kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/suricata/Makefile

89 lines
2.2 KiB
Makefile
Raw Normal View History

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
# New ports collection makefile for: suricata
# Date created: Sun Aug 29 16:39:08 BRT 2010
# Whom: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
#
# $FreeBSD$
#
PORTNAME= suricata
- Update to 1.0.3. - Add LICENSE. PR: ports/157860 Submitted by: Ryan Steinmetz <rpsfa@rit.edu> Approved by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br> (maintainer)
2011-06-22 02:29:16 +02:00
PORTVERSION= 1.0.3
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
CATEGORIES= security
MASTER_SITES= http://openinfosecfoundation.org/download/ \
http://www6.freebsdbrasil.com.br/~eksffa/l/dev/suricata/
MAINTAINER= eksffa@freebsdbrasil.com.br
COMMENT= Open Source next generation IDS/IPS engine by OISF
Add DAG Support Fix build when using custom LOCALBASE/PREFIX Pacify portlint(1) PR: ports/158147 Submitted by: rpsfa@rit.edu (me) Approved by: maintainer timeout, tabthorpe (mentor)
2011-07-19 23:14:30 +02:00
LICENSE= GPLv2
LICENSE_FILE= ${WRKSRC}/LICENSE
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
LIB_DEPENDS= pcre.0:${PORTSDIR}/devel/pcre \
yaml:${PORTSDIR}/textproc/libyaml \
pcap.1:${PORTSDIR}/net/libpcap
BUILD_DEPENDS+= ${LIBNET_CONFIG}:${PORTSDIR}/net/libnet \
pkg-config:${PORTSDIR}/devel/pkg-config
Sync to new bsd.autotools.mk
2010-12-04 08:34:27 +01:00
USE_AUTOTOOLS= automake autoconf libtool
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
USE_RC_SUBR= suricata
LIBNET_CONFIG?= ${LOCALBASE}/bin/libnet11-config
OPTIONS= IPFW "Enable IPFW/IPDIVERT for IPS usage" on \
Add DAG Support Fix build when using custom LOCALBASE/PREFIX Pacify portlint(1) PR: ports/158147 Submitted by: rpsfa@rit.edu (me) Approved by: maintainer timeout, tabthorpe (mentor)
2011-07-19 23:14:30 +02:00
PRELUDE "Enable Prelude NIDS integration" off \
DAG "Enable Endace DAG Support" off
CFLAGS+= -I${LOCALBASE}/include -L${LOCALBASE}/lib
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
SUB_FILES= pkg-message
HAS_CONFIGURE= yes
USE_GMAKE= yes
USE_LDCONFIG= yes
CONFIG_DIR?= ${PREFIX}/etc/suricata
CONFIG_FILES= suricata.yaml classification.config
RULES_DIR= ${PREFIX}/etc/suricata/rules
LOGS_DIR= /var/log/suricata
.include <bsd.port.pre.mk>
- Mark BROKEN on 6.X: does not configure PR: ports/150393 (based on) Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br> (maintainer)
2010-09-09 13:41:48 +02:00
.if ${OSVERSION} < 700000
BROKEN= does not configure on 6.X
.endif
Mark as broken on sparc64 (and, by implication, the other tier-2 archs). Hat: portmgr
2010-09-17 11:31:03 +02:00
.if ${ARCH} == "ia64" || ${ARCH} == "powerpc" || ${ARCH} == "sparc64"
BROKEN= Does not compile on ia64, powerpc, or sparc64
.endif
- Mark BROKEN on 6.X: does not configure PR: ports/150393 (based on) Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br> (maintainer)
2010-09-09 13:41:48 +02:00
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
.if defined(WITH_PRELUDE)
LIB_DEPENDS+= prelude.20:${PORTSDIR}/security/libprelude
CONFIGURE_ARGS+= --enable-prelude
PLIST_SUB+= PRELUDE=""
.endif
.if defined(WITH_IPFW)
CONFIGURE_ARGS+= --enable-ipfw
.endif
Add DAG Support Fix build when using custom LOCALBASE/PREFIX Pacify portlint(1) PR: ports/158147 Submitted by: rpsfa@rit.edu (me) Approved by: maintainer timeout, tabthorpe (mentor)
2011-07-19 23:14:30 +02:00
.if defined(WITH_DAG)
CONFIGURE_ARGS+= --enable-dag
.endif
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine developed by the Open Information Security Foundation (OISF). This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homeland Security's Directorate for Science and Technology HOST program (Homeland Open Security Technology), by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as through the very generous support of the members of the OISF Consortium. More information about the Consortium is available, as well as a list of our current Consortium Members. The Suricata Engine and the HTP Library are available to use under the GPLv2. The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of Mod Security fame for the OISF. This integrates and provides very advanced processing of HTTP streams for Suricata. The HTP library is required by the engine but may also be used independently in a range of applications and tools. WWW: http://openinfosecfoundation.org PR: ports/150191 Submitted by: Patrick Tracanelli <eksffa@freebsdbrasil.com.br>
2010-09-01 17:31:52 +02:00
pre-install:
@${REINPLACE_CMD} -e 's|/etc/suricata|${PREFIX}/etc/suricata|g' ${WRKSRC}/suricata.yaml
post-install:
[ -d ${CONFIG_DIR} ] || ${MKDIR} ${CONFIG_DIR}
[ -d ${RULES_DIR} ] || ${MKDIR} ${RULES_DIR}
[ -d ${LOGS_DIR} ] || ${MKDIR} ${LOGS_DIR}
.for f in ${CONFIG_FILES}
${INSTALL_DATA} ${WRKSRC}/${f} ${CONFIG_DIR}/${f}-sample
@if [ ! -f ${CONFIG_DIR}/${f} ]; then \
${CP} -p ${CONFIG_DIR}/${f}-sample ${CONFIG_DIR}/${f} ; \
fi
.endfor
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink