Main   Changelog   Spec   Patches   Sources   Download   Gear   Bugs e FR  Repocop 

Summary:   An intrusion detection system
Name:      snort
Version:   2.4.5
Release: alt2.M41.3
Copyright: GPL
Group:     Security/Networking
Url:       http://www.snort.org

# You can omit building some target packages via 'rpmbuild --without xxx'
%def_with    mysql
%def_without postgresql
%def_with    odbc
%def_without prelude
%def_with    snmp
%def_with    clamav
%def_with    inline
%def_without libpq3
# You can omit this feature via 'rpmbuild --disable flexresp'
%def_enable flexresp

%define snort_version_patch   2.3.0-alt1
%define prelude_patch_version 0.3.6
%define snmp_patch_version    2.4.5-alt1

%define dbhints_dir  %_datadir/%name-dbhints
%define dbhints_path %dbhints_dir/%name-dbhints.sql

Source0:   %url/dl/current/%name-%version.tar.gz
Source5:   snortdb-extra.bz2

Source10:  snort.sysconfig.m4
Source20:  README-ALT.ru.m4
Source21:  README-ALT.uk.m4
Source30:  snort.logrotate.m4
Source99:  snortd

Patch2:    SnortSnmp-%snmp_patch_version.patch

# from 2.3.1-3mdk
Patch10:   snort-2.3.0-net-snmp_fix.diff.bz2
Patch11:   snort-2.3.0-no_timestamp.diff.bz2
Patch13:   snort-2.4.0-clamav-alt1.diff
Patch14:   snort-2.4.0-lib64-alt.patch
Patch15:   snort-2.4.0-lib64-alt2.patch

Requires:  libpcap >= 0.4
Requires:  service >= 0.5.6
Requires:  snort-base, snort-rules
PreReq:    alternatives >= 0.0.6
BuildPreReq: libalternatives-devel >= 0.0.6
BuildPreReq: libltdl-devel, m4, bzip2

# Automatically added by buildreq on Fri Jan 14 2005, explicit versions added manually
BuildRequires: libnet1-devel >= 1.0.2a, libpcap-devel >= 0.4, libpcre-devel
BuildRequires: libssl-devel, zlib-devel

%if_with postgresql
BuildRequires: postgresql-devel
%if_with libpq3
BuildRequires: libpq3-devel
%else
BuildRequires: libpq-devel
%endif
%endif

%if_with prelude
Requires:  libprelude
%endif
%if_with mysql
BuildRequires: libMySQL-devel
%endif
%if_with prelude
BuildRequires: libprelude-devel
%endif
%if_with odbc
BuildRequires: libunixODBC-devel
%endif
%if_with snmp
BuildRequires: libnet-snmp-devel
%endif
%if_with clamav
BuildRequires: libclamav-devel
%endif
%if_with inline
BuildRequires: iptables-devel
%endif

%if_with mysql
%if_with postgresql
%if_with odbc
%if_with snmp
%if_with clamav
%if_with inline
%def_with bloat
%endif
%endif
%endif
%endif
%endif
%endif
%def_without bloat

Summary(ru_RU.KOI8-R): á×ÔÏÍÁÔÉÞÅÓËÉÊ ÁÎÁÌÉÚÁÔÏÒ/ÂÌÏËÉÒÏ×ÝÉË ÓÅÔÅ×ÙÈ ÐÁËÅÔÏ×

%description
Snort is a libpcap-based packet sniffer/logger which can be used as a
lightweight network intrusion detection system.  It features rules
based logging and can perform protocol analysis, content
searching/matching and can be used to detect a variety of attacks and
probes, such as buffer overflows, stealth port scans, CGI attacks, SMB
probes, OS fingerprinting attempts, and much more.  Snort has a
real-time alerting capabilty, with alerts being sent to syslog, a
seperate "alert" file, or as a WinPopup message via Samba's smbclient.

Please see the documentation in %_docdir/%name-%version

%description -l ru_RU.KOI8-R
Snort -- ÜÔÏ ÍÏÝÎÙÊ ÐÒÏÓÌÕÛÉ×ÁÔÅÌØ É ÐÅÒÅÈ×ÁÔÞÉË ÓÅÔÅ×ÙÈ ÐÁËÅÔÏ×,
ÏÓÎÏ×ÁÎÎÙÊ ÎÁ ÂÉÂÌÉÏÔÅËÅ libpcap. ðÒÉ ÒÁÂÏÔÅ Snort ÉÓÐÏÌØÚÕÅÔ ÎÁÂÏÒ
ÐÒÅÄ×ÁÒÉÔÅÌØÎÏ ÐÏÄÇÏÔÏ×ÌÅÎÎÙÈ ÐÒÁ×ÉÌ, ËÏÔÏÒÙÅ ÓÏÄÅÒÖÁÔ ÕÓÌÏ×ÉÑ ÓÒÁÂÁÔÙ×ÁÎÉÑ
ÐÏ ÚÎÁÞÅÎÉÑÍ ÓÌÕÖÅÂÎÙÈ É ÐÒÉËÌÁÄÎÙÈ ÄÁÎÎÙÈ.

Snort ÍÏÖÅÔ ÉÓÐÏÌØÚÏ×ÁÔØÓÑ × ËÁÞÅÓÔ×Å ÓÉÓÔÅÍÙ ÏÂÎÁÒÕÖÅÎÉÑ ×ÔÏÒÖÅÎÉÑ × ÓÅÔØ,
Á ÔÁËÖÅ ÒÁÚÎÏÏÂÒÁÚÎÙÈ ÁÔÁË É ÐÏÐÙÔÏË ÐÒÅÄÐÒÉÎÑÔÉÑ ÔÁËÏ×ÙÈ (ÐÅÒÅÐÏÌÎÅÎÉÅ ÂÕÆÅÒÁ,
ÓËÁÎÉÒÏ×ÁÎÉÅ ÐÏÒÔÏ× É SMB, ÓÔÅÌÓ-ÓËÁÎÉÒÏ×ÁÎÉÅ, ÁÔÁËÉ CGI, ÏÐÒÅÄÅÌÅÎÉÅ
ÏÐÅÒÁÃÉÏÎÎÙÈ ÓÉÓÔÅÍ É ÍÎÏÇÏÅ ÄÒÕÇÏÅ).

Snort ÉÍÅÅÔ ×ÏÚÍÏÖÎÏÓÔØ ÏÐÏ×ÅÝÅÎÉÑ × ÒÅÁÌØÎÏÍ ÍÁÓÛÔÁÂÅ ×ÒÅÍÅÎÉ ÞÅÒÅÚ ÓÏÏÂÝÅÎÉÑ,
ÏÔÐÒÁ×ÌÅÎÎÙÅ × ÓÉÓÔÅÍÎÙÊ ÌÏÇ-ÆÁÊÌ, ÁÌØÔÅÒÎÁÔÉ×ÎÙÊ ÆÁÊÌ "ÔÒÅ×ÏÇÉ"
ÉÌÉ ËÁË WinPopup-ÓÏÏÂÝÅÎÉÅ, ÏÔÐÒÁ×ÌÅÎÎÏÅ Ó ÐÏÍÏÝØÀ smbclient.

âÁÚÏ×ÁÑ ×ÅÒÓÉÑ ÎÅ ÂÌÏËÉÒÕÅÔ ÏÐÁÓÎÙÅ ÓÏÅÄÉÎÅÎÉÑ. åÓÌÉ ×ÁÍ ÔÒÅÂÕÅÔÓÑ ÜÔÁ ÆÕÎËÃÉÑ,
ÉÎÓÔÁÌÌÉÒÕÊÔÅ ÏÄÉÎ ÉÚ ÐÁËÅÔÏ× snort Ó ÓÕÆÆÉËÓÏÍ flexresp ÉÌÉ bloat × ÎÁÚ×ÁÎÉÉ.

ðÏÖÁÌÕÊÓÔÁ, ÏÂÑÚÁÔÅÌØÎÏ ÏÚÎÁËÏÍØÔÅÓØ Ó ÄÏËÕÍÅÎÔÁÃÉÅÊ,
ËÏÔÏÒÁÑ ÒÁÚÍÅÝÅÎÁ × %_docdir/%name-%version

%description -l uk_UA.KOI8-U
Snort -- ÃÅ ÐÏÔÕÖÎÉÊ ÚÁӦ ÐÒÏÓÌÕÈÏ×Õ×ÁÎÎÑ ÔÁ ÐÅÒÅÈ×ÁÔÕ ÍÅÒÅÖÅ×ÉÈ
ÐÁËÅÔ¦×, ÏÓÎÏ×ÁÎÉÊ ÎÁ ¦Â̦ÏÔÅæ libpcap. ÷¦Î ÂÁÚÕ¤ÔØÓÑ ÎÁ ÐÏÐÅÒÅÄÎØÏ
ÓÆÏÒÍÏ×ÁÎÉÈ ÐÒÁ×ÉÌÁÈ ÔÁ ×ͦ¤ ×ÉËÏÎÕ×ÁÔÉ ÁÎÁÌ¦Ú ÚͦÓÔÕ ÐÒÏÔÏËÏÌÕ.

äÁÎÉÊ ÐÁËÅÔ ÍÏÖÅ ×ÉËÏÒÉÓÔÏ×Õ×ÁÔÉÓÑ × ÑËÏÓÔ¦ ÓÉÓÔÅÍÉ ×ÉÑ×ÌÅÎÎÑ
×ÔÏÒÇÎÅÎØ × ÍÅÒÅÖ¦, Á ÔÁËÏÖ ÄÏÐÏÍÁÇÁ¤ ×ÉÑ×ÌÑÔÉ Ò¦ÚÎÏÍÁΦÔΦ ÁÔÁËÉ ÔÁ
§È ÓÐÒÏÂÉ (ÐÅÒÅÐÏ×ÎÅÎÎÑ ÂÕÆÅÒÁ, ÓËÁÎÕ×ÁÎÎÑ ÐÏÒÔ¦×, ÎÅ×ÉÄÉͦ
ÓËÁÎÕ×ÁÎÎÑ, ÁÔÁËÉ CGI, SMB, ÓÐÒÏÂÉ ×ÉÚÎÁÞÅÎÎÑ ÔÉÐÕ ÏÐÅÒÁæÊÎϧ ÓÉÓÔÅÍÉ
ÔÁ ÂÁÇÁÔÏ ¦ÎÛÉÈ).

Snort ÍÁ¤ ÍÏÖÌÉצÓÔØ ÏÐÏצÝÅÎÎÑ × ÒÅÁÌØÎÏÍÕ ÍÁÓÛÔÁ¦ ÞÁÓÕ ÞÅÒÅÚ
ÐÏצÄÏÍÌÅÎÎÑ, צÄÐÒÁ×ÌÅΦ × ÓÉÓÔÅÍÎÉÊ ÌÏÇ-ÆÁÊÌ, ÁÌØÔÅÒÎÁÔÉ×ÎÉÊ ÆÁÊÌ
"ÔÒÉ×ÏÇÉ" ÁÂÏ ÑË WinPopup-ÐÏצÄÏÍÌÅÎÎÑ, צÄÐÒÁ×ÌÅÎÅ ÚÁ ÄÏÐÏÍÏÇÏÀ
ÐÒÏÇÒÁÍÉ smbclient.

âÕÄØ-ÌÁÓËÁ, ÏÂÏ×'ÑÚËÏ×Ï ÏÚÎÁÊÏÍÔÅÓÑ Ú ÄÏËÕÍÅÎÔÁæ¤À, ÝÏ ÒÏÚͦÝÅÎÁ ×
%_docdir/%name-%version

%package plain+flexresp
Summary: Snort (plain) with Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÐÏÄÄÅÒÖËÏÊ Á×ÔÏÍÁÔÉÞÅÓËÏÇÏ ÂÌÏËÉÒÏ×ÁÎÉÑ ÓÏÅÄÉÎÅÎÉÊ
Group: Security/Networking
Requires: %name = %version
Requires: libnet1
%description plain+flexresp
Snort compiled with flexresp support.
Flexible Response allows snort to actively close offending connections.
Requires snort libnet rpm.
%description -l ru_RU.KOI8-R plain+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ flexresp. Flexible Responses ÏÚÎÁÞÁÅÔ
×ÏÚÍÏÖÎÏÓÔØ Á×ÔÏÍÁÔÉÞÅÓËÉ ÂÌÏËÉÒÏ×ÁÔØ ÓÏÅÄÉÎÅÎÉÑ, ÐÒÉÚÎÁÎÎÙÅ ÚÌÏÎÁÍÅÒÅÎÎÙÍÉ
ÎÁ ÏÓÎÏ×ÁÎÉÉ ÓÏÏÔ×ÅÔÓÔ×ÕÀÝÉÈ ÐÒÁ×ÉÌ. ôÒÅÂÕÅÔ ÂÉÂÌÉÏÔÅËÕ libnet.
%description -l uk_UA.KOI8-U plain+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ flexresp.
÷ÉÍÁÇÁ¤ ¦Â̦ÏÔÅËÕ libnet.

%package mysql
Summary: Snort with MySQL support
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ÂÁÚÕ MySQL
Group: Security/Networking
Requires: %name = %version
%description mysql
Snort compiled with mysql support.
%description -l ru_RU.KOI8-R mysql
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ MySQL × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ.
%description -l uk_UA.KOI8-U mysql
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ MySQL.

%package mysql+flexresp
Summary: Snort with MySQL support and Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ÂÁÚÕ MySQL É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: libnet1
%description mysql+flexresp
Snort compiled with mysql support and flexresp support.
Requires snort libnet rpm.
%description -l ru_RU.KOI8-R mysql+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ MySQL × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ
É flexresp - Á×ÔÏÍÁÔÉÞÅÓËÉÍ ÂÌÏËÉÒÏ×ÁÎÉÅÍ ÓÏÅÄÉÎÅÎÉÊ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÐÒÁ×ÉÌ.
ôÒÅÂÕÅÔ ÂÉÂÌÉÏÔÅËÕ libnet.
%description -l uk_UA.KOI8-U mysql+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ MySQL ÔÁ flexresp.
÷ÉÍÁÇÁ¤ ¦Â̦ÏÔÅËÕ libnet.

%package postgresql
Summary: Snort with PostgreSQL support
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ÂÁÚÕ PostgreSQL
Group: Security/Networking
Requires: %name = %version
%description postgresql
Snort compiled with postgresql support.
%description -l ru_RU.KOI8-R postgresql
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ PostgreSQL × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ.
%description -l uk_UA.KOI8-U postgresql
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ PostgreSQL.

%package postgresql+flexresp
Summary: Snort with PostgreSQL support and Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ÂÁÚÕ PostgreSQL É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: libnet1
%description postgresql+flexresp
Snort compiled with postgresql support and flexresp support.
Requires snort libnet rpm.
%description -l ru_RU.KOI8-R postgresql+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ PostgreSQL × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ
É flexresp - Á×ÔÏÍÁÔÉÞÅÓËÉÍ ÂÌÏËÉÒÏ×ÁÎÉÅÍ ÓÏÅÄÉÎÅÎÉÊ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÐÒÁ×ÉÌ.
ôÒÅÂÕÅÔ ÂÉÂÌÉÏÔÅËÕ libnet.
%description -l uk_UA.KOI8-U postgresql+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ PostgreSQL ÔÁ flexresp.
÷ÉÍÁÇÁ¤ ¦Â̦ÏÔÅËÕ libnet.

%package odbc
Summary: Snort with unixODBC support
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ODBC-ÂÁÚÕ
Group: Security/Networking
Requires: %name = %version
Requires: libunixODBC
%description odbc
Snort compiled with unixODBC support.
%description -l ru_RU.KOI8-R odbc
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ unixODBC × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ.
%description -l uk_UA.KOI8-U odbc
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ unixODBC.

%package odbc+flexresp
Summary: Snort with unixODBC support and Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ ÓÔÁÔÉÓÔÉËÉ × ODBC-ÂÁÚÕ É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: libnet1
Requires: libunixODBC
%description odbc+flexresp
Snort compiled with unixODBC support and flexresp support.
Requires snort libnet rpm.
%description -l ru_RU.KOI8-R odbc+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ ODBC-óõâä × ËÁÞÅÓÔ×Å ÈÒÁÎÉÌÉÝÁ ÓÔÁÔÉÓÔÉËÉ
É flexresp - Á×ÔÏÍÁÔÉÞÅÓËÉÍ ÂÌÏËÉÒÏ×ÁÎÉÅÍ ÓÏÅÄÉÎÅÎÉÊ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÐÒÁ×ÉÌ.
ôÒÅÂÕÅÔ ÂÉÂÌÉÏÔÅËÕ libnet.
%description -l uk_UA.KOI8-U odbc+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ unixODBC ÔÁ flexresp.
÷ÉÍÁÇÁ¤ ¦Â̦ÏÔÅËÕ libnet.

%package snmp
Summary: Snort with SNMP support
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ Õ×ÅÄÏÍÌÅÎÉÊ ÞÅÒÅÚ SNMP
Group: Security/Networking
Requires: %name = %version
Requires: libnet-snmp
%description snmp
Snort compiled with SNMP support for sending alerts
to Network Management System (NMS).
%description -l ru_RU.KOI8-R snmp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ SNMP. SNMP ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÏÔÐÒÁ×ËÉ
Õ×ÅÄÏÍÌÅÎÉÊ Ï ×ÔÏÒÖÅÎÉÑÈ ÎÁ ÃÅÎÔÒÁÌØÎÕÀ ÓÅÔÅ×ÕÀ ËÏÎÓÏÌØ ÁÄÍÉÎÉÓÔÒÉÒÏ×ÁÎÉÑ.
%description -l uk_UA.KOI8-U snmp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ SNMP

%package snmp+flexresp
Summary: Snort with SNMP support and Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÏÔÐÒÁ×ËÏÊ Õ×ÅÄÏÍÌÅÎÉÊ ÞÅÒÅÚ SNMP É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: libnet-snmp
%description snmp+flexresp
Snort compiled with SNMP support for sending alerts
to Network Management System (NMS).
Flexible Resonse support is enabled too.
%description -l ru_RU.KOI8-R snmp+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ SNMP
(ÐÒÏÔÏËÏÌ SNMP ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÏÔÐÒÁ×ËÉ Õ×ÅÄÏÍÌÅÎÉÊ Ï ×ÔÏÒÖÅÎÉÑÈ
ÎÁ ÃÅÎÔÒÁÌØÎÕÀ ÓÅÔÅ×ÕÀ ËÏÎÓÏÌØ ÁÄÍÉÎÉÓÔÒÉÒÏ×ÁÎÉÑ)
É flexresp - Á×ÔÏÍÁÔÉÞÅÓËÉÍ ÂÌÏËÉÒÏ×ÁÎÉÅÍ ÓÏÅÄÉÎÅÎÉÊ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÐÒÁ×ÉÌ.
%description -l uk_UA.KOI8-U snmp+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ SNMP ÔÁ flexresp.

%package clamav
Summary: Snort with ClamAV support
Summary(ru_RU.KOI8-R): Snort Ó ÐÒÏ×ÅÒËÏÊ ÐÒÏÈÏÄÑÝÅÇÏ ÔÒÁÆÉËÁ ÁÎÔÉ×ÉÒÕÓÏÍ ClamAV
Group: Security/Networking
Requires: %name = %version
Requires: libclamav
%description clamav
Snort compiled with ClamAV antivirus support
for checking viruses in verified traffic.
%description -l ru_RU.KOI8-R clamav
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ ÁÎÔÉ×ÉÒÕÓÁ ClamAV,
ËÏÔÏÒÙÊ ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÐÏÉÓËÁ ×ÉÒÕÓÏ× × ÐÒÏÐÕÓËÁÅÍÏÍ ÔÒÁÆÉËÅ.
%description -l uk_UA.KOI8-U clamav
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ ClamAV

%package clamav+flexresp
Summary: Snort with ClamAV support and Flexible Response
Summary(ru_RU.KOI8-R): Snort Ó ÐÒÏ×ÅÒËÏÊ ÔÒÁÆÉËÁ ÁÎÔÉ×ÉÒÕÓÏÍ ClamAV É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: libclamav
%description clamav+flexresp
Snort compiled with ClamAV antivirus support
for checking viruses in verified traffic.
%description -l ru_RU.KOI8-R clamav+flexresp
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ ÁÎÔÉ×ÉÒÕÓÁ ClamAV,
ËÏÔÏÒÙÊ ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÐÏÉÓËÁ ×ÉÒÕÓÏ× × ÐÒÏÐÕÓËÁÅÍÏÍ ÔÒÁÆÉËÅ,
É flexresp - Á×ÔÏÍÁÔÉÞÅÓËÉÍ ÂÌÏËÉÒÏ×ÁÎÉÅÍ ÓÏÅÄÉÎÅÎÉÊ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÐÒÁ×ÉÌ.
%description -l uk_UA.KOI8-U clamav+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ ClamAV ÔÁ flexresp.

%package inline
Summary: Snort with IPTables support
Summary(ru_RU.KOI8-R): Snort Ó ÞÔÅÎÉÅÍ ÔÒÁÆÉËÁ ÞÅÒÅÚ IPTables ×ÍÅÓÔÏ PCAP
Group: Security/Networking
Requires: %name = %version
Requires: iptables
%description inline
Snort-Inline takes packets from iptables instead of libpcap.
It then uses new rule types to help iptables make pass or drop decisions
based on snort rules.
%description -l ru_RU.KOI8-R inline
Snort, ÉÓÐÏÌØÚÕÀÝÉÊ ÄÌÑ ÐÒÏÓÍÏÔÒÁ ÔÒÁÆÉËÁ ÆÕÎËÃÉÉ ÐÁËÅÔÎÏÇÏ ÆÉÌØÔÒÁ IPTables
×ÍÅÓÔÏ ÂÉÂÌÉÏÔÅËÉ PCAP. äÏÐÏÌÎÉÔÅÌØÎÙÅ ÔÉÐÙ ÐÒÁ×ÉÌ ÓÌÕÖÁÔ ÄÌÑ ÐÅÒÅÄÁÞÉ ÕËÁÚÁÎÉÊ
ÏÔ Snort'Á ÐÁËÅÔÎÏÍÕ ÆÉÌØÔÒÕ.
%description -l uk_UA.KOI8-U inline
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ IPTables

%package inline+flexresp
Summary: Snort with IPTables and FlexibleResponse support
Summary(ru_RU.KOI8-R): Snort Ó ÞÔÅÎÉÅÍ ÔÒÁÆÉËÁ ÞÅÒÅÚ IPTables É Á×ÔÏÂÌÏËÉÒÏ×ËÏÊ
Group: Security/Networking
Requires: %name = %version
Requires: iptables
%description inline+flexresp
Snort-Inline takes packets from iptables instead of libpcap.
It then uses new rule types to help iptables make pass or drop decisions
based on snort rules.
%description -l ru_RU.KOI8-R inline+flexresp
Snort, ÉÓÐÏÌØÚÕÀÝÉÊ ÄÌÑ ÐÒÏÓÍÏÔÒÁ ÔÒÁÆÉËÁ ÆÕÎËÃÉÉ ÐÁËÅÔÎÏÇÏ ÆÉÌØÔÒÁ IPTables
×ÍÅÓÔÏ ÂÉÂÌÉÏÔÅËÉ PCAP. äÏÐÏÌÎÉÔÅÌØÎÙÅ ÔÉÐÙ ÐÒÁ×ÉÌ ÓÌÕÖÁÔ ÄÌÑ ÐÅÒÅÄÁÞÉ ÕËÁÚÁÎÉÊ
ÏÔ Snort'Á ÐÁËÅÔÎÏÍÕ ÆÉÌØÔÒÕ. Flexresp ÏÚÎÁÞÁÅÔ ×ÏÚÍÏÖÎÏÓÔØ Á×ÔÏÍÁÔÉÞÅÓËÉ
ÂÌÏËÉÒÏ×ÁÔØ ÓÏÅÄÉÎÅÎÉÑ ÎÁ ÏÓÎÏ×ÁÎÉÉ ÓÏÏÔ×ÅÔÓÔ×ÕÀÝÉÈ ÐÒÁ×ÉÌ.
%description -l uk_UA.KOI8-U inline+flexresp
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ IPTables ÔÁ flexresp.

%package bloat
Summary: Snort with MySQL, PostgreSQL, ODBC, SNMP, ClamAV, IPTables supports and FlexResp
Group: Security/Networking
Requires: %name = %version
Requires: libnet1
%description bloat
Snort compiled with mysql, postgresql, snmp, odbc, clamav, iptables supports and flexresp support.
%description -l ru_RU.KOI8-R bloat
Snort, ÓËÏÍÐÉÌÉÒÏ×ÁÎÎÙÊ Ó ÐÏÄÄÅÒÖËÏÊ ×ÓÅÈ ×ÏÚÍÏÖÎÙÈ ÆÕÎËÃÉÊ:
- ÏÔÐÒÁ×ËÁ ÓÔÁÔÉÓÔÉËÉ × ÂÁÚÕ MySQL, PostgreSQL ÉÌÉ ODBC,
- ÏÔÐÒÁ×ËÁ Õ×ÅÄÏÍÌÅÎÉÊ ÎÁ ÃÅÎÔÒÁÌØÎÕÀ ÓÅÔÅ×ÕÀ ËÏÎÓÏÌØ ÕÐÒÁ×ÌÅÎÉÑ ÐÏ ÐÒÏÔÏËÏÌÕ SNMP,
- ÐÒÏ×ÅÒËÁ ÔÒÁÆÉËÁ ÁÎÔÉ×ÉÒÕÓÏÍ ClamAV,
- ÕÐÒÁ×ÌÅÎÉÅ ÐÁËÅÔÎÙÍ ÆÉÌØÔÒÏÍ IPTables,
- Á×ÔÏÍÁÔÉÞÅÓËÁÑ ÂÌÏËÉÒÏ×ÁËÁ ÏÐÁÓÎÙÈ ÓÏÅÄÉÎÅÎÉÊ ÞÅÒÅÚ flexresp
 (ÔÒÅÂÕÅÔ ÂÉÂÌÉÏÔÅËÕ libnet).
èÏÔÑ ÓÁÍ ÐÁËÅÔ ÎÅÚÎÁÞÉÔÅÌØÎÏ ÏÔÌÉÞÁÅÔÓÑ ÐÏ ÒÁÚÍÅÒÕ ÏÔ ÂÁÚÏ×ÏÇÏ, ÏÎ ÔÒÅÂÕÅÔ ÂÏÌØÛÏÇÏ
ËÏÌÉÞÅÓÔ×Á ×ÓÐÏÍÏÇÁÔÅÌØÎÙÈ ÂÉÂÌÉÏÔÅË, ÐÏÜÔÏÍÕ ÕÓÔÁÎÁ×ÌÉ×ÁÔØ ÅÇÏ ÂÅÚ ÎÅÏÂÈÏÄÉÍÏÓÔÉ
ÎÅ ÓÌÅÄÕÅÔ. ÷ÍÅÓÔÏ ÜÔÏÇÏ ÐÏÐÒÏÂÕÊÔÅ ÕÓÔÁÎÏ×ÉÔØ ÐÁËÅÔÙ snort Ó ÏÔÄÅÌØÎÙÍÉ ÆÕÎËÃÉÑÍÉ,
ËÏÔÏÒÙÅ ×ÁÍ ÄÅÊÓÔ×ÉÔÅÌØÎÏ ÎÕÖÎÙ.
%description -l uk_UA.KOI8-U bloat
Snort, ÓËÏÍЦÌØÏ×ÁÎÉÊ Ú Ð¦ÄÔÒÉÍËÏÀ MySQL, PostgreSQL, ODBC, SNMP, ClamAV, IPTables ÔÁ flexresp.

%package doc
Summary: Various documentation from Snort IDS distribution.
Summary(ru_RU.KOI8-R): äÏËÕÍÅÎÔÁÃÉÑ ÐÏ ÁÎÁÌÉÚÁÔÏÒÕ ÓÅÔÅ×ÏÇÏ ÔÒÁÆÉËÁ Snort
Group: Security/Networking
%description doc
Snort manual, FAQ and tons of detailed textual listings
describing all network intrusions known by Snort.
%description doc -l ru_RU.KOI8-R
òÕËÏ×ÏÄÓÔ×Ï ÐÏÌØÚÏ×ÁÔÅÌÑ, FAQ, Á ÔÁËÖÅ ÄÅÔÁÌØÎÁÑ ÄÏËÕÍÅÎÔÁÃÉÑ
ÐÏ ÓÉÇÎÁÔÕÒÁÍ ×ÓÅÈ ÓÅÔÅ×ÙÈ ÁÔÁË, ËÏÔÏÒÙÅ ÒÁÓÐÏÚÎÁ£Ô Snort.

%package dbhints
Summary: Script for creation human readable descriptions in SQL/ODBC database
Summary(ru_RU.KOI8-R): óÃÅÎÁÒÉÊ ÓÏÚÄÁÎÉÑ ÏÐÉÓÁÎÉÊ × SQL/ODBC-ÂÁÚÅ ÓÏ ÓÔÁÔÉÓÔÉËÏÊ Snort'a
Group: Security/Networking
%description dbhints
This package contain script that generates three tables in any SQL92 compliant
database providing information useful when analyzing network data.
These tables are intended to supplement the base tables required
for database support in snort in order to make data more human readable.
%description dbhints -l ru_RU.KOI8-R
÷ ÜÔÏÍ ÐÁËÅÔÅ ÎÁÈÏÄÉÔÓÑ ÓÃÅÎÁÒÉÊ ÎÁ ÑÚÙËÅ SQL92, ÓÏÚÄÁÀÝÉÊ ÎÅÓËÏÌØËÏ
ÉÎÆÏÒÍÁÃÉÏÎÎÙÈ ÔÁÂÌÉÃ × âä 'snort'. äÁÎÎÙÅ ÔÁÂÌÉÃÙ ÈÒÁÎÑÔ ÉÎÆÏÒÍÁÔÉ×ÎÙÅ ÏÐÉÓÁÎÉÑ
ÓÅÔÅ×ÙÈ ÐÒÏÔÏËÏÌÏ×, ÆÌÁÇÏ× É ÓÌÕÖÂ, ÐÏÌÅÚÎÙÅ ÄÌÑ ÐÏÓÔÒÏÅÎÉÑ ÒÁÚÌÉÞÎÙÈ ÏÔÞ£ÔÏ×.

ðÒÉÍÅÞÁÎÉÅ: ÓÃÅÎÁÒÉÊ ÔÒÅÂÕÅÔÓÑ ÕÓÔÁÎÁ×ÌÉ×ÁÔØ É ÚÁÐÕÓËÁÔØ ÎÅ ÎÁ ÔÏÍ ËÏÍÐØÀÔÅÒÅ,
ÎÁ ËÏÔÏÒÏÍ ÉÎÓÔÁÌÌÉÒÏ×ÁÎ Snort, Á ÎÁ ÔÏÍ, ÎÁ ËÏÔÏÒÏÍ ÒÁÂÏÔÁÅÔ óõâä Ó ÂÁÚÏÊ ÄÁÎÎÙÈ,
ÓÏÄÅÒÖÁÝÅÊ ÐÏÓÔÕÐÁÀÝÕÀ ÏÔ Snort'a ÓÔÁÔÉÓÔÉËÕ.

%prep
%setup -q

%if_with snmp
%patch2 -p1
%endif

%if_with snmp
%patch10
%endif
%patch11
#patch12 -p1
%patch13 -p1
%patch14
%patch15

%__mkdir_p building
autoreconf -fisv

%build

export LDFLAGS="$LDFLAGS -Wl,--no-as-needed"

function prepconf() {
   local t=$1
   case $t in
--without* ) return ;;
   esac
   shift

#   echo DEBUG: Configure args: "$ at "
#   return

   local d=$1
   shift
   %__mkdir_p $d
   pushd $d
   %__ln_s -f ../configure ./configure
   OPENSSL_LIB_DIR=%_libdir \
    %configure \
--prefix=%_prefix \
--sysconfdir=%_sysconfdir/%name \
--with-openssl \
--with-libpcap \
--enable-linux-smp-stats \
--with-oracle=no \
%{subst_with prelude} \
"$ at "
   %make    
   %__mv src/%name ../building/%name-$d
   popd
}

prepconf   xxx                    plain               --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no
prepconf %{subst_with mysql}      mysql               --with-mysql=yes --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no
prepconf %{subst_with postgresql} postgresql          --with-mysql=no  --with-postgresql=yes --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no
prepconf %{subst_with odbc}       odbc                --with-mysql=no  --with-postgresql=no  --with-odbc=yes --with-snmp=no  --with-clamav=no  -with-inline=no
prepconf %{subst_with snmp}       snmp                --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=yes --with-clamav=no  -with-inline=no
prepconf %{subst_with clamav}     clamav              --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=yes -with-inline=no
prepconf %{subst_with inline}     inline              --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=yes
%if_enabled flexresp
prepconf   xxx                    plain+flexresp      --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no  --enable-flexresp
prepconf %{subst_with mysql}      mysql+flexresp      --with-mysql=yes --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no  --enable-flexresp
prepconf %{subst_with postgresql} postgresql+flexresp --with-mysql=no  --with-postgresql=yes --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=no  --enable-flexresp
prepconf %{subst_with odbc}       odbc+flexresp       --with-mysql=no  --with-postgresql=no  --with-odbc=yes --with-snmp=no  --with-clamav=no  -with-inline=no  --enable-flexresp
prepconf %{subst_with snmp}       snmp+flexresp       --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=yes --with-clamav=no  -with-inline=no  --enable-flexresp
prepconf %{subst_with clamav}     clamav+flexresp     --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=yes -with-inline=no  --enable-flexresp
prepconf %{subst_with inline}     inline+flexresp     --with-mysql=no  --with-postgresql=no  --with-odbc=no  --with-snmp=no  --with-clamav=no  -with-inline=yes --enable-flexresp
prepconf %{subst_with bloat}      bloat               --with-mysql=yes --with-postgresql=yes --with-odbc=yes --with-snmp=yes --with-clamav=yes -with-inline=yes --enable-flexresp
%endif

%install
%__mkdir_p %buildroot/{%_sbindir,%_initdir,%_man8dir,%_logdir/%name,%_altdir}
%__mkdir_p %buildroot/%_sysconfdir/{%name,logrotate.d,sysconfig}

weight=0

function myinstall() {
   weight=$[10+$weight]
   test -r "$1" || return 0
   %__install -m 755 "$1" "%buildroot/%_sbindir/$1"

   # Create record file for alterantives
   echo "\
<group name=\"candidate\">
<option name=\"link\">%_sbindir/%name</option>
<option name=\"real\">%_sbindir/$1</option>
<option name=\"weight\" type=\"number\">$weight</option>
</group>
" > %buildroot%_altdir/$1.xml
}

pushd building
for c in %name-{plain,mysql,postgresql,odbc,snmp,clamav,inline}; do
   myinstall "$c"
   myinstall "$c+flexresp"
done
myinstall "%name-bloat"
popd

# Create symlink for %%ghost, actually not packaged
pushd %buildroot/%_sbindir
%__ln_s %name-plain %name
popd

%__install -m 644 %name.8    %buildroot%_man8dir/
%__install -m 644 etc/*.{conf,config,map} etc/sid %buildroot/%_sysconfdir/%name
%__install -m 744 %SOURCE99  %buildroot/%_initdir/
%__subst 's/^var RULE_PATH \.\.\/rules/var RULE_PATH \%_sysconfdir\/%name\/rules/i' %buildroot/%_sysconfdir/%name/%name.conf

m4 -DSNORT_CONFDIRPATH=%_sysconfdir/%name %SOURCE10 > %buildroot/%_sysconfdir/sysconfig/%name
m4 -DSNORT_LOGPATH=%_logdir/%name %SOURCE30 > %buildroot/%_sysconfdir/logrotate.d/%name
m4 -DSNORT_CONFPATH=%_sysconfdir/%name/%name.conf -DSNORT_BINPATH=%_sbindir/%name %SOURCE20 > README-ALT.ru
m4 -DSNORT_CONFPATH=%_sysconfdir/%name/%name.conf -DSNORT_BINPATH=%_sbindir/%name %SOURCE21 > README-ALT.uk

mkdir -p %buildroot%dbhints_dir
bzcat %SOURCE5 > %buildroot%dbhints_path

%pre
%_sbindir/groupadd -rf %name
%_bindir/id %name > /dev/null 2>&1 \
|| %_sbindir/useradd -c "Snort IDS" -g %name -r -M -d /dev/null -s /dev/null %name

%post
%post_register_alternatives %name-plain.xml
%post_service snortd

%preun
%preun_service snortd
%preun_unregister_alternatives %name-plain.xml

%postun
echo
echo You can delete fakeuser \"%name\" using command:
echo -e "\t%_sbindir/userdel %name"
echo if needed
echo

%files
%doc doc/AUTHORS doc/BUGS doc/CREDITS doc/NEWS doc/PROBLEMS doc/README* doc/RULES.todo doc/TODO doc/USAGE doc/WISHLIST
%doc README-ALT.ru README-ALT.uk
%doc schemas/create_*
%config(noreplace) %_sysconfdir/sysconfig/%name
%config(noreplace) %_initdir/snortd
%config(noreplace) %_sysconfdir/logrotate.d/%name
%config %_sysconfdir/%name
%attr(1770,root,snort) %dir %_logdir/%name
%_sbindir/%name-plain
%ghost %_sbindir/%name
%_man8dir/%name.*
%_altdir/%name-plain.xml

%if_with mysql
%files mysql
%_sbindir/%name-mysql
%_altdir/%name-mysql.xml
%endif

%if_with postgresql
%files postgresql
%_sbindir/%name-postgresql
%_altdir/%name-postgresql.xml
%endif

%if_with odbc
%files odbc
%_sbindir/%name-odbc
%_altdir/%name-odbc.xml
%endif

%if_with snmp
%files snmp
%_sbindir/%name-snmp
%_altdir/%name-snmp.xml
%endif

%if_with clamav
%files clamav
%_sbindir/%name-clamav
%_altdir/%name-clamav.xml
%endif

%if_with inline
%files inline
%_sbindir/%name-inline
%_altdir/%name-inline.xml
%endif

%if_enabled flexresp

%files plain+flexresp
%_sbindir/%name-plain+flexresp
%_altdir/%name-plain+flexresp.xml

%if_with mysql
%files mysql+flexresp
%_sbindir/%name-mysql+flexresp
%_altdir/%name-mysql+flexresp.xml
%endif

%if_with postgresql
%files postgresql+flexresp
%_sbindir/%name-postgresql+flexresp
%_altdir/%name-postgresql+flexresp.xml
%endif

%if_with odbc
%files odbc+flexresp
%_sbindir/%name-odbc+flexresp
%_altdir/%name-odbc+flexresp.xml
%endif

%if_with snmp
%files snmp+flexresp
%_sbindir/%name-snmp+flexresp
%_altdir/%name-snmp+flexresp.xml
%endif

%if_with clamav
%files clamav+flexresp
%_sbindir/%name-clamav+flexresp
%_altdir/%name-clamav+flexresp.xml
%endif

%if_with inline
%files inline+flexresp
%_sbindir/%name-inline+flexresp
%_altdir/%name-inline+flexresp.xml
%endif

%if_with bloat
%files bloat
%_sbindir/%name-bloat
%_altdir/%name-bloat.xml
%endif

%endif  # flexresp

%files doc
%doc doc/faq.* doc/snort_manual.* doc/snort_schema_v106.pdf

%files dbhints
%dbhints_dir

%post plain+flexresp
%post_register_alternatives %name-plain+flexresp.xml

%post mysql
%post_register_alternatives %name-mysql.xml
%post mysql+flexresp
%post_register_alternatives %name-mysql+flexresp.xml

%post postgresql
%post_register_alternatives %name-postgresql.xml
%post postgresql+flexresp
%post_register_alternatives %name-postgresql+flexresp.xml

%post odbc
%post_register_alternatives %name-odbc.xml
%post odbc+flexresp                        
%post_register_alternatives %name-odbc+flexresp.xml

%post snmp                                
%post_register_alternatives %name-snmp.xml
%post snmp+flexresp                        
%post_register_alternatives %name-snmp+flexresp.xml

%post clamav                              
%post_register_alternatives %name-clamav.xml
%post clamav+flexresp                    
%post_register_alternatives %name-clamav+flexresp.xml

%post inline                              
%post_register_alternatives %name-inline.xml
%post inline+flexresp                      
%post_register_alternatives %name-inline+flexresp.xml

%post bloat
%post_register_alternatives %name-bloat.xml

%preun plain+flexresp
%preun_unregister_alternatives %name-plain+flexresp.xml
%preun mysql
%preun_unregister_alternatives %name-mysql.xml
%preun mysql+flexresp
%preun_unregister_alternatives %name-mysql+flexresp.xml
%preun postgresql
%preun_unregister_alternatives %name-postgresql.xml
%preun postgresql+flexresp
%preun_unregister_alternatives %name-postgresql+flexresp.xml
%preun odbc
%preun_unregister_alternatives %name-odbc.xml
%preun odbc+flexresp
%preun_unregister_alternatives %name-odbc+flexresp.xml
%preun snmp
%preun_unregister_alternatives %name-snmp.xml
%preun snmp+flexresp
%preun_unregister_alternatives %name-snmp+flexresp.xml
%preun clamav
%preun_unregister_alternatives %name-clamav.xml
%preun clamav+flexresp
%preun_unregister_alternatives %name-clamav+flexresp.xml
%preun inline
%preun_unregister_alternatives %name-inline.xml
%preun inline+flexresp
%preun_unregister_alternatives %name-inline+flexresp.xml
%preun bloat
%preun_unregister_alternatives %name-bloat.xml

%changelog
…
Todas as alterações você pod ver aqui