#
# Copyright (C) 2006-2015 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=snort
PKG_VERSION:=2.9.7.2
PKG_RELEASE:=2

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://www.snort.org/downloads/snort/
PKG_MD5SUM:=b01e9964827394c39194a0147bc15705

PKG_BUILD_DEPENDS:=librpc
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)/$(PKG_NAME)-$(PKG_VERSION)
PKG_FIXUP:=autoreconf
PKG_INSTALL:=1

include $(INCLUDE_DIR)/package.mk

define Package/snort
  SUBMENU:=Firewall
  SECTION:=net
  CATEGORY:=Network
  DEPENDS:=+libdaq +libdnet +libopenssl +libpcap +libpcre +libpthread +libuuid +zlib +SNORT_MYSQL:libmysqlclient +SNORT_PGSQL:libpq +SNORT_PGSQL:libuuid +SNORT_LZMA:liblzma
  TITLE:=Lightweight Network Intrusion Detection System
  URL:=http://www.snort.org/
  MENU:=1
endef

define Package/snort/description
  Snort is an open source network intrusion detection and prevention system.
  It is capable of performing real-time traffic analysis, alerting, blocking
  and packet logging on IP networks.  It utilizes a combination of protocol
  analysis and pattern matching in order to detect anomalies, misuse and
  attacks.
endef

define Package/snort/config
	source "$(SOURCE)/Config.in"
endef

CONFIGURE_ARGS += \
	--prefix="/usr" \
	--enable-flexresp \
	--with-dnet-includes="$(STAGING_DIR)/usr/include" \
	--with-dnet-libraries="$(STAGING_DIR)/usr/lib" \
	--with-libpcap-includes="$(STAGING_DIR)/usr/include" \
	--with-libpcap-libraries="$(STAGING_DIR)/usr/lib" \
	--with-libpcre-includes="$(STAGING_DIR)/usr/include" \
	--with-libpcre-libraries="$(STAGING_DIR)/usr/lib" \
	--with-daq-includes="$(STAGING_DIR)/usr/include" \
	--with-daq-libraries="$(STAGING_DIR)/usr/lib" \
	--disable-static-daq

ifeq ($(CONFIG_SNORT_MYSQL),)
CONFIGURE_ARGS += \
	--without-mysql
endif

ifeq ($(CONFIG_PGSQL),)
CONFIGURE_ARGS += \
	--without-postgresql
endif

ifeq ($(CONFIG_SNORT_LZMA),)
CONFIGURE_ARGS += \
	--disable-lzma
endif

CONFIGURE_VARS += \
	CPPFLAGS="$$$$CPPFLAGS -I$(STAGING_DIR)/usr/include/mysql" \
	LDFLAGS="$$$$LDFLAGS -L$(STAGING_DIR)/usr/lib/mysql" \
	PATH="$(STAGING_DIR)/usr/lib/libnet-1.0.x/bin:$$$$PATH"

MAKE_FLAGS += \
	extra_incl=""

define Build/InstallDev
	$(INSTALL_DIR) $(STAGING_DIR)/usr/include/snort/dynamic_preproc
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/include/snort/dynamic_preproc/* \
		$(STAGING_DIR)/usr/include/snort/dynamic_preproc/
	$(INSTALL_DIR) $(STAGING_DIR)/usr/lib/snort/dynamic_preproc
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/lib/snort/dynamic_preproc/* \
		$(STAGING_DIR)/usr/lib/snort/dynamic_preproc/
	$(INSTALL_DIR) $(STAGING_DIR)/usr/lib/snort_dynamicengine
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/lib/snort_dynamicengine/* \
		$(STAGING_DIR)/usr/lib/snort_dynamicengine/
	$(INSTALL_DIR) $(STAGING_DIR)/usr/lib/snort_dynamicpreprocessor
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/lib/snort_dynamicpreprocessor/* \
		$(STAGING_DIR)/usr/lib/snort_dynamicpreprocessor/
endef

define Package/snort/conffiles
/etc/config/snort
/etc/snort/snort.conf
endef

define Package/snort/install
	$(INSTALL_DIR) $(1)/usr/bin
	$(INSTALL_BIN) \
		$(PKG_INSTALL_DIR)/usr/bin/snort  \
		$(1)/usr/bin/snort

	$(INSTALL_BIN) \
		$(PKG_INSTALL_DIR)/usr/bin/u2{boat,spewfoo} \
		$(1)/usr/bin

	$(INSTALL_DIR) $(1)/usr/lib/snort_dynamicengine
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/lib/snort_dynamicengine/libsf_engine.so* \
		$(1)/usr/lib/snort_dynamicengine/

	$(INSTALL_DIR) $(1)/usr/lib/snort_dynamicpreprocessor
	$(CP) \
		$(PKG_INSTALL_DIR)/usr/lib/snort_dynamicpreprocessor/libsf*.so* \
		$(1)/usr/lib/snort_dynamicpreprocessor/

	$(INSTALL_DIR) $(1)/etc/snort
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/etc/snort.conf \
		$(1)/etc/snort/
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/etc/attribute_table.dtd \
		$(1)/etc/snort/
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/etc/classification.config \
		$(1)/etc/snort/
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/etc/gen-msg.map \
		$(1)/etc/snort/
	$(INSTALL_CONF) \
			$(PKG_BUILD_DIR)/etc/reference.config \
			$(1)/etc/snort/
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/etc/unicode.map \
		$(1)/etc/snort/

	$(INSTALL_DIR) $(1)/etc/snort/preproc_rules
	$(INSTALL_CONF) \
		$(PKG_BUILD_DIR)/preproc_rules/*.rules \
		$(1)/etc/snort/preproc_rules/

	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) \
		./files/snort.init \
		$(1)/etc/init.d/snort

	$(INSTALL_DIR) $(1)/etc/config
	$(INSTALL_CONF) \
		./files/snort.config \
		$(1)/etc/config/snort
endef

$(eval $(call BuildPackage,snort))