aboutsummaryrefslogtreecommitdiff
path: root/net/analyzer
diff options
context:
space:
mode:
Diffstat (limited to 'net/analyzer')
-rw-r--r--net/analyzer/snort/doinst.sh23
-rwxr-xr-xnet/analyzer/snort/snort.SlackBuild135
2 files changed, 158 insertions, 0 deletions
diff --git a/net/analyzer/snort/doinst.sh b/net/analyzer/snort/doinst.sh
new file mode 100644
index 00000000..5e142bb4
--- /dev/null
+++ b/net/analyzer/snort/doinst.sh
@@ -0,0 +1,23 @@
+#!/bin/sh
+# got it from http://www.slacky.it/repository/slackware/slackware-11.0/network/snort/2.6.1.3/src/doinst.sh
+
+config() {
+ NEW="$1"
+ OLD="`dirname $NEW`/`basename $NEW .new`"
+ # If there's no config file by that name, mv it over:
+ if [ ! -r $OLD ]; then
+ mv $NEW $OLD
+ elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
+ rm $NEW
+ fi
+ # Otherwise, we leave the .new copy for the admin to consider...
+}
+config etc/classification.config.new
+config etc/gen-msg.map.new
+config etc/generators.new
+config etc/reference.config.new
+config etc/sid.new
+config etc/sid-msg.map.new
+config etc/snort.conf.new
+config etc/threshold.conf.new
+config etc/unicode.map.new
diff --git a/net/analyzer/snort/snort.SlackBuild b/net/analyzer/snort/snort.SlackBuild
new file mode 100755
index 00000000..5f15f70b
--- /dev/null
+++ b/net/analyzer/snort/snort.SlackBuild
@@ -0,0 +1,135 @@
+#!/bin/bash
+#
+# slackbuild script for snort
+# by rhatto at riseup.net
+#
+
+if [ -s "slack-required" ]; then
+ echo Recomended and required packages for building snort are:
+ cat slack-required | sed -e 's/^/\t/'
+ if [ "$INTERACT" != "no" ]; then
+ echo If you dont have those installed, press Ctrl-C. Otherwise, hit ENTER.
+ read crap
+# else
+# echo Sleeping 3 seconds...
+# sleep 3
+ fi
+fi
+
+CWD="`pwd`"
+
+if [ -f ~/.slackbuildrc ]; then
+ source ~/.slackbuildrc
+elif [ -f /etc/slackbuildrc ]; then
+ source /etc/slackbuildrc
+fi
+
+# default settings
+PACKAGE="snort"
+ARCH=${ARCH:=i486}
+VERSION=${VERSION:=2.6.1.3}
+BUILD=${BUILD:=1rha}
+SRC_DIR=${SRC:=$CWD}
+TMP=${TMP:=/tmp}
+REPOS=${REPOS:=$TMP}
+
+if [ "$ARCH" == "x86_64" ]; then
+ export LDFLAGS="-L/lib64 -L/usr/lib64"
+ LIBDIR=/usr/lib64
+else
+ LIBDIR=/usr/lib
+fi
+
+# ------- error codes for createpkg --------------
+ERROR_WGET=31; ERROR_MAKE=32; ERROR_INSTALL=33
+ERROR_MD5=34; ERROR_CONF=35; ERROR_HELP=36
+ERROR_TAR=37; ERROR_MKPKG=38; ERROR_GPG=39
+ERROR_PATCH=40
+
+RTOOL="wget"
+PACKAGE_EXT="gz"
+SRC="$PACKAGE-$VERSION.tar.$PACKAGE_EXT"
+URL="http://www.snort.org/dl/current/$SRC"
+
+SRC_DIR="$SRC_DIR/$PACKAGE"
+mkdir -p $SRC_DIR
+
+if [ "$RTOOL" == "wget" ] && [ ! -f "$SRC_DIR/$SRC" ]; then
+ wget "$URL" -O "$SRC_DIR/$SRC" || exit $ERROR_WGET
+fi
+
+TMP="$TMP/$PACKAGE"
+rm -rf $TMP
+mkdir -p $TMP
+cd $TMP
+
+tar xvf $SRC_DIR/$SRC || exit $ERROR_TAR
+cd $PACKAGE-$VERSION
+
+if [ -f "$CWD/$PACKAGE-$VERSION.diff" ]; then
+ patch -p1 < $CWD/$PACKAGE-$VERSION.diff || exit $ERROR_PATCH
+fi
+
+./configure --prefix=/usr --sysconfdir=/etc --libdir=$LIBDIR \
+ --localstatedir=/var --enable-pthread \
+ --enable-linux-smp-stats --with-mysql \
+ --disable-dynamicplugin || exit $ERROR_CONF
+
+make || exit $ERROR_MAKE
+make DESTDIR=$TMP/package-$PACKAGE install || exit $ERROR_INSTALL
+
+mkdir -p $TMP/package-$PACKAGE/install
+cp $CWD/doinst.sh $TMP/package-$PACKAGE/install
+
+CWD="`pwd`"
+
+cd $TMP/package-$PACKAGE
+
+find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
+find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
+
+mkdir -p etc/snort
+
+CFG="snort.conf reference.config threshold.conf classification.config gen-msg.map generators sid sid.new sid-msg.map unicode.map"
+
+for file in $CFG; do
+ cp $CWD/etc/$CFG > etc/snort/$CFG.new
+done
+
+cat << EOF > install/slack-desc
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description. Line
+# up the first '|' above the ':' following the base package name, and the '|'
+# on the right side marks the last column you can put a character in. You must
+# make exactly 11 lines for the formatting to be correct. It's also
+# customary to leave one space after the ':'.
+
+ |-----handy-ruler-----------------------------------------------------|
+snort: snort
+snort:
+snort: Snort is an open source network intrusion prevention and detection
+snort: system utilizing a rule-driven language, which combines the benefits
+snort: of signature, protocol and anomaly based inspection methods. With
+snort: millions of downloads to date, Snort is the most widely deployed
+snort: intrusion detection and prevention technology worldwide and has
+snort: become the de facto standard for the industry.
+snort:
+snort:
+snort:
+EOF
+
+# docs
+mkdir -p usr/doc/$PACKAGE-$VERSION
+
+DOCS="COPYING ChangeLog LICENSE RELEASE.NOTES"
+
+for file in $DOCS; do
+ cp $CWD/$file* usr/doc/$PACKAGE-$VERSION/
+done
+
+makepkg -c y -l y $REPOS/$PACKAGE-$VERSION-$ARCH-$BUILD.tgz || exit $ERROR_MKPKG
+
+if [ "$CLEANUP" == "yes" ]; then
+ rm -rf $TMP
+fi
+