52 lines
1.4 KiB
Ruby
52 lines
1.4 KiB
Ruby
require 'formula'
|
|
|
|
class Snort < Formula
|
|
homepage 'http://www.snort.org'
|
|
url 'http://www.snort.org/dl/snort-current/snort-2.9.2.2.tar.gz'
|
|
md5 '4254389550e3be31afebc70e64e6002f'
|
|
|
|
depends_on 'daq'
|
|
depends_on 'libdnet'
|
|
depends_on 'pcre'
|
|
|
|
def options
|
|
[['--enable-debug', "Compile Snort with --enable-debug and --enable-debug-msgs"]]
|
|
end
|
|
|
|
def install
|
|
args = %W[--prefix=#{prefix}
|
|
--disable-dependency-tracking
|
|
--enable-ipv6
|
|
--enable-gre
|
|
--enable-mpls
|
|
--enable-targetbased
|
|
--enable-decoder-preprocessor-rules
|
|
--enable-ppm
|
|
--enable-perfprofiling
|
|
--enable-zlib
|
|
--enable-active-response
|
|
--enable-normalizer
|
|
--enable-reload
|
|
--enable-react
|
|
--enable-flexresp3]
|
|
|
|
if ARGV.include?('--enable-debug')
|
|
args << "--enable-debug"
|
|
args << "--enable-debug-msgs"
|
|
else
|
|
args << "--disable-debug"
|
|
end
|
|
|
|
system "./configure", *args
|
|
system "make install"
|
|
end
|
|
|
|
def caveats
|
|
<<-EOS.undent
|
|
For snort to be functional, you need to update the permissions for /dev/bpf*
|
|
so that they can be read by non-root users. This can be done manually using:
|
|
sudo chmod 644 /dev/bpf*
|
|
or you could create a startup item to do this for you.
|
|
EOS
|
|
end
|
|
end
|