Index: head/GIDs =================================================================== --- head/GIDs +++ head/GIDs @@ -722,7 +722,7 @@ bitcoin:*:779: zetacoin:*:780: monero:*:781: -# free: 782 +zeek:*:782 # free: 783 # free: 784 # free: 785 Index: head/UIDs =================================================================== --- head/UIDs +++ head/UIDs @@ -727,7 +727,7 @@ bitcoin:*:779:779::0:0:bitcoin Daemon:/var/db/bitcoin:/usr/sbin/nologin zetacoin:*:780:780::0:0:ZetaCoin Daemon:/nonexistent:/usr/sbin/nologin monero:*:781:781::0:0:Monero Daemon:/var/db/monero:/usr/sbin/nologin -# free: 782 +zeek:*:782:782::0:0:Zeek Network Security Monitor:/nonexistent:/usr/sbin/nologin # free: 783 # free: 784 # free: 785 Index: head/security/Makefile =================================================================== --- head/security/Makefile +++ head/security/Makefile @@ -1329,6 +1329,7 @@ SUBDIR += yubikey-personalization-gui SUBDIR += yubioath-desktop SUBDIR += zebedee + SUBDIR += zeek SUBDIR += zenmap SUBDIR += zeronet SUBDIR += zxid Index: head/security/zeek/Makefile =================================================================== --- head/security/zeek/Makefile +++ head/security/zeek/Makefile @@ -0,0 +1,122 @@ +# Created by: David O'Brien +# $FreeBSD$ + +PORTNAME= zeek +PORTVERSION= 3.0.0 +CATEGORIES= security +MASTER_SITES= https://www.zeek.org/downloads/ +DISTFILES= ${DISTNAME}${EXTRACT_SUFX} + +MAINTAINER= leres@FreeBSD.org +COMMENT= System for detecting network intruders in real-time + +LICENSE= BSD3CLAUSE + +BROKEN_powerpc64= Does not build: error: zero-size array 'names' + +USES= bison cmake compiler:c++11-lang gettext-runtime ninja perl5 python shebangfix ssl + +CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD} +CXXFLAGS+= -std=c++11 -Wall + +CONFLICTS= bro + +SHEBANG_FILES= aux/zeekctl/aux/trace-summary/trace-summary + +SUB_FILES= pkg-message +NO_MTREE= yes + +CMAKE_ARGS+= -GNinja \ + -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ + -D ZEEK_ROOT_DIR:PATH=${PREFIX} \ + -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \ + -D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \ + -D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ + -D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \ + -D ENABLE_PERFTOOLS:BOOL=false \ + -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ + -D BinPAC_SKIP_INSTALL:BOOL=true \ + -D INSTALL_AUX_TOOLS:BOOL=true \ + -D BUILD_SHARED_LIBS:BOOL=true \ + -D BUILD_STATIC_BROKER:BOOL=true \ + -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" + +ZEEKUSER?= zeek +ZEEKGROUP?= zeek +PLIST_SUB+= ARCH=${ARCH} \ + ZEEKUSER=${ZEEKUSER} \ + ZEEKGROUP=${ZEEKGROUP} \ + LCASE_OPSYS=${OPSYS:tl} + +USERS= ${ZEEKUSER} +GROUPS= ${ZEEKGROUP} + +OPTIONS_DEFINE= BROCCOLI BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF LBL_HF \ + NETMAP PERFTOOLS ZEEKCTL +OPTIONS_DEFAULT=BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP ZEEKCTL +OPTIONS_SUB= yes + +BROCCOLI_DESC= Build support for libbroccoli communications (DEPRECATED) +BROKER_DESC= Enable the Broker communication library +GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support +IPSUMDUMP_DESC= Enables traffic summaries +LBL_CF_DESC= Unix time to formated time/date filter support +LBL_HF_DESC= Address to hostname filter support +NETMAP_DESC= Native Netmap Packet IOSource for Bro +PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage +ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP) + +ZEEKCTL_IMPLIES= BROKER IPSUMDUMP + +BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli +GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb +IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump +IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump +BROKER_BUILD_DEPENDS= swig3.0:devel/swig30 +BROKER_CMAKE_BOOL= ENABLE_BROKER +DEBUG_CMAKE_BOOL= ENABLE_DEBUG +LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf +LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf +NETMAP_GH_TUPLE= bro:bro-netmap:f3620df:bro_netmap +NETMAP_USE= GITHUB=nodefault +PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS +PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/perftools-pprof:devel/google-perftools +PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 +ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \ + swig3.0:devel/swig30 +ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} +ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL + +.include + +.if ${PORT_OPTIONS:MZEEKCTL} +USE_RC_SUBR= zeek +.endif + +post-install-ZEEKCTL-on: + ${MKDIR} ${STAGEDIR}${PREFIX}/logs + ${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp + ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto + ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site +.for F in zeekctl.cfg networks.cfg node.cfg + ${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example +.endfor + ${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh + ${LN} -s ../../../spool/zeekctl-config.sh \ + ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh + +post-install: + ${RM} -r ${STAGEDIR}${PREFIX}/share/zeek/cmake + +pre-install-ZEEKCTL-on: + ${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d + +post-build-NETMAP-on: + ${LN} -s ../.build ${WRKSRC}/build + (cd ${WRKSRC_bro_netmap} && ./configure --bro-dist=${WRKSRC} \ + --install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins && \ + make && make install) + +.include Index: head/security/zeek/distinfo =================================================================== --- head/security/zeek/distinfo +++ head/security/zeek/distinfo @@ -0,0 +1,5 @@ +TIMESTAMP = 1573594504 +SHA256 (zeek-3.0.0.tar.gz) = b552940a14132bcbbd9afdf6476ec615b5a44a6d15f78b2cdc15860fa02bff9a +SIZE (zeek-3.0.0.tar.gz) = 29252635 +SHA256 (bro-bro-netmap-f3620df_GH0.tar.gz) = e51f420781c9a01b0494f93d82f94a1b045725c1cff406c33887974a9940c655 +SIZE (bro-bro-netmap-f3620df_GH0.tar.gz) = 24661 Index: head/security/zeek/files/pkg-message.in =================================================================== --- head/security/zeek/files/pkg-message.in +++ head/security/zeek/files/pkg-message.in @@ -0,0 +1,12 @@ +[ +{ type: install + message: <