[Snort-users] New Version

Bennett Todd bet at ...6163...
Thu Dec 18 14:15:01 EST 2003


2003-12-18T15:54:22 Michael Chapman:
> [...] both the unicode.map and the threshold.conf are in the
> distribution snort/etc [...]

I hadn't even noticed this. I just did make install in snort and it
installed 'em in the right place.

Actually, I tell a lie, I use software packaging, but the Right
Thing Happened as if by magic. I attach the specs I used, for a new
software packaging tool I'm in the process of designing, tentatively
named "bpm".

-Bennett
-------------- next part --------------
pkg = "snort-2.1.0";
url = "http://www.snort.org/dl/snort-2.1.0.tar.gz";
build = [[
    tar xzf snort-2.1.0.tar.gz
    cd snort-2.1.0
    LDFLAGS=-static ./configure --prefix=/usr --mandir=/usr/share/man
    make
    make prefix=$BPM_ROOT/usr mandir=$BPM_ROOT/usr/share/man install
]];
-------------- next part --------------
pkg = "snortrules";
url = "http://www.snort.org/dl/rules/snortrules-current.tar.gz";
build = [[
    tar xzf snortrules-current.tar.gz
    cd rules

    perl -pi.bak -le 's{^(var RULE_PATH) \.\./rules$}{$1 /etc/snort};' \
	snort.conf

#    perl -pi -le 's/^/#/ if /sid:(480|527|528|1411|1417|1923|2189);/' \
#	*.rules

    mkdir -p $BPM_ROOT/etc/snort
    cp *     $BPM_ROOT/etc/snort
]];
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20031218/35c2e51d/attachment.sig>


More information about the Snort-users mailing list