diff options
| author | Aycan iRiCAN <iricanaycan@gmail.com> | 2015-10-02 10:27:23 +0300 |
|---|---|---|
| committer | Aycan iRiCAN <iricanaycan@gmail.com> | 2015-10-02 10:27:23 +0300 |
| commit | c416e4a129045b6e37bac0f7e4ca24573f7d75d5 (patch) | |
| tree | 4455ec8cd4fde28f42b18b86d38da5556abcf093 /pkgs/applications | |
| parent | ff742d5475ef79fd8788def1f1a748a78bc67220 (diff) | |
| parent | 8d8457d9aee9d8e471a0794650f1b82883432071 (diff) | |
| download | nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar.gz nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar.bz2 nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar.lz nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar.xz nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.tar.zst nixlib-c416e4a129045b6e37bac0f7e4ca24573f7d75d5.zip | |
Merge pull request #10178 from aycanirican/snort_inline_support
snort: introducing inline snort support via nfq daq
Diffstat (limited to 'pkgs/applications')
| -rw-r--r-- | pkgs/applications/networking/ids/daq/default.nix | 6 | ||||
| -rw-r--r-- | pkgs/applications/networking/ids/snort/default.nix | 12 |
2 files changed, 14 insertions, 4 deletions
diff --git a/pkgs/applications/networking/ids/daq/default.nix b/pkgs/applications/networking/ids/daq/default.nix index c4a82966238a..9339bfef6e03 100644 --- a/pkgs/applications/networking/ids/daq/default.nix +++ b/pkgs/applications/networking/ids/daq/default.nix @@ -1,4 +1,4 @@ -{stdenv, fetchurl, flex, bison, libpcap}: +{stdenv, fetchurl, flex, bison, libpcap, libdnet, libnfnetlink, libnetfilter_queue}: stdenv.mkDerivation rec { name = "daq-2.0.5"; @@ -9,7 +9,9 @@ stdenv.mkDerivation rec { sha256 = "0vdwb0r9kdlgj4g0i0swafbc7qik0zmks17mhqji8cl7hpdva13p"; }; - buildInputs = [ flex bison libpcap ]; + buildInputs = [ flex bison libpcap libdnet libnfnetlink libnetfilter_queue]; + + configureFlags = "--enable-nfq-module=yes --with-dnet-includes=${libdnet}/includes --with-dnet-libraries=${libdnet}/lib"; meta = { description = "Data AcQuisition library (DAQ), for packet I/O"; diff --git a/pkgs/applications/networking/ids/snort/default.nix b/pkgs/applications/networking/ids/snort/default.nix index ea7e09626994..04dd87a025ed 100644 --- a/pkgs/applications/networking/ids/snort/default.nix +++ b/pkgs/applications/networking/ids/snort/default.nix @@ -1,4 +1,4 @@ -{stdenv, fetchurl, libpcap, pcre, libdnet, daq, zlib, flex, bison}: +{stdenv, makeWrapper, fetchurl, libpcap, pcre, libdnet, daq, zlib, flex, bison}: stdenv.mkDerivation rec { version = "2.9.7.2"; @@ -10,7 +10,15 @@ stdenv.mkDerivation rec { sha256 = "1gmlrh9ygpd5h6nnrr4090wk5n2yq2yrvwi7q6xbm6lxj4rcamyv"; }; - buildInputs = [ libpcap pcre libdnet daq zlib flex bison ]; + buildInputs = [ makeWrapper libpcap pcre libdnet daq zlib flex bison ]; + + enableParallelBuilding = true; + + configureFlags = "--disable-static-daq --enable-control-socket --with-daq-includes=${daq}/includes --with-daq-libraries=${daq}/lib"; + + postInstall = '' + wrapProgram $out/bin/snort --add-flags "--daq-dir ${daq}/lib/daq" + ''; meta = { description = "Network intrusion prevention and detection system (IDS/IPS)"; |