diff options
| author | John Audia <therealgraysky@proton.me> | 2022-12-10 07:53:31 -0500 |
|---|---|---|
| committer | Tianling Shen <cnsztl@gmail.com> | 2022-12-16 03:55:34 +0800 |
| commit | 2d4e7d5fd343652d0852337184d56522ef5af83d (patch) | |
| tree | 617200349e40e263c2862fdb2e6ea7cb81a8dc58 /net | |
| parent | 89dc1b17e9d8234c8085ffdb4fbe00d0e9093725 (diff) | |
OpenAppID: add new package
Traditionally, Snort rules are based upon packet analysis. OpenAppID
enables detection of applications/cloud applications on the network.
This package provides OpenAppID and signature files used by OpenAppID to detect
network traffic from certain applications can be used to identify rogue
application use, detect malicious applications and implement various
application policies, such as application blacklisting, limiting application
usage, and enforcing conditional controls.
To use, for example, edit /etc/snort/local.lua and add the following section
at a minimum:
appid = {
app_detector_dir = '/usr/lib/openappid',
log_stats = true,
app_stats_period = 60,
}
Signed-off-by: John Audia <therealgraysky@proton.me>
Diffstat (limited to 'net')
| -rw-r--r-- | net/openappid/Makefile | 58 |
1 files changed, 58 insertions, 0 deletions
diff --git a/net/openappid/Makefile b/net/openappid/Makefile new file mode 100644 index 000000000..42b26334c --- /dev/null +++ b/net/openappid/Makefile @@ -0,0 +1,58 @@ +# +# This is free software, licensed under the GNU General Public License v2. +# See /LICENSE for more information. +# + +include $(TOPDIR)/rules.mk + +PKG_NAME:=openappid +PKG_VERSION:=20220617 +URL_CODE:=26425 +PKG_RELEASE:=1 + +PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz +PKG_SOURCE_URL:=https://www.snort.org/downloads/openappid/$(URL_CODE)? +PKG_HASH:=8513877ce2264bb22119d911c2cf11f73735c866e2ca0d061c35eef6740d51f9 + +PKG_MAINTAINER:=John Audia <thereadgraysky@proton.me> +PKG_LICENSE:=GPL-2.0-only +PKG_LICENSE_FILES:=LICENSE + +include $(INCLUDE_DIR)/package.mk +TAR_OPTIONS+= --strip-components 1 +TAR_CMD=$(HOST_TAR) -C $(1) $(TAR_OPTIONS) + +define Package/openappid + SUBMENU:=Firewall + SECTION:=net + CATEGORY:=Network + DEPENDS:=+snort3 + TITLE:=Detection language and processing module for Snort + URL:=https://www.snort.org/ +endef + +define Package/openappid/description + OpenAppId is an open, application-focused detection language and processing + module for Snort that enables users to create, share, and implement + application and service detection. +endef + +define Build/Compile + true +endef + +define Package/openappid/install + $(INSTALL_DIR) $(1)/usr/lib/openappid/custom/{libs,lua,port} + $(INSTALL_DIR) $(1)/usr/lib/openappid/odp + $(CP) $(PKG_BUILD_DIR)/lua $(1)/usr/lib/openappid/odp + $(CP) $(PKG_BUILD_DIR)/libs $(1)/usr/lib/openappid/odp + $(CP) $(PKG_BUILD_DIR)/port $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/appMapping.data $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/LICENSE $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/README $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/appid.conf $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/AUTHORS $(1)/usr/lib/openappid/odp + $(INSTALL_DATA) $(PKG_BUILD_DIR)/version.conf $(1)/usr/lib/openappid/odp +endef + +$(eval $(call BuildPackage,openappid)) |