tranalyzer

maintainer AlphaJack · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official website (tranalyzer.com), which is not a standard code hosting platform but plausibly the project's own distribution infrastructure; the package builds from source and installs only project files with no evidence of malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website (tranalyzer.com), which is not a standard code hosting platform but plausibly the project's own distribution infrastructure; the package builds from source and installs only project files with no evidence of malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:28 source=("${pkgname}-${pkgver}.tar.gz::https://tranalyzer.com/download/tranalyzer/tranalyzer2-${pkgver}${_pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: AlphaJack <alphajack at tuta dot io>
    
      2# Contributor: Dimitris Kiziridis <ragouel at outlook dot com>
    
      3
    
      4pkgname=tranalyzer
    
      5pkgver=0.9.3
    
      6_pkgver=lmw1
    
      7pkgrel=1
    
      8pkgdesc='Lightweight flow generator and packet analyzer'
    
      9arch=('x86_64' 'aarch64')
    
      10url='https://tranalyzer.com'
    
      11license=('GPL3')
    
      12depends=('libpcap'
    
      13         'mongo-c-driver'
    
      14         'postgresql-libs'
    
      15         'mariadb-libs'
    
      16         'sqlite'
    
      17         'libbsd'
    
      18         'pcre'
    
      19         'gawk')
    
      20optdepends=('graphviz: Required by some plugins'
    
      21            'gnuplot: Required by gpq3x, plot_monitoring'
    
      22            'p0f: Required by osStat'
    
      23            'rrdtool: Required by rrdmonitor, rrdplot'
    
      24            'inotify-tools: Required by t2dmon')
    
      25makedepends=('mongo-c-driver'
    
      26             'libtool'
    
      27             'cmake')
    
      28source=("${pkgname}-${pkgver}.tar.gz::https://tranalyzer.com/download/tranalyzer/tranalyzer2-${pkgver}${_pkgver}.tar.gz")
    
      29b2sums=('af51a2699896fadb93515c31faa6c4474647328faee621dd240ecf1b37ccfaaeb1c991f7b32f8416aa6f6a3c252fa7407805d52f8359873b9f8708f495c92294')
    
      30
    
      31prepare() {
    
      32  cd "${pkgname}2-${pkgver}"
    
      33  sed -i "29s|\.tranalyzer/plugins/|/usr/lib/tranalyzer/plugins|" tranalyzer2/src/tranalyzer.h
    
      34  sed -i "43s|.*|T2FMDIR=/usr/share/tranalyzer/scripts/t2fm|" scripts/t2fm/t2fm
    
      35  sed -i "7s|\$(dirname \"$\0\")|/usr/share/tranalyzer/scripts/tawk|" scripts/tawk/tawk 
    
      36
    
      37  for script in b64ex fpsGplt gpq3x osStat plot_monitoring protStat statGplt t2alive t2caplist t2dmon t2flowstat t2plot t2stat t2timeline t2viz topNStat; do
    
      38    sed -i "s|\$(dirname \"$\0\")|/usr/share/tranalyzer/scripts|" scripts/${script} || true
    
      39  done
    
      40}
    
      41
    
      42build() {
    
      43  cd "${pkgname}2-${pkgver}"
    
      44  echo y | ./autogen.sh -a -p "${srcdir}/${pkgname}2-${pkgver}/build/plugins"
    
      45  gzip --force tranalyzer2/man/tranalyzer.1
    
      46  gzip --force scripts/t2conf/man/t2conf.1
    
      47  gzip --force scripts/t2fm/man/t2fm.1
    
      48  gzip --force scripts/tawk/man/t2nfdump.1
    
      49  gzip --force scripts/tawk/man/tawk.1
    
      50}
    
      51
    
      52package() {
    
      53  cd "${pkgname}2-${pkgver}"
    
      54  install -d "${pkgdir}/usr/lib/${pkgname}/"
    
      55  cp -avR build/plugins "${pkgdir}/usr/lib/${pkgname}/"
    
      56  install -Dm755 tranalyzer2/src/tranalyzer -t "${pkgdir}/usr/bin"
    
      57  install -Dm755 utils/t2b2t/t2b2t -t "${pkgdir}/usr/bin"
    
      58  install -Dm755 utils/t2whois/t2whois -t "${pkgdir}/usr/bin"
    
      59
    
      60  install -Dm644 doc/tutorials/splunk.pdf -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      61  install -Dm644 doc/tutorials/custom_plugin.pdf -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      62  install -Dm644 doc/documentation.pdf -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      63  install -Dm644 scripts/doc/scripts.pdf -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      64  install -Dm644 scripts/tawk/doc/tawk.pdf -t "${pkgdir}/usr/share/doc/${pkgname}/tawk"
    
      65  install -Dm644 scripts/t2fm/doc/t2fm.pdf -t "${pkgdir}/usr/share/doc/${pkgname}/t2fm"
    
      66
    
      67  install -d "${pkgdir}/usr/share/doc/${pkgname}/plugins"
    
      68  for doc in $(ls plugins/*/doc/*.pdf | xargs); do
    
      69    install -Dm644 ${doc} -t "${pkgdir}/usr/share/doc/${pkgname}/plugins"
    
      70  done
    
      71
    
      72  install -Dm644 tranalyzer2/man/tranalyzer.1.gz -t "${pkgdir}/usr/share/man/man1"
    
      73  install -Dm644 scripts/t2conf/man/t2conf.1.gz -t "${pkgdir}/usr/share/man/man1"
    
      74  install -Dm644 scripts/t2fm/man/t2fm.1.gz -t "${pkgdir}/usr/share/man/man1"
    
      75  install -Dm644 scripts/tawk/man/t2nfdump.1.gz -t "${pkgdir}/usr/share/man/man1"
    
      76  install -Dm644 scripts/tawk/man/tawk.1.gz -t "${pkgdir}/usr/share/man/man1"
    
      77
    
      78  rm -rf scripts/tawk/man scripts/t2fm/man scripts/t2conf/man
    
      79
    
      80  install -d "${pkgdir}/usr/share/${pkgname}"
    
      81  cp -avR scripts/ "${pkgdir}/usr/share/${pkgname}/"
    
      82
    
      83  install -Dm644 scripts/completions/* -t "${pkgdir}/usr/share/bash-completion/completions/"
    
      84  install -Dm644 scripts/completions/* -t "${pkgdir}/usr/share/zsh/site-functions/"
    
      85  install -Dm644 scripts/t2_aliases -t "${pkgdir}/usr/share/bash-completion/completions/"
    
      86
    
      87  for script in b64ex fpsGplt gpq3x osStat plot_monitoring protStat statGplt t2alive t2caplist t2dmon t2flowstat t2plot t2stat t2timeline t2viz topNStat; do
    
      88    ln -s /usr/share/tranalyzer/scripts/${script} "${pkgdir}/usr/bin/" || true
    
      89  done
    
      90
    
      91  ln -s /usr/share/tranalyzer/scripts/tawk/tawk "${pkgdir}/usr/bin/"
    
      92  ln -s /usr/share/tranalyzer/scripts/t2fm/t2fm "${pkgdir}/usr/bin/"
    
      93
    
      94  sed -i "641s|.*|T2HOME=/usr/share/tranalyzer|" "${pkgdir}/usr/share/${pkgname}/scripts/t2utils.sh"
    
      95  # sed -i '114,133d' "${pkgdir}/usr/share/${pkgname}/scripts/t2doc"
    
      96  # sed -i "88s|.*|folder=\"/usr/share/doc/tranalyzer/\$name/\"|" "${pkgdir}/usr/share/${pkgname}/scripts/t2doc"
    
      97  # sed -i "82s|.*|folder=\"/usr/share/doc/tranalyzer/\"|" "${pkgdir}/usr/share/${pkgname}/scripts/t2doc"
    
      98  # sed -i "79s|.*|folder=\"/usr/share/doc/tranalyzer/\"|" "${pkgdir}/usr/share/${pkgname}/scripts/t2doc"
    
      99  # sed -i "91s|.*|folder=\"/usr/share/doc/tranalyzer/plugins/\"|" "${pkgdir}/usr/share/${pkgname}/scripts/t2doc"
    
      100}
    
      101

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2