summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity/snort
Commit message (Collapse)AuthorAgeFilesLines
* snort3: Upgrade 3.7.1.0 -> 3.9.1.0 to allow CMake 4+ compatibilityAlper Ak14 days2-83/+2
| | | | | | | | | | | | | | | | | | | | | | | | | - Drop 0001-Fix-build-with-gcc-15.patch because fixed in the newer version. Changelog: https://github.com/snort3/snort3/blob/3.9.1.0/ChangeLog.md Fix: | CMake Error at CMakeLists.txt:1 (cmake_minimum_required): | Compatibility with CMake < 3.5 has been removed from CMake. | | Update the VERSION argument <min> value. Or, use the <min>...<max> syntax | to tell CMake that the project requires at least <min> but has been updated | to work with policies introduced by <max> or earlier. | | Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway. | | | -- Configuring incomplete, errors occurred! Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-openembedded/all: adapt to UNPACKDIR changesAlexander Kanavin2025-06-251-1/+0
| | | | | | | | | | | | | Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Fix build with gcc-15Martin Jansa2025-04-262-0/+111
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: http://errors.yoctoproject.org/Errors/Details/852983/ ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:1062:13: error: conflicting types for 'File_Decomp_PDF'; have 'fd_status_t(struct fd_session_s *)' {aka 'enum fd_status(struct fd_session_s *)'} 1062 | fd_status_t File_Decomp_PDF( fd_session_p_t SessionPtr ) | ^~~~~~~~~~~~~~~ In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59, from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:31: ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: previous declaration of 'File_Decomp_PDF' with type 'fd_status_t(void)' {aka 'enum fd_status(void)'} 83 | fd_status_t File_Decomp_PDF(); | ^~~~~~~~~~~~~~~ make[5]: *** [Makefile:374: file_decomp_PDF.o] Error 1 make[5]: *** Waiting for unfinished jobs.... ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c: In function 'Process_Decompression': ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:245:24: error: too many arguments to function 'File_Decomp_PDF'; expected 0, have 1 245 | Ret_Code = File_Decomp_PDF( SessionPtr ); | ^~~~~~~~~~~~~~~ ~~~~~~~~~~ In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59, from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:34: ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: declared here 83 | fd_status_t File_Decomp_PDF(); | ^~~~~~~~~~~~~~~ http://errors.yoctoproject.org/Errors/Details/852992/ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_InitGlobal': ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:348:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 348 | size_t memcap = DCE2_GetReloadSafeMemcap(dce2_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadGlobal': ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1291:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 1291 | size_t memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadVerify': ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1436:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 1436 | uint32_t current_memcap = DCE2_GetReloadSafeMemcap(dce2_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1437:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 1437 | uint32_t new_memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadSwap': ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1535:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 1535 | current_memcap = DCE2_GetReloadSafeMemcap(dce2_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1538:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1 1538 | swap_memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config); | ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: At top level: ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1673:17: error: conflicting types for 'DCE2_GetReloadSafeMemcap'; have 'uint32_t(tSfPolicyUserContext *)' {aka 'unsigned int(tSfPolicyUserContext *)'} 1673 | static uint32_t DCE2_GetReloadSafeMemcap(tSfPolicyUserContextId pConfig) | ^~~~~~~~~~~~~~~~~~~~~~~~ ../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: previous declaration of 'DCE2_GetReloadSafeMemcap' with type 'uint32_t(void)' {aka 'unsigned int(void)'} 163 | static uint32_t DCE2_GetReloadSafeMemcap(); | ^~~~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.6.1 -> 3.7.1Nguyen Dat Tho2025-03-312-2/+82
| | | | | | | | | | Changelog: https://github.com/snort3/snort3/blob/master/ChangeLog.md Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15 Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.3.4.0 -> 3.6.1.0Yi Zhao2025-01-011-1/+1
| | | | | | | | | | | | | | https://github.com/snort3/snort3/releases/tag/3.6.1.0 https://github.com/snort3/snort3/releases/tag/3.6.0.0 https://github.com/snort3/snort3/releases/tag/3.5.2.0 https://github.com/snort3/snort3/releases/tag/3.5.1.0 https://github.com/snort3/snort3/releases/tag/3.5.0.0 https://github.com/snort3/snort3/releases/tag/3.3.7.0 https://github.com/snort3/snort3/releases/tag/3.3.6.0 https://github.com/snort3/snort3/releases/tag/3.3.5.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.3.3.0 -> 3.3.4.0Yi Zhao2024-08-291-1/+1
| | | | | | | | | | | | | | | ChangeLog: https://github.com/snort3/snort3/releases/tag/3.3.4.0 * appid: notify binder on service change * appid: replaced hsessions vector of raw pointers into vector of smart pointers * ftp_telnet: refactoring ftp-data * latency, dce, stream_ip: fix max pegs incorrectly declared sum * telnet: avoid flush when cr or lf is between commands Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.3.2.0 -> 3.3.3.0Yi Zhao2024-08-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/snort3/snort3/releases/tag/3.3.3.0 * control: code cleanup * control: handle control commands after packet threads are fully initialised * daq: add outstanding packets counter * extractor: add flow hash key * file_api: max depth is set as part of initial config * file: remove unused variable in FileFlows destructor * filters: update dev_notes.txt with details for event_filter * flow: optimize timeout handling for different packet type * http_inspect: add peg counts for gzip, known-not-supported, and unknown * http_inspect: log normalized URI in extra data * ips_options: separate main thread pcre counts from packet threads stats * memory: account memory for profiler only when packet thread is involved * src: resolve various warnings * stream_tcp: make sure ports are correctly swapped when filling a meta-ACK packet Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.3.1.0 -> 3.3.2.0Yi Zhao2024-08-011-1/+1
| | | | | | | | ChangeLog: https://github.com/snort3/snort3/releases/tag/3.3.2.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.1.84.0 -> 3.3.1.0Yi Zhao2024-07-282-1/+3
| | | | | | | | | | | ChangeLog: https://github.com/snort3/snort3/releases/tag/3.2.1.0 https://github.com/snort3/snort3/releases/tag/3.2.2.0 https://github.com/snort3/snort3/releases/tag/3.3.0.0 https://github.com/snort3/snort3/releases/tag/3.3.1.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-231-4/+4
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: update to latest stable version 3.1.84.0Yi Zhao2024-04-161-3/+1
| | | | | | | | ChangeLog: https://github.com/snort3/snort3/releases/tag/3.1.84.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: fix snort.pcMartin Jansa2024-02-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | * fixes: ERROR: lib32-snort3-3+git-r0 do_populate_sysroot: QA Issue: snort.pc failed sanity test (tmpdir) in path lib32-snort3/3+git/sysroot-destdir/usr/lib/pkg * it's broken for non-multilib builds as well, the issue is that FLEX_CPPFLAGS points to native include dir, e.g. FLEX_CPPFLAGS=-I/OE/../lib32-snort3/3+git/recipe-sysroot-native/usr/include and the work around from: https://github.com/openembedded/meta-openembedded/commit/973647848049abda6f2adbee0189720109863731 sed -i "s#${RECIPE_SYSROOT}##g" ${D}${libdir}/pkgconfig/snort.pc strips the "/OE/../lib32-snort3/3+git/recipe-sysroot" part in non-multilib case, but leaves: FLEX_CPPFLAGS=-I-native/usr/include which is still wrong, but not detected by buildpaths QA check anymore and in multilib case, this didn't strip the first part because the target sysroot is: "/OE/../lib32-snort3/3+git/lib32-recipe-sysroot" so it didn't strip anything from native sysroot: "/OE/../lib32-snort3/3+git/recipe-sysroot-native" Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: drop SRCPV from PVMartin Jansa2024-02-261-1/+1
| | | | | | | | * as other recipes did in: https://git.openembedded.org/meta-openembedded/commit/?id=21f956598ddb1bb08855fbc9a3293acf957154d1 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: Fix contains reference to TMPDIR [buildpaths] warningsKhem Raj2024-02-212-2/+38
| | | | | | | | | Fixes WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/lib/pkgconfig/snort.pc in package snort3-dev contains reference to TMPDIR [buildpaths] WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/src/debug/snort3/3+git/src/js_norm/pdf_tokenizer.cc in package snort3-src contains reference to TMPDIR File /usr/src/debug/snort3/3+git/src/js_norm/js_tokenizer.cc in package snort3-src contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Do not use llvm libunwindKhem Raj2024-02-212-1/+35
| | | | | | | If llvm unwind is present then disable unwinding support since it will not have all unw_* functions eg. unw_strerror Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: add snort3 initial recipeKhawaja Shaheryar2024-02-211-0/+34
| | | | | | | | I am adding this recipe as snort2 is legacy now. See more: https://github.com/snort3/snort3 Signed-off-by: Khawaja Shaheryar <behzadshaheryar@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Add systemd unit fileMingli Yu2023-07-123-2/+31
| | | | | | | | | Add systemd unit file snort.service. Reference: https://salsa.debian.org/lts-team/packages/snort/-/blob/debian/buster/debian/snort.service.example Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-241-1/+1
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.19 -> 2.9.20wangmy2022-06-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * src/dynamic-preprocessors/appid/service_plugins/service_ssl.c : Fixed a scenario where SSL traffic was not detected correctly. * src/dynamic-preprocessors/smtp/snort_smtp.c : Fixed a possible memory corruption. * src/dynamic-preprocessors/imap/imap_util.c src/dynamic-preprocessors/pop/pop_util.c src/dynamic-preprocessors/smtp/smtp_util.c src/preprocessors/spp_httpinspect.c : Fixed malformed packet debug engine output. * src/preprocessors/Stream6/snort_stream_tcp.c : Fixed security zones info in intrusion events. * src/dynamic-preprocessors/appid/fw_appid.c : Fixed URL lookup failure. * src/preprocessors/HttpInspect/server/hi_server.c : Fixed a possible memory leak. * src/dynamic-preprocessors/appid/detector_plugins/detector_dns.c src/dynamic-preprocessors/appid/fw_appid.c src/dynamic-preprocessors/appid/fw_appid.h src/dynamic-preprocessors/appid/detector_plugins/service_plugins/service_api.h : Added support for dns root queries and underflow. * src/dynamic-preprocessors/smtp/snort_smtp.c src/Makefile.am src/dynamic-examples/Makefile.am src/dynamic-plugins/sf_dynamic_plugins.c src/dynamic-plugins/sf_dynamic_preprocessor.h src/dynamic-preprocessors/Makefile.am src/dynamic-preprocessors/smtp/snort_smtp.h src/dynamic-preprocessors/smtp/spp_smtp.c src/smtp_api.h : Added support to get extra data from SMTP and HTTP into IPS event. * src/dynamic-preprocessors/appid/detector_plugins/detector_imap.c src/dynamic-preprocessors/appid/detector_plugins/detector_pop3.c : Added support for login success and failure eventing for IMAP and POP3. * src/dynamic-preprocessors/appid/hi_server.c : Added support to handle empty string for SNI/CN/SAN/ORG. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.18.1 -> 2.9.19wangmy2021-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changelog: ========= * src/snort.c : Fixed an issue where verdict will be applied onto next session when timeout occurs in some scenarios. * rc/file-process/file_service.c : Removed an excessively flooding log. * src/dynamic-preprocessors/modbus/modbus_decode.c : Fixed possible integer overflow. * src/fpcreate.c : Added fix to GCC compiled snort to use AC-BNFA-Q search-method when Intel-cpm is enabled. * src/generators.h src/preprocessors/Stream6/snort_stream_tcp.c : Added fix to not to drop packets when window size is 0 by TCP normalizer and Added new alert with GID 129 and SID 21 when such packets are seen. * src/dynamic-preprocessors/appid/detector_plugins/detector_imap.c src/dynamic-preprocessors/appid/detector_plugins/detector_pop3.c : Added support for Appid to detect login success and failure for IMAP and POP3 protocols. * src/dynamic-preprocessors/reputation/reputation_config.c src/dynamic-preprocessors/reputation/spp_reputation.c src/dynamic-preprocessors/reputation/spp_reputation.h src/pkt_tracer.c src/snort.c src/util.c : Fixed terminology to be bias-free in log/error messages. * src/snort.c : Fixed a potential race condition. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.18 -> 2.9.18.1wangmy2021-09-271-1/+1
| | | | | | | | | | snort 2.9.18.1 * snort/src/dynamic-preprocessors/dcerpc2/dce2_smb.c: Fixed possible memory corruption in SMB preprocessor. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-6/+6
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: upgrade 2.9.17.1 -> 2.9.18zangrc2021-06-232-4/+4
| | | | | | | | Refresh the following patch: configure.in-disable-tirpc-checking-for-fedora.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort,proftpd,net-snmp: Deal with -ffile-prefix-map as wellKhem Raj2021-04-291-1/+1
| | | | | | | this is another option for reproducibility which can be used by compilers, and here consider processing it as well Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.17 -> 2.9.17.1zhengruoqin2021-04-011-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.16.1 -> 2.9.17zangrc2020-11-271-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Upgrade to 2.9.16.1Khem Raj2020-08-131-3/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.15 -> 2.9.16Zang Ruochen2020-05-312-51/+2
| | | | | | | | -0001-chdeck-for-gettid-API-during-configure.patch Removed since this is included in 2.9.16 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.14.1 -> 2.9.15Zang Ruochen2019-10-251-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.14 -> 2.9.14.1Yi Zhao2019-08-112-4/+14
| | | | | | | Add volatile conf to create log directory. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Fix build with glibc 2.30Khem Raj2019-07-302-0/+49
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.13 -> 2.9.14Yi Zhao2019-07-231-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: fix compile-host-path QA issueYi Zhao2019-07-102-0/+61
| | | | | | | | | | | | | | | The Fedora 28+ does not have inbuilt SunRPC support in glibc and is separately availble in tirpc package. So it enables tirpc checking for fedora in configure. Drop this piece of code since we had specify '-ltirpc' in LDFLAGS explicitly. Otherwise it will cause a compile-host-path QA issue if the host is Fedora 28+: cc1: warning: include location "/usr/include/tirpc" is unsafe for cross-compilation [-Wpoison-system-directories] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.11.1 -> 2.9.13Yi Zhao2019-06-193-30/+32
| | | | | | | | | | | | | * Add PACKAGECONFIG[appid] for application identification support. * Set the variables 'have_daq_packet_trace' and 'have_daq_verdict_reason' to 'no' since they are only supported in daq 2.2.2 but not in 2.0.6. * Cleanup snort.init script and fix the incorrect argument of mkdir Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Strip out DEBUG_PREFIX_MAP options and --sysrootKhem Raj2019-02-171-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Update SRC_URIMingli Yu2018-10-231-1/+1
| | | | | | | | Update SRC_URI for snort as the previous one is invalid. Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: add dependency on bison-nativeMartin Jansa2018-08-191-1/+1
| | | | | | | | | | * fixes: ERROR! bison not found. Get it from http://www.gnu.org/software/bison/ (You may also try byacc or yacc instead.) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: upgrade 2.9.7.5 -> 2.9.11.1Yi Zhao2018-07-267-308/+258
| | | | | | | | | | | | | | | | | | | | | | | | | * Update SRC_URI * Drop 0001-fix-do_package-failed-since-snort-2.9.7.0.patch since the issue had been fixed upstream. * Drop the following patches and merge their modifications to disable-run-test-program-while-cross-compiling.patch: disable-dap-address-space-id.patch disable-daq-flow-id.patch disable-daq-verdict-retry.patch disable-inaddr-none.patch * Add disable-run-test-program-while-cross-compiling.patch to fix configure error: cannot run test program while cross compiling. The variables have_daq_real_addresses, have_daq_ext_modflow, have_daq_queryflow, have_daq_data_channel_flags and have_daq_data_channel_separate_ip_versions are set to no since they are for daq 2.2.2 but we have daq 2.0.6 in meta-networking layer. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: add UPSTREAM_CHECK_URIYi Zhao2018-05-301-0/+3
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Link with libtirpcKhem Raj2018-05-171-4/+3
| | | | | | | glibc no longer provides rpc implementation Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* snort: refresh patchesArmin Kuster2018-04-137-34/+78
| | | | | | | | | | | | | | | | | | | | | | WARNING: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: checking file configure.in Hunk #1 succeeded at 698 with fuzz 2 (off and others Signed-off-by: Armin Kuster <akuster808@gmail.com>
* snort: fix for snort.confJackie Huang2017-06-281-0/+11
| | | | | | | | | | | The /etc/snort/snort.conf doesn't work since there are hardcoded paths and lib names, and it tries to include many rules that are not provided. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: enable static daqKai Kang2017-06-282-2/+24
| | | | | | | | | | | | | | | | | | | | | When start snort, it shows error and quit: | --== Initializing Snort ==-- | Initializing Output Plugins! | ERROR: Can't find pcap DAQ! | Fatal Error, Quitting.. Fix by enable static daq for snort and enable static build for daq. snort calls command daq-modules-config which is from daq-native to get required daq static libraries and library path. Add package daq-native and add patch for snort to filter library path out to avoid host contamination issue. Add daq-native's dependency libnet-native too. And daq-native also depends on libpcap-native from layer oe-core. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: Fix build with muslKhem Raj2017-04-251-0/+4
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: Add lzma to PACKAGECONFIGMingli Yu2016-09-151-1/+2
| | | | | | | | | | | Add lzma to PACKAGECONFIG to remove below warning: WARNING: snort-2.9.7.5-r0 do_package_qa: QA Issue: snort rdepends on liblzma, but it isn't a build dependency, missing xz in DEPENDS or PACKAGECONFIG? [build-deps] Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: fix to remove from blacklistQi.Chen@windriver.com2016-08-051-4/+3
| | | | | | | | | | | Fix paths in pkgconfig files and remove snort from blacklist. Also add 'xz' to DEPENDS to avoid the following QA issue. WARNING: snort-2.9.7.5-r0 do_package_qa: QA Issue: snort rdepends on liblzma, but it isn't a build dependency, missing xz in DEPENDS or PACKAGECONFIG? [build-deps] Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: BlacklistMartin Jansa2016-02-221-0/+3
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: 2.9.6.0 -> 2.9.7.5Zhiquan Li2015-11-306-311/+150
| | | | | | | | | | | | | | | Upgrade snort from 2.9.6.0 to 2.9.7.5, as its dependency upgrade daq from 2.0.2 to 2.0.6, and accordingly update the patches: * Add 2 new patches for snort to solve the cross compile issues * Discard 2 snort patches since it is not needed * Refresh the patch for daq new version * Remove redundant '/' to getting round the rpm debugedit bug: canonicalization unexpectedly shrank character Signed-off-by: Zhiquan Li <zhiquan.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* snort: fix indentationMartin Jansa2015-11-111-40/+39
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 13:20:35 +0000