%%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/logs %%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/spool %%BROCTL%%@exec chown %%BROUSER%%:%%BROGROUP%% %D/spool/tmp %%BROCTL%%@exec chown -R %%BROUSER%%:%%BROGROUP%% %D/spool/installed-scripts-do-not-touch bin/bro bin/bro-cut %%BROCTL%%bin/broctl %%BROCTL%%bin/capstats %%BROCTL%%bin/trace-summary %%BROCTL%%@unexec if cmp -s %D/etc/broctl.cfg.example %D/etc/broctl.cfg ; then rm -f %D/etc/broctl.cfg; fi %%BROCTL%%etc/broctl.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/broctl.cfg ] ; then cp -p %D/etc/broctl.cfg.example %D/etc/broctl.cfg; fi %%BROCTL%%@unexec if cmp -s %D/etc/networks.cfg.example %D/etc/networks.cfg ; then rm -f %D/etc/networks.cfg; fi %%BROCTL%%etc/networks.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/networks.cfg ] ; then cp -p %D/etc/networks.cfg.example %D/etc/networks.cfg; fi %%BROCTL%%@unexec if cmp -s %D/etc/node.cfg.example %D/etc/node.cfg ; then rm -f %D/etc/node.cfg; fi %%BROCTL%%etc/node.cfg.example %%BROCTL%%@exec if [ ! -f %D/etc/node.cfg ] ; then cp -p %D/etc/node.cfg.example %D/etc/node.cfg; fi %%BROKER%%include/broker/address.hh %%BROKER%%include/broker/broker.h %%BROKER%%include/broker/broker.hh %%BROKER%%include/broker/data.hh %%BROKER%%include/broker/endpoint.hh %%BROKER%%include/broker/enum_value.hh %%BROKER%%include/broker/incoming_connection_status.hh %%BROKER%%include/broker/message.hh %%BROKER%%include/broker/message_queue.hh %%BROKER%%include/broker/outgoing_connection_status.hh %%BROKER%%include/broker/peering.hh %%BROKER%%include/broker/port.hh %%BROKER%%include/broker/queue.hh %%BROKER%%include/broker/report.hh %%BROKER%%include/broker/store/backend.hh %%BROKER%%include/broker/store/clone.hh %%BROKER%%include/broker/store/expiration_time.hh %%BROKER%%include/broker/store/frontend.hh %%BROKER%%include/broker/store/identifier.hh %%BROKER%%include/broker/store/master.hh %%BROKER%%include/broker/store/memory_backend.hh %%BROKER%%include/broker/store/query.hh %%BROKER%%include/broker/store/response.hh %%BROKER%%include/broker/store/result.hh %%BROKER%%include/broker/store/rocksdb_backend.hh %%BROKER%%include/broker/store/sequence_num.hh %%BROKER%%include/broker/store/snapshot.hh %%BROKER%%include/broker/store/sqlite_backend.hh %%BROKER%%include/broker/store/value.hh %%BROKER%%include/broker/subnet.hh %%BROKER%%include/broker/time_duration.hh %%BROKER%%include/broker/time_point.hh %%BROKER%%include/broker/topic.hh %%BROKER%%include/broker/util/hash.hh %%BROKER%%include/broker/util/meta.hh %%BROKER%%include/broker/util/none.hh %%BROKER%%include/broker/util/operators.hh %%BROKER%%include/broker/util/optional.hh %%BROKER%%include/broker/util/variant.hh %%BROCTL%%lib/broctl/BroControl/__init__.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/__init__.pyc %%BROCTL%%lib/broctl/BroControl/brocmd.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/brocmd.pyc %%BROCTL%%lib/broctl/BroControl/broctl.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/broctl.pyc %%BROCTL%%lib/broctl/BroControl/cmdresult.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/cmdresult.pyc %%BROCTL%%lib/broctl/BroControl/config.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/config.pyc %%BROCTL%%lib/broctl/BroControl/control.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/control.pyc %%BROCTL%%lib/broctl/BroControl/cron.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/cron.pyc %%BROCTL%%lib/broctl/BroControl/doc.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/doc.pyc %%BROCTL%%lib/broctl/BroControl/events.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/events.pyc %%BROCTL%%lib/broctl/BroControl/execute.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/execute.pyc %%BROCTL%%lib/broctl/BroControl/install.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/install.pyc %%BROCTL%%lib/broctl/BroControl/node.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/node.pyc %%BROCTL%%lib/broctl/BroControl/options.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/options.pyc %%BROCTL%%lib/broctl/BroControl/plugin.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/plugin.pyc %%BROCTL%%lib/broctl/BroControl/pluginreg.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/pluginreg.pyc %%BROCTL%%lib/broctl/BroControl/printdoc.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/printdoc.pyc %%BROCTL%%lib/broctl/BroControl/py3bro.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/py3bro.pyc %%BROCTL%%lib/broctl/BroControl/ssh_runner.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/ssh_runner.pyc %%BROCTL%%lib/broctl/BroControl/state.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/state.pyc %%BROCTL%%lib/broctl/BroControl/util.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/util.pyc %%BROCTL%%lib/broctl/BroControl/utilcurses.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/utilcurses.pyc %%BROCTL%%lib/broctl/BroControl/version.py %%BROCTL%%@unexec rm -f %D/lib/broctl/BroControl/version.pyc %%BROCTL%%lib/broctl/SubnetTree.py %%BROCTL%%@unexec rm -f %D/lib/broctl/SubnetTree.pyc %%BROCTL%%lib/broctl/_SubnetTree.so %%BROCTL%%lib/broctl/plugins/TestPlugin.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/TestPlugin.pyc %%BROCTL%%lib/broctl/plugins/lb_myricom.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/lb_myricom.pyc %%BROCTL%%lib/broctl/plugins/lb_pf_ring.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/lb_pf_ring.pyc %%BROCTL%%lib/broctl/plugins/ps.py %%BROCTL%%@unexec rm -f %D/lib/broctl/plugins/ps.pyc %%BROKER%%lib/libbroker.so %%BROKER%%lib/libbroker.so.0 %%BROKER%%lib/libbroker.so.0.4.0 man/man1/bro-cut.1.gz %%BROCTL%%man/man1/trace-summary.1.gz man/man8/bro.8.gz %%BROCTL%%man/man8/broctl.8.gz %%DATADIR%%/base/bif/__load__.bro %%DATADIR%%/base/bif/analyzer.bif.bro %%DATADIR%%/base/bif/bloom-filter.bif.bro %%DATADIR%%/base/bif/bro.bif.bro %%DATADIR%%/base/bif/broxygen.bif.bro %%DATADIR%%/base/bif/cardinality-counter.bif.bro %%DATADIR%%/base/bif/comm.bif.bro %%DATADIR%%/base/bif/const.bif.bro %%DATADIR%%/base/bif/data.bif.bro %%DATADIR%%/base/bif/event.bif.bro %%DATADIR%%/base/bif/file_analysis.bif.bro %%DATADIR%%/base/bif/input.bif.bro %%DATADIR%%/base/bif/logging.bif.bro %%DATADIR%%/base/bif/messaging.bif.bro %%DATADIR%%/base/bif/pcap.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ARP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AYIYA.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AsciiReader.ascii.bif.bro %%DATADIR%%/base/bif/plugins/Bro_AsciiWriter.ascii.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BackDoor.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BenchmarkReader.benchmark.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BinaryReader.binary.bif.bro %%DATADIR%%/base/bif/plugins/Bro_BitTorrent.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ConnSize.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ConnSize.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DCE_RPC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DHCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_DNS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_File.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileExtract.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_FileHash.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Finger.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_GTPv1.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Gnutella.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_HTTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ICMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_IRC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Ident.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_InterConn.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_KRB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_KRB.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Login.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_MIME.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Modbus.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_MySQL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NetBIOS.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_NoneWriter.none.bif.bro %%DATADIR%%/base/bif/plugins/Bro_PE.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_PIA.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_POP3.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RADIUS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RDP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RDP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RPC.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_RawReader.raw.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SIP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMB.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SMTP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SNMP.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SOCKS.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SQLiteReader.sqlite.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SQLiteWriter.sqlite.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSH.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSH.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SSL.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_SteppingStone.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Syslog.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_TCP.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Teredo.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_UDP.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_Unified2.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.events.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.functions.bif.bro %%DATADIR%%/base/bif/plugins/Bro_X509.types.bif.bro %%DATADIR%%/base/bif/plugins/Bro_ZIP.events.bif.bro %%DATADIR%%/base/bif/plugins/__load__.bro %%DATADIR%%/base/bif/reporter.bif.bro %%DATADIR%%/base/bif/store.bif.bro %%DATADIR%%/base/bif/strings.bif.bro %%DATADIR%%/base/bif/top-k.bif.bro %%DATADIR%%/base/bif/types.bif.bro %%DATADIR%%/base/files/extract/__load__.bro %%DATADIR%%/base/files/extract/main.bro %%DATADIR%%/base/files/hash/__load__.bro %%DATADIR%%/base/files/hash/main.bro %%DATADIR%%/base/files/pe/__load__.bro %%DATADIR%%/base/files/pe/consts.bro %%DATADIR%%/base/files/pe/main.bro %%DATADIR%%/base/files/unified2/__load__.bro %%DATADIR%%/base/files/unified2/main.bro %%DATADIR%%/base/files/x509/__load__.bro %%DATADIR%%/base/files/x509/main.bro %%DATADIR%%/base/frameworks/analyzer/__load__.bro %%DATADIR%%/base/frameworks/analyzer/main.bro %%DATADIR%%/base/frameworks/broker/__load__.bro %%DATADIR%%/base/frameworks/broker/main.bro %%DATADIR%%/base/frameworks/cluster/__load__.bro %%DATADIR%%/base/frameworks/cluster/main.bro %%DATADIR%%/base/frameworks/cluster/nodes/manager.bro %%DATADIR%%/base/frameworks/cluster/nodes/proxy.bro %%DATADIR%%/base/frameworks/cluster/nodes/worker.bro %%DATADIR%%/base/frameworks/cluster/setup-connections.bro %%DATADIR%%/base/frameworks/communication/__load__.bro %%DATADIR%%/base/frameworks/communication/main.bro %%DATADIR%%/base/frameworks/control/__load__.bro %%DATADIR%%/base/frameworks/control/main.bro %%DATADIR%%/base/frameworks/dpd/__load__.bro %%DATADIR%%/base/frameworks/dpd/main.bro %%DATADIR%%/base/frameworks/files/__load__.bro %%DATADIR%%/base/frameworks/files/magic/__load__.bro %%DATADIR%%/base/frameworks/files/magic/archive.sig %%DATADIR%%/base/frameworks/files/magic/audio.sig %%DATADIR%%/base/frameworks/files/magic/font.sig %%DATADIR%%/base/frameworks/files/magic/general.sig %%DATADIR%%/base/frameworks/files/magic/image.sig %%DATADIR%%/base/frameworks/files/magic/libmagic.sig %%DATADIR%%/base/frameworks/files/magic/msoffice.sig %%DATADIR%%/base/frameworks/files/magic/video.sig %%DATADIR%%/base/frameworks/files/main.bro %%DATADIR%%/base/frameworks/input/__load__.bro %%DATADIR%%/base/frameworks/input/main.bro %%DATADIR%%/base/frameworks/input/readers/ascii.bro %%DATADIR%%/base/frameworks/input/readers/benchmark.bro %%DATADIR%%/base/frameworks/input/readers/binary.bro %%DATADIR%%/base/frameworks/input/readers/raw.bro %%DATADIR%%/base/frameworks/input/readers/sqlite.bro %%DATADIR%%/base/frameworks/intel/__load__.bro %%DATADIR%%/base/frameworks/intel/cluster.bro %%DATADIR%%/base/frameworks/intel/input.bro %%DATADIR%%/base/frameworks/intel/main.bro %%DATADIR%%/base/frameworks/logging/__load__.bro %%DATADIR%%/base/frameworks/logging/main.bro %%DATADIR%%/base/frameworks/logging/postprocessors/__load__.bro %%DATADIR%%/base/frameworks/logging/postprocessors/scp.bro %%DATADIR%%/base/frameworks/logging/postprocessors/sftp.bro %%DATADIR%%/base/frameworks/logging/writers/ascii.bro %%DATADIR%%/base/frameworks/logging/writers/none.bro %%DATADIR%%/base/frameworks/logging/writers/sqlite.bro %%DATADIR%%/base/frameworks/notice/__load__.bro %%DATADIR%%/base/frameworks/notice/actions/add-geodata.bro %%DATADIR%%/base/frameworks/notice/actions/drop.bro %%DATADIR%%/base/frameworks/notice/actions/email_admin.bro %%DATADIR%%/base/frameworks/notice/actions/page.bro %%DATADIR%%/base/frameworks/notice/actions/pp-alarms.bro %%DATADIR%%/base/frameworks/notice/cluster.bro %%DATADIR%%/base/frameworks/notice/extend-email/hostnames.bro %%DATADIR%%/base/frameworks/notice/main.bro %%DATADIR%%/base/frameworks/notice/non-cluster.bro %%DATADIR%%/base/frameworks/notice/weird.bro %%DATADIR%%/base/frameworks/packet-filter/__load__.bro %%DATADIR%%/base/frameworks/packet-filter/cluster.bro %%DATADIR%%/base/frameworks/packet-filter/main.bro %%DATADIR%%/base/frameworks/packet-filter/netstats.bro %%DATADIR%%/base/frameworks/packet-filter/utils.bro %%DATADIR%%/base/frameworks/reporter/__load__.bro %%DATADIR%%/base/frameworks/reporter/main.bro %%DATADIR%%/base/frameworks/signatures/__load__.bro %%DATADIR%%/base/frameworks/signatures/main.bro %%DATADIR%%/base/frameworks/software/__load__.bro %%DATADIR%%/base/frameworks/software/main.bro %%DATADIR%%/base/frameworks/sumstats/__load__.bro %%DATADIR%%/base/frameworks/sumstats/cluster.bro %%DATADIR%%/base/frameworks/sumstats/main.bro %%DATADIR%%/base/frameworks/sumstats/non-cluster.bro %%DATADIR%%/base/frameworks/sumstats/plugins/__load__.bro %%DATADIR%%/base/frameworks/sumstats/plugins/average.bro %%DATADIR%%/base/frameworks/sumstats/plugins/hll_unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/last.bro %%DATADIR%%/base/frameworks/sumstats/plugins/max.bro %%DATADIR%%/base/frameworks/sumstats/plugins/min.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sample.bro %%DATADIR%%/base/frameworks/sumstats/plugins/std-dev.bro %%DATADIR%%/base/frameworks/sumstats/plugins/sum.bro %%DATADIR%%/base/frameworks/sumstats/plugins/topk.bro %%DATADIR%%/base/frameworks/sumstats/plugins/unique.bro %%DATADIR%%/base/frameworks/sumstats/plugins/variance.bro %%DATADIR%%/base/frameworks/tunnels/__load__.bro %%DATADIR%%/base/frameworks/tunnels/main.bro %%DATADIR%%/base/init-bare.bro %%DATADIR%%/base/init-default.bro %%DATADIR%%/base/misc/find-checksum-offloading.bro %%DATADIR%%/base/misc/find-filtered-trace.bro %%DATADIR%%/base/misc/p0f.fp %%DATADIR%%/base/protocols/conn/__load__.bro %%DATADIR%%/base/protocols/conn/contents.bro %%DATADIR%%/base/protocols/conn/inactivity.bro %%DATADIR%%/base/protocols/conn/main.bro %%DATADIR%%/base/protocols/conn/polling.bro %%DATADIR%%/base/protocols/conn/thresholds.bro %%DATADIR%%/base/protocols/dhcp/__load__.bro %%DATADIR%%/base/protocols/dhcp/consts.bro %%DATADIR%%/base/protocols/dhcp/dpd.sig %%DATADIR%%/base/protocols/dhcp/main.bro %%DATADIR%%/base/protocols/dhcp/utils.bro %%DATADIR%%/base/protocols/dnp3/__load__.bro %%DATADIR%%/base/protocols/dnp3/consts.bro %%DATADIR%%/base/protocols/dnp3/dpd.sig %%DATADIR%%/base/protocols/dnp3/main.bro %%DATADIR%%/base/protocols/dns/__load__.bro %%DATADIR%%/base/protocols/dns/consts.bro %%DATADIR%%/base/protocols/dns/main.bro %%DATADIR%%/base/protocols/ftp/__load__.bro %%DATADIR%%/base/protocols/ftp/dpd.sig %%DATADIR%%/base/protocols/ftp/files.bro %%DATADIR%%/base/protocols/ftp/gridftp.bro %%DATADIR%%/base/protocols/ftp/info.bro %%DATADIR%%/base/protocols/ftp/main.bro %%DATADIR%%/base/protocols/ftp/utils-commands.bro %%DATADIR%%/base/protocols/ftp/utils.bro %%DATADIR%%/base/protocols/http/__load__.bro %%DATADIR%%/base/protocols/http/dpd.sig %%DATADIR%%/base/protocols/http/entities.bro %%DATADIR%%/base/protocols/http/files.bro %%DATADIR%%/base/protocols/http/main.bro %%DATADIR%%/base/protocols/http/utils.bro %%DATADIR%%/base/protocols/irc/__load__.bro %%DATADIR%%/base/protocols/irc/dcc-send.bro %%DATADIR%%/base/protocols/irc/dpd.sig %%DATADIR%%/base/protocols/irc/files.bro %%DATADIR%%/base/protocols/irc/main.bro %%DATADIR%%/base/protocols/krb/__load__.bro %%DATADIR%%/base/protocols/krb/consts.bro %%DATADIR%%/base/protocols/krb/dpd.sig %%DATADIR%%/base/protocols/krb/files.bro %%DATADIR%%/base/protocols/krb/main.bro %%DATADIR%%/base/protocols/modbus/__load__.bro %%DATADIR%%/base/protocols/modbus/consts.bro %%DATADIR%%/base/protocols/modbus/main.bro %%DATADIR%%/base/protocols/mysql/__load__.bro %%DATADIR%%/base/protocols/mysql/consts.bro %%DATADIR%%/base/protocols/mysql/main.bro %%DATADIR%%/base/protocols/pop3/__load__.bro %%DATADIR%%/base/protocols/pop3/dpd.sig %%DATADIR%%/base/protocols/radius/__load__.bro %%DATADIR%%/base/protocols/radius/consts.bro %%DATADIR%%/base/protocols/radius/main.bro %%DATADIR%%/base/protocols/rdp/__load__.bro %%DATADIR%%/base/protocols/rdp/consts.bro %%DATADIR%%/base/protocols/rdp/dpd.sig %%DATADIR%%/base/protocols/rdp/main.bro %%DATADIR%%/base/protocols/sip/__load__.bro %%DATADIR%%/base/protocols/sip/dpd.sig %%DATADIR%%/base/protocols/sip/main.bro %%DATADIR%%/base/protocols/smtp/__load__.bro %%DATADIR%%/base/protocols/smtp/dpd.sig %%DATADIR%%/base/protocols/smtp/entities.bro %%DATADIR%%/base/protocols/smtp/files.bro %%DATADIR%%/base/protocols/smtp/main.bro %%DATADIR%%/base/protocols/snmp/__load__.bro %%DATADIR%%/base/protocols/snmp/main.bro %%DATADIR%%/base/protocols/socks/__load__.bro %%DATADIR%%/base/protocols/socks/consts.bro %%DATADIR%%/base/protocols/socks/dpd.sig %%DATADIR%%/base/protocols/socks/main.bro %%DATADIR%%/base/protocols/ssh/__load__.bro %%DATADIR%%/base/protocols/ssh/dpd.sig %%DATADIR%%/base/protocols/ssh/main.bro %%DATADIR%%/base/protocols/ssl/__load__.bro %%DATADIR%%/base/protocols/ssl/consts.bro %%DATADIR%%/base/protocols/ssl/dpd.sig %%DATADIR%%/base/protocols/ssl/files.bro %%DATADIR%%/base/protocols/ssl/main.bro %%DATADIR%%/base/protocols/ssl/mozilla-ca-list.bro %%DATADIR%%/base/protocols/syslog/__load__.bro %%DATADIR%%/base/protocols/syslog/consts.bro %%DATADIR%%/base/protocols/syslog/main.bro %%DATADIR%%/base/protocols/tunnels/__load__.bro %%DATADIR%%/base/protocols/tunnels/dpd.sig %%DATADIR%%/base/utils/active-http.bro %%DATADIR%%/base/utils/addrs.bro %%DATADIR%%/base/utils/conn-ids.bro %%DATADIR%%/base/utils/dir.bro %%DATADIR%%/base/utils/directions-and-hosts.bro %%DATADIR%%/base/utils/exec.bro %%DATADIR%%/base/utils/files.bro %%DATADIR%%/base/utils/numbers.bro %%DATADIR%%/base/utils/paths.bro %%DATADIR%%/base/utils/patterns.bro %%DATADIR%%/base/utils/queue.bro %%DATADIR%%/base/utils/site.bro %%DATADIR%%/base/utils/strings.bro %%DATADIR%%/base/utils/thresholds.bro %%DATADIR%%/base/utils/time.bro %%DATADIR%%/base/utils/urls.bro %%BROCTL%%%%DATADIR%%/broctl/__load__.bro %%BROCTL%%%%DATADIR%%/broctl/auto.bro %%BROCTL%%%%DATADIR%%/broctl/check.bro %%BROCTL%%%%DATADIR%%/broctl/main.bro %%BROCTL%%%%DATADIR%%/broctl/process-trace.bro %%BROCTL%%%%DATADIR%%/broctl/standalone.bro %%DATADIR%%/broxygen/__load__.bro %%DATADIR%%/broxygen/example.bro %%DATADIR%%/policy/frameworks/communication/listen.bro %%DATADIR%%/policy/frameworks/control/controllee.bro %%DATADIR%%/policy/frameworks/control/controller.bro %%DATADIR%%/policy/frameworks/dpd/detect-protocols.bro %%DATADIR%%/policy/frameworks/dpd/packet-segment-logging.bro %%DATADIR%%/policy/frameworks/files/detect-MHR.bro %%DATADIR%%/policy/frameworks/files/extract-all-files.bro %%DATADIR%%/policy/frameworks/files/hash-all-files.bro %%DATADIR%%/policy/frameworks/intel/do_notice.bro %%DATADIR%%/policy/frameworks/intel/seen/__load__.bro %%DATADIR%%/policy/frameworks/intel/seen/conn-established.bro %%DATADIR%%/policy/frameworks/intel/seen/dns.bro %%DATADIR%%/policy/frameworks/intel/seen/file-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/file-names.bro %%DATADIR%%/policy/frameworks/intel/seen/http-headers.bro %%DATADIR%%/policy/frameworks/intel/seen/http-url.bro %%DATADIR%%/policy/frameworks/intel/seen/pubkey-hashes.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp-url-extraction.bro %%DATADIR%%/policy/frameworks/intel/seen/smtp.bro %%DATADIR%%/policy/frameworks/intel/seen/ssl.bro %%DATADIR%%/policy/frameworks/intel/seen/where-locations.bro %%DATADIR%%/policy/frameworks/intel/seen/x509.bro %%DATADIR%%/policy/frameworks/packet-filter/shunt.bro %%DATADIR%%/policy/frameworks/signatures/detect-windows-shells.sig %%DATADIR%%/policy/frameworks/software/version-changes.bro %%DATADIR%%/policy/frameworks/software/vulnerable.bro %%DATADIR%%/policy/frameworks/software/windows-version-detection.bro %%DATADIR%%/policy/integration/barnyard2/__load__.bro %%DATADIR%%/policy/integration/barnyard2/main.bro %%DATADIR%%/policy/integration/barnyard2/types.bro %%DATADIR%%/policy/integration/collective-intel/__load__.bro %%DATADIR%%/policy/integration/collective-intel/main.bro %%DATADIR%%/policy/misc/app-stats/__load__.bro %%DATADIR%%/policy/misc/app-stats/main.bro %%DATADIR%%/policy/misc/app-stats/plugins/__load__.bro %%DATADIR%%/policy/misc/app-stats/plugins/facebook.bro %%DATADIR%%/policy/misc/app-stats/plugins/gmail.bro %%DATADIR%%/policy/misc/app-stats/plugins/google.bro %%DATADIR%%/policy/misc/app-stats/plugins/netflix.bro %%DATADIR%%/policy/misc/app-stats/plugins/pandora.bro %%DATADIR%%/policy/misc/app-stats/plugins/youtube.bro %%DATADIR%%/policy/misc/capture-loss.bro %%DATADIR%%/policy/misc/detect-traceroute/__load__.bro %%DATADIR%%/policy/misc/detect-traceroute/detect-low-ttls.sig %%DATADIR%%/policy/misc/detect-traceroute/main.bro %%DATADIR%%/policy/misc/dump-events.bro %%DATADIR%%/policy/misc/known-devices.bro %%DATADIR%%/policy/misc/load-balancing.bro %%DATADIR%%/policy/misc/loaded-scripts.bro %%DATADIR%%/policy/misc/profiling.bro %%DATADIR%%/policy/misc/scan.bro %%DATADIR%%/policy/misc/stats.bro %%DATADIR%%/policy/misc/trim-trace-file.bro %%DATADIR%%/policy/protocols/conn/known-hosts.bro %%DATADIR%%/policy/protocols/conn/known-services.bro %%DATADIR%%/policy/protocols/conn/weirds.bro %%DATADIR%%/policy/protocols/dhcp/known-devices-and-hostnames.bro %%DATADIR%%/policy/protocols/dns/auth-addl.bro %%DATADIR%%/policy/protocols/dns/detect-external-names.bro %%DATADIR%%/policy/protocols/ftp/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ftp/detect.bro %%DATADIR%%/policy/protocols/ftp/software.bro %%DATADIR%%/policy/protocols/http/detect-sqli.bro %%DATADIR%%/policy/protocols/http/detect-webapps.bro %%DATADIR%%/policy/protocols/http/detect-webapps.sig %%DATADIR%%/policy/protocols/http/header-names.bro %%DATADIR%%/policy/protocols/http/software-browser-plugins.bro %%DATADIR%%/policy/protocols/http/software.bro %%DATADIR%%/policy/protocols/http/var-extraction-cookies.bro %%DATADIR%%/policy/protocols/http/var-extraction-uri.bro %%DATADIR%%/policy/protocols/modbus/known-masters-slaves.bro %%DATADIR%%/policy/protocols/modbus/track-memmap.bro %%DATADIR%%/policy/protocols/mysql/software.bro %%DATADIR%%/policy/protocols/rdp/indicate_ssl.bro %%DATADIR%%/policy/protocols/smtp/blocklists.bro %%DATADIR%%/policy/protocols/smtp/detect-suspicious-orig.bro %%DATADIR%%/policy/protocols/smtp/entities-excerpt.bro %%DATADIR%%/policy/protocols/smtp/software.bro %%DATADIR%%/policy/protocols/ssh/detect-bruteforcing.bro %%DATADIR%%/policy/protocols/ssh/geo-data.bro %%DATADIR%%/policy/protocols/ssh/interesting-hostnames.bro %%DATADIR%%/policy/protocols/ssh/software.bro %%DATADIR%%/policy/protocols/ssl/expiring-certs.bro %%DATADIR%%/policy/protocols/ssl/extract-certs-pem.bro %%DATADIR%%/policy/protocols/ssl/heartbleed.bro %%DATADIR%%/policy/protocols/ssl/known-certs.bro %%DATADIR%%/policy/protocols/ssl/log-hostcerts-only.bro %%DATADIR%%/policy/protocols/ssl/notary.bro %%DATADIR%%/policy/protocols/ssl/validate-certs.bro %%DATADIR%%/policy/protocols/ssl/validate-ocsp.bro %%DATADIR%%/policy/protocols/ssl/weak-keys.bro %%DATADIR%%/policy/tuning/__load__.bro %%DATADIR%%/policy/tuning/defaults/__load__.bro %%DATADIR%%/policy/tuning/defaults/extracted_file_limits.bro %%DATADIR%%/policy/tuning/defaults/packet-fragments.bro %%DATADIR%%/policy/tuning/defaults/warnings.bro %%DATADIR%%/policy/tuning/json-logs.bro %%DATADIR%%/policy/tuning/track-all-assets.bro %%DATADIR%%/site/local-manager.bro %%DATADIR%%/site/local-proxy.bro %%DATADIR%%/site/local-worker.bro %%DATADIR%%/site/local.bro %%BROCTL%%%%DATADIR%%ctl/scripts/archive-log %%BROCTL%%%%DATADIR%%ctl/scripts/broctl-config.sh %%BROCTL%%%%DATADIR%%ctl/scripts/cflow-stats %%BROCTL%%%%DATADIR%%ctl/scripts/check-config %%BROCTL%%%%DATADIR%%ctl/scripts/crash-diag %%BROCTL%%%%DATADIR%%ctl/scripts/delete-log %%BROCTL%%%%DATADIR%%ctl/scripts/expire-logs %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/check-pid %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/df %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/first-line %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/get-childs %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/start %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/stop %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/to-bytes.awk %%BROCTL%%%%DATADIR%%ctl/scripts/helpers/top %%BROCTL%%%%DATADIR%%ctl/scripts/make-archive-name %%BROCTL%%%%DATADIR%%ctl/scripts/post-terminate %%BROCTL%%%%DATADIR%%ctl/scripts/postprocessors/summarize-connections %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro %%BROCTL%%%%DATADIR%%ctl/scripts/run-bro-on-trace %%BROCTL%%%%DATADIR%%ctl/scripts/send-mail %%BROCTL%%%%DATADIR%%ctl/scripts/set-bro-path %%BROCTL%%%%DATADIR%%ctl/scripts/stats-to-csv %%BROCTL%%%%DATADIR%%ctl/scripts/update %%BROCTL%%@unexec rm -f %D/logs/current %%BROCTL%%@unexec rm -f %D/spool/broctl-config.sh %%BROCTL%%@unexec rm -f %D/spool/broctl.dat %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/broctl-config.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/local-networks.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/auto/standalone-layout.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-manager.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-proxy.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local-worker.bro %%BROCTL%%@unexec rm -f %D/spool/installed-scripts-do-not-touch/site/local.bro %%BROCTL%%@unexec rm -f %D/spool/state.db %%BROCTL%%@dir spool/tmp %%BROCTL%%@dir spool/installed-scripts-do-not-touch/site %%BROCTL%%@dir spool/installed-scripts-do-not-touch/auto %%BROCTL%%@dir spool/installed-scripts-do-not-touch %%BROCTL%%@dir spool %%BROCTL%%@dir %%DATADIR%%ctl/scripts/postprocessors %%BROCTL%%@dir %%DATADIR%%ctl/scripts/helpers %%BROCTL%%@dir %%DATADIR%%ctl/scripts %%BROCTL%%@dir %%DATADIR%%ctl @dir %%DATADIR%%/site @dir %%DATADIR%%/policy/tuning/defaults @dir %%DATADIR%%/policy/tuning @dir %%DATADIR%%/policy/protocols/ssl @dir %%DATADIR%%/policy/protocols/ssh @dir %%DATADIR%%/policy/protocols/smtp @dir %%DATADIR%%/policy/protocols/rdp @dir %%DATADIR%%/policy/protocols/mysql @dir %%DATADIR%%/policy/protocols/modbus @dir %%DATADIR%%/policy/protocols/http @dir %%DATADIR%%/policy/protocols/ftp @dir %%DATADIR%%/policy/protocols/dns @dir %%DATADIR%%/policy/protocols/dhcp @dir %%DATADIR%%/policy/protocols/conn @dir %%DATADIR%%/policy/protocols @dir %%DATADIR%%/policy/misc/detect-traceroute @dir %%DATADIR%%/policy/misc/app-stats/plugins @dir %%DATADIR%%/policy/misc/app-stats @dir %%DATADIR%%/policy/misc @dir %%DATADIR%%/policy/integration/collective-intel @dir %%DATADIR%%/policy/integration/barnyard2 @dir %%DATADIR%%/policy/integration @dir %%DATADIR%%/policy/frameworks/software @dir %%DATADIR%%/policy/frameworks/signatures @dir %%DATADIR%%/policy/frameworks/packet-filter @dir %%DATADIR%%/policy/frameworks/intel/seen @dir %%DATADIR%%/policy/frameworks/intel @dir %%DATADIR%%/policy/frameworks/files @dir %%DATADIR%%/policy/frameworks/dpd @dir %%DATADIR%%/policy/frameworks/control @dir %%DATADIR%%/policy/frameworks/communication @dir %%DATADIR%%/policy/frameworks @dir %%DATADIR%%/policy @dir %%DATADIR%%/broxygen %%BROCTL%%@dir %%DATADIR%%/broctl @dir %%DATADIR%%/base/utils @dir %%DATADIR%%/base/protocols/tunnels @dir %%DATADIR%%/base/protocols/syslog @dir %%DATADIR%%/base/protocols/ssl @dir %%DATADIR%%/base/protocols/ssh @dir %%DATADIR%%/base/protocols/socks @dir %%DATADIR%%/base/protocols/snmp @dir %%DATADIR%%/base/protocols/smtp @dir %%DATADIR%%/base/protocols/sip @dir %%DATADIR%%/base/protocols/rdp @dir %%DATADIR%%/base/protocols/radius @dir %%DATADIR%%/base/protocols/pop3 @dir %%DATADIR%%/base/protocols/mysql @dir %%DATADIR%%/base/protocols/modbus @dir %%DATADIR%%/base/protocols/krb @dir %%DATADIR%%/base/protocols/irc @dir %%DATADIR%%/base/protocols/http @dir %%DATADIR%%/base/protocols/ftp @dir %%DATADIR%%/base/protocols/dns @dir %%DATADIR%%/base/protocols/dnp3 @dir %%DATADIR%%/base/protocols/dhcp @dir %%DATADIR%%/base/protocols/conn @dir %%DATADIR%%/base/protocols @dir %%DATADIR%%/base/misc @dir %%DATADIR%%/base/frameworks/tunnels @dir %%DATADIR%%/base/frameworks/sumstats/plugins @dir %%DATADIR%%/base/frameworks/sumstats @dir %%DATADIR%%/base/frameworks/software @dir %%DATADIR%%/base/frameworks/signatures @dir %%DATADIR%%/base/frameworks/reporter @dir %%DATADIR%%/base/frameworks/packet-filter @dir %%DATADIR%%/base/frameworks/notice/extend-email @dir %%DATADIR%%/base/frameworks/notice/actions @dir %%DATADIR%%/base/frameworks/notice @dir %%DATADIR%%/base/frameworks/logging/writers @dir %%DATADIR%%/base/frameworks/logging/postprocessors @dir %%DATADIR%%/base/frameworks/logging @dir %%DATADIR%%/base/frameworks/intel @dir %%DATADIR%%/base/frameworks/input/readers @dir %%DATADIR%%/base/frameworks/input @dir %%DATADIR%%/base/frameworks/files/magic @dir %%DATADIR%%/base/frameworks/files @dir %%DATADIR%%/base/frameworks/dpd @dir %%DATADIR%%/base/frameworks/control @dir %%DATADIR%%/base/frameworks/communication @dir %%DATADIR%%/base/frameworks/cluster/nodes @dir %%DATADIR%%/base/frameworks/cluster @dir %%DATADIR%%/base/frameworks/broker @dir %%DATADIR%%/base/frameworks/analyzer @dir %%DATADIR%%/base/frameworks @dir %%DATADIR%%/base/files/x509 @dir %%DATADIR%%/base/files/unified2 @dir %%DATADIR%%/base/files/pe @dir %%DATADIR%%/base/files/hash @dir %%DATADIR%%/base/files/extract @dir %%DATADIR%%/base/files @dir %%DATADIR%%/base/bif/plugins @dir %%DATADIR%%/base/bif @dir %%DATADIR%%/base @dir %%DATADIR%% %%CLEANUP_PREFIX%%@dir share %%CLEANUP_PREFIX%%%%BROKER%%@dir man/man8 %%CLEANUP_PREFIX%%%%BROKER%%@dir man/man1 %%CLEANUP_PREFIX%%%%BROKER%%@dir man %%BROCTL%%@dir logs %%BROCTL%%@dir lib/broctl/plugins %%BROCTL%%@dir lib/broctl/BroControl %%BROCTL%%@dir lib/broctl @dir lib/bro/plugins %%CLEANUP_PREFIX%%@dir lib %%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker/util %%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker/store %%CLEANUP_PREFIX%%%%BROKER%%@dir include/broker %%CLEANUP_PREFIX%%@dir include %%CLEANUP_PREFIX%%@dir etc %%CLEANUP_PREFIX%%@dir bin %%BROCTL%%@exec su -fm %%BROUSER%% -c '%D/bin/broctl install'