1 | # -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- vim:fenc=utf-8:ft=tcl:et:sw=4:ts=4:sts=4 |
---|
2 | # $Id$ |
---|
3 | |
---|
4 | PortSystem 1.0 |
---|
5 | |
---|
6 | PortGroup python 1.0 |
---|
7 | |
---|
8 | PortGroup github 1.0 |
---|
9 | |
---|
10 | github.setup log2timeline plaso 1.1.0 |
---|
11 | categories security |
---|
12 | platforms darwin |
---|
13 | maintainers nomaintainer |
---|
14 | license Apache-2 |
---|
15 | description Python-based backend engine for the tool log2timeline |
---|
16 | long_description extract timestamps from various files found on a \ |
---|
17 | typical computer system(s) and aggregate them. \ |
---|
18 | The initial purpose of plaso was to have the \ |
---|
19 | timestamps in a single place for computer \ |
---|
20 | forensic analysis (aka Super Timeline). However \ |
---|
21 | recent versions have plaso are becoming a \ |
---|
22 | framework that supports: \ |
---|
23 | - adding new parsers or parsing plug-ins \ |
---|
24 | - adding new analysis plug-ins \ |
---|
25 | - writing one-off scripts to automate repetitive \ |
---|
26 | tasks in computer forensic analysis or equivalent |
---|
27 | #homepage https://code.google.com/p/plaso/ |
---|
28 | |
---|
29 | ## Note: Plaso require >=2.7 & <3 |
---|
30 | python.versions 27 |
---|
31 | python.default_version 27 |
---|
32 | |
---|
33 | ## http://plaso.kiddaland.net/developer/building-the-tool/mac-os-x |
---|
34 | depends_run port:sleuthkit \ |
---|
35 | port:binplist \ |
---|
36 | port:sqlite3 \ |
---|
37 | port:yara \ |
---|
38 | port:py${python.version}-dateutil \ |
---|
39 | port:py${python.version}-protobuf \ |
---|
40 | port:py${python.version}-dpkt \ |
---|
41 | port:py${python.version}-yaml \ |
---|
42 | port:py${python.version}-fuse \ |
---|
43 | port:py${python.version}-parsing \ |
---|
44 | port:py${python.version}-tsk \ |
---|
45 | port:py${python.version}-construct \ |
---|
46 | port:py${python.version}-ipython \ |
---|
47 | port:dfvfs \ |
---|
48 | port:libbde \ |
---|
49 | port:libesedb \ |
---|
50 | port:libevt \ |
---|
51 | port:libevtx \ |
---|
52 | port:libewf \ |
---|
53 | port:libfwsi \ |
---|
54 | port:liblnk \ |
---|
55 | port:libmsiecf \ |
---|
56 | port:libolecf \ |
---|
57 | port:libqcow \ |
---|
58 | port:libregf \ |
---|
59 | port:libmdev \ |
---|
60 | port:libmsraw \ |
---|
61 | port:libvhdi \ |
---|
62 | port:libvmdk \ |
---|
63 | port:libvshadow \ |
---|
64 | port:py${python.version}-hachoir-core \ |
---|
65 | port:py${python.version}-hachoir-parser \ |
---|
66 | port:py${python.version}-hachoir-metadata \ |
---|
67 | port:py${python.version}-bencode \ |
---|
68 | port:py${python.version}-pexpect \ |
---|
69 | port:py${python.version}-psutil1 \ |
---|
70 | port:py${python.version}-readline \ |
---|
71 | port:py${python.version}-tz \ |
---|
72 | port:py${python.version}-zmq \ |
---|
73 | port:py${python.version}-requests \ |
---|
74 | port:py${python.version}-simplejson \ |
---|
75 | port:py${python.version}-sphinx \ |
---|
76 | port:py${python.version}-elasticsearch \ |
---|
77 | |
---|
78 | |
---|
79 | if {${subport} eq ${name}} { |
---|
80 | ## FIXME! No official release on github on 20141129 |
---|
81 | master_sites https://e366e647f8637dd31e0a13f75e5469341a9ab0ee.googledrive.com/host/0B30H7z4S52FleW5vUHBnblJfcjg/1.1.0/release/ |
---|
82 | checksums rmd160 7ca613a9021f46cadec5f982baa129464dd18c0a \ |
---|
83 | sha256 f0eae193c2714b241547fa68779c9e6eb467ef34be78c6d6299851818bed73f7 |
---|
84 | } |
---|
85 | |
---|
86 | subport ${name}-devel { |
---|
87 | master_sites https://github.com/log2timeline/plaso/archive/ |
---|
88 | version 20141129 |
---|
89 | distname ef5d31a1be54383a118256b34b39bfab9148031f |
---|
90 | checksums rmd160 2a0966a9828d7c07f93469a2e7894a205d7babff \ |
---|
91 | sha256 4c05c65cfbe706f8bd4c5fb654d4f43075c98002b276d06c9a87782d89f76399 |
---|
92 | livecheck.type none |
---|
93 | } |
---|
94 | |
---|
95 | notes " |
---|
96 | Kept Fuse dependencies but it will not load on 10.10/Yosemite as it is not signed kext. |
---|
97 | " |
---|
98 | |
---|
99 | livecheck.type regex |
---|
100 | livecheck.url https://googledrive.com/host/0B30H7z4S52FleW5vUHBnblJfcjg/ |
---|
101 | livecheck.regex ">(\\d+(?:\\.\\d+)*)</a></div>" |
---|
102 | |
---|