[+] Sat Jul 29 20:02:25 2017 Installing psad on hostname: slk-crnt
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/var/run/psad
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/var/lib/psad
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/archive
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad
[+] Creating /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/var/log/psad/fwdata file
[+] Compiling Marco d'Itri's whois client
[+] CMD: '/usr/bin/make -C deps/whois'
[+] Copying whois binary to /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/bin/whois_psad
[+] Installing the Unix::Syslog 1.1 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the Bit::Vector 7.4 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the Carp::Clan 6.04 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the Date::Calc 6.3 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the NetAddr::IP 4.075 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the IPTables::Parse 1.6.1 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing the IPTables::ChainMgr 1.6 perl module in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad/
[+] CMD: '/usr/bin/perl Makefile.PL PREFIX=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad LIB=/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/lib/psad'
[+] CMD: '/usr/bin/make'
[+] CMD: '/usr/bin/make install'
[+] Installing Snort-2.3.3 signatures in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/snort_rules
[+] Installing deps/snort_rules/exploit.rules
[+] Installing deps/snort_rules/shellcode.rules
[+] Installing deps/snort_rules/telnet.rules
[+] Installing deps/snort_rules/imap.rules
[+] Installing deps/snort_rules/bad-traffic.rules
[+] Installing deps/snort_rules/dns.rules
[+] Installing deps/snort_rules/oracle.rules
[+] Installing deps/snort_rules/backdoor.rules
[+] Installing deps/snort_rules/chat.rules
[+] Installing deps/snort_rules/p2p.rules
[+] Installing deps/snort_rules/attack-responses.rules
[+] Installing deps/snort_rules/icmp.rules
[+] Installing deps/snort_rules/web-misc.rules
[+] Installing deps/snort_rules/policy.rules
[+] Installing deps/snort_rules/dos.rules
[+] Installing deps/snort_rules/info.rules
[+] Installing deps/snort_rules/icmp-info.rules
[+] Installing deps/snort_rules/x11.rules
[+] Installing deps/snort_rules/web-attacks.rules
[+] Installing deps/snort_rules/finger.rules
[+] Installing deps/snort_rules/classification.config
[+] Installing deps/snort_rules/deleted.rules
[+] Installing deps/snort_rules/ddos.rules
[+] Installing deps/snort_rules/web-coldfusion.rules
[+] Installing deps/snort_rules/emerging-all.rules
[+] Installing deps/snort_rules/web-cgi.rules
[+] Installing deps/snort_rules/pop3.rules
[+] Installing deps/snort_rules/snmp.rules
[+] Installing deps/snort_rules/web-client.rules
[+] Installing deps/snort_rules/nntp.rules
[+] Installing deps/snort_rules/other-ids.rules
[+] Installing deps/snort_rules/scan.rules
[+] Installing deps/snort_rules/reference.config
[+] Installing deps/snort_rules/multimedia.rules
[+] Installing deps/snort_rules/porn.rules
[+] Installing deps/snort_rules/tftp.rules
[+] Installing deps/snort_rules/web-frontpage.rules
[+] Installing deps/snort_rules/local.rules
[+] Installing deps/snort_rules/ftp.rules
[+] Installing deps/snort_rules/web-iis.rules
[+] Installing deps/snort_rules/netbios.rules
[+] Installing deps/snort_rules/mysql.rules
[+] Installing deps/snort_rules/rservices.rules
[+] Installing deps/snort_rules/sql.rules
[+] Installing deps/snort_rules/rpc.rules
[+] Installing deps/snort_rules/misc.rules
[+] Installing deps/snort_rules/experimental.rules
[+] Installing deps/snort_rules/smtp.rules
[+] Installing deps/snort_rules/web-php.rules
[+] Installing deps/snort_rules/virus.rules
[+] Installing deps/snort_rules/pop2.rules
[+] Compiling kmsgsd, and psadwatchd:
[+] CMD: '/usr/bin/make'
[+] Verifying compilation of fwcheck_psad.pl script:
[+] CMD: '/usr/bin/perl -c fwcheck_psad.pl'
[+] Verifying compilation of psad perl daemon:
[+] CMD: '/usr/bin/perl -c psad'
[+] Verifying compilation of nf2csv script:
[+] CMD: '/usr/bin/perl -c nf2csv'
[+] Copying nf2csv -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/bin/nf2csv
[+] Copying fwcheck_psad.pl -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/sbin/fwcheck_psad
[+] Copying psad -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/sbin/psad
[+] Copying psadwatchd -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/sbin/psadwatchd
[+] Copying kmsgsd -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/sbin/kmsgsd
[+] Copying psad.conf -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/psad.conf
[+] Copying auto_dl -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/auto_dl
[+] Copying ip_options -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/ip_options
[+] Copying icmp_types -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/icmp_types
[+] Copying signatures -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/signatures
[+] Copying snort_rule_dl -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/snort_rule_dl
[+] Copying icmp6_types -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/icmp6_types
[+] Copying pf.os -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/pf.os
[+] Copying protocols -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/protocols
[+] Copying posf -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/posf

[+] psad alerts will be sent to:

       root@localhost

[+] Would you like alerts sent to a different address ([y]/n)?  [+] To which email address(es) would you like psad alerts to be sent?
    You can enter as many email addresses as you like; each on its own line.

    End with a "." on a line by itself.


    Would you like psad to only parse specific strings in iptables
    messages (y/[n])?  
[+] By default, psad matches Snort rules against any IP addresses, but
    psad offers the ability to restrict signature matches to specific
    networks with the HOME_NET variable (similar to Snort).  However, psad
    also offers the ability to acquire all local subnets on the local system
    by parsing the output of "ifconfig", or the subnets can be restricted
    to a limited set of networks.

    First, is it ok to leave the HOME_NET setting as "any" ([y]/n)?  
[+] psad has the capability of sending scan data via email alerts to the
    DShield distributed intrusion detection system (www.dshield.org).  By
    default this feature is not enabled since firewall log data is sensitive,
    but submitting logs to DShield provides a valuable service and assists
    in generally enhancing internet security.  As an optional step, if you
    have a DShield user id you can edit the "DSHIELD_USER_ID" variable
    in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/psad.conf

    Would you like to enable DShield alerts (y/[n])?  [+] Setting hostname to "slk-crnt" in /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/psad/psad.conf
[+] The latest psad signatures can be installed with "psad --sig-update"
    or installed now with install.pl.

    If you decide to answer 'y' to the next question, install.pl
    will require DNS and network access now.

    Would you like to install the latest signatures from
      http://www.cipherdyne.org/psad/signatures (y/n)?  [+] Installing psad.8 man page at /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psad.8
[+] Compressing manpage /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psad.8
[+] CMD: '/bin/gzip /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psad.8'
[+] Installing psadwatchd.8 man page at /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psadwatchd.8
[+] Compressing manpage /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psadwatchd.8
[+] CMD: '/bin/gzip /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/psadwatchd.8'
[+] Installing kmsgsd.8 man page at /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/kmsgsd.8
[+] Compressing manpage /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/kmsgsd.8
[+] CMD: '/bin/gzip /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man8/kmsgsd.8'
[+] Installing nf2csv.1 man page at /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man1/nf2csv.1
[+] Compressing manpage /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man1/nf2csv.1
[+] CMD: '/bin/gzip /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/usr/man/man1/nf2csv.1'
[+] Copying init-scripts/psad-init.generic -> /tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/rc.d/rc.psad.new
[+] Enable psad at boot time ([y]/n)?  
========================================================

[+] psad has been installed.

[+] To start psad, run "/tmp/SBo/slackrepo.lDVFiE/build_psad/package-psad/etc/rc.d/psad start"
