# This is a shell archive. Save it in a file, remove anything before # this line, and then unpack it by entering "sh file". Note, it may # create directories; files and directories will be owned by you and # have default permissions. # # This archive contains: # # Makefile # distinfo # files/patch-aux_broker_cmake_FindCAF.cmake # files/pkg-message.in # files/bro.in # files/patch-aux_broker_CMakeLists.txt # pkg-descr # pkg-plist # echo x - Makefile sed 's/^X//' >Makefile << 'b67911656ef5d18c4ae36cb6741b7965' X# Created by: David O'Brien X# $FreeBSD: head/security/bro/Makefile 441056 2017-05-16 21:05:08Z tcberner $ X XPORTNAME= bro XPORTVERSION= 2.5.1 XCATEGORIES= security XMASTER_SITES= https://www.bro.org/downloads/ \ X https://github.com/actor-framework/actor-framework/releases/:source2 XDISTFILES= ${PORTNAME}-${PORTVERSION}${EXTRACT_SUFX} \ X ${GH_ACCOUNT}-${GH_PROJECT}-${PORTVERSION2}_GH0${EXTRACT_SUFX} X XMAINTAINER= leres@ee.lbl.gov XCOMMENT= System for detecting network intruders in real-time X XLICENSE= BSD3CLAUSE X XBUILD_DEPENDS= bison:devel/bison XLIB_DEPENDS= libGeoIP.so:net/GeoIP X XBROKEN_powerpc64= Does not build: error: zero-size array 'names' X XGH_ACCOUNT= actor-framework XGH_PROJECT= ${GH_ACCOUNT} X XUSES= cmake:outsource compiler:c++11-lang ninja perl5 python shebangfix ssl X XCMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD} XCXXFLAGS+= -std=c++11 -Wall X XPORTVERSION2= 0.14.5 XWRKSRC2= ${WRKDIR}/${GH_PROJECT}-${PORTVERSION2} XSTAGEDIR2= ${STAGEDIR}-caf X XSHEBANG_FILES= aux/broctl/aux/trace-summary/trace-summary X XSUB_FILES= pkg-message XNO_MTREE= yes X XCMAKE_ARGS+= -GNinja \ X -D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \ X -D BRO_ROOT_DIR:PATH=${PREFIX} \ X -D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/broctl \ X -D BRO_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/bro \ X -D BRO_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \ X -D BRO_MAN_INSTALL_PATH=${MANPREFIX}/man \ X -D ENABLE_PERFTOOLS:BOOL=false \ X -D ENABLE_PERFTOOLS_DEBUG:BOOL=false \ X -D BinPAC_SKIP_INSTALL:BOOL=true \ X -D INSTALL_AUX_TOOLS:BOOL=true \ X -D BUILD_SHARED_LIBS:BOOL=true \ X -D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}" X XBROUSER?= bro XBROGROUP?= bro XPLIST_SUB+= BROUSER=${BROUSER} \ X BROGROUP=${BROGROUP} X XUSERS= ${BROUSER} XGROUPS= ${BROGROUP} X XOPTIONS_DEFINE= BROCCOLI BROCTL BROKER DEBUG IPSUMDUMP LBL_CF LBL_HF PERFTOOLS XOPTIONS_DEFAULT=BROCCOLI BROCTL IPSUMDUMP LBL_CF LBL_HF XOPTIONS_SUB= yes X XBROCCOLI_DESC= Build support for libbroccoli communications XBROCTL_DESC= BroControl support (implies BROCCOLI and IPSUMDUMP) XBROKER_DESC= Enable the Broker communication library XIPSUMDUMP_DESC= Enables traffic summaries XLBL_CF_DESC= Unix time to formated time/date filter support XLBL_HF_DESC= Address to hostname filter support XPERFTOOLS_DESC= Use Perftools to improve memory & CPU usage X XBROCTL_IMPLIES= BROCCOLI IPSUMDUMP X XBROCCOLI_LIB_DEPENDS= libbroccoli.so:security/broccoli XBROCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ X ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3 XBROCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \ X ${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3 XBROCTL_CMAKE_BOOL= INSTALL_BROCTL XBROCTL_USE= LDCONFIG=yes XIPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump XIPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump XBROKER_CMAKE_BOOL= ENABLE_BROKER XBROKER_BUILD_DEPENDS= swig3.0:devel/swig30 XBROKER_CMAKE_ON+= -DCAF_ROOT_DIR=${STAGEDIR2}${PREFIX} XDEBUG_CMAKE_BOOL= ENABLE_DEBUG XLBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf XLBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf XPERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS XPERFTOOLS_RUN_DEPENDS= ${LOCALBASE}/bin/pprof:devel/google-perftools XPYTHON_BUILD_DEPENDS= swig3.0:devel/swig30 X X.include X X.if ${PORT_OPTIONS:MBROCTL} XUSE_RC_SUBR= bro X.endif X XCMAKE_ARGS2= -GNinja \ X -D CMAKE_INSTALL_PREFIX:PATH=${STAGEDIR2}${PREFIX} \ X -D CAF_BUILD_STATIC_ONLY:BOOL=yes \ X -D CAF_LOG_LEVEL:STRING=0 \ X -D CAF_NO_EXAMPLES:BOOL=yes \ X -D CAF_NO_OPENCL:BOOL=yes \ X -D CAF_NO_UNIT_TESTS:BOOL=yes X XCMAKE_SOURCE_PATH2= ${WRKSRC2} X XCONFIGURE_WRKSRC2= ${WRKDIR}/.build-caf XBUILD_WRKSRC2= ${CONFIGURE_WRKSRC2} XINSTALL_WRKSRC2= ${CONFIGURE_WRKSRC2} X X# Build the version of caf this version of bro requires Xpre-configure-BROKER-on: X ${MKDIR} ${CONFIGURE_WRKSRC2} X (cd ${CONFIGURE_WRKSRC2} && \ X ${CMAKE_BIN} ${CMAKE_ARGS2} ${CMAKE_SOURCE_PATH2}) X ${MKDIR} ${STAGEDIR2} X (cd ${BUILD_WRKSRC2} && \ X ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} install) X ${LN} -s libcaf_core_static.a ${STAGEDIR2}${PREFIX}/lib/libcaf_core.a X ${LN} -s libcaf_io_static.a ${STAGEDIR2}${PREFIX}/lib/libcaf_io.a X Xpost-install-BROCTL-on: X ${MKDIR} ${STAGEDIR}${PREFIX}/logs X ${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp X ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto X ${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site X.for F in broctl.cfg networks.cfg node.cfg X ${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.example X.endfor X Xpre-install-BROCTL-on: X ${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d X X.include b67911656ef5d18c4ae36cb6741b7965 echo x - distinfo sed 's/^X//' >distinfo << '57677d168a5ec21bdf22c9501f075a8f' XTIMESTAMP = 1499014689 XSHA256 (bro-2.5.1.tar.gz) = 2c6ce502864bee9323c3e46213a21cfe9281a65cbedf81d5ab6160a437a89511 XSIZE (bro-2.5.1.tar.gz) = 18521029 XSHA256 (actor-framework-actor-framework-0.14.5_GH0.tar.gz) = afc4bc928ecd7d017768e5c85b7300196aa5b70ef11d97e11b21a1ae28ce9d3f XSIZE (actor-framework-actor-framework-0.14.5_GH0.tar.gz) = 1239461 57677d168a5ec21bdf22c9501f075a8f echo x - files/patch-aux_broker_cmake_FindCAF.cmake sed 's/^X//' >files/patch-aux_broker_cmake_FindCAF.cmake << '20f5d453ab7d3a31d4f92a1c8f643c7f' X--- aux/broker/cmake/FindCAF.cmake.orig 2016-11-16 22:53:56 UTC X+++ aux/broker/cmake/FindCAF.cmake X@@ -10,6 +10,8 @@ X # CAF_ROOT_DIR Set this variable either to an installation prefix or to wa X # CAF build directory where to look for the CAF libraries. X # X+# CAF_STATIC_ONLY Find the static libraries of caf only. X+# X # Variables defined by this module: X # X # CAF_FOUND System has CAF headers and library X@@ -34,11 +36,18 @@ foreach (comp ${CAF_FIND_COMPONENTS}) X "${CAF_ROOT_DIR}/include" X "${CAF_ROOT_DIR}/../libcaf_${comp}") X endif () X+ # give CAF_ROOT_DIR priority... X+ find_path(CAF_INCLUDE_DIR_${UPPERCOMP} X+ NAMES X+ ${HDRNAME} X+ HINTS X+ ${header_hints} X+ NO_DEFAULT_PATH) X+ # ...then look in default locations if not found yet X find_path(CAF_INCLUDE_DIR_${UPPERCOMP} X NAMES X ${HDRNAME} X HINTS X- ${header_hints} X /usr/include X /usr/local/include X /opt/local/include X@@ -65,11 +74,24 @@ foreach (comp ${CAF_FIND_COMPONENTS}) X if (CAF_ROOT_DIR) X set(library_hints "${CAF_ROOT_DIR}/lib") X endif () X+ # Find dynamic or static library X+ if (CAF_STATIC_ONLY) X+ set(library_name "caf_${comp}_static") X+ else () X+ set(library_name "caf_${comp}") X+ endif () X+ # give CAF_ROOT_DIR priority... X find_library(CAF_LIBRARY_${UPPERCOMP} X NAMES X- "caf_${comp}" X+ ${library_name} X HINTS X ${library_hints} X+ NO_DEFAULT_PATH) X+ # ...then look in default locations if not found yet X+ find_library(CAF_LIBRARY_${UPPERCOMP} X+ NAMES X+ ${library_name} X+ HINTS X /usr/lib X /usr/local/lib X /opt/local/lib 20f5d453ab7d3a31d4f92a1c8f643c7f echo x - files/pkg-message.in sed 's/^X//' >files/pkg-message.in << 'b685860b24bd9dff923847a1550a67f0' X********************PLEASE NOTE!!!*************************** X XDuring deinstall of this package, the cfg files for broctl Xare not deleted if you have edited them. Instead Xthe software will create a .sample file instead and the Xedited files will remain in place when you upgrade. If you Xwant to delete them, you have to delete them and the directory, X%%PREFIX%%/etc manually. X X********************PLEASE NOTE!!!*************************** b685860b24bd9dff923847a1550a67f0 echo x - files/bro.in sed 's/^X//' >files/bro.in << 'e022e0f413e2522fe3ad0f40e190f762' X#!/bin/sh X# X# $FreeBSD$ X# X X# PROVIDE: bro X# REQUIRE: NETWORKING X# REQUIRE: LOGIN FILESYSTEMS X# KEYWORD: shutdown X X. /etc/rc.subr X Xname="bro" Xrcvar=`set_rcvar` Xnode=$2 X Xstart_cmd="bro_start" Xstop_cmd="bro_stop" Xrestart_cmd="bro_restart" Xdeploy_cmd="bro_deploy" Xinstall_cmd="bro_install" Xcleanup_cmd="bro_cleanup" Xrestart_cmd="bro_restart" Xstatus_cmd="bro_status" X Xextra_commands="deploy install cleanup status restart" X X: ${broctl_program:=%%PREFIX%%/bin/broctl} X Xbro_enable=${bro_enable-"NO"} X Xbro_start() { X if [ ! "${node}" ]; X then X $broctl_program start X else X $broctl_program start $node X fi X} X Xbro_stop() { X if [ ! "${node}" ]; X then X $broctl_program stop X else X $broctl_program stop $node X fi X} X Xbro_restart() { X if [ ! "${node}" ]; X then X $broctl_program restart X else X $broctl_program restart $node X fi X} X Xbro_deploy() { X $broctl_program deploy X} X Xbro_install() { X $broctl_program install X} X Xbro_cleanup() { X if [ ! "${node}" ]; X then X $broctl_program cleanup X else X $broctl_program cleanup ${node} X fi X} X Xbro_status() { X $broctl_program status X} X Xload_rc_config $name Xrun_rc_command "$1" e022e0f413e2522fe3ad0f40e190f762 echo x - files/patch-aux_broker_CMakeLists.txt sed 's/^X//' >files/patch-aux_broker_CMakeLists.txt << '64eee11dec9296b10e4c8bea92910b63' X--- aux/broker/CMakeLists.txt.orig 2016-11-16 22:53:56 UTC X+++ aux/broker/CMakeLists.txt X@@ -2,7 +2,32 @@ project(broker C CXX) X cmake_minimum_required(VERSION 2.8) X include(cmake/CommonCMakeConfig.cmake) X X-find_package(CAF COMPONENTS core io REQUIRED) X+set(ENABLE_SHARED true) X+ X+if ( ENABLE_STATIC_ONLY ) X+ set(ENABLE_STATIC true) X+ set(ENABLE_SHARED false) X+endif () X+ X+if ( ENABLE_STATIC ) X+ set(CAF_STATIC_ONLY true) X+ find_package(CAF COMPONENTS core io REQUIRED) X+ set(LINK_CAF_STATIC ${CAF_LIBRARIES}) X+endif () X+if ( ENABLE_SHARED ) X+ unset(CAF_STATIC_ONLY CACHE) X+ unset(CAF_FOUND CACHE) X+ unset(CAF_LIBRARIES CACHE) X+ unset(CAF_LIBRARY_CORE CACHE) X+ unset(CAF_STATIC_ONLY) X+ unset(CAF_FOUND) X+ unset(CAF_LIBRARIES) X+ unset(CAF_LIBRARY_CORE) X+ unset(CAF_LIBRARY_IO) X+unset(CAF_LIBRARY_IO CACHE) X+ find_package(CAF COMPONENTS core io REQUIRED) X+ set(LINK_CAF_SHARED ${CAF_LIBRARIES}) X+endif () X X # Check for required CAF version. X set(CAF_VERSION_REQUIRED 0.14) X@@ -23,7 +48,6 @@ if ( ( CAF_VERSION VERSION_LESS ${CAF_VE X endif () X X include_directories(BEFORE ${CAF_INCLUDE_DIRS}) X-set(LINK_LIBS ${LINK_LIBS} ${CAF_LIBRARIES}) X X find_package(RocksDB) X X@@ -50,12 +74,6 @@ set(BROKER_VERSION X ${BROKER_VERSION_MAJOR}.${BROKER_VERSION_MINOR}.${BROKER_VERSION_PATCH}) X # The SO number shall increase only if binary interface changes. X set(BROKER_SOVERSION 0) X-set(ENABLE_SHARED true) X- X-if ( ENABLE_STATIC_ONLY ) X- set(ENABLE_STATIC true) X- set(ENABLE_SHARED false) X-endif () X X include(RequireCXX11) X X@@ -147,21 +165,23 @@ if ( ENABLE_SHARED ) X # MACOSX_RPATH). X INSTALL_NAME_DIR "@rpath" X OUTPUT_NAME broker) X- target_link_libraries(broker ${LINK_LIBS}) X+ target_link_libraries(broker ${LINK_LIBS} ${LINK_CAF_SHARED}) X install(TARGETS broker DESTINATION ${INSTALL_LIB_DIR}) X endif () X X if ( ENABLE_STATIC ) X add_library(brokerStatic STATIC ${BROKER_SRC}) X set_target_properties(brokerStatic PROPERTIES OUTPUT_NAME broker) X- target_link_libraries(brokerStatic ${LINK_LIBS}) X+ target_link_libraries(brokerStatic ${LINK_LIBS} ${LINK_CAF_STATIC}) X install(TARGETS brokerStatic DESTINATION ${INSTALL_LIB_DIR}) X endif () X X add_subdirectory(bindings) X X-enable_testing() X-add_subdirectory(tests) X+if ( !ENABLE_SHARED ) X+ enable_testing() X+ add_subdirectory(tests) X+endif () X X string(TOUPPER ${CMAKE_BUILD_TYPE} BuildType) X 64eee11dec9296b10e4c8bea92910b63 echo x - pkg-descr sed 's/^X//' >pkg-descr << '7f9555c3c1089940396b503dd37f3979' XBro is an open-source, Unix-based Network Intrusion Detection System (NIDS) Xthat passively monitors network traffic and looks for suspicious activity. XBro detects intrusions by first parsing network traffic to extract its Xapplication-level semantics and then executing event-oriented analyzers that Xcompare the activity with patterns deemed troublesome. Its analysis includes Xdetection of specific attacks (including those defined by signatures, but Xalso those defined in terms of events) and unusual activities (e.g., certain Xhosts connecting to certain services, or patterns of failed connection Xattempts). X XBro is documented in the USENIX 1998 Security Conference proceedings. X XWWW: http://www.bro.org/ 7f9555c3c1089940396b503dd37f3979 echo x - pkg-plist sed 's/^X//' >pkg-plist << '842cde48cf18b70a11b15515ca566742' X@postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs X%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool X%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp X%%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch Xbin/bro Xbin/bro-config Xbin/bro-cut X%%BROCTL%%bin/broctl X%%BROCTL%%bin/capstats X%%BROCTL%%bin/trace-summary X%%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi X%%BROCTL%%etc/broctl.cfg.example X%%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi X%%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi X%%BROCTL%%etc/networks.cfg.example X%%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi X%%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi X%%BROCTL%%etc/node.cfg.example X%%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi X%%BROKER%%include/broker/address.hh X%%BROKER%%include/broker/broker.h X%%BROKER%%include/broker/broker.hh X%%BROKER%%include/broker/data.hh X%%BROKER%%include/broker/endpoint.hh X%%BROKER%%include/broker/enum_value.hh X%%BROKER%%include/broker/incoming_connection_status.hh X%%BROKER%%include/broker/message.hh X%%BROKER%%include/broker/message_queue.hh X%%BROKER%%include/broker/outgoing_connection_status.hh X%%BROKER%%include/broker/peering.hh X%%BROKER%%include/broker/port.hh X%%BROKER%%include/broker/queue.hh X%%BROKER%%include/broker/report.hh X%%BROKER%%include/broker/store/backend.hh X%%BROKER%%include/broker/store/clone.hh X%%BROKER%%include/broker/store/expiration_time.hh X%%BROKER%%include/broker/store/frontend.hh X%%BROKER%%include/broker/store/identifier.hh X%%BROKER%%include/broker/store/master.hh X%%BROKER%%include/broker/store/memory_backend.hh X%%BROKER%%include/broker/store/query.hh X%%BROKER%%include/broker/store/response.hh X%%BROKER%%include/broker/store/result.hh X%%BROKER%%include/broker/store/rocksdb_backend.hh X%%BROKER%%include/broker/store/sequence_num.hh X%%BROKER%%include/broker/store/snapshot.hh X%%BROKER%%include/broker/store/sqlite_backend.hh X%%BROKER%%include/broker/store/value.hh X%%BROKER%%include/broker/subnet.hh X%%BROKER%%include/broker/time_duration.hh X%%BROKER%%include/broker/time_point.hh X%%BROKER%%include/broker/topic.hh X%%BROKER%%include/broker/util/hash.hh X%%BROKER%%include/broker/util/meta.hh X%%BROKER%%include/broker/util/none.hh X%%BROKER%%include/broker/util/operators.hh X%%BROKER%%include/broker/util/optional.hh X%%BROKER%%include/broker/util/variant.hh X%%BROCTL%%lib/broctl/BroControl/__init__.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/__init__.pyc X%%BROCTL%%lib/broctl/BroControl/brocmd.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/brocmd.pyc X%%BROCTL%%lib/broctl/BroControl/broctl.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/broctl.pyc X%%BROCTL%%lib/broctl/BroControl/cmdresult.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc X%%BROCTL%%lib/broctl/BroControl/config.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/config.pyc X%%BROCTL%%lib/broctl/BroControl/control.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/control.pyc X%%BROCTL%%lib/broctl/BroControl/cron.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cron.pyc X%%BROCTL%%lib/broctl/BroControl/doc.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/doc.pyc X%%BROCTL%%lib/broctl/BroControl/events.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/events.pyc X%%BROCTL%%lib/broctl/BroControl/exceptions.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/exceptions.pyc X%%BROCTL%%lib/broctl/BroControl/execute.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/execute.pyc X%%BROCTL%%lib/broctl/BroControl/install.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/install.pyc X%%BROCTL%%lib/broctl/BroControl/lock.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/lock.pyc X%%BROCTL%%lib/broctl/BroControl/node.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/node.pyc X%%BROCTL%%lib/broctl/BroControl/options.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/options.pyc X%%BROCTL%%lib/broctl/BroControl/plugin.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/plugin.pyc X%%BROCTL%%lib/broctl/BroControl/pluginreg.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc X%%BROCTL%%lib/broctl/BroControl/printdoc.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/printdoc.pyc X%%BROCTL%%lib/broctl/BroControl/py3bro.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/py3bro.pyc X%%BROCTL%%lib/broctl/BroControl/ssh_runner.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc X%%BROCTL%%lib/broctl/BroControl/state.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/state.pyc X%%BROCTL%%lib/broctl/BroControl/util.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/util.pyc X%%BROCTL%%lib/broctl/BroControl/utilcurses.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc X%%BROCTL%%lib/broctl/BroControl/version.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/version.pyc X%%BROCTL%%lib/broctl/SubnetTree.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/SubnetTree.pyc X%%BROCTL%%lib/broctl/_SubnetTree.so X%%BROCTL%%lib/broctl/_pybroker.so X%%BROCTL%%lib/broctl/plugins/TestPlugin.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc X%%BROCTL%%lib/broctl/plugins/lb_custom.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_custom.pyc X%%BROCTL%%lib/broctl/plugins/lb_myricom.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc X%%BROCTL%%lib/broctl/plugins/lb_pf_ring.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc X%%BROCTL%%lib/broctl/plugins/ps.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/ps.pyc X%%BROCTL%%lib/broctl/pybroker.py X%%BROCTL%%@preunexec rm -f %D/lib/broctl/pybroker.pyc X%%BROKER%%lib/libbroker.so X%%BROKER%%lib/libbroker.so.0 X%%BROKER%%lib/libbroker.so.0.7.0 Xman/man1/bro-cut.1.gz Xman/man1/trace-summary.1.gz Xman/man8/bro.8.gz X%%BROCTL%%man/man8/broctl.8.gz X%%DATADIR%%/base/bif/__load__.bro X%%DATADIR%%/base/bif/analyzer.bif.bro X%%DATADIR%%/base/bif/bloom-filter.bif.bro X%%DATADIR%%/base/bif/bro.bif.bro X%%DATADIR%%/base/bif/broxygen.bif.bro X%%DATADIR%%/base/bif/cardinality-counter.bif.bro X%%DATADIR%%/base/bif/comm.bif.bro X%%DATADIR%%/base/bif/const.bif.bro X%%DATADIR%%/base/bif/data.bif.bro X%%DATADIR%%/base/bif/event.bif.bro X%%DATADIR%%/base/bif/file_analysis.bif.bro X%%DATADIR%%/base/bif/input.bif.bro X%%DATADIR%%/base/bif/logging.bif.bro X%%DATADIR%%/base/bif/messaging.bif.bro X%%DATADIR%%/base/bif/pcap.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.consts.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FileEntropy.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_GSSAPI.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_IMAP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NTLM.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NTLM.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RFB.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.consts.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_check_directory.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_close.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_create_directory.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_echo.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_negotiate.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_cancel.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_create_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_query_information.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_read_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_session_setup_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_connect_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_write_andx.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_close.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_session_setup.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_set_info.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_connect.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_disconnect.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_write.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMB.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SSL.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SSL.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro X%%DATADIR%%/base/bif/plugins/Bro_XMPP.events.bif.bro X%%DATADIR%%/base/bif/plugins/__load__.bro X%%DATADIR%%/base/bif/reporter.bif.bro X%%DATADIR%%/base/bif/stats.bif.bro X%%DATADIR%%/base/bif/store.bif.bro X%%DATADIR%%/base/bif/strings.bif.bro X%%DATADIR%%/base/bif/top-k.bif.bro X%%DATADIR%%/base/bif/types.bif.bro X%%DATADIR%%/base/files/extract/__load__.bro X%%DATADIR%%/base/files/extract/main.bro X%%DATADIR%%/base/files/hash/__load__.bro X%%DATADIR%%/base/files/hash/main.bro X%%DATADIR%%/base/files/pe/__load__.bro X%%DATADIR%%/base/files/pe/consts.bro X%%DATADIR%%/base/files/pe/main.bro X%%DATADIR%%/base/files/unified2/__load__.bro X%%DATADIR%%/base/files/unified2/main.bro X%%DATADIR%%/base/files/x509/__load__.bro X%%DATADIR%%/base/files/x509/main.bro X%%DATADIR%%/base/frameworks/analyzer/__load__.bro X%%DATADIR%%/base/frameworks/analyzer/main.bro X%%DATADIR%%/base/frameworks/broker/__load__.bro X%%DATADIR%%/base/frameworks/broker/main.bro X%%DATADIR%%/base/frameworks/broker/store.bro X%%DATADIR%%/base/frameworks/cluster/__load__.bro X%%DATADIR%%/base/frameworks/cluster/main.bro X%%DATADIR%%/base/frameworks/cluster/nodes/logger.bro X%%DATADIR%%/base/frameworks/cluster/nodes/manager.bro X%%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro X%%DATADIR%%/base/frameworks/cluster/nodes/worker.bro X%%DATADIR%%/base/frameworks/cluster/setup-connections.bro X%%DATADIR%%/base/frameworks/communication/__load__.bro X%%DATADIR%%/base/frameworks/communication/main.bro X%%DATADIR%%/base/frameworks/control/__load__.bro X%%DATADIR%%/base/frameworks/control/main.bro X%%DATADIR%%/base/frameworks/dpd/__load__.bro X%%DATADIR%%/base/frameworks/dpd/main.bro X%%DATADIR%%/base/frameworks/files/__load__.bro X%%DATADIR%%/base/frameworks/files/magic/__load__.bro X%%DATADIR%%/base/frameworks/files/magic/archive.sig X%%DATADIR%%/base/frameworks/files/magic/audio.sig X%%DATADIR%%/base/frameworks/files/magic/font.sig X%%DATADIR%%/base/frameworks/files/magic/general.sig X%%DATADIR%%/base/frameworks/files/magic/image.sig X%%DATADIR%%/base/frameworks/files/magic/libmagic.sig X%%DATADIR%%/base/frameworks/files/magic/msoffice.sig X%%DATADIR%%/base/frameworks/files/magic/video.sig X%%DATADIR%%/base/frameworks/files/main.bro X%%DATADIR%%/base/frameworks/input/__load__.bro X%%DATADIR%%/base/frameworks/input/main.bro X%%DATADIR%%/base/frameworks/input/readers/ascii.bro X%%DATADIR%%/base/frameworks/input/readers/benchmark.bro X%%DATADIR%%/base/frameworks/input/readers/binary.bro X%%DATADIR%%/base/frameworks/input/readers/raw.bro X%%DATADIR%%/base/frameworks/input/readers/sqlite.bro X%%DATADIR%%/base/frameworks/intel/__load__.bro X%%DATADIR%%/base/frameworks/intel/cluster.bro X%%DATADIR%%/base/frameworks/intel/files.bro X%%DATADIR%%/base/frameworks/intel/input.bro X%%DATADIR%%/base/frameworks/intel/main.bro X%%DATADIR%%/base/frameworks/logging/__load__.bro X%%DATADIR%%/base/frameworks/logging/main.bro X%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro X%%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro X%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro X%%DATADIR%%/base/frameworks/logging/writers/ascii.bro X%%DATADIR%%/base/frameworks/logging/writers/none.bro X%%DATADIR%%/base/frameworks/logging/writers/sqlite.bro X%%DATADIR%%/base/frameworks/netcontrol/__load__.bro X%%DATADIR%%/base/frameworks/netcontrol/catch-and-release.bro X%%DATADIR%%/base/frameworks/netcontrol/cluster.bro X%%DATADIR%%/base/frameworks/netcontrol/drop.bro X%%DATADIR%%/base/frameworks/netcontrol/main.bro X%%DATADIR%%/base/frameworks/netcontrol/non-cluster.bro X%%DATADIR%%/base/frameworks/netcontrol/plugin.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.bro X%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.bro X%%DATADIR%%/base/frameworks/netcontrol/shunt.bro X%%DATADIR%%/base/frameworks/netcontrol/types.bro X%%DATADIR%%/base/frameworks/notice/__load__.bro X%%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro X%%DATADIR%%/base/frameworks/notice/actions/drop.bro X%%DATADIR%%/base/frameworks/notice/actions/email_admin.bro X%%DATADIR%%/base/frameworks/notice/actions/page.bro X%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro X%%DATADIR%%/base/frameworks/notice/cluster.bro X%%DATADIR%%/base/frameworks/notice/extend-email/hostnames.bro X%%DATADIR%%/base/frameworks/notice/main.bro X%%DATADIR%%/base/frameworks/notice/non-cluster.bro X%%DATADIR%%/base/frameworks/notice/weird.bro X%%DATADIR%%/base/frameworks/openflow/__load__.bro X%%DATADIR%%/base/frameworks/openflow/cluster.bro X%%DATADIR%%/base/frameworks/openflow/consts.bro X%%DATADIR%%/base/frameworks/openflow/main.bro X%%DATADIR%%/base/frameworks/openflow/non-cluster.bro X%%DATADIR%%/base/frameworks/openflow/plugins/__load__.bro X%%DATADIR%%/base/frameworks/openflow/plugins/broker.bro X%%DATADIR%%/base/frameworks/openflow/plugins/log.bro X%%DATADIR%%/base/frameworks/openflow/plugins/ryu.bro X%%DATADIR%%/base/frameworks/openflow/types.bro X%%DATADIR%%/base/frameworks/packet-filter/__load__.bro X%%DATADIR%%/base/frameworks/packet-filter/cluster.bro X%%DATADIR%%/base/frameworks/packet-filter/main.bro X%%DATADIR%%/base/frameworks/packet-filter/netstats.bro X%%DATADIR%%/base/frameworks/packet-filter/utils.bro X%%DATADIR%%/base/frameworks/reporter/__load__.bro X%%DATADIR%%/base/frameworks/reporter/main.bro X%%DATADIR%%/base/frameworks/signatures/__load__.bro X%%DATADIR%%/base/frameworks/signatures/main.bro X%%DATADIR%%/base/frameworks/software/__load__.bro X%%DATADIR%%/base/frameworks/software/main.bro X%%DATADIR%%/base/frameworks/sumstats/__load__.bro X%%DATADIR%%/base/frameworks/sumstats/cluster.bro X%%DATADIR%%/base/frameworks/sumstats/main.bro X%%DATADIR%%/base/frameworks/sumstats/non-cluster.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/average.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/last.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/max.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/min.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro X%%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro X%%DATADIR%%/base/frameworks/tunnels/__load__.bro X%%DATADIR%%/base/frameworks/tunnels/main.bro X%%DATADIR%%/base/init-bare.bro X%%DATADIR%%/base/init-default.bro X%%DATADIR%%/base/misc/find-checksum-offloading.bro X%%DATADIR%%/base/misc/find-filtered-trace.bro X%%DATADIR%%/base/misc/p0f.fp X%%DATADIR%%/base/misc/version.bro X%%DATADIR%%/base/protocols/conn/__load__.bro X%%DATADIR%%/base/protocols/conn/contents.bro X%%DATADIR%%/base/protocols/conn/inactivity.bro X%%DATADIR%%/base/protocols/conn/main.bro X%%DATADIR%%/base/protocols/conn/polling.bro X%%DATADIR%%/base/protocols/conn/thresholds.bro X%%DATADIR%%/base/protocols/dce-rpc/__load__.bro X%%DATADIR%%/base/protocols/dce-rpc/consts.bro X%%DATADIR%%/base/protocols/dce-rpc/dpd.sig X%%DATADIR%%/base/protocols/dce-rpc/main.bro X%%DATADIR%%/base/protocols/dhcp/__load__.bro X%%DATADIR%%/base/protocols/dhcp/consts.bro X%%DATADIR%%/base/protocols/dhcp/dpd.sig X%%DATADIR%%/base/protocols/dhcp/main.bro X%%DATADIR%%/base/protocols/dhcp/utils.bro X%%DATADIR%%/base/protocols/dnp3/__load__.bro X%%DATADIR%%/base/protocols/dnp3/consts.bro X%%DATADIR%%/base/protocols/dnp3/dpd.sig X%%DATADIR%%/base/protocols/dnp3/main.bro X%%DATADIR%%/base/protocols/dns/__load__.bro X%%DATADIR%%/base/protocols/dns/consts.bro X%%DATADIR%%/base/protocols/dns/main.bro X%%DATADIR%%/base/protocols/ftp/__load__.bro X%%DATADIR%%/base/protocols/ftp/dpd.sig X%%DATADIR%%/base/protocols/ftp/files.bro X%%DATADIR%%/base/protocols/ftp/gridftp.bro X%%DATADIR%%/base/protocols/ftp/info.bro X%%DATADIR%%/base/protocols/ftp/main.bro X%%DATADIR%%/base/protocols/ftp/utils-commands.bro X%%DATADIR%%/base/protocols/ftp/utils.bro X%%DATADIR%%/base/protocols/http/__load__.bro X%%DATADIR%%/base/protocols/http/dpd.sig X%%DATADIR%%/base/protocols/http/entities.bro X%%DATADIR%%/base/protocols/http/files.bro X%%DATADIR%%/base/protocols/http/main.bro X%%DATADIR%%/base/protocols/http/utils.bro X%%DATADIR%%/base/protocols/imap/__load__.bro X%%DATADIR%%/base/protocols/imap/main.bro X%%DATADIR%%/base/protocols/irc/__load__.bro X%%DATADIR%%/base/protocols/irc/dcc-send.bro X%%DATADIR%%/base/protocols/irc/dpd.sig X%%DATADIR%%/base/protocols/irc/files.bro X%%DATADIR%%/base/protocols/irc/main.bro X%%DATADIR%%/base/protocols/krb/__load__.bro X%%DATADIR%%/base/protocols/krb/consts.bro X%%DATADIR%%/base/protocols/krb/dpd.sig X%%DATADIR%%/base/protocols/krb/files.bro X%%DATADIR%%/base/protocols/krb/main.bro X%%DATADIR%%/base/protocols/modbus/__load__.bro X%%DATADIR%%/base/protocols/modbus/consts.bro X%%DATADIR%%/base/protocols/modbus/main.bro X%%DATADIR%%/base/protocols/mysql/__load__.bro X%%DATADIR%%/base/protocols/mysql/consts.bro X%%DATADIR%%/base/protocols/mysql/main.bro X%%DATADIR%%/base/protocols/ntlm/__load__.bro X%%DATADIR%%/base/protocols/ntlm/main.bro X%%DATADIR%%/base/protocols/pop3/__load__.bro X%%DATADIR%%/base/protocols/pop3/dpd.sig X%%DATADIR%%/base/protocols/radius/__load__.bro X%%DATADIR%%/base/protocols/radius/consts.bro X%%DATADIR%%/base/protocols/radius/main.bro X%%DATADIR%%/base/protocols/rdp/__load__.bro X%%DATADIR%%/base/protocols/rdp/consts.bro X%%DATADIR%%/base/protocols/rdp/dpd.sig X%%DATADIR%%/base/protocols/rdp/main.bro X%%DATADIR%%/base/protocols/rfb/__load__.bro X%%DATADIR%%/base/protocols/rfb/dpd.sig X%%DATADIR%%/base/protocols/rfb/main.bro X%%DATADIR%%/base/protocols/sip/__load__.bro X%%DATADIR%%/base/protocols/sip/dpd.sig X%%DATADIR%%/base/protocols/sip/main.bro X%%DATADIR%%/base/protocols/smb/__load__.bro X%%DATADIR%%/base/protocols/smb/const-dos-error.bro X%%DATADIR%%/base/protocols/smb/const-nt-status.bro X%%DATADIR%%/base/protocols/smb/consts.bro X%%DATADIR%%/base/protocols/smtp/__load__.bro X%%DATADIR%%/base/protocols/smtp/dpd.sig X%%DATADIR%%/base/protocols/smtp/entities.bro X%%DATADIR%%/base/protocols/smtp/files.bro X%%DATADIR%%/base/protocols/smtp/main.bro X%%DATADIR%%/base/protocols/snmp/__load__.bro X%%DATADIR%%/base/protocols/snmp/main.bro X%%DATADIR%%/base/protocols/socks/__load__.bro X%%DATADIR%%/base/protocols/socks/consts.bro X%%DATADIR%%/base/protocols/socks/dpd.sig X%%DATADIR%%/base/protocols/socks/main.bro X%%DATADIR%%/base/protocols/ssh/__load__.bro X%%DATADIR%%/base/protocols/ssh/dpd.sig X%%DATADIR%%/base/protocols/ssh/main.bro X%%DATADIR%%/base/protocols/ssl/__load__.bro X%%DATADIR%%/base/protocols/ssl/consts.bro X%%DATADIR%%/base/protocols/ssl/dpd.sig X%%DATADIR%%/base/protocols/ssl/files.bro X%%DATADIR%%/base/protocols/ssl/main.bro X%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro X%%DATADIR%%/base/protocols/syslog/__load__.bro X%%DATADIR%%/base/protocols/syslog/consts.bro X%%DATADIR%%/base/protocols/syslog/main.bro X%%DATADIR%%/base/protocols/tunnels/__load__.bro X%%DATADIR%%/base/protocols/tunnels/dpd.sig X%%DATADIR%%/base/protocols/xmpp/__load__.bro X%%DATADIR%%/base/protocols/xmpp/dpd.sig X%%DATADIR%%/base/protocols/xmpp/main.bro X%%DATADIR%%/base/utils/active-http.bro X%%DATADIR%%/base/utils/addrs.bro X%%DATADIR%%/base/utils/conn-ids.bro X%%DATADIR%%/base/utils/dir.bro X%%DATADIR%%/base/utils/directions-and-hosts.bro X%%DATADIR%%/base/utils/email.bro X%%DATADIR%%/base/utils/exec.bro X%%DATADIR%%/base/utils/files.bro X%%DATADIR%%/base/utils/geoip-distance.bro X%%DATADIR%%/base/utils/json.bro X%%DATADIR%%/base/utils/numbers.bro X%%DATADIR%%/base/utils/paths.bro X%%DATADIR%%/base/utils/patterns.bro X%%DATADIR%%/base/utils/queue.bro X%%DATADIR%%/base/utils/site.bro X%%DATADIR%%/base/utils/strings.bro X%%DATADIR%%/base/utils/thresholds.bro X%%DATADIR%%/base/utils/time.bro X%%DATADIR%%/base/utils/urls.bro X%%BROCTL%%%%DATADIR%%/broctl/__load__.bro X%%BROCTL%%%%DATADIR%%/broctl/auto.bro X%%BROCTL%%%%DATADIR%%/broctl/check.bro X%%BROCTL%%%%DATADIR%%/broctl/main.bro X%%BROCTL%%%%DATADIR%%/broctl/process-trace.bro X%%BROCTL%%%%DATADIR%%/broctl/standalone.bro X%%DATADIR%%/broxygen/__load__.bro X%%DATADIR%%/broxygen/example.bro X%%DATADIR%%/policy/frameworks/communication/listen.bro X%%DATADIR%%/policy/frameworks/control/controllee.bro X%%DATADIR%%/policy/frameworks/control/controller.bro X%%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro X%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro X%%DATADIR%%/policy/frameworks/files/detect-MHR.bro X%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.bro X%%DATADIR%%/policy/frameworks/files/extract-all-files.bro X%%DATADIR%%/policy/frameworks/files/hash-all-files.bro X%%DATADIR%%/policy/frameworks/intel/do_expire.bro X%%DATADIR%%/policy/frameworks/intel/do_notice.bro X%%DATADIR%%/policy/frameworks/intel/seen/__load__.bro X%%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro X%%DATADIR%%/policy/frameworks/intel/seen/dns.bro X%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro X%%DATADIR%%/policy/frameworks/intel/seen/file-names.bro X%%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro X%%DATADIR%%/policy/frameworks/intel/seen/http-url.bro X%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro X%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro X%%DATADIR%%/policy/frameworks/intel/seen/smtp.bro X%%DATADIR%%/policy/frameworks/intel/seen/ssl.bro X%%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro X%%DATADIR%%/policy/frameworks/intel/seen/x509.bro X%%DATADIR%%/policy/frameworks/intel/whitelist.bro X%%DATADIR%%/policy/frameworks/packet-filter/shunt.bro X%%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig X%%DATADIR%%/policy/frameworks/software/version-changes.bro X%%DATADIR%%/policy/frameworks/software/vulnerable.bro X%%DATADIR%%/policy/frameworks/software/windows-version-detection.bro X%%DATADIR%%/policy/integration/barnyard2/__load__.bro X%%DATADIR%%/policy/integration/barnyard2/main.bro X%%DATADIR%%/policy/integration/barnyard2/types.bro X%%DATADIR%%/policy/integration/collective-intel/__load__.bro X%%DATADIR%%/policy/integration/collective-intel/main.bro X%%DATADIR%%/policy/misc/capture-loss.bro X%%DATADIR%%/policy/misc/detect-traceroute/__load__.bro X%%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig X%%DATADIR%%/policy/misc/detect-traceroute/main.bro X%%DATADIR%%/policy/misc/dump-events.bro X%%DATADIR%%/policy/misc/known-devices.bro X%%DATADIR%%/policy/misc/load-balancing.bro X%%DATADIR%%/policy/misc/loaded-scripts.bro X%%DATADIR%%/policy/misc/profiling.bro X%%DATADIR%%/policy/misc/scan.bro X%%DATADIR%%/policy/misc/stats.bro X%%DATADIR%%/policy/misc/trim-trace-file.bro X%%DATADIR%%/policy/protocols/conn/known-hosts.bro X%%DATADIR%%/policy/protocols/conn/known-services.bro X%%DATADIR%%/policy/protocols/conn/mac-logging.bro X%%DATADIR%%/policy/protocols/conn/vlan-logging.bro X%%DATADIR%%/policy/protocols/conn/weirds.bro X%%DATADIR%%/policy/protocols/dhcp/known-devices-and-hostnames.bro X%%DATADIR%%/policy/protocols/dns/auth-addl.bro X%%DATADIR%%/policy/protocols/dns/detect-external-names.bro X%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro X%%DATADIR%%/policy/protocols/ftp/detect.bro X%%DATADIR%%/policy/protocols/ftp/software.bro X%%DATADIR%%/policy/protocols/http/detect-sqli.bro X%%DATADIR%%/policy/protocols/http/detect-webapps.bro X%%DATADIR%%/policy/protocols/http/detect-webapps.sig X%%DATADIR%%/policy/protocols/http/header-names.bro X%%DATADIR%%/policy/protocols/http/software-browser-plugins.bro X%%DATADIR%%/policy/protocols/http/software.bro X%%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro X%%DATADIR%%/policy/protocols/http/var-extraction-uri.bro X%%DATADIR%%/policy/protocols/krb/ticket-logging.bro X%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro X%%DATADIR%%/policy/protocols/modbus/track-memmap.bro X%%DATADIR%%/policy/protocols/mysql/software.bro X%%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro X%%DATADIR%%/policy/protocols/smb/__load__.bro X%%DATADIR%%/policy/protocols/smb/dpd.sig X%%DATADIR%%/policy/protocols/smb/files.bro X%%DATADIR%%/policy/protocols/smb/main.bro X%%DATADIR%%/policy/protocols/smb/smb1-main.bro X%%DATADIR%%/policy/protocols/smb/smb2-main.bro X%%DATADIR%%/policy/protocols/smtp/blocklists.bro X%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro X%%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro X%%DATADIR%%/policy/protocols/smtp/software.bro X%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro X%%DATADIR%%/policy/protocols/ssh/geo-data.bro X%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro X%%DATADIR%%/policy/protocols/ssh/software.bro X%%DATADIR%%/policy/protocols/ssl/expiring-certs.bro X%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro X%%DATADIR%%/policy/protocols/ssl/heartbleed.bro X%%DATADIR%%/policy/protocols/ssl/known-certs.bro X%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro X%%DATADIR%%/policy/protocols/ssl/notary.bro X%%DATADIR%%/policy/protocols/ssl/validate-certs.bro X%%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro X%%DATADIR%%/policy/protocols/ssl/weak-keys.bro X%%DATADIR%%/policy/tuning/__load__.bro X%%DATADIR%%/policy/tuning/defaults/__load__.bro X%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro X%%DATADIR%%/policy/tuning/defaults/packet-fragments.bro X%%DATADIR%%/policy/tuning/defaults/warnings.bro X%%DATADIR%%/policy/tuning/json-logs.bro X%%DATADIR%%/policy/tuning/track-all-assets.bro X%%DATADIR%%/site/local-logger.bro X%%DATADIR%%/site/local-manager.bro X%%DATADIR%%/site/local-proxy.bro X%%DATADIR%%/site/local-worker.bro X%%DATADIR%%/site/local.bro X%%BROCTL%%%%DATADIR%%ctl/scripts/archive-log X%%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh X%%BROCTL%%%%DATADIR%%ctl/scripts/check-config X%%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag X%%BROCTL%%%%DATADIR%%ctl/scripts/delete-log X%%BROCTL%%%%DATADIR%%ctl/scripts/expire-crash X%%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/get-childs X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk X%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top X%%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name X%%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate X%%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections X%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro X%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace X%%BROCTL%%%%DATADIR%%ctl/scripts/send-mail X%%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path X%%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv X%%BROCTL%%%%DATADIR%%ctl/scripts/update X%%BROCTL%%spool/broctl-config.sh X%%BROCTL%%@preunexec rm -f %D/logs/current X%%BROCTL%%@preunexec rm -f %D/spool/broctl.dat X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro X%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro X%%BROCTL%%@preunexec rm -f %D/spool/state.db X%%BROCTL%%@dir spool/tmp X%%BROCTL%%@dir spool/installed-scripts-do-not-touch/site X%%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto X%%BROCTL%%@dir spool/installed-scripts-do-not-touch X%%BROCTL%%@dir spool X%%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors X%%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers X%%BROCTL%%@dir %%DATADIR%%ctl/scripts X%%BROCTL%%@dir %%DATADIR%%ctl X@dir %%DATADIR%%/site X@dir %%DATADIR%%/policy/tuning/defaults X@dir %%DATADIR%%/policy/tuning X@dir %%DATADIR%%/policy/protocols/ssl X@dir %%DATADIR%%/policy/protocols/ssh X@dir %%DATADIR%%/policy/protocols/smtp X@dir %%DATADIR%%/policy/protocols/smb X@dir %%DATADIR%%/policy/protocols/rdp X@dir %%DATADIR%%/policy/protocols/mysql X@dir %%DATADIR%%/policy/protocols/modbus X@dir %%DATADIR%%/policy/protocols/krb X@dir %%DATADIR%%/policy/protocols/http X@dir %%DATADIR%%/policy/protocols/ftp X@dir %%DATADIR%%/policy/protocols/dns X@dir %%DATADIR%%/policy/protocols/dhcp X@dir %%DATADIR%%/policy/protocols/conn X@dir %%DATADIR%%/policy/protocols X@dir %%DATADIR%%/policy/misc/detect-traceroute X@dir %%DATADIR%%/policy/misc X@dir %%DATADIR%%/policy/integration/collective-intel X@dir %%DATADIR%%/policy/integration/barnyard2 X@dir %%DATADIR%%/policy/integration X@dir %%DATADIR%%/policy/frameworks/software X@dir %%DATADIR%%/policy/frameworks/signatures X@dir %%DATADIR%%/policy/frameworks/packet-filter X@dir %%DATADIR%%/policy/frameworks/intel/seen X@dir %%DATADIR%%/policy/frameworks/intel X@dir %%DATADIR%%/policy/frameworks/files X@dir %%DATADIR%%/policy/frameworks/dpd X@dir %%DATADIR%%/policy/frameworks/control X@dir %%DATADIR%%/policy/frameworks/communication X@dir %%DATADIR%%/policy/frameworks X@dir %%DATADIR%%/policy X@dir %%DATADIR%%/broxygen X%%BROCTL%%@dir %%DATADIR%%/broctl X@dir %%DATADIR%%/base/utils X@dir %%DATADIR%%/base/protocols/xmpp X@dir %%DATADIR%%/base/protocols/tunnels X@dir %%DATADIR%%/base/protocols/syslog X@dir %%DATADIR%%/base/protocols/ssl X@dir %%DATADIR%%/base/protocols/ssh X@dir %%DATADIR%%/base/protocols/socks X@dir %%DATADIR%%/base/protocols/snmp X@dir %%DATADIR%%/base/protocols/smtp X@dir %%DATADIR%%/base/protocols/smb X@dir %%DATADIR%%/base/protocols/sip X@dir %%DATADIR%%/base/protocols/rfb X@dir %%DATADIR%%/base/protocols/rdp X@dir %%DATADIR%%/base/protocols/radius X@dir %%DATADIR%%/base/protocols/pop3 X@dir %%DATADIR%%/base/protocols/ntlm X@dir %%DATADIR%%/base/protocols/mysql X@dir %%DATADIR%%/base/protocols/modbus X@dir %%DATADIR%%/base/protocols/krb X@dir %%DATADIR%%/base/protocols/irc X@dir %%DATADIR%%/base/protocols/imap X@dir %%DATADIR%%/base/protocols/http X@dir %%DATADIR%%/base/protocols/ftp X@dir %%DATADIR%%/base/protocols/dns X@dir %%DATADIR%%/base/protocols/dnp3 X@dir %%DATADIR%%/base/protocols/dhcp X@dir %%DATADIR%%/base/protocols/dce-rpc X@dir %%DATADIR%%/base/protocols/conn X@dir %%DATADIR%%/base/protocols X@dir %%DATADIR%%/base/misc X@dir %%DATADIR%%/base/frameworks/tunnels X@dir %%DATADIR%%/base/frameworks/sumstats/plugins X@dir %%DATADIR%%/base/frameworks/sumstats X@dir %%DATADIR%%/base/frameworks/software X@dir %%DATADIR%%/base/frameworks/signatures X@dir %%DATADIR%%/base/frameworks/reporter X@dir %%DATADIR%%/base/frameworks/packet-filter X@dir %%DATADIR%%/base/frameworks/openflow/plugins X@dir %%DATADIR%%/base/frameworks/openflow X@dir %%DATADIR%%/base/frameworks/notice/extend-email X@dir %%DATADIR%%/base/frameworks/notice/actions X@dir %%DATADIR%%/base/frameworks/notice X@dir %%DATADIR%%/base/frameworks/netcontrol/plugins X@dir %%DATADIR%%/base/frameworks/netcontrol X@dir %%DATADIR%%/base/frameworks/logging/writers X@dir %%DATADIR%%/base/frameworks/logging/postprocessors X@dir %%DATADIR%%/base/frameworks/logging X@dir %%DATADIR%%/base/frameworks/intel X@dir %%DATADIR%%/base/frameworks/input/readers X@dir %%DATADIR%%/base/frameworks/input X@dir %%DATADIR%%/base/frameworks/files/magic X@dir %%DATADIR%%/base/frameworks/files X@dir %%DATADIR%%/base/frameworks/dpd X@dir %%DATADIR%%/base/frameworks/control X@dir %%DATADIR%%/base/frameworks/communication X@dir %%DATADIR%%/base/frameworks/cluster/nodes X@dir %%DATADIR%%/base/frameworks/cluster X@dir %%DATADIR%%/base/frameworks/broker X@dir %%DATADIR%%/base/frameworks/analyzer X@dir %%DATADIR%%/base/frameworks X@dir %%DATADIR%%/base/files/x509 X@dir %%DATADIR%%/base/files/unified2 X@dir %%DATADIR%%/base/files/pe X@dir %%DATADIR%%/base/files/hash X@dir %%DATADIR%%/base/files/extract X@dir %%DATADIR%%/base/files X@dir %%DATADIR%%/base/bif/plugins X@dir %%DATADIR%%/base/bif X@dir %%DATADIR%%/base X@dir %%DATADIR%% X@dir logs X%%BROCTL%%@dir lib/broctl/plugins X%%BROCTL%%@dir lib/broctl/BroControl X%%BROCTL%%@dir lib/broctl X@dir lib/bro/plugins X%%BROCTL%%@postexec su -fm %%BROUSER%% -c '%D/bin/broctl install' 842cde48cf18b70a11b15515ca566742 exit