Bug 197937
| Summary: | security/suricata: Eve-log support: Make JSON a default option, package its configuration | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Antoine Brodin <antoine> | ||||
| Component: | Individual Port(s) | Assignee: | Antoine Brodin <antoine> | ||||
| Status: | Closed FIXED | ||||||
| Severity: | Affects Only Me | Keywords: | easy, patch, patch-ready | ||||
| Priority: | --- | Flags: | koobs:
maintainer-feedback+
|
||||
| Version: | Latest | ||||||
| Hardware: | Any | ||||||
| OS: | Any | ||||||
| Attachments: |
|
||||||
Auto-assigned to maintainer koobs@FreeBSD.org timeout??? Not quite, suricata recently released a new version. If you can include that in your patch, I can review and approve Are you aware of the 2 weeks timeout rule? I won't be able to get to a suricata update in the coming week. Over to you to commit Antoine, apologies for the delay. A commit references this bug: Author: antoine Date: Mon Apr 27 16:05:53 UTC 2015 New revision: 384861 URL: https://svnweb.freebsd.org/changeset/ports/384861 Log: - Add JSON to OPTIONS_DEFAULT to match default configuration where eve-log support is enabled - Package threshold.config configuration file PR: 197937 Approved by: koobs (maintainer) Changes: head/security/suricata/Makefile head/security/suricata/pkg-plist Committed, thanks. |
Created attachment 153340 [details] patch When launching suricata, I have those 2 warnings: 22/2/2015 -- 22:53:11 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/usr/local/etc/suricata//threshold.config": No such file or directory 22/2/2015 -- 22:53:11 - <Warning> - [ERRCODE: SC_ERR_NOT_SUPPORTED(225)] - Eve-log support not compiled in. Reconfigure/recompile with libjansson and its development files installed to add eve-log support. So I believe there are 2 problems: 1) The sample threshold.config is not packaged 2) Eve-log support is enabled in default configuration, but disabled in default options.