%global commit a4a80b7f3dba99ae43e3818f8060557523b47ad7
%global shortcommit %(c=%{commit}; echo ${c:0:7})

Name:           zeek-package-smbfp
Version:        0
Release:        0.20200503.git.%{?shortcommit}.1%{?dist}
Summary:        SMB Fingerprinting Zeek package

License:        BSD
URL:            https://github.com/micrictor/smbfp
Source0:        https://github.com/micrictor/smbfp/archive/%{commit}/smbfp-%{shortcommit}.tar.gz
BuildArch:      noarch

Requires:       zeek

%description
This package will generate a fingerprint based upon observed values from the
SMB negotation process, in a similar fashion to JA3 for TLS. This may be used
to generate alerts for known-bad fingerprints (blacklist), as well as identify
abnormal SMB clients (whitelist).

%prep
%autosetup -n smbfp-%{commit}

%build

%install
rm -rf $RPM_BUILD_ROOT

install -d -m 755 %{buildroot}/opt/zeek/share/zeek/packages
cp -r scripts/. %{buildroot}/opt/zeek/share/zeek/packages/smbfp

%files
%license LICENSE
%doc README.md
/opt/zeek/share/zeek/packages/smbfp/*.zeek
/opt/zeek/share/zeek/packages/smbfp/smbfp.intel

%changelog
* Tue May 05 2020 Mattias Ohlsson <mattias.ohlsson@inprose.com> - 0-0.20200503.git.a4a80b7.1
- Initial build