openbsd-ports/net/snort/Makefile

# $OpenBSD: Makefile,v 1.31 2004/04/12 14:56:31 sturm Exp $

COMMENT=	"highly flexible sniffer/NIDS"

DISTNAME=	snort-2.1.2
PKGNAME=	${DISTNAME}
CATEGORIES=	net security
MASTER_SITES=	${HOMEPAGE}/dl/

HOMEPAGE=       http://www.snort.org/

MAINTAINER=	Brian Caswell <bmc@openbsd.org>

# License: GPL
PERMIT_PACKAGE_CDROM= 	Yes
PERMIT_PACKAGE_FTP=   	Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= 	Yes

SEPARATE_BUILD=	concurrent
CONFIGURE_STYLE= gnu

LIB_DEPENDS=     pcre::devel/pcre

FLAVORS=	postgresql mysql smbalert flexresp
FLAVOR?=	

.if ${FLAVOR:L:Mflexresp}
LIB_DEPENDS+=	net::net/libnet
CONFIGURE_ENV+=	LDFLAGS="-L${LOCALBASE}/lib"
CONFIGURE_ARGS+= --enable-flexresp
.endif

.if ${FLAVOR:L:Mpostgresql}
LIB_DEPENDS+=	pq.2::databases/postgresql
CONFIGURE_ARGS+= --with-postgresql="${LOCALBASE}"
.endif

.if ${FLAVOR:L:Mmysql}
LIB_DEPENDS+=	lib/mysql/mysqlclient.10::databases/mysql
CONFIGURE_ARGS+= --with-mysql="${LOCALBASE}"
.endif

.if ${FLAVOR:L:Msmbalert}
BUILD_DEPENDS+=	:samba-*:net/samba
RUN_DEPENDS+=	:samba-*:net/samba
CONFIGURE_ARGS+= --enable-smbalerts
.endif

post-install:
	${INSTALL_DATA_DIR} ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/snort.conf ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/threshold.conf ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/unicode.map ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/sid-msg.map ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
		 ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
		 ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${PREFIX}/share/examples/snort

.include <bsd.port.mk>
update to snort 2.1.2 from maintainer Brian Caswell <bmc at openbsd.org>, tweaks by yours truly 2004-04-12 14:56:31 +00:00			`# $OpenBSD: Makefile,v 1.31 2004/04/12 14:56:31 sturm Exp $`
* integrated COMMENT * bumped NEED_VERSION * updated my address ok obecian@ 2001-04-12 15:59:15 +00:00
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 12:51:39 +00:00			`COMMENT= "highly flexible sniffer/NIDS"`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-03 03:58:54 +00:00
update to snort 2.1.2 from maintainer Brian Caswell <bmc at openbsd.org>, tweaks by yours truly 2004-04-12 14:56:31 +00:00			`DISTNAME= snort-2.1.2`
			`PKGNAME= ${DISTNAME}`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-03 03:58:54 +00:00			`CATEGORIES= net security`
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 12:51:39 +00:00			`MASTER_SITES= ${HOMEPAGE}/dl/`
Upgrade to version 1.6. Submitted by the maintainer. 2000-05-29 07:31:38 +00:00
update to snort 2.1.2 from maintainer Brian Caswell <bmc at openbsd.org>, tweaks by yours truly 2004-04-12 14:56:31 +00:00			`HOMEPAGE= http://www.snort.org/`
- libnet creates a shared library now - bump mysql shared library major rev # 2001-02-28 14:32:08 +00:00
* integrated COMMENT * bumped NEED_VERSION * updated my address ok obecian@ 2001-04-12 15:59:15 +00:00			`MAINTAINER= Brian Caswell <bmc@openbsd.org>`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-03 03:58:54 +00:00
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 12:51:39 +00:00			`# License: GPL`
fake 2000-04-23 03:34:40 +00:00			`PERMIT_PACKAGE_CDROM= Yes`
			`PERMIT_PACKAGE_FTP= Yes`
			`PERMIT_DISTFILES_CDROM= Yes`
			`PERMIT_DISTFILES_FTP= Yes`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-03 03:58:54 +00:00
upgrade to snort 1.6.3; from <obecian@celerity.bartoli.org> changes by me: - add HOMEPAGE to DESCR - remove license type - add SEPARATE_BUILD option - remove unnecessary re-installation of man page durring post-install - move message from post-install to pkg/MESSAGE 2000-07-24 07:57:51 +00:00			`SEPARATE_BUILD= concurrent`
			`CONFIGURE_STYLE= gnu`
Fake. Submitted by the maintainer <halogen@nol.net> 2000-03-13 03:21:05 +00:00
update to snort 2.1.2 from maintainer Brian Caswell <bmc at openbsd.org>, tweaks by yours truly 2004-04-12 14:56:31 +00:00			`LIB_DEPENDS= pcre::devel/pcre`

snort 1.7 2001-02-11 23:51:12 +00:00			`FLAVORS= postgresql mysql smbalert flexresp`
			`FLAVOR?=`

			`.if ${FLAVOR:L:Mflexresp}`
- libnet creates a shared library now - bump mysql shared library major rev # 2001-02-28 14:32:08 +00:00			`LIB_DEPENDS+= net::net/libnet`
passing ${LDFLAGS} is unnecessary. -- Ok'd by: maintainer 2001-06-24 15:16:15 +00:00			`CONFIGURE_ENV+= LDFLAGS="-L${LOCALBASE}/lib"`
snort 1.7 2001-02-11 23:51:12 +00:00			`CONFIGURE_ARGS+= --enable-flexresp`
			`.endif`

			`.if ${FLAVOR:L:Mpostgresql}`
- fix PostgreSQL dependency entry, pg -> pq.2 - update dependency entry for MySQL. 2001-06-03 05:28:57 +00:00			`LIB_DEPENDS+= pq.2::databases/postgresql`
- fix postgres flavor issues - PREFIX -> LOCALBASE for configurations. from MAINTAINER 2001-03-12 21:46:20 +00:00			`CONFIGURE_ARGS+= --with-postgresql="${LOCALBASE}"`
snort 1.7 2001-02-11 23:51:12 +00:00			`.endif`

			`.if ${FLAVOR:L:Mmysql}`
better LIB_DEPENDS entries for MySQL 2004-01-02 04:56:24 +00:00			`LIB_DEPENDS+= lib/mysql/mysqlclient.10::databases/mysql`
- fix postgres flavor issues - PREFIX -> LOCALBASE for configurations. from MAINTAINER 2001-03-12 21:46:20 +00:00			`CONFIGURE_ARGS+= --with-mysql="${LOCALBASE}"`
snort 1.7 2001-02-11 23:51:12 +00:00			`.endif`

			`.if ${FLAVOR:L:Msmbalert}`
add specifier to RUN_DEPENDS and BUILD_DEPENDS 2002-06-09 05:31:40 +00:00			`BUILD_DEPENDS+= :samba-*:net/samba`
			`RUN_DEPENDS+= :samba-*:net/samba`
snort 1.7 2001-02-11 23:51:12 +00:00			`CONFIGURE_ARGS+= --enable-smbalerts`
			`.endif`

Upgrade to version 1.6. Submitted by the maintainer. 2000-05-29 07:31:38 +00:00			`post-install:`
snort 1.7 2001-02-11 23:51:12 +00:00			`${INSTALL_DATA_DIR} ${PREFIX}/share/examples/snort`
update net/snort to 1.9; OKed by MAINTAINER 2003-02-03 21:21:00 +00:00			`${INSTALL_DATA} ${WRKSRC}/etc/snort.conf ${PREFIX}/share/examples/snort`
update to snort 2.1.2 from maintainer Brian Caswell <bmc at openbsd.org>, tweaks by yours truly 2004-04-12 14:56:31 +00:00			`${INSTALL_DATA} ${WRKSRC}/etc/threshold.conf ${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/etc/unicode.map ${PREFIX}/share/examples/snort`
update net/snort to 1.9; OKed by MAINTAINER 2003-02-03 21:21:00 +00:00			`${INSTALL_DATA} ${WRKSRC}/etc/sid-msg.map ${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/etc/classification.config \`
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com> 2001-07-29 19:56:52 +00:00			`${PREFIX}/share/examples/snort`
update net/snort to 1.9; OKed by MAINTAINER 2003-02-03 21:21:00 +00:00			`${INSTALL_DATA} ${WRKSRC}/etc/reference.config \`
			`${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${PREFIX}/share/examples/snort`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-03 03:58:54 +00:00
			`.include <bsd.port.mk>`