daq-0.2.ebuild

daq-0.2.ebuild (text/plain), 2.77 KB, created by Jason Wallace on 2010-10-14 17:39:44 UTC

# Copyright 1999-2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $

EAPI="2"
inherit eutils autotools

DESCRIPTION="Data Acquisition library, for packet I/O with Snort 2.9 and later"
HOMEPAGE="http://www.snort.org/"
SRC_URI="http://www.snort.org/downloads/263 -> ${P}.tar.gz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~alpha ~amd64 ~arm ~ppc ~ppc64 ~sparc ~x86"
IUSE="static ipv6 afpacket dump pcap"

DEPEND=">=net-libs/libpcap-1.0.0"

RDEPEND="${DEPEND}"

src_unpack() {

	unpack ${A}
	cd "${S}"

}

src_prepare() {

	eautoreconf

}

src_configure() {

	local myconf

	econf \
		$(use_enable !static shared) \
		$(use_enable static) \
		$(use_enable ipv6) \
		$(use_enable pcap pcap-module) \
		$(use_enable afpacket afpacket-module) \
		$(use_enable dump dump-module) \
		--disable-ipfw-module \
		--disable-bundled-modules \
		${myconf}

}

src_compile() {

	emake || die "make failed"

}

src_install() {

	emake DESTDIR="${D}" install || die "make install failed"

	dodoc ChangeLog
	dodoc README

}

pkg_postinst() {

	einfo
	einfo "Snort 2.9 introduces the DAQ, or Data Acquisition library, for"
	einfo "packet I/O.  The DAQ replaces direct calls to PCAP functions"
	einfo "with an abstraction layer that facilitates operation on a variety"
	einfo "of hardware and software interfaces 	without requiring changes to"
	einfo "Snort.  It is possible to select the DAQ type and mode when invoking"
	einfo "Snort to perform PCAP, readback, or inline operation.  The DAQ"
	einfo "library may be useful for other packet processing applications and"
	einfo "the modular nature allows you to build new modules for other"
	einfo "platforms."
	einfo
	elog
	elog "The only DAQ modules supported with this ebuild are AFpacket, PCAP,"
	elog "and Dump. IPQ nad NFQ will be supported in future versions of this"
	elog "package."
	elog
	elog "For passive (non-inline) Snort deployments you will want to use"
	elog "either PCAP or AFpacket. For inline deployments you will need"
	elog "to use AFpacket. The Dump DAQ is used for testing the various inline"
	elog "features available in Snort 2.9."
	elog
	elog "The core DQA libraries are installed in /usr/$(get_libdir)/. The libraries"
	elog "for the individual DAQ modules (afpacket,pcap,dump) are installed in"
	elog "/usr/$(get_libdir)/daq. To use these you will need to add the following"
	elog "lines to your snort.conf:"
	elog
	elog "config daq: <DAQ module>"
	elog "config daq_mode: <mode>"
	elog "config daq_dir: /usr/$(get_libdir)/daq"
	elog
	elog "Please see the README file for DAQ for information about specific"
	elog "DAQ modules and README.daq from the Snort 2.9 documentation"
	elog "reguarding Snort and DAQ configuration information."
	elog
	elog "If you are reinstalling this package, you should reinstall Snort as well."
	elog

}