32 lines
1.4 KiB
Text
32 lines
1.4 KiB
Text
|
***********************************
|
||
|
|
* !!!!!!!!!!! WARNING !!!!!!!!!!! *
|
||
|
|
***********************************
|
||
|
|
|
||
|
|
If you already had barnyard2 installed, this port will NOT deinstall
|
||
|
|
it and install the barnyard2-sguil port instead. You will need to
|
||
|
|
deinstall the barnyard2 port and install the barnyard2-sguil port yourself
|
||
|
|
instead. This port WILL NOT WORK without the barnyard2-sguil port!!
|
||
|
|
|
||
|
|
See the %%DOCSDIR%%/INSTALL doc for details on the
|
||
|
|
configuration and for croning the script.
|
||
|
|
|
||
|
|
WARNING!!! Sguil et al will fill up your /tmp directory very
|
||
|
|
quickly. You should probably configure sguil et al to log to
|
||
|
|
another partition/location (e.g. /nsm/tmp/).
|
||
|
|
|
||
|
|
You must ALSO edit all of the sensor conf files (located in
|
||
|
|
%%PREFIX%%/%%SENSOR_SGUILDIR%%/etc/) to reflect your configuration before
|
||
|
|
starting the sensor_agents.
|
||
|
|
|
||
|
|
A number of ancilliary things have been installed in
|
||
|
|
%%PREFIX%%/share/%%SENSOR_SGUILDIR%%.
|
||
|
|
|
||
|
|
If you chose to run sancp, and you already had a sancp.conf file in
|
||
|
|
%%PREFIX%%/etc, copy it to sancp.conf.orig before creating the new one.
|
||
|
|
The new sancp.conf-sample file contains the settings for squil. NOTE:
|
||
|
|
the conf file is for sancp 1.5.3. It may need additional edits to work
|
||
|
|
with the current ports version of sancp. If you still want to maintain
|
||
|
|
the customized sancp.conf file, then copy the new sancp.conf-sample
|
||
|
|
file to sguild-sancp.conf (for example) and add
|
||
|
|
sancp_conf=%%PREFIX%%/etc/sguild-sancp.conf to /etc/rc.conf.
|