blob: b8fb802ef2dc7432fc358854d12e6908d9056228 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
# Copyright 1999-2011 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-analyzer/barnyard/barnyard-0.2.0-r1.ebuild,v 1.9 2011/01/16 00:08:16 mr_bones_ Exp $
DESCRIPTION="Fast output system for Snort"
SRC_URI="mirror://sourceforge/barnyard/barnyard-${PV/_/-}.tar.gz"
HOMEPAGE="http://www.snort.org/dl/barnyard/"
SLOT="0"
LICENSE="QPL"
KEYWORDS="~x86 -sparc"
IUSE="mysql postgres sguil"
DEPEND="net-libs/libpcap
postgres? ( dev-db/postgresql-server )
mysql? ( virtual/mysql )"
RDEPEND="${DEPEND}
net-analyzer/snort"
S=${WORKDIR}/${P/_/-}
src_compile() {
local myconf
econf \
--sysconfdir=/etc/snort \
$(use_enable postgres) \
$(use_enable mysql)|| die "bad ./configure"
emake || die "compile problem"
}
src_install () {
make DESTDIR="${D}" install || die
dodoc docs/*
dodoc AUTHORS README
keepdir /var/log/snort
keepdir /var/log/snort/archive
insinto /etc/snort
newins etc/barnyard.conf barnyard.conf
if use sguil ; then
sed -i -e "/config hostname:/s%snorthost%$(hostname)%" \
-e "/config interface/s:fxp0:eth0:" \
-e "s:output alert_fast:#output alert_fast:" \
-e "s:output log_dump:#output log_dump:" \
"${D}/etc/snort/barnyard.conf" || die "sed failed"
fi
newconfd "${FILESDIR}"/barnyard.confd barnyard
if use sguil ; then
sed -i -e s:/var/log/snort:/var/lib/sguil/$(hostname): \
-e s:/var/run/barnyard.pid:/var/run/sguil/barnyard.pid: \
"${D}/etc/conf.d/barnyard" || die "sed failed"
fi
newinitd "${FILESDIR}"/barnyard.rc6 barnyard
if use sguil ; then
sed -i -e "/start-stop-daemon --start/s:--exec:-c sguil --exec:" \
"${D}/etc/init.d/barnyard" || die "sed failed"
fi
}
pkg_postinst() {
if use sguil ; then
elog
elog "Make sure to edit /etc/snort/barnyard.conf and uncomment the"
elog "sguil section along with supplying the appropriate database"
elog "information."
elog
fi
}
|