automatic version update by autodist [release 3.1.53.0-1mamba;Fri Jan 27 2023]

README.md

@@ -4,7 +4,6 @@ Snort is an open source network intrusion detection system, capable of performin
 It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
 Snort uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plugin architecture.
 Snort has a real-time alerting capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients using Samba's smbclient.
-
 Snort has three primary uses.
 It can be used as a straight packet sniffer like tcpdump(1), a packet logger (useful for network traffic debugging, etc), or as a full blown network intrusion  detection system.
 

snort.spec

@@ -5,23 +5,22 @@
 %define userid 65023
 
 Name:          snort
-Version:       2.9.8.0
+Version:       3.1.53.0
 Release:       1mamba
 Summary:       The Open Source Intrusion Detection System
 Group:         Network/Monitoring
 Vendor:        openmamba
 Distribution:  openmamba
 Packager:      Silvan Calarco <silvan.calarco@mambasoft.it>
-URL:           http://www.snort.org
+URL:           https://www.snort.org/
-# 2.8.6.1: no direct link working; downloaded by hand
+Source0:       https://github.com/snort3/snort3.git/%{version}/snort3-%{version}.tar.bz2
-Source0:       https://www.snort.org/downloads/snort/snort-%{version}.tar.gz
 Source1:       snort-initscript
 Source2:       snort-sysconfig
 Source3:       snort-createmysql
 Source4:       snort-createmysql-archive
 #Source5:       http://www.snort.org/dl/contrib/...
 Source5:       snortdb-extra.bz2
-Source6:       http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-CURRENT.tar.gz
+Source6:       https://www.snort.org/downloads/community/snort3-community-rules.tar.gz
 Source7:       snort-conf
 License:       GPL
 %if %enable_mysql
@@ -37,17 +36,24 @@ BuildRequires: postgresql-devel >= 7.4-2
 %endif
 ## AUTOBUILDREQ-BEGIN
 BuildRequires: glibc-devel
-BuildRequires: libmysql5-devel
+BuildRequires: libatomic-devel
+BuildRequires: libdaq-devel
+BuildRequires: libdnet-devel
+BuildRequires: libgcc
+BuildRequires: libhwloc-devel
+BuildRequires: liblzma-devel
+BuildRequires: libmnl-devel
 BuildRequires: libopenssl-devel
 BuildRequires: libpcap-devel
 BuildRequires: libpcre-devel
+BuildRequires: libstdc++6-devel
+BuildRequires: libunwind-devel
+BuildRequires: libuuid-devel
 BuildRequires: libz-devel
-BuildRequires: mysql
-BuildRequires: mysql-client
 ## AUTOBUILDREQ-END
 BuildRequires: libdnet-devel
-BuildRequires: libdaq-devel
+BuildRequires: libdaq-devel >= 3.0.5
-BuildRoot:     %{_tmppath}/%{name}-%{version}-build
+BuildRequires: libluajit-devel
 Provides:      %{_datadir}/snort/contrib/createmysql
 Provides:      %{_datadir}/snort/contrib/createmysql-archive
 
@@ -56,7 +62,6 @@ Snort is an open source network intrusion detection system, capable of performin
 It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
 Snort uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plugin architecture.
 Snort has a real-time alerting capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients using Samba's smbclient.
-
 Snort has three primary uses. 
 It can be used as a straight packet sniffer like tcpdump(1), a packet logger (useful for network traffic debugging, etc), or as a full blown network intrusion  detection system.
 
@@ -70,19 +75,25 @@ Snort is an open source network intrusion detection system, capable of performin
 It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
 Snort uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plugin architecture.
 Snort has a real-time alerting capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients using Samba's smbclient.
-
 Snort has three primary uses. 
 It can be used as a straight packet sniffer like tcpdump(1), a packet logger (useful for network traffic debugging, etc), or as a full blown network intrusion  detection system.
-
 This package contains the static libraries, headers and source files for development.
 
+%debug_package
+
 %prep
-%setup -q -a6
+%setup -q -n snort3-%{version} -a6
-sed -i "s|/usr/local|/usr|" etc/snort.conf
+#sed -i "s|/usr/local|/usr|" etc/snort.conf
 
 %build
+%cmake -d build \
+    -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
+
+%make
+
+:<< __OLD
 %configure \
-   -sysconfdir=%{_sysconfdir}/snort \
+   --sysconfdir=%{_sysconfdir}/snort \
    --enable-linux-smp-stat \
    --enable-smbalerts \
 %if %enable_mysql
@@ -96,6 +107,7 @@ sed -i "s|/usr/local|/usr|" etc/snort.conf
 %if %enable_postgresql
    --with-postgresql \
 %endif
+   CFLAGS="%{optflags} -I%{_includedir}/tirpc"
 #  --enable-sourcefire
 #  --enable-perfmonitor
 #  --enable-flexresp
@@ -104,18 +116,19 @@ sed -i "s|/usr/local|/usr|" etc/snort.conf
 
 %install
 [ "%{buildroot}" != / ] && rm -rf %{buildroot}
-%makeinstall
+%makeinstall -C build
 
 install -d %{buildroot}%{_sysconfdir}/snort/{rules,preproc_rules}
-cp rules/*.rules %{buildroot}%{_sysconfdir}/snort/rules/
+cp snort3-community-rules/*.rules %{buildroot}%{_sysconfdir}/snort/rules/
-cp preproc_rules/*.rules %{buildroot}%{_sysconfdir}/snort/preproc_rules/
 
-cp etc/*.conf etc/*.config etc/*.map %{buildroot}%{_sysconfdir}/snort
+:<< __OLD
+#cp preproc_rules/*.rules %{buildroot}%{_sysconfdir}/snort/preproc_rules/
+#cp etc/*.conf etc/*.config etc/*.map %{buildroot}%{_sysconfdir}/snort
 
-install -D -m 755 %{SOURCE1} %{buildroot}%{_initrddir}/snort
+#install -D -m 755 %{SOURCE1} %{buildroot}%{_initrddir}/snort
-install -D -m 644 %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/snort
+#install -D -m 644 %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/snort
 
-install -d %{buildroot}/var/log/snort
+#install -d %{buildroot}/var/log/snort
 
 install -D %{SOURCE3} %{buildroot}%{_datadir}/snort/contrib/createmysql
 install -D %{SOURCE4} %{buildroot}%{_datadir}/snort/contrib/createmysql-archive
@@ -125,6 +138,7 @@ install -D %{SOURCE7} %{buildroot}%{_sysconfdir}/snort/snort.conf
 #cp contrib/create* contrib/snortdb-extra.bz2 %{buildroot}%{_datadir}/snort/contrib/
 cp %{SOURCE5} %{buildroot}%{_datadir}/snort/contrib/
 #cp schemas/create_* %{buildroot}%{_datadir}/snort/contrib/
+__OLD
 
 %pre
 /usr/sbin/groupadd snort -g %{groupid} 2>/dev/null
@@ -132,25 +146,25 @@ cp %{SOURCE5} %{buildroot}%{_datadir}/snort/contrib/
    -s /bin/false snort 2>/dev/null
 exit 0
 
-%post
+#%post
 # new install
-if [ $1 -eq 1 ]; then
+#if [ $1 -eq 1 ]; then
-   RANDOM_PASSWD=`/usr/bin/mkpasswd -l 10 -s 0`
+#   RANDOM_PASSWD=`/usr/bin/mkpasswd -l 10 -s 0`
-   sed -i "s|# output database: log, mysql.*|output database: log, mysql, user=snort password=$RANDOM_PASSWD dbname=snort host=localhost|" \
+#   sed -i "s|# output database: log, mysql.*|output database: log, mysql, user=snort password=$RANDOM_PASSWD dbname=snort host=localhost|" \
-      %{_sysconfdir}/snort/snort.conf
+#      %{_sysconfdir}/snort/snort.conf
-   %{_datadir}/snort/contrib/createmysql $RANDOM_PASSWD
+#   %{_datadir}/snort/contrib/createmysql $RANDOM_PASSWD
-   %{_datadir}/snort/contrib/createmysql-archive $RANDOM_PASSWD
+#   %{_datadir}/snort/contrib/createmysql-archive $RANDOM_PASSWD
-fi
+#fi
-exit 0
+#:
 
 %preun
 # erase
 if [ $1 -eq 0 ]; then
-   service snort stop 2>/dev/null
+   #service snort stop 2>/dev/null
-   /sbin/chkconfig --del snort
+   #/sbin/chkconfig --del snort
    /usr/sbin/userdel snort 2>/dev/null
 fi
-exit 0
+:
 
 %postun
 # update
@@ -158,65 +172,124 @@ if [ $1 -eq 1 ]; then
    groupadd snort -g %{groupid} 2>/dev/null
    /usr/sbin/useradd -u %{userid} -c 'Snort user' -d /dev/null -g snort \
       -s /bin/false snort 2>/dev/null
-   /sbin/chkconfig snort
+   #/sbin/chkconfig snort
-   [ $? -eq 0 ] && service snort restart
+   #[ $? -eq 0 ] && service snort restart
 fi
-exit 0
+:
 
 %clean
 [ "%{buildroot}" != / ] && rm -rf %{buildroot}
 
 %files
 %defattr(-,root,root)
-%config(noreplace) %{_sysconfdir}/snort/snort.conf
+%dir %{_sysconfdir}/snort
-%config %{_sysconfdir}/snort/file_magic.conf
+%{_sysconfdir}/snort/*.lua
-%config(noreplace) %{_sysconfdir}/snort/threshold.conf
+%config %{_sysconfdir}/snort/*.rules
-%config(noreplace) %{_sysconfdir}/snort/classification.config
+%dir %{_sysconfdir}/snort/rules
-%config(noreplace) %{_sysconfdir}/snort/reference.config
-%config(noreplace) %{_sysconfdir}/sysconfig/snort
 %{_sysconfdir}/snort/rules/*
-%{_sysconfdir}/snort/preproc_rules/*
+%{_bindir}/appid_detector_builder.sh
-%{_sysconfdir}/snort/*.map
+#%{_bindir}/fbstreamer
 %{_bindir}/u2boat
 %{_bindir}/u2spewfoo
 %{_bindir}/snort
-%dir %{_libdir}/snort_dynamicengine
+%{_bindir}/snort2lua
-%{_libdir}/snort_dynamicengine/libsf_engine.a
+%dir %{_libdir}/snort
-%{_libdir}/snort_dynamicengine/libsf_engine.la
+%dir %{_libdir}/snort/daq
-%{_libdir}/snort_dynamicengine/libsf_engine.so
+%{_libdir}/snort/daq/daq_file.so
-%{_libdir}/snort_dynamicengine/libsf_engine.so.*
+%{_libdir}/snort/daq/daq_hext.so
-%dir %{_libdir}/snort_dynamicpreprocessor
+%dir %{_datadir}/doc/snort
-%{_libdir}/snort_dynamicpreprocessor/*.a
-%{_libdir}/snort_dynamicpreprocessor/*.la
-%{_libdir}/snort_dynamicpreprocessor/*.so*
-%dir %{_libdir}/snort/dynamic_output/
-%{_libdir}/snort/dynamic_output/libsf_dynamic_output.a
-%{_libdir}/snort/dynamic_output/libsf_dynamic_output.la
-%dir %{_libdir}/snort/dynamic_preproc
-%{_libdir}/snort/dynamic_preproc/libsf_dynamic_preproc.a
-%{_libdir}/snort/dynamic_preproc/libsf_dynamic_preproc.la
-%dir %{_datadir}/snort
-%dir %{_datadir}/snort/contrib
-%{_datadir}/snort/contrib/*
-%attr(755,root,root) %{_initrddir}/snort
-%dir %attr(755,snort,snort) /var/log/snort
 %{_datadir}/doc/snort/*
-%{_mandir}/man8/*
+#%dir %attr(755,snort,snort) /var/log/snort
-%doc ChangeLog doc/AUTHORS doc/CREDITS
+%doc COPYING LICENSE
-%doc doc/snort_manual.*
 
 %files devel
 %defattr(-,root,root)
-%{_prefix}/src/snort_dynamicsrc/*.h
-%{_prefix}/src/snort_dynamicsrc/*.c
 %dir %{_includedir}/snort
 %{_includedir}/snort/*
 %{_libdir}/pkgconfig/snort.pc
-%{_libdir}/pkgconfig/snort_preproc.pc
-%{_libdir}/pkgconfig/snort_output.pc
-%doc doc/{BUGS,CREDITS,NEWS,README*,TODO,USAGE}
 
 %changelog
+* Fri Jan 27 2023 Automatic Build System <autodist@mambasoft.it> 3.1.53.0-1mamba
+- automatic version update by autodist
+
+* Thu Jan 19 2023 Automatic Build System <autodist@mambasoft.it> 3.1.52.0-1mamba
+- automatic version update by autodist
+
+* Fri Jan 13 2023 Automatic Build System <autodist@mambasoft.it> 3.1.51.0-1mamba
+- automatic version update by autodist
+
+* Mon Dec 26 2022 Automatic Build System <autodist@mambasoft.it> 3.1.50.0-1mamba
+- automatic version update by autodist
+
+* Sat Dec 03 2022 Automatic Build System <autodist@mambasoft.it> 3.1.48.0-1mamba
+- automatic version update by autodist
+
+* Thu Nov 24 2022 Automatic Build System <autodist@mambasoft.it> 3.1.47.0-1mamba
+- automatic version update by autodist
+
+* Sat Oct 29 2022 Automatic Build System <autodist@mambasoft.it> 3.1.45.0-1mamba
+- automatic version update by autodist
+
+* Sat Oct 08 2022 Automatic Build System <autodist@mambasoft.it> 3.1.43.0-1mamba
+- automatic version update by autodist
+
+* Wed Sep 28 2022 Automatic Build System <autodist@mambasoft.it> 3.1.42.0-1mamba
+- automatic version update by autodist
+
+* Thu Sep 15 2022 Automatic Build System <autodist@mambasoft.it> 3.1.41.0-1mamba
+- automatic version update by autodist
+
+* Sat Aug 27 2022 Automatic Build System <autodist@mambasoft.it> 3.1.40.0-1mamba
+- automatic version update by autodist
+
+* Sat Aug 13 2022 Automatic Build System <autodist@mambasoft.it> 3.1.39.0-1mamba
+- automatic version update by autodist
+
+* Fri Jul 29 2022 Automatic Build System <autodist@mambasoft.it> 3.1.38.0-1mamba
+- automatic version update by autodist
+
+* Mon Jul 18 2022 Automatic Build System <autodist@mambasoft.it> 3.1.36.0-1mamba
+- automatic version update by autodist
+
+* Sat Jun 18 2022 Automatic Build System <autodist@mambasoft.it> 3.1.32.0-1mamba
+- automatic version update by autodist
+
+* Sat Jun 04 2022 Automatic Build System <autodist@mambasoft.it> 3.1.31.0-1mamba
+- automatic version update by autodist
+
+* Sat May 21 2022 Automatic Build System <autodist@mambasoft.it> 3.1.30.0-1mamba
+- automatic version update by autodist
+
+* Fri Feb 25 2022 Automatic Build System <autodist@mambasoft.it> 3.1.24.0-1mamba
+- automatic version update by autodist
+
+* Thu Feb 10 2022 Automatic Build System <autodist@mambasoft.it> 3.1.23.0-1mamba
+- automatic version update by autodist
+
+* Sat Feb 05 2022 Automatic Build System <autodist@mambasoft.it> 3.1.22.0-1mamba
+- automatic version update by autodist
+
+* Thu Jan 27 2022 Automatic Build System <autodist@mambasoft.it> 3.1.21.0-1mamba
+- automatic version update by autodist
+
+* Thu Jan 13 2022 Automatic Build System <autodist@mambasoft.it> 3.1.20.0-1mamba
+- automatic version update by autodist
+
+* Wed Dec 29 2021 Silvan Calarco <silvan.calarco@mambasoft.it> 3.1.19.0-1mamba
+- update to 3.1.19.0
+
+* Fri Nov 20 2020 Automatic Build System <autodist@mambasoft.it> 2.9.17-1mamba
+- automatic version update by autodist
+
+* Sun Aug 16 2020 Automatic Build System <autodist@mambasoft.it> 2.9.16.1-1mamba
+- automatic version update by autodist
+
+* Thu Jun 23 2016 Automatic Build System <autodist@mambasoft.it> 2.9.8.3-1mamba
+- automatic version update by autodist
+
+* Thu Mar 31 2016 Automatic Build System <autodist@mambasoft.it> 2.9.8.2-1mamba
+- automatic version update by autodist
+
 * Tue Dec 01 2015 Automatic Build System <autodist@mambasoft.it> 2.9.8.0-1mamba
 - automatic version update by autodist
 
@@ -364,10 +437,10 @@ exit 0
 * Sat Jun 05 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 2.1.3-4qilnx
 - start daemon without "-A fast" otherwise it won't log to database
 
-* Tue Jun 04 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 2.1.3-3qilnx
+* Fri Jun 04 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 2.1.3-3qilnx
 - completed db creation with snortdb-extra.gz
 
-* Tue Jun 04 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 2.1.3-2qilnx
+* Fri Jun 04 2004 Silvan Calarco <silvan.calarco@mambasoft.it> 2.1.3-2qilnx
 - reconfigured with mysql database creation on install
 - now runs with its own user and group (snort)
 
@@ -403,5 +476,5 @@ exit 0
   SMB alerting via Samba, statistics reporting through proc.
   flexible responses on hostile connection attempts not yet enabled.
 
-* Tue Jun 18 2003 Silvan Calarco <silvan.calarco@qinet.it> 2.0.0-1qilnx
+* Wed Jun 18 2003 Silvan Calarco <silvan.calarco@qinet.it> 2.0.0-1qilnx
 - first build for snort