summaryrefslogtreecommitdiff
path: root/security/bro/pkg-plist
blob: bf9d4dbd5ae49cd0eda23027361f6ed359072a22 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
@postexec chown %%BROUSER%%:%%BROGROUP%% %D/logs
%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool
%%BROCTL%%@postexec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp
%%BROCTL%%@postexec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch
bin/bro
bin/bro-config
bin/bro-cut
%%BROCTL%%bin/broctl
%%BROCTL%%bin/capstats
%%BROCTL%%bin/trace-summary
%%BROCTL%%@preunexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi
%%BROCTL%%etc/broctl.cfg.example
%%BROCTL%%@postexec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi
%%BROCTL%%@preunexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi
%%BROCTL%%etc/networks.cfg.example
%%BROCTL%%@postexec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi
%%BROCTL%%@preunexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi
%%BROCTL%%etc/node.cfg.example
%%BROCTL%%@postexec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi
%%BROKER%%include/broker/address.hh
%%BROKER%%include/broker/broker.h
%%BROKER%%include/broker/broker.hh
%%BROKER%%include/broker/data.hh
%%BROKER%%include/broker/endpoint.hh
%%BROKER%%include/broker/enum_value.hh
%%BROKER%%include/broker/incoming_connection_status.hh
%%BROKER%%include/broker/message.hh
%%BROKER%%include/broker/message_queue.hh
%%BROKER%%include/broker/outgoing_connection_status.hh
%%BROKER%%include/broker/peering.hh
%%BROKER%%include/broker/port.hh
%%BROKER%%include/broker/queue.hh
%%BROKER%%include/broker/report.hh
%%BROKER%%include/broker/store/backend.hh
%%BROKER%%include/broker/store/clone.hh
%%BROKER%%include/broker/store/expiration_time.hh
%%BROKER%%include/broker/store/frontend.hh
%%BROKER%%include/broker/store/identifier.hh
%%BROKER%%include/broker/store/master.hh
%%BROKER%%include/broker/store/memory_backend.hh
%%BROKER%%include/broker/store/query.hh
%%BROKER%%include/broker/store/response.hh
%%BROKER%%include/broker/store/result.hh
%%BROKER%%include/broker/store/rocksdb_backend.hh
%%BROKER%%include/broker/store/sequence_num.hh
%%BROKER%%include/broker/store/snapshot.hh
%%BROKER%%include/broker/store/sqlite_backend.hh
%%BROKER%%include/broker/store/value.hh
%%BROKER%%include/broker/subnet.hh
%%BROKER%%include/broker/time_duration.hh
%%BROKER%%include/broker/time_point.hh
%%BROKER%%include/broker/topic.hh
%%BROKER%%include/broker/util/hash.hh
%%BROKER%%include/broker/util/meta.hh
%%BROKER%%include/broker/util/none.hh
%%BROKER%%include/broker/util/operators.hh
%%BROKER%%include/broker/util/optional.hh
%%BROKER%%include/broker/util/variant.hh
%%NETMAP%%lib/bro/plugins/Bro_Netmap/COPYING
%%NETMAP%%lib/bro/plugins/Bro_Netmap/__bro_plugin__
%%NETMAP%%lib/bro/plugins/Bro_Netmap/broctl/netmap.py
%%NETMAP%%lib/bro/plugins/Bro_Netmap/lib/Bro-Netmap.%%LCASE_OPSYS%%-%%ARCH%%.so
%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/__load__.bro
%%NETMAP%%lib/bro/plugins/Bro_Netmap/scripts/init.bro
%%BROCTL%%lib/broctl/BroControl/__init__.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/__init__.pyc
%%BROCTL%%lib/broctl/BroControl/brocmd.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/brocmd.pyc
%%BROCTL%%lib/broctl/BroControl/broctl.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/broctl.pyc
%%BROCTL%%lib/broctl/BroControl/cmdresult.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc
%%BROCTL%%lib/broctl/BroControl/config.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/config.pyc
%%BROCTL%%lib/broctl/BroControl/control.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/control.pyc
%%BROCTL%%lib/broctl/BroControl/cron.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/cron.pyc
%%BROCTL%%lib/broctl/BroControl/doc.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/doc.pyc
%%BROCTL%%lib/broctl/BroControl/events.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/events.pyc
%%BROCTL%%lib/broctl/BroControl/exceptions.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/exceptions.pyc
%%BROCTL%%lib/broctl/BroControl/execute.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/execute.pyc
%%BROCTL%%lib/broctl/BroControl/install.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/install.pyc
%%BROCTL%%lib/broctl/BroControl/lock.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/lock.pyc
%%BROCTL%%lib/broctl/BroControl/node.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/node.pyc
%%BROCTL%%lib/broctl/BroControl/options.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/options.pyc
%%BROCTL%%lib/broctl/BroControl/plugin.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/plugin.pyc
%%BROCTL%%lib/broctl/BroControl/pluginreg.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc
%%BROCTL%%lib/broctl/BroControl/printdoc.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/printdoc.pyc
%%BROCTL%%lib/broctl/BroControl/py3bro.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/py3bro.pyc
%%BROCTL%%lib/broctl/BroControl/ssh_runner.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc
%%BROCTL%%lib/broctl/BroControl/state.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/state.pyc
%%BROCTL%%lib/broctl/BroControl/util.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/util.pyc
%%BROCTL%%lib/broctl/BroControl/utilcurses.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc
%%BROCTL%%lib/broctl/BroControl/version.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/BroControl/version.pyc
%%BROCTL%%lib/broctl/SubnetTree.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/SubnetTree.pyc
%%BROCTL%%lib/broctl/_SubnetTree.so
%%BROKER%%lib/broctl/_pybroker.so
%%BROCTL%%lib/broctl/plugins/TestPlugin.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc
%%BROCTL%%lib/broctl/plugins/lb_custom.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_custom.pyc
%%BROCTL%%lib/broctl/plugins/lb_myricom.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc
%%BROCTL%%lib/broctl/plugins/lb_pf_ring.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc
%%BROCTL%%lib/broctl/plugins/ps.py
%%BROCTL%%@preunexec rm -f %D/lib/broctl/plugins/ps.pyc
%%BROKER%%lib/broctl/pybroker.py
%%BROKER%%@preunexec rm -f %D/lib/broctl/pybroker.pyc
%%BROKER%%lib/libbroker.so
%%BROKER%%lib/libbroker.so.0
%%BROKER%%lib/libbroker.so.0.7.0
man/man1/bro-cut.1.gz
%%BROCTL%%man/man1/trace-summary.1.gz
man/man8/bro.8.gz
%%BROCTL%%man/man8/broctl.8.gz
%%DATADIR%%/base/bif/__load__.bro
%%DATADIR%%/base/bif/analyzer.bif.bro
%%DATADIR%%/base/bif/bloom-filter.bif.bro
%%DATADIR%%/base/bif/bro.bif.bro
%%DATADIR%%/base/bif/broxygen.bif.bro
%%DATADIR%%/base/bif/cardinality-counter.bif.bro
%%DATADIR%%/base/bif/comm.bif.bro
%%DATADIR%%/base/bif/const.bif.bro
%%DATADIR%%/base/bif/data.bif.bro
%%DATADIR%%/base/bif/event.bif.bro
%%DATADIR%%/base/bif/file_analysis.bif.bro
%%DATADIR%%/base/bif/input.bif.bro
%%DATADIR%%/base/bif/logging.bif.bro
%%DATADIR%%/base/bif/messaging.bif.bro
%%DATADIR%%/base/bif/pcap.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.consts.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FileEntropy.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_GSSAPI.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_IMAP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NCP.consts.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NTLM.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NTLM.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RFB.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.consts.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_check_directory.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_close.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_create_directory.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_echo.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_logoff_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_negotiate.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_cancel.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_nt_create_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_query_information.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_read_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_session_setup_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_transaction2.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_connect_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_tree_disconnect.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_com_write_andx.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb1_events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_close.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_create.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_negotiate.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_read.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_session_setup.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_set_info.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_connect.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_tree_disconnect.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_com_write.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.smb2_events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMB.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SSL.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SSL.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro
%%DATADIR%%/base/bif/plugins/Bro_XMPP.events.bif.bro
%%DATADIR%%/base/bif/plugins/__load__.bro
%%DATADIR%%/base/bif/reporter.bif.bro
%%DATADIR%%/base/bif/stats.bif.bro
%%DATADIR%%/base/bif/store.bif.bro
%%DATADIR%%/base/bif/strings.bif.bro
%%DATADIR%%/base/bif/top-k.bif.bro
%%DATADIR%%/base/bif/types.bif.bro
%%DATADIR%%/base/files/extract/__load__.bro
%%DATADIR%%/base/files/extract/main.bro
%%DATADIR%%/base/files/hash/__load__.bro
%%DATADIR%%/base/files/hash/main.bro
%%DATADIR%%/base/files/pe/__load__.bro
%%DATADIR%%/base/files/pe/consts.bro
%%DATADIR%%/base/files/pe/main.bro
%%DATADIR%%/base/files/unified2/__load__.bro
%%DATADIR%%/base/files/unified2/main.bro
%%DATADIR%%/base/files/x509/__load__.bro
%%DATADIR%%/base/files/x509/main.bro
%%DATADIR%%/base/frameworks/analyzer/__load__.bro
%%DATADIR%%/base/frameworks/analyzer/main.bro
%%DATADIR%%/base/frameworks/broker/__load__.bro
%%DATADIR%%/base/frameworks/broker/main.bro
%%DATADIR%%/base/frameworks/broker/store.bro
%%DATADIR%%/base/frameworks/cluster/__load__.bro
%%DATADIR%%/base/frameworks/cluster/main.bro
%%DATADIR%%/base/frameworks/cluster/nodes/logger.bro
%%DATADIR%%/base/frameworks/cluster/nodes/manager.bro
%%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro
%%DATADIR%%/base/frameworks/cluster/nodes/worker.bro
%%DATADIR%%/base/frameworks/cluster/setup-connections.bro
%%DATADIR%%/base/frameworks/communication/__load__.bro
%%DATADIR%%/base/frameworks/communication/main.bro
%%DATADIR%%/base/frameworks/control/__load__.bro
%%DATADIR%%/base/frameworks/control/main.bro
%%DATADIR%%/base/frameworks/dpd/__load__.bro
%%DATADIR%%/base/frameworks/dpd/main.bro
%%DATADIR%%/base/frameworks/files/__load__.bro
%%DATADIR%%/base/frameworks/files/magic/__load__.bro
%%DATADIR%%/base/frameworks/files/magic/archive.sig
%%DATADIR%%/base/frameworks/files/magic/audio.sig
%%DATADIR%%/base/frameworks/files/magic/font.sig
%%DATADIR%%/base/frameworks/files/magic/general.sig
%%DATADIR%%/base/frameworks/files/magic/image.sig
%%DATADIR%%/base/frameworks/files/magic/libmagic.sig
%%DATADIR%%/base/frameworks/files/magic/msoffice.sig
%%DATADIR%%/base/frameworks/files/magic/video.sig
%%DATADIR%%/base/frameworks/files/main.bro
%%DATADIR%%/base/frameworks/input/__load__.bro
%%DATADIR%%/base/frameworks/input/main.bro
%%DATADIR%%/base/frameworks/input/readers/ascii.bro
%%DATADIR%%/base/frameworks/input/readers/benchmark.bro
%%DATADIR%%/base/frameworks/input/readers/binary.bro
%%DATADIR%%/base/frameworks/input/readers/raw.bro
%%DATADIR%%/base/frameworks/input/readers/sqlite.bro
%%DATADIR%%/base/frameworks/intel/__load__.bro
%%DATADIR%%/base/frameworks/intel/cluster.bro
%%DATADIR%%/base/frameworks/intel/files.bro
%%DATADIR%%/base/frameworks/intel/input.bro
%%DATADIR%%/base/frameworks/intel/main.bro
%%DATADIR%%/base/frameworks/logging/__load__.bro
%%DATADIR%%/base/frameworks/logging/main.bro
%%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro
%%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro
%%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro
%%DATADIR%%/base/frameworks/logging/writers/ascii.bro
%%DATADIR%%/base/frameworks/logging/writers/none.bro
%%DATADIR%%/base/frameworks/logging/writers/sqlite.bro
%%DATADIR%%/base/frameworks/netcontrol/__load__.bro
%%DATADIR%%/base/frameworks/netcontrol/catch-and-release.bro
%%DATADIR%%/base/frameworks/netcontrol/cluster.bro
%%DATADIR%%/base/frameworks/netcontrol/drop.bro
%%DATADIR%%/base/frameworks/netcontrol/main.bro
%%DATADIR%%/base/frameworks/netcontrol/non-cluster.bro
%%DATADIR%%/base/frameworks/netcontrol/plugin.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/__load__.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/acld.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/broker.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/debug.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/openflow.bro
%%DATADIR%%/base/frameworks/netcontrol/plugins/packetfilter.bro
%%DATADIR%%/base/frameworks/netcontrol/shunt.bro
%%DATADIR%%/base/frameworks/netcontrol/types.bro
%%DATADIR%%/base/frameworks/notice/__load__.bro
%%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro
%%DATADIR%%/base/frameworks/notice/actions/drop.bro
%%DATADIR%%/base/frameworks/notice/actions/email_admin.bro
%%DATADIR%%/base/frameworks/notice/actions/page.bro
%%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro
%%DATADIR%%/base/frameworks/notice/cluster.bro
%%DATADIR%%/base/frameworks/notice/extend-email/hostnames.bro
%%DATADIR%%/base/frameworks/notice/main.bro
%%DATADIR%%/base/frameworks/notice/non-cluster.bro
%%DATADIR%%/base/frameworks/notice/weird.bro
%%DATADIR%%/base/frameworks/openflow/__load__.bro
%%DATADIR%%/base/frameworks/openflow/cluster.bro
%%DATADIR%%/base/frameworks/openflow/consts.bro
%%DATADIR%%/base/frameworks/openflow/main.bro
%%DATADIR%%/base/frameworks/openflow/non-cluster.bro
%%DATADIR%%/base/frameworks/openflow/plugins/__load__.bro
%%DATADIR%%/base/frameworks/openflow/plugins/broker.bro
%%DATADIR%%/base/frameworks/openflow/plugins/log.bro
%%DATADIR%%/base/frameworks/openflow/plugins/ryu.bro
%%DATADIR%%/base/frameworks/openflow/types.bro
%%DATADIR%%/base/frameworks/packet-filter/__load__.bro
%%DATADIR%%/base/frameworks/packet-filter/cluster.bro
%%DATADIR%%/base/frameworks/packet-filter/main.bro
%%DATADIR%%/base/frameworks/packet-filter/netstats.bro
%%DATADIR%%/base/frameworks/packet-filter/utils.bro
%%DATADIR%%/base/frameworks/reporter/__load__.bro
%%DATADIR%%/base/frameworks/reporter/main.bro
%%DATADIR%%/base/frameworks/signatures/__load__.bro
%%DATADIR%%/base/frameworks/signatures/main.bro
%%DATADIR%%/base/frameworks/software/__load__.bro
%%DATADIR%%/base/frameworks/software/main.bro
%%DATADIR%%/base/frameworks/sumstats/__load__.bro
%%DATADIR%%/base/frameworks/sumstats/cluster.bro
%%DATADIR%%/base/frameworks/sumstats/main.bro
%%DATADIR%%/base/frameworks/sumstats/non-cluster.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/average.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/last.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/max.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/min.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro
%%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro
%%DATADIR%%/base/frameworks/tunnels/__load__.bro
%%DATADIR%%/base/frameworks/tunnels/main.bro
%%DATADIR%%/base/init-bare.bro
%%DATADIR%%/base/init-default.bro
%%DATADIR%%/base/misc/find-checksum-offloading.bro
%%DATADIR%%/base/misc/find-filtered-trace.bro
%%DATADIR%%/base/misc/p0f.fp
%%DATADIR%%/base/misc/version.bro
%%DATADIR%%/base/protocols/conn/__load__.bro
%%DATADIR%%/base/protocols/conn/contents.bro
%%DATADIR%%/base/protocols/conn/inactivity.bro
%%DATADIR%%/base/protocols/conn/main.bro
%%DATADIR%%/base/protocols/conn/polling.bro
%%DATADIR%%/base/protocols/conn/thresholds.bro
%%DATADIR%%/base/protocols/dce-rpc/__load__.bro
%%DATADIR%%/base/protocols/dce-rpc/consts.bro
%%DATADIR%%/base/protocols/dce-rpc/dpd.sig
%%DATADIR%%/base/protocols/dce-rpc/main.bro
%%DATADIR%%/base/protocols/dhcp/__load__.bro
%%DATADIR%%/base/protocols/dhcp/consts.bro
%%DATADIR%%/base/protocols/dhcp/dpd.sig
%%DATADIR%%/base/protocols/dhcp/main.bro
%%DATADIR%%/base/protocols/dhcp/utils.bro
%%DATADIR%%/base/protocols/dnp3/__load__.bro
%%DATADIR%%/base/protocols/dnp3/consts.bro
%%DATADIR%%/base/protocols/dnp3/dpd.sig
%%DATADIR%%/base/protocols/dnp3/main.bro
%%DATADIR%%/base/protocols/dns/__load__.bro
%%DATADIR%%/base/protocols/dns/consts.bro
%%DATADIR%%/base/protocols/dns/main.bro
%%DATADIR%%/base/protocols/ftp/__load__.bro
%%DATADIR%%/base/protocols/ftp/dpd.sig
%%DATADIR%%/base/protocols/ftp/files.bro
%%DATADIR%%/base/protocols/ftp/gridftp.bro
%%DATADIR%%/base/protocols/ftp/info.bro
%%DATADIR%%/base/protocols/ftp/main.bro
%%DATADIR%%/base/protocols/ftp/utils-commands.bro
%%DATADIR%%/base/protocols/ftp/utils.bro
%%DATADIR%%/base/protocols/http/__load__.bro
%%DATADIR%%/base/protocols/http/dpd.sig
%%DATADIR%%/base/protocols/http/entities.bro
%%DATADIR%%/base/protocols/http/files.bro
%%DATADIR%%/base/protocols/http/main.bro
%%DATADIR%%/base/protocols/http/utils.bro
%%DATADIR%%/base/protocols/imap/__load__.bro
%%DATADIR%%/base/protocols/imap/main.bro
%%DATADIR%%/base/protocols/irc/__load__.bro
%%DATADIR%%/base/protocols/irc/dcc-send.bro
%%DATADIR%%/base/protocols/irc/dpd.sig
%%DATADIR%%/base/protocols/irc/files.bro
%%DATADIR%%/base/protocols/irc/main.bro
%%DATADIR%%/base/protocols/krb/__load__.bro
%%DATADIR%%/base/protocols/krb/consts.bro
%%DATADIR%%/base/protocols/krb/dpd.sig
%%DATADIR%%/base/protocols/krb/files.bro
%%DATADIR%%/base/protocols/krb/main.bro
%%DATADIR%%/base/protocols/modbus/__load__.bro
%%DATADIR%%/base/protocols/modbus/consts.bro
%%DATADIR%%/base/protocols/modbus/main.bro
%%DATADIR%%/base/protocols/mysql/__load__.bro
%%DATADIR%%/base/protocols/mysql/consts.bro
%%DATADIR%%/base/protocols/mysql/main.bro
%%DATADIR%%/base/protocols/ntlm/__load__.bro
%%DATADIR%%/base/protocols/ntlm/main.bro
%%DATADIR%%/base/protocols/pop3/__load__.bro
%%DATADIR%%/base/protocols/pop3/dpd.sig
%%DATADIR%%/base/protocols/radius/__load__.bro
%%DATADIR%%/base/protocols/radius/consts.bro
%%DATADIR%%/base/protocols/radius/main.bro
%%DATADIR%%/base/protocols/rdp/__load__.bro
%%DATADIR%%/base/protocols/rdp/consts.bro
%%DATADIR%%/base/protocols/rdp/dpd.sig
%%DATADIR%%/base/protocols/rdp/main.bro
%%DATADIR%%/base/protocols/rfb/__load__.bro
%%DATADIR%%/base/protocols/rfb/dpd.sig
%%DATADIR%%/base/protocols/rfb/main.bro
%%DATADIR%%/base/protocols/sip/__load__.bro
%%DATADIR%%/base/protocols/sip/dpd.sig
%%DATADIR%%/base/protocols/sip/main.bro
%%DATADIR%%/base/protocols/smb/__load__.bro
%%DATADIR%%/base/protocols/smb/const-dos-error.bro
%%DATADIR%%/base/protocols/smb/const-nt-status.bro
%%DATADIR%%/base/protocols/smb/consts.bro
%%DATADIR%%/base/protocols/smtp/__load__.bro
%%DATADIR%%/base/protocols/smtp/dpd.sig
%%DATADIR%%/base/protocols/smtp/entities.bro
%%DATADIR%%/base/protocols/smtp/files.bro
%%DATADIR%%/base/protocols/smtp/main.bro
%%DATADIR%%/base/protocols/snmp/__load__.bro
%%DATADIR%%/base/protocols/snmp/main.bro
%%DATADIR%%/base/protocols/socks/__load__.bro
%%DATADIR%%/base/protocols/socks/consts.bro
%%DATADIR%%/base/protocols/socks/dpd.sig
%%DATADIR%%/base/protocols/socks/main.bro
%%DATADIR%%/base/protocols/ssh/__load__.bro
%%DATADIR%%/base/protocols/ssh/dpd.sig
%%DATADIR%%/base/protocols/ssh/main.bro
%%DATADIR%%/base/protocols/ssl/__load__.bro
%%DATADIR%%/base/protocols/ssl/consts.bro
%%DATADIR%%/base/protocols/ssl/dpd.sig
%%DATADIR%%/base/protocols/ssl/files.bro
%%DATADIR%%/base/protocols/ssl/main.bro
%%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro
%%DATADIR%%/base/protocols/syslog/__load__.bro
%%DATADIR%%/base/protocols/syslog/consts.bro
%%DATADIR%%/base/protocols/syslog/main.bro
%%DATADIR%%/base/protocols/tunnels/__load__.bro
%%DATADIR%%/base/protocols/tunnels/dpd.sig
%%DATADIR%%/base/protocols/xmpp/__load__.bro
%%DATADIR%%/base/protocols/xmpp/dpd.sig
%%DATADIR%%/base/protocols/xmpp/main.bro
%%DATADIR%%/base/utils/active-http.bro
%%DATADIR%%/base/utils/addrs.bro
%%DATADIR%%/base/utils/conn-ids.bro
%%DATADIR%%/base/utils/dir.bro
%%DATADIR%%/base/utils/directions-and-hosts.bro
%%DATADIR%%/base/utils/email.bro
%%DATADIR%%/base/utils/exec.bro
%%DATADIR%%/base/utils/files.bro
%%DATADIR%%/base/utils/geoip-distance.bro
%%DATADIR%%/base/utils/json.bro
%%DATADIR%%/base/utils/numbers.bro
%%DATADIR%%/base/utils/paths.bro
%%DATADIR%%/base/utils/patterns.bro
%%DATADIR%%/base/utils/queue.bro
%%DATADIR%%/base/utils/site.bro
%%DATADIR%%/base/utils/strings.bro
%%DATADIR%%/base/utils/thresholds.bro
%%DATADIR%%/base/utils/time.bro
%%DATADIR%%/base/utils/urls.bro
%%BROCTL%%%%DATADIR%%/broctl/__load__.bro
%%BROCTL%%%%DATADIR%%/broctl/auto.bro
%%BROCTL%%%%DATADIR%%/broctl/check.bro
%%BROCTL%%%%DATADIR%%/broctl/main.bro
%%BROCTL%%%%DATADIR%%/broctl/process-trace.bro
%%BROCTL%%%%DATADIR%%/broctl/standalone.bro
%%DATADIR%%/broxygen/__load__.bro
%%DATADIR%%/broxygen/example.bro
%%DATADIR%%/policy/frameworks/communication/listen.bro
%%DATADIR%%/policy/frameworks/control/controllee.bro
%%DATADIR%%/policy/frameworks/control/controller.bro
%%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro
%%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro
%%DATADIR%%/policy/frameworks/files/detect-MHR.bro
%%DATADIR%%/policy/frameworks/files/entropy-test-all-files.bro
%%DATADIR%%/policy/frameworks/files/extract-all-files.bro
%%DATADIR%%/policy/frameworks/files/hash-all-files.bro
%%DATADIR%%/policy/frameworks/intel/do_expire.bro
%%DATADIR%%/policy/frameworks/intel/do_notice.bro
%%DATADIR%%/policy/frameworks/intel/seen/__load__.bro
%%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro
%%DATADIR%%/policy/frameworks/intel/seen/dns.bro
%%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro
%%DATADIR%%/policy/frameworks/intel/seen/file-names.bro
%%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro
%%DATADIR%%/policy/frameworks/intel/seen/http-url.bro
%%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro
%%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro
%%DATADIR%%/policy/frameworks/intel/seen/smtp.bro
%%DATADIR%%/policy/frameworks/intel/seen/ssl.bro
%%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro
%%DATADIR%%/policy/frameworks/intel/seen/x509.bro
%%DATADIR%%/policy/frameworks/intel/whitelist.bro
%%DATADIR%%/policy/frameworks/packet-filter/shunt.bro
%%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig
%%DATADIR%%/policy/frameworks/software/version-changes.bro
%%DATADIR%%/policy/frameworks/software/vulnerable.bro
%%DATADIR%%/policy/frameworks/software/windows-version-detection.bro
%%DATADIR%%/policy/integration/barnyard2/__load__.bro
%%DATADIR%%/policy/integration/barnyard2/main.bro
%%DATADIR%%/policy/integration/barnyard2/types.bro
%%DATADIR%%/policy/integration/collective-intel/__load__.bro
%%DATADIR%%/policy/integration/collective-intel/main.bro
%%DATADIR%%/policy/misc/capture-loss.bro
%%DATADIR%%/policy/misc/detect-traceroute/__load__.bro
%%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig
%%DATADIR%%/policy/misc/detect-traceroute/main.bro
%%DATADIR%%/policy/misc/dump-events.bro
%%DATADIR%%/policy/misc/known-devices.bro
%%DATADIR%%/policy/misc/load-balancing.bro
%%DATADIR%%/policy/misc/loaded-scripts.bro
%%DATADIR%%/policy/misc/profiling.bro
%%DATADIR%%/policy/misc/scan.bro
%%DATADIR%%/policy/misc/stats.bro
%%DATADIR%%/policy/misc/trim-trace-file.bro
%%DATADIR%%/policy/protocols/conn/known-hosts.bro
%%DATADIR%%/policy/protocols/conn/known-services.bro
%%DATADIR%%/policy/protocols/conn/mac-logging.bro
%%DATADIR%%/policy/protocols/conn/vlan-logging.bro
%%DATADIR%%/policy/protocols/conn/weirds.bro
%%DATADIR%%/policy/protocols/dhcp/known-devices-and-hostnames.bro
%%DATADIR%%/policy/protocols/dns/auth-addl.bro
%%DATADIR%%/policy/protocols/dns/detect-external-names.bro
%%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro
%%DATADIR%%/policy/protocols/ftp/detect.bro
%%DATADIR%%/policy/protocols/ftp/software.bro
%%DATADIR%%/policy/protocols/http/detect-sqli.bro
%%DATADIR%%/policy/protocols/http/detect-webapps.bro
%%DATADIR%%/policy/protocols/http/detect-webapps.sig
%%DATADIR%%/policy/protocols/http/header-names.bro
%%DATADIR%%/policy/protocols/http/software-browser-plugins.bro
%%DATADIR%%/policy/protocols/http/software.bro
%%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro
%%DATADIR%%/policy/protocols/http/var-extraction-uri.bro
%%DATADIR%%/policy/protocols/krb/ticket-logging.bro
%%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro
%%DATADIR%%/policy/protocols/modbus/track-memmap.bro
%%DATADIR%%/policy/protocols/mysql/software.bro
%%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro
%%DATADIR%%/policy/protocols/smb/__load__.bro
%%DATADIR%%/policy/protocols/smb/dpd.sig
%%DATADIR%%/policy/protocols/smb/files.bro
%%DATADIR%%/policy/protocols/smb/main.bro
%%DATADIR%%/policy/protocols/smb/smb1-main.bro
%%DATADIR%%/policy/protocols/smb/smb2-main.bro
%%DATADIR%%/policy/protocols/smtp/blocklists.bro
%%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro
%%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro
%%DATADIR%%/policy/protocols/smtp/software.bro
%%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro
%%DATADIR%%/policy/protocols/ssh/geo-data.bro
%%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro
%%DATADIR%%/policy/protocols/ssh/software.bro
%%DATADIR%%/policy/protocols/ssl/expiring-certs.bro
%%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro
%%DATADIR%%/policy/protocols/ssl/heartbleed.bro
%%DATADIR%%/policy/protocols/ssl/known-certs.bro
%%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro
%%DATADIR%%/policy/protocols/ssl/notary.bro
%%DATADIR%%/policy/protocols/ssl/validate-certs.bro
%%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro
%%DATADIR%%/policy/protocols/ssl/weak-keys.bro
%%DATADIR%%/policy/tuning/__load__.bro
%%DATADIR%%/policy/tuning/defaults/__load__.bro
%%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro
%%DATADIR%%/policy/tuning/defaults/packet-fragments.bro
%%DATADIR%%/policy/tuning/defaults/warnings.bro
%%DATADIR%%/policy/tuning/json-logs.bro
%%DATADIR%%/policy/tuning/track-all-assets.bro
%%DATADIR%%/site/local-logger.bro
%%DATADIR%%/site/local-manager.bro
%%DATADIR%%/site/local-proxy.bro
%%DATADIR%%/site/local-worker.bro
%%DATADIR%%/site/local.bro
%%BROCTL%%%%DATADIR%%ctl/scripts/archive-log
%%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh
%%BROCTL%%%%DATADIR%%ctl/scripts/check-config
%%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag
%%BROCTL%%%%DATADIR%%ctl/scripts/delete-log
%%BROCTL%%%%DATADIR%%ctl/scripts/expire-crash
%%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/get-childs
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk
%%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top
%%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name
%%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate
%%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections
%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro
%%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace
%%BROCTL%%%%DATADIR%%ctl/scripts/send-mail
%%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path
%%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv
%%BROCTL%%%%DATADIR%%ctl/scripts/update
%%BROCTL%%spool/broctl-config.sh
%%BROCTL%%@preunexec rm -f %D/logs/current
%%BROCTL%%@preunexec rm -f %D/spool/broctl.dat
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-logger.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro
%%BROCTL%%@preunexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro
%%BROCTL%%@preunexec rm -f %D/spool/state.db
%%BROCTL%%@dir spool/tmp
%%BROCTL%%@dir spool/installed-scripts-do-not-touch/site
%%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto
%%BROCTL%%@dir spool/installed-scripts-do-not-touch
%%BROCTL%%@dir spool
%%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors
%%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers
%%BROCTL%%@dir %%DATADIR%%ctl/scripts
%%BROCTL%%@dir %%DATADIR%%ctl
@dir %%DATADIR%%/site
@dir %%DATADIR%%/policy/tuning/defaults
@dir %%DATADIR%%/policy/tuning
@dir %%DATADIR%%/policy/protocols/ssl
@dir %%DATADIR%%/policy/protocols/ssh
@dir %%DATADIR%%/policy/protocols/smtp
@dir %%DATADIR%%/policy/protocols/smb
@dir %%DATADIR%%/policy/protocols/rdp
@dir %%DATADIR%%/policy/protocols/mysql
@dir %%DATADIR%%/policy/protocols/modbus
@dir %%DATADIR%%/policy/protocols/krb
@dir %%DATADIR%%/policy/protocols/http
@dir %%DATADIR%%/policy/protocols/ftp
@dir %%DATADIR%%/policy/protocols/dns
@dir %%DATADIR%%/policy/protocols/dhcp
@dir %%DATADIR%%/policy/protocols/conn
@dir %%DATADIR%%/policy/protocols
@dir %%DATADIR%%/policy/misc/detect-traceroute
@dir %%DATADIR%%/policy/misc
@dir %%DATADIR%%/policy/integration/collective-intel
@dir %%DATADIR%%/policy/integration/barnyard2
@dir %%DATADIR%%/policy/integration
@dir %%DATADIR%%/policy/frameworks/software
@dir %%DATADIR%%/policy/frameworks/signatures
@dir %%DATADIR%%/policy/frameworks/packet-filter
@dir %%DATADIR%%/policy/frameworks/intel/seen
@dir %%DATADIR%%/policy/frameworks/intel
@dir %%DATADIR%%/policy/frameworks/files
@dir %%DATADIR%%/policy/frameworks/dpd
@dir %%DATADIR%%/policy/frameworks/control
@dir %%DATADIR%%/policy/frameworks/communication
@dir %%DATADIR%%/policy/frameworks
@dir %%DATADIR%%/policy
@dir %%DATADIR%%/broxygen
%%BROCTL%%@dir %%DATADIR%%/broctl
@dir %%DATADIR%%/base/utils
@dir %%DATADIR%%/base/protocols/xmpp
@dir %%DATADIR%%/base/protocols/tunnels
@dir %%DATADIR%%/base/protocols/syslog
@dir %%DATADIR%%/base/protocols/ssl
@dir %%DATADIR%%/base/protocols/ssh
@dir %%DATADIR%%/base/protocols/socks
@dir %%DATADIR%%/base/protocols/snmp
@dir %%DATADIR%%/base/protocols/smtp
@dir %%DATADIR%%/base/protocols/smb
@dir %%DATADIR%%/base/protocols/sip
@dir %%DATADIR%%/base/protocols/rfb
@dir %%DATADIR%%/base/protocols/rdp
@dir %%DATADIR%%/base/protocols/radius
@dir %%DATADIR%%/base/protocols/pop3
@dir %%DATADIR%%/base/protocols/ntlm
@dir %%DATADIR%%/base/protocols/mysql
@dir %%DATADIR%%/base/protocols/modbus
@dir %%DATADIR%%/base/protocols/krb
@dir %%DATADIR%%/base/protocols/irc
@dir %%DATADIR%%/base/protocols/imap
@dir %%DATADIR%%/base/protocols/http
@dir %%DATADIR%%/base/protocols/ftp
@dir %%DATADIR%%/base/protocols/dns
@dir %%DATADIR%%/base/protocols/dnp3
@dir %%DATADIR%%/base/protocols/dhcp
@dir %%DATADIR%%/base/protocols/dce-rpc
@dir %%DATADIR%%/base/protocols/conn
@dir %%DATADIR%%/base/protocols
@dir %%DATADIR%%/base/misc
@dir %%DATADIR%%/base/frameworks/tunnels
@dir %%DATADIR%%/base/frameworks/sumstats/plugins
@dir %%DATADIR%%/base/frameworks/sumstats
@dir %%DATADIR%%/base/frameworks/software
@dir %%DATADIR%%/base/frameworks/signatures
@dir %%DATADIR%%/base/frameworks/reporter
@dir %%DATADIR%%/base/frameworks/packet-filter
@dir %%DATADIR%%/base/frameworks/openflow/plugins
@dir %%DATADIR%%/base/frameworks/openflow
@dir %%DATADIR%%/base/frameworks/notice/extend-email
@dir %%DATADIR%%/base/frameworks/notice/actions
@dir %%DATADIR%%/base/frameworks/notice
@dir %%DATADIR%%/base/frameworks/netcontrol/plugins
@dir %%DATADIR%%/base/frameworks/netcontrol
@dir %%DATADIR%%/base/frameworks/logging/writers
@dir %%DATADIR%%/base/frameworks/logging/postprocessors
@dir %%DATADIR%%/base/frameworks/logging
@dir %%DATADIR%%/base/frameworks/intel
@dir %%DATADIR%%/base/frameworks/input/readers
@dir %%DATADIR%%/base/frameworks/input
@dir %%DATADIR%%/base/frameworks/files/magic
@dir %%DATADIR%%/base/frameworks/files
@dir %%DATADIR%%/base/frameworks/dpd
@dir %%DATADIR%%/base/frameworks/control
@dir %%DATADIR%%/base/frameworks/communication
@dir %%DATADIR%%/base/frameworks/cluster/nodes
@dir %%DATADIR%%/base/frameworks/cluster
@dir %%DATADIR%%/base/frameworks/broker
@dir %%DATADIR%%/base/frameworks/analyzer
@dir %%DATADIR%%/base/frameworks
@dir %%DATADIR%%/base/files/x509
@dir %%DATADIR%%/base/files/unified2
@dir %%DATADIR%%/base/files/pe
@dir %%DATADIR%%/base/files/hash
@dir %%DATADIR%%/base/files/extract
@dir %%DATADIR%%/base/files
@dir %%DATADIR%%/base/bif/plugins
@dir %%DATADIR%%/base/bif
@dir %%DATADIR%%/base
@dir %%DATADIR%%
@dir logs
%%BROCTL%%@dir lib/broctl/plugins
%%BROCTL%%@dir lib/broctl/BroControl
%%BROCTL%%@dir lib/broctl
%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/scripts
%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/lib
%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap/broctl
%%NETMAP%%@dir lib/bro/plugins/Bro_Netmap
@dir lib/bro/plugins
%%BROCTL%%@postexec su -fm %%BROUSER%% -c '%D/bin/broctl install; rm -f %D/spool/debug.log'