugin) \ - $(use_enable timestats) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas ; dodoc schemas/* - - insinto /etc/snort - doins etc/reference.config etc/classification.config \ - etc/*.map etc/threshold.conf - use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf - sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \ - etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib - - newinitd "${FILESDIR}/snort.rc8" snort - newconfd "${FILESDIR}/snort.confd" snort - - fowners snort:snort /var/log/snort - fperms 0770 /var/log/snort - - # install rules - insinto /etc/snort/rules - doins -r "${WORKDIR}"/rules/* -} - -pkg_postinst() { - ewarn - ewarn "Users upgrading from snort 2.4.x should take care when updating" - ewarn "their snort.conf. A number of significant changes have been" - ewarn "have been added to snort 2.6 including the addition of" - ewarn "dynamically loadable preprocessors, detection engine and rules." - ewarn "Snort 2.6 also includes the addition of performance profiling" - ewarn "for rules & preprocessors and uses a new default pattern matcher" - ewarn "which provides faster matching at the expense of being very" - ewarn "memory intensive." - ewarn - ewarn "If you find that snort is using too much memory, your system" - ewarn "freezes, or snort crashes after a few minutes try adding the" - ewarn "following to your snort.conf..." - ewarn - ewarn "'config detection: search-method ac-sparsebands'" - ewarn - ewarn "This will provide high pattern matching performance at a much" - ewarn "lower cost to memory. For more information on the new features" - ewarn "in snort 2.6, please take a look at the release notes located in..." - ewarn - ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2" - ewarn - einfo "To use a database as a backend for snort you will have to" - einfo "import the correct tables to the database." - einfo "You will have to setup a database called snort before doing the" - einfo "following..." - einfo - einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" - einfo - einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" - einfo - einfo " ODBC: look at /usr/share/doc/${PF}/schemas/" - einfo - einfo "Users using the unified output plugin and barnyard do not need to" - einfo "compile database support into snort, but still need to set up their" - einfo "database as shown above." - einfo - ewarn "Only a basic set of rules was installed." - ewarn "Please add your other sets of rules to /etc/snort/rules." - ewarn "For more information on rules, visit ${HOMEPAGE}." - if use sguil ; then - elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL" - elog "you should unmerge ${P} and emerge snort-2.4.x" - fi -} diff --git a/net-analyzer/snort/snort-2.7.0.1.ebuild b/net-analyzer/snort/snort-2.7.0.1.ebuild deleted file mode 100644 index 50292f6b6f51..000000000000 --- a/net-analyzer/snort/snort-2.7.0.1.ebuild +++ /dev/null @@ -1,182 +0,0 @@ -# Copyright 1999-2008 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.7.0.1.ebuild,v 1.3 2008/05/21 18:50:56 dev-zero Exp $ - -WANT_AUTOCONF="latest" -WANT_AUTOMAKE="latest" -AT_M4DIR=m4 - -inherit eutils autotools - -DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz - http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz - snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86" -IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin -timestats perfprofiling linux-smp-stats flexresp2 react sguil gre" - -DEPEND="virtual/libc - >=dev-libs/libpcre-4.2-r1 - virtual/libpcap - flexresp? ( ~net-libs/libnet-1.0.2a ) - flexresp2? ( dev-libs/libdnet ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - odbc? ( dev-db/unixODBC ) - >=sys-devel/libtool-1.4 - inline? ( - ~net-libs/libnet-1.0.2a - net-firewall/iptables - )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort ) - snortsam? ( net-analyzer/snortsam )" - -pkg_setup() { - enewgroup snort - enewuser snort -1 -1 /dev/null snort - - if use flexresp && use flexresp2 ; then - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' or 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch" - epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch" - use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch" - sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \ - etc/snort.conf - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - if use snortsam ; then - cd .. - einfo "Applying snortsam patch" - sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed" - ./patchsnort.sh "${S}" || die "snortsam patch failed" - cd "${S}" - fi - - einfo "Regenerating autoconf/automake files" - eautoreconf -} - -src_compile() { - local myconf - - if use flexresp2; then - myconf="${myconf} --enable-flexresp2" - elif use flexresp; then - myconf="${myconf} --enable-flexresp" - fi - - if use react && ! use flexresp; then - myconf="${myconf} --enable-react" - fi - - use gre && myconf="${myconf} --enable-gre" - - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - $(use_enable prelude) \ - $(use_enable inline) \ - $(use_enable dynamicplugin) \ - $(use_enable timestats) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas ; dodoc schemas/* - - insinto /etc/snort - doins etc/reference.config etc/classification.config \ - etc/*.map etc/threshold.conf - use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf - sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \ - etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib - - newinitd "${FILESDIR}/snort.rc8" snort - newconfd "${FILESDIR}/snort.confd" snort - - fowners snort:snort /var/log/snort - fperms 0770 /var/log/snort - - # install rules - insinto /etc/snort/rules - doins -r "${WORKDIR}"/rules/* -} - -pkg_postinst() { - ewarn - ewarn "If you find that snort is using too much memory, your system" - ewarn "freezes, or snort crashes after a few minutes try adding the" - ewarn "following to your snort.conf..." - ewarn - ewarn "'config detection: search-method ac-sparsebands'" - ewarn - ewarn "This will provide high pattern matching performance at a much" - ewarn "lower cost to memory. For more information on the new features" - ewarn "in snort 2.7, please take a look at the release notes located in..." - ewarn - ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2" - ewarn - elog "To use a database as a backend for snort you will have to" - elog "import the correct tables to the database." - elog "You will have to setup a database called snort before doing the" - elog "following..." - elog - elog " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort" - elog - elog " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz" - elog - elog " ODBC: look at /usr/share/doc/${PF}/schemas/" - elog - elog "Users using the unified output plugin and barnyard do not need to" - elog "compile database support into snort, but still need to set up their" - elog "database as shown above." - elog - ewarn "Only a basic set of rules was installed." - ewarn "Please add your other sets of rules to /etc/snort/rules." - ewarn "For more information on rules, visit ${HOMEPAGE}." - if use sguil ; then - elog "SGUIL needs to catch up with recent snort. If you plan on using SGUIL" - elog "you should unmerge ${P} and emerge snort-2.4.x" - fi -} diff --git a/net-analyzer/snort/snort-2.8.3.1.ebuild b/net-analyzer/snort/snort-2.8.3.1.ebuild deleted file mode 100644 index b0aa05b34b30..000000000000 --- a/net-analyzer/snort/snort-2.8.3.1.ebuild +++ /dev/null @@ -1,295 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.8.3.1.ebuild,v 1.5 2009/01/26 18:37:26 vapier Exp $ - -WANT_AUTOCONF="latest" -WANT_AUTOMAKE="latest" -AT_M4DIR=m4 - -inherit eutils autotools - -DESCRIPTION="The de facto standard for intrusion detection/prevention" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/${P}.tar.gz - community-rules? ( http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-CURRENT.tar.gz )" -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86" -IUSE="static debug threads prelude stream4udp memory-cleanup decoder-preprocessor-rules ipv6 targetbased dynamicplugin timestats ruleperf ppm perfprofiling linux-smp-stats inline inline-init-failopen flexresp flexresp2 react aruba gre mpls postgres mysql odbc selinux community-rules" - -#flexresp, react, and inline _ONLY_ work with net-libs/libnet-1.0.2a -DEPEND="virtual/libc - virtual/libpcap - >=sys-devel/libtool-1.4 - >=dev-libs/libpcre-6.0 - flexresp2? ( dev-libs/libdnet ) - flexresp? ( ~net-libs/libnet-1.0.2a ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - odbc? ( dev-db/unixODBC ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - inline? ( ~net-libs/libnet-1.0.2a net-firewall/iptables )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort )" - -pkg_setup() { - enewgroup snort - enewuser snort -1 -1 /dev/null snort - - if use flexresp && use flexresp2 ; then - ewarn - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' OR 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - ewarn - ewarn - epause - fi - - if use memory-cleanup && ! use dynamicplugin; then - ewarn - ewarn - ewarn "You have enabled 'memory-cleanup' but not 'dynamicplugin'." - ewarn "'memory-cleanup' requires 'dynamicplugin' to compile." - ewarn - ewarn "Enabling dynamicplugin..." - ewarn - ewarn - epause - fi - - if use ruleperf && ! use dynamicplugin; then - ewarn - ewarn - ewarn "You have enabled 'ruleperf' but not 'dynamicplugin'." - ewarn "'ruleperf' requires 'dynamicplugin' to compile." - ewarn - ewarn "Enabling dynamicplugin..." - ewarn - ewarn - epause - fi - - if use inline-init-failopen && ! use inline; then - ewarn - ewarn - ewarn "You have enabled 'inline-init-failopen' but not 'inline'." - ewarn "'inline-init-failopen' is an 'inline' only function." - ewarn - ewarn "Enabling inline mode..." - ewarn - ewarn - epause - fi -} - -src_unpack() { - unpack ${A} - cd "${S}" - - #Dont monkey with the original source if you don't need to. - if use flexresp || use react || use inline; then - epatch "${FILESDIR}/${PN}-2.8.3.1-libnet.patch" - fi - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - einfo "Regenerating autoconf/automake files" - eautoreconf -} - -src_compile() { - local myconf - - #Both shared and static are enable by defaut so we need to be specific - if use static; then - myconf="${myconf} --enable-static --disable-shared" - else - myconf="${myconf} --disable-static --enable-shared" - fi - - #Added in ebuild version snort-2.8.3.1. Should be rechecked in updated versions. - #Use 'die' because ./configure will die any ways with the same error message... - if use ipv6 && use targetbased; then - die "Support for target-based and IPv6 cannot be enabled simultaneously in this version." - fi - - #Sourcefire is often not clear about what is and is not enabled by default - #To avoid undesired results we should be very specific - if use flexresp && ! use flexresp2; then - myconf="${myconf} --enable-flexresp --disable-flexresp2" - elif use flexresp2 && ! use flexresp; then - myconf="${myconf} --disable-flexresp --enable-flexresp2" - elif use flexresp && use flexresp2; then - myconf="${myconf} --disable-flexresp --enable-flexresp2" - fi - - # USE flages memory-cleanup and ruleperf require dynamicplugin - #Only 'dynamicplugin' is set here. 'ruleperf' and 'memory-cleanup' are set below via econf. - if use memory-cleanup || use ruleperf || use dynamicplugin; then - myconf="${myconf} --enable-dynamicplugin" - else - myconf="${myconf} --disable-dynamicplugin" - fi - - # USE flages 'targetbased' and 'inline-init-failopen' require threads - #Only 'threads' is set here. 'targetbased' and 'inline-init-failopen' are set below via econf. - if use targetbased || use inline-init-failopen || use threads; then - myconf="${myconf} --enable-pthread" - else - myconf="${myconf} --disable-pthread" - fi - - #Only needed if... - if use flexresp || use react || use inline; then - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - fi - - #'inline-init-failopen' requires 'inline' - if use inline-init-failopen || use inline; then - myconf="${myconf} --enable-inline" - else - myconf="${myconf} --disable-inline" - fi - -#The --enable-<feature> options... 'static' 'dynamicplugin' 'threads' 'flexresp' 'flexresp2' 'inline' -# are configured above due to dependancy/conflict issues. -#All others are handled the standard ebuild way via econf - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - --disable-ipfw \ - --disable-profile \ - --disable-ppm-test \ - $(use_enable debug) \ - $(use_enable prelude) \ - $(use_enable stream4udp) \ - $(use_enable memory-cleanup) \ - $(use_enable decoder-preprocessor-rules) \ - $(use_enable ipv6) \ - $(use_enable targetbased) \ - $(use_enable timestats) \ - $(use_enable ruleperf) \ - $(use_enable ppm) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - $(use_enable inline-init-failopen) \ - $(use_enable react) \ - $(use_enable aruba) \ - $(use_enable gre) \ - $(use_enable mpls) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 || die "emake failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas ; dodoc schemas/* - - insinto /etc/snort - doins etc/reference.config \ - etc/classification.config \ - etc/*.map \ - etc/threshold.conf \ - etc/attribute_table.dtd \ - etc/unicode.map - - # Make some changes to snort.conf depending on the users feature selection - if use memory-cleanup || use ruleperf || use dynamicplugin; then - sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" \ - etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib - else - sed -e "s:^dynamic:# dynamic:g" \ - etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib - fi - - sed -i -e "s:RULE_PATH ../rules:RULE_PATH /etc/snort/rules:g" \ - "${D}"/etc/snort/snort.conf.distrib - - sed -i -e "s:PREPROC_RULE_PATH ../preproc_rules:PREPROC_RULE_PATH /etc/snort/preproc_rules:g" \ - "${D}"/etc/snort/snort.conf.distrib - - sed -i -e "s:^include $RULE_PATH:#include $RULE_PATH:g" \ - "${D}"/etc/snort/snort.conf.distrib - - newinitd "${FILESDIR}/snort.rc8" snort - newconfd "${FILESDIR}/snort.confd" snort - - fowners snort:snort /var/log/snort - fperms 0770 /var/log/snort - - # Install Community rules if enabled - if use community-rules; then - insinto /etc/snort/rules - doins -r "${WORKDIR}"/rules/* - fi - - # Install preproc_rules if enabled - if use decoder-preprocessor-rules; then - insinto /etc/snort/preproc_rules - doins -r "${WORKDIR}"/${P}/preproc_rules/*.rules - fi -} - -pkg_postinst() { - elog - elog "If you find that snort is using too much memory, your system" - elog "freezes, or snort crashes after a few minutes try adding the" - elog "following to your snort.conf..." - elog - elog "'config detection: search-method ac-sparsebands'" - elog - elog "To use a database backend with snort you will have to create" - elog "a database, a database user, and import the snort schema." - elog "The schema files are located in..." - elog - elog "/usr/share/doc/${PF}/schemas/" - elog - elog "Instructions for seting up your database, user, and schema imports" - elog "can be found in the README.database file located in..." - elog - elog "/usr/share/doc/${PF}" - elog - elog "Users using the unified output plugin and barnyard do not need to" - elog "compile database support into snort, but still need to set up their" - elog "database as documented in README.database." - elog - if use community-rules; then - elog - elog "The COMMUNITY ruleset has been installed." - elog - else - elog - elog "The COMMUNITY ruleset has NOT been installed." - elog - fi - elog "To learn how to manage updates to your rulesets please visit..." - elog - elog "http://oinkmaster.sourceforge.net/" - elog - elog "and then 'emerge oinkmaster'. Once oinkmaster is configured," - elog "you may want to disable the 'community-rules' USE flag." - elog - elog "It is HIGHLY recomended that you also download Sourcefire's VRT" - elog "ruleset also. For more information on obtaining the VRT ruleset," - elog "please visit... http://www.snort.org/vrt/" - elog -} diff --git a/net-analyzer/snort/snort-2.8.4-r2.ebuild b/net-analyzer/snort/snort-2.8.4-r2.ebuild deleted file mode 100644 index 6bdb79b0cdc7..000000000000 --- a/net-analyzer/snort/snort-2.8.4-r2.ebuild +++ /dev/null @@ -1,388 +0,0 @@ -# Copyright 1999-2009 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.8.4-r2.ebuild,v 1.2 2009/05/04 06:57:19 mr_bones_ Exp $ - -inherit eutils autotools multilib - -DESCRIPTION="The de facto standard for intrusion detection/prevention" -HOMEPAGE="http://www.snort.org/" -SRC_URI="http://www.snort.org/dl/${P}.tar.gz" -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86" -IUSE="static debug threads prelude memory-cleanup dynamicplugin decoder-preprocessor-rules ipv6 targetbased timestats ppm perfprofiling linux-smp-stats inline inline-init-failopen flexresp flexresp2 react aruba gre mpls postgres mysql odbc selinux" - -#flexresp, react, and inline _ONLY_ work with net-libs/libnet-1.0.2a -DEPEND="virtual/libpcap - >=dev-libs/libpcre-6.0 - flexresp2? ( dev-libs/libdnet ) - flexresp? ( ~net-libs/libnet-1.0.2a ) - react? ( ~net-libs/libnet-1.0.2a ) - postgres? ( virtual/postgresql-base ) - mysql? ( virtual/mysql ) - odbc? ( dev-db/unixODBC ) - prelude? ( >=dev-libs/libprelude-0.9.0 ) - inline? ( ~net-libs/libnet-1.0.2a net-firewall/iptables )" - -RDEPEND="${DEPEND} - dev-lang/perl - selinux? ( sec-policy/selinux-snort )" - -pkg_setup() { - - if use flexresp && use flexresp2 ; then - ewarn - ewarn - ewarn "You have both the 'flexresp' and 'flexresp2' USE" - ewarn "flags set. You can use 'flexresp' OR 'flexresp2'" - ewarn "but not both." - ewarn - ewarn "Defaulting to flexresp2..." - ewarn - ewarn - epause - fi - - if use memory-cleanup && ! use dynamicplugin; then - ewarn - ewarn - ewarn "You have enabled 'memory-cleanup' but not 'dynamicplugin'." - ewarn "'memory-cleanup' requires 'dynamicplugin' to compile." - ewarn - ewarn "Enabling dynamicplugin..." - ewarn - ewarn - epause - fi - - if use inline-init-failopen && ! use inline; then - ewarn - ewarn - ewarn "You have enabled 'inline-init-failopen' but not 'inline'." - ewarn "'inline-init-failopen' is an 'inline' only function." - ewarn - ewarn "Enabling inline mode..." - ewarn - ewarn - epause - fi - - if use ipv6 && use prelude; then - ewarn - ewarn - ewarn "You have enabled 'prelude' and 'ipv6'." - ewarn "The Prelude output plugin does not support ipv6." - ewarn - ewarn "Disabling ipv6 support..." - ewarn - ewarn - epause - fi - - # pre_inst() is a better place but we need it here for the - #'fowners' statements in src_install() - enewgroup snort - enewuser snort -1 -1 /dev/null snort - -} - -src_unpack() { - unpack ${A} - cd "${S}" - - #Dont monkey with the original source if you don't need to. - if use flexresp || use react || use inline || use inline-init-failopen; then - epatch "${FILESDIR}/${PN}-2.8.4-libnet.patch" - fi - - #Added patch to print the value of PCAP_MEMORY - epatch "${FILESDIR}/pcap_memory.patch" - - #Added patch to fix problem with the DB output plugin - #This will be included upstream in the next version released - epatch "${FILESDIR}/spo_database_fix.patch" - - #Multilib fix for the sf_engine - sed -i -e 's:${exec_prefix}/lib:${exec_prefix}/'$(get_libdir)':g' \ - "${WORKDIR}/${P}/src/dynamic-plugins/sf_engine/Makefile.am" \ - || die "sed for sf_engine failed" - - #Multilib fix for the curent set of dynamic-preprocessors - for i in ftptelnet smtp ssh dcerpc dns ssl dcerpc2; do - sed -i -e 's:${exec_prefix}/lib:${exec_prefix}/'$(get_libdir)':g' \ - "${WORKDIR}/${P}/src/dynamic-preprocessors/$i/Makefile.am" \ - || die "sed for $i failed." - done - - #This sed will prevent the example dynamic code from being compiled/installed - sed -i -e 's:$(EXAMPLES_DIR)::g' "${WORKDIR}/${P}/src/Makefile.am" - - if use prelude ; then - sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in - fi - - AT_M4DIR=m4 eautoreconf -} - -src_compile() { - local myconf - - #Both shared and static are enable by defaut so we need to be specific - if use static; then - myconf="${myconf} --enable-static --disable-shared" - else - myconf="${myconf} --disable-static --enable-shared" - fi - - #Added in ebuild version snort-2.8.3.1. Should be rechecked in updated versions. - #Use 'die' because ./configure will die any ways with the same error message... - if use ipv6 && use targetbased; then - die "Support for target-based and IPv6 cannot be enabled simultaneously in this version." - fi - - #Sourcefire is often not clear about what is and is not enabled by default - #To avoid undesired results we should be very specific - #Also, See the next 'if' for "react" - if ! use react && use flexresp && ! use flexresp2; then - myconf="${myconf} --enable-flexresp --disable-flexresp2" - elif ! use react && ! use flexresp && use flexresp2; then - myconf="${myconf} --disable-flexresp --enable-flexresp2" - elif ! use react && use flexresp && use flexresp2; then - myconf="${myconf} --disable-flexresp --enable-flexresp2" - elif ! use react && ! use flexresp && ! use flexresp2; then - myconf="${myconf} --disable-flexresp --disable-flexresp2" - fi - - #We need to do this becaue 'react' automaticly enables 'flexresp' - #but ./configure fails if both --enable-react and --enable-flexresp - #are used. Here is the error... - #ERROR! --enable-react cannot be used with --enable-flexresp - #because it is AUTOMATICALLY enabled with --enable-flexresp - #Given that --enable-flexresp is enable we know that - #--disable-flexresp2 should be used - if use react; then - myconf="${myconf} --enable-react --disable-flexresp2" - fi - - #USE flag memory-cleanup requires dynamicplugin - #Only 'dynamicplugin' is set here, 'memory-cleanup' is set below via econf. - if use memory-cleanup || use dynamicplugin; then - myconf="${myconf} --enable-dynamicplugin" - else - myconf="${myconf} --disable-dynamicplugin" - fi - - # USE flages 'targetbased' and 'inline-init-failopen' require threads - #Only 'threads' is set here. 'targetbased' and 'inline-init-failopen' are set below via econf. - if use targetbased || use inline-init-failopen || use threads; then - myconf="${myconf} --enable-pthread" - else - myconf="${myconf} --disable-pthread" - fi - - #Only needed if... - if use flexresp || use react || use inline; then - myconf="${myconf} --with-libipq-includes=/usr/include/libipq" - fi - - #'inline-init-failopen' requires 'inline' - if use inline-init-failopen || use inline; then - myconf="${myconf} --enable-inline" - else - myconf="${myconf} --disable-inline" - fi - - #'prelude' does not support 'ipv6' - if use ipv6 && use prelude; then - myconf="${myconf} --enable-prelude --disable-ipv6" - elif use ipv6 && ! use prelude; then - myconf="${myconf} --enable-ipv6" - elif use prelude && ! use ipv6; then - myconf="${myconf} --enable-prelude" - elif ! use prelude && ! use ipv6; then - myconf="${myconf} --disable-prelude --disable-ipv6" - fi - -#The --enable-<feature> options... -#'static' 'threads' 'react' 'flexresp' 'flexresp2' 'inline' 'dynamicplugin' -# are configured above due to dependancy/conflict issues. - -#All others are handled the standard ebuild way via econf - - econf \ - --without-oracle \ - $(use_with postgres postgresql) \ - $(use_with mysql) \ - $(use_with odbc) \ - --disable-ipfw \ - --disable-profile \ - --disable-ppm-test \ - $(use_enable debug) \ - $(use_enable memory-cleanup) \ - $(use_enable decoder-preprocessor-rules) \ - $(use_enable targetbased) \ - $(use_enable timestats) \ - $(use_enable ppm) \ - $(use_enable perfprofiling) \ - $(use_enable linux-smp-stats) \ - $(use_enable inline-init-failopen) \ - $(use_enable aruba) \ - $(use_enable gre) \ - $(use_enable mpls) \ - ${myconf} || die "econf failed" - - # limit to single as reported by jforman on irc - emake -j1 - -} - -src_install() { - emake DESTDIR="${D}" install || die "make install failed" - - keepdir /var/log/snort/ - fowners snort:snort /var/log/snort - - keepdir /var/run/snort/ - fowners snort:snort /var/run/snort/ - - dodoc doc/* - dodoc ./RELEASE.NOTES - docinto schemas - dodoc schemas/* - - insinto /etc/snort - doins etc/attribute_table.dtd \ - etc/classification.config \ - etc/gen-msg.map \ - etc/reference.config \ - etc/sid-msg.map \ - etc/threshold.conf \ - etc/unicode.map \ - || die "Failed to add files in /etc/snort" - - newins etc/snort.conf snort.conf.distrib - - insinto /etc/snort/preproc_rules - doins preproc_rules/decoder.rules \ - preproc_rules/preprocessor.rules \ - || die "Failed to add files in /etc/snort/preproc_rules" - - keepdir /etc/snort/rules/ - - fowners -R snort:snort /etc/snort/ - - newinitd "${FILESDIR}/snort.rc9" snort || die "Failed to add snort.rc9" - newconfd "${FILESDIR}/snort.confd" snort || die "Failed to add snort.confd" - - # Make some changes to snort.conf.distrib - - # Set the correct lib path for dynamicengine, dynamicpreprocessor, and dynamicdetection - sed -i -e 's:/usr/local/lib:/usr/'$(get_libdir)':g' \ - "${D}etc/snort/snort.conf.distrib" - - #Set the correct rule location in the config - sed -i -e 's:RULE_PATH ../rules:RULE_PATH /etc/snort/rules:g' \ - "${D}etc/snort/snort.conf.distrib" - - #Set the correct preprocessor/decoder rule location in the config - sed -i -e 's:PREPROC_RULE_PATH ../preproc_rules:PREPROC_RULE_PATH /etc/snort/preproc_rules:g' \ - "${D}etc/snort/snort.conf.distrib" - - #Enable the preprocessor/decoder rules - sed -i -e 's:^# include $PREPROC_RULE_PATH:include $PREPROC_RULE_PATH:g' \ - "${D}etc/snort/snort.conf.distrib" - sed -i -e 's:^# dynamicdetection directory:dynamicdetection directory:g' \ - "${D}etc/snort/snort.conf.distrib" - - #Just some clean up of trailing /'s in the config - sed -i -e 's:snort_dynamicpreprocessor/$:snort_dynamicpreprocessor:g' \ - "${D}etc/snort/snort.conf.distrib" - sed -i -e 's:snort_dynamicrule/$:snort_dynamicrules:g' \ - "${D}etc/snort/snort.conf.distrib" - - #Make it clear in the config where these are... - sed -i -e 's:^include classification.config:include /etc/snort/classification.config:g' \ - "${D}etc/snort/snort.conf.distrib" - sed -i -e 's:^include reference.config:include /etc/snort/reference.config:g' \ - "${D}etc/snort/snort.conf.distrib" - - #Disable all rule files by default. - #Users need to chose what they want enabled. - sed -i -e 's:^include $RULE_PATH:# include $RULE_PATH:g' \ - "${D}etc/snort/snort.conf.distrib" - -} - -pkg_postinst() { - einfo - einfo "Snort is a libpcap based packet capture tool which can be used in" - einfo "three modes Sniffer Mode, Packet Logger Mode, or Network Intrusion" - einfo "Detection System Mode." - einfo - einfo "To learn more about these modes review the Snort User Manual at..." - einfo - einfo "http://www.snort.org/docs/" - einfo - einfo "See /usr/share/doc/${PF} and /etc/snort/snort.conf.distrib for" - einfo "information on configuring snort." - einfo - einfo "Joining the Snort Users and Snort Sigs mailing list is highly" - einfo "recommended for all users..." - einfo - einfo "http://www.snort.org/community/lists.html" - einfo - elog "Snort-2.8.4-r1 Notes:" - elog "The 'ruleperf' USE flag has been removed. The Snort Dev's have" - elog "included it in the build by default now." - elog - elog "The 'stream4udp' USE flag has been removed. It is no" - elog "longer a valid compile time option." - elog "If you are still using Stream4, you should switch to using Stream5." - elog - elog "/etc/init.d/snort and /etc/conf.d/snort have been updated to" - elog "resolve some bugs with starting and stopping snort." - elog "It is important that you update these when you run 'etc-update'" - elog - elog "The 'community-rules' USE flag has been removed." - elog - elog "We are no longer distributing rule files via the snort ebuild." - elog "There are a couple of reasons for this change..." - elog - elog "1. Rule files are not versioned making it impossible to use" - elog " portage to update them properly." - elog "2. Although some of the rules are still useful, the" - elog " Community Rules are quite old (RELEASED: 2007-04-27) and" - elog " should only be used to supplement the VRT rule set." - elog "3. Sourcefire's VRT rule set requires users to register (for free)" - elog " to download them." - elog "4. Certain versions of Snort require specific rule set versions" - elog " for proper detection and to prevent Snort from breaking." - elog " (See below.)" - elog - elog "To download rules for use with Snort please, see the following" - elog - elog "Sourcefire's VRT Rules and older Community Rules:" - elog "http://www.snort.org/pub-bin/downloads.cgi" - elog - elog "Emerging Threats Rules:" - elog "http://www.emergingthreats.net/" - elog - elog "A good place to put your downloaded rules would be..." - elog "/etc/snort/rules" - elog - elog "To manage updates to your rules please visit..." - elog - elog "http://oinkmaster.sourceforge.net/" - elog - elog "and then 'emerge oinkmaster'." - elog - elog "!!!IMPORTANT!!!" - elog "Users upgrading from versions prior to Snort-2.8.4 and are using" - elog "the dcerpc or dcerpc2 preprocessor in your snort.conf file" - elog "with the netbios rules should be aware of the following" - elog "announcements..." - elog - elog "http://vrt-sourcefire.blogspot.com/2009/04/snort-284-is-nigh.html" - elog "http://vrt-sourcefire.blogspot.com/2009/02/important-snort-rule-changes-and-new.html" - elog -} |