update to 0.9.9 .
tested by rui@
This commit is contained in:
parent
e1e371bbe6
commit
1d26d078ac
@ -1,8 +1,8 @@
|
||||
# $OpenBSD: Makefile,v 1.10 2006/12/30 16:32:47 aanriot Exp $
|
||||
# $OpenBSD: Makefile,v 1.11 2007/05/26 01:14:33 aanriot Exp $
|
||||
|
||||
COMMENT= "Prelude log analyzer"
|
||||
|
||||
DISTNAME= prelude-lml-0.9.8.1
|
||||
DISTNAME= prelude-lml-0.9.9
|
||||
|
||||
WANTLIB= c pthread z gcrypt gpg-error gnutls
|
||||
MODULES= devel/gettext
|
||||
|
@ -1,5 +1,5 @@
|
||||
MD5 (prelude-lml-0.9.8.1.tar.gz) = kwRZPVjSqhJodgyTFQq42w==
|
||||
RMD160 (prelude-lml-0.9.8.1.tar.gz) = NzDS+B18cwDbuHEugUteSeSLHkQ=
|
||||
SHA1 (prelude-lml-0.9.8.1.tar.gz) = AX46G721K/bvyDARrICI8UwL5ao=
|
||||
SHA256 (prelude-lml-0.9.8.1.tar.gz) = D5Augj3AuMqUSR1pqx+SWqU90iV0Kf8hYHLcPQ4BNA4=
|
||||
SIZE (prelude-lml-0.9.8.1.tar.gz) = 554886
|
||||
MD5 (prelude-lml-0.9.9.tar.gz) = nU9CQWda689fcEdYW2h1Yw==
|
||||
RMD160 (prelude-lml-0.9.9.tar.gz) = kurFgyn3+tUAMEdCevP7hiAXlzc=
|
||||
SHA1 (prelude-lml-0.9.9.tar.gz) = iV03ybLkaDUKP5luV+8HF72Nm8A=
|
||||
SHA256 (prelude-lml-0.9.9.tar.gz) = BolGzHo6ySSBsxM/LCNOzeD+cZvYianOlEVEC9IdTWA=
|
||||
SIZE (prelude-lml-0.9.9.tar.gz) = 637171
|
||||
|
@ -1,7 +1,7 @@
|
||||
$OpenBSD: patch-Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
--- Makefile.in.orig Wed Dec 20 17:46:23 2006
|
||||
+++ Makefile.in Mon Dec 25 19:50:07 2006
|
||||
@@ -210,7 +210,7 @@ build_alias = @build_alias@
|
||||
$OpenBSD: patch-Makefile_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
|
||||
--- Makefile.in.orig Wed May 2 11:19:41 2007
|
||||
+++ Makefile.in Thu May 17 13:16:32 2007
|
||||
@@ -364,7 +364,7 @@ build_alias = @build_alias@
|
||||
build_cpu = @build_cpu@
|
||||
build_os = @build_os@
|
||||
build_vendor = @build_vendor@
|
||||
@ -10,7 +10,7 @@ $OpenBSD: patch-Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
datadir = @datadir@
|
||||
datarootdir = @datarootdir@
|
||||
defined = @defined@
|
||||
@@ -700,7 +700,6 @@ uninstall-info: uninstall-info-recursive
|
||||
@@ -854,7 +854,6 @@ uninstall-info: uninstall-info-recursive
|
||||
|
||||
|
||||
install-data-local:
|
||||
|
@ -1,7 +1,7 @@
|
||||
$OpenBSD: patch-configure,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
--- configure.orig Wed Dec 20 17:46:16 2006
|
||||
+++ configure Mon Dec 25 19:50:07 2006
|
||||
@@ -31053,7 +31053,7 @@ _ACEOF
|
||||
$OpenBSD: patch-configure,v 1.5 2007/05/26 01:14:33 aanriot Exp $
|
||||
--- configure.orig Wed May 2 11:19:35 2007
|
||||
+++ configure Thu May 17 13:16:33 2007
|
||||
@@ -32322,7 +32322,7 @@ _ACEOF
|
||||
configdir=$sysconfdir/prelude-lml
|
||||
prelude_lml_conf=$configdir/prelude-lml.conf
|
||||
regex_conf=$configdir/plugins.rules
|
||||
|
@ -1,7 +1,7 @@
|
||||
$OpenBSD: patch-plugins_pcre_ruleset_Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
--- plugins/pcre/ruleset/Makefile.in.orig Wed Dec 20 17:46:21 2006
|
||||
+++ plugins/pcre/ruleset/Makefile.in Mon Dec 25 19:50:07 2006
|
||||
@@ -204,7 +204,7 @@ build_alias = @build_alias@
|
||||
$OpenBSD: patch-plugins_pcre_ruleset_Makefile_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
|
||||
--- plugins/pcre/ruleset/Makefile.in.orig Wed May 2 11:19:40 2007
|
||||
+++ plugins/pcre/ruleset/Makefile.in Thu May 17 13:16:34 2007
|
||||
@@ -358,7 +358,7 @@ build_alias = @build_alias@
|
||||
build_cpu = @build_cpu@
|
||||
build_os = @build_os@
|
||||
build_vendor = @build_vendor@
|
||||
|
@ -1,9 +1,9 @@
|
||||
$OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
--- prelude-lml.conf.in.orig Fri Dec 15 10:48:35 2006
|
||||
+++ prelude-lml.conf.in Mon Dec 25 20:17:04 2006
|
||||
@@ -43,21 +43,43 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/def
|
||||
# The same file entry / udp-server entry might be duplicated accross
|
||||
# differents formats.
|
||||
$OpenBSD: patch-prelude-lml_conf_in,v 1.5 2007/05/26 01:14:33 aanriot Exp $
|
||||
--- prelude-lml.conf.in.orig Thu May 17 13:26:01 2007
|
||||
+++ prelude-lml.conf.in Thu May 17 13:30:09 2007
|
||||
@@ -49,11 +49,27 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/default/idmef-cli
|
||||
#
|
||||
# Example: file = /var/log/*/*.log
|
||||
|
||||
+[format=syslog]
|
||||
+time-format = "%b %d %H:%M:%S"
|
||||
@ -11,15 +11,16 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
+file = /var/log/authlog
|
||||
+# udp-server = 0.0.0.0
|
||||
|
||||
[format=syslog]
|
||||
time-format = "%b %d %H:%M:%S"
|
||||
prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
|
||||
+file = /var/log/daemon
|
||||
+# udp-server = 0.0.0.0
|
||||
+
|
||||
+[format=syslog]
|
||||
+time-format = "%b %d %H:%M:%S"
|
||||
+prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
|
||||
+file = /var/log/daemon
|
||||
+# udp-server = 0.0.0.0
|
||||
|
||||
[format=syslog]
|
||||
-time-format = "%b %d %H:%M:%S"
|
||||
+time-format = "%b %d %H:%M:%S"
|
||||
prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
|
||||
+file = /var/log/maillog
|
||||
+# udp-server = 0.0.0.0
|
||||
+
|
||||
@ -29,14 +30,9 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
file = /var/log/messages
|
||||
# udp-server = 0.0.0.0
|
||||
|
||||
+[format=syslog]
|
||||
+time-format = "%b %d %H:%M:%S"
|
||||
+prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?"
|
||||
+file = /var/log/secure
|
||||
+# udp-server = 0.0.0.0
|
||||
|
||||
@@ -61,10 +77,10 @@ file = /var/log/messages
|
||||
#
|
||||
# Example configuration for metalog output:
|
||||
# Sample configuration for metalog:
|
||||
#
|
||||
-[format=metalog]
|
||||
-prefix-regex = "^(?P<timestamp>.{15}) \[(?P<process>\S+)\] "
|
||||
@ -49,17 +45,17 @@ $OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $
|
||||
# udp-server = 0.0.0.0
|
||||
|
||||
|
||||
@@ -67,7 +89,12 @@ file = /var/log/everything/current
|
||||
@@ -74,8 +90,12 @@ file = /var/log/everything/current
|
||||
[format=apache]
|
||||
time-format = "%d/%b/%Y:%H:%M:%S"
|
||||
prefix-regex = "^(?P<hostname>\S+) - - \[(?P<timestamp>.{20}) \[+-].{4}\] "
|
||||
-file = /var/log/apache2/access_log
|
||||
+file = /var/www/logs/access_log
|
||||
+
|
||||
|
||||
+[format=apache-error]
|
||||
+time-format = "%a %b %d %H:%M:%S %Y"
|
||||
+prefix-regex = "^\[(?P<timestamp>.{24})\]"
|
||||
+file = /var/www/logs/error_log
|
||||
|
||||
|
||||
#
|
||||
# Specifies the maximum difference, in seconds, between
|
||||
|
@ -1,4 +1,4 @@
|
||||
@comment $OpenBSD: PLIST,v 1.6 2006/12/30 16:32:47 aanriot Exp $
|
||||
@comment $OpenBSD: PLIST,v 1.7 2007/05/26 01:14:33 aanriot Exp $
|
||||
%%SHARED%%
|
||||
bin/prelude-lml
|
||||
include/prelude-lml/
|
||||
@ -24,12 +24,16 @@ share/examples/prelude-lml/ruleset/arbor.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/arbor.rules
|
||||
share/examples/prelude-lml/ruleset/arpwatch.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/arpwatch.rules
|
||||
share/examples/prelude-lml/ruleset/bonding.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/bonding.rules
|
||||
share/examples/prelude-lml/ruleset/cacti-thold.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cacti-thold.rules
|
||||
share/examples/prelude-lml/ruleset/checkpoint.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/checkpoint.rules
|
||||
share/examples/prelude-lml/ruleset/cisco-asa.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-asa.rules
|
||||
share/examples/prelude-lml/ruleset/cisco-common.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-common.rules
|
||||
share/examples/prelude-lml/ruleset/cisco-css.rules
|
||||
@sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-css.rules
|
||||
share/examples/prelude-lml/ruleset/cisco-ips.rules
|
||||
|
Loading…
x
Reference in New Issue
Block a user