security/logcheck 1.4.7 MidnightBSD

Auditing tool for system logs on Unix boxes

System: MidnightBSD
Repository: mports
Maintainer: [email protected]
License: gpl2+
Categories: security

Description

Mails anomalies in the system logfiles to the administrator.

Logcheck helps spot problems, anomalies and security violations in your logfiles automatically and will send the summaries to you via e-mail. Logcheck is run as a cron job.

In the other systems

System

Port

Version

MidnightBSD

security/logcheck

1.4.7

FreeBSD

security/logcheck

1.4.7

NetBSD

security/logcheck

1.1.1nb1

DragonFly

security/logcheck

1.4.3_2

Install

Binary package:

mport install logcheck

From mports:

cd /usr/mports/security/logcheck && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	logcheck>0:security/logcheck

Dependencies

As this port's Makefile names them.

Build 1

docbook-to-man>0 : textproc/docbook-to-man

Runtime 3

bash : shells/bash
lockfile-create : sysutils/lockfile-progs
mime-construct : mail/mime-construct

Build dependencies 1

textproc/docbook-to-man

Run dependencies 3

No port depends on this one.

Configuration

Options name: security_logcheck

Option

Default

Description

CRON

Install cron script automatically

DOCS

off

EXAMPLES

off

USES: perl5 shebangfix tar:xz
Service scripts: none

Files

Manual pages 4

logcheck(8)
logcheck-test(1)
logtail(8)
logtail2(8)

pkg-plist 218

share/logcheck/detectrotate/10-savelog.dtr
share/logcheck/detectrotate/20-logrotate.dtr
share/logcheck/detectrotate/30-logrotate-dateext.dtr
@group
etc/logcheck/cracking.d/kernel
etc/logcheck/cracking.d/rlogind
etc/logcheck/cracking.d/rsh
etc/logcheck/cracking.d/smartd
etc/logcheck/cracking.d/tftpd
etc/logcheck/cracking.d/uucico
etc/logcheck/ignore.d.paranoid/bind
etc/logcheck/ignore.d.paranoid/cron
etc/logcheck/ignore.d.paranoid/incron
etc/logcheck/ignore.d.paranoid/logcheck
etc/logcheck/ignore.d.paranoid/postfix
etc/logcheck/ignore.d.paranoid/ppp
etc/logcheck/ignore.d.paranoid/qpopper
etc/logcheck/ignore.d.paranoid/squid
etc/logcheck/ignore.d.paranoid/ssh
etc/logcheck/ignore.d.paranoid/stunnel
etc/logcheck/ignore.d.paranoid/sysklogd
etc/logcheck/ignore.d.paranoid/telnetd
etc/logcheck/ignore.d.paranoid/tripwire
etc/logcheck/ignore.d.paranoid/usb
etc/logcheck/ignore.d.server/acpid
etc/logcheck/ignore.d.server/amandad
etc/logcheck/ignore.d.server/amavisd-new
etc/logcheck/ignore.d.server/anacron
etc/logcheck/ignore.d.server/anon-proxy
etc/logcheck/ignore.d.server/apache
etc/logcheck/ignore.d.server/apcupsd
etc/logcheck/ignore.d.server/arpwatch
etc/logcheck/ignore.d.server/asterisk
etc/logcheck/ignore.d.server/automount
etc/logcheck/ignore.d.server/bind
etc/logcheck/ignore.d.server/bluez-utils
etc/logcheck/ignore.d.server/courier
etc/logcheck/ignore.d.server/cpqarrayd
etc/logcheck/ignore.d.server/cpufreqd
etc/logcheck/ignore.d.server/cron
etc/logcheck/ignore.d.server/cron-apt
etc/logcheck/ignore.d.server/cups-lpd
etc/logcheck/ignore.d.server/cvs-pserver
etc/logcheck/ignore.d.server/cvsd
etc/logcheck/ignore.d.server/cyrus
etc/logcheck/ignore.d.server/dbus-daemon
etc/logcheck/ignore.d.server/dcc
etc/logcheck/ignore.d.server/ddclient
etc/logcheck/ignore.d.server/dhclient
etc/logcheck/ignore.d.server/dhcp
etc/logcheck/ignore.d.server/dictd
etc/logcheck/ignore.d.server/dkfilter
etc/logcheck/ignore.d.server/dnsmasq
etc/logcheck/ignore.d.server/dovecot
etc/logcheck/ignore.d.server/dropbear
etc/logcheck/ignore.d.server/dspam
etc/logcheck/ignore.d.server/epmd
etc/logcheck/ignore.d.server/exim4
etc/logcheck/ignore.d.server/fcron
etc/logcheck/ignore.d.server/ftpd
etc/logcheck/ignore.d.server/git-daemon
etc/logcheck/ignore.d.server/gnu-imap4d
etc/logcheck/ignore.d.server/gps
etc/logcheck/ignore.d.server/grinch
etc/logcheck/ignore.d.server/horde3
etc/logcheck/ignore.d.server/hplip
etc/logcheck/ignore.d.server/hylafax
etc/logcheck/ignore.d.server/ikiwiki
etc/logcheck/ignore.d.server/imap
etc/logcheck/ignore.d.server/imapproxy
etc/logcheck/ignore.d.server/imp
etc/logcheck/ignore.d.server/imp4
etc/logcheck/ignore.d.server/innd
etc/logcheck/ignore.d.server/ipppd
etc/logcheck/ignore.d.server/isdnlog
etc/logcheck/ignore.d.server/isdnutils
etc/logcheck/ignore.d.server/jabberd
etc/logcheck/ignore.d.server/kernel
etc/logcheck/ignore.d.server/klogind
etc/logcheck/ignore.d.server/krb5-kdc
etc/logcheck/ignore.d.server/libpam-krb5
etc/logcheck/ignore.d.server/libpam-mount
etc/logcheck/ignore.d.server/libpam-systemd
etc/logcheck/ignore.d.server/logcheck
etc/logcheck/ignore.d.server/login
etc/logcheck/ignore.d.server/maradns
etc/logcheck/ignore.d.server/mldonkey-server
etc/logcheck/ignore.d.server/mon
etc/logcheck/ignore.d.server/mountd
etc/logcheck/ignore.d.server/nagios
etc/logcheck/ignore.d.server/netconsole
etc/logcheck/ignore.d.server/nfs
etc/logcheck/ignore.d.server/nntpcache
etc/logcheck/ignore.d.server/nscd
etc/logcheck/ignore.d.server/nslcd
etc/logcheck/ignore.d.server/opendkim
etc/logcheck/ignore.d.server/opendmarc
etc/logcheck/ignore.d.server/openvpn
etc/logcheck/ignore.d.server/otrs
etc/logcheck/ignore.d.server/passwd

The first 100 are listed.

distinfo 1

File

Size

SHA256

logcheck_1.4.7.tar.xz

143776

cc160cbcac28f39388e8b96e462c4e62d005453b6957f1f0eaa8c093ff9cf3df

Master sites 1

DEBIAN_POOL