|
|
|
|
# not a GNU package. You can remove this line, if
|
|
|
|
|
# have all needed files, that a GNU package needs
|
|
|
|
|
AUTOMAKE_OPTIONS = foreign 1.4
|
|
|
|
|
ACLOCAL_AMFLAGS = -I m4
|
|
|
|
|
EXTRA_DIST = ChangeLog COPYING LICENSE suricata.yaml.in \
|
|
|
|
|
classification.config \
|
|
|
|
|
reference.config
|
|
|
|
|
if BUILD_LIBHTP
|
|
|
|
|
HTP_DIR = libhtp
|
|
|
|
|
endif
|
|
|
|
|
SUBDIRS = $(HTP_DIR) src qa rules doc
|
|
|
|
|
|
|
|
|
|
install-data-am:
|
|
|
|
|
@echo "Run 'make install-conf' if you want to install initial configuration files. Or 'make install-full' to install configuration and rules";
|
|
|
|
|
|
|
|
|
|
install-full: install install-conf install-rules
|
|
|
|
|
|
|
|
|
|
install-conf:
|
|
|
|
|
install -d "$(e_sysconfdir)"
|
|
|
|
|
@test -e "$(e_sysconfdir)/suricata.yaml" || install -m 600 "$(top_srcdir)/suricata.yaml" "$(e_sysconfdir)"
|
|
|
|
|
@test -e "$(e_sysconfdir)/classification.config" || install -m 600 "$(top_srcdir)/classification.config" "$(e_sysconfdir)"
|
|
|
|
|
@test -e "$(e_sysconfdir)/reference.config" || install -m 600 "$(top_srcdir)/reference.config" "$(e_sysconfdir)"
|
|
|
|
|
install -d "$(e_logfilesdir)"
|
|
|
|
|
|
|
|
|
|
install-rules:
|
|
|
|
|
install -d "$(e_sysconfrulesdir)"
|
|
|
|
|
wget -qO - http://rules.emergingthreats.net/open/suricata/emerging.rules.tar.gz | tar -x -z -C "$(e_sysconfdir)" -f -
|
|
|
|
|
@test -e "$(e_sysconfrulesdir)decoder-events.rules" || install -m 600 "$(top_srcdir)/rules/decoder-events.rules" "$(e_sysconfrulesdir)"
|
|
|
|
|
@test -e "$(e_sysconfrulesdir)stream-events.rules" || install -m 600 "$(top_srcdir)/rules/stream-events.rules" "$(e_sysconfrulesdir)"
|
|
|
|
|
@test -e "$(e_sysconfrulesdir)smtp-events.rules" || install -m 600 "$(top_srcdir)/rules/smtp-events.rules" "$(e_sysconfrulesdir)"
|
|
|
|
|
@test -e "$(e_sysconfrulesdir)http-events.rules" || install -m 600 "$(top_srcdir)/rules/http-events.rules" "$(e_sysconfrulesdir)"
|
|
|
|
|
@echo ""
|
|
|
|
|
@echo "You can now start suricata by running as root something like '$(bindir)/suricata -c $(e_sysconfdir)/suricata.yaml -i eth0'."
|
|
|
|
|
@echo ""
|
|
|
|
|
@echo "If a library like libhtp.so is not found, you can run suricata with:"
|
|
|
|
|
@echo "'LD_LIBRARY_PATH="$(prefix)/lib" "$(bindir)/suricata" -c "$(e_sysconfdir)/suricata.yaml" -i eth0'."
|
|
|
|
|
@echo ""
|
|
|
|
|
@echo "While rules are installed now, it's highly recommended to use a rule manager for maintaining rules."
|
|
|
|
|
@echo "The two most common are Oinkmaster and Pulledpork. For a guide see:"
|
|
|
|
|
@echo "https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Rule_Management_with_Oinkmaster"
|
