Index: head/security/bro/Makefile =================================================================== --- head/security/bro/Makefile (revision 400049) +++ head/security/bro/Makefile (revision 400050) @@ -1,155 +1,170 @@ # Created by: David O'Brien # $FreeBSD$ PORTNAME= bro -PORTVERSION= 2.3.2 +PORTVERSION= 2.4.1 CATEGORIES= security MASTER_SITES= http://www.bro.org/downloads/release/ MAINTAINER= leres@ee.lbl.gov COMMENT= System for detecting network intruders in real-time LICENSE= BSD3CLAUSE BUILD_DEPENDS= ${LOCALBASE}/bin/bison:${PORTSDIR}/devel/bison \ ${LOCALBASE}/bin/swig:${PORTSDIR}/devel/swig13 LIB_DEPENDS= libGeoIP.so:${PORTSDIR}/net/GeoIP -USES= cmake:outsource perl5 python +USES= cmake:outsource compiler:c++11-lang perl5 python CMAKE_ARGS+= -D PYTHON_EXECUTABLE:PATH=${PYTHON_CMD} +CXXFLAGS+= -std=c++11 -Wextra -Wall -pedantic SUB_FILES= pkg-message NO_MTREE= yes .if defined(BRO_PREFIX) PREFIX=${BRO_PREFIX} PLIST_SUB+= CLEANUP_PREFIX="" .else PLIST_SUB+= CLEANUP_PREFIX="@comment " .endif CMAKE_ARGS+= -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ -D BRO_ROOT_DIR:PATH=${PREFIX} \ -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \ -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \ -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ + -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \ -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ -D INSTALL_AUX_TOOLS:BOOL=true \ -D BUILD_SHARED_LIBS:BOOL=true BROUSER?= bro BROGROUP?= bro PLIST_SUB+= BROUSER=${BROUSER} \ BROGROUP=${BROGROUP} USERS= ${BROUSER} GROUPS= ${BROGROUP} USE_OPENSSL= yes -OPTIONS_DEFINE= BROCCOLI BROCTL DEBUG ELASTICSEARCH IPSUMDUMP LBL_CF LBL_HF PERFTOOLS PORTS_SSL +OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG IPSUMDUMP LBL_CF LBL_HF PERFTOOLS PORTS_SSL OPTIONS_DEFAULT=BROCCOLI BROCTL IPSUMDUMP LBL_CF LBL_HF PORTS_SSL BROCCOLI_DESC= Build support for libbroccoli communications BROCTL_DESC= Build BroControl support (requires BROCCOLI) +BROKER_DESC= Enable the Broker communication library DEBUG_DESC= Compile in debugging mode -ELASTICSEARCH_DESC= Build the ElasticSearch log writer (requires curl) IPSUMDUMP_DESC= Enables traffic summaries LBL_CF_DESC= Unix time to formated time/date filter support LBL_HF_DESC= Address to hostname filter support PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage PORTS_SSL_DESC= Build with OpenSSL from ports (instead of base system) OPTIONS_EXCLUDE=NLS DOCS .include # Bro 2.2 requires libmagic >= 5.04 # Cannot use LIB_DEPENDS since misc/compat5x also installs a libmagic.so.1 .if ${OSVERSION} < 901000 BUILD_DEPENDS+= ${LOCALBASE}/lib/libmagic.so:${PORTSDIR}/sysutils/file RUN_DEPENDS+= ${LOCALBASE}/lib/libmagic.so:${PORTSDIR}/sysutils/file .endif .include .if ${PORT_OPTIONS:MBROCCOLI} LIB_DEPENDS+= libbroccoli.so:${PORTSDIR}/security/broccoli .endif .if ${PORT_OPTIONS:MBROCTL} .if empty(PORT_OPTIONS:MBROCCOLI) IGNORE= the BROCTL option requires BROCCOLI .endif .if empty(PORT_OPTIONS:MIPSUMDUMP) IGNORE= the BROCTL option requires IPSUMDUMP .endif -BUILD_DEPENDS+= ${LOCALBASE}/bin/bash:${PORTSDIR}/shells/bash -RUN_DEPENDS+= ${LOCALBASE}/bin/bash:${PORTSDIR}/shells/bash +BUILD_DEPENDS+= ${LOCALBASE}/bin/bash:${PORTSDIR}/shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:${PORTSDIR}/databases/py-sqlite3 +RUN_DEPENDS+= ${LOCALBASE}/bin/bash:${PORTSDIR}/shells/bash \ + ${PYTHON_PKGNAMEPREFIX}sqlite3>0:${PORTSDIR}/databases/py-sqlite3 PLIST_SUB+= BROCTL="" USE_LDCONFIG= yes CMAKE_ARGS+= -D INSTALL_BROCTL:BOOL=true .else CMAKE_ARGS+= -D INSTALL_BROCTL:BOOL=false PLIST_SUB+= BROCTL="@comment " .endif -.if ${PORT_OPTIONS:MELASTICSEARCH} -CMAKE_ARGS+= -D DISABLE_ELASTICSEARCH:BOOL=false -LIB_DEPENDS+= libcurl.so:${PORTSDIR}/ftp/curl +.if ${PORT_OPTIONS:MBROKER} +CMAKE_ARGS+= -D ENABLE_BROKER:BOOL=true +BUILD_DEPENDS+= caf>=0.14.1:${PORTSDIR}/devel/caf +PLIST_SUB+= BROKER="" + +.if ${OSVERSION} < 1001000 +# Bro 2.4 with BROKER requires caf, clang and libc++ +BUILD_DEPENDS+= ${LOCALBASE}/bin/clang++34:${PORTSDIR}/lang/clang34 \ + ${LOCALBASE}/lib/c++/libstdc++.so:${PORTSDIR}/devel/libc++ + +CXXFLAGS+= -stdlib=libc++ -I${LOCALBASE}/include/c++/v1 -L${LOCALBASE}/lib +CXX= ${LOCALBASE}/bin/clang++34 +.endif .else -CMAKE_ARGS+= -D DISABLE_ELASTICSEARCH:BOOL=true +CMAKE_ARGS+= -D ENABLE_BROKER:BOOL=false +PLIST_SUB+= BROKER="@comment " .endif .if ${PORT_OPTIONS:MDEBUG} CMAKE_ARGS+= -D ENABLE_DEBUG:BOOL=true .else CMAKE_ARGS+= -D ENABLE_DEBUG:BOOL=false .endif .if ${PORT_OPTIONS:MLBL_HF} RUN_DEPENDS+= ${LOCALBASE}/bin/hf:${PORTSDIR}/sysutils/lbl-hf .endif .if ${PORT_OPTIONS:MLBL_CF} RUN_DEPENDS+= ${LOCALBASE}/bin/cf:${PORTSDIR}/sysutils/lbl-cf .endif .if ${PORT_OPTIONS:MPERFTOOLS} CMAKE_ARGS+= -D ENABLE_PERFTOOLS:BOOL=true RUN_DEPENDS+= ${LOCALBASE}/bin/pprof:${PORTSDIR}/devel/google-perftools .else CMAKE_ARGS+= -D ENABLE_PERFTOOLS:BOOL=false .endif .if ${PORT_OPTIONS:MPORTS_SSL} CMAKE_ARGS+= -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" BUILD_DEPENDS+= ${LOCALBASE}/lib/libcrypto.so:${PORTSDIR}/security/openssl RUN_DEPENDS+= ${LOCALBASE}/lib/libcrypto.so:${PORTSDIR}/security/openssl .else .if defined(WITH_OPENSSL_PORT) IGNORE= the SSL option is requred when WITH_OPENSSL_PORT is enabled .endif .endif .if ${PORT_OPTIONS:MIPSUMDUMP} BUILD_DEPENDS+= ipsumdump:${PORTSDIR}/net/ipsumdump RUN_DEPENDS+= ipsumdump:${PORTSDIR}/net/ipsumdump .endif .if ${PORT_OPTIONS:MBROCTL} post-install: @${MKDIR} ${STAGEDIR}${PREFIX}/logs .if ${PORT_OPTIONS:MBROCTL} @${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp .endif @${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto @${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site .for F in broctl.cfg networks.cfg node.cfg @${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example .endfor .endif .include Index: head/security/bro/distinfo =================================================================== --- head/security/bro/distinfo (revision 400049) +++ head/security/bro/distinfo (revision 400050) @@ -1,2 +1,2 @@ -SHA256 (bro-2.3.2.tar.gz) = 2fe5fbda0a86b5a594116d567fd9a4c2458d30f1c6670ba8e1fac0bc8848c69b -SIZE (bro-2.3.2.tar.gz) = 10290134 +SHA256 (bro-2.4.1.tar.gz) = d8b99673a5024630f6bae820c4f8c3ca9029f1167f9e5729c914c66e1fc7c8f6 +SIZE (bro-2.4.1.tar.gz) = 15010455 Index: head/security/bro/files/patch-aux-broker-CMakeLists.txt =================================================================== --- head/security/bro/files/patch-aux-broker-CMakeLists.txt (nonexistent) +++ head/security/bro/files/patch-aux-broker-CMakeLists.txt (revision 400050) @@ -0,0 +1,11 @@ +--- aux/broker/CMakeLists.txt.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/CMakeLists.txt +@@ -5,7 +5,7 @@ include(cmake/CommonCMakeConfig.cmake) + find_package(Libcaf COMPONENTS core io REQUIRED) + + # Check for required CAF version. +-set(CAF_VERSION_REQUIRED 0.13) ++set(CAF_VERSION_REQUIRED 0.14) + file(READ "${LIBCAF_INCLUDE_DIR_CORE}/caf/config.hpp" caf_config_hpp) + string(REGEX MATCH "#define CAF_VERSION [0-9]+" + caf_version_line "${caf_config_hpp}") Property changes on: head/security/bro/files/patch-aux-broker-CMakeLists.txt ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-README =================================================================== --- head/security/bro/files/patch-aux-broker-README (nonexistent) +++ head/security/bro/files/patch-aux-broker-README (revision 400050) @@ -0,0 +1,11 @@ +--- aux/broker/README.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/README +@@ -35,7 +35,7 @@ installed: + + A C++11 capable compiler (GCC 4.8+ or Clang 3.3+) + +- CAF (C++ Actor Framework) version 0.13+ ++ CAF (C++ Actor Framework) version 0.14+ + https://github.com/actor-framework/actor-framework + + CMake 2.8+ Property changes on: head/security/bro/files/patch-aux-broker-README ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-address_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-address_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-address_type_info.hh (revision 400050) @@ -0,0 +1,26 @@ +--- aux/broker/src/address_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/address_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_ADDRESS_TYPE_INFO_HH + + #include "broker/address.hh" +-#include ++#include + #include + #include + +@@ -11,12 +11,11 @@ namespace broker { + /** + * (de)serialization logic for type "address". + */ +-class address_type_info +- : public caf::detail::abstract_uniform_type_info
{ ++class address_type_info : public caf::abstract_uniform_type_info
{ + public : + + address_type_info() +- : caf::detail::abstract_uniform_type_info
("broker::address") ++ : caf::abstract_uniform_type_info
("broker::address") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override Property changes on: head/security/bro/files/patch-aux-broker-src-address_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-data_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-data_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-data_type_info.hh (revision 400050) @@ -0,0 +1,39 @@ +--- aux/broker/src/data_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/data_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_DATA_TYPE_INFO_HH + + #include "broker/data.hh" +-#include ++#include + #include + #include + +@@ -11,11 +11,11 @@ namespace broker { + /** + * (de)serialization logic for type "data". + */ +-class data_type_info : public caf::detail::abstract_uniform_type_info { ++class data_type_info : public caf::abstract_uniform_type_info { + public: + + data_type_info() +- : caf::detail::abstract_uniform_type_info("broker::data") ++ : caf::abstract_uniform_type_info("broker::data") + {} + + struct serializer { +@@ -58,11 +58,11 @@ public: + * (de)serialization logic for type "optional". + */ + class optional_data_type_info : +- public caf::detail::abstract_uniform_type_info> { ++ public caf::abstract_uniform_type_info> { + public: + + optional_data_type_info() +- : caf::detail::abstract_uniform_type_info>( ++ : caf::abstract_uniform_type_info>( + "broker::util::optional") + {} + Property changes on: head/security/bro/files/patch-aux-broker-src-data_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-endpoint_impl.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-endpoint_impl.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-endpoint_impl.hh (revision 400050) @@ -0,0 +1,71 @@ +--- aux/broker/src/endpoint_impl.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/endpoint_impl.hh +@@ -12,7 +12,7 @@ + #include + #include + #include +-#include ++#include + #include + #include + #include +@@ -62,8 +62,7 @@ static void ics_update(const caf::actor& + incoming_connection_status::tag t) + { caf::anon_send(q, incoming_connection_status{t, std::move(name)}); } + +-class endpoint_actor : public caf::sb_actor { +-friend class caf::sb_actor; ++class endpoint_actor : public caf::event_based_actor { + + public: + +@@ -351,6 +350,11 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return active; ++ } ++ + std::string get_peer_name(const caf::actor_addr& a) const + { + auto it = peers.find(a); +@@ -473,7 +477,6 @@ private: + }; + + caf::behavior active; +- caf::behavior& init_state = active; + + std::string name; + int behavior_flags; +@@ -490,8 +493,7 @@ private: + * Manages connection to a remote endpoint_actor including auto-reconnection + * and associated peer/unpeer messages. + */ +-class endpoint_proxy_actor : public caf::sb_actor { +-friend class caf::sb_actor; ++class endpoint_proxy_actor : public caf::event_based_actor { + + public: + +@@ -571,6 +573,11 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return bootstrap; ++ } ++ + std::string report_subtopic(const std::string& endpoint_name, + const std::string& addr, uint16_t port) const + { +@@ -615,7 +622,6 @@ private: + caf::behavior bootstrap; + caf::behavior disconnected; + caf::behavior connected; +- caf::behavior& init_state = bootstrap; + }; + + static inline caf::actor& handle_to_actor(void* h) Property changes on: head/security/bro/files/patch-aux-broker-src-endpoint_impl.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-peering_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-peering_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-peering_type_info.hh (revision 400050) @@ -0,0 +1,26 @@ +--- aux/broker/src/peering_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/peering_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_PEERING_TYPE_INFO_HH + + #include "peering_impl.hh" +-#include ++#include + #include + #include + +@@ -11,12 +11,11 @@ namespace broker { + /** + * (de)serialization logic for type "peering". + */ +-class peering_type_info +- : public caf::detail::abstract_uniform_type_info { ++class peering_type_info : public caf::abstract_uniform_type_info { + public: + + peering_type_info() +- : caf::detail::abstract_uniform_type_info("broker::peering") ++ : caf::abstract_uniform_type_info("broker::peering") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override Property changes on: head/security/bro/files/patch-aux-broker-src-peering_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-port_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-port_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-port_type_info.hh (revision 400050) @@ -0,0 +1,26 @@ +--- aux/broker/src/port_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/port_type_info.hh +@@ -3,7 +3,7 @@ + + #include "broker/port.hh" + #include +-#include ++#include + #include + #include + +@@ -12,12 +12,11 @@ namespace broker { + /** + * (de)serialization logic for type "port". + */ +-class port_type_info +- : public caf::detail::abstract_uniform_type_info { ++class port_type_info : public caf::abstract_uniform_type_info { + public : + + port_type_info() +- : caf::detail::abstract_uniform_type_info("broker::port") ++ : caf::abstract_uniform_type_info("broker::port") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override Property changes on: head/security/bro/files/patch-aux-broker-src-port_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-queue_impl.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-queue_impl.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-queue_impl.hh (revision 400050) @@ -0,0 +1,11 @@ +--- aux/broker/src/queue_impl.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/queue_impl.hh +@@ -18,7 +18,7 @@ public: + util::flare f; + fd = f.fd(); + actor = caf::spawn< +- broker::util::queue_actor()), T>, ++ broker::util::queue_actor, + caf::priority_aware>(std::move(f)); + self->planned_exit_reason(caf::exit_reason::user_defined); + actor->link_to(self); Property changes on: head/security/bro/files/patch-aux-broker-src-queue_impl.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-clone_impl.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-clone_impl.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-clone_impl.hh (revision 400050) @@ -0,0 +1,38 @@ +--- aux/broker/src/store/clone_impl.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/clone_impl.hh +@@ -10,13 +10,12 @@ + #include + #include + #include +-#include ++#include + #include + + namespace broker { namespace store { + +-class clone_actor : public caf::sb_actor { +-friend class caf::sb_actor; ++class clone_actor : public caf::event_based_actor { + + public: + +@@ -320,6 +319,11 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return bootstrap; ++ } ++ + void error(std::string master_name, std::string method_name, + std::string err_msg, bool fatal = false) + { +@@ -359,7 +363,6 @@ private: + caf::behavior synchronizing; + caf::behavior active; + caf::behavior dead; +- caf::behavior& init_state = bootstrap; + }; + + Property changes on: head/security/bro/files/patch-aux-broker-src-store-clone_impl.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-frontend.cc =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-frontend.cc (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-frontend.cc (revision 400050) @@ -0,0 +1,10 @@ +--- aux/broker/src/store/frontend.cc.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/frontend.cc +@@ -1,7 +1,6 @@ + #include "frontend_impl.hh" + #include "../atoms.hh" + #include +-#include + #include + + static inline caf::actor& handle_to_actor(void* h) Property changes on: head/security/bro/files/patch-aux-broker-src-store-frontend.cc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-frontend_impl.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-frontend_impl.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-frontend_impl.hh (revision 400050) @@ -0,0 +1,33 @@ +--- aux/broker/src/store/frontend_impl.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/frontend_impl.hh +@@ -3,13 +3,12 @@ + + #include "broker/store/frontend.hh" + #include +-#include ++#include + #include + + namespace broker { namespace store { + +-class requester : public caf::sb_actor { +-friend class caf::sb_actor; ++class requester : public caf::event_based_actor { + + public: + +@@ -46,9 +45,13 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return bootstrap; ++ } ++ + caf::behavior bootstrap; + caf::behavior awaiting_response; +- caf::behavior& init_state = bootstrap; + query request; + }; + Property changes on: head/security/bro/files/patch-aux-broker-src-store-frontend_impl.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-master_impl.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-master_impl.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-master_impl.hh (revision 400050) @@ -0,0 +1,41 @@ +--- aux/broker/src/store/master_impl.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/master_impl.hh +@@ -9,7 +9,7 @@ + #include + #include + #include +-#include ++#include + #include + #include + +@@ -18,8 +18,7 @@ namespace broker { namespace store { + static inline double now() + { return broker::time_point::now().value; } + +-class master_actor : public caf::sb_actor { +-friend class caf::sb_actor; ++class master_actor : public caf::event_based_actor { + + public: + +@@ -282,6 +281,11 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return init_existing_expiry_reminders; ++ } ++ + void expiry_reminder(const identifier& name, data key, + expiration_time expiry) + { +@@ -324,7 +328,6 @@ private: + std::unordered_map clones; + caf::behavior serving; + caf::behavior init_existing_expiry_reminders; +- caf::behavior& init_state = init_existing_expiry_reminders; + }; + + class master::impl { Property changes on: head/security/bro/files/patch-aux-broker-src-store-master_impl.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-result_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-result_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-result_type_info.hh (revision 400050) @@ -0,0 +1,25 @@ +--- aux/broker/src/store/result_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/result_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_STORE_RESULT_TYPE_INFO_HH + + #include "broker/store/result.hh" +-#include ++#include + #include + #include + +@@ -12,11 +12,11 @@ namespace broker { namespace store { + * (de)serialization logic for type "result". + */ + class result_type_info +- : public caf::detail::abstract_uniform_type_info { ++ : public caf::abstract_uniform_type_info { + public: + + result_type_info() +- : caf::detail::abstract_uniform_type_info( ++ : caf::abstract_uniform_type_info( + "broker::store::result") + {} + Property changes on: head/security/bro/files/patch-aux-broker-src-store-result_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-store-value_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-store-value_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-store-value_type_info.hh (revision 400050) @@ -0,0 +1,26 @@ +--- aux/broker/src/store/value_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/store/value_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_STORE_VALUE_TYPE_INFO_HH + + #include "broker/store/value.hh" +-#include ++#include + #include + #include + +@@ -12,12 +12,11 @@ namespace broker { namespace store { + * (de)serialization logic for type "value". + */ + class value_type_info +- : public caf::detail::abstract_uniform_type_info { ++ : public caf::abstract_uniform_type_info { + public: + + value_type_info() +- : caf::detail::abstract_uniform_type_info( +- "broker::store::value") ++ : caf::abstract_uniform_type_info("broker::store::value") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override Property changes on: head/security/bro/files/patch-aux-broker-src-store-value_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-subnet_type_info.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-subnet_type_info.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-subnet_type_info.hh (revision 400050) @@ -0,0 +1,25 @@ +--- aux/broker/src/subnet_type_info.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/subnet_type_info.hh +@@ -2,7 +2,7 @@ + #define BROKER_SUBNET_TYPE_INFO_HH + + #include "broker/subnet.hh" +-#include ++#include + #include + #include + +@@ -12,11 +12,11 @@ namespace broker { + * (de)serialization logic for type "subnet". + */ + class subnet_type_info +- : public caf::detail::abstract_uniform_type_info { ++ : public caf::abstract_uniform_type_info { + public : + + subnet_type_info() +- : caf::detail::abstract_uniform_type_info("broker::subnet") ++ : caf::abstract_uniform_type_info("broker::subnet") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override Property changes on: head/security/bro/files/patch-aux-broker-src-subnet_type_info.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-subscription.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-subscription.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-subscription.hh (revision 400050) @@ -0,0 +1,27 @@ +--- aux/broker/src/subscription.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/subscription.hh +@@ -5,7 +5,8 @@ + #include "broker/util/optional.hh" + #include "util/radix_tree.hh" + #include +-#include ++#include ++#include + #include + #include + #include +@@ -22,12 +23,11 @@ using topic_set = util::radix_tree + * (de)serialization logic for type "topic_set". + */ + class topic_set_type_info +- : public caf::detail::abstract_uniform_type_info { ++ : public caf::abstract_uniform_type_info { + public: + + topic_set_type_info() +- : caf::detail::abstract_uniform_type_info( +- "broker::topic_set") ++ : caf::abstract_uniform_type_info("broker::topic_set") + {} + + void serialize(const void* ptr, caf::serializer* sink) const override; Property changes on: head/security/bro/files/patch-aux-broker-src-subscription.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/files/patch-aux-broker-src-util-queue_actor.hh =================================================================== --- head/security/bro/files/patch-aux-broker-src-util-queue_actor.hh (nonexistent) +++ head/security/bro/files/patch-aux-broker-src-util-queue_actor.hh (revision 400050) @@ -0,0 +1,52 @@ +--- aux/broker/src/util/queue_actor.hh.orig 2015-09-06 19:43:53 UTC ++++ aux/broker/src/util/queue_actor.hh +@@ -3,7 +3,7 @@ + + #include "../atoms.hh" + #include "flare.hh" +-#include ++#include + #include + #include + +@@ -15,9 +15,8 @@ namespace util { + * a flare which signals when the queue is non-empty. This makes it simple + * to integrate in to traditional event loops. + */ +-template +-class queue_actor : public caf::sb_actor> { +-friend class caf::sb_actor>; ++template ++class queue_actor : public caf::event_based_actor { + + public: + +@@ -29,7 +28,7 @@ public: + { + [=](want_atom) + { return pop(); }, +- Pattern() >> [=](Message& msg) ++ [=](Message& msg) + { + q.push_back(std::move(msg)); + this->become(filled); +@@ -46,6 +45,11 @@ public: + + private: + ++ caf::behavior make_behavior() override ++ { ++ return empty; ++ } ++ + std::deque pop() + { + auto rval = std::move(q); +@@ -58,7 +62,6 @@ private: + flare ready_flare; + caf::behavior empty; + caf::behavior filled; +- caf::behavior& init_state = empty; + std::deque q; + }; + Property changes on: head/security/bro/files/patch-aux-broker-src-util-queue_actor.hh ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/bro/pkg-plist =================================================================== --- head/security/bro/pkg-plist (revision 400049) +++ head/security/bro/pkg-plist (revision 400050) @@ -1,558 +1,682 @@ -@exec chown %%BROUSER%%:%%BROGROUP%% %D/logs -%%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/share/broctl/scripts +%%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/logs %%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/spool %%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp %%BROCTL%%@exec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch bin/bro bin/bro-cut %%BROCTL%%bin/broctl %%BROCTL%%bin/capstats %%BROCTL%%bin/trace-summary %%BROCTL%%@unexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi %%BROCTL%%etc/broctl.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi %%BROCTL%%@unexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi %%BROCTL%%etc/networks.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi %%BROCTL%%@unexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi %%BROCTL%%etc/node.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi +%%BROKER%%include/broker/address.hh +%%BROKER%%include/broker/broker.h +%%BROKER%%include/broker/broker.hh +%%BROKER%%include/broker/data.hh +%%BROKER%%include/broker/endpoint.hh +%%BROKER%%include/broker/enum_value.hh +%%BROKER%%include/broker/incoming_connection_status.hh +%%BROKER%%include/broker/message.hh +%%BROKER%%include/broker/message_queue.hh +%%BROKER%%include/broker/outgoing_connection_status.hh +%%BROKER%%include/broker/peering.hh +%%BROKER%%include/broker/port.hh +%%BROKER%%include/broker/queue.hh +%%BROKER%%include/broker/report.hh +%%BROKER%%include/broker/store/backend.hh +%%BROKER%%include/broker/store/clone.hh +%%BROKER%%include/broker/store/expiration_time.hh +%%BROKER%%include/broker/store/frontend.hh +%%BROKER%%include/broker/store/identifier.hh +%%BROKER%%include/broker/store/master.hh +%%BROKER%%include/broker/store/memory_backend.hh +%%BROKER%%include/broker/store/query.hh +%%BROKER%%include/broker/store/response.hh +%%BROKER%%include/broker/store/result.hh +%%BROKER%%include/broker/store/rocksdb_backend.hh +%%BROKER%%include/broker/store/sequence_num.hh +%%BROKER%%include/broker/store/snapshot.hh +%%BROKER%%include/broker/store/sqlite_backend.hh +%%BROKER%%include/broker/store/value.hh +%%BROKER%%include/broker/subnet.hh +%%BROKER%%include/broker/time_duration.hh +%%BROKER%%include/broker/time_point.hh +%%BROKER%%include/broker/topic.hh +%%BROKER%%include/broker/util/hash.hh +%%BROKER%%include/broker/util/meta.hh +%%BROKER%%include/broker/util/none.hh +%%BROKER%%include/broker/util/operators.hh +%%BROKER%%include/broker/util/optional.hh +%%BROKER%%include/broker/util/variant.hh %%BROCTL%%lib/broctl/BroControl/__init__.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/__init__.pyc +%%BROCTL%%lib/broctl/BroControl/brocmd.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/brocmd.pyc +%%BROCTL%%lib/broctl/BroControl/broctl.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/broctl.pyc +%%BROCTL%%lib/broctl/BroControl/cmdresult.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc %%BROCTL%%lib/broctl/BroControl/config.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/config.pyc %%BROCTL%%lib/broctl/BroControl/control.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/control.pyc %%BROCTL%%lib/broctl/BroControl/cron.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/cron.pyc %%BROCTL%%lib/broctl/BroControl/doc.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/doc.pyc +%%BROCTL%%lib/broctl/BroControl/events.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/events.pyc %%BROCTL%%lib/broctl/BroControl/execute.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/execute.pyc %%BROCTL%%lib/broctl/BroControl/install.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/install.pyc %%BROCTL%%lib/broctl/BroControl/node.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/node.pyc %%BROCTL%%lib/broctl/BroControl/options.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/options.pyc %%BROCTL%%lib/broctl/BroControl/plugin.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/plugin.pyc %%BROCTL%%lib/broctl/BroControl/pluginreg.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc +%%BROCTL%%lib/broctl/BroControl/printdoc.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/printdoc.pyc +%%BROCTL%%lib/broctl/BroControl/py3bro.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/py3bro.pyc +%%BROCTL%%lib/broctl/BroControl/ssh_runner.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc +%%BROCTL%%lib/broctl/BroControl/state.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/state.pyc %%BROCTL%%lib/broctl/BroControl/util.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/util.pyc +%%BROCTL%%lib/broctl/BroControl/utilcurses.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc +%%BROCTL%%lib/broctl/BroControl/version.py +%%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/version.pyc %%BROCTL%%lib/broctl/SubnetTree.py %%BROCTL%%@unexec rm -f %D/lib/broctl/SubnetTree.pyc %%BROCTL%%lib/broctl/_SubnetTree.so %%BROCTL%%lib/broctl/plugins/TestPlugin.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc %%BROCTL%%lib/broctl/plugins/lb_myricom.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc %%BROCTL%%lib/broctl/plugins/lb_pf_ring.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc %%BROCTL%%lib/broctl/plugins/ps.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/ps.pyc +%%BROKER%%lib/libbroker.so +%%BROKER%%lib/libbroker.so.0 +%%BROKER%%lib/libbroker.so.0.4.0 +man/man1/bro-cut.1.gz +%%BROCTL%%man/man1/trace-summary.1.gz +man/man8/bro.8.gz +%%BROCTL%%man/man8/broctl.8.gz %%DATADIR%%/base/bif/__load__.bro %%DATADIR%%/base/bif/analyzer.bif.bro %%DATADIR%%/base/bif/bloom-filter.bif.bro %%DATADIR%%/base/bif/bro.bif.bro %%DATADIR%%/base/bif/broxygen.bif.bro %%DATADIR%%/base/bif/cardinality-counter.bif.bro +%%DATADIR%%/base/bif/comm.bif.bro %%DATADIR%%/base/bif/const.bif.bro +%%DATADIR%%/base/bif/data.bif.bro %%DATADIR%%/base/bif/event.bif.bro %%DATADIR%%/base/bif/file_analysis.bif.bro %%DATADIR%%/base/bif/input.bif.bro %%DATADIR%%/base/bif/logging.bif.bro +%%DATADIR%%/base/bif/messaging.bif.bro +%%DATADIR%%/base/bif/pcap.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AYIYA.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro -%%DATADIR%%/base/bif/plugins/Bro_NetFlow.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_PIA.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro +%%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ZIP.events.bif.bro %%DATADIR%%/base/bif/plugins/__load__.bro %%DATADIR%%/base/bif/reporter.bif.bro +%%DATADIR%%/base/bif/store.bif.bro %%DATADIR%%/base/bif/strings.bif.bro %%DATADIR%%/base/bif/top-k.bif.bro %%DATADIR%%/base/bif/types.bif.bro %%DATADIR%%/base/files/extract/__load__.bro %%DATADIR%%/base/files/extract/main.bro %%DATADIR%%/base/files/hash/__load__.bro %%DATADIR%%/base/files/hash/main.bro +%%DATADIR%%/base/files/pe/__load__.bro +%%DATADIR%%/base/files/pe/consts.bro +%%DATADIR%%/base/files/pe/main.bro %%DATADIR%%/base/files/unified2/__load__.bro %%DATADIR%%/base/files/unified2/main.bro %%DATADIR%%/base/files/x509/__load__.bro %%DATADIR%%/base/files/x509/main.bro %%DATADIR%%/base/frameworks/analyzer/__load__.bro %%DATADIR%%/base/frameworks/analyzer/main.bro +%%DATADIR%%/base/frameworks/broker/__load__.bro +%%DATADIR%%/base/frameworks/broker/main.bro %%DATADIR%%/base/frameworks/cluster/__load__.bro %%DATADIR%%/base/frameworks/cluster/main.bro %%DATADIR%%/base/frameworks/cluster/nodes/manager.bro %%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro %%DATADIR%%/base/frameworks/cluster/nodes/worker.bro %%DATADIR%%/base/frameworks/cluster/setup-connections.bro %%DATADIR%%/base/frameworks/communication/__load__.bro %%DATADIR%%/base/frameworks/communication/main.bro %%DATADIR%%/base/frameworks/control/__load__.bro %%DATADIR%%/base/frameworks/control/main.bro %%DATADIR%%/base/frameworks/dpd/__load__.bro %%DATADIR%%/base/frameworks/dpd/main.bro %%DATADIR%%/base/frameworks/files/__load__.bro %%DATADIR%%/base/frameworks/files/magic/__load__.bro +%%DATADIR%%/base/frameworks/files/magic/archive.sig +%%DATADIR%%/base/frameworks/files/magic/audio.sig +%%DATADIR%%/base/frameworks/files/magic/font.sig %%DATADIR%%/base/frameworks/files/magic/general.sig +%%DATADIR%%/base/frameworks/files/magic/image.sig %%DATADIR%%/base/frameworks/files/magic/libmagic.sig +%%DATADIR%%/base/frameworks/files/magic/msoffice.sig +%%DATADIR%%/base/frameworks/files/magic/video.sig %%DATADIR%%/base/frameworks/files/main.bro %%DATADIR%%/base/frameworks/input/__load__.bro %%DATADIR%%/base/frameworks/input/main.bro %%DATADIR%%/base/frameworks/input/readers/ascii.bro %%DATADIR%%/base/frameworks/input/readers/benchmark.bro %%DATADIR%%/base/frameworks/input/readers/binary.bro %%DATADIR%%/base/frameworks/input/readers/raw.bro %%DATADIR%%/base/frameworks/input/readers/sqlite.bro %%DATADIR%%/base/frameworks/intel/__load__.bro %%DATADIR%%/base/frameworks/intel/cluster.bro %%DATADIR%%/base/frameworks/intel/input.bro %%DATADIR%%/base/frameworks/intel/main.bro %%DATADIR%%/base/frameworks/logging/__load__.bro %%DATADIR%%/base/frameworks/logging/main.bro %%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro %%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro %%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro %%DATADIR%%/base/frameworks/logging/writers/ascii.bro -%%DATADIR%%/base/frameworks/logging/writers/dataseries.bro -%%DATADIR%%/base/frameworks/logging/writers/elasticsearch.bro %%DATADIR%%/base/frameworks/logging/writers/none.bro %%DATADIR%%/base/frameworks/logging/writers/sqlite.bro %%DATADIR%%/base/frameworks/notice/__load__.bro %%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro %%DATADIR%%/base/frameworks/notice/actions/drop.bro %%DATADIR%%/base/frameworks/notice/actions/email_admin.bro %%DATADIR%%/base/frameworks/notice/actions/page.bro %%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro %%DATADIR%%/base/frameworks/notice/cluster.bro %%DATADIR%%/base/frameworks/notice/extend-email/hostnames.bro %%DATADIR%%/base/frameworks/notice/main.bro %%DATADIR%%/base/frameworks/notice/non-cluster.bro %%DATADIR%%/base/frameworks/notice/weird.bro %%DATADIR%%/base/frameworks/packet-filter/__load__.bro %%DATADIR%%/base/frameworks/packet-filter/cluster.bro %%DATADIR%%/base/frameworks/packet-filter/main.bro %%DATADIR%%/base/frameworks/packet-filter/netstats.bro %%DATADIR%%/base/frameworks/packet-filter/utils.bro %%DATADIR%%/base/frameworks/reporter/__load__.bro %%DATADIR%%/base/frameworks/reporter/main.bro %%DATADIR%%/base/frameworks/signatures/__load__.bro %%DATADIR%%/base/frameworks/signatures/main.bro %%DATADIR%%/base/frameworks/software/__load__.bro %%DATADIR%%/base/frameworks/software/main.bro %%DATADIR%%/base/frameworks/sumstats/__load__.bro %%DATADIR%%/base/frameworks/sumstats/cluster.bro %%DATADIR%%/base/frameworks/sumstats/main.bro %%DATADIR%%/base/frameworks/sumstats/non-cluster.bro %%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro %%DATADIR%%/base/frameworks/sumstats/plugins/average.bro %%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/last.bro %%DATADIR%%/base/frameworks/sumstats/plugins/max.bro %%DATADIR%%/base/frameworks/sumstats/plugins/min.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro %%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro %%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro %%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro %%DATADIR%%/base/frameworks/tunnels/__load__.bro %%DATADIR%%/base/frameworks/tunnels/main.bro %%DATADIR%%/base/init-bare.bro %%DATADIR%%/base/init-default.bro %%DATADIR%%/base/misc/find-checksum-offloading.bro %%DATADIR%%/base/misc/find-filtered-trace.bro %%DATADIR%%/base/misc/p0f.fp %%DATADIR%%/base/protocols/conn/__load__.bro %%DATADIR%%/base/protocols/conn/contents.bro %%DATADIR%%/base/protocols/conn/inactivity.bro %%DATADIR%%/base/protocols/conn/main.bro %%DATADIR%%/base/protocols/conn/polling.bro +%%DATADIR%%/base/protocols/conn/thresholds.bro %%DATADIR%%/base/protocols/dhcp/__load__.bro %%DATADIR%%/base/protocols/dhcp/consts.bro %%DATADIR%%/base/protocols/dhcp/dpd.sig %%DATADIR%%/base/protocols/dhcp/main.bro %%DATADIR%%/base/protocols/dhcp/utils.bro %%DATADIR%%/base/protocols/dnp3/__load__.bro %%DATADIR%%/base/protocols/dnp3/consts.bro %%DATADIR%%/base/protocols/dnp3/dpd.sig %%DATADIR%%/base/protocols/dnp3/main.bro %%DATADIR%%/base/protocols/dns/__load__.bro %%DATADIR%%/base/protocols/dns/consts.bro %%DATADIR%%/base/protocols/dns/main.bro %%DATADIR%%/base/protocols/ftp/__load__.bro %%DATADIR%%/base/protocols/ftp/dpd.sig %%DATADIR%%/base/protocols/ftp/files.bro %%DATADIR%%/base/protocols/ftp/gridftp.bro %%DATADIR%%/base/protocols/ftp/info.bro %%DATADIR%%/base/protocols/ftp/main.bro %%DATADIR%%/base/protocols/ftp/utils-commands.bro %%DATADIR%%/base/protocols/ftp/utils.bro %%DATADIR%%/base/protocols/http/__load__.bro %%DATADIR%%/base/protocols/http/dpd.sig %%DATADIR%%/base/protocols/http/entities.bro %%DATADIR%%/base/protocols/http/files.bro %%DATADIR%%/base/protocols/http/main.bro %%DATADIR%%/base/protocols/http/utils.bro %%DATADIR%%/base/protocols/irc/__load__.bro %%DATADIR%%/base/protocols/irc/dcc-send.bro %%DATADIR%%/base/protocols/irc/dpd.sig %%DATADIR%%/base/protocols/irc/files.bro %%DATADIR%%/base/protocols/irc/main.bro +%%DATADIR%%/base/protocols/krb/__load__.bro +%%DATADIR%%/base/protocols/krb/consts.bro +%%DATADIR%%/base/protocols/krb/dpd.sig +%%DATADIR%%/base/protocols/krb/files.bro +%%DATADIR%%/base/protocols/krb/main.bro %%DATADIR%%/base/protocols/modbus/__load__.bro %%DATADIR%%/base/protocols/modbus/consts.bro %%DATADIR%%/base/protocols/modbus/main.bro +%%DATADIR%%/base/protocols/mysql/__load__.bro +%%DATADIR%%/base/protocols/mysql/consts.bro +%%DATADIR%%/base/protocols/mysql/main.bro %%DATADIR%%/base/protocols/pop3/__load__.bro %%DATADIR%%/base/protocols/pop3/dpd.sig %%DATADIR%%/base/protocols/radius/__load__.bro %%DATADIR%%/base/protocols/radius/consts.bro %%DATADIR%%/base/protocols/radius/main.bro +%%DATADIR%%/base/protocols/rdp/__load__.bro +%%DATADIR%%/base/protocols/rdp/consts.bro +%%DATADIR%%/base/protocols/rdp/dpd.sig +%%DATADIR%%/base/protocols/rdp/main.bro +%%DATADIR%%/base/protocols/sip/__load__.bro +%%DATADIR%%/base/protocols/sip/dpd.sig +%%DATADIR%%/base/protocols/sip/main.bro %%DATADIR%%/base/protocols/smtp/__load__.bro %%DATADIR%%/base/protocols/smtp/dpd.sig %%DATADIR%%/base/protocols/smtp/entities.bro %%DATADIR%%/base/protocols/smtp/files.bro %%DATADIR%%/base/protocols/smtp/main.bro %%DATADIR%%/base/protocols/snmp/__load__.bro %%DATADIR%%/base/protocols/snmp/main.bro %%DATADIR%%/base/protocols/socks/__load__.bro %%DATADIR%%/base/protocols/socks/consts.bro %%DATADIR%%/base/protocols/socks/dpd.sig %%DATADIR%%/base/protocols/socks/main.bro %%DATADIR%%/base/protocols/ssh/__load__.bro %%DATADIR%%/base/protocols/ssh/dpd.sig %%DATADIR%%/base/protocols/ssh/main.bro %%DATADIR%%/base/protocols/ssl/__load__.bro %%DATADIR%%/base/protocols/ssl/consts.bro %%DATADIR%%/base/protocols/ssl/dpd.sig %%DATADIR%%/base/protocols/ssl/files.bro %%DATADIR%%/base/protocols/ssl/main.bro %%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro %%DATADIR%%/base/protocols/syslog/__load__.bro %%DATADIR%%/base/protocols/syslog/consts.bro %%DATADIR%%/base/protocols/syslog/main.bro %%DATADIR%%/base/protocols/tunnels/__load__.bro %%DATADIR%%/base/protocols/tunnels/dpd.sig %%DATADIR%%/base/utils/active-http.bro %%DATADIR%%/base/utils/addrs.bro %%DATADIR%%/base/utils/conn-ids.bro %%DATADIR%%/base/utils/dir.bro %%DATADIR%%/base/utils/directions-and-hosts.bro %%DATADIR%%/base/utils/exec.bro %%DATADIR%%/base/utils/files.bro %%DATADIR%%/base/utils/numbers.bro %%DATADIR%%/base/utils/paths.bro %%DATADIR%%/base/utils/patterns.bro %%DATADIR%%/base/utils/queue.bro %%DATADIR%%/base/utils/site.bro %%DATADIR%%/base/utils/strings.bro %%DATADIR%%/base/utils/thresholds.bro %%DATADIR%%/base/utils/time.bro %%DATADIR%%/base/utils/urls.bro %%BROCTL%%%%DATADIR%%/broctl/__load__.bro %%BROCTL%%%%DATADIR%%/broctl/auto.bro %%BROCTL%%%%DATADIR%%/broctl/check.bro %%BROCTL%%%%DATADIR%%/broctl/main.bro %%BROCTL%%%%DATADIR%%/broctl/process-trace.bro %%BROCTL%%%%DATADIR%%/broctl/standalone.bro %%DATADIR%%/broxygen/__load__.bro %%DATADIR%%/broxygen/example.bro %%DATADIR%%/policy/frameworks/communication/listen.bro %%DATADIR%%/policy/frameworks/control/controllee.bro %%DATADIR%%/policy/frameworks/control/controller.bro %%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro %%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro %%DATADIR%%/policy/frameworks/files/detect-MHR.bro +%%DATADIR%%/policy/frameworks/files/extract-all-files.bro %%DATADIR%%/policy/frameworks/files/hash-all-files.bro %%DATADIR%%/policy/frameworks/intel/do_notice.bro %%DATADIR%%/policy/frameworks/intel/seen/__load__.bro %%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro %%DATADIR%%/policy/frameworks/intel/seen/dns.bro %%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/file-names.bro %%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro %%DATADIR%%/policy/frameworks/intel/seen/http-url.bro +%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp.bro %%DATADIR%%/policy/frameworks/intel/seen/ssl.bro %%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro %%DATADIR%%/policy/frameworks/intel/seen/x509.bro %%DATADIR%%/policy/frameworks/packet-filter/shunt.bro %%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig %%DATADIR%%/policy/frameworks/software/version-changes.bro %%DATADIR%%/policy/frameworks/software/vulnerable.bro +%%DATADIR%%/policy/frameworks/software/windows-version-detection.bro %%DATADIR%%/policy/integration/barnyard2/__load__.bro %%DATADIR%%/policy/integration/barnyard2/main.bro %%DATADIR%%/policy/integration/barnyard2/types.bro %%DATADIR%%/policy/integration/collective-intel/__load__.bro %%DATADIR%%/policy/integration/collective-intel/main.bro %%DATADIR%%/policy/misc/app-stats/__load__.bro %%DATADIR%%/policy/misc/app-stats/main.bro %%DATADIR%%/policy/misc/app-stats/plugins/__load__.bro %%DATADIR%%/policy/misc/app-stats/plugins/facebook.bro %%DATADIR%%/policy/misc/app-stats/plugins/gmail.bro %%DATADIR%%/policy/misc/app-stats/plugins/google.bro %%DATADIR%%/policy/misc/app-stats/plugins/netflix.bro %%DATADIR%%/policy/misc/app-stats/plugins/pandora.bro %%DATADIR%%/policy/misc/app-stats/plugins/youtube.bro %%DATADIR%%/policy/misc/capture-loss.bro %%DATADIR%%/policy/misc/detect-traceroute/__load__.bro %%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig %%DATADIR%%/policy/misc/detect-traceroute/main.bro %%DATADIR%%/policy/misc/dump-events.bro %%DATADIR%%/policy/misc/known-devices.bro %%DATADIR%%/policy/misc/load-balancing.bro %%DATADIR%%/policy/misc/loaded-scripts.bro %%DATADIR%%/policy/misc/profiling.bro %%DATADIR%%/policy/misc/scan.bro %%DATADIR%%/policy/misc/stats.bro %%DATADIR%%/policy/misc/trim-trace-file.bro %%DATADIR%%/policy/protocols/conn/known-hosts.bro %%DATADIR%%/policy/protocols/conn/known-services.bro %%DATADIR%%/policy/protocols/conn/weirds.bro %%DATADIR%%/policy/protocols/dhcp/known-devices-and-hostnames.bro %%DATADIR%%/policy/protocols/dns/auth-addl.bro %%DATADIR%%/policy/protocols/dns/detect-external-names.bro %%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ftp/detect.bro %%DATADIR%%/policy/protocols/ftp/software.bro %%DATADIR%%/policy/protocols/http/detect-sqli.bro %%DATADIR%%/policy/protocols/http/detect-webapps.bro %%DATADIR%%/policy/protocols/http/detect-webapps.sig %%DATADIR%%/policy/protocols/http/header-names.bro %%DATADIR%%/policy/protocols/http/software-browser-plugins.bro %%DATADIR%%/policy/protocols/http/software.bro %%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro %%DATADIR%%/policy/protocols/http/var-extraction-uri.bro %%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro %%DATADIR%%/policy/protocols/modbus/track-memmap.bro +%%DATADIR%%/policy/protocols/mysql/software.bro +%%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro %%DATADIR%%/policy/protocols/smtp/blocklists.bro %%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro %%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro %%DATADIR%%/policy/protocols/smtp/software.bro %%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ssh/geo-data.bro %%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro %%DATADIR%%/policy/protocols/ssh/software.bro %%DATADIR%%/policy/protocols/ssl/expiring-certs.bro %%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro %%DATADIR%%/policy/protocols/ssl/heartbleed.bro %%DATADIR%%/policy/protocols/ssl/known-certs.bro %%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro %%DATADIR%%/policy/protocols/ssl/notary.bro %%DATADIR%%/policy/protocols/ssl/validate-certs.bro %%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro %%DATADIR%%/policy/protocols/ssl/weak-keys.bro %%DATADIR%%/policy/tuning/__load__.bro %%DATADIR%%/policy/tuning/defaults/__load__.bro %%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro %%DATADIR%%/policy/tuning/defaults/packet-fragments.bro %%DATADIR%%/policy/tuning/defaults/warnings.bro %%DATADIR%%/policy/tuning/json-logs.bro -%%DATADIR%%/policy/tuning/logs-to-elasticsearch.bro %%DATADIR%%/policy/tuning/track-all-assets.bro %%DATADIR%%/site/local-manager.bro %%DATADIR%%/site/local-proxy.bro %%DATADIR%%/site/local-worker.bro %%DATADIR%%/site/local.bro %%BROCTL%%%%DATADIR%%ctl/scripts/archive-log %%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh %%BROCTL%%%%DATADIR%%ctl/scripts/cflow-stats %%BROCTL%%%%DATADIR%%ctl/scripts/check-config %%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag -%%BROCTL%%%%DATADIR%%ctl/scripts/create-link-for-log %%BROCTL%%%%DATADIR%%ctl/scripts/delete-log %%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/cat-file %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/exists -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/gdb-attach +%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/get-childs -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/is-dir -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/rmdir -%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/run-cmd %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top -%%BROCTL%%%%DATADIR%%ctl/scripts/local-interfaces %%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name %%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate %%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections -%%BROCTL%%%%DATADIR%%ctl/scripts/remove-link-for-log %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace %%BROCTL%%%%DATADIR%%ctl/scripts/send-mail %%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path %%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv %%BROCTL%%%%DATADIR%%ctl/scripts/update %%BROCTL%%@unexec rm -f %D/logs/current %%BROCTL%%@unexec rm -f %D/spool/broctl-config.sh %%BROCTL%%@unexec rm -f %D/spool/broctl.dat %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro +%%BROCTL%%@unexec rm -f %D/spool/state.db %%BROCTL%%@dir spool/tmp %%BROCTL%%@dir spool/installed-scripts-do-not-touch/site %%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto %%BROCTL%%@dir spool/installed-scripts-do-not-touch %%BROCTL%%@dir spool %%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors %%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers %%BROCTL%%@dir %%DATADIR%%ctl/scripts %%BROCTL%%@dir %%DATADIR%%ctl @dir %%DATADIR%%/site @dir %%DATADIR%%/policy/tuning/defaults @dir %%DATADIR%%/policy/tuning @dir %%DATADIR%%/policy/protocols/ssl @dir %%DATADIR%%/policy/protocols/ssh @dir %%DATADIR%%/policy/protocols/smtp +@dir %%DATADIR%%/policy/protocols/rdp +@dir %%DATADIR%%/policy/protocols/mysql @dir %%DATADIR%%/policy/protocols/modbus @dir %%DATADIR%%/policy/protocols/http @dir %%DATADIR%%/policy/protocols/ftp @dir %%DATADIR%%/policy/protocols/dns @dir %%DATADIR%%/policy/protocols/dhcp @dir %%DATADIR%%/policy/protocols/conn @dir %%DATADIR%%/policy/protocols @dir %%DATADIR%%/policy/misc/detect-traceroute @dir %%DATADIR%%/policy/misc/app-stats/plugins @dir %%DATADIR%%/policy/misc/app-stats @dir %%DATADIR%%/policy/misc @dir %%DATADIR%%/policy/integration/collective-intel @dir %%DATADIR%%/policy/integration/barnyard2 @dir %%DATADIR%%/policy/integration @dir %%DATADIR%%/policy/frameworks/software @dir %%DATADIR%%/policy/frameworks/signatures @dir %%DATADIR%%/policy/frameworks/packet-filter @dir %%DATADIR%%/policy/frameworks/intel/seen @dir %%DATADIR%%/policy/frameworks/intel @dir %%DATADIR%%/policy/frameworks/files @dir %%DATADIR%%/policy/frameworks/dpd @dir %%DATADIR%%/policy/frameworks/control @dir %%DATADIR%%/policy/frameworks/communication @dir %%DATADIR%%/policy/frameworks @dir %%DATADIR%%/policy @dir %%DATADIR%%/broxygen %%BROCTL%%@dir %%DATADIR%%/broctl @dir %%DATADIR%%/base/utils @dir %%DATADIR%%/base/protocols/tunnels @dir %%DATADIR%%/base/protocols/syslog @dir %%DATADIR%%/base/protocols/ssl @dir %%DATADIR%%/base/protocols/ssh @dir %%DATADIR%%/base/protocols/socks @dir %%DATADIR%%/base/protocols/snmp @dir %%DATADIR%%/base/protocols/smtp +@dir %%DATADIR%%/base/protocols/sip +@dir %%DATADIR%%/base/protocols/rdp @dir %%DATADIR%%/base/protocols/radius @dir %%DATADIR%%/base/protocols/pop3 +@dir %%DATADIR%%/base/protocols/mysql @dir %%DATADIR%%/base/protocols/modbus +@dir %%DATADIR%%/base/protocols/krb @dir %%DATADIR%%/base/protocols/irc @dir %%DATADIR%%/base/protocols/http @dir %%DATADIR%%/base/protocols/ftp @dir %%DATADIR%%/base/protocols/dns @dir %%DATADIR%%/base/protocols/dnp3 @dir %%DATADIR%%/base/protocols/dhcp @dir %%DATADIR%%/base/protocols/conn @dir %%DATADIR%%/base/protocols @dir %%DATADIR%%/base/misc @dir %%DATADIR%%/base/frameworks/tunnels @dir %%DATADIR%%/base/frameworks/sumstats/plugins @dir %%DATADIR%%/base/frameworks/sumstats @dir %%DATADIR%%/base/frameworks/software @dir %%DATADIR%%/base/frameworks/signatures @dir %%DATADIR%%/base/frameworks/reporter @dir %%DATADIR%%/base/frameworks/packet-filter @dir %%DATADIR%%/base/frameworks/notice/extend-email @dir %%DATADIR%%/base/frameworks/notice/actions @dir %%DATADIR%%/base/frameworks/notice @dir %%DATADIR%%/base/frameworks/logging/writers @dir %%DATADIR%%/base/frameworks/logging/postprocessors @dir %%DATADIR%%/base/frameworks/logging @dir %%DATADIR%%/base/frameworks/intel @dir %%DATADIR%%/base/frameworks/input/readers @dir %%DATADIR%%/base/frameworks/input @dir %%DATADIR%%/base/frameworks/files/magic @dir %%DATADIR%%/base/frameworks/files @dir %%DATADIR%%/base/frameworks/dpd @dir %%DATADIR%%/base/frameworks/control @dir %%DATADIR%%/base/frameworks/communication @dir %%DATADIR%%/base/frameworks/cluster/nodes @dir %%DATADIR%%/base/frameworks/cluster +@dir %%DATADIR%%/base/frameworks/broker @dir %%DATADIR%%/base/frameworks/analyzer @dir %%DATADIR%%/base/frameworks @dir %%DATADIR%%/base/files/x509 @dir %%DATADIR%%/base/files/unified2 +@dir %%DATADIR%%/base/files/pe @dir %%DATADIR%%/base/files/hash @dir %%DATADIR%%/base/files/extract @dir %%DATADIR%%/base/files @dir %%DATADIR%%/base/bif/plugins @dir %%DATADIR%%/base/bif @dir %%DATADIR%%/base @dir %%DATADIR%% %%CLEANUP_PREFIX%%@dir share -@dir logs +%%CLEANUP_PREFIX%%%%BROKER%%@dir man/man8 +%%CLEANUP_PREFIX%%%%BROKER%%@dir man/man1 +%%CLEANUP_PREFIX%%%%BROKER%%@dir man +%%BROCTL%%@dir logs %%BROCTL%%@dir lib/broctl/plugins %%BROCTL%%@dir lib/broctl/BroControl %%BROCTL%%@dir lib/broctl +@dir lib/bro/plugins %%CLEANUP_PREFIX%%@dir lib +%%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker/util +%%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker/store +%%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker +%%CLEANUP_PREFIX%%@dir include %%CLEANUP_PREFIX%%@dir etc %%CLEANUP_PREFIX%%@dir bin %%BROCTL%%@exec su -fm %%BROUSER%% -c '%D/bin/broctl install'