From patchwork Mon Apr 20 14:45:35 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabrice Fontaine X-Patchwork-Id: 1273471 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.133; helo=hemlock.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=fmMT/c6p; dkim-atps=neutral Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 495Tx61lLPz9s71 for ; Tue, 21 Apr 2020 00:44:24 +1000 (AEST) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id F148987DB1; Mon, 20 Apr 2020 14:44:20 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sQFua-JMQsGm; Mon, 20 Apr 2020 14:44:18 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by hemlock.osuosl.org (Postfix) with ESMTP id 6741887D8C; Mon, 20 Apr 2020 14:44:18 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id D57371BF402 for ; Mon, 20 Apr 2020 14:44:16 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id CF30F86D78 for ; Mon, 20 Apr 2020 14:44:16 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bgPIdkXXmFck for ; Mon, 20 Apr 2020 14:44:14 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) by whitealder.osuosl.org (Postfix) with ESMTPS id 5CDC786D6F for ; Mon, 20 Apr 2020 14:44:14 +0000 (UTC) Received: by mail-wm1-f66.google.com with SMTP id x25so11362332wmc.0 for ; Mon, 20 Apr 2020 07:44:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=scmL0AfoKG2C4IVOkHionvBPzT6nNz2TL/qxMx7hGoU=; b=fmMT/c6pzoRPbd1SC6Q1qCThmlBJtAROgWZRxhhymMfTySxiOH7q2mkSZ3xVgiXs5S pkXho7eLvX07YFcnHF9DC9LKfoTvruuh//E+2ODcr24JIlmVG0q3rLtApPxnZl62C84z nhtHDeMsAyL0M7HFaIPbCmmrwx5O9uUeNv6BTnfzIrxc8T+KZQp9KxOmiobgMv4QihEB LX3GMzR5qIRDKtrnF1iI3/e2wbvyeOwiFaLWpDyReXsIWDtagBW0n+cfLYHFW+BOoD6V kt8/0A2oGvHahQu/EqD/LnSCqIeO3e28aQbbJ5FFsBl7Vx/3v9RDZ1g2rX/gkwtr8ECX 5j1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=scmL0AfoKG2C4IVOkHionvBPzT6nNz2TL/qxMx7hGoU=; b=ddEPcHAdxx6RrtJcmUlEWHSDRdVsf9GIPPiFx4xU8YpE7CzFkfNgVQOREMNkbf4CNV mb/22yDqfididUibSqIghi/sCXeJ0a9V9etrEWYiQggA4UTdHxu6HSX/k5UgBZa8A2JT pY2Sx/DLOqWna/xHIwnyoEHv1wa4KqO/allttOUPxKG4RwF6KqzKayLnvTUpbYOFI4fM tlFfZ9E99XqBkSe5Zjt7+ffWyDDH5KW85F6wJPKE8Zl1CnaTqW+/AyHt/RfA88Wprgnj Wn4W8SDpCSWpaPi8KwvkWcxBLeostIgN2jeqYjFxKGWMafNMS9UYDXe4I/g3KxGUThGL GMzA== X-Gm-Message-State: AGi0PuaWDSPo/lRBomHBPHT374iInoaQv8ldrRgmlbK54yGPqGvimUz+ AerzxH8HGRW8afiNzAT9wfTt2Cd6 X-Google-Smtp-Source: APiQypKnykjTS3PyB5QJXS9xqo4+io8ToMmiK4Tr3k4SeTsphxxw51EvmSKU9DyKSBbcT3QY7ww0cQ== X-Received: by 2002:a1c:1dc3:: with SMTP id d186mr17917623wmd.90.1587393852114; Mon, 20 Apr 2020 07:44:12 -0700 (PDT) Received: from kali.home (lfbn-ren-1-403-35.w2-10.abo.wanadoo.fr. [2.10.23.35]) by smtp.gmail.com with ESMTPSA id a205sm1730946wmh.29.2020.04.20.07.44.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 Apr 2020 07:44:11 -0700 (PDT) From: Fabrice Fontaine To: buildroot@buildroot.org Date: Mon, 20 Apr 2020 16:45:35 +0200 Message-Id: <20200420144536.708646-1-fontaine.fabrice@gmail.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 Subject: [Buildroot] [PATCH v3,1/2] package/daq3: new package X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Fabrice Fontaine Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" Add daq3 package to be able to add the snort3 package. snort3 has an official dependency on daq 2.2.2 but this version is two years old so it seems more reasonable to add a daq3 package instead of a daq22 package. daq3 (and daq 2.2.x) is not compatatible with snort as daq_load_modules has been removed from daq 2.2.x daq3 package has been created from the daq package, here is a summary of the changes: - Drop patch (not needed anymore) - Enable parallel build as there is no more tokdefs.h - Drop libdnet dependency - Drop host-bison and host-flex dependencies - Drop libpcap workarounds - ipq module dropped since version 3.0.0-alpha1 and https://github.com/snort3/libdaq/commit/80c62799a936118c80894bf91f396c8aa8ba45a6 - Add LICENSE file (same content than COPYING) - Update hash of COPYING (project name and GPLv2 text updated with https://github.com/snort3/libdaq/commit/46e8722da230082a5728175270ea3c04432d1af0) - Add a dependency on gcc 4.9 for {t,u}h_{d,s}port that are protected on glibc by _FAVOR_BSD (and so !defined _GNU_SOURCE) until version 2.19: https://sourceware.org/git/?p=glibc.git;a=commit;h=7011c2622fe3e10a29dbe74f06aaebd07710127d Signed-off-by: Fabrice Fontaine --- Changes v2 -> v3 (after review of Heiko Thiery): - Bump to latest upstream version (and so drop second patch) - Update indentation of hash file to two spaces) - Fix first patch DEVELOPERS | 1 + package/Config.in | 1 + ...0001-configure.ac-make-C-11-optional.patch | 38 +++++++++++++++++++ package/daq3/Config.in | 14 +++++++ package/daq3/daq3.hash | 6 +++ package/daq3/daq3.mk | 30 +++++++++++++++ 6 files changed, 90 insertions(+) create mode 100644 package/daq3/0001-configure.ac-make-C-11-optional.patch create mode 100644 package/daq3/Config.in create mode 100644 package/daq3/daq3.hash create mode 100644 package/daq3/daq3.mk diff --git a/DEVELOPERS b/DEVELOPERS index b64ad3854f..fdc6632a45 100644 --- a/DEVELOPERS +++ b/DEVELOPERS @@ -849,6 +849,7 @@ F: package/belle-sip/ F: package/belr/ F: package/boinc/ F: package/cairo/ +F: package/daq3/ F: package/duktape/ F: package/expat/ F: package/flatbuffers/ diff --git a/package/Config.in b/package/Config.in index a9c6f6fcbc..bbeafb0e92 100644 --- a/package/Config.in +++ b/package/Config.in @@ -1651,6 +1651,7 @@ menu "Networking" source "package/curlpp/Config.in" source "package/czmq/Config.in" source "package/daq/Config.in" + source "package/daq3/Config.in" source "package/davici/Config.in" source "package/enet/Config.in" source "package/filemq/Config.in" diff --git a/package/daq3/0001-configure.ac-make-C-11-optional.patch b/package/daq3/0001-configure.ac-make-C-11-optional.patch new file mode 100644 index 0000000000..eae3a30eed --- /dev/null +++ b/package/daq3/0001-configure.ac-make-C-11-optional.patch @@ -0,0 +1,38 @@ +From b4008beada22d705d8a9aa5486b68789c31b139c Mon Sep 17 00:00:00 2001 +From: Fabrice Fontaine +Date: Mon, 27 Jan 2020 13:44:15 +0100 +Subject: [PATCH] configure.ac: make C++11 optional + +C++11 is optional otherwise build without C++ will fail on: +checking whether no supports C++11 features with -std=gnu++11... no +checking whether no supports C++11 features with -std=gnu++0x... no +checking whether no supports C++11 features with -std=c++11... no +checking whether no supports C++11 features with +std=c++11... no +checking whether no supports C++11 features with -h std=c++11... no +checking whether no supports C++11 features with -std=c++0x... no +checking whether no supports C++11 features with +std=c++0x... no +checking whether no supports C++11 features with -h std=c++0x... no +configure: error: *** A compiler with support for C++11 language features is required. + +Signed-off-by: Fabrice Fontaine +[Upstream status: not sent yet] +--- + configure.ac | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/configure.ac b/configure.ac +index 2b7d67d..0add302 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -29,7 +29,7 @@ AC_PROG_CXX + AM_PROG_AR + AC_PROG_SED + +-AX_CXX_COMPILE_STDCXX_11 ++AX_CXX_COMPILE_STDCXX_11(,optional) + + LT_INIT + +-- +2.24.1 + diff --git a/package/daq3/Config.in b/package/daq3/Config.in new file mode 100644 index 0000000000..ad7d55db5b --- /dev/null +++ b/package/daq3/Config.in @@ -0,0 +1,14 @@ +config BR2_PACKAGE_DAQ3 + bool "daq3" + depends on !BR2_PACKAGE_DAQ + depends on !BR2_STATIC_LIBS # dlfcn.h + depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 + help + DAQ is a Data Acquisition library for packet I/O from the + Snort project. + + https://www.snort.org + +comment "daq3 needs a toolchain w/ dynamic library, gcc >= 4.9" + depends on !BR2_PACKAGE_DAQ + depends on BR2_STATIC_LIBS || !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 diff --git a/package/daq3/daq3.hash b/package/daq3/daq3.hash new file mode 100644 index 0000000000..51842dccbd --- /dev/null +++ b/package/daq3/daq3.hash @@ -0,0 +1,6 @@ +# Locally computed: +sha256 7e5bb5487b774324156770b3505a9aa932c3fcf03d4a9aa905d286d2a71f996a daq3-3.0.0-alpha4.tar.gz + +# Hash for license files: +sha256 64601289158eddad72cb4de72652f9e64dc886942c910b38ddee93ba13b0db26 COPYING +sha256 64601289158eddad72cb4de72652f9e64dc886942c910b38ddee93ba13b0db26 LICENSE diff --git a/package/daq3/daq3.mk b/package/daq3/daq3.mk new file mode 100644 index 0000000000..c4356ce2b7 --- /dev/null +++ b/package/daq3/daq3.mk @@ -0,0 +1,30 @@ +################################################################################ +# +# daq3 +# +################################################################################ + +DAQ3_VERSION = 3.0.0-alpha4 +DAQ3_SITE = $(call github,snort3,libdaq,v$(DAQ3_VERSION)) +DAQ3_LICENSE = GPL-2.0 +DAQ3_LICENSE_FILES = COPYING LICENSE +DAQ3_INSTALL_STAGING = YES +DAQ3_DEPENDENCIES = host-pkgconf +# From git +DAQ3_AUTORECONF = YES + +ifeq ($(BR2_PACKAGE_LIBNETFILTER_QUEUE),y) +DAQ3_DEPENDENCIES += libnetfilter_queue +DAQ3_CONF_OPTS += --enable-nfq-module +else +DAQ3_CONF_OPTS += --disable-nfq-module +endif + +ifeq ($(BR2_PACKAGE_LIBPCAP),y) +DAQ3_DEPENDENCIES += libpcap +DAQ3_CONF_OPTS += --enable-pcap-module +else +DAQ3_CONF_OPTS += --disable-pcap-module +endif + +$(eval $(autotools-package)) From patchwork Mon Apr 20 14:45:36 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabrice Fontaine X-Patchwork-Id: 1273472 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.133; helo=hemlock.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=o9vrCg1L; dkim-atps=neutral Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 495Tx73J86z9sP7 for ; Tue, 21 Apr 2020 00:44:27 +1000 (AEST) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id 925CC87DAF; Mon, 20 Apr 2020 14:44:23 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sKLbpG9i71gJ; Mon, 20 Apr 2020 14:44:21 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by hemlock.osuosl.org (Postfix) with ESMTP id 7269D87D9C; Mon, 20 Apr 2020 14:44:19 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id 3780B1BF402 for ; Mon, 20 Apr 2020 14:44:17 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id 3429487D8C for ; Mon, 20 Apr 2020 14:44:17 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vgr++0UrIhD9 for ; Mon, 20 Apr 2020 14:44:16 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-wr1-f66.google.com (mail-wr1-f66.google.com [209.85.221.66]) by hemlock.osuosl.org (Postfix) with ESMTPS id C6E1287D75 for ; Mon, 20 Apr 2020 14:44:15 +0000 (UTC) Received: by mail-wr1-f66.google.com with SMTP id k1so12527756wrx.4 for ; Mon, 20 Apr 2020 07:44:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=G2AcIPXnwhbBy4uGwsyUGb5U7EW+8UOEkV2ALaXyHns=; b=o9vrCg1LiphRNeeqCsz0qGLJ0IHsPsjKg9AZNkDmgKvAWZy9IlVoGMt10H65nF7L65 PPtxcuqXhHiQBKY6djSGiwFnjLujQ0ELlBfScCVcrfoyhvW+K5iB3DNauFWh8sudRZzc 1df5d+KHOzaNVyqFJsIIyOrVdHNbMPU94id/rIJUqkYPOr0E6HxytL9nYIOtaZ9fDdUM MchO4fcmZGxHcOCZqg8YQWeiA6U+su2jOLpZVxKzWjZX8ShGxvRVfHeZBGZKoXaeccu0 tckAD2Mxy1Kh4oprhYL18Q51rQpK6JuaSiQSXAIWLleCmE50hW06KyfFlrtf2JGR+rGR n8vw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=G2AcIPXnwhbBy4uGwsyUGb5U7EW+8UOEkV2ALaXyHns=; b=E0uUArVtlQ2WB7pc1s89Zr333HtFiIUDZPr6DQn00Nwdv4xkW9YdCoeV1W1N9phJ6h t0ya01NsinKG+z1BSpdnALmVr7ZVRisAyoyaM4wuCLR+Sv3o9adU7FX43lMfEJ0hltJV jpTAUVS9tXHsawtx7OtDMf5q0OUVHlIjL5AKFjPGwmuY55tnXourPEr9uxBO1BU4dnYf fOwaQJ1WVWogKF8vVbmQpCzWp1xvmQH6VDK/3L/WaffP8yUNau6EP/P2VipML/4pHLaA 3oJZZftCY1OW1s2SPlpCxNq49grUrZOMF13MStM/l72CX2/qI7WDPfR/Ktunu+RtL4tm 1Zug== X-Gm-Message-State: AGi0Pua5ftpC9OmyH96x1da0Aah7Eo1Zv99EatQCC3w/BtSOAvCT8God qeq10dZUErzzUInTvfkvykuslP8B X-Google-Smtp-Source: APiQypK7dUsVnJye5MS4qY8fRIbIwG1w1RfbNgVS0z/8qektAxhk8PRZccoRJ7Eq4tJ8eu81Xv2KAQ== X-Received: by 2002:adf:9022:: with SMTP id h31mr18704126wrh.223.1587393853993; Mon, 20 Apr 2020 07:44:13 -0700 (PDT) Received: from kali.home (lfbn-ren-1-403-35.w2-10.abo.wanadoo.fr. [2.10.23.35]) by smtp.gmail.com with ESMTPSA id a205sm1730946wmh.29.2020.04.20.07.44.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 Apr 2020 07:44:13 -0700 (PDT) From: Fabrice Fontaine To: buildroot@buildroot.org Date: Mon, 20 Apr 2020 16:45:36 +0200 Message-Id: <20200420144536.708646-2-fontaine.fabrice@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20200420144536.708646-1-fontaine.fabrice@gmail.com> References: <20200420144536.708646-1-fontaine.fabrice@gmail.com> MIME-Version: 1.0 Subject: [Buildroot] [PATCH v3,2/2] package/snort3: new package X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Fabrice Fontaine Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" Snort 3 is the next generation Snort IPS (Intrusion Prevention System). - Support multiple packet processing threads - Shared configuration and attribute table - Use a simple, scriptable configuration - Make key components pluggable - Autodetect services for portless configuration - Support sticky buffers in rules - Autogenerate reference documentation - Provide better cross platform support https://www.snort.org/snort3 Signed-off-by: Fabrice Fontaine --- Changes v2 -> v3 (after review of Heiko Thiery): - Bump to latest upstream version (and so drop patches) - Update indentation of hash file to two spaces) Changes v1 -> v2: - Fix duplicate "depends on" error in Config.in DEVELOPERS | 1 + package/Config.in | 1 + package/snort3/Config.in | 41 +++++++++++++++++++++++++++ package/snort3/snort3.hash | 6 ++++ package/snort3/snort3.mk | 57 ++++++++++++++++++++++++++++++++++++++ 5 files changed, 106 insertions(+) create mode 100644 package/snort3/Config.in create mode 100644 package/snort3/snort3.hash create mode 100644 package/snort3/snort3.mk diff --git a/DEVELOPERS b/DEVELOPERS index fdc6632a45..c09639bfa0 100644 --- a/DEVELOPERS +++ b/DEVELOPERS @@ -914,6 +914,7 @@ F: package/python-parso/ F: package/rocksdb/ F: package/rygel/ F: package/safeclib/ +F: package/snort3/ F: package/suricata/ F: package/tinycbor/ F: package/tinydtls/ diff --git a/package/Config.in b/package/Config.in index bbeafb0e92..40ae86f89d 100644 --- a/package/Config.in +++ b/package/Config.in @@ -2180,6 +2180,7 @@ endif source "package/sngrep/Config.in" source "package/snmpclitools/Config.in" source "package/snort/Config.in" + source "package/snort3/Config.in" source "package/socat/Config.in" source "package/socketcand/Config.in" source "package/softether/Config.in" diff --git a/package/snort3/Config.in b/package/snort3/Config.in new file mode 100644 index 0000000000..be9420c848 --- /dev/null +++ b/package/snort3/Config.in @@ -0,0 +1,41 @@ +config BR2_PACKAGE_SNORT3 + bool "snort3" + depends on BR2_PACKAGE_LUAJIT_ARCH_SUPPORTS # luajit + depends on !(BR2_PACKAGE_DAQ || BR2_PACKAGE_SNORT) + depends on BR2_USE_MMU # fork() + depends on BR2_INSTALL_LIBSTDCPP + depends on !BR2_STATIC_LIBS # daq3 + depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # C++11 + depends on BR2_TOOLCHAIN_HAS_THREADS # hwloc + depends on BR2_USE_WCHAR + select BR2_PACKAGE_DAQ3 + select BR2_PACKAGE_HWLOC + select BR2_PACKAGE_LIBDNET + select BR2_PACKAGE_LIBPCAP + select BR2_PACKAGE_LUAJIT + select BR2_PACKAGE_PCRE + select BR2_PACKAGE_LIBTIRPC if !BR2_TOOLCHAIN_HAS_NATIVE_RPC + select BR2_PACKAGE_OPENSSL + select BR2_PACKAGE_ZLIB + help + Snort 3 is the next generation Snort IPS (Intrusion + Prevention System). + + - Support multiple packet processing threads + - Shared configuration and attribute table + - Use a simple, scriptable configuration + - Make key components pluggable + - Autodetect services for portless configuration + - Support sticky buffers in rules + - Autogenerate reference documentation + - Provide better cross platform support + + https://www.snort.org/snort3 + +comment "snort3 needs a toolchain w/ C++, wchar, threads, dynamic library, gcc >= 4.9" + depends on BR2_PACKAGE_LUAJIT_ARCH_SUPPORTS + depends on !(BR2_PACKAGE_DAQ || BR2_PACKAGE_SNORT) + depends on BR2_USE_MMU + depends on !BR2_INSTALL_LIBSTDCPP || !BR2_USE_WCHAR || \ + BR2_STATIC_LIBS || !BR2_TOOLCHAIN_HAS_THREADS || \ + !BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 diff --git a/package/snort3/snort3.hash b/package/snort3/snort3.hash new file mode 100644 index 0000000000..d085412e2c --- /dev/null +++ b/package/snort3/snort3.hash @@ -0,0 +1,6 @@ +# Locally computed: +sha256 06e127240c9c234b17f9ff22469dd21651374fac0fec8fceea9849a108bb3499 snort3-3.0.0-270.tar.gz + +# Hash for license files: +sha256 3f1cbfb20bb2c608e1a474421880d08b8cba6abb00ab7736d22c481d71656a6d COPYING +sha256 f98260a6d3e5ef4ede8a2a6b698e5ac91d64c09243f7171e1c5b17b920a835c7 LICENSE diff --git a/package/snort3/snort3.mk b/package/snort3/snort3.mk new file mode 100644 index 0000000000..848d00ec45 --- /dev/null +++ b/package/snort3/snort3.mk @@ -0,0 +1,57 @@ +################################################################################ +# +# snort3 +# +################################################################################ + +SNORT3_VERSION = 3.0.0-270 +SNORT3_SITE = $(call github,snort3,snort3,$(SNORT3_VERSION)) +SNORT3_LICENSE = GPL-2.0 +SNORT3_LICENSE_FILES = COPYING LICENSE + +SNORT3_DEPENDENCIES = \ + host-pkgconf daq3 hwloc libdnet libpcap luajit openssl pcre zlib + +SNORT3_CONF_OPTS = \ + -DENABLE_GDB=OFF \ + -DENABLE_STATIC_DAQ=OFF \ + -DMAKE_DOC=OFF + +ifeq ($(BR2_PACKAGE_FLATBUFFERS),y) +SNORT3_DEPENDENCIES += flatbuffers +SNORT3_CONF_OPTS += -DHAVE_FLATBUFFERS=ON +else +SNORT3_CONF_OPTS += -DHAVE_FLATBUFFERS=OFF +endif + +ifeq ($(BR2_PACKAGE_LIBICONV),y) +SNORT3_DEPENDENCIES += libiconv +SNORT3_CONF_OPTS += -DHAVE_ICONV=ON +endif + +ifeq ($(BR2_PACKAGE_LIBTIRPC),y) +SNORT3_DEPENDENCIES += libtirpc +endif + +ifeq ($(BR2_PACKAGE_SAFECLIB),y) +SNORT3_DEPENDENCIES += safeclib +SNORT3_CONF_OPTS += -DENABLE_SAFEC=ON +else +SNORT3_CONF_OPTS += -DENABLE_SAFEC=OFF +endif + +ifeq ($(BR2_PACKAGE_UTIL_LINUX_LIBUUID),y) +SNORT3_DEPENDENCIES += util-linux +SNORT3_CONF_OPTS += -DHAVE_UUID=ON +else +SNORT3_CONF_OPTS += -DHAVE_UUID=OFF +endif + +ifeq ($(BR2_PACKAGE_XZ),y) +SNORT3_DEPENDENCIES += xz +SNORT3_CONF_OPTS += -DHAVE_LZMA=ON +else +SNORT3_CONF_OPTS += -DHAVE_LZMA=OFF +endif + +$(eval $(cmake-package))