kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/barnyard2/Makefile

89 lines
2 KiB
Makefile
Raw Normal View History

Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
# New ports collection makefile for: barnyard2
# Date created: 28 Aug 2009
# Whom: pauls
#
# $FreeBSD$
#
PORTNAME= barnyard2
- update barnyard2 to version 2.1.9 Changes: 2010-12-27 - Barnyard 2.1.9 [*] Additions * spo_database. Support of encrypted connections to postgresql is now available. See README.database for the appropriate options. * spo_sguil. Fixed issue with duplication of alerts. [*] Improvements * spooler. Fixed issue with borking when reading unrecognised records. There is now sufficient information to skip and move on. * spooler. Fixed early termination of non-readable files, causing the dreaded SEGFAULT. * classifications. Tweaked output for classification identification if the appropriate node can't be found. PR: ports/154400 Submitted by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer) Feature safe: yes
2011-01-31 02:17:36 +01:00
PORTVERSION= 1.9
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
PORTREVISION= 2
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
CATEGORIES= security
MASTER_SITES= http://www.securixlive.com/download/barnyard2/
MAINTAINER= pauls@utdallas.edu
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
COMMENT= An output system for Snort or Suricata that parses unified2 files
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
OPTIONS= MYSQL "Enable MySQL support" on \
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
POSTGRESQL "Enable PostgreSQL support" off \
SNORT "Depend on security/snort" off \
- add patch to barnyard2 to allow build with postgresql and tcl (reported and fixed upstream) - display option TCL only for Master port, it makes no sense if the slave can de-select a required option - remove broken barnyard-sguil (master port was removed 2011-04-04) - add new port barnyard2-sguil [1] - add entry to MOVED PR: ports/156188 [1] Submitted by: me Approved by: maintainer timeout
2011-05-15 19:09:38 +02:00
SURICATA "Depend on security/suricata" off
.if !defined(SLAVE)
OPTIONS+= TCL "Enable TCL support" off
.endif
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
USE_RC_SUBR= barnyard2.sh
GNU_CONFIGURE= yes
SUB_FILES= pkg-message
- update barnyard2 to version 2.1.9 Changes: 2010-12-27 - Barnyard 2.1.9 [*] Additions * spo_database. Support of encrypted connections to postgresql is now available. See README.database for the appropriate options. * spo_sguil. Fixed issue with duplication of alerts. [*] Improvements * spooler. Fixed issue with borking when reading unrecognised records. There is now sufficient information to skip and move on. * spooler. Fixed early termination of non-readable files, causing the dreaded SEGFAULT. * classifications. Tweaked output for classification identification if the appropriate node can't be found. PR: ports/154400 Submitted by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer) Feature safe: yes
2011-01-31 02:17:36 +01:00
PORTDOCS1= README
PORTDOCS2= INSTALL README.aruba README.database README.sguil
PORTDOCS= ${PORTDOCS1} ${PORTDOCS2}
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
.include <bsd.port.pre.mk>
.if defined(WITH_MYSQL)
USE_MYSQL= yes
CONFIGURE_ARGS+= --with-mysql \
--with-mysql-includes=${LOCALBASE}/include/mysql \
--with-mysql-libraries=${LOCALBASE}/lib/mysql
- Selectivly adds mysql/and/or postgresql to rc script 'REQUIRES:' PR: ports/163825 Submitted by: scheidell Approved by: pauls@utdallas.edu (maintainer), gabor (mentor, implicit)
2012-01-06 22:53:32 +01:00
SUB_LIST+= MYSQL=" mysql"
.else
SUB_LIST+= MYSQL=""
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
.endif
.if defined(WITH_POSTGRESQL)
USE_PGSQL= yes
CONFIGURE_ARGS+= --with-postgresql
- Selectivly adds mysql/and/or postgresql to rc script 'REQUIRES:' PR: ports/163825 Submitted by: scheidell Approved by: pauls@utdallas.edu (maintainer), gabor (mentor, implicit)
2012-01-06 22:53:32 +01:00
SUB_LIST+= PGSQL=" postgresql"
.else
SUB_LIST+= PGSQL=""
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
.endif
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
.if defined(WITH_SNORT)
Add support for running multiple instances Adjust whitespace in Makefile PR: ports/159892 Submitted by: Paul Schmehl <pauls@utdallas.edu> (maintainer) Approved by: tabthorpe (mentor)
2011-08-19 15:02:39 +02:00
RUN_DEPENDS+= ${LOCALBASE}/bin/snort:${PORTSDIR}/security/snort
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
.endif
.if defined(WITH_SURICATA)
Add support for running multiple instances Adjust whitespace in Makefile PR: ports/159892 Submitted by: Paul Schmehl <pauls@utdallas.edu> (maintainer) Approved by: tabthorpe (mentor)
2011-08-19 15:02:39 +02:00
RUN_DEPENDS+= ${LOCALBASE}/bin/suricata:${PORTSDIR}/security/suricata
- make snort and suricata optional - bump portrevision PR: ports/156172 Submitted by: Nikolay Denev <ndenev _at_ gmail.com> Approved by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer)
2011-04-04 23:28:15 +02:00
.endif
- add patch to barnyard2 to allow build with postgresql and tcl (reported and fixed upstream) - display option TCL only for Master port, it makes no sense if the slave can de-select a required option - remove broken barnyard-sguil (master port was removed 2011-04-04) - add new port barnyard2-sguil [1] - add entry to MOVED PR: ports/156188 [1] Submitted by: me Approved by: maintainer timeout
2011-05-15 19:09:38 +02:00
.if defined(WITH_TCL)
USE_TCL= yes
CONFIGURE_ARGS+= --with-tcl=${PREFIX}/lib/tcl8.4
Add support for running multiple instances Adjust whitespace in Makefile PR: ports/159892 Submitted by: Paul Schmehl <pauls@utdallas.edu> (maintainer) Approved by: tabthorpe (mentor)
2011-08-19 15:02:39 +02:00
LIB_DEPENDS+= tcl84.1:${PORTSDIR}/lang/tcl84
- add patch to barnyard2 to allow build with postgresql and tcl (reported and fixed upstream) - display option TCL only for Master port, it makes no sense if the slave can de-select a required option - remove broken barnyard-sguil (master port was removed 2011-04-04) - add new port barnyard2-sguil [1] - add entry to MOVED PR: ports/156188 [1] Submitted by: me Approved by: maintainer timeout
2011-05-15 19:09:38 +02:00
.endif
- Fix of a previously pointyhat. Approved by: itetcu (mentor)
2010-01-17 20:55:01 +01:00
pre-install:
${CHMOD} 744 ${WRKSRC}/install-sh
- Update to 1.7 PR: ports/140393 Submitted by: maintainer (Paul Schmehl <pauls@utdallas.edu>) Approved by: itetcu (mentor)
2010-01-17 14:55:14 +01:00
- Update to 1.8 - Do not overwrite pre-existing conf file - Replace '/etc' with '${LOCALBASE}/etc' in sample conf PR: ports/148240 Submitted by: Paul Schmehl <pauls@utdallas.edu> (maintainer) Approved by: wxs@ (mentor) Feature safe: yes
2010-07-05 22:20:35 +02:00
post-patch:
@${REINPLACE_CMD} 's|/etc|${LOCALBASE}/etc|' \
${WRKSRC}/etc/barnyard2.conf
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
post-install:
.for f in barnyard2.conf
[ -f ${PREFIX}/etc/${f} ] || \
${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}
.endfor
.if !defined(NOPORTDOCS)
@${MKDIR} ${DOCSDIR}
- update barnyard2 to version 2.1.9 Changes: 2010-12-27 - Barnyard 2.1.9 [*] Additions * spo_database. Support of encrypted connections to postgresql is now available. See README.database for the appropriate options. * spo_sguil. Fixed issue with duplication of alerts. [*] Improvements * spooler. Fixed issue with borking when reading unrecognised records. There is now sufficient information to skip and move on. * spooler. Fixed early termination of non-readable files, causing the dreaded SEGFAULT. * classifications. Tweaked output for classification identification if the appropriate node can't be found. PR: ports/154400 Submitted by: Paul Schmehl <pauls _at_ utdallas.edu> (maintainer) Feature safe: yes
2011-01-31 02:17:36 +01:00
cd ${WRKSRC} && ${INSTALL_DATA} ${PORTDOCS1} ${DOCSDIR}
cd ${WRKSRC}/doc && ${INSTALL_DATA} ${PORTDOCS2} ${DOCSDIR}
Barnyard is a critical tool for the parsing of Snort's unified binary files, processing and on-forwarding to a variety of output plugins. Unfortunately it has not seen an updated in over 4 years and is not going to be maintained by the original developers. With the new version of the unified format (ie. unified2) arriving we need something to bridge this gap. The SXL team love barnyard. So much so that we want it to stay and have been tinkering around with the code to give it a breath of new life. Here is what we have achieved to far for this reinvigorated code base: * Parsing of the new unified2 log files. * Maintaining majority of the command syntax of barnyard. * Addressed all associated bug reports and feature requests arising since barnyard-0.2.0. * Completely rewritten code based on the GPLv2 Snort making it entirely GPLv2. This is an effort to fuse the awesome work of Snort and the original concept of barnyard giving it a fresh update along the way. We've come a long way so far and have a very stable build that we've integrated into our NSMnow framework. If you have any feature requests, bugs or gripes then send them our way. WWW: http://www.securixlive.com/barnyard2/ PR: 138326 Submitted by: Paul Schmehl <pauls@utdallas.edu>
2009-09-09 03:42:44 +02:00
.endif
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink