[NEW] honeysnap

[jul_bsd@…]

command-line tool for parsing single or multiple pcap data files and producing a 'first-cut' analysis report that identifies significant events within the processed data

[ryandesign (Ryan Carsten Schmidt)]

Thanks, but this does not appear to be ready to commit yet.

• The indentation is not consistent (PortGroup python line, post-destroot block).
• There are many python variants, which is good, but only the python27 variant lists its dependencies; seems like each python variant should list its dependencies.
• The port printed the following notes:

--->  Some of the ports you installed have notes:
  honeysnap has the following notes:
    To run honeysnap, you can:
    $ /opt/local/Library/Frameworks/Python.framework/Versions/2.x/bin/honeysnap -c honeynet.cfg myfile.pcap

However that file does not exist:

$ /opt/local/Library/Frameworks/Python.framework/Versions/2.x/bin/honeysnap -c honeynet.cfg myfile.pcap
-bash: /opt/local/Library/Frameworks/Python.framework/Versions/2.x/bin/honeysnap: No such file or directory

Here's what does exist:

$ port contents honeysnap | grep /bin/
  /opt/local/Library/Frameworks/Python.framework/Versions/2.7/bin/honeysnap
  /opt/local/Library/Frameworks/Python.framework/Versions/2.7/bin/thresholdflows
  /opt/local/Library/Frameworks/Python.framework/Versions/2.7/bin/xBytesNseconds

The port should probably create a symlink ${prefix}/bin/honeysnap pointing to wherever the file got installed, to make it easier for the user to run it. If the other two programs are ones a user would want to run, then symlinks should be created for them too.

The variant descriptions describe that they will build e.g. "Python 2.7 bindings", but this sounds like the software actually requires python itself; it's not just bindings. The description should be changed, e.g. to "Use Python 2.7".

I would be inclined to change the order in which the variants are defined, the order in which their conflicts are listed, and the order in which the variants are checked before setting the default variant, to alphabetical order.

[jul_bsd@…]

• fix indent
• oups, forgot this one
• 2.x was just because it depends on variant. I added symlink in ${prefix}/bin
• fix variant description
• does the order matter ? alphabetical or reverse?