1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-26 05:02:18 +00:00

Bro is a system for detecting Network Intruders in real-time by the guys

that brought you tcpdump, libpcap, and flex.

Bro is documented in the the USENIX 1998 Security Conference proceedings.
This commit is contained in:
David E. O'Brien 1998-03-02 10:35:04 +00:00
parent bfcc72e16d
commit 260fc6e9e1
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=9991
5 changed files with 70 additions and 0 deletions

39
security/bro/Makefile Normal file
View File

@ -0,0 +1,39 @@
# ex:ts=8
# Ports collection makefile for: bro
# Version required: 0.3alpha
# Date created: Sat Feb 28, 1998
# Whom: David O'Brien (obrien@FreeBSD.org)
#
# $Id$
#
DISTNAME= vp-bro-0.3-alpha
PKGNAME= bro-0.3a
CATEGORIES= security net
MASTER_SITES= ftp://ee.lbl.gov/ \
ftp://ftp.nuxi.com/pub/misc/
MAINTAINER= obrien@NUXI.com
WRKSRC= ${WRKDIR}/bro-0.3
CONFIGURE_ARGS+= --libdir=${PREFIX}/share
GNU_CONFIGURE= yes
post-patch:
@${MV} ${WRKSRC}/util.cc ${WRKSRC}/util.cc.in
@${SED} -e "s|/usr/src/rtsg/bro/policy:/usr/local/lib/bro|${PREFIX}/share/bro|" \
${WRKSRC}/util.cc.in >${WRKSRC}/util.cc
pre-install:
@${MKDIR} ${PREFIX}/share/bro
post-install:
@strip ${PREFIX}/sbin/bro
@${INSTALL_DATA} ${WRKSRC}/policy/* ${PREFIX}/share/bro
.if !defined(NOPORTDOCS)
@${MKDIR} ${PREFIX}/share/doc/bro
${INSTALL_MAN} ${WRKSRC}/doc/bro-usenix98-revised.ps \
${PREFIX}/share/doc/bro
@${GZIP_CMD} ${PREFIX}/share/doc/bro/bro-usenix98-revised.ps
.endif
.include <bsd.port.mk>

1
security/bro/distinfo Normal file
View File

@ -0,0 +1 @@
MD5 (vp-bro-0.3-alpha.tar.gz) = ec573b765794d9396c53cff9d559e7d8

1
security/bro/pkg-comment Normal file
View File

@ -0,0 +1 @@
System for detecting Network Intruders in real-time

16
security/bro/pkg-descr Normal file
View File

@ -0,0 +1,16 @@
Bro is a system for detecting Network Intruders in real-time by the guys
that brought you tcpdump, libpcap, and flex.
Bro is a stand-alone system for detecting network intruders in real-time
by passively monitoring a network link over which the intruder's traffic
transits. Bro is divided into an "event engine" that reduces a
kernel-filtered network traffic stream into a series of higher-level
events, and a "policy script interpreter" that interprets event handlers
written in a specialized language used to express a site's security policy.
Event handlers can update state information, synthesize new events, record
information to disk, and generate real-time notifications via `syslog'.
Bro is documented in the the USENIX 1998 Security Conference proceedings.
-- David
obrien@cs.ucdavis.edu

13
security/bro/pkg-plist Normal file
View File

@ -0,0 +1,13 @@
sbin/bro
share/bro/bro.init
share/bro/dns.bro
share/bro/finger.bro
share/bro/ftp.bro
share/bro/hot.bro
share/bro/mt.bro
share/bro/port-name.bro
share/bro/portmapper.bro
share/bro/tcp.bro
share/bro/telnet.bro
share/bro/udp.bro
share/doc/bro/bro-usenix98-revised.ps.gz