aboutsummaryrefslogtreecommitdiffstats
path: root/packages/snort/snort.inc
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2006-09-26 00:17:23 +0000
committerScott Ullrich <sullrich@pfsense.org>2006-09-26 00:17:23 +0000
commit5f8323d0ce3a87606952ed1a480baa533728aca6 (patch)
tree08a5029ca1a0f025cb85efb5190b3987de1e9d47 /packages/snort/snort.inc
parent260af41a7f263961538cbc5e140b7db75f4f3c6d (diff)
downloadpfsense-packages-5f8323d0ce3a87606952ed1a480baa533728aca6.tar.gz
pfsense-packages-5f8323d0ce3a87606952ed1a480baa533728aca6.tar.bz2
pfsense-packages-5f8323d0ce3a87606952ed1a480baa533728aca6.zip
Allow user to specify the performance model for search-method
Diffstat (limited to 'packages/snort/snort.inc')
-rw-r--r--packages/snort/snort.inc30
1 files changed, 18 insertions, 12 deletions
diff --git a/packages/snort/snort.inc b/packages/snort/snort.inc
index ff2451fb..0ec73237 100644
--- a/packages/snort/snort.inc
+++ b/packages/snort/snort.inc
@@ -27,10 +27,10 @@
POSSIBILITY OF SUCH DAMAGE.
*/
-$snort_conf = "/usr/local/etc/snort/snort.conf";
+$snort_conf_file = "/usr/local/etc/snort/snort.conf";
function sync_package_snort() {
- global $config, $g, $snort_conf;
+ global $config, $g, $snort_conf_file;
exec("/bin/mkdir -p /usr/local/etc/snort");
exec("/bin/mkdir -p /var/log/snort");
exec("/bin/cp /usr/local/etc/snort/unicode.map-sample /usr/local/etc/snort/unicode.map");
@@ -57,7 +57,7 @@ function sync_package_snort() {
}
}
$start = "/bin/mkdir -p /var/log/snort";
- $start .= ";snort -c {$snort_conf} -l /var/log/snort " . $ifaces_final . " -D";
+ $start .= ";snort -c {$snort_conf_file} -l /var/log/snort " . $ifaces_final . " -D";
$start .= ";snort2c -s -w /var/db/whitelist -a /var/log/snort/alert";
write_rcfile(array(
"file" => "snort.sh",
@@ -74,24 +74,30 @@ function sync_package_snort() {
}
function create_snort_conf() {
- global $config, $g, $snort_conf;
+ global $config, $g, $snort_conf_file;
/* write out snort.conf */
- $snort_conf = generate_snort_conf();
- $conf = fopen($snort_conf, "w");
+ $snort_conf_text = generate_snort_conf();
+ $conf = fopen($snort_conf_file, "w");
if(!$conf) {
- log_error("Could not open {$snort_conf} for writing.");
+ log_error("Could not open {$snort_conf_file} for writing.");
exit;
}
- fwrite($conf, $snort_conf);
+ fwrite($conf, $snort_conf_text);
fclose($conf);
}
function generate_snort_conf() {
- global $config, $g, $snort_conf;
+ global $config, $g, $snort_conf_file;
/* obtain external interface */
/* XXX: make multi wan friendly */
$snort_ext_int = $config['installedpackages']['snort']['config'][0]['interface_array'][0];
+ /* set the snort performance model */
+ if($config['installedpackages']['snort']['config'][0]['performance'])
+ $snort_performance = $config['installedpackages']['snort']['config'][0]['performance'];
+ else
+ $snort_performance = "lowmem";
+
/* open snort2c's whitelist for writing */
$whitelist = fopen("/var/db/whitelist", "w");
if(!$whitelist) {
@@ -140,7 +146,7 @@ function generate_snort_conf() {
}
/* build snort configuration file */
- $snort_conf = <<<EOD
+ $snort_conf_text = <<<EOD
#snort configuration file
#generated by the pfSense
@@ -163,7 +169,7 @@ var SSH_PORTS {$ssh_port}
var RULE_PATH /usr/local/etc/snort/rules
#Use lower memory models
-config detection: search-method lowmem
+config detection: search-method {$snort_performance}
#Output plugins
#output database: alert
@@ -240,7 +246,7 @@ include reference.config
EOD;
- return $snort_conf;
+ return $snort_conf_text;
}
?> \ No newline at end of file