The Prewikka frontend provides a means to query the Prelude database, aggregate
and filter events, and provides useful statistics about what's going on. It
provides a nice interface for the security analyst to see what's going on on
the monitored system.
WWW: http://www.prelude-ids.org/
===> The following configuration options are available for py27-prewikka-1.0.1p1_2:
NLS=on: Native Language Support
===> Use 'make config' to modify these settings
security/libprelude: Take MAINTAINER'ship, STAGE & Modernize
- Take Maintainership
- Enable STAGE support
- Tweak MASTER_SITES https -> http (portlint)
- Add LICENSE and LICENSE_FILE
- Deprecate USE_AUTOTOOLS for libtool (-> USES)
- Sort USES and OPTIONS
- Use OPTIONS helpers as much as possible for now [1]
- Add --enable-static to CONFIGURE_ARGS to retain the static lib
- Assign and Use ETCDIR rather than hardcoding
- Use the install-strip install target
- Update pkg-plist, use @sample and other goodies
While I'm here, bump dependent ports since our SHLIB major version has
changed
[1] https://reviews.freebsd.org/D665
Approved by: portmgr (implicit, bump unstaged port)
According to the Porter's Handbook (5.12.2.3.) default options must be added to
OPTIONS_DEFINE. This policy has been implemented only recently that's why we
have many ports violating this policy.
This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.
Approved by: portmgr (bapt)
Use setuptools for all Python ports.
Setuptools is the preferred method to manage Python distributions after
many changes to the packaging ecosystem over the past couple of years.
Only ports using USE_PYDISTUTILS= yes are affected by this commit, ports using
USE_PYDISTUTILS= easy_install remains the same however this usage is now
deprecated and should be converted to USE_PYDISTUTILS= yes.
Some Python distributions do not work with setuptools out of the box because
they extend the install command from distutils and not setuptools, and
so they need to be patched accordingly.
pip (which leverages setuptools) works around the issue by using eggs, however
we want to get rid of those as well, as support for "flat" installation is
(Only the first 15 lines of the commit message are shown above )
Update Prelude-IDS ports to 1.0.1 release
security/libprelude:
- Remove BROKEN, update to version 1.0.1 [1]
- Add missing deps, port requires pkg-config during build
security/libpreludedb:
- Update to version 1.0.1p1
- Add missing deps
- Make options deterministic and not dependent on what's installed
security/prelude-lml:
- Update to version 1.0.1
- Add missing deps, port requires pkg-config during build
- Convert to OptionsNG
(Only the first 15 lines of the commit message are shown above )
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
- Update to 0.9.13
Changelog:
- Only perform additional database request when using Sensor localtime:
this bring a performance improvement of about 36% on aggregated query,
when using either frontend localtime (the default), or UTC time.
- JQuery support: Port most of the javascript code to make use of
JQuery.
Add show/hide effect to CSS popup. More filtering functionality in the
SensorListing view.
- Cleanup the Authentication class, so that uper Prewikka layer can act
depending whether the backend support user creation / deletion.
Anonymous
authentication is nowa plugin.
- Better integration of CGI authentication allowing user listing and
deletion.
- Report template exception directly to the user.
(Only the first 15 lines of the commit message are shown above )
- Update to 0.9.12.1
Changelog prewikka 0.9.12.1:
- Implement an Auto-Refresh system (fix #231). (including code from
Paul Robert Marino <prmarino1@gmail.com>).
- Ability to filter on missing/offline/online/unknown agents. Make more
easier to read each agent status in collapsed mode.
- Fix filter load/save/delete issue with translation.
- New 'My account' tabs, under the Settings section (fix #241).
- New messageid and analyzerid parameters, allowing link to a Prewikka alert
from an external tool (previously required a database query in order to
retrieve the database event id).
- Don't redirect to user listing once an user preference are recorded. Fix
changing of another user language by an user with PERM_USER_MANAGEMENT.
Display target user language rather than current user language.
- Improve the timeline control table layout.
- Fix translation of string possibly using plural.
- Fix a template compilation problem with certain version of Cheetah
(Giandomenico De Tullio <ghisha at email.it>)
PR: ports/115234
Submitted by: maintainer (Robin Gruyters)
- Update to 0.9.11.2
Changelog Prewikka:
- In case a database schema upgrade is required, or the Prewikka
database does not exist, make the error available from the Prewikka
console, rather than exiting badly (which previously required the
user to parse its web server log in order to find out the problem).
- Fix Apache CGI authentication. (Robin Gruyters)
- Fix incorrect locale switch when accessing certain pages.
PR: 113116
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)
- Update to 0.9.9
Changlog:
- Improve database performance by reducing the number of query. (Paul Robert
Marino)
- Activate CleanOutput filtering (lot of escaping fixes).
- More action logging.
- Bug fixes with the error pages Back/Retry buttons.
- Fix error on group by user (#191).
- Fix template compilation error with Cheetah version 2 (#184).
PR: 108925
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)
- Update to 0.9.7
Changelog prewikka-0.9.7:
- Use preludedb_delete_(alert|heartbeat)_from_list(). Require
libpreludedb 0.9.9. Provide a deletion performance improvement
of around 3000%.
- Handle multiple listed source/target properly. Separate
source/target in the message listing.
- Make host command/Information link available from the Sensor
listing.
- Always take care of the "external_link_new_window" configuration
parameter.
- Make external command handling more generic. Allow to specify
command line arguments.
- Allow to define unlimited number of external commands rather than
only a defined subset (fix #134).
- Avoid toggling several popup at once in the HeartbeatListing.
- Only provide lookup capability for known network address type (fix #76).
- New address and node name lookup provided through prelude-ids.com service.
- Link to new prelude-ids.com port lookup instead of broken portsdb
database (fix #162).
- Various bug fixes.
PR: ports/102140
Submitted by: maintainer (Robin Gruyters)
Update to 0.9.6:
- CGI authentication module, from Tilman Baumann
<tilman.baumann@collax.com>.
- Correct libpreludedb runtime version check.
- Show multiple source/target in message listing/summary.
- Fix invalid use of socket.inet_ntoa() to read ICMP Gateway Address,
which is stored as string (#156).
- Fix aggregation on IDMEF-Path that are not string.
- Fix setup.py --root option (#166).
PR: ports/100961
Submitted by: Robin Gruyters (maintainer)
The Prewikka frontend provides a means to query the Prelude database, aggregate
and filter events, and provides useful statistics about what's going on. It
provides a nice interface for the security analyst to see what's going on on
the monitored system.
WWW: http://www.prelude-ids.org/
PR: ports/95996
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl>
