head 1.6; access; symbols pkgsrc-2013Q2:1.6.0.6 pkgsrc-2013Q2-base:1.6 pkgsrc-2012Q4:1.6.0.4 pkgsrc-2012Q4-base:1.6 pkgsrc-2011Q4:1.6.0.2 pkgsrc-2011Q4-base:1.6 pkgsrc-2011Q3:1.5.0.18 pkgsrc-2011Q3-base:1.5 pkgsrc-2011Q2:1.5.0.16 pkgsrc-2011Q2-base:1.5 pkgsrc-2011Q1:1.5.0.14 pkgsrc-2011Q1-base:1.5 pkgsrc-2010Q4:1.5.0.12 pkgsrc-2010Q4-base:1.5 pkgsrc-2010Q3:1.5.0.10 pkgsrc-2010Q3-base:1.5 pkgsrc-2010Q2:1.5.0.8 pkgsrc-2010Q2-base:1.5 pkgsrc-2010Q1:1.5.0.6 pkgsrc-2010Q1-base:1.5 pkgsrc-2009Q4:1.5.0.4 pkgsrc-2009Q4-base:1.5 pkgsrc-2009Q3:1.5.0.2 pkgsrc-2009Q3-base:1.5 pkgsrc-2009Q2:1.4.0.14 pkgsrc-2009Q2-base:1.4 pkgsrc-2009Q1:1.4.0.12 pkgsrc-2009Q1-base:1.4 pkgsrc-2008Q4:1.4.0.10 pkgsrc-2008Q4-base:1.4 pkgsrc-2008Q3:1.4.0.8 pkgsrc-2008Q3-base:1.4 cube-native-xorg:1.4.0.6 cube-native-xorg-base:1.4 pkgsrc-2008Q2:1.4.0.4 pkgsrc-2008Q2-base:1.4 cwrapper:1.4.0.2 pkgsrc-2008Q1:1.3.0.14 pkgsrc-2008Q1-base:1.3 pkgsrc-2007Q4:1.3.0.12 pkgsrc-2007Q4-base:1.3 pkgsrc-2007Q3:1.3.0.10 pkgsrc-2007Q3-base:1.3 pkgsrc-2007Q2:1.3.0.8 pkgsrc-2007Q2-base:1.3 pkgsrc-2007Q1:1.3.0.6 pkgsrc-2007Q1-base:1.3 pkgsrc-2006Q4:1.3.0.4 pkgsrc-2006Q4-base:1.3 pkgsrc-2006Q3:1.3.0.2 pkgsrc-2006Q3-base:1.3 pkgsrc-2006Q2:1.2.0.2 pkgsrc-2006Q2-base:1.2 pkgsrc-2006Q1:1.1.1.1.0.2 pkgsrc-2006Q1-base:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.6 date 2011.11.11.18.58.14; author joerg; state dead; branches; next 1.5; 1.5 date 2009.08.23.19.49.28; author hasso; state Exp; branches; next 1.4; 1.4 date 2008.04.28.10.54.08; author shannonjr; state Exp; branches; next 1.3; 1.3 date 2006.07.11.09.41.33; author shannonjr; state Exp; branches; next 1.2; 1.2 date 2006.05.22.11.49.51; author shannonjr; state Exp; branches; next 1.1; 1.1 date 2006.01.29.15.56.42; author shannonjr; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2006.01.29.15.56.42; author shannonjr; state Exp; branches; next ; desc @@ 1.6 log @Remove patch-aa, it's a nop. Remove MAKE_DIRS for an entry that also has MAKE_DIRS_PERMS. Add user-destdir support. @ text @$NetBSD: patch-aa,v 1.5 2009/08/23 19:49:28 hasso Exp $ --- configure.orig 2008-04-24 11:48:16.000000000 -0600 +++ configure @@@@ -34815,6 +34815,8 @@@@ do case $ac_option in # Handling of the options. -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) + # Avoid regenerating for rechecks on pkgsrc + exit 0 ac_cs_recheck=: ;; --version | --versio | --versi | --vers | --ver | --ve | --v | -V ) $as_echo "$ac_cs_version"; exit ;; @ 1.5 log @Update to 0.9.15. Changes since 0.9.14: - Make the Prelude-LML UDP server IPv6 compatible. - Implement 'idmef-alter' and 'idmef-alter-force' option, alloing to include static values into IDMEF events generated using a given format. - New PPP/PPTPD/L2TP ruleset, by Alexander Afonyashin iname.com>, with slight modification from Pierre Chifflier inl.fr>. Close #340. - Fix CISCO VPN ruleset so that the 'Authentication rejected' rule will trigger even if the 'server' field does not contain a word (fix #328). - Remove dos-style end-of-lines (Closes #338) - Fixes possible off by one when parsing variable reference number, and remove un-needed check that would always evaluate to TRUE.Thanks Steve Grubb redhat.com> for reporting this problem (and running flexelint on the Prelude sources)! - Update for libtool 2.x compatibility. - This simplify the whole regular expression handling a lot, making the code much easier to read, and fixing potential problem with ovector assignement. This code should also improve performance by a small factor. - Change CISCO references urls to their new location, add CISCO ASA rule to handle discarded tcp or udp packets. - Various fixes and update. @ text @d1 1 a1 1 $NetBSD: patch-aa,v 1.4 2008/04/28 10:54:08 shannonjr Exp $ @ 1.4 log @Update to 0.9.12.2. Changes: - [rulesets]: Remove successful/failure keyword from classification (use IDMEF completion). Analyzer class sanitization. - [nagios] Handle Nagios V2 log entry (fix #283). - [spamassassin] Fix incorrect AdditionalData assignement. - New Suhosin ruleset, by Sebastien Tricaud - Fix invalid logfile inconsistency alert that could be triggered in a rare case, after a renaming detection. Alert improvement. - On logfile inconsistency alert, do not re-analyze the whole file. - Remove the 1024 bytes per PCRE reference limit. - Minor bug fixes, build system cleanup. @ text @d1 1 a1 1 $NetBSD$ a4 13 @@@@ -34206,10 +34206,10 @@@@ fi exec_prefix=$exec_prefix_save -configdir=$SYSCONFDIR/prelude-lml +configdir=$SYSCONFDIR prelude_lml_conf=$configdir/prelude-lml.conf regex_conf=$configdir/plugins.rules -metadata_dir=$LOCALSTATEDIR/lib/prelude-lml +metadata_dir=$LOCALSTATEDIR/prelude-lml plugindir=$LIBDIR/prelude-lml d13 1 a13 1 echo "$ac_cs_version"; exit ;; @ 1.3 log @Update to prelude-lml 0.9.6. Changes: - Fix a bug where some rules marked silent would trigger an alert. - Load Sonicwall and Spamassassin ruleset by default. - Fix rule syntax problem in Sonicwall ruleset. - Fix rule indexing problem in Squid ruleset. - Postfix rule consistency fix. @ text @d3 1 a3 1 --- configure.orig 2006-07-10 07:49:57.000000000 -0600 d5 2 a6 1 @@@@ -33038,10 +33038,10 @@@@ _ACEOF d9 2 a10 3 -configdir=$sysconfdir/prelude-lml +configdir=$sysconfdir d13 4 a16 4 -metadata_dir=$localstatedir/lib/prelude-lml +metadata_dir=$localstatedir/prelude-lml plugindir=$libdir/prelude-lml log_plugin_dir=$plugindir d18 1 a18 1 @@@@ -34549,6 +34549,8 @@@@ do @ 1.2 log @1) Update to 0.9.5 2) Changed permissions on plugins.rules and prelude-lml.conf so that prelude-lml can run unpriviledged 3) Changed confdir in configure so that plugins.rules and prelude-lml.conf are found. Changes in 0.9.5: - Experimental context support (ala SEC): we now handle multiline log matching. - Update PAX rules so that it use the new context feature. - Don't exit on statistics signal, improve statistics precision, make them easier to read. - Fix some problem with user & group options. - text-output argument is optional. - New experimental ruleset: Sonicwall and Spamassassin. These need to be manually hooked to pcre.rules if you plan to use them. - Fix FAM activation switches. @ text @d3 1 a3 1 --- configure.orig 2006-05-17 08:14:52.000000000 -0600 d5 1 a5 1 @@@@ -30584,10 +30584,10 @@@@ _ACEOF d18 3 a20 3 @@@@ -31971,6 +31971,8 @@@@ do _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF d25 2 a26 2 --version | --vers* | -V ) echo "$ac_cs_version"; exit 0 ;; @ 1.1 log @Initial revision @ text @d3 1 a3 1 --- configure.orig 2005-11-24 04:46:20.000000000 -0700 d5 6 a10 2 @@@@ -30610,7 +30610,7 @@@@ _ACEOF configdir=$sysconfdir/prelude-lml d18 9 @ 1.1.1.1 log @Prelude is a hybrid IDS consisting of multiple sensors, managers, and a display console. Prelude-lml is the log file analyzer. It scans system log files and generates IDMEF alerts to the prelude-manager based on signature rulesets. This is one of sever new Prelude packages. @ text @@