Index: head/security/bro/Makefile =================================================================== --- head/security/bro/Makefile (revision 462350) +++ head/security/bro/Makefile (revision 462351) @@ -1,131 +1,142 @@ # Created by: David O'Brien # $FreeBSD$ PORTNAME= bro PORTVERSION= 2.5.2 +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= https://www.bro.org/downloads/ DISTFILES= ${DISTNAME}${EXTRACT_SUFX} MAINTAINER= leres@FreeBSD.org COMMENT= System for detecting network intruders in real-time LICENSE= BSD3CLAUSE BROKEN_powerpc64= Does not build: error: zero-size array 'names' LIB_DEPENDS= libGeoIP.so:net/GeoIP - USES= bison cmake:outsource compiler:c++11-lang ninja perl5 python shebangfix ssl -USE_GITHUB= nodefault -GH_TUPLE= actor-framework:actor-framework:0.14.6:actor_framework CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD} CXXFLAGS+= -std=c++11 -Wall STAGEDIR2= ${STAGEDIR}-caf SHEBANG_FILES= aux/broctl/aux/trace-summary/trace-summary SUB_FILES= pkg-message NO_MTREE= yes CMAKE_ARGS+= -GNinja \ -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ -D BRO_ROOT_DIR:PATH=${PREFIX} \ -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \ -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \ -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \ -D ENABLE_PERFTOOLS:BOOL=false \ -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ -D BinPAC_SKIP_INSTALL:BOOL=true \ -D INSTALL_AUX_TOOLS:BOOL=true \ -D BUILD_SHARED_LIBS:BOOL=true \ -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" BROUSER?= bro BROGROUP?= bro -PLIST_SUB+= BROUSER=${BROUSER} \ - BROGROUP=${BROGROUP} +PLIST_SUB+= ARCH=${ARCH} \ + BROUSER=${BROUSER} \ + BROGROUP=${BROGROUP} \ + LCASE_OPSYS=${OPSYS:tl} USERS= ${BROUSER} GROUPS= ${BROGROUP} -OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG IPSUMDUMP LBL_CF LBL_HF PERFTOOLS -OPTIONS_DEFAULT=BROCCOLI BROCTL IPSUMDUMP LBL_CF LBL_HF +OPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG IPSUMDUMP LBL_CF LBL_HF \ + NETMAP PERFTOOLS +OPTIONS_DEFAULT=BROCCOLI BROCTL IPSUMDUMP LBL_CF LBL_HF NETMAP OPTIONS_SUB= yes BROCCOLI_DESC= Build support for libbroccoli communications BROCTL_DESC= BroControl support (implies BROCCOLI and IPSUMDUMP) BROKER_DESC= Enable the Broker communication library IPSUMDUMP_DESC= Enables traffic summaries LBL_CF_DESC= Unix time to formated time/date filter support LBL_HF_DESC= Address to hostname filter support PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage BROCTL_IMPLIES= BROCCOLI IPSUMDUMP BROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli BROCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3 \ swig3.0:devel/swig30 BROCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3 BROCTL_CMAKE_BOOL= INSTALL_BROCTL BROCTL_USE= LDCONFIG=yes IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump -BROKER_CMAKE_BOOL= ENABLE_BROKER BROKER_BUILD_DEPENDS= swig3.0:devel/swig30 +BROKER_CMAKE_BOOL= ENABLE_BROKER BROKER_CMAKE_ON+= -DCAF_ROOT_DIR=${STAGEDIR2}${PREFIX} +BROKER_GH_TUPLE= actor-framework:actor-framework:0.14.6:actor_framework +BROKER_USE= GITHUB=nodefault DEBUG_CMAKE_BOOL= ENABLE_DEBUG LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf +NETMAP_GH_TUPLE= bro:bro-netmap:cf88debf487b31ab30dc3b5bac64783b4e49997e:bro_netmap +NETMAP_USE= GITHUB=nodefault PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS PERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/pprof:devel/google-perftools PYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 .include .if ${PORT_OPTIONS:MBROCTL} USE_RC_SUBR= bro .endif CMAKE_ARGS2= -GNinja \ -D CMAKE_INSTALL_PREFIX:PATH=${STAGEDIR2}${PREFIX} \ -D CAF_BUILD_STATIC_ONLY:BOOL=yes \ -D CAF_LOG_LEVEL:STRING=0 \ -D CAF_NO_EXAMPLES:BOOL=yes \ -D CAF_NO_OPENCL:BOOL=yes \ -D CAF_NO_UNIT_TESTS:BOOL=yes CONFIGURE_WRKSRC2= ${WRKDIR}/.build-caf BUILD_WRKSRC2= ${CONFIGURE_WRKSRC2} INSTALL_WRKSRC2= ${CONFIGURE_WRKSRC2} # Build the version of caf this version of bro requires pre-configure-BROKER-on: ${MKDIR} ${CONFIGURE_WRKSRC2} (cd ${CONFIGURE_WRKSRC2} && \ ${CMAKE_BIN} ${CMAKE_ARGS2} ${WRKSRC_actor_framework}) ${MKDIR} ${STAGEDIR2} (cd ${BUILD_WRKSRC2} && \ ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} install) ${LN} -s libcaf_core_static.a ${STAGEDIR2}${PREFIX}/lib/libcaf_core.a ${LN} -s libcaf_io_static.a ${STAGEDIR2}${PREFIX}/lib/libcaf_io.a post-install-BROCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/logs ${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site .for F in broctl.cfg networks.cfg node.cfg ${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example .endfor pre-install-BROCTL-on: ${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d + +post-build-NETMAP-on: + ${LN} -s ../.build ${WRKSRC}/build + (cd ${WRKSRC_bro_netmap} && ./configure --bro-dist=${WRKSRC} \ + --install-root=${STAGEDIR}${PREFIX}/lib/bro/plugins && \ + make && make install) .include Index: head/security/bro/distinfo =================================================================== --- head/security/bro/distinfo (revision 462350) +++ head/security/bro/distinfo (revision 462351) @@ -1,5 +1,7 @@ -TIMESTAMP = 1508621466 +TIMESTAMP = 1516330946 SHA256 (bro-2.5.2.tar.gz) = ab95b1bc376282919e5fa6b25b5ef8864e2e7bd5efe842db35d4a223b8f5b970 SIZE (bro-2.5.2.tar.gz) = 18512696 SHA256 (actor-framework-actor-framework-0.14.6_GH0.tar.gz) = cbc2033896fe41e42604de2f74673971718a40684996650157484485755f7720 SIZE (actor-framework-actor-framework-0.14.6_GH0.tar.gz) = 1239451 +SHA256 (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 383423f92932c3ef244194954708b3a237b4f37ebc358014f51dcb3b9786896b +SIZE (bro-bro-netmap-cf88debf487b31ab30dc3b5bac64783b4e49997e_GH0.tar.gz) = 24630 Index: head/security/bro/pkg-plist =================================================================== --- head/security/bro/pkg-plist (revision 462350) +++ head/security/bro/pkg-plist (revision 462351) @@ -1,784 +1,794 @@ @postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs %%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool %%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp %%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch bin/bro bin/bro-config bin/bro-cut %%BROCTL%%bin/broctl %%BROCTL%%bin/capstats %%BROCTL%%bin/trace-summary %%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi %%BROCTL%%etc/broctl.cfg.example %%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi %%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi %%BROCTL%%etc/networks.cfg.example %%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi %%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi %%BROCTL%%etc/node.cfg.example %%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi %%BROKER%%include/broker/address.hh %%BROKER%%include/broker/broker.h %%BROKER%%include/broker/broker.hh %%BROKER%%include/broker/data.hh %%BROKER%%include/broker/endpoint.hh %%BROKER%%include/broker/enum_value.hh %%BROKER%%include/broker/incoming_connection_status.hh %%BROKER%%include/broker/message.hh %%BROKER%%include/broker/message_queue.hh %%BROKER%%include/broker/outgoing_connection_status.hh %%BROKER%%include/broker/peering.hh %%BROKER%%include/broker/port.hh %%BROKER%%include/broker/queue.hh %%BROKER%%include/broker/report.hh %%BROKER%%include/broker/store/backend.hh %%BROKER%%include/broker/store/clone.hh %%BROKER%%include/broker/store/expiration_time.hh %%BROKER%%include/broker/store/frontend.hh %%BROKER%%include/broker/store/identifier.hh %%BROKER%%include/broker/store/master.hh %%BROKER%%include/broker/store/memory_backend.hh %%BROKER%%include/broker/store/query.hh %%BROKER%%include/broker/store/response.hh %%BROKER%%include/broker/store/result.hh %%BROKER%%include/broker/store/rocksdb_backend.hh %%BROKER%%include/broker/store/sequence_num.hh %%BROKER%%include/broker/store/snapshot.hh %%BROKER%%include/broker/store/sqlite_backend.hh %%BROKER%%include/broker/store/value.hh %%BROKER%%include/broker/subnet.hh %%BROKER%%include/broker/time_duration.hh %%BROKER%%include/broker/time_point.hh %%BROKER%%include/broker/topic.hh %%BROKER%%include/broker/util/hash.hh %%BROKER%%include/broker/util/meta.hh %%BROKER%%include/broker/util/none.hh %%BROKER%%include/broker/util/operators.hh %%BROKER%%include/broker/util/optional.hh %%BROKER%%include/broker/util/variant.hh +%%NETMAP%%lib/bro/plugins/Bro_Netmap/COPYING +%%NETMAP%%lib/bro/plugins/Bro_Netmap/__bro_plugin__ +%%NETMAP%%lib/bro/plugins/Bro_Netmap/broctl/netmap.py +%%NETMAP%%lib/bro/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so +%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/__load__.bro +%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/init.bro %%BROCTL%%lib/broctl/BroControl/__init__.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/__init__.pyc %%BROCTL%%lib/broctl/BroControl/brocmd.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/brocmd.pyc %%BROCTL%%lib/broctl/BroControl/broctl.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/broctl.pyc %%BROCTL%%lib/broctl/BroControl/cmdresult.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc %%BROCTL%%lib/broctl/BroControl/config.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/config.pyc %%BROCTL%%lib/broctl/BroControl/control.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/control.pyc %%BROCTL%%lib/broctl/BroControl/cron.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cron.pyc %%BROCTL%%lib/broctl/BroControl/doc.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/doc.pyc %%BROCTL%%lib/broctl/BroControl/events.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/events.pyc %%BROCTL%%lib/broctl/BroControl/exceptions.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/exceptions.pyc %%BROCTL%%lib/broctl/BroControl/execute.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/execute.pyc %%BROCTL%%lib/broctl/BroControl/install.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/install.pyc %%BROCTL%%lib/broctl/BroControl/lock.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/lock.pyc %%BROCTL%%lib/broctl/BroControl/node.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/node.pyc %%BROCTL%%lib/broctl/BroControl/options.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/options.pyc %%BROCTL%%lib/broctl/BroControl/plugin.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/plugin.pyc %%BROCTL%%lib/broctl/BroControl/pluginreg.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc %%BROCTL%%lib/broctl/BroControl/printdoc.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/printdoc.pyc %%BROCTL%%lib/broctl/BroControl/py3bro.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/py3bro.pyc %%BROCTL%%lib/broctl/BroControl/ssh_runner.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc %%BROCTL%%lib/broctl/BroControl/state.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/state.pyc %%BROCTL%%lib/broctl/BroControl/util.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/util.pyc %%BROCTL%%lib/broctl/BroControl/utilcurses.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc %%BROCTL%%lib/broctl/BroControl/version.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/version.pyc %%BROCTL%%lib/broctl/SubnetTree.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/SubnetTree.pyc %%BROCTL%%lib/broctl/_SubnetTree.so %%BROKER%%lib/broctl/_pybroker.so %%BROCTL%%lib/broctl/plugins/TestPlugin.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc %%BROCTL%%lib/broctl/plugins/lb_custom.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_custom.pyc %%BROCTL%%lib/broctl/plugins/lb_myricom.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc %%BROCTL%%lib/broctl/plugins/lb_pf_ring.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc %%BROCTL%%lib/broctl/plugins/ps.py %%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/ps.pyc %%BROKER%%lib/broctl/pybroker.py %%BROKER%%@preunexec rm -f %D/lib/broctl/pybroker.pyc %%BROKER%%lib/libbroker.so %%BROKER%%lib/libbroker.so.0 %%BROKER%%lib/libbroker.so.0.7.0 man/man1/bro-cut.1.gz %%BROCTL%%man/man1/trace-summary.1.gz man/man8/bro.8.gz %%BROCTL%%man/man8/broctl.8.gz %%DATADIR%%/base/bif/__load__.bro %%DATADIR%%/base/bif/analyzer.bif.bro %%DATADIR%%/base/bif/bloom-filter.bif.bro %%DATADIR%%/base/bif/bro.bif.bro %%DATADIR%%/base/bif/broxygen.bif.bro %%DATADIR%%/base/bif/cardinality-counter.bif.bro %%DATADIR%%/base/bif/comm.bif.bro %%DATADIR%%/base/bif/const.bif.bro %%DATADIR%%/base/bif/data.bif.bro %%DATADIR%%/base/bif/event.bif.bro %%DATADIR%%/base/bif/file_analysis.bif.bro %%DATADIR%%/base/bif/input.bif.bro %%DATADIR%%/base/bif/logging.bif.bro %%DATADIR%%/base/bif/messaging.bif.bro %%DATADIR%%/base/bif/pcap.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.consts.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileEntropy.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_GSSAPI.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_IMAP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NTLM.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NTLM.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro %%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RFB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.consts.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_check_directory.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_close.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_create_directory.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_echo.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_negotiate.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_cancel.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_create_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_query_information.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_read_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_session_setup_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_connect_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_write_andx.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_close.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_session_setup.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_set_info.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_connect.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_disconnect.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_write.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSL.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSL.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_XMPP.events.bif.bro %%DATADIR%%/base/bif/plugins/__load__.bro %%DATADIR%%/base/bif/reporter.bif.bro %%DATADIR%%/base/bif/stats.bif.bro %%DATADIR%%/base/bif/store.bif.bro %%DATADIR%%/base/bif/strings.bif.bro %%DATADIR%%/base/bif/top-k.bif.bro %%DATADIR%%/base/bif/types.bif.bro %%DATADIR%%/base/files/extract/__load__.bro %%DATADIR%%/base/files/extract/main.bro %%DATADIR%%/base/files/hash/__load__.bro %%DATADIR%%/base/files/hash/main.bro %%DATADIR%%/base/files/pe/__load__.bro %%DATADIR%%/base/files/pe/consts.bro %%DATADIR%%/base/files/pe/main.bro %%DATADIR%%/base/files/unified2/__load__.bro %%DATADIR%%/base/files/unified2/main.bro %%DATADIR%%/base/files/x509/__load__.bro %%DATADIR%%/base/files/x509/main.bro %%DATADIR%%/base/frameworks/analyzer/__load__.bro %%DATADIR%%/base/frameworks/analyzer/main.bro %%DATADIR%%/base/frameworks/broker/__load__.bro %%DATADIR%%/base/frameworks/broker/main.bro %%DATADIR%%/base/frameworks/broker/store.bro %%DATADIR%%/base/frameworks/cluster/__load__.bro %%DATADIR%%/base/frameworks/cluster/main.bro %%DATADIR%%/base/frameworks/cluster/nodes/logger.bro %%DATADIR%%/base/frameworks/cluster/nodes/manager.bro %%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro %%DATADIR%%/base/frameworks/cluster/nodes/worker.bro %%DATADIR%%/base/frameworks/cluster/setup-connections.bro %%DATADIR%%/base/frameworks/communication/__load__.bro %%DATADIR%%/base/frameworks/communication/main.bro %%DATADIR%%/base/frameworks/control/__load__.bro %%DATADIR%%/base/frameworks/control/main.bro %%DATADIR%%/base/frameworks/dpd/__load__.bro %%DATADIR%%/base/frameworks/dpd/main.bro %%DATADIR%%/base/frameworks/files/__load__.bro %%DATADIR%%/base/frameworks/files/magic/__load__.bro %%DATADIR%%/base/frameworks/files/magic/archive.sig %%DATADIR%%/base/frameworks/files/magic/audio.sig %%DATADIR%%/base/frameworks/files/magic/font.sig %%DATADIR%%/base/frameworks/files/magic/general.sig %%DATADIR%%/base/frameworks/files/magic/image.sig %%DATADIR%%/base/frameworks/files/magic/libmagic.sig %%DATADIR%%/base/frameworks/files/magic/msoffice.sig %%DATADIR%%/base/frameworks/files/magic/video.sig %%DATADIR%%/base/frameworks/files/main.bro %%DATADIR%%/base/frameworks/input/__load__.bro %%DATADIR%%/base/frameworks/input/main.bro %%DATADIR%%/base/frameworks/input/readers/ascii.bro %%DATADIR%%/base/frameworks/input/readers/benchmark.bro %%DATADIR%%/base/frameworks/input/readers/binary.bro %%DATADIR%%/base/frameworks/input/readers/raw.bro %%DATADIR%%/base/frameworks/input/readers/sqlite.bro %%DATADIR%%/base/frameworks/intel/__load__.bro %%DATADIR%%/base/frameworks/intel/cluster.bro %%DATADIR%%/base/frameworks/intel/files.bro %%DATADIR%%/base/frameworks/intel/input.bro %%DATADIR%%/base/frameworks/intel/main.bro %%DATADIR%%/base/frameworks/logging/__load__.bro %%DATADIR%%/base/frameworks/logging/main.bro %%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro %%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro %%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro %%DATADIR%%/base/frameworks/logging/writers/ascii.bro %%DATADIR%%/base/frameworks/logging/writers/none.bro %%DATADIR%%/base/frameworks/logging/writers/sqlite.bro %%DATADIR%%/base/frameworks/netcontrol/__load__.bro %%DATADIR%%/base/frameworks/netcontrol/catch-and-release.bro %%DATADIR%%/base/frameworks/netcontrol/cluster.bro %%DATADIR%%/base/frameworks/netcontrol/drop.bro %%DATADIR%%/base/frameworks/netcontrol/main.bro %%DATADIR%%/base/frameworks/netcontrol/non-cluster.bro %%DATADIR%%/base/frameworks/netcontrol/plugin.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/acld.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/broker.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/debug.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.bro %%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.bro %%DATADIR%%/base/frameworks/netcontrol/shunt.bro %%DATADIR%%/base/frameworks/netcontrol/types.bro %%DATADIR%%/base/frameworks/notice/__load__.bro %%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro %%DATADIR%%/base/frameworks/notice/actions/drop.bro %%DATADIR%%/base/frameworks/notice/actions/email_admin.bro %%DATADIR%%/base/frameworks/notice/actions/page.bro %%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro %%DATADIR%%/base/frameworks/notice/cluster.bro %%DATADIR%%/base/frameworks/notice/extend-email/hostnames.bro %%DATADIR%%/base/frameworks/notice/main.bro %%DATADIR%%/base/frameworks/notice/non-cluster.bro %%DATADIR%%/base/frameworks/notice/weird.bro %%DATADIR%%/base/frameworks/openflow/__load__.bro %%DATADIR%%/base/frameworks/openflow/cluster.bro %%DATADIR%%/base/frameworks/openflow/consts.bro %%DATADIR%%/base/frameworks/openflow/main.bro %%DATADIR%%/base/frameworks/openflow/non-cluster.bro %%DATADIR%%/base/frameworks/openflow/plugins/__load__.bro %%DATADIR%%/base/frameworks/openflow/plugins/broker.bro %%DATADIR%%/base/frameworks/openflow/plugins/log.bro %%DATADIR%%/base/frameworks/openflow/plugins/ryu.bro %%DATADIR%%/base/frameworks/openflow/types.bro %%DATADIR%%/base/frameworks/packet-filter/__load__.bro %%DATADIR%%/base/frameworks/packet-filter/cluster.bro %%DATADIR%%/base/frameworks/packet-filter/main.bro %%DATADIR%%/base/frameworks/packet-filter/netstats.bro %%DATADIR%%/base/frameworks/packet-filter/utils.bro %%DATADIR%%/base/frameworks/reporter/__load__.bro %%DATADIR%%/base/frameworks/reporter/main.bro %%DATADIR%%/base/frameworks/signatures/__load__.bro %%DATADIR%%/base/frameworks/signatures/main.bro %%DATADIR%%/base/frameworks/software/__load__.bro %%DATADIR%%/base/frameworks/software/main.bro %%DATADIR%%/base/frameworks/sumstats/__load__.bro %%DATADIR%%/base/frameworks/sumstats/cluster.bro %%DATADIR%%/base/frameworks/sumstats/main.bro %%DATADIR%%/base/frameworks/sumstats/non-cluster.bro %%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro %%DATADIR%%/base/frameworks/sumstats/plugins/average.bro %%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/last.bro %%DATADIR%%/base/frameworks/sumstats/plugins/max.bro %%DATADIR%%/base/frameworks/sumstats/plugins/min.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro %%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro %%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro %%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro %%DATADIR%%/base/frameworks/tunnels/__load__.bro %%DATADIR%%/base/frameworks/tunnels/main.bro %%DATADIR%%/base/init-bare.bro %%DATADIR%%/base/init-default.bro %%DATADIR%%/base/misc/find-checksum-offloading.bro %%DATADIR%%/base/misc/find-filtered-trace.bro %%DATADIR%%/base/misc/p0f.fp %%DATADIR%%/base/misc/version.bro %%DATADIR%%/base/protocols/conn/__load__.bro %%DATADIR%%/base/protocols/conn/contents.bro %%DATADIR%%/base/protocols/conn/inactivity.bro %%DATADIR%%/base/protocols/conn/main.bro %%DATADIR%%/base/protocols/conn/polling.bro %%DATADIR%%/base/protocols/conn/thresholds.bro %%DATADIR%%/base/protocols/dce-rpc/__load__.bro %%DATADIR%%/base/protocols/dce-rpc/consts.bro %%DATADIR%%/base/protocols/dce-rpc/dpd.sig %%DATADIR%%/base/protocols/dce-rpc/main.bro %%DATADIR%%/base/protocols/dhcp/__load__.bro %%DATADIR%%/base/protocols/dhcp/consts.bro %%DATADIR%%/base/protocols/dhcp/dpd.sig %%DATADIR%%/base/protocols/dhcp/main.bro %%DATADIR%%/base/protocols/dhcp/utils.bro %%DATADIR%%/base/protocols/dnp3/__load__.bro %%DATADIR%%/base/protocols/dnp3/consts.bro %%DATADIR%%/base/protocols/dnp3/dpd.sig %%DATADIR%%/base/protocols/dnp3/main.bro %%DATADIR%%/base/protocols/dns/__load__.bro %%DATADIR%%/base/protocols/dns/consts.bro %%DATADIR%%/base/protocols/dns/main.bro %%DATADIR%%/base/protocols/ftp/__load__.bro %%DATADIR%%/base/protocols/ftp/dpd.sig %%DATADIR%%/base/protocols/ftp/files.bro %%DATADIR%%/base/protocols/ftp/gridftp.bro %%DATADIR%%/base/protocols/ftp/info.bro %%DATADIR%%/base/protocols/ftp/main.bro %%DATADIR%%/base/protocols/ftp/utils-commands.bro %%DATADIR%%/base/protocols/ftp/utils.bro %%DATADIR%%/base/protocols/http/__load__.bro %%DATADIR%%/base/protocols/http/dpd.sig %%DATADIR%%/base/protocols/http/entities.bro %%DATADIR%%/base/protocols/http/files.bro %%DATADIR%%/base/protocols/http/main.bro %%DATADIR%%/base/protocols/http/utils.bro %%DATADIR%%/base/protocols/imap/__load__.bro %%DATADIR%%/base/protocols/imap/main.bro %%DATADIR%%/base/protocols/irc/__load__.bro %%DATADIR%%/base/protocols/irc/dcc-send.bro %%DATADIR%%/base/protocols/irc/dpd.sig %%DATADIR%%/base/protocols/irc/files.bro %%DATADIR%%/base/protocols/irc/main.bro %%DATADIR%%/base/protocols/krb/__load__.bro %%DATADIR%%/base/protocols/krb/consts.bro %%DATADIR%%/base/protocols/krb/dpd.sig %%DATADIR%%/base/protocols/krb/files.bro %%DATADIR%%/base/protocols/krb/main.bro %%DATADIR%%/base/protocols/modbus/__load__.bro %%DATADIR%%/base/protocols/modbus/consts.bro %%DATADIR%%/base/protocols/modbus/main.bro %%DATADIR%%/base/protocols/mysql/__load__.bro %%DATADIR%%/base/protocols/mysql/consts.bro %%DATADIR%%/base/protocols/mysql/main.bro %%DATADIR%%/base/protocols/ntlm/__load__.bro %%DATADIR%%/base/protocols/ntlm/main.bro %%DATADIR%%/base/protocols/pop3/__load__.bro %%DATADIR%%/base/protocols/pop3/dpd.sig %%DATADIR%%/base/protocols/radius/__load__.bro %%DATADIR%%/base/protocols/radius/consts.bro %%DATADIR%%/base/protocols/radius/main.bro %%DATADIR%%/base/protocols/rdp/__load__.bro %%DATADIR%%/base/protocols/rdp/consts.bro %%DATADIR%%/base/protocols/rdp/dpd.sig %%DATADIR%%/base/protocols/rdp/main.bro %%DATADIR%%/base/protocols/rfb/__load__.bro %%DATADIR%%/base/protocols/rfb/dpd.sig %%DATADIR%%/base/protocols/rfb/main.bro %%DATADIR%%/base/protocols/sip/__load__.bro %%DATADIR%%/base/protocols/sip/dpd.sig %%DATADIR%%/base/protocols/sip/main.bro %%DATADIR%%/base/protocols/smb/__load__.bro %%DATADIR%%/base/protocols/smb/const-dos-error.bro %%DATADIR%%/base/protocols/smb/const-nt-status.bro %%DATADIR%%/base/protocols/smb/consts.bro %%DATADIR%%/base/protocols/smtp/__load__.bro %%DATADIR%%/base/protocols/smtp/dpd.sig %%DATADIR%%/base/protocols/smtp/entities.bro %%DATADIR%%/base/protocols/smtp/files.bro %%DATADIR%%/base/protocols/smtp/main.bro %%DATADIR%%/base/protocols/snmp/__load__.bro %%DATADIR%%/base/protocols/snmp/main.bro %%DATADIR%%/base/protocols/socks/__load__.bro %%DATADIR%%/base/protocols/socks/consts.bro %%DATADIR%%/base/protocols/socks/dpd.sig %%DATADIR%%/base/protocols/socks/main.bro %%DATADIR%%/base/protocols/ssh/__load__.bro %%DATADIR%%/base/protocols/ssh/dpd.sig %%DATADIR%%/base/protocols/ssh/main.bro %%DATADIR%%/base/protocols/ssl/__load__.bro %%DATADIR%%/base/protocols/ssl/consts.bro %%DATADIR%%/base/protocols/ssl/dpd.sig %%DATADIR%%/base/protocols/ssl/files.bro %%DATADIR%%/base/protocols/ssl/main.bro %%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro %%DATADIR%%/base/protocols/syslog/__load__.bro %%DATADIR%%/base/protocols/syslog/consts.bro %%DATADIR%%/base/protocols/syslog/main.bro %%DATADIR%%/base/protocols/tunnels/__load__.bro %%DATADIR%%/base/protocols/tunnels/dpd.sig %%DATADIR%%/base/protocols/xmpp/__load__.bro %%DATADIR%%/base/protocols/xmpp/dpd.sig %%DATADIR%%/base/protocols/xmpp/main.bro %%DATADIR%%/base/utils/active-http.bro %%DATADIR%%/base/utils/addrs.bro %%DATADIR%%/base/utils/conn-ids.bro %%DATADIR%%/base/utils/dir.bro %%DATADIR%%/base/utils/directions-and-hosts.bro %%DATADIR%%/base/utils/email.bro %%DATADIR%%/base/utils/exec.bro %%DATADIR%%/base/utils/files.bro %%DATADIR%%/base/utils/geoip-distance.bro %%DATADIR%%/base/utils/json.bro %%DATADIR%%/base/utils/numbers.bro %%DATADIR%%/base/utils/paths.bro %%DATADIR%%/base/utils/patterns.bro %%DATADIR%%/base/utils/queue.bro %%DATADIR%%/base/utils/site.bro %%DATADIR%%/base/utils/strings.bro %%DATADIR%%/base/utils/thresholds.bro %%DATADIR%%/base/utils/time.bro %%DATADIR%%/base/utils/urls.bro %%BROCTL%%%%DATADIR%%/broctl/__load__.bro %%BROCTL%%%%DATADIR%%/broctl/auto.bro %%BROCTL%%%%DATADIR%%/broctl/check.bro %%BROCTL%%%%DATADIR%%/broctl/main.bro %%BROCTL%%%%DATADIR%%/broctl/process-trace.bro %%BROCTL%%%%DATADIR%%/broctl/standalone.bro %%DATADIR%%/broxygen/__load__.bro %%DATADIR%%/broxygen/example.bro %%DATADIR%%/policy/frameworks/communication/listen.bro %%DATADIR%%/policy/frameworks/control/controllee.bro %%DATADIR%%/policy/frameworks/control/controller.bro %%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro %%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro %%DATADIR%%/policy/frameworks/files/detect-MHR.bro %%DATADIR%%/policy/frameworks/files/entropy-test-all-files.bro %%DATADIR%%/policy/frameworks/files/extract-all-files.bro %%DATADIR%%/policy/frameworks/files/hash-all-files.bro %%DATADIR%%/policy/frameworks/intel/do_expire.bro %%DATADIR%%/policy/frameworks/intel/do_notice.bro %%DATADIR%%/policy/frameworks/intel/seen/__load__.bro %%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro %%DATADIR%%/policy/frameworks/intel/seen/dns.bro %%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/file-names.bro %%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro %%DATADIR%%/policy/frameworks/intel/seen/http-url.bro %%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp.bro %%DATADIR%%/policy/frameworks/intel/seen/ssl.bro %%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro %%DATADIR%%/policy/frameworks/intel/seen/x509.bro %%DATADIR%%/policy/frameworks/intel/whitelist.bro %%DATADIR%%/policy/frameworks/packet-filter/shunt.bro %%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig %%DATADIR%%/policy/frameworks/software/version-changes.bro %%DATADIR%%/policy/frameworks/software/vulnerable.bro %%DATADIR%%/policy/frameworks/software/windows-version-detection.bro %%DATADIR%%/policy/integration/barnyard2/__load__.bro %%DATADIR%%/policy/integration/barnyard2/main.bro %%DATADIR%%/policy/integration/barnyard2/types.bro %%DATADIR%%/policy/integration/collective-intel/__load__.bro %%DATADIR%%/policy/integration/collective-intel/main.bro %%DATADIR%%/policy/misc/capture-loss.bro %%DATADIR%%/policy/misc/detect-traceroute/__load__.bro %%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig %%DATADIR%%/policy/misc/detect-traceroute/main.bro %%DATADIR%%/policy/misc/dump-events.bro %%DATADIR%%/policy/misc/known-devices.bro %%DATADIR%%/policy/misc/load-balancing.bro %%DATADIR%%/policy/misc/loaded-scripts.bro %%DATADIR%%/policy/misc/profiling.bro %%DATADIR%%/policy/misc/scan.bro %%DATADIR%%/policy/misc/stats.bro %%DATADIR%%/policy/misc/trim-trace-file.bro %%DATADIR%%/policy/protocols/conn/known-hosts.bro %%DATADIR%%/policy/protocols/conn/known-services.bro %%DATADIR%%/policy/protocols/conn/mac-logging.bro %%DATADIR%%/policy/protocols/conn/vlan-logging.bro %%DATADIR%%/policy/protocols/conn/weirds.bro %%DATADIR%%/policy/protocols/dhcp/known-devices-and-hostnames.bro %%DATADIR%%/policy/protocols/dns/auth-addl.bro %%DATADIR%%/policy/protocols/dns/detect-external-names.bro %%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ftp/detect.bro %%DATADIR%%/policy/protocols/ftp/software.bro %%DATADIR%%/policy/protocols/http/detect-sqli.bro %%DATADIR%%/policy/protocols/http/detect-webapps.bro %%DATADIR%%/policy/protocols/http/detect-webapps.sig %%DATADIR%%/policy/protocols/http/header-names.bro %%DATADIR%%/policy/protocols/http/software-browser-plugins.bro %%DATADIR%%/policy/protocols/http/software.bro %%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro %%DATADIR%%/policy/protocols/http/var-extraction-uri.bro %%DATADIR%%/policy/protocols/krb/ticket-logging.bro %%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro %%DATADIR%%/policy/protocols/modbus/track-memmap.bro %%DATADIR%%/policy/protocols/mysql/software.bro %%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro %%DATADIR%%/policy/protocols/smb/__load__.bro %%DATADIR%%/policy/protocols/smb/dpd.sig %%DATADIR%%/policy/protocols/smb/files.bro %%DATADIR%%/policy/protocols/smb/main.bro %%DATADIR%%/policy/protocols/smb/smb1-main.bro %%DATADIR%%/policy/protocols/smb/smb2-main.bro %%DATADIR%%/policy/protocols/smtp/blocklists.bro %%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro %%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro %%DATADIR%%/policy/protocols/smtp/software.bro %%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ssh/geo-data.bro %%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro %%DATADIR%%/policy/protocols/ssh/software.bro %%DATADIR%%/policy/protocols/ssl/expiring-certs.bro %%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro %%DATADIR%%/policy/protocols/ssl/heartbleed.bro %%DATADIR%%/policy/protocols/ssl/known-certs.bro %%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro %%DATADIR%%/policy/protocols/ssl/notary.bro %%DATADIR%%/policy/protocols/ssl/validate-certs.bro %%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro %%DATADIR%%/policy/protocols/ssl/weak-keys.bro %%DATADIR%%/policy/tuning/__load__.bro %%DATADIR%%/policy/tuning/defaults/__load__.bro %%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro %%DATADIR%%/policy/tuning/defaults/packet-fragments.bro %%DATADIR%%/policy/tuning/defaults/warnings.bro %%DATADIR%%/policy/tuning/json-logs.bro %%DATADIR%%/policy/tuning/track-all-assets.bro %%DATADIR%%/site/local-logger.bro %%DATADIR%%/site/local-manager.bro %%DATADIR%%/site/local-proxy.bro %%DATADIR%%/site/local-worker.bro %%DATADIR%%/site/local.bro %%BROCTL%%%%DATADIR%%ctl/scripts/archive-log %%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh %%BROCTL%%%%DATADIR%%ctl/scripts/check-config %%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag %%BROCTL%%%%DATADIR%%ctl/scripts/delete-log %%BROCTL%%%%DATADIR%%ctl/scripts/expire-crash %%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/get-childs %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top %%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name %%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate %%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace %%BROCTL%%%%DATADIR%%ctl/scripts/send-mail %%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path %%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv %%BROCTL%%%%DATADIR%%ctl/scripts/update %%BROCTL%%spool/broctl-config.sh %%BROCTL%%@preunexec rm -f %D/logs/current %%BROCTL%%@preunexec rm -f %D/spool/broctl.dat %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro %%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro %%BROCTL%%@preunexec rm -f %D/spool/state.db %%BROCTL%%@dir spool/tmp %%BROCTL%%@dir spool/installed-scripts-do-not-touch/site %%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto %%BROCTL%%@dir spool/installed-scripts-do-not-touch %%BROCTL%%@dir spool %%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors %%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers %%BROCTL%%@dir %%DATADIR%%ctl/scripts %%BROCTL%%@dir %%DATADIR%%ctl @dir %%DATADIR%%/site @dir %%DATADIR%%/policy/tuning/defaults @dir %%DATADIR%%/policy/tuning @dir %%DATADIR%%/policy/protocols/ssl @dir %%DATADIR%%/policy/protocols/ssh @dir %%DATADIR%%/policy/protocols/smtp @dir %%DATADIR%%/policy/protocols/smb @dir %%DATADIR%%/policy/protocols/rdp @dir %%DATADIR%%/policy/protocols/mysql @dir %%DATADIR%%/policy/protocols/modbus @dir %%DATADIR%%/policy/protocols/krb @dir %%DATADIR%%/policy/protocols/http @dir %%DATADIR%%/policy/protocols/ftp @dir %%DATADIR%%/policy/protocols/dns @dir %%DATADIR%%/policy/protocols/dhcp @dir %%DATADIR%%/policy/protocols/conn @dir %%DATADIR%%/policy/protocols @dir %%DATADIR%%/policy/misc/detect-traceroute @dir %%DATADIR%%/policy/misc @dir %%DATADIR%%/policy/integration/collective-intel @dir %%DATADIR%%/policy/integration/barnyard2 @dir %%DATADIR%%/policy/integration @dir %%DATADIR%%/policy/frameworks/software @dir %%DATADIR%%/policy/frameworks/signatures @dir %%DATADIR%%/policy/frameworks/packet-filter @dir %%DATADIR%%/policy/frameworks/intel/seen @dir %%DATADIR%%/policy/frameworks/intel @dir %%DATADIR%%/policy/frameworks/files @dir %%DATADIR%%/policy/frameworks/dpd @dir %%DATADIR%%/policy/frameworks/control @dir %%DATADIR%%/policy/frameworks/communication @dir %%DATADIR%%/policy/frameworks @dir %%DATADIR%%/policy @dir %%DATADIR%%/broxygen %%BROCTL%%@dir %%DATADIR%%/broctl @dir %%DATADIR%%/base/utils @dir %%DATADIR%%/base/protocols/xmpp @dir %%DATADIR%%/base/protocols/tunnels @dir %%DATADIR%%/base/protocols/syslog @dir %%DATADIR%%/base/protocols/ssl @dir %%DATADIR%%/base/protocols/ssh @dir %%DATADIR%%/base/protocols/socks @dir %%DATADIR%%/base/protocols/snmp @dir %%DATADIR%%/base/protocols/smtp @dir %%DATADIR%%/base/protocols/smb @dir %%DATADIR%%/base/protocols/sip @dir %%DATADIR%%/base/protocols/rfb @dir %%DATADIR%%/base/protocols/rdp @dir %%DATADIR%%/base/protocols/radius @dir %%DATADIR%%/base/protocols/pop3 @dir %%DATADIR%%/base/protocols/ntlm @dir %%DATADIR%%/base/protocols/mysql @dir %%DATADIR%%/base/protocols/modbus @dir %%DATADIR%%/base/protocols/krb @dir %%DATADIR%%/base/protocols/irc @dir %%DATADIR%%/base/protocols/imap @dir %%DATADIR%%/base/protocols/http @dir %%DATADIR%%/base/protocols/ftp @dir %%DATADIR%%/base/protocols/dns @dir %%DATADIR%%/base/protocols/dnp3 @dir %%DATADIR%%/base/protocols/dhcp @dir %%DATADIR%%/base/protocols/dce-rpc @dir %%DATADIR%%/base/protocols/conn @dir %%DATADIR%%/base/protocols @dir %%DATADIR%%/base/misc @dir %%DATADIR%%/base/frameworks/tunnels @dir %%DATADIR%%/base/frameworks/sumstats/plugins @dir %%DATADIR%%/base/frameworks/sumstats @dir %%DATADIR%%/base/frameworks/software @dir %%DATADIR%%/base/frameworks/signatures @dir %%DATADIR%%/base/frameworks/reporter @dir %%DATADIR%%/base/frameworks/packet-filter @dir %%DATADIR%%/base/frameworks/openflow/plugins @dir %%DATADIR%%/base/frameworks/openflow @dir %%DATADIR%%/base/frameworks/notice/extend-email @dir %%DATADIR%%/base/frameworks/notice/actions @dir %%DATADIR%%/base/frameworks/notice @dir %%DATADIR%%/base/frameworks/netcontrol/plugins @dir %%DATADIR%%/base/frameworks/netcontrol @dir %%DATADIR%%/base/frameworks/logging/writers @dir %%DATADIR%%/base/frameworks/logging/postprocessors @dir %%DATADIR%%/base/frameworks/logging @dir %%DATADIR%%/base/frameworks/intel @dir %%DATADIR%%/base/frameworks/input/readers @dir %%DATADIR%%/base/frameworks/input @dir %%DATADIR%%/base/frameworks/files/magic @dir %%DATADIR%%/base/frameworks/files @dir %%DATADIR%%/base/frameworks/dpd @dir %%DATADIR%%/base/frameworks/control @dir %%DATADIR%%/base/frameworks/communication @dir %%DATADIR%%/base/frameworks/cluster/nodes @dir %%DATADIR%%/base/frameworks/cluster @dir %%DATADIR%%/base/frameworks/broker @dir %%DATADIR%%/base/frameworks/analyzer @dir %%DATADIR%%/base/frameworks @dir %%DATADIR%%/base/files/x509 @dir %%DATADIR%%/base/files/unified2 @dir %%DATADIR%%/base/files/pe @dir %%DATADIR%%/base/files/hash @dir %%DATADIR%%/base/files/extract @dir %%DATADIR%%/base/files @dir %%DATADIR%%/base/bif/plugins @dir %%DATADIR%%/base/bif @dir %%DATADIR%%/base @dir %%DATADIR%% @dir logs %%BROCTL%%@dir lib/broctl/plugins %%BROCTL%%@dir lib/broctl/BroControl %%BROCTL%%@dir lib/broctl +%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/scripts +%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/lib +%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/broctl +%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap @dir lib/bro/plugins %%BROCTL%%@postexec su -fm %%BROUSER%% -c '%D/bin/broctl install; rm -f %D/spool/debug.log'