753a93ccb3
Change log for v2.88: [IMP] Added support for search and replace privacy expressions. [IMP] Added support for masking external addresses with private address ranges. [IMP] When enabled, trigger a sink update on start-up. [IMP] Added flow hash cache. [IMP] Added HTTPS as a super-protocol of SSL. [IMP] Add ability to save DNS hint cache to non-volatile (persistent) memory. [IMP] Save sink responses when "json_save" is enabled. [IMP] Added dynamic sink URL cloud configuration. [IMP] Implemented per-detection-thread packet capture queue. [IMP] Added support for a loadable serial UUID. [IMP] Added configuration option to override sink connection timeout. [IMP] Idle flow TTLs tunable via configuration directives. [IMP] Added idle TCP flow multiplier to keep TCP flows in memory longer. [IMP] Added new flow metadata "first_update_at" timestamp. [IMP] Added complete reference sample configuration file. [IMP] Various optimizations and fixes for FreeBSD. [IMP] Employ advisory locking when writing output files. [FIX] Ensure all configuration files are preserved on upgrades. [FIX] Fixed automatic interface role detection for nethserver/shorewall. [FIX] Memory usage fixes using profiling tools. [UPD] Updated to nDPI v2.9.0-dev-709a87c. [OPT] Flush and compress upload queue as soon as possible. [OPT] Significantly reduced detection thread locking times. [DEV] Added example plugin submodule to repository. Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
101 lines
3.2 KiB
Makefile
101 lines
3.2 KiB
Makefile
#
|
|
# Copyright (C) 2016-2019 eGloo, Incorporated
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v2.
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=netifyd
|
|
PKG_RELEASE:=1
|
|
PKG_MAINTAINER:=Darryl Sokoloski <darryl@egloo.ca>
|
|
PKG_LICENSE:=GPL-3.0+
|
|
|
|
PKG_BUILD_PARALLEL:=1
|
|
PKG_FIXUP:=autoreconf
|
|
PKG_INSTALL:=1
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL:=https://gitlab.com/netify.ai/public/netify-agent.git
|
|
PKG_SOURCE_DATE:=2019-06-06
|
|
PKG_SOURCE_VERSION:=v2.88
|
|
#PKG_SOURCE_VERSION:=367ddd2fca4b2edd5e71145e2adea1b58f750214
|
|
PKG_MIRROR_HASH:=8ead41dc074a71626609bced1d584f8df87e39f5ad76dcca76021c1737150089
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/netifyd
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
TITLE:=Netify Agent
|
|
URL:=http://www.netify.ai/
|
|
DEPENDS:=+libcurl +libmnl +libnetfilter-conntrack +libjson-c +libpcap +zlib +libpthread
|
|
# Explicitly depend on libstdcpp rather than $(CXX_DEPENDS). At the moment
|
|
# std::unordered_map is only available via libstdcpp which is required for
|
|
# performance reasons.
|
|
DEPENDS+=+libstdcpp
|
|
endef
|
|
|
|
define Package/netifyd/description
|
|
The Netify Agent is a deep-packet inspection server which detects network
|
|
protocols and applications. These detections can be saved locally, served over
|
|
a UNIX or TCP socket, and/or "pushed" (via HTTP POSTs) to a remote third-party
|
|
server. Flow metadata, network statistics, and detection classifications are
|
|
JSON encoded for easy consumption by third-party applications.
|
|
endef
|
|
|
|
define Package/netifyd/conffiles
|
|
/etc/netifyd.conf
|
|
endef
|
|
|
|
TARGET_CFLAGS+=-ffunction-sections -fdata-sections
|
|
TARGET_CXXFLAGS+=-ffunction-sections -fdata-sections
|
|
TARGET_LDFLAGS+=-Wl,--gc-sections
|
|
|
|
CONFIGURE_ARGS+= \
|
|
--sharedstatedir=/var/run \
|
|
--enable-lean-and-mean \
|
|
--disable-ncurses \
|
|
--disable-libtcmalloc \
|
|
--without-systemdsystemunitdir \
|
|
--without-tmpfilesdir
|
|
|
|
# Disable configuration file-watch support (deprecated feature).
|
|
# Not to be confused with kernel/system-level inotify support.
|
|
CONFIGURE_ARGS+= \
|
|
--disable-inotify
|
|
|
|
ifneq ($(CONFIG_LIBCURL_ZLIB),y)
|
|
CONFIGURE_ARGS+= \
|
|
--without-libcurl-zlib
|
|
endif
|
|
|
|
define Build/Configure
|
|
(cd $(PKG_BUILD_DIR); ./autogen.sh)
|
|
$(call Build/Configure/Default,$(CONFIGURE_ARGS))
|
|
endef
|
|
|
|
define Build/InstallDev
|
|
$(INSTALL_DIR) $(1)/usr/include/netifyd
|
|
$(CP) $(PKG_INSTALL_DIR)/usr/include/netifyd/*.h $(1)/usr/include/netifyd
|
|
$(INSTALL_DIR) $(1)/usr/lib
|
|
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libnetifyd.{a,so*} $(1)/usr/lib/
|
|
$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
|
|
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libnetifyd.pc $(1)/usr/lib/pkgconfig/
|
|
endef
|
|
|
|
define Package/netifyd/install
|
|
$(INSTALL_DIR) $(1)/etc
|
|
$(INSTALL_DATA) $(PKG_BUILD_DIR)/deploy/netifyd.conf $(1)/etc
|
|
$(INSTALL_DIR) $(1)/etc/init.d
|
|
$(INSTALL_BIN) ./files/netifyd.init $(1)/etc/init.d/netifyd
|
|
$(INSTALL_DIR) $(1)/usr/sbin
|
|
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/netifyd $(1)/usr/sbin
|
|
$(INSTALL_DIR) $(1)/usr/lib
|
|
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libnetifyd.so.* $(1)/usr/lib/
|
|
$(INSTALL_DIR) $(1)/etc/netify.d
|
|
$(INSTALL_DATA) $(PKG_BUILD_DIR)/deploy/netify-sink.conf $(1)/etc/netify.d/netify-sink.conf
|
|
$(INSTALL_DIR) $(1)/usr/share/netifyd
|
|
$(INSTALL_DATA) $(PKG_BUILD_DIR)/deploy/functions.sh $(1)/usr/share/netifyd
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,netifyd))
|