update to 0.9.9 .
Index: Makefile =================================================================== RCS file: /cvs/ports/security/prelude/lml/Makefile,v retrieving revision 1.10 diff -u -r1.10 Makefile --- Makefile 30 Dec 2006 16:32:47 -0000 1.10 +++ Makefile 18 May 2007 13:00:54 -0000 @@ -2,7 +2,7 @@ COMMENT= "Prelude log analyzer" -DISTNAME= prelude-lml-0.9.8.1 +DISTNAME= prelude-lml-0.9.9 WANTLIB= c pthread z gcrypt gpg-error gnutls MODULES= devel/gettext Index: distinfo =================================================================== RCS file: /cvs/ports/security/prelude/lml/distinfo,v retrieving revision 1.6 diff -u -r1.6 distinfo --- distinfo 5 Apr 2007 17:26:09 -0000 1.6 +++ distinfo 18 May 2007 13:00:54 -0000 @@ -1,5 +1,5 @@ -MD5 (prelude-lml-0.9.8.1.tar.gz) = kwRZPVjSqhJodgyTFQq42w== -RMD160 (prelude-lml-0.9.8.1.tar.gz) = NzDS+B18cwDbuHEugUteSeSLHkQ= -SHA1 (prelude-lml-0.9.8.1.tar.gz) = AX46G721K/bvyDARrICI8UwL5ao= -SHA256 (prelude-lml-0.9.8.1.tar.gz) = D5Augj3AuMqUSR1pqx+SWqU90iV0Kf8hYHLcPQ4BNA4= -SIZE (prelude-lml-0.9.8.1.tar.gz) = 554886 +MD5 (prelude-lml-0.9.9.tar.gz) = nU9CQWda689fcEdYW2h1Yw== +RMD160 (prelude-lml-0.9.9.tar.gz) = kurFgyn3+tUAMEdCevP7hiAXlzc= +SHA1 (prelude-lml-0.9.9.tar.gz) = iV03ybLkaDUKP5luV+8HF72Nm8A= +SHA256 (prelude-lml-0.9.9.tar.gz) = BolGzHo6ySSBsxM/LCNOzeD+cZvYianOlEVEC9IdTWA= +SIZE (prelude-lml-0.9.9.tar.gz) = 637171 Index: patches/patch-Makefile_in =================================================================== RCS file: /cvs/ports/security/prelude/lml/patches/patch-Makefile_in,v retrieving revision 1.4 diff -u -r1.4 patch-Makefile_in --- patches/patch-Makefile_in 30 Dec 2006 16:32:47 -0000 1.4 +++ patches/patch-Makefile_in 18 May 2007 13:00:54 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $ ---- Makefile.in.orig Wed Dec 20 17:46:23 2006 -+++ Makefile.in Mon Dec 25 19:50:07 2006 -@@ -210,7 +210,7 @@ build_alias = @build_alias@ +--- Makefile.in.orig Wed May 2 11:19:41 2007 ++++ Makefile.in Thu May 17 13:16:32 2007 +@@ -364,7 +364,7 @@ build_alias = @build_alias@ build_cpu = @build_cpu@ build_os = @build_os@ build_vendor = @build_vendor@ @@ -10,7 +10,7 @@ datadir = @datadir@ datarootdir = @datarootdir@ defined = @defined@ -@@ -700,7 +700,6 @@ uninstall-info: uninstall-info-recursive +@@ -854,7 +854,6 @@ uninstall-info: uninstall-info-recursive install-data-local: Index: patches/patch-configure =================================================================== RCS file: /cvs/ports/security/prelude/lml/patches/patch-configure,v retrieving revision 1.4 diff -u -r1.4 patch-configure --- patches/patch-configure 30 Dec 2006 16:32:47 -0000 1.4 +++ patches/patch-configure 18 May 2007 13:00:54 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-configure,v 1.4 2006/12/30 16:32:47 aanriot Exp $ ---- configure.orig Wed Dec 20 17:46:16 2006 -+++ configure Mon Dec 25 19:50:07 2006 -@@ -31053,7 +31053,7 @@ _ACEOF +--- configure.orig Wed May 2 11:19:35 2007 ++++ configure Thu May 17 13:16:33 2007 +@@ -32322,7 +32322,7 @@ _ACEOF configdir=$sysconfdir/prelude-lml prelude_lml_conf=$configdir/prelude-lml.conf regex_conf=$configdir/plugins.rules Index: patches/patch-plugins_pcre_ruleset_Makefile_in =================================================================== RCS file: /cvs/ports/security/prelude/lml/patches/patch-plugins_pcre_ruleset_Makefile_in,v retrieving revision 1.4 diff -u -r1.4 patch-plugins_pcre_ruleset_Makefile_in --- patches/patch-plugins_pcre_ruleset_Makefile_in 30 Dec 2006 16:32:47 -0000 1.4 +++ patches/patch-plugins_pcre_ruleset_Makefile_in 18 May 2007 13:00:54 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-plugins_pcre_ruleset_Makefile_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $ ---- plugins/pcre/ruleset/Makefile.in.orig Wed Dec 20 17:46:21 2006 -+++ plugins/pcre/ruleset/Makefile.in Mon Dec 25 19:50:07 2006 -@@ -204,7 +204,7 @@ build_alias = @build_alias@ +--- plugins/pcre/ruleset/Makefile.in.orig Wed May 2 11:19:40 2007 ++++ plugins/pcre/ruleset/Makefile.in Thu May 17 13:16:34 2007 +@@ -358,7 +358,7 @@ build_alias = @build_alias@ build_cpu = @build_cpu@ build_os = @build_os@ build_vendor = @build_vendor@ Index: patches/patch-prelude-lml_conf_in =================================================================== RCS file: /cvs/ports/security/prelude/lml/patches/patch-prelude-lml_conf_in,v retrieving revision 1.4 diff -u -r1.4 patch-prelude-lml_conf_in --- patches/patch-prelude-lml_conf_in 30 Dec 2006 16:32:47 -0000 1.4 +++ patches/patch-prelude-lml_conf_in 18 May 2007 13:00:54 -0000 @@ -1,9 +1,9 @@ -$OpenBSD: patch-prelude-lml_conf_in,v 1.4 2006/12/30 16:32:47 aanriot Exp $ ---- prelude-lml.conf.in.orig Fri Dec 15 10:48:35 2006 -+++ prelude-lml.conf.in Mon Dec 25 20:17:04 2006 -@@ -43,21 +43,43 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/def - # The same file entry / udp-server entry might be duplicated accross - # differents formats. +$OpenBSD$ +--- prelude-lml.conf.in.orig Thu May 17 13:26:01 2007 ++++ prelude-lml.conf.in Thu May 17 13:30:09 2007 +@@ -49,11 +49,27 @@ include = @LIBPRELUDE_CONFIG_PREFIX@/default/idmef-cli + # + # Example: file = /var/log/*/*.log +[format=syslog] +time-format = "%b %d %H:%M:%S" @@ -11,15 +11,16 @@ +file = /var/log/authlog +# udp-server = 0.0.0.0 - [format=syslog] - time-format = "%b %d %H:%M:%S" - prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?" -+file = /var/log/daemon -+# udp-server = 0.0.0.0 -+ +[format=syslog] +time-format = "%b %d %H:%M:%S" +prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?" ++file = /var/log/daemon ++# udp-server = 0.0.0.0 + + [format=syslog] +-time-format = "%b %d %H:%M:%S" ++time-format = "%b %d %H:%M:%S" + prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?" +file = /var/log/maillog +# udp-server = 0.0.0.0 + @@ -29,14 +30,9 @@ file = /var/log/messages # udp-server = 0.0.0.0 -+[format=syslog] -+time-format = "%b %d %H:%M:%S" -+prefix-regex = "^(?P<timestamp>.{15}) (?P<hostname>\S+) (?:(?P<process>\S+?)(?:\[(?P<pid>[0-9]+)\])?: )?" -+file = /var/log/secure -+# udp-server = 0.0.0.0 - +@@ -61,10 +77,10 @@ file = /var/log/messages # - # Example configuration for metalog output: + # Sample configuration for metalog: # -[format=metalog] -prefix-regex = "^(?P<timestamp>.{15}) \[(?P<process>\S+)\] " @@ -49,17 +45,17 @@ # udp-server = 0.0.0.0 -@@ -67,7 +89,12 @@ file = /var/log/everything/current +@@ -74,8 +90,12 @@ file = /var/log/everything/current [format=apache] time-format = "%d/%b/%Y:%H:%M:%S" prefix-regex = "^(?P<hostname>\S+) - - \[(?P<timestamp>.{20}) \[+-].{4}\] " -file = /var/log/apache2/access_log +file = /var/www/logs/access_log -+ + +[format=apache-error] +time-format = "%a %b %d %H:%M:%S %Y" +prefix-regex = "^\[(?P<timestamp>.{24})\]" +file = /var/www/logs/error_log - # + # Specifies the maximum difference, in seconds, between Index: pkg/PLIST =================================================================== RCS file: /cvs/ports/security/prelude/lml/pkg/PLIST,v retrieving revision 1.6 diff -u -r1.6 PLIST --- pkg/PLIST 30 Dec 2006 16:32:47 -0000 1.6 +++ pkg/PLIST 18 May 2007 13:00:54 -0000 @@ -24,12 +24,16 @@ @sample ${SYSCONFDIR}/prelude-lml/ruleset/arbor.rules share/examples/prelude-lml/ruleset/arpwatch.rules @sample ${SYSCONFDIR}/prelude-lml/ruleset/arpwatch.rules +share/examples/prelude-lml/ruleset/bonding.rules [EMAIL PROTECTED] ${SYSCONFDIR}/prelude-lml/ruleset/bonding.rules share/examples/prelude-lml/ruleset/cacti-thold.rules @sample ${SYSCONFDIR}/prelude-lml/ruleset/cacti-thold.rules share/examples/prelude-lml/ruleset/checkpoint.rules @sample ${SYSCONFDIR}/prelude-lml/ruleset/checkpoint.rules share/examples/prelude-lml/ruleset/cisco-asa.rules @sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-asa.rules +share/examples/prelude-lml/ruleset/cisco-common.rules [EMAIL PROTECTED] ${SYSCONFDIR}/prelude-lml/ruleset/cisco-common.rules share/examples/prelude-lml/ruleset/cisco-css.rules @sample ${SYSCONFDIR}/prelude-lml/ruleset/cisco-css.rules share/examples/prelude-lml/ruleset/cisco-ips.rules