81 lines
2.9 KiB
Ruby
81 lines
2.9 KiB
Ruby
class Zeek < Formula
|
|
desc "Network security monitor"
|
|
homepage "https://www.zeek.org"
|
|
url "https://github.com/zeek/zeek.git",
|
|
tag: "v4.1.1",
|
|
revision: "70e95dde8817f7d891cf63592b49b88fad21beb9"
|
|
license "BSD-3-Clause"
|
|
revision 1
|
|
head "https://github.com/zeek/zeek.git", branch: "master"
|
|
|
|
livecheck do
|
|
url :stable
|
|
regex(/^v?(\d+(?:\.\d+)+)$/i)
|
|
end
|
|
|
|
bottle do
|
|
sha256 arm64_monterey: "d02836b583b2b3934e2d8223d07a2717eea4c6938a9733770a6e22e92750b0c3"
|
|
sha256 arm64_big_sur: "1f2b6ade33c459c14955fb497c2be5219f54d61cb39ef011d2478cddfb06789d"
|
|
sha256 monterey: "e0b68111d16b627983b5a285adae19f7a8fae4d67c1ce9e773b0036fb1ca4aa7"
|
|
sha256 big_sur: "28b6d8e00ad14ff0b6536be06bc0a09ed3bae6c91740cca2cee47ab8171aa88d"
|
|
sha256 catalina: "45b8d2ac3710d29895d1b7c10a73da2f71bc4415d0aa0e8f960e3f55e5a76736"
|
|
sha256 mojave: "ec2c18a5f3a49bb4f0fc1e9c1d9ab7a0c301bfba78369c20a8677a8e79a4f684"
|
|
sha256 x86_64_linux: "951f61c803173ca8ddd3b178430ee92640226db8ecbf3aee2e6414ff62d2e019"
|
|
end
|
|
|
|
depends_on "bison" => :build
|
|
depends_on "cmake" => :build
|
|
depends_on "swig" => :build
|
|
depends_on "caf"
|
|
depends_on "geoip"
|
|
depends_on "libmaxminddb"
|
|
depends_on macos: :mojave
|
|
depends_on "openssl@1.1"
|
|
depends_on "python@3.10"
|
|
|
|
uses_from_macos "flex"
|
|
uses_from_macos "libpcap"
|
|
uses_from_macos "zlib"
|
|
|
|
on_linux do
|
|
depends_on "gcc" # For C++17
|
|
end
|
|
|
|
fails_with gcc: "5"
|
|
|
|
def install
|
|
# Remove SDK paths from zeek-config. This breaks usage with other SDKs.
|
|
# https://github.com/corelight/zeek-community-id/issues/15
|
|
inreplace "zeek-config.in" do |s|
|
|
s.gsub! "@ZEEK_CONFIG_PCAP_INCLUDE_DIR@", ""
|
|
s.gsub! "@ZEEK_CONFIG_ZLIB_INCLUDE_DIR@", ""
|
|
end
|
|
|
|
mkdir "build" do
|
|
system "cmake", "..", *std_cmake_args,
|
|
"-DBROKER_DISABLE_TESTS=on",
|
|
"-DBUILD_SHARED_LIBS=on",
|
|
"-DINSTALL_AUX_TOOLS=on",
|
|
"-DINSTALL_ZEEKCTL=on",
|
|
"-DUSE_GEOIP=on",
|
|
"-DCAF_ROOT=#{Formula["caf"].opt_prefix}",
|
|
"-DOPENSSL_ROOT_DIR=#{Formula["openssl@1.1"].opt_prefix}",
|
|
"-DZEEK_ETC_INSTALL_DIR=#{etc}",
|
|
"-DZEEK_LOCAL_STATE_DIR=#{var}"
|
|
system "make", "install"
|
|
end
|
|
end
|
|
|
|
test do
|
|
assert_match "version #{version}", shell_output("#{bin}/zeek --version")
|
|
assert_match "ARP packet analyzer", shell_output("#{bin}/zeek --print-plugins")
|
|
system bin/"zeek", "-C", "-r", test_fixtures("test.pcap")
|
|
assert_predicate testpath/"conn.log", :exist?
|
|
refute_predicate testpath/"conn.log", :empty?
|
|
assert_predicate testpath/"http.log", :exist?
|
|
refute_predicate testpath/"http.log", :empty?
|
|
# For bottling MacOS SDK paths must not be part of the public include directories, see zeek/zeek#1468.
|
|
refute_includes shell_output("#{bin}/zeek-config --include_dir").chomp, "MacOSX"
|
|
end
|
|
end
|