@@ -914,6 +914,7 @@ F: package/python-parso/
F: package/rocksdb/
F: package/rygel/
F: package/safeclib/
+F: package/snort3/
F: package/suricata/
F: package/tinycbor/
F: package/tinydtls/
@@ -2180,6 +2180,7 @@ endif
source "package/sngrep/Config.in"
source "package/snmpclitools/Config.in"
source "package/snort/Config.in"
+ source "package/snort3/Config.in"
source "package/socat/Config.in"
source "package/socketcand/Config.in"
source "package/softether/Config.in"
new file mode 100644
@@ -0,0 +1,41 @@
+config BR2_PACKAGE_SNORT3
+ bool "snort3"
+ depends on BR2_PACKAGE_LUAJIT_ARCH_SUPPORTS # luajit
+ depends on !(BR2_PACKAGE_DAQ || BR2_PACKAGE_SNORT)
+ depends on BR2_USE_MMU # fork()
+ depends on BR2_INSTALL_LIBSTDCPP
+ depends on !BR2_STATIC_LIBS # daq3
+ depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # C++11
+ depends on BR2_TOOLCHAIN_HAS_THREADS # hwloc
+ depends on BR2_USE_WCHAR
+ select BR2_PACKAGE_DAQ3
+ select BR2_PACKAGE_HWLOC
+ select BR2_PACKAGE_LIBDNET
+ select BR2_PACKAGE_LIBPCAP
+ select BR2_PACKAGE_LUAJIT
+ select BR2_PACKAGE_PCRE
+ select BR2_PACKAGE_LIBTIRPC if !BR2_TOOLCHAIN_HAS_NATIVE_RPC
+ select BR2_PACKAGE_OPENSSL
+ select BR2_PACKAGE_ZLIB
+ help
+ Snort 3 is the next generation Snort IPS (Intrusion
+ Prevention System).
+
+ - Support multiple packet processing threads
+ - Shared configuration and attribute table
+ - Use a simple, scriptable configuration
+ - Make key components pluggable
+ - Autodetect services for portless configuration
+ - Support sticky buffers in rules
+ - Autogenerate reference documentation
+ - Provide better cross platform support
+
+ https://www.snort.org/snort3
+
+comment "snort3 needs a toolchain w/ C++, wchar, threads, dynamic library, gcc >= 4.9"
+ depends on BR2_PACKAGE_LUAJIT_ARCH_SUPPORTS
+ depends on !(BR2_PACKAGE_DAQ || BR2_PACKAGE_SNORT)
+ depends on BR2_USE_MMU
+ depends on !BR2_INSTALL_LIBSTDCPP || !BR2_USE_WCHAR || \
+ BR2_STATIC_LIBS || !BR2_TOOLCHAIN_HAS_THREADS || \
+ !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9
new file mode 100644
@@ -0,0 +1,6 @@
+# Locally computed:
+sha256 06e127240c9c234b17f9ff22469dd21651374fac0fec8fceea9849a108bb3499 snort3-3.0.0-270.tar.gz
+
+# Hash for license files:
+sha256 3f1cbfb20bb2c608e1a474421880d08b8cba6abb00ab7736d22c481d71656a6d COPYING
+sha256 f98260a6d3e5ef4ede8a2a6b698e5ac91d64c09243f7171e1c5b17b920a835c7 LICENSE
new file mode 100644
@@ -0,0 +1,57 @@
+################################################################################
+#
+# snort3
+#
+################################################################################
+
+SNORT3_VERSION = 3.0.0-270
+SNORT3_SITE = $(call github,snort3,snort3,$(SNORT3_VERSION))
+SNORT3_LICENSE = GPL-2.0
+SNORT3_LICENSE_FILES = COPYING LICENSE
+
+SNORT3_DEPENDENCIES = \
+ host-pkgconf daq3 hwloc libdnet libpcap luajit openssl pcre zlib
+
+SNORT3_CONF_OPTS = \
+ -DENABLE_GDB=OFF \
+ -DENABLE_STATIC_DAQ=OFF \
+ -DMAKE_DOC=OFF
+
+ifeq ($(BR2_PACKAGE_FLATBUFFERS),y)
+SNORT3_DEPENDENCIES += flatbuffers
+SNORT3_CONF_OPTS += -DHAVE_FLATBUFFERS=ON
+else
+SNORT3_CONF_OPTS += -DHAVE_FLATBUFFERS=OFF
+endif
+
+ifeq ($(BR2_PACKAGE_LIBICONV),y)
+SNORT3_DEPENDENCIES += libiconv
+SNORT3_CONF_OPTS += -DHAVE_ICONV=ON
+endif
+
+ifeq ($(BR2_PACKAGE_LIBTIRPC),y)
+SNORT3_DEPENDENCIES += libtirpc
+endif
+
+ifeq ($(BR2_PACKAGE_SAFECLIB),y)
+SNORT3_DEPENDENCIES += safeclib
+SNORT3_CONF_OPTS += -DENABLE_SAFEC=ON
+else
+SNORT3_CONF_OPTS += -DENABLE_SAFEC=OFF
+endif
+
+ifeq ($(BR2_PACKAGE_UTIL_LINUX_LIBUUID),y)
+SNORT3_DEPENDENCIES += util-linux
+SNORT3_CONF_OPTS += -DHAVE_UUID=ON
+else
+SNORT3_CONF_OPTS += -DHAVE_UUID=OFF
+endif
+
+ifeq ($(BR2_PACKAGE_XZ),y)
+SNORT3_DEPENDENCIES += xz
+SNORT3_CONF_OPTS += -DHAVE_LZMA=ON
+else
+SNORT3_CONF_OPTS += -DHAVE_LZMA=OFF
+endif
+
+$(eval $(cmake-package))
Snort 3 is the next generation Snort IPS (Intrusion Prevention System). - Support multiple packet processing threads - Shared configuration and attribute table - Use a simple, scriptable configuration - Make key components pluggable - Autodetect services for portless configuration - Support sticky buffers in rules - Autogenerate reference documentation - Provide better cross platform support https://www.snort.org/snort3 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- Changes v2 -> v3 (after review of Heiko Thiery): - Bump to latest upstream version (and so drop patches) - Update indentation of hash file to two spaces) Changes v1 -> v2: - Fix duplicate "depends on" error in Config.in DEVELOPERS | 1 + package/Config.in | 1 + package/snort3/Config.in | 41 +++++++++++++++++++++++++++ package/snort3/snort3.hash | 6 ++++ package/snort3/snort3.mk | 57 ++++++++++++++++++++++++++++++++++++++ 5 files changed, 106 insertions(+) create mode 100644 package/snort3/Config.in create mode 100644 package/snort3/snort3.hash create mode 100644 package/snort3/snort3.mk