head	1.26;
access;
symbols
	RELEASE_8_3_0:1.13
	RELEASE_9_0_0:1.8
	RELEASE_7_4_0:1.6
	RELEASE_8_2_0:1.6
	RELEASE_6_EOL:1.5;
locks; strict;
comment	@# @;


1.26
date	2013.02.18.21.46.33;	author svnexp;	state Exp;
branches;
next	1.25;

1.25
date	2012.12.15.23.58.11;	author svnexp;	state Exp;
branches;
next	1.24;

1.24
date	2012.12.10.19.24.04;	author svnexp;	state Exp;
branches;
next	1.23;

1.23
date	2012.11.18.08.24.58;	author svnexp;	state Exp;
branches;
next	1.22;

1.22
date	2012.11.17.06.01.21;	author svnexp;	state Exp;
branches;
next	1.21;

1.21
date	2012.11.02.19.10.30;	author zi;	state Exp;
branches;
next	1.20;

1.20
date	2012.10.10.11.42.04;	author zi;	state Exp;
branches;
next	1.19;

1.19
date	2012.09.06.02.17.32;	author zi;	state Exp;
branches;
next	1.18;

1.18
date	2012.09.06.02.07.34;	author zi;	state Exp;
branches;
next	1.17;

1.17
date	2012.07.26.05.40.22;	author bapt;	state Exp;
branches;
next	1.16;

1.16
date	2012.07.16.11.18.34;	author zi;	state Exp;
branches;
next	1.15;

1.15
date	2012.07.11.02.36.53;	author zi;	state Exp;
branches;
next	1.14;

1.14
date	2012.05.11.20.38.08;	author ade;	state Exp;
branches;
next	1.13;

1.13
date	2012.03.23.14.27.51;	author zi;	state Exp;
branches;
next	1.12;

1.12
date	2012.03.13.12.04.25;	author zi;	state Exp;
branches;
next	1.11;

1.11
date	2012.02.23.14.05.49;	author zi;	state Exp;
branches;
next	1.10;

1.10
date	2012.02.14.12.45.29;	author mm;	state Exp;
branches;
next	1.9;

1.9
date	2012.01.10.19.34.02;	author wxs;	state Exp;
branches;
next	1.8;

1.8
date	2011.07.19.21.14.30;	author zi;	state Exp;
branches;
next	1.7;

1.7
date	2011.06.22.00.29.16;	author wxs;	state Exp;
branches;
next	1.6;

1.6
date	2010.12.04.07.33.32;	author ade;	state Exp;
branches;
next	1.5;

1.5
date	2010.10.16.11.52.35;	author ade;	state Exp;
branches;
next	1.4;

1.4
date	2010.09.17.09.31.03;	author linimon;	state Exp;
branches;
next	1.3;

1.3
date	2010.09.15.18.35.11;	author ade;	state Exp;
branches;
next	1.2;

1.2
date	2010.09.09.11.41.48;	author pav;	state Exp;
branches;
next	1.1;

1.1
date	2010.09.01.15.31.51;	author jmelo;	state Exp;
branches;
next	;


desc
@@


1.26
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/312526
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@# Created by: Patrick Tracanelli <eksffa@@freebsdbrasil.com.br>
# $FreeBSD: head/security/suricata/Makefile 312526 2013-02-18 21:13:02Z dinoex $

PORTNAME=	suricata
PORTVERSION=	1.3.4
PORTREVISION=	3
CATEGORIES=	security
MASTER_SITES=	http://www.openinfosecfoundation.org/download/ \
		http://mirrors.rit.edu/zi/

MAINTAINER=	zi@@FreeBSD.org
COMMENT=	Open Source next generation IDS/IPS engine by OISF

LICENSE=	GPLv2
LICENSE_FILE=	${WRKSRC}/LICENSE

LIB_DEPENDS=	pcre:${PORTSDIR}/devel/pcre \
		yaml:${PORTSDIR}/textproc/libyaml \
		htp:${PORTSDIR}/devel/libhtp

LIB_DEPENDS+=	net:${PORTSDIR}/net/libnet

USE_AUTOTOOLS=	automake autoconf libtool
USE_PKGCONFIG=	yes

USE_RC_SUBR=	suricata

LIBNET_CONFIG?=	${LOCALBASE}/bin/libnet11-config

OPTIONS_DEFINE=	IPFW PRELUDE PORTS_PCAP DAG
OPTIONS_DEFAULT=IPFW

IPFW_DESC=	Enable ipfw/ipdivert for IPS usage
PRELUDE_DESC=	Enable Prelude NIDS integration
PORTS_PCAP_DESC=Use libpcap from ports
DAG_DESC=	Enable Endace DAG Support

.include <bsd.port.options.mk>

SUB_FILES=	pkg-message
HAS_CONFIGURE=	yes
USE_GMAKE=	yes
USE_LDCONFIG=	yes
CONFIGURE_ARGS+=--enable-non-bundled-htp --enable-gccprotect \
		--with-libpcre-includes=${LOCALBASE}/include \
		--with-libpcre-libraries=${LOCALBASE}/lib \
		--with-libyaml-includes=${LOCALBASE}/include \
		--with-libyaml-libraries=${LOCALBASE}/lib \
		--with-libnet-includes=${LOCALBASE}/include/libnet11 \
		--with-libnet-libraries=${LOCALBASE}/lib/libnet11

CONFIG_DIR?=	${PREFIX}/etc/suricata
CONFIG_FILES=	suricata.yaml classification.config reference.config
RULES_DIR=	${PREFIX}/etc/suricata/rules
LOGS_DIR=	/var/log/suricata

.include <bsd.port.pre.mk>

.if ${ARCH} == "ia64" || ${ARCH} == "powerpc" || ${ARCH} == "sparc64"
BROKEN=		Does not compile on ia64, powerpc, or sparc64
.endif

.if ${CC} == "clang" || ${CXX} == "clang++"
BROKEN=		Does not build when compiled with clang
.endif

.if ${PORT_OPTIONS:MPRELUDE}
LIB_DEPENDS+=		prelude:${PORTSDIR}/security/libprelude
CONFIGURE_ARGS+=	--enable-prelude \
			--with-libprelude-prefix=${LOCALBASE}
PLIST_SUB+=		PRELUDE=""
.endif

.if ${PORT_OPTIONS:MIPFW}
CONFIGURE_ARGS+=	--enable-ipfw
.endif

.if ${PORT_OPTIONS:MPORTS_PCAP}
LIB_DEPENDS+=		pcap:${PORTSDIR}/net/libpcap
CONFIGURE_ARGS+=	--with-libpcap-includes=${LOCALBASE}/include \
			--with-libpcap-libraries=${LOCALBASE}/lib
.else
CONFIGURE_ARGS+=	--with-libpcap-includes=/usr/include \
			--with-libpcap-libraries=/usr/lib
.endif

.if ${PORT_OPTIONS:MDAG}
CONFIGURE_ARGS+=	--enable-dag \
			--with-dag-includes=${LOCALBASE}/include \
			--with-dag-libraries=${LOCALBASE}/lib
.endif

AUTOTOOLSFILES=	aclocal.m4 libhtp/aclocal.m4

post-patch:
	@@${REINPLACE_CMD} -Ee 's|^(install-data-am: )install-pkgconfigDATA|\1|' ${WRKSRC}/libhtp/Makefile.in
.for f in ${AUTOTOOLSFILES}
	@@${REINPLACE_CMD} -e 's|1.11.3|%%AUTOMAKE_APIVER%%|g' ${WRKSRC}/${f}
.endfor

pre-install:
	@@${REINPLACE_CMD} -e 's|/etc/suricata|${PREFIX}/etc/suricata|g' ${WRKSRC}/suricata.yaml

post-install:
	[ -d ${CONFIG_DIR} ] || ${MKDIR} ${CONFIG_DIR}
	[ -d ${RULES_DIR} ] || ${MKDIR} ${RULES_DIR}
	[ -d ${LOGS_DIR} ] || ${MKDIR} ${LOGS_DIR}
.for f in ${CONFIG_FILES}
	${INSTALL_DATA} ${WRKSRC}/${f} ${CONFIG_DIR}/${f}-sample
	@@if [ ! -f ${CONFIG_DIR}/${f} ]; then \
		${CP} -p ${CONFIG_DIR}/${f}-sample ${CONFIG_DIR}/${f} ; \
	fi
.endfor
	@@${CAT} ${PKGMESSAGE}

.include <bsd.port.post.mk>
@


1.25
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/308972
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r308972 | pawel | 2012-12-15 23:52:36 +0000 (Sat, 15 Dec 2012) | 2 lines
## SVN ##
## SVN ## Bump ports affected by security/libprelude update
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d2 1
a2 1
# $FreeBSD: head/security/suricata/Makefile 308972 2012-12-15 23:52:36Z pawel $
d6 1
a6 1
PORTREVISION=	2
d21 1
a21 1
BUILD_DEPENDS+=	${LIBNET_CONFIG}:${PORTSDIR}/net/libnet
@


1.24
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/308630
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r308630 | mm | 2012-12-10 19:11:11 +0000 (Mon, 10 Dec 2012) | 4 lines
## SVN ##
## SVN ## Update PCRE to 8.32
## SVN ## Introduces the UTF-32 library pcre32
## SVN ## Bump PORTREVISION in dependent ports
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 2
a2 6
# New ports collection makefile for:	suricata
# Date created:		Sun Aug 29 16:39:08 BRT 2010
# Whom:			Patrick Tracanelli <eksffa@@freebsdbrasil.com.br>
#
# $FreeBSD: head/security/suricata/Makefile 308630 2012-12-10 19:11:11Z mm $
#
d6 1
a6 1
PORTREVISION=	1
@


1.23
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 307528
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r307528 | zi | 2012-11-18 05:52:07 +0000 (Sun, 18 Nov 2012) | 4 lines
## SVN ##
## SVN ## - Update to 1.3.4
## SVN ##
## SVN ## Feature safe:	yes
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d5 1
a5 1
# $FreeBSD: head/security/suricata/Makefile 307528 2012-11-18 05:52:07Z zi $
d10 1
@


1.22
log
@Switch exporter over
@
text
@d5 1
a5 1
# $FreeBSD: head/security/suricata/Makefile 306882 2012-11-02 19:10:30Z zi $
d9 1
a9 1
PORTVERSION=	1.3.3
@


1.21
log
@SVN rev 306882 on 2012-11-02 19:10:30Z by zi

- Update to 1.3.3

Feature safe:	yes
@
text
@d5 1
a5 1
# $FreeBSD$
@


1.20
log
@SVN rev 305642 on 2012-10-10 11:42:04Z by zi

- Update to 1.3.2
@
text
@d9 1
a9 1
PORTVERSION=	1.3.2
@


1.19
log
@SVN rev 303732 on 2012-09-06 02:17:32Z by zi

- Update to 1.3.1
@
text
@d9 1
a9 1
PORTVERSION=	1.3.1
@


1.18
log
@SVN rev 303731 on 2012-09-06 02:07:34Z by zi

- Add in workaround for compatibility with libhtp >= 0.3
- Bump PORTREVISION
@
text
@d9 1
a9 2
PORTVERSION=	1.3
PORTREVISION=	1
@


1.17
log
@SVN rev 301539 on 2012-07-26 05:40:22Z by bapt

new devel/pkgconf added to replace devel/pkg-config. new version of pkg-config
are no more self hosting so we are stuck with 0.25 version while pkgconf provide
the same set of features as 0.27 and a compatible frontend. A symlink to
pkg-config has been added for convenience and compatibility

This also introduces a new macro to use pkgconf in your ports:
USE_PKGCONFIG

it can take the following arguments:
 - yes (meaning build only dep)
 - build (meaning build only dep)
 - run (meaning run only dep)
 - both (meaning run and build dep)

From now USE_GNOME= pkgconfig is deprecated in favour of USE_PKGCONFIG
The old gnome macro has been modified to use pkgconf but still the sameway: run
and build dep to avoid large breakage.

While here fix some ports relying on pkg-config but not specifying it, fix some
ports broken because testing wrong .pc files, and fix ports using pkg-config
--version to determine pkg-config version instead of
pkg-config --modversion pkg-config like recommanded by pkg-config

With Hat:	portmgr
Exp-runs by:	bapt (pointhat-west), beat (pointyhat)
@
text
@d10 1
@


1.16
log
@SVN rev 300941 on 2012-07-16 11:18:34Z by zi

- Mark BROKEN when compiling with clang
@
text
@d24 1
a24 2
BUILD_DEPENDS+=	${LIBNET_CONFIG}:${PORTSDIR}/net/libnet \
		pkg-config:${PORTSDIR}/devel/pkg-config
d27 1
@


1.15
log
@- Update to 1.3
- Convert to OptionsNG
@
text
@d66 4
@


1.14
log
@Update autoconf to 2.69 and automake to 1.12

PR:		166836
Tested by:	Multiple -exp runs (pav)
@
text
@d9 1
a9 2
PORTVERSION=	1.2.1
PORTREVISION=	1
d20 1
a20 1
LIB_DEPENDS=	pcre.1:${PORTSDIR}/devel/pcre \
d22 1
a22 1
		htp-0.2.1:${PORTSDIR}/devel/libhtp
d33 7
a39 4
OPTIONS=	IPFW "Enable IPFW/IPDIVERT for IPS usage" on \
		PRELUDE "Enable Prelude NIDS integration" off \
		PORTS_PCAP "Use libpcap from ports" off \
		DAG "Enable Endace DAG Support" off
d66 2
a67 2
.if defined(WITH_PRELUDE)
LIB_DEPENDS+=		prelude.20:${PORTSDIR}/security/libprelude
d73 1
a73 1
.if defined(WITH_IPFW)
d77 2
a78 2
.if defined(WITH_PORTS_PCAP)
LIB_DEPENDS+=		pcap.1:${PORTSDIR}/net/libpcap
d86 1
a86 1
.if defined(WITH_DAG)
d97 1
a97 1
	@@${REINPLACE_CMD} -e 's|1.11.1|%%AUTOMAKE_APIVER%%|g' ${WRKSRC}/${f}
@


1.13
log
@- Update mirror URL on my ports

Feature safe:	yes
@
text
@d90 2
d94 3
@


1.12
log
@- Do not overwrite files from devel/libhtp [1]
- Do not overwrite customized config files [1]
- Optionally depend on libpcap from ports (off by default) [1]
- Detect and use gcc hardening options by default
- Cleanup language/whitespace
- Bump PORTREVISION

PR:		ports/164237 [1]
Submitted by:	Geoffroy Desvernay <dgeo@@centrale-marseille.fr> [1]
Feature safe:	yes
@
text
@d12 2
a13 1
MASTER_SITES=	http://www.openinfosecfoundation.org/download/
@


1.11
log
@- Update to 1.2.1 [1]
- Reset maintainership due to multiple maintainer timeouts
- Take maintainership

PR:		ports/164471 [1]
Submitted by:	Nikolay Denev <ndenev@@gmail.com> [1]
@
text
@d10 1
a21 1
		pcap.1:${PORTSDIR}/net/libpcap \
d35 1
d38 1
a38 1
CFLAGS+=	-I${LOCALBASE}/include -L${LOCALBASE}/lib
d44 7
d53 1
a53 1
CONFIG_FILES=	suricata.yaml classification.config
d65 2
a66 1
CONFIGURE_ARGS+=	--enable-prelude
d74 9
d84 3
a86 1
CONFIGURE_ARGS+=	--enable-dag
@


1.10
log
@Bump pcre library dependency due to 8.30 update
@
text
@d9 1
a9 2
PORTVERSION=	1.1.1
PORTREVISION=	1
d13 1
a13 1
MAINTAINER=	eksffa@@freebsdbrasil.com.br
@


1.9
log
@- Update to 1.1.1.
- Use libhtp from ports instead of the bundled one.
- Remove check for 6.x.

PR:		ports/163603
Submitted by:	wxs@@
Approved by:	eksffa@@freebsdbrasil.com.br (maintiner timeout)
@
text
@d10 1
d20 1
a20 1
LIB_DEPENDS=	pcre.0:${PORTSDIR}/devel/pcre \
@


1.8
log
@Add DAG Support
Fix build when using custom LOCALBASE/PREFIX
Pacify portlint(1)

PR:		ports/158147
Submitted by:	rpsfa@@rit.edu (me)
Approved by:	maintainer timeout, tabthorpe (mentor)
@
text
@d9 1
a9 1
PORTVERSION=	1.0.3
d11 1
a11 2
MASTER_SITES=	http://openinfosecfoundation.org/download/ \
		http://www6.freebsdbrasil.com.br/~eksffa/l/dev/suricata/
d21 2
a22 1
		pcap.1:${PORTSDIR}/net/libpcap
a50 3
.if ${OSVERSION} < 700000
BROKEN=		does not configure on 6.X
.endif
d69 3
a84 1

@


1.7
log
@- Update to 1.0.3.
- Add LICENSE.

PR:		ports/157860
Submitted by:	Ryan Steinmetz <rpsfa@@rit.edu>
Approved by:	Patrick Tracanelli <eksffa@@freebsdbrasil.com.br> (maintainer)
@
text
@d17 3
d34 4
a37 1
		PRELUDE "Enable Prelude NIDS integration" off
a48 3
LICENSE=	GPLv2
LICENSE_FILE=	${WRKSRC}/LICENSE

d68 4
@


1.6
log
@Sync to new bsd.autotools.mk
@
text
@d9 1
a9 2
PORTVERSION=	1.0.1
PORTREVISION=	1
d43 3
@


1.5
log
@Punt autoconf267->autoconf268
@
text
@d25 1
a25 1
USE_AUTOTOOLS=	automake110 autoconf:268 libtool:22
@


1.4
log
@Mark as broken on sparc64 (and, by implication, the other tier-2 archs).

Hat:		portmgr
@
text
@d25 1
a25 1
USE_AUTOTOOLS=	automake110 autoconf:267 libtool:22
@


1.3
log
@Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:	portmgr (for Mk/bsd.port.mk part)
Tested by:	Multiple -exp runs
@
text
@d49 3
@


1.2
log
@- Mark BROKEN on 6.X: does not configure

PR:		ports/150393 (based on)
Submitted by:	Patrick Tracanelli <eksffa@@freebsdbrasil.com.br> (maintainer)
@
text
@d10 1
d25 1
a25 1
USE_AUTOTOOLS=	automake110 autoconf:262 libtool:22
@


1.1
log
@The Suricata Engine is an Open Source Next Generation Intrusion Detection and
Prevention Engine developed by the Open Information Security Foundation (OISF).

This engine is not intended to just replace or emulate the existing tools in
the industry, but will bring new ideas and technologies to the field.

OISF is part of and funded by the Department of Homeland Security's Directorate
for Science and Technology HOST program (Homeland Open Security Technology),
by the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as
through the very generous support of the members of the OISF Consortium.

More information about the Consortium is available, as well as a list of our
current Consortium Members.

The Suricata Engine and the HTP Library are available to use under the GPLv2.

The HTP Library is an HTTP normalizer and parser written by Ivan Ristic of
Mod Security fame for the OISF. This integrates and provides very advanced
processing of HTTP streams for Suricata. The HTP library is required by the
engine but may also be used independently in a range of applications and tools.

WWW: http://openinfosecfoundation.org

PR:		ports/150191
Submitted by:	Patrick Tracanelli <eksffa@@freebsdbrasil.com.br>
@
text
@d45 4
@

