build time, request its presence explicitly as makedepend (a part of imake
port) is needed to build this port.
Also, per maintainers request, reset maintainership.
Approved by: Simon 'corecode' Schubert (maintainer)
is already installed rather than the library itself which has the same
name in both net/libnet and net/libnet-devel in order to not try to
build this port with net/libnet.
Approved by: netchild
data export. Softflowd semi-statefully tracks traffic flows recorded by
listening on a network interface or by reading a packet capture file.
These flows may be reported via NetFlow to a collecting host or summarised
within softflowd itself.
PR: ports/73723
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
features:
* Understands NetFlow protocol v.1, v.5, v.7 and v.9 (including IPv6 flows)
* Supports both IPv4 and IPv6 transport of flows
* Secure: flowd is privilege separated to limit the impact of any compromise
* Supports filtering and tagging of flows, using a packet filter-like syntax
* Stores recorded flow data in a compact binary format which supports
run-time choice over which flow fields are stored
* Ships with both Perl and Python interfaces for reading and parsing the
on-disk record format
* Is licensed under a liberal BSD-like license
PR: ports/73722
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
* Make user able to change USER & GROUP, and change default USER.
(Bump PORTREVISION)
* Cleanup do-install code.
PR: 73713
Submitted by: Gea-Suan Lin <gslin@netnews.NCTU.edu.tw>
- Use ${LOCALBASE}.
- flow-tools need zlib (so we need to add "-lz")
- Bugfix for flow-tools support.
PR: ports/73630
Submitted by: Gea-Suan Lin <gslin AT netnews dot NCTU dot edu dot tw>
tcptrack is a sniffer which displays information about TCP connections it
sees on a network interface. It passively watches for connections on the
network interface, keeps track of their state and displays a list of
connections in a manner similar to the unix 'top' command. It displays
source and destination addresses and ports, connection state, idle time, and
bandwidth usage.
WWW: http://www.rhythm.cx/~steve/devel/tcptrack
PR: ports/72543
Submitted by: Tor Halvard Furulund <squat@squat.no>
NFDUMP tools support netflow v5 and v7 capturing and processing.
nfcapd - netflow capture daemon.
Reads the netflow data from the network and stores the data into files.
nfdump - netflow dump.
Reads the netflow data from the files stored by nfcapd. It's syntax is similar
to tcpdump. If you like tcpdump you will like nfdump.
nfprofile - netflow profiler.
Reads the netflow data from the files stored by nfcapd. Filters the netflow
data according to the specified filter sets ( profiles ) and stores the
filtered data into files for later use.
nfreplay - netflow replay
Reads the netflow data from the files stored by nfcapd and sends it over
the network to another host.
WWW: http://nfdump.sourceforge.net
PR: ports/72171
Submitted by: Janos Mohacsi <janos.mohacsi@niif.hu>
If you know new email addresses for the people involved, please send-pr it!
<mcsi@agava.com>: host relay.agava.net.ru[195.161.118.3] said: 550
<mcsi@agava.com>: User unknown in local recipient table (in reply to RCPT
TO command)
<woju@bbsmail.ntu.edu.tw> (expanded from <woju@bbsmail>): Host or domain name
not found. Name service error for name=bbsmail.ntu.edu.tw type=A: Host not
found
<esoha@attbi.com>: host gateway.attbi.com[204.127.198.6] said: 551 not our
customer (in reply to RCPT TO command)
<crow@nektor.hu>: host mail.kapu.hu[195.70.32.236] said: 550 unknown user (in
reply to RCPT TO command)
<cyrilm@tower.pp.ru>: host mail.tower.pp.ru[213.85.109.133] said: 550 unknown
user (in reply to RCPT TO command)
<ports@henrik-motakef.de>: Host or domain name not found. Name service error
for name=henrik-motakef.de type=A: Host not found
<jj@nttmcl.com>: host mx1.nttmcl.com[216.69.64.132] said: 550 5.2.1
<jj@nttmcl.com>... Mailbox disabled for this recipient (in reply to RCPT TO
command)
<koji@jet.es>: host mx.wanadoo.es[62.81.235.75] said: 550 Relay not permitted /
No such user (in reply to RCPT TO command)
<proot@iaces.com>: host horton.iaces.com[204.147.87.98] said: 550 5.1.1
<proot@iaces.com>... User unknown (in reply to RCPT TO command)
<roland.jesse@gmx.net>: host mx0.gmx.net[213.165.64.100] said: 550 5.1.1
{mx034} <roland.jesse@gmx.net>... User is unknown (in reply to RCPT TO
command)
<vess@slavof.net>: host mail.slavof.net[213.130.68.146] said: 550 5.7.1 Access
denied (in reply to MAIL FROM command)
<tuxsuximus@hotmail.com>: host mx3.hotmail.com[65.54.253.99] said: 550
Requested action not taken: mailbox unavailable (in reply to RCPT TO
command)
<zenin@archive.rhps.org>: host mail.rhps.org[66.250.128.137] said: 550 5.7.1
<zenin@archive.rhps.org>... Relaying denied (in reply to RCPT TO command)
http://ettercap.sourceforge.net/history.php
- Switch to build all the extras (like pcre and UTF-8 support, GTK2+ GUI,
plugins etc.) by default but provide WITHOUT knobs so one can save on
dependencies.
Approved by: netchild
Changes:
Network Time Protocol (SNTP/NTP) has been implemented. Ten tools were
added, ranging from SMTP server to Web file size retrieval.
PR: ports/71233
Submitted by: maintainer
o VLAN accounting has been added.
o Distributed accounting support has been added.
o When using "pmacctd", assigning an Agent ID to the daemon is
allowed; when using "nfacctd", mapping the IP address of a
router exporting Netflow packets to an ID is allowed.
o MAC address query capabilties were added to the pmacct client.
Thou shalt obey ${PREFIX} no matter what nagios-plugins does, so create
the plugins directory if it doesn't exist.
Fix package list to use EXAMPLESDIR correctly.
Don't use bsd.port.(pre|post).mk unnecessarily.
Approved by: eik
decrease the likelihood of erronous command execution and
to maintain all network services from a central point,
EnderUNIX SDT anounces the availability of its 9th open-source tool,
netUstad.
It has been coded in C language and includes its own HTTP server.
The newly anounced version provides a web interface for
system administrators to add/delete/update IPFW rulesets.
You can manage your IPFW firewall via a TCP/IP connected remote PC, easily.
Development version icludes modules to manage whole
network services (routing tables, network interfaces)
PR: ports/69176
Submitted by: Ozkan KIRIK <ozkan@enderunix.org>
Approved by: krion (mentor) (implicitly)
This package contains a small Lightweight Flow Accounting (LFAP)
server and LFAP API library. LFAP open solution to delivering
accounting data from Riverstone Networks Switches and Routers.
You can use the sfas program to obtain micro-flow information
from a Riverstone switch running either in Layer 4 bridging
mode, routing or MPLS LSPs. Data that can be collected includes
everything from an IPv4 header and UDP headers and the src/dst
port from a TCP header.
WWW: http://www.riverstonenet.com/support/nmops/
the libtoolX ports instead of the one included with each port. Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version. To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER. Both macros accept the same argument: a libtool version.
For example, to use the ports version of libtool-1.5, add the following to
your Makefile:
USE_LIBTOOL_VER= 15
To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:
USE_INC_LIBTOOL_VER= 15
With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).
PR: 63944
Based on work by:eik and marcus
Approved by: ade (autotools maintainer)
Tested by: kris on pointyhat
Bound to be hidden problems: You bet
- A new network daemon, nfacctd, was introduced. It listens for
Netflow V1/V5 packets coming from the network, and then
processes data as pmacctd does.
- pmacctd's IP fragmentation handling has been strongly
enhanced.
(libpcapnav-support is disabled because libpcapnav links against libpcap.so
from base and the port itself links against libpcap.a from the port. I
haven't checked if this would indeed cause problems, but sounds like asking
for trouble to me)
Closes PR: ports/64866
Submitted by: Gaspar Chilingarov
Approved by: maintainer timeout
o Fix typo about WITHOUT_PERL knob. (1)
o Unbreak on -current after mbuf allocator changes. (2)
Submitted by: ceri (1)
Complained from: many people (2)
reports. Labels are created by making a symlink in the
arpwatch data directory that points at the textual description
(e.g. ln -s "Internal Network" dc0).
PR: ports/67838
Submitted by: maintainer
- CVS repository went to /usr/local/var/rancid/CVS
- config files went to /usr/local/etc/rancid
- the man pages are in /usr/local/man
- rancid binaries are installed in: /usr/local/libexec/rancid
PR: ports/67259
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu> (maintainer)
active flows it is possible to overflow bytecount). [1]
Also: [2]
o use DOCSDIR and DATADIR macros
o move files from pkg-plist to Makefile
o remove pkg-plist
Reported by: Gleb Smirnoff <glebius at sell dot sick dot ru>
Submitted by: Dmitry Morozovsky <marck at rinet dot ru> (maintainer) [1],
osa [2]
Approved by: maintainer
PR: 66936
- Explicitly USE_GMAKE.
- Add a switch WITH_UCDSNMP to only depend on p5-SNMP if net-snmp4 is
preferred over net-snmp, as net-snmp provides SNMP.pm (unless compiled
WITHOUT_PERL).
- Add some files to pkg-plist as makefile install targets are lazy (i.e.
they use wildcards) to avoid package deinstall failures.
- Add some needed FreeBSD patches.
Submitted by: Hiroki Sato (patches)
The clients are no longer part of this port, but will be built by
the argus-clients port, which is listed as a dependency.
Since both the argus and argus-clients ports contain the same
COPYING file and want to install it into the same directory, I have
disabled installation of the copyright file by this port, assuming
that the dependent argus-clients port already did it ...
detection system. Kismet will work with any wireless card which supports raw
monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.
PR: ports/66274
Submitted by: Thomas Spreng <spreng@socket.ch>
- Port change: support environment value NAGIOS_PLUGINS_OPTIONS which can be used
to preselect compile options
PR: ports/65144
Submitted by: Blaz Zupan <blaz.zupan@amis.net> (maintainer)
Makefile rev 1.15
Install the p0fa.fp and p0fr.fp files, needed when the -A and -R
options are used (new PORTREVISION).
PR: 62273
Submitted by: Radim Kolar
files/patch-p0f.c rev 1.3
On FreeBSD, the loopback interface is normally called lo0.
PR: 62358
Submitted by: Radim Kolar
files/patch-mtu.h rev 1.5
files/patch-p0f.c rev 1.1
more patches to add loopback support
PR: 62274
Submitted by: Radim Kolar
Reported by: Radim Kolar <hsn@netmag.cz>
Pointy hat (XL size) to: wollman
plugins and store it in RRD-files. You can the use Apan to view graphs of
the data in Nagios web-interface.
WWW: http://apan.sourceforge.net
PR: ports/64941
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
to the finest level of information available at the moment. Sometimes this
can mean an exact description of a port in a building anywhere in an enterprise.
PR: ports/64728
Submitted by: Russell Jackson <rjackson@cserv62.csub.edu>
