web interface

Zeek
1

before i get my hands dirty and start installing and configuring bro, i
want to know if there is a web interface from which to view alerts,
graphs, etc. it is not critical that i have this sort of interface,
although it would be nice.

if there are any known problems running bro on openbsd, do tell.

cheers,
jake

2

Hello,

I'm not sure about the web interface but speaking of OpenBSD vs Bro, it works.
Not directly (build problems) if you use the official .tar.gz but with some patchs,
it works very well.

Best regards.

3

Jacob Yocom-Piatt wrote:

before i get my hands dirty and start installing and configuring bro, i
want to know if there is a web interface from which to view alerts,
graphs, etc. it is not critical that i have this sort of interface,
although it would be nice.

Mike Haberman of NCSA has developed a NetLens web/Java interface
to some of the Bro logs. It's still under development however it
has seen some operational use.

Steve

- --

4

Hi there,

5

Hello,

I'm working on this, the easy way for this is (IMHO) is to use
the following package (from OpenBSD's ports) : libbind
(libbind-9.3.2p0.tgz as of today in current release).

Then and here where i am, tweak "configure.in" in order to use it.

Best regards.

6

At some point this (NetLens) will likely become open source.

nb

7

Thanks, that's good to know. Could you let me know where in the
filesystem that libbind gets installed on OpenBSD?

Cheers,
Christian.

8

Hello Christian,

Libraries are in "/usr/local/lib/"
Includes are in "/usr/local/include/bind"

So what do you think of something likes a "--with-openbsd-bind-includes" and
"--with-openbsd-bind-libraries" with relevant informations ?

Best regards.

9

Hello Christian,

Libraries are in "/usr/local/lib/"
Includes are in "/usr/local/include/bind"

Thanks!

So what do you think of something likes a "--with-openbsd-bind-includes" and
"--with-openbsd-bind-libraries" with relevant informations ?

I think I'll just have configure look for libbind in the default
locations as the final fallback before giving up on nonblocking DNS, so
I don't think with-openbsd-... is necessary. What we should add though
is --with-bind-libs=<dir> and --with-bind-includes=<dir>, to remain
flexible in case people have private libbind installations.

Cheers,
Christian.

10

Hello Christian,

11

Hello Christian,

  Good idea, you're right. We don't need to specify the OS we use, just
  having the correct informations about where to find the libraries.

Right.
  

  Are we going to have a new release soonly ?
  In such a case likes this one, i think i could make a focus on the full
  OpenBSD's integration with Bro.

We always have a new release coming up pretty soon. ;^) You're welcome
to send patches any time.

Cheers,
Christian.