summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPatrick Lauer <patrick@gentoo.org>2009-05-31 22:39:54 +0000
committerPatrick Lauer <patrick@gentoo.org>2009-05-31 22:39:54 +0000
commit72e8959734da27f4b032811f3d4b157b4204c984 (patch)
tree57cfd148b2165beb001938ee7c57976d20fe065b /net-analyzer
parentamd64 stable, bug #271266 (diff)
downloadhistorical-72e8959734da27f4b032811f3d4b157b4204c984.tar.gz
historical-72e8959734da27f4b032811f3d4b157b4204c984.tar.bz2
historical-72e8959734da27f4b032811f3d4b157b4204c984.zip
Removing old
Package-Manager: portage-2.2_rc33/cvs/Linux x86_64
Diffstat (limited to 'net-analyzer')
-rw-r--r--net-analyzer/snort/ChangeLog7
-rw-r--r--net-analyzer/snort/Manifest19
-rw-r--r--net-analyzer/snort/metadata.xml5
-rw-r--r--net-analyzer/snort/snort-2.6.1.3-r1.ebuild191
-rw-r--r--net-analyzer/snort/snort-2.6.1.4-r1.ebuild193
-rw-r--r--net-analyzer/snort/snort-2.6.1.4.ebuild192
-rw-r--r--net-analyzer/snort/snort-2.7.0.1.ebuild182
-rw-r--r--net-analyzer/snort/snort-2.8.3.1.ebuild295
-rw-r--r--net-analyzer/snort/snort-2.8.4-r2.ebuild388
9 files changed, 8 insertions, 1464 deletions
diff --git a/net-analyzer/snort/ChangeLog b/net-analyzer/snort/ChangeLog
index 18045b674d27..2c567f2cbfa2 100644
--- a/net-analyzer/snort/ChangeLog
+++ b/net-analyzer/snort/ChangeLog
@@ -1,6 +1,11 @@
# ChangeLog for net-analyzer/snort
# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.150 2009/05/31 21:07:41 patrick Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.151 2009/05/31 22:39:54 patrick Exp $
+
+ 31 May 2009; Patrick Lauer <patrick@gentoo.org> -snort-2.6.1.3-r1.ebuild,
+ -snort-2.6.1.4.ebuild, -snort-2.6.1.4-r1.ebuild, -snort-2.7.0.1.ebuild,
+ -snort-2.8.3.1.ebuild, -snort-2.8.4-r2.ebuild, metadata.xml:
+ Removing old
31 May 2009; Patrick Lauer <patrick@gentoo.org> -snort-2.4.5.ebuild:
Removing old for #271680
diff --git a/net-analyzer/snort/Manifest b/net-analyzer/snort/Manifest
index 4f4f8c212ec7..5a41958b9252 100644
--- a/net-analyzer/snort/Manifest
+++ b/net-analyzer/snort/Manifest
@@ -11,22 +11,7 @@ AUX snort.rc7 740 RMD160 f9b799730b2699bd12bea76b23be13979121a12d SHA1 9e1771635
AUX snort.rc8 764 RMD160 37ca479a48a97dfcade39f4756cadc15fa31b971 SHA1 f4b79149468ceb694526972da36bb1221c72b19d SHA256 b657ad099ce1df24cbc4c5b1f48718572bec65a14cd52c9f29b87e4f7f549693
AUX snort.rc9 849 RMD160 d031761fff4cf8f7bc28a465d3b5ecc740579e21 SHA1 8c16b1f7f064ebf962ad469b55e5a6738939b8e4 SHA256 585c6e96fc2265861436347ddf52d44c1c049fe7083825e16253f7717c968ec4
AUX spo_database_fix.patch 597 RMD160 fdde2eeede5ea32b79fbf16c49419874e37f5a37 SHA1 ab3210b047a253de8a2b83b33a627356ac88281c SHA256 1f76a2aed7839bb49e8ec4652ad41999c54fcba2788b971264e69b7d89bb7acf
-DIST Community-Rules-2.4.tar.gz 110044 RMD160 ecfb4444cb0152545d823692eb6e5e2347151b54 SHA1 cbb5e5e8183608145642b3a47eb0be7fc06423f6 SHA256 4c82f90c960626aae5804c2375540f2d7241524c31ae3c7ab69df6c46e295c4c
-DIST Community-Rules-CURRENT.tar.gz 112052 RMD160 089916a6bf6db1fe56516d996dd7e062f5e96837 SHA1 8cd478c75e85f5da82d0fc4ebd29572e13066c7d SHA256 4f30a63d6a1cb4a8016540dffef99269c031cbee7ffeedf34d5bfbcd96cea417
-DIST snort-2.6.1.3.tar.gz 3700149 RMD160 0c390bd7cdbe705ba43ce8c8894bfec53c3179f6 SHA1 cb944d74ab6c254f88d356d45e4492ba560dfc3c SHA256 8cc112d6e0a55b0a7e0802428abbd1b7815e0d01a1240c84a726ecc563629a79
-DIST snort-2.6.1.4.tar.gz 3716052 RMD160 b9768992698fd9967b66b89938d38555260660ab SHA1 2709f1ef0953029a8b9a23c94dea81bcd42b2906 SHA256 5f830d3c95b6fb96b8abaa5539e71c3cdcfd8df95b376c77323149436f7bbf70
-DIST snort-2.7.0.1.tar.gz 3905846 RMD160 c88b71231bfa65e2c1eabd8931f4d6121e92a26a SHA1 9b751a73c611126c32e2dccd0a0e99aaff4e9653 SHA256 c9337c2acb34e34904e3fff8a2c31e1a3a92aa7776a9263454fd4dc5503721fa
-DIST snort-2.8.3.1.tar.gz 4309333 RMD160 53ab2df684ba327718d3dac1c8efa21c3ae05248 SHA1 384203f68e2000c490bbc5a5a2724b0b74d10e74 SHA256 edda7a8c3fe96623729ba0f34c2bda23c15a47a063bafdfc1e397680c2538d86
DIST snort-2.8.4.1.tar.gz 4567713 RMD160 8f38a37c9f169bab952946ccaba24c92d267b880 SHA1 3ffabb5366c088952fefab19a8dc19ce84d62645 SHA256 ee7f790eb3df4e6156a7c865f1ba22855394c9e3c13fdc57d60a8647267fc209
-DIST snort-2.8.4.tar.gz 4603710 RMD160 3fae1b0a472a5ae73eea323f312364bc9d7e1e2a SHA1 2e400f34728613f0e285f28dc38a0ae38733ea22 SHA256 ccf182121277730b3c5dab2ddcac15d78e00a092c7741546fc2ed9d54bd3836c
-DIST snortrules-pr-2.4.tar.gz 789097 RMD160 dd2179b3ce8a55699d2e1b857426e5489191a121 SHA1 b8b59754ccb59b1dcf324d2faa399326117a60e9 SHA256 19d2545a2a150dff8b4dbcbd0def389b6865c4c70f5084172d08a7b151e1a504
-DIST snortsam-20050110.tar.gz 29395 RMD160 ec80ce024ed7a013da35444ef1098ba3faa6cfc3 SHA1 46a274abeeea4e808849c65b9d510a5b5a221ba6 SHA256 dc428458f3c47684aabb89036ca7e601a6aa92864dbf23b31f33732b76c2a01e
-EBUILD snort-2.6.1.3-r1.ebuild 5890 RMD160 f81043cc4317907667817315dc425f79f49693fa SHA1 fd019204ead1468ad60d6c93cc58ecca87406ab4 SHA256 5eacf6083fc26e2ae2a1fc2b9238c146f5998851fe47f0ba650dd41e86617913
-EBUILD snort-2.6.1.4-r1.ebuild 6032 RMD160 4e04385e15ac0da60eb33b6decef9ef75bee2663 SHA1 0bedfba77442ea44e10376e8f8062eda69abbdd3 SHA256 be1bbc9e98f1f0b0a84ea3cd2c5c6d61b34829809b4580a09523767dc9248756
-EBUILD snort-2.6.1.4.ebuild 5984 RMD160 57047f39db0979462684f75775c876b1f3e737d2 SHA1 cc4340770104cd6ffdab42165b27bd149d68103d SHA256 ada6aa994e747869846bf6bf41e8579b0a8bda56b945a1409d0af0d3c3e99eb8
-EBUILD snort-2.7.0.1.ebuild 5408 RMD160 e9d46031bc510e0eb052e4d86906d549bd2265b9 SHA1 ef571fd63b0068b8aa86d5ca04360b6b66c1ec01 SHA256 194ec0bb0b17fa4bdd48451f1f7c940bed4454c88450833aa213207dc16a104e
-EBUILD snort-2.8.3.1.ebuild 8974 RMD160 6ef2f46e1c73fb775bd5bdff90260a364e1a0d4e SHA1 57f21974a405eb88146877dd0fa477150c568bde SHA256 82f8cb84bb3bbf6cab5715f3c0dd3fa6066ee5b1905f4200a9c31af4790613b5
-EBUILD snort-2.8.4-r2.ebuild 12926 RMD160 aa82c7a162e531bf31c5dff35c3fa1de05f72968 SHA1 b64357fcc7184cfab076c81af95a3fd2f0ac03d2 SHA256 892f2d82c00c8f757f555dbb1dab424a7dd98391640f783313d4c791b0db03d8
EBUILD snort-2.8.4.1.ebuild 12220 RMD160 298158564e737d882dc4574c892baead54a8d24b SHA1 deffbe4f0455ab2185ec08b69edb24705cd49008 SHA256 809d5e8988480ab79074ad54c81c703b7ce8dbf3b020db1e5a62f006ea06ada1
-MISC ChangeLog 26592 RMD160 f0b2ca5c097cbb0c2f6c0fffe2a8878b34f0b154 SHA1 9f59c1d28e4dca0c10dc486af2c65a67d4e31ff4 SHA256 1c81cd97624c563e23ec6c21970fa411c71afe0354b921f43418ab57cad3d421
-MISC metadata.xml 2112 RMD160 d878f27867829de9776d1c6bee6fbb1715f2d25e SHA1 e551fdbb09d199f7a2f9a41187ebafab8a0b5427 SHA256 f30d7e4625f129293544fb61e7176161eb86724912af1cddf9d15b169832a587
+MISC ChangeLog 26821 RMD160 cfd06290203fdbf953d5814a3269d3618133dc23 SHA1 a0c4351bd43a257d84d3077f9e2f9141bb9d6846 SHA256 cabae4806dc556bace3160041595f3b969736e47951e656b9da49bf3ed72efd2
+MISC metadata.xml 1690 RMD160 95a0cad02968ff90daef52e01aeb6cb0f9b81a0b SHA1 99173c543209cb76f2b5f3ceef84099f44d2f9de SHA256 bc4fadbfd95acacb60e46c3b2489beedf7fa09e5e341da5d7bb6ba69b3b6cfb6
diff --git a/net-analyzer/snort/metadata.xml b/net-analyzer/snort/metadata.xml
index edc13a3a4111..56776e5556bb 100644
--- a/net-analyzer/snort/metadata.xml
+++ b/net-analyzer/snort/metadata.xml
@@ -15,7 +15,6 @@
<use>
<flag name='aruba'>Enable Aruba support</flag>
-<flag name='community-rules'>Include Community rules</flag>
<flag name='decoder-preprocessor-rules'></flag>
<flag name='dynamicplugin'>Enable ability to dynamically load preprocessors, detection engine, and rules library</flag>
<flag name='flexresp'>Enable new connection tearing (not recommended)</flag>
@@ -30,10 +29,6 @@
<flag name='perfprofiling'>Enable preprocessor and rule performance profiling</flag>
<flag name='ppm'>Enable ppm support</flag>
<flag name='react'>Enable interception and termination of offending HTTP accesses</flag>
-<flag name='ruleperf'>Enable ruleperf support</flag>
-<flag name='sguil'>Enable sguil (The Analyst Console for Network Security Monitoring) support</flag>
-<flag name='snortsam'>patches <pkg>net-analyzer/snort</pkg> for use with <pkg>net-analyzer/snortsam</pkg></flag>
-<flag name='stream4udp'>Enable stream4udp support</flag>
<flag name='targetbased'>Enable targetbased support</flag>
<flag name='timestats'>Enable TimeStats functionality</flag>
</use>
diff --git a/net-analyzer/snort/snort-2.6.1.3-r1.ebuild b/net-analyzer/snort/snort-2.6.1.3-r1.ebuild
deleted file mode 100644
index c632fc76d505..000000000000
--- a/net-analyzer/snort/snort-2.6.1.3-r1.ebuild
+++ /dev/null
@@ -1,191 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.3-r1.ebuild,v 1.5 2008/05/21 18:50:56 dev-zero Exp $
-
-WANT_AUTOCONF="latest"
-WANT_AUTOMAKE="latest"
-AT_M4DIR=m4
-
-inherit eutils autotools
-
-DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz
- snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha amd64 ppc ppc64 ~sparc x86"
-IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin
-timestats perfprofiling linux-smp-stats flexresp2 react sguil gre"
-
-DEPEND="virtual/libc
- >=dev-libs/libpcre-4.2-r1
- virtual/libpcap
- flexresp? ( ~net-libs/libnet-1.0.2a )
- flexresp2? ( dev-libs/libdnet )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- odbc? ( dev-db/unixODBC )
- >=sys-devel/libtool-1.4
- inline? (
- ~net-libs/libnet-1.0.2a
- net-firewall/iptables
- )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )
- snortsam? ( net-analyzer/snortsam )"
-
-pkg_setup() {
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' or 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- fi
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch"
- epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch"
- use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch"
- sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \
- etc/snort.conf
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- if use snortsam ; then
- cd ..
- einfo "Applying snortsam patch"
- sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed"
- ./patchsnort.sh "${S}" || die "snortsam patch failed"
- cd "${S}"
- fi
-
- einfo "Regenerating autoconf/automake files"
- eautoreconf
-}
-
-src_compile() {
- local myconf
-
- if use flexresp2; then
- myconf="${myconf} --enable-flexresp2"
- elif use flexresp; then
- myconf="${myconf} --enable-flexresp"
- fi
-
- if use react && ! use flexresp; then
- myconf="${myconf} --enable-react"
- fi
-
- use gre && myconf="${myconf} --enable-gre"
-
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- $(use_enable prelude) \
- $(use_enable inline) \
- $(use_enable dynamicplugin) \
- $(use_enable timestats) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1 || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas ; dodoc schemas/*
-
- insinto /etc/snort
- doins etc/reference.config etc/classification.config \
- etc/*.map etc/threshold.conf
- use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf
- sed -i -e 's:/usr/local/:/usr/:g' etc/snort.conf
- newins etc/snort.conf snort.conf
-
- newinitd "${FILESDIR}/snort.rc8" snort
- newconfd "${FILESDIR}/snort.confd" snort
-
- fowners snort:snort /var/log/snort
- fperms 0770 /var/log/snort
-
- # install rules
- insinto /etc/snort/rules
- doins -r "${WORKDIR}"/rules/*
-}
-
-pkg_postinst() {
- ewarn
- ewarn "Users upgrading from snort 2.4.x should take care when updating"
- ewarn "their snort.conf. A number of significant changes have been"
- ewarn "have been added to snort 2.6 including the addition of"
- ewarn "dynamically loadable preprocessors, detection engine and rules."
- ewarn "Snort 2.6 also includes the addition of performance profiling"
- ewarn "for rules & preprocessors and uses a new default pattern matcher"
- ewarn "which provides faster matching at the expense of being very"
- ewarn "memory intensive."
- ewarn
- ewarn "If you find that snort is using too much memory, your system"
- ewarn "freezes, or snort crashes after a few minutes try adding the"
- ewarn "following to your snort.conf..."
- ewarn
- ewarn "'config detection: search-method ac-sparsebands'"
- ewarn
- ewarn "This will provide high pattern matching performance at a much"
- ewarn "lower cost to memory. For more information on the new features"
- ewarn "in snort 2.6, please take a look at the release notes located in..."
- ewarn
- ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2"
- ewarn
- einfo "To use a database as a backend for snort you will have to"
- einfo "import the correct tables to the database."
- einfo "You will have to setup a database called snort before doing the"
- einfo "following..."
- einfo
- einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort"
- einfo
- einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz"
- einfo
- einfo " ODBC: look at /usr/share/doc/${PF}/schemas/"
- einfo
- einfo "Users using the unified output plugin and barnyard do not need to"
- einfo "compile database support into snort, but still need to set up their"
- einfo "database as shown above."
- einfo
- ewarn "Only a basic set of rules was installed."
- ewarn "Please add your other sets of rules to /etc/snort/rules."
- ewarn "For more information on rules, visit ${HOMEPAGE}."
- if use sguil ; then
- elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL"
- elog "you should unmerge ${P} and emerge snort-2.4.x"
- fi
-}
diff --git a/net-analyzer/snort/snort-2.6.1.4-r1.ebuild b/net-analyzer/snort/snort-2.6.1.4-r1.ebuild
deleted file mode 100644
index ae014ccfc7b5..000000000000
--- a/net-analyzer/snort/snort-2.6.1.4-r1.ebuild
+++ /dev/null
@@ -1,193 +0,0 @@
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.4-r1.ebuild,v 1.3 2009/03/01 19:16:21 patrick Exp $
-
-WANT_AUTOCONF="latest"
-WANT_AUTOMAKE="latest"
-AT_M4DIR=m4
-
-inherit eutils autotools
-
-DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz
- snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86"
-IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin
-timestats perfprofiling linux-smp-stats flexresp2 react sguil gre"
-
-DEPEND="virtual/libc
- >=dev-libs/libpcre-4.2-r1
- virtual/libpcap
- flexresp? ( ~net-libs/libnet-1.0.2a )
- flexresp2? ( dev-libs/libdnet )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- odbc? ( dev-db/unixODBC )
- >=sys-devel/libtool-1.4
- inline? (
- ~net-libs/libnet-1.0.2a
- net-firewall/iptables
- )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )
- snortsam? ( net-analyzer/snortsam )"
-
-pkg_setup() {
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' or 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- fi
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch"
- epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch"
- epatch "${FILESDIR}/${P}-libdnet-ip6.patch"
- epatch "${FILESDIR}/${P}-server_stats.patch"
- use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch"
- sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \
- etc/snort.conf
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- if use snortsam ; then
- cd ..
- einfo "Applying snortsam patch"
- sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed"
- ./patchsnort.sh "${S}" || die "snortsam patch failed"
- cd "${S}"
- fi
-
- einfo "Regenerating autoconf/automake files"
- eautoreconf
-}
-
-src_compile() {
- local myconf
-
- if use flexresp2; then
- myconf="${myconf} --enable-flexresp2"
- elif use flexresp; then
- myconf="${myconf} --enable-flexresp"
- fi
-
- if use react && ! use flexresp; then
- myconf="${myconf} --enable-react"
- fi
-
- use gre && myconf="${myconf} --enable-gre"
-
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- $(use_enable prelude) \
- $(use_enable inline) \
- $(use_enable dynamicplugin) \
- $(use_enable timestats) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1 || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas ; dodoc schemas/*
-
- insinto /etc/snort
- doins etc/reference.config etc/classification.config \
- etc/*.map etc/threshold.conf
- use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf
- sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \
- etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib
-
- newinitd "${FILESDIR}/snort.rc8" snort
- newconfd "${FILESDIR}/snort.confd" snort
-
- fowners snort:snort /var/log/snort
- fperms 0770 /var/log/snort
-
- # install rules
- insinto /etc/snort/rules
- doins -r "${WORKDIR}"/rules/*
-}
-
-pkg_postinst() {
- ewarn
- ewarn "Users upgrading from snort 2.4.x should take care when updating"
- ewarn "their snort.conf. A number of significant changes have been"
- ewarn "have been added to snort 2.6 including the addition of"
- ewarn "dynamically loadable preprocessors, detection engine and rules."
- ewarn "Snort 2.6 also includes the addition of performance profiling"
- ewarn "for rules & preprocessors and uses a new default pattern matcher"
- ewarn "which provides faster matching at the expense of being very"
- ewarn "memory intensive."
- ewarn
- ewarn "If you find that snort is using too much memory, your system"
- ewarn "freezes, or snort crashes after a few minutes try adding the"
- ewarn "following to your snort.conf..."
- ewarn
- ewarn "'config detection: search-method ac-sparsebands'"
- ewarn
- ewarn "This will provide high pattern matching performance at a much"
- ewarn "lower cost to memory. For more information on the new features"
- ewarn "in snort 2.6, please take a look at the release notes located in..."
- ewarn
- ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2"
- ewarn
- einfo "To use a database as a backend for snort you will have to"
- einfo "import the correct tables to the database."
- einfo "You will have to setup a database called snort before doing the"
- einfo "following..."
- einfo
- einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort"
- einfo
- einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz"
- einfo
- einfo " ODBC: look at /usr/share/doc/${PF}/schemas/"
- einfo
- einfo "Users using the unified output plugin and barnyard do not need to"
- einfo "compile database support into snort, but still need to set up their"
- einfo "database as shown above."
- einfo
- ewarn "Only a basic set of rules was installed."
- ewarn "Please add your other sets of rules to /etc/snort/rules."
- ewarn "For more information on rules, visit ${HOMEPAGE}."
- if use sguil ; then
- elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL"
- elog "you should unmerge ${P} and emerge snort-2.4.x"
- fi
-}
diff --git a/net-analyzer/snort/snort-2.6.1.4.ebuild b/net-analyzer/snort/snort-2.6.1.4.ebuild
deleted file mode 100644
index a3d2418c6fbe..000000000000
--- a/net-analyzer/snort/snort-2.6.1.4.ebuild
+++ /dev/null
@@ -1,192 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.4.ebuild,v 1.6 2008/05/21 18:50:56 dev-zero Exp $
-
-WANT_AUTOCONF="latest"
-WANT_AUTOMAKE="latest"
-AT_M4DIR=m4
-
-inherit eutils autotools
-
-DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz
- snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86"
-IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin
-timestats perfprofiling linux-smp-stats flexresp2 react sguil gre"
-
-DEPEND="virtual/libc
- >=dev-libs/libpcre-4.2-r1
- virtual/libpcap
- flexresp? ( ~net-libs/libnet-1.0.2a )
- flexresp2? ( dev-libs/libdnet )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- odbc? ( dev-db/unixODBC )
- >=sys-devel/libtool-1.4
- inline? (
- ~net-libs/libnet-1.0.2a
- net-firewall/iptables
- )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )
- snortsam? ( net-analyzer/snortsam )"
-
-pkg_setup() {
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' or 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- fi
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch"
- epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch"
- epatch "${FILESDIR}/${P}-libdnet-ip6.patch"
- use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch"
- sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \
- etc/snort.conf
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- if use snortsam ; then
- cd ..
- einfo "Applying snortsam patch"
- sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed"
- ./patchsnort.sh "${S}" || die "snortsam patch failed"
- cd "${S}"
- fi
-
- einfo "Regenerating autoconf/automake files"
- eautoreconf
-}
-
-src_compile() {
- local myconf
-
- if use flexresp2; then
- myconf="${myconf} --enable-flexresp2"
- elif use flexresp; then
- myconf="${myconf} --enable-flexresp"
- fi
-
- if use react && ! use flexresp; then
- myconf="${myconf} --enable-react"
- fi
-
- use gre && myconf="${myconf} --enable-gre"
-
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- $(use_enable prelude) \
- $(use_enable inline) \
- $(use_enable dynamicplugin) \
- $(use_enable timestats) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1 || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas ; dodoc schemas/*
-
- insinto /etc/snort
- doins etc/reference.config etc/classification.config \
- etc/*.map etc/threshold.conf
- use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf
- sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \
- etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib
-
- newinitd "${FILESDIR}/snort.rc8" snort
- newconfd "${FILESDIR}/snort.confd" snort
-
- fowners snort:snort /var/log/snort
- fperms 0770 /var/log/snort
-
- # install rules
- insinto /etc/snort/rules
- doins -r "${WORKDIR}"/rules/*
-}
-
-pkg_postinst() {
- ewarn
- ewarn "Users upgrading from snort 2.4.x should take care when updating"
- ewarn "their snort.conf. A number of significant changes have been"
- ewarn "have been added to snort 2.6 including the addition of"
- ewarn "dynamically loadable preprocessors, detection engine and rules."
- ewarn "Snort 2.6 also includes the addition of performance profiling"
- ewarn "for rules & preprocessors and uses a new default pattern matcher"
- ewarn "which provides faster matching at the expense of being very"
- ewarn "memory intensive."
- ewarn
- ewarn "If you find that snort is using too much memory, your system"
- ewarn "freezes, or snort crashes after a few minutes try adding the"
- ewarn "following to your snort.conf..."
- ewarn
- ewarn "'config detection: search-method ac-sparsebands'"
- ewarn
- ewarn "This will provide high pattern matching performance at a much"
- ewarn "lower cost to memory. For more information on the new features"
- ewarn "in snort 2.6, please take a look at the release notes located in..."
- ewarn
- ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2"
- ewarn
- einfo "To use a database as a backend for snort you will have to"
- einfo "import the correct tables to the database."
- einfo "You will have to setup a database called snort before doing the"
- einfo "following..."
- einfo
- einfo " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort"
- einfo
- einfo " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz"
- einfo
- einfo " ODBC: look at /usr/share/doc/${PF}/schemas/"
- einfo
- einfo "Users using the unified output plugin and barnyard do not need to"
- einfo "compile database support into snort, but still need to set up their"
- einfo "database as shown above."
- einfo
- ewarn "Only a basic set of rules was installed."
- ewarn "Please add your other sets of rules to /etc/snort/rules."
- ewarn "For more information on rules, visit ${HOMEPAGE}."
- if use sguil ; then
- elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL"
- elog "you should unmerge ${P} and emerge snort-2.4.x"
- fi
-}
diff --git a/net-analyzer/snort/snort-2.7.0.1.ebuild b/net-analyzer/snort/snort-2.7.0.1.ebuild
deleted file mode 100644
index 50292f6b6f51..000000000000
--- a/net-analyzer/snort/snort-2.7.0.1.ebuild
+++ /dev/null
@@ -1,182 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.7.0.1.ebuild,v 1.3 2008/05/21 18:50:56 dev-zero Exp $
-
-WANT_AUTOCONF="latest"
-WANT_AUTOMAKE="latest"
-AT_M4DIR=m4
-
-inherit eutils autotools
-
-DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz
- http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz
- snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86"
-IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin
-timestats perfprofiling linux-smp-stats flexresp2 react sguil gre"
-
-DEPEND="virtual/libc
- >=dev-libs/libpcre-4.2-r1
- virtual/libpcap
- flexresp? ( ~net-libs/libnet-1.0.2a )
- flexresp2? ( dev-libs/libdnet )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- odbc? ( dev-db/unixODBC )
- >=sys-devel/libtool-1.4
- inline? (
- ~net-libs/libnet-1.0.2a
- net-firewall/iptables
- )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )
- snortsam? ( net-analyzer/snortsam )"
-
-pkg_setup() {
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' or 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- fi
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch"
- epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch"
- use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch"
- sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \
- etc/snort.conf
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- if use snortsam ; then
- cd ..
- einfo "Applying snortsam patch"
- sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed"
- ./patchsnort.sh "${S}" || die "snortsam patch failed"
- cd "${S}"
- fi
-
- einfo "Regenerating autoconf/automake files"
- eautoreconf
-}
-
-src_compile() {
- local myconf
-
- if use flexresp2; then
- myconf="${myconf} --enable-flexresp2"
- elif use flexresp; then
- myconf="${myconf} --enable-flexresp"
- fi
-
- if use react && ! use flexresp; then
- myconf="${myconf} --enable-react"
- fi
-
- use gre && myconf="${myconf} --enable-gre"
-
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- $(use_enable prelude) \
- $(use_enable inline) \
- $(use_enable dynamicplugin) \
- $(use_enable timestats) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1 || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas ; dodoc schemas/*
-
- insinto /etc/snort
- doins etc/reference.config etc/classification.config \
- etc/*.map etc/threshold.conf
- use dynamicplugin || sed -i -e 's:^dynamic:# dynamic:g' etc/snort.conf
- sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" -e 's:/usr/local/:/usr/:g' \
- etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib
-
- newinitd "${FILESDIR}/snort.rc8" snort
- newconfd "${FILESDIR}/snort.confd" snort
-
- fowners snort:snort /var/log/snort
- fperms 0770 /var/log/snort
-
- # install rules
- insinto /etc/snort/rules
- doins -r "${WORKDIR}"/rules/*
-}
-
-pkg_postinst() {
- ewarn
- ewarn "If you find that snort is using too much memory, your system"
- ewarn "freezes, or snort crashes after a few minutes try adding the"
- ewarn "following to your snort.conf..."
- ewarn
- ewarn "'config detection: search-method ac-sparsebands'"
- ewarn
- ewarn "This will provide high pattern matching performance at a much"
- ewarn "lower cost to memory. For more information on the new features"
- ewarn "in snort 2.7, please take a look at the release notes located in..."
- ewarn
- ewarn " /usr/share/doc/${PF}/RELEASE.NOTES.bz2"
- ewarn
- elog "To use a database as a backend for snort you will have to"
- elog "import the correct tables to the database."
- elog "You will have to setup a database called snort before doing the"
- elog "following..."
- elog
- elog " MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort"
- elog
- elog " PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz"
- elog
- elog " ODBC: look at /usr/share/doc/${PF}/schemas/"
- elog
- elog "Users using the unified output plugin and barnyard do not need to"
- elog "compile database support into snort, but still need to set up their"
- elog "database as shown above."
- elog
- ewarn "Only a basic set of rules was installed."
- ewarn "Please add your other sets of rules to /etc/snort/rules."
- ewarn "For more information on rules, visit ${HOMEPAGE}."
- if use sguil ; then
- elog "SGUIL needs to catch up with recent snort. If you plan on using SGUIL"
- elog "you should unmerge ${P} and emerge snort-2.4.x"
- fi
-}
diff --git a/net-analyzer/snort/snort-2.8.3.1.ebuild b/net-analyzer/snort/snort-2.8.3.1.ebuild
deleted file mode 100644
index b0aa05b34b30..000000000000
--- a/net-analyzer/snort/snort-2.8.3.1.ebuild
+++ /dev/null
@@ -1,295 +0,0 @@
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.8.3.1.ebuild,v 1.5 2009/01/26 18:37:26 vapier Exp $
-
-WANT_AUTOCONF="latest"
-WANT_AUTOMAKE="latest"
-AT_M4DIR=m4
-
-inherit eutils autotools
-
-DESCRIPTION="The de facto standard for intrusion detection/prevention"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/${P}.tar.gz
- community-rules? ( http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-CURRENT.tar.gz )"
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86"
-IUSE="static debug threads prelude stream4udp memory-cleanup decoder-preprocessor-rules ipv6 targetbased dynamicplugin timestats ruleperf ppm perfprofiling linux-smp-stats inline inline-init-failopen flexresp flexresp2 react aruba gre mpls postgres mysql odbc selinux community-rules"
-
-#flexresp, react, and inline _ONLY_ work with net-libs/libnet-1.0.2a
-DEPEND="virtual/libc
- virtual/libpcap
- >=sys-devel/libtool-1.4
- >=dev-libs/libpcre-6.0
- flexresp2? ( dev-libs/libdnet )
- flexresp? ( ~net-libs/libnet-1.0.2a )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- odbc? ( dev-db/unixODBC )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- inline? ( ~net-libs/libnet-1.0.2a net-firewall/iptables )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )"
-
-pkg_setup() {
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' OR 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- ewarn
- ewarn
- epause
- fi
-
- if use memory-cleanup && ! use dynamicplugin; then
- ewarn
- ewarn
- ewarn "You have enabled 'memory-cleanup' but not 'dynamicplugin'."
- ewarn "'memory-cleanup' requires 'dynamicplugin' to compile."
- ewarn
- ewarn "Enabling dynamicplugin..."
- ewarn
- ewarn
- epause
- fi
-
- if use ruleperf && ! use dynamicplugin; then
- ewarn
- ewarn
- ewarn "You have enabled 'ruleperf' but not 'dynamicplugin'."
- ewarn "'ruleperf' requires 'dynamicplugin' to compile."
- ewarn
- ewarn "Enabling dynamicplugin..."
- ewarn
- ewarn
- epause
- fi
-
- if use inline-init-failopen && ! use inline; then
- ewarn
- ewarn
- ewarn "You have enabled 'inline-init-failopen' but not 'inline'."
- ewarn "'inline-init-failopen' is an 'inline' only function."
- ewarn
- ewarn "Enabling inline mode..."
- ewarn
- ewarn
- epause
- fi
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- #Dont monkey with the original source if you don't need to.
- if use flexresp || use react || use inline; then
- epatch "${FILESDIR}/${PN}-2.8.3.1-libnet.patch"
- fi
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- einfo "Regenerating autoconf/automake files"
- eautoreconf
-}
-
-src_compile() {
- local myconf
-
- #Both shared and static are enable by defaut so we need to be specific
- if use static; then
- myconf="${myconf} --enable-static --disable-shared"
- else
- myconf="${myconf} --disable-static --enable-shared"
- fi
-
- #Added in ebuild version snort-2.8.3.1. Should be rechecked in updated versions.
- #Use 'die' because ./configure will die any ways with the same error message...
- if use ipv6 && use targetbased; then
- die "Support for target-based and IPv6 cannot be enabled simultaneously in this version."
- fi
-
- #Sourcefire is often not clear about what is and is not enabled by default
- #To avoid undesired results we should be very specific
- if use flexresp && ! use flexresp2; then
- myconf="${myconf} --enable-flexresp --disable-flexresp2"
- elif use flexresp2 && ! use flexresp; then
- myconf="${myconf} --disable-flexresp --enable-flexresp2"
- elif use flexresp && use flexresp2; then
- myconf="${myconf} --disable-flexresp --enable-flexresp2"
- fi
-
- # USE flages memory-cleanup and ruleperf require dynamicplugin
- #Only 'dynamicplugin' is set here. 'ruleperf' and 'memory-cleanup' are set below via econf.
- if use memory-cleanup || use ruleperf || use dynamicplugin; then
- myconf="${myconf} --enable-dynamicplugin"
- else
- myconf="${myconf} --disable-dynamicplugin"
- fi
-
- # USE flages 'targetbased' and 'inline-init-failopen' require threads
- #Only 'threads' is set here. 'targetbased' and 'inline-init-failopen' are set below via econf.
- if use targetbased || use inline-init-failopen || use threads; then
- myconf="${myconf} --enable-pthread"
- else
- myconf="${myconf} --disable-pthread"
- fi
-
- #Only needed if...
- if use flexresp || use react || use inline; then
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
- fi
-
- #'inline-init-failopen' requires 'inline'
- if use inline-init-failopen || use inline; then
- myconf="${myconf} --enable-inline"
- else
- myconf="${myconf} --disable-inline"
- fi
-
-#The --enable-<feature> options... 'static' 'dynamicplugin' 'threads' 'flexresp' 'flexresp2' 'inline'
-# are configured above due to dependancy/conflict issues.
-#All others are handled the standard ebuild way via econf
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- --disable-ipfw \
- --disable-profile \
- --disable-ppm-test \
- $(use_enable debug) \
- $(use_enable prelude) \
- $(use_enable stream4udp) \
- $(use_enable memory-cleanup) \
- $(use_enable decoder-preprocessor-rules) \
- $(use_enable ipv6) \
- $(use_enable targetbased) \
- $(use_enable timestats) \
- $(use_enable ruleperf) \
- $(use_enable ppm) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- $(use_enable inline-init-failopen) \
- $(use_enable react) \
- $(use_enable aruba) \
- $(use_enable gre) \
- $(use_enable mpls) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1 || die "emake failed"
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas ; dodoc schemas/*
-
- insinto /etc/snort
- doins etc/reference.config \
- etc/classification.config \
- etc/*.map \
- etc/threshold.conf \
- etc/attribute_table.dtd \
- etc/unicode.map
-
- # Make some changes to snort.conf depending on the users feature selection
- if use memory-cleanup || use ruleperf || use dynamicplugin; then
- sed -e "s:/usr/local/lib:/usr/$(get_libdir):g" \
- etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib
- else
- sed -e "s:^dynamic:# dynamic:g" \
- etc/snort.conf > "${D}"/etc/snort/snort.conf.distrib
- fi
-
- sed -i -e "s:RULE_PATH ../rules:RULE_PATH /etc/snort/rules:g" \
- "${D}"/etc/snort/snort.conf.distrib
-
- sed -i -e "s:PREPROC_RULE_PATH ../preproc_rules:PREPROC_RULE_PATH /etc/snort/preproc_rules:g" \
- "${D}"/etc/snort/snort.conf.distrib
-
- sed -i -e "s:^include $RULE_PATH:#include $RULE_PATH:g" \
- "${D}"/etc/snort/snort.conf.distrib
-
- newinitd "${FILESDIR}/snort.rc8" snort
- newconfd "${FILESDIR}/snort.confd" snort
-
- fowners snort:snort /var/log/snort
- fperms 0770 /var/log/snort
-
- # Install Community rules if enabled
- if use community-rules; then
- insinto /etc/snort/rules
- doins -r "${WORKDIR}"/rules/*
- fi
-
- # Install preproc_rules if enabled
- if use decoder-preprocessor-rules; then
- insinto /etc/snort/preproc_rules
- doins -r "${WORKDIR}"/${P}/preproc_rules/*.rules
- fi
-}
-
-pkg_postinst() {
- elog
- elog "If you find that snort is using too much memory, your system"
- elog "freezes, or snort crashes after a few minutes try adding the"
- elog "following to your snort.conf..."
- elog
- elog "'config detection: search-method ac-sparsebands'"
- elog
- elog "To use a database backend with snort you will have to create"
- elog "a database, a database user, and import the snort schema."
- elog "The schema files are located in..."
- elog
- elog "/usr/share/doc/${PF}/schemas/"
- elog
- elog "Instructions for seting up your database, user, and schema imports"
- elog "can be found in the README.database file located in..."
- elog
- elog "/usr/share/doc/${PF}"
- elog
- elog "Users using the unified output plugin and barnyard do not need to"
- elog "compile database support into snort, but still need to set up their"
- elog "database as documented in README.database."
- elog
- if use community-rules; then
- elog
- elog "The COMMUNITY ruleset has been installed."
- elog
- else
- elog
- elog "The COMMUNITY ruleset has NOT been installed."
- elog
- fi
- elog "To learn how to manage updates to your rulesets please visit..."
- elog
- elog "http://oinkmaster.sourceforge.net/"
- elog
- elog "and then 'emerge oinkmaster'. Once oinkmaster is configured,"
- elog "you may want to disable the 'community-rules' USE flag."
- elog
- elog "It is HIGHLY recomended that you also download Sourcefire's VRT"
- elog "ruleset also. For more information on obtaining the VRT ruleset,"
- elog "please visit... http://www.snort.org/vrt/"
- elog
-}
diff --git a/net-analyzer/snort/snort-2.8.4-r2.ebuild b/net-analyzer/snort/snort-2.8.4-r2.ebuild
deleted file mode 100644
index 6bdb79b0cdc7..000000000000
--- a/net-analyzer/snort/snort-2.8.4-r2.ebuild
+++ /dev/null
@@ -1,388 +0,0 @@
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.8.4-r2.ebuild,v 1.2 2009/05/04 06:57:19 mr_bones_ Exp $
-
-inherit eutils autotools multilib
-
-DESCRIPTION="The de facto standard for intrusion detection/prevention"
-HOMEPAGE="http://www.snort.org/"
-SRC_URI="http://www.snort.org/dl/${P}.tar.gz"
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86"
-IUSE="static debug threads prelude memory-cleanup dynamicplugin decoder-preprocessor-rules ipv6 targetbased timestats ppm perfprofiling linux-smp-stats inline inline-init-failopen flexresp flexresp2 react aruba gre mpls postgres mysql odbc selinux"
-
-#flexresp, react, and inline _ONLY_ work with net-libs/libnet-1.0.2a
-DEPEND="virtual/libpcap
- >=dev-libs/libpcre-6.0
- flexresp2? ( dev-libs/libdnet )
- flexresp? ( ~net-libs/libnet-1.0.2a )
- react? ( ~net-libs/libnet-1.0.2a )
- postgres? ( virtual/postgresql-base )
- mysql? ( virtual/mysql )
- odbc? ( dev-db/unixODBC )
- prelude? ( >=dev-libs/libprelude-0.9.0 )
- inline? ( ~net-libs/libnet-1.0.2a net-firewall/iptables )"
-
-RDEPEND="${DEPEND}
- dev-lang/perl
- selinux? ( sec-policy/selinux-snort )"
-
-pkg_setup() {
-
- if use flexresp && use flexresp2 ; then
- ewarn
- ewarn
- ewarn "You have both the 'flexresp' and 'flexresp2' USE"
- ewarn "flags set. You can use 'flexresp' OR 'flexresp2'"
- ewarn "but not both."
- ewarn
- ewarn "Defaulting to flexresp2..."
- ewarn
- ewarn
- epause
- fi
-
- if use memory-cleanup && ! use dynamicplugin; then
- ewarn
- ewarn
- ewarn "You have enabled 'memory-cleanup' but not 'dynamicplugin'."
- ewarn "'memory-cleanup' requires 'dynamicplugin' to compile."
- ewarn
- ewarn "Enabling dynamicplugin..."
- ewarn
- ewarn
- epause
- fi
-
- if use inline-init-failopen && ! use inline; then
- ewarn
- ewarn
- ewarn "You have enabled 'inline-init-failopen' but not 'inline'."
- ewarn "'inline-init-failopen' is an 'inline' only function."
- ewarn
- ewarn "Enabling inline mode..."
- ewarn
- ewarn
- epause
- fi
-
- if use ipv6 && use prelude; then
- ewarn
- ewarn
- ewarn "You have enabled 'prelude' and 'ipv6'."
- ewarn "The Prelude output plugin does not support ipv6."
- ewarn
- ewarn "Disabling ipv6 support..."
- ewarn
- ewarn
- epause
- fi
-
- # pre_inst() is a better place but we need it here for the
- #'fowners' statements in src_install()
- enewgroup snort
- enewuser snort -1 -1 /dev/null snort
-
-}
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- #Dont monkey with the original source if you don't need to.
- if use flexresp || use react || use inline || use inline-init-failopen; then
- epatch "${FILESDIR}/${PN}-2.8.4-libnet.patch"
- fi
-
- #Added patch to print the value of PCAP_MEMORY
- epatch "${FILESDIR}/pcap_memory.patch"
-
- #Added patch to fix problem with the DB output plugin
- #This will be included upstream in the next version released
- epatch "${FILESDIR}/spo_database_fix.patch"
-
- #Multilib fix for the sf_engine
- sed -i -e 's:${exec_prefix}/lib:${exec_prefix}/'$(get_libdir)':g' \
- "${WORKDIR}/${P}/src/dynamic-plugins/sf_engine/Makefile.am" \
- || die "sed for sf_engine failed"
-
- #Multilib fix for the curent set of dynamic-preprocessors
- for i in ftptelnet smtp ssh dcerpc dns ssl dcerpc2; do
- sed -i -e 's:${exec_prefix}/lib:${exec_prefix}/'$(get_libdir)':g' \
- "${WORKDIR}/${P}/src/dynamic-preprocessors/$i/Makefile.am" \
- || die "sed for $i failed."
- done
-
- #This sed will prevent the example dynamic code from being compiled/installed
- sed -i -e 's:$(EXAMPLES_DIR)::g' "${WORKDIR}/${P}/src/Makefile.am"
-
- if use prelude ; then
- sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
- fi
-
- AT_M4DIR=m4 eautoreconf
-}
-
-src_compile() {
- local myconf
-
- #Both shared and static are enable by defaut so we need to be specific
- if use static; then
- myconf="${myconf} --enable-static --disable-shared"
- else
- myconf="${myconf} --disable-static --enable-shared"
- fi
-
- #Added in ebuild version snort-2.8.3.1. Should be rechecked in updated versions.
- #Use 'die' because ./configure will die any ways with the same error message...
- if use ipv6 && use targetbased; then
- die "Support for target-based and IPv6 cannot be enabled simultaneously in this version."
- fi
-
- #Sourcefire is often not clear about what is and is not enabled by default
- #To avoid undesired results we should be very specific
- #Also, See the next 'if' for "react"
- if ! use react && use flexresp && ! use flexresp2; then
- myconf="${myconf} --enable-flexresp --disable-flexresp2"
- elif ! use react && ! use flexresp && use flexresp2; then
- myconf="${myconf} --disable-flexresp --enable-flexresp2"
- elif ! use react && use flexresp && use flexresp2; then
- myconf="${myconf} --disable-flexresp --enable-flexresp2"
- elif ! use react && ! use flexresp && ! use flexresp2; then
- myconf="${myconf} --disable-flexresp --disable-flexresp2"
- fi
-
- #We need to do this becaue 'react' automaticly enables 'flexresp'
- #but ./configure fails if both --enable-react and --enable-flexresp
- #are used. Here is the error...
- #ERROR! --enable-react cannot be used with --enable-flexresp
- #because it is AUTOMATICALLY enabled with --enable-flexresp
- #Given that --enable-flexresp is enable we know that
- #--disable-flexresp2 should be used
- if use react; then
- myconf="${myconf} --enable-react --disable-flexresp2"
- fi
-
- #USE flag memory-cleanup requires dynamicplugin
- #Only 'dynamicplugin' is set here, 'memory-cleanup' is set below via econf.
- if use memory-cleanup || use dynamicplugin; then
- myconf="${myconf} --enable-dynamicplugin"
- else
- myconf="${myconf} --disable-dynamicplugin"
- fi
-
- # USE flages 'targetbased' and 'inline-init-failopen' require threads
- #Only 'threads' is set here. 'targetbased' and 'inline-init-failopen' are set below via econf.
- if use targetbased || use inline-init-failopen || use threads; then
- myconf="${myconf} --enable-pthread"
- else
- myconf="${myconf} --disable-pthread"
- fi
-
- #Only needed if...
- if use flexresp || use react || use inline; then
- myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
- fi
-
- #'inline-init-failopen' requires 'inline'
- if use inline-init-failopen || use inline; then
- myconf="${myconf} --enable-inline"
- else
- myconf="${myconf} --disable-inline"
- fi
-
- #'prelude' does not support 'ipv6'
- if use ipv6 && use prelude; then
- myconf="${myconf} --enable-prelude --disable-ipv6"
- elif use ipv6 && ! use prelude; then
- myconf="${myconf} --enable-ipv6"
- elif use prelude && ! use ipv6; then
- myconf="${myconf} --enable-prelude"
- elif ! use prelude && ! use ipv6; then
- myconf="${myconf} --disable-prelude --disable-ipv6"
- fi
-
-#The --enable-<feature> options...
-#'static' 'threads' 'react' 'flexresp' 'flexresp2' 'inline' 'dynamicplugin'
-# are configured above due to dependancy/conflict issues.
-
-#All others are handled the standard ebuild way via econf
-
- econf \
- --without-oracle \
- $(use_with postgres postgresql) \
- $(use_with mysql) \
- $(use_with odbc) \
- --disable-ipfw \
- --disable-profile \
- --disable-ppm-test \
- $(use_enable debug) \
- $(use_enable memory-cleanup) \
- $(use_enable decoder-preprocessor-rules) \
- $(use_enable targetbased) \
- $(use_enable timestats) \
- $(use_enable ppm) \
- $(use_enable perfprofiling) \
- $(use_enable linux-smp-stats) \
- $(use_enable inline-init-failopen) \
- $(use_enable aruba) \
- $(use_enable gre) \
- $(use_enable mpls) \
- ${myconf} || die "econf failed"
-
- # limit to single as reported by jforman on irc
- emake -j1
-
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "make install failed"
-
- keepdir /var/log/snort/
- fowners snort:snort /var/log/snort
-
- keepdir /var/run/snort/
- fowners snort:snort /var/run/snort/
-
- dodoc doc/*
- dodoc ./RELEASE.NOTES
- docinto schemas
- dodoc schemas/*
-
- insinto /etc/snort
- doins etc/attribute_table.dtd \
- etc/classification.config \
- etc/gen-msg.map \
- etc/reference.config \
- etc/sid-msg.map \
- etc/threshold.conf \
- etc/unicode.map \
- || die "Failed to add files in /etc/snort"
-
- newins etc/snort.conf snort.conf.distrib
-
- insinto /etc/snort/preproc_rules
- doins preproc_rules/decoder.rules \
- preproc_rules/preprocessor.rules \
- || die "Failed to add files in /etc/snort/preproc_rules"
-
- keepdir /etc/snort/rules/
-
- fowners -R snort:snort /etc/snort/
-
- newinitd "${FILESDIR}/snort.rc9" snort || die "Failed to add snort.rc9"
- newconfd "${FILESDIR}/snort.confd" snort || die "Failed to add snort.confd"
-
- # Make some changes to snort.conf.distrib
-
- # Set the correct lib path for dynamicengine, dynamicpreprocessor, and dynamicdetection
- sed -i -e 's:/usr/local/lib:/usr/'$(get_libdir)':g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Set the correct rule location in the config
- sed -i -e 's:RULE_PATH ../rules:RULE_PATH /etc/snort/rules:g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Set the correct preprocessor/decoder rule location in the config
- sed -i -e 's:PREPROC_RULE_PATH ../preproc_rules:PREPROC_RULE_PATH /etc/snort/preproc_rules:g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Enable the preprocessor/decoder rules
- sed -i -e 's:^# include $PREPROC_RULE_PATH:include $PREPROC_RULE_PATH:g' \
- "${D}etc/snort/snort.conf.distrib"
- sed -i -e 's:^# dynamicdetection directory:dynamicdetection directory:g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Just some clean up of trailing /'s in the config
- sed -i -e 's:snort_dynamicpreprocessor/$:snort_dynamicpreprocessor:g' \
- "${D}etc/snort/snort.conf.distrib"
- sed -i -e 's:snort_dynamicrule/$:snort_dynamicrules:g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Make it clear in the config where these are...
- sed -i -e 's:^include classification.config:include /etc/snort/classification.config:g' \
- "${D}etc/snort/snort.conf.distrib"
- sed -i -e 's:^include reference.config:include /etc/snort/reference.config:g' \
- "${D}etc/snort/snort.conf.distrib"
-
- #Disable all rule files by default.
- #Users need to chose what they want enabled.
- sed -i -e 's:^include $RULE_PATH:# include $RULE_PATH:g' \
- "${D}etc/snort/snort.conf.distrib"
-
-}
-
-pkg_postinst() {
- einfo
- einfo "Snort is a libpcap based packet capture tool which can be used in"
- einfo "three modes Sniffer Mode, Packet Logger Mode, or Network Intrusion"
- einfo "Detection System Mode."
- einfo
- einfo "To learn more about these modes review the Snort User Manual at..."
- einfo
- einfo "http://www.snort.org/docs/"
- einfo
- einfo "See /usr/share/doc/${PF} and /etc/snort/snort.conf.distrib for"
- einfo "information on configuring snort."
- einfo
- einfo "Joining the Snort Users and Snort Sigs mailing list is highly"
- einfo "recommended for all users..."
- einfo
- einfo "http://www.snort.org/community/lists.html"
- einfo
- elog "Snort-2.8.4-r1 Notes:"
- elog "The 'ruleperf' USE flag has been removed. The Snort Dev's have"
- elog "included it in the build by default now."
- elog
- elog "The 'stream4udp' USE flag has been removed. It is no"
- elog "longer a valid compile time option."
- elog "If you are still using Stream4, you should switch to using Stream5."
- elog
- elog "/etc/init.d/snort and /etc/conf.d/snort have been updated to"
- elog "resolve some bugs with starting and stopping snort."
- elog "It is important that you update these when you run 'etc-update'"
- elog
- elog "The 'community-rules' USE flag has been removed."
- elog
- elog "We are no longer distributing rule files via the snort ebuild."
- elog "There are a couple of reasons for this change..."
- elog
- elog "1. Rule files are not versioned making it impossible to use"
- elog " portage to update them properly."
- elog "2. Although some of the rules are still useful, the"
- elog " Community Rules are quite old (RELEASED: 2007-04-27) and"
- elog " should only be used to supplement the VRT rule set."
- elog "3. Sourcefire's VRT rule set requires users to register (for free)"
- elog " to download them."
- elog "4. Certain versions of Snort require specific rule set versions"
- elog " for proper detection and to prevent Snort from breaking."
- elog " (See below.)"
- elog
- elog "To download rules for use with Snort please, see the following"
- elog
- elog "Sourcefire's VRT Rules and older Community Rules:"
- elog "http://www.snort.org/pub-bin/downloads.cgi"
- elog
- elog "Emerging Threats Rules:"
- elog "http://www.emergingthreats.net/"
- elog
- elog "A good place to put your downloaded rules would be..."
- elog "/etc/snort/rules"
- elog
- elog "To manage updates to your rules please visit..."
- elog
- elog "http://oinkmaster.sourceforge.net/"
- elog
- elog "and then 'emerge oinkmaster'."
- elog
- elog "!!!IMPORTANT!!!"
- elog "Users upgrading from versions prior to Snort-2.8.4 and are using"
- elog "the dcerpc or dcerpc2 preprocessor in your snort.conf file"
- elog "with the netbios rules should be aware of the following"
- elog "announcements..."
- elog
- elog "http://vrt-sourcefire.blogspot.com/2009/04/snort-284-is-nigh.html"
- elog "http://vrt-sourcefire.blogspot.com/2009/02/important-snort-rule-changes-and-new.html"
- elog
-}