openbsd-ports/net/snort/Makefile

# $OpenBSD: Makefile,v 1.30 2004/01/02 04:56:24 brad Exp $

COMMENT=	"highly flexible sniffer/NIDS"

DISTNAME=	snort-2.0.0
PKGNAME=	${DISTNAME}p1
CATEGORIES=	net security
MASTER_SITES=	${HOMEPAGE}/dl/

HOMEPAGE=       http://www.snort.org

MAINTAINER=	Brian Caswell <bmc@openbsd.org>

# License: GPL
PERMIT_PACKAGE_CDROM= 	Yes
PERMIT_PACKAGE_FTP=   	Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= 	Yes

SEPARATE_BUILD=	concurrent
CONFIGURE_STYLE= gnu

FLAVORS=	postgresql mysql smbalert flexresp
FLAVOR?=	

.if ${FLAVOR:L:Mflexresp}
LIB_DEPENDS+=	net::net/libnet
CONFIGURE_ENV+=	LDFLAGS="-L${LOCALBASE}/lib"
CONFIGURE_ARGS+= --enable-flexresp
.endif

.if ${FLAVOR:L:Mpostgresql}
LIB_DEPENDS+=	pq.2::databases/postgresql
CONFIGURE_ARGS+= --with-postgresql="${LOCALBASE}"
.endif

.if ${FLAVOR:L:Mmysql}
LIB_DEPENDS+=	lib/mysql/mysqlclient.10::databases/mysql
CONFIGURE_ARGS+= --with-mysql="${LOCALBASE}"
.endif

.if ${FLAVOR:L:Msmbalert}
BUILD_DEPENDS+=	:samba-*:net/samba
RUN_DEPENDS+=	:samba-*:net/samba
CONFIGURE_ARGS+= --enable-smbalerts
.endif

post-install:
	${INSTALL_DATA_DIR} ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/snort.conf ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/sid-msg.map ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
		 ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
		 ${PREFIX}/share/examples/snort
	${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${PREFIX}/share/examples/snort

.include <bsd.port.mk>
better LIB_DEPENDS entries for MySQL 2004-01-01 23:56:24 -05:00			`# $OpenBSD: Makefile,v 1.30 2004/01/02 04:56:24 brad Exp $`
* integrated COMMENT * bumped NEED_VERSION * updated my address ok obecian@ 2001-04-12 11:59:15 -04:00
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 08:51:39 -04:00			`COMMENT= "highly flexible sniffer/NIDS"`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-02 22:58:54 -05:00
update to snort-2.0.0; fixes a remote overflow - users of older versions should upgraded from bmc@snort.org 2003-04-16 09:01:42 -04:00			`DISTNAME= snort-2.0.0`
fix sparc/sparc64 detection; pointed out in spp_stream4 by Brandon Williams; ok bmc 2003-06-24 13:02:38 -04:00			`PKGNAME= ${DISTNAME}p1`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-02 22:58:54 -05:00			`CATEGORIES= net security`
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 08:51:39 -04:00			`MASTER_SITES= ${HOMEPAGE}/dl/`
Upgrade to version 1.6. Submitted by the maintainer. 2000-05-29 03:31:38 -04:00
* update to 1.8.2 2001-11-19 07:39:25 -05:00			`HOMEPAGE= http://www.snort.org`
- libnet creates a shared library now - bump mysql shared library major rev # 2001-02-28 09:32:08 -05:00
* integrated COMMENT * bumped NEED_VERSION * updated my address ok obecian@ 2001-04-12 11:59:15 -04:00			`MAINTAINER= Brian Caswell <bmc@openbsd.org>`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-02 22:58:54 -05:00
Updated to snort-1.8.6 -- This update contains a ton of fixes and features. Included is a small bit from the ChangeLog: * corrected big endian rpc decoding * stop stream4 from clobbering itself * fixed file rotation bug in spo_unified * massive speed patch for multiple CIDR blocks * corrected ICMP printing * added a ton of new signatures 2002-04-26 08:51:39 -04:00			`# License: GPL`
fake 2000-04-22 23:34:40 -04:00			`PERMIT_PACKAGE_CDROM= Yes`
			`PERMIT_PACKAGE_FTP= Yes`
			`PERMIT_DISTFILES_CDROM= Yes`
			`PERMIT_DISTFILES_FTP= Yes`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-02 22:58:54 -05:00
upgrade to snort 1.6.3; from <obecian@celerity.bartoli.org> changes by me: - add HOMEPAGE to DESCR - remove license type - add SEPARATE_BUILD option - remove unnecessary re-installation of man page durring post-install - move message from post-install to pkg/MESSAGE 2000-07-24 03:57:51 -04:00			`SEPARATE_BUILD= concurrent`
			`CONFIGURE_STYLE= gnu`
Fake. Submitted by the maintainer <halogen@nol.net> 2000-03-12 22:21:05 -05:00
snort 1.7 2001-02-11 18:51:12 -05:00			`FLAVORS= postgresql mysql smbalert flexresp`
			`FLAVOR?=`

			`.if ${FLAVOR:L:Mflexresp}`
- libnet creates a shared library now - bump mysql shared library major rev # 2001-02-28 09:32:08 -05:00			`LIB_DEPENDS+= net::net/libnet`
passing ${LDFLAGS} is unnecessary. -- Ok'd by: maintainer 2001-06-24 11:16:15 -04:00			`CONFIGURE_ENV+= LDFLAGS="-L${LOCALBASE}/lib"`
snort 1.7 2001-02-11 18:51:12 -05:00			`CONFIGURE_ARGS+= --enable-flexresp`
			`.endif`

			`.if ${FLAVOR:L:Mpostgresql}`
- fix PostgreSQL dependency entry, pg -> pq.2 - update dependency entry for MySQL. 2001-06-03 01:28:57 -04:00			`LIB_DEPENDS+= pq.2::databases/postgresql`
- fix postgres flavor issues - PREFIX -> LOCALBASE for configurations. from MAINTAINER 2001-03-12 16:46:20 -05:00			`CONFIGURE_ARGS+= --with-postgresql="${LOCALBASE}"`
snort 1.7 2001-02-11 18:51:12 -05:00			`.endif`

			`.if ${FLAVOR:L:Mmysql}`
better LIB_DEPENDS entries for MySQL 2004-01-01 23:56:24 -05:00			`LIB_DEPENDS+= lib/mysql/mysqlclient.10::databases/mysql`
- fix postgres flavor issues - PREFIX -> LOCALBASE for configurations. from MAINTAINER 2001-03-12 16:46:20 -05:00			`CONFIGURE_ARGS+= --with-mysql="${LOCALBASE}"`
snort 1.7 2001-02-11 18:51:12 -05:00			`.endif`

			`.if ${FLAVOR:L:Msmbalert}`
add specifier to RUN_DEPENDS and BUILD_DEPENDS 2002-06-09 01:31:40 -04:00			`BUILD_DEPENDS+= :samba-*:net/samba`
			`RUN_DEPENDS+= :samba-*:net/samba`
snort 1.7 2001-02-11 18:51:12 -05:00			`CONFIGURE_ARGS+= --enable-smbalerts`
			`.endif`

Upgrade to version 1.6. Submitted by the maintainer. 2000-05-29 03:31:38 -04:00			`post-install:`
snort 1.7 2001-02-11 18:51:12 -05:00			`${INSTALL_DATA_DIR} ${PREFIX}/share/examples/snort`
update net/snort to 1.9; OKed by MAINTAINER 2003-02-03 16:21:00 -05:00			`${INSTALL_DATA} ${WRKSRC}/etc/snort.conf ${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/etc/sid-msg.map ${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/etc/classification.config \`
* update to 1.8.1 BETA5 From Changelog: * added new IP defragmenter, spp_frag2 * added new stateful inspection/tcp stream reassembly plugin, spp_stream4 * Snort can now statefully detect ECN traffic (less false alarms) * stream4 can now keep session statistics in a "session.log" file * added new high-speed unified binary output system, spo_unified * added new data structs/management for tag code * added -k switch to tune checksum verification behavior * added -z switch to provide stateful verification of alerts * modified bahavior of http_decode, now only alerts once per packet * added unique Snort ID's to every Snort rule, plus generator, revision and event ID info to each alert * detection engine only alerts once per packet now, tcp stream code doesn't generate another alert packet if a previous one already alerted for that stream * fixed signal handling on svr4 systems * added enhanced cross reference printout to full/fast/syslog alert modes * added new high speed checksum verification (on x86) routines * added new ARP spoof detection preprocessor from Jeff Nathan <jeff@wwti.com> 2001-07-29 15:56:52 -04:00			`${PREFIX}/share/examples/snort`
update net/snort to 1.9; OKed by MAINTAINER 2003-02-03 16:21:00 -05:00			`${INSTALL_DATA} ${WRKSRC}/etc/reference.config \`
			`${PREFIX}/share/examples/snort`
			`${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${PREFIX}/share/examples/snort`
Initial import of snort version 1.5.1. The snort is the Highly flexible sniffer/basic NIDS. Submitted by: Kyle Hargraves <halogen@nol.net> 2000-02-02 22:58:54 -05:00
			`.include <bsd.port.mk>`