prelude-manager 0.9.14.2_4 security =9

Prelude Network Intrusion Detection System central logging point

There is no maintainer for this port.
Any concerns regarding this port should be directed to the FreeBSD Ports mailing list via ports@FreeBSD.org
Port Added: 18 Jun 2003 03:53:52

---

---

Prelude is a new innovative hybrid Intrusion Detection system designed 
to be very modular, distributed, rock solid and fast. 

The manager is the central logging point. It receives alerts from 
sensors and logs them using one or several plugins (the default logging 
being to a text file, but logging to a database is also possible - and 
recommended).

WWW: http://www.prelude-ids.org/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: devel/gmake, devel/autoconf262
Required Libraries: security/libprelude, security/gnutls, textproc/libxml2, security/libpreludedb

---

To install the port: cd /usr/ports/security/prelude-manager/ && make install clean
To add the package: pkg_add -r prelude-manager

---

Configuration Options

     No options to configure

---

Master Sites:

http://www.prelude-ids.com/download/releases/prelude-manager/

http://www.prelude-ids.com/download/releases/prelude-manager/old/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

Unbreak configure script

- Mark BROKEN: does not configure

Reported by:    pointyhat

Reset r.gruyters@snow.nl by request due to lack of time.

Feature safe:   yes

- Chase gnutls update

Reported by:    pointyhat
Feature safe:   yes

- Chase libprelude update

Feature safe:   yes

- Update to 0.9.14.2

PR:             131288
Submitted by:   Vladimir Korkodinov <viper at perm dot raid dot ru>
Approved by:    Robin Gruyters <r dot gruyters at snow dot nl> (maintainer)

Restore previous maintainer, now with his new email address.

Approved by:    wxs (diff not reviewed, ack'ed to commit)

- Chase libprelude update

Forgotten by:   beech
Reported by:    pointyhat

Reset r.gruyters@yirdis.nl: email address bounces.

- Flag broken, does not build with current lib

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Update to 0.9.12.1

PR:             123208
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Chase security/gnutls shlib version bump
- Add an entry to UPDATING

- Update to 0.9.10

Changelog prelude-manager-0.9.10:
- Make threshold act like a real threshold: pass every Nth events
  in the defined amount of seconds.
- Allow mixing Limit and Threshold.
- Do not share the tresholding hash accross thresholding plugin instance:
  previously, the shared hash would result in strange thresholding plugin
  behavior if you had several instance of thresholding loaded.
- Various bug fixes concerning plugin instance un-subscribtion
  (unsubscribtion of certain plugin was not triggered).

PR:             ports/117416
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.9.1
- bump libprelude library

Changelog prelude-manager:
- Fix for new libprelude (0.9.15) runtime warning.
- Add documentation for SQLite3 in the template configuration file
  (S??繅astien Tricaud <toady at gscore.org>).

PR:             ports/116108
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.9
- Fix error when changing ownership of spool directory

Changelog prelude-manager 0.9.9:
- Update configuration template, add documentation for Prelude
  generic TCP options.
- Implement modified patch from Pierre Chifflier <chifflier@inl.fr>
  to fix the example log path (fix #224).
- Move IDMEF message normalization in the scheduler, rather than
  doing it upon reception. This remove some load from the server
  and allow Prelude-Manager own IDMEF messages to go through the
  normalizer path.
- Implement heartbeat->analyzer normalization.
- Improve IPv4 / IPv6 address normalization.
  IPv4 mapped IPv6 addresses are now mapped back to IPv4.

Chase gnutls shared library version chase: adjust DEPENDS lines and
bump PORTREVISIONs.

- Update libprelude to 0.9.14.
- Update dependent ports accordingly.
- Bump PORTVERSION to force rebuild.

PR:             ports/112703
Submitted by:   Marcelo Araujo <araujo@FreeBSD.org>
Approved by:    stas (mentor)

- Update to 0.9.8
- Added user prelude with uid/gid 281

prelude-manager Changelog:
- Initial implementation of the 'thresholding' plugin, allowing you to
  suppress events after a certain limit/threshold.
- Filters hooking to a reporting plugin are now OR'ed instead of being
  AND'ed. AND is already possible by hooking filtering plugin one with
  another.
- Improved error reporting.
- Minor bug fixes.

PR:             112416
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.7.2

Changelog prelude-manager-0.9.7.2:
- Allow filtering plugins to hook others filters plugins.
- Update reporting code to latest specification for the SNMPService class.
- Warn about Un-handled command line arguments.
- Properly dump IDMEF-XML output (fix #186).
- Various bug fixes.

PR:             ports/110584
Submitted by:   maintainer (Robin Gruyters)

Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:    portmgr (erwin), erwin (mentor)

- update to 0.9.7.1;
- change variable WITH(OUT)_DB to WITH(OUT)_PRELUDEDB;
- delete the patch files/patch-xmlmod.c (merged upstream).

PR:             107986
Submitted by:   Robin Gruyters <r.gruyters at yirdis.nl> (maintainer)

- Chase security/gnutls update
- Add an entry to UPDATING
- Pet portlint(1) for some ports while I'm here

- Fix post installment for configuration files. (if not exists...)
- Bump PORTREVISION

PR:             ports/107081
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.7

Changelog prelude-manager-0.9.7:
- Fix a startup problem on system with different address of different family
  mapping to the same IP.
- Fix for system using the GnuLib poll replacement modules. The module was
  broken when used in conjunction with server socket.
- Various portability fixes (this release should compile and run on OSX out
  of the box).

PR:             ports/107010
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.11
- library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:             ports/104328
Submitted by:   maintainer (Robin Gruyters)
Approved by:    portmgr (pav)

- Update to 0.9.6.1

PR:             ports/104202
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.6

Changelog prelude-manager-0.9.6:
  - In case an IDMEF-Service object contain neither name or port
    attribute, set name to "unknown" in order to avoid IDMEF DTD
    validation issue.
  - Normalize analyzer(*).node.
  - Fix OpenBSD getaddrinfo() problem.

PR:             ports/102593
Submitted by:   maintainer (Robin Gruyters)

- Chase libpreludedb shlib version change.
- bump PORTREVISION

PR:             ports/102053
Submitted by:   maintainer (Robin Gruyters)

- Fix MASTER_SITES

Pointy hat to:  garga

Chase gnutls shlib version change.

- Update to 0.9.5
- Add dependency on gnutls
- Make libxml dependency optional

PR:             ports/98942
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Chase libprelude version
- Bump PORTREVISION

PR:             ports/96758, ports/96759, ports/96760
Submitted by:   maintainer

- Update to 0.9.4.1

PR:             ports/95614
Submitted by:   maintainer

- Chase libpreludedb version
- Bump PORTREVISION

PR:             ports/94994
Submitted by:   maintainer

- Fix rc.d startup script
- Bump PORTREVISION

PR:             ports/94902
Submitted by:   maintainer

* security/libprelude: [1]
  - Update to 0.9.7
  - Bump libprelude.so version

* security/libpreludedb: [2]
  - Update to 0.9.6
  - Chase libprelude.so version

* security/prelude-lml: [3]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

* security/prelude-manager: [4]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

PR:             ports/94402 [1], ports/94403 [2],
                ports/94404 [3], ports/94405 [4]
Submitted by:   maintainer [1] [2] [3] [4]

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

- Fix run-time linking problems of the Prelude ports by installing libtool
  archives (.la) files - switch to USE_LIBTOOL=libtool:15:inc
- Make libpreludedb dependency optional - introduce WITHOUT_DB knob
- Bump PORTREVISION

PR:             ports/93599
Submitted by:   Robin Gruyters (maintainer)

- Transfer maintainership of the Prelude ports to the submitter,
  who has kindly agreed to adopt them

PR:             ports/93386
Submitted by:   Robin Gruyters <r dot gruyters at yirdis dot nl>

- Update to 0.9.3
- Chase libprelude/libpreludedb shlib version bumps
- Add missing file to pkg-plist; use @dirrmtry; re-sort

- Chase libprelude version bump (.2 -> .4)
- Remove extra file from pkg-plist
- Bump PORTREVISION

- Chase libpreludedb shlib version bump
- Bump PORTREVISION

- Update to 0.9.1 (unbreak)

Prompted by:    edwin's script

- Add SHA256 checksums to my ports

BROKEN: Unfetchable

- Update to 0.9.0
- Database support options moved to separate security/libpreludedb port,
  which is has been added as dependency
- The port now uses GnuTLS instead of OpenSSL (indirectly, via libprelude
  dependency)
- Convert to USE_AUTOTOOLS

- Take maintainership

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

Split the postgresql ports into a server and a client part.

All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.

PR:             75344
Approved by:    portmgr@ (kris), ade & sean (mentors)

Remove databases/postgresql-client because there can't be a -server, and having
it installed prevents databases/postgresql7 from being installed, leading to
some dependencies problems

- Use CONFIGURE_TARGET instead of --program-prefix=""

Reminded by:    -ports@ discussion

- Drop maintainership

- SIZEify distinfo

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

- Update my email address

Approved and reviewed by:    erwin (mentor)

libprelude
- update to 0.8.10
- use NOPORTDOCS
prelude-lml
- chase shlib version, bump portrevision
prelude-manager
- update to 0.8.10
prelude-nids
- update to 0.8.6

PR:             ports/60113
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org> (maintainer)

PR:             58388
Submitted by:   maintainer, Clement Laforet <sheepkiller@cultdeadsheep.org>
Update prelude-manager to 0.8.9

Update prelude ports to latest version:
libprelude: 0.8.5 -> 0.8.6
prelude-lml: 0.8.3 -> 0.8.4
prelude-manager: 0.8.7 -> 0.8.8
prelude-nids: 0.8.1 -> 0.8.3

PR:             57168
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

[update ports]: Use USE_MYSQL and USE_OPENLDAP in my ports

        www/mod_accounting [1]
        mail/perdition [2]
        security/prelude-manager [3]

PR:             ports/56026
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

* Add MySQL versionning hacks
* Set MySQL 4.0 to default

PR:             55043
Submitted by:   maintainer
Approved by:    fjoe (mentor) (implicit)

PR:             53014
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Add prelude-manager 0.8.7, System central logging point of prelude Network
Intrusion Detection.

prelude-manager : the manager is the central logging point. It receives
alerts from sensors and logs them using one or several plugins (the default
logging being to a text file, but logging to a database is also possible -
and recommended).

5 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities