| 1 | # -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- vim:fenc=utf-8:ft=tcl:et:sw=4:ts=4:sts=4 |
|---|
| 2 | # $Id$ |
|---|
| 3 | |
|---|
| 4 | PortSystem 1.0 |
|---|
| 5 | |
|---|
| 6 | name nfex |
|---|
| 7 | version 0.1 |
|---|
| 8 | categories security net |
|---|
| 9 | platforms darwin |
|---|
| 10 | maintainers yahoo.fr:jul_bsd openmaintainer |
|---|
| 11 | license GPL-2 |
|---|
| 12 | description Network File EXtractor |
|---|
| 13 | long_description ${description} |
|---|
| 14 | homepage https://code.google.com/p/nfex/ |
|---|
| 15 | |
|---|
| 16 | fetch.type svn |
|---|
| 17 | svn.url http://nfex.googlecode.com/svn/trunk/ |
|---|
| 18 | ## No tag or release |
|---|
| 19 | svn.revision r20 |
|---|
| 20 | worksrcdir trunk |
|---|
| 21 | |
|---|
| 22 | depends_lib port:libpcap port:libnet11 port:clamav |
|---|
| 23 | |
|---|
| 24 | destroot.dir ${worksrcpath}/src |
|---|
| 25 | |
|---|
| 26 | ## nfex_exe_pp, http://blogs.cisco.com/security/network-based-file-carving/ |
|---|
| 27 | ## FIXME! how to adjust arch |
|---|
| 28 | post-configure { |
|---|
| 29 | system -W ${worksrcpath}/nfex_exe_pp "env CFLAGS='-I${prefix}/include' LDFLAGS='-L${prefix}/lib/x86_64' ./configure --prefix=${prefix}" |
|---|
| 30 | } |
|---|
| 31 | |
|---|
| 32 | post-build { |
|---|
| 33 | system -W ${worksrcpath}/nfex_exe_pp "make" |
|---|
| 34 | } |
|---|
| 35 | |
|---|
| 36 | post-destroot { |
|---|
| 37 | system -W ${worksrcpath}/nfex_exe_pp "env DESTDIR=${destroot} make install" |
|---|
| 38 | } |
|---|
| 39 | |
|---|
| 40 | notes " |
|---|
| 41 | usage: |
|---|
| 42 | $ nfex -f file.pcap -c ${prefix}/etc/nfex.conf -v |
|---|
| 43 | Before using nfex_exe_pp, you will need to setup and update signatures for clamav. |
|---|
| 44 | Also, for some reasons libclamav is looking for virus database in a non-std directory. |
|---|
| 45 | $ sudo freshclam -v |
|---|
| 46 | $ sudo ln -s ${prefix}/var/lib/clamav ${prefix}/share/clamav |
|---|
| 47 | $ nfex_exe_pp <file_whatever> |
|---|
| 48 | |
|---|
| 49 | BUGS: |
|---|
| 50 | nfex - realtime network file extraction engine |
|---|
| 51 | loading configuration file... |
|---|
| 52 | 1 exe search code compiled (10000000 byte max) |
|---|
| 53 | Abort trap: 6 |
|---|
| 54 | " |
|---|
| 55 | |
|---|
| 56 | |
|---|
| 57 | livecheck.type none |
|---|
