snort: introducing inline snort support via nfq daq

This commit is contained in:
Aycan iRiCAN 2015-10-02 10:11:04 +03:00
parent 922d3ec839
commit 6b84f5cd61
3 changed files with 15 additions and 5 deletions

View file

@ -1,4 +1,4 @@
{stdenv, fetchurl, flex, bison, libpcap}:
{stdenv, fetchurl, flex, bison, libpcap, libdnet, libnfnetlink, libnetfilter_queue}:
stdenv.mkDerivation rec {
name = "daq-2.0.5";
@ -9,7 +9,9 @@ stdenv.mkDerivation rec {
sha256 = "0vdwb0r9kdlgj4g0i0swafbc7qik0zmks17mhqji8cl7hpdva13p";
};
buildInputs = [ flex bison libpcap ];
buildInputs = [ flex bison libpcap libdnet libnfnetlink libnetfilter_queue];
configureFlags = "--enable-nfq-module=yes --with-dnet-includes=${libdnet}/includes --with-dnet-libraries=${libdnet}/lib";
meta = {
description = "Data AcQuisition library (DAQ), for packet I/O";

View file

@ -1,4 +1,4 @@
{stdenv, fetchurl, libpcap, pcre, libdnet, daq, zlib, flex, bison}:
{stdenv, makeWrapper, fetchurl, libpcap, pcre, libdnet, daq, zlib, flex, bison}:
stdenv.mkDerivation rec {
version = "2.9.7.2";
@ -11,6 +11,14 @@ stdenv.mkDerivation rec {
};
buildInputs = [ libpcap pcre libdnet daq zlib flex bison ];
enableParallelBuilding = true;
configureFlags = "--disable-static-daq --enable-control-socket --with-daq-includes=${daq}/includes --with-daq-libraries=${daq}/lib";
postInstall = ''
wrapProgram $out/bin/snort --add-flags "--daq-dir ${daq}/lib/daq"
'';
meta = {
description = "Network intrusion prevention and detection system (IDS/IPS)";

View file

@ -10,10 +10,10 @@ stdenv.mkDerivation {
sha1 = "71302be302e84fc19b559e811951b5d600d976f8";
};
configureFlags = [ "--enable-shared" ]; # shared libs required by hyenae
buildInputs = [ automake autoconf libtool ];
CFLAGS="-fPIC";
# .so endings are missing (quick and dirty fix)
postInstall = ''
for i in $out/lib/*; do