update to 0.9.9 .

tested by rui@
This commit is contained in:
aanriot 2007-05-26 01:14:33 +00:00
parent e1e371bbe6
commit 1d26d078ac
7 changed files with 43 additions and 43 deletions

View File

@ -1,8 +1,8 @@
# $OpenBSD: Makefile,v 1.10 2006/12/30 16:32:47 aanriot Exp $
# $OpenBSD: Makefile,v 1.11 2007/05/26 01:14:33 aanriot Exp $
COMMENT= "Prelude log analyzer"
DISTNAME= prelude-lml-0.9.8.1
DISTNAME= prelude-lml-0.9.9
WANTLIB= c pthread z gcrypt gpg-error gnutls
MODULES= devel/gettext

View File

@ -1,5 +1,5 @@
MD5 (prelude-lml-0.9.8.1.tar.gz) = kwRZPVjSqhJodgyTFQq42w==
RMD160 (prelude-lml-0.9.8.1.tar.gz) = NzDS+B18cwDbuHEugUteSeSLHkQ=
SHA1 (prelude-lml-0.9.8.1.tar.gz) = AX46G721K/bvyDARrICI8UwL5ao=
SHA256 (prelude-lml-0.9.8.1.tar.gz) = D5Augj3AuMqUSR1pqx+SWqU90iV0Kf8hYHLcPQ4BNA4=
SIZE (prelude-lml-0.9.8.1.tar.gz) = 554886
MD5 (prelude-lml-0.9.9.tar.gz) = nU9CQWda689fcEdYW2h1Yw==
RMD160 (prelude-lml-0.9.9.tar.gz) = kurFgyn3+tUAMEdCevP7hiAXlzc=
SHA1 (prelude-lml-0.9.9.tar.gz) = iV03ybLkaDUKP5luV+8HF72Nm8A=
SHA256 (prelude-lml-0.9.9.tar.gz) = BolGzHo6ySSBsxM/LCNOzeD+cZvYianOlEVEC9IdTWA=
SIZE (prelude-lml-0.9.9.tar.gz) = 637171

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
--- Makefile.in.orig Wed Dec 20 17:46:23 2006
+++ Makefile.in Mon Dec 25 19:50:07 2006
@@ -210,7 +210,7 @@ build_alias = @build_alias@
$OpenBSD: patch-Makefile_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
--- Makefile.in.orig Wed May 2 11:19:41 2007
+++ Makefile.in Thu May 17 13:16:32 2007
@@ -364,7 +364,7 @@ build_alias = @build_alias@
build_cpu = @build_cpu@
build_os = @build_os@
build_vendor = @build_vendor@
@ -10,7 +10,7 @@ $OpenBSD: patch-Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
datadir = @datadir@
datarootdir = @datarootdir@
defined = @defined@
@@ -700,7 +700,6 @@ uninstall-info: uninstall-info-recursive
@@ -854,7 +854,6 @@ uninstall-info: uninstall-info-recursive
install-data-local:

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-configure,v 1.4 2006/12/30 16:32:47 aanriot Exp $
--- configure.orig Wed Dec 20 17:46:16 2006
+++ configure Mon Dec 25 19:50:07 2006
@@ -31053,7 +31053,7 @@ _ACEOF
$OpenBSD: patch-configure,v 1.5 2007/05/26 01:14:33 aanriot Exp $
--- configure.orig Wed May 2 11:19:35 2007
+++ configure Thu May 17 13:16:33 2007
@@ -32322,7 +32322,7 @@ _ACEOF
configdir=$sysconfdir/prelude-lml
prelude_lml_conf=$configdir/prelude-lml.conf
regex_conf=$configdir/plugins.rules

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-plugins_pcre_ruleset_Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
--- plugins/pcre/ruleset/Makefile.in.orig Wed Dec 20 17:46:21 2006
+++ plugins/pcre/ruleset/Makefile.in Mon Dec 25 19:50:07 2006
@@ -204,7 +204,7 @@ build_alias = @build_alias@
$OpenBSD: patch-plugins_pcre_ruleset_Makefile_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
--- plugins/pcre/ruleset/Makefile.in.orig Wed May 2 11:19:40 2007
+++ plugins/pcre/ruleset/Makefile.in Thu May 17 13:16:34 2007
@@ -358,7 +358,7 @@ build_alias = @build_alias@
build_cpu = @build_cpu@
build_os = @build_os@
build_vendor = @build_vendor@

View File

@ -1,9 +1,9 @@
$OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
--- prelude-lml.conf.in.orig Fri Dec 15 10:48:35 2006
+++ prelude-lml.conf.in Mon Dec 25 20:17:04 2006
@@ -43,21 +43,43 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/def
# The same file entry / udp-server entry might be duplicated accross
# differents formats.
$OpenBSD: patch-prelude-lml_conf_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
--- prelude-lml.conf.in.orig Thu May 17 13:26:01 2007
+++ prelude-lml.conf.in Thu May 17 13:30:09 2007
@@ -49,11 +49,27 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/default/idmef-cli
#
# Example: file = /var/log/*/*.log
+[format=syslog]
+time-format = "%b %d %H:%M:%S"
@ -11,15 +11,16 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
+file = /var/log/authlog
+# udp-server = 0.0.0.0
[format=syslog]
time-format = "%b %d %H:%M:%S"
prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
+file = /var/log/daemon
+# udp-server = 0.0.0.0
+
+[format=syslog]
+time-format = "%b %d %H:%M:%S"
+prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
+file = /var/log/daemon
+# udp-server = 0.0.0.0
[format=syslog]
-time-format = "%b %d %H:%M:%S"
+time-format = "%b %d %H:%M:%S"
prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
+file = /var/log/maillog
+# udp-server = 0.0.0.0
+
@ -29,14 +30,9 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
file = /var/log/messages
# udp-server = 0.0.0.0
+[format=syslog]
+time-format = "%b %d %H:%M:%S"
+prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
+file = /var/log/secure
+# udp-server = 0.0.0.0
@@ -61,10 +77,10 @@ file = /var/log/messages
#
# Example configuration for metalog output:
# Sample configuration for metalog:
#
-[format=metalog]
-prefix-regex = "^(?P<timestamp>.{15}) \[(?P<process>\S+)\] "
@ -49,17 +45,17 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
# udp-server = 0.0.0.0
@@ -67,7 +89,12 @@ file = /var/log/everything/current
@@ -74,8 +90,12 @@ file = /var/log/everything/current
[format=apache]
time-format = "%d/%b/%Y:%H:%M:%S"
prefix-regex = "^(?P<hostname>\S+) - - \[(?P<timestamp>.{20}) \[+-].{4}\] "
-file = /var/log/apache2/access_log
+file = /var/www/logs/access_log
+
+[format=apache-error]
+time-format = "%a %b %d %H:%M:%S %Y"
+prefix-regex = "^\[(?P<timestamp>.{24})\]"
+file = /var/www/logs/error_log
#
# Specifies the maximum difference, in seconds, between

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.6 2006/12/30 16:32:47 aanriot Exp $
@comment $OpenBSD: PLIST,v 1.7 2007/05/26 01:14:33 aanriot Exp $
%%SHARED%%
bin/prelude-lml
include/prelude-lml/
@ -24,12 +24,16 @@ share/examples/prelude-lml/ruleset/arbor.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/arbor.rules
share/examples/prelude-lml/ruleset/arpwatch.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/arpwatch.rules
share/examples/prelude-lml/ruleset/bonding.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/bonding.rules
share/examples/prelude-lml/ruleset/cacti-thold.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cacti-thold.rules
share/examples/prelude-lml/ruleset/checkpoint.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/checkpoint.rules
share/examples/prelude-lml/ruleset/cisco-asa.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-asa.rules
share/examples/prelude-lml/ruleset/cisco-common.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-common.rules
share/examples/prelude-lml/ruleset/cisco-css.rules
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-css.rules
share/examples/prelude-lml/ruleset/cisco-ips.rules