This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 3.x development tree".

The branch, master has been updated via 870a92f8fbebfe4d50efafda536b98f7664ac127 (commit) via 916536c22dc0fef6040e45854cc156df8b29bf7e (commit) via 4f043571a8f1846dbbd089cf4de0a5b58dff027d (commit) from f898c6bad247a1281d4427bd92a1d98a80a30315 (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit 870a92f8fbebfe4d50efafda536b98f7664ac127 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Apr 6 13:03:45 2019 +0100

suricata: Enable hyperscan

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 916536c22dc0fef6040e45854cc156df8b29bf7e Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Apr 6 12:55:30 2019 +0100

hyperscan: New package

Hyperscan is a high-performance multiple regex matching library. It follows the regular expression syntax of the commonly-used libpcre library, but is a standalone library with its own C API.

Hyperscan uses hybrid automata techniques to allow simultaneous matching of large numbers (up to tens of thousands) of regular expressions and for the matching of regular expressions across streams of data.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 4f043571a8f1846dbbd089cf4de0a5b58dff027d Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Apr 6 12:54:28 2019 +0100

ragel: New package

Ragel compiles executable finite state machines from regular languages.

Ragel targets C, C++ and ASM. Ragel state machines can not only recognize byte sequences as regular expression machines do, but can also execute code at arbitrary points in the recognition of a regular language. Code embedding is done using inline operators that do not disrupt the regular language syntax.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

-----------------------------------------------------------------------

Summary of changes: hyperscan/hyperscan.nm | 59 ++++++++++++++++++++++++++++++++++++++++++++++++++ ragel/ragel.nm | 32 +++++++++++++++++++++++++++ suricata/suricata.nm | 4 +++- 3 files changed, 94 insertions(+), 1 deletion(-) create mode 100644 hyperscan/hyperscan.nm create mode 100644 ragel/ragel.nm

Difference in files: diff --git a/hyperscan/hyperscan.nm b/hyperscan/hyperscan.nm new file mode 100644 index 000000000..c781f73bd --- /dev/null +++ b/hyperscan/hyperscan.nm @@ -0,0 +1,59 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team info@ipfire.org # +############################################################################### + +name = hyperscan +version = 5.1.0 +release = 1 + +groups = System/Libraries +url = https://github.com/intel/hyperscan +license = BSD +summary = High-performance regular expression matching library + +description + Hyperscan is a high-performance multiple regex matching library. It + follows the regular expression syntax of the commonly-used libpcre + library, but is a standalone library with its own C API. + + Hyperscan uses hybrid automata techniques to allow simultaneous + matching of large numbers (up to tens of thousands) of regular + expressions and for the matching of regular expressions across + streams of data. +end + +source_dl = https://github.com/intel/hyperscan/archive/v%%7Bversion%7D.tar.gz#/ + +build + requires + boost-devel >= 1.57 + cmake + gcc-c++ + pcre-devel + ragel + sqlite-devel + end + + build + %{cmake} . \ + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_INSTALL_LIBDIR=%{lib} \ + -DBUILD_SHARED_LIBS:BOOL=ON \ + -DBUILD_STATIC_AND_SHARED:BOOL=OFF + + make %{PARALLELISMFLAGS} + end +end + +packages + package %{name} + + package %{name}-devel + template DEVEL + end + + package %{name}-debuginfo + template DEBUGINFO + end +end diff --git a/ragel/ragel.nm b/ragel/ragel.nm new file mode 100644 index 000000000..02138d877 --- /dev/null +++ b/ragel/ragel.nm @@ -0,0 +1,32 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team info@ipfire.org # +############################################################################### + +name = ragel +version = 6.10 +release = 1 + +groups = Development/Tools +url = http://www.complang.org/ragel/ +license = GPL +summary = Ragel State Machine Compiler + +description + Ragel compiles executable finite state machines from regular languages. + Ragel targets C, C++ and ASM. Ragel state machines can not only + recognize byte sequences as regular expression machines do, but can + also execute code at arbitrary points in the recognition of a regular + language. Code embedding is done using inline operators that do not + disrupt the regular language syntax. +end + +source_dl = https://www.colm.net/files/%%7Bname%7D/ + +packages + package %{name} + + package %{name}-debuginfo + template DEBUGINFO + end +end diff --git a/suricata/suricata.nm b/suricata/suricata.nm index a74a50cdc..2a560ec2e 100644 --- a/suricata/suricata.nm +++ b/suricata/suricata.nm @@ -5,7 +5,7 @@

name = suricata version = 4.0.6 -release = 1 +release = 2

groups = Networking/IDS url = http://www.openinfosecfoundation.org/ @@ -23,6 +23,7 @@ source_dl = http://www.openinfosecfoundation.org/download/ build requires file-devel + hyperscan-devel libcap-ng-devel libnfnetlink-devel libnetfilter_queue-devel @@ -40,6 +41,7 @@ build --enable-nfqueue \ --disable-gccmarch-native \ --disable-static \ + --enable-hyperscan \ --enable-non-bundled-htp \ --with-libhtp-includes=%{includedir}/htp \ --with-libhtp-libraries=%{libdir}

hooks/post-receive -- IPFire 3.x development tree