kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/net/dnstop/Makefile

26 lines
806 B
Makefile
Raw Normal View History

PKGREVISION bumps for net/libpcap update.
2013-02-06 20:30:54 +01:00
# $NetBSD: Makefile,v 1.22 2013/02/06 19:30:56 jperkin Exp $
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
#
Update dnstop to 20090128. Based on PR 41779 by Fredrik Pettai. Version 20090128: I added a new feature to dnstop today that filters on "refused" response codes. This might be useful in tracking the ongoing DNS-based DDoS attacks. To use this new feature: dnstop -R -f refused eth0 Version 20080321: The interesting changes came in a patch from Dave Plonka: Fixed a bug that cause dnstop to Memory fault when processing a DNS packet greater than PCAP_SNAPLEN (previously 1460) bytes in size. Raised PCAP_SNAPLEN to 65535 to avoid truncating large DNS packets. Eliminated unnecessary stack buffers and memcpy calls when handling packets. Also some variables have been added to the Makefile at the request of a packager so that it may be easier to customize where files are installed, etc.
2009-07-25 12:26:17 +02:00
DISTNAME= dnstop-20090128
PKGREVISION bumps for net/libpcap update.
2013-02-06 20:30:54 +01:00
PKGREVISION= 1
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
CATEGORIES= net
Update MASTER_SITES and/or HOMEPAGE, from Sergey Svishchev.
2006-10-04 23:53:15 +02:00
MASTER_SITES= http://dns.measurement-factory.com/tools/dnstop/src/
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where no developer is officially maintaining the package. The rationale for changing this from "tech-pkg" to "pkgsrc-users" is that it implies that any user can try to maintain the package (by submitting patches to the mailing list). Since the folks most likely to care about the package are the folks that want to use it or are already using it, this would leverage the energy of users who aren't developers.
2006-03-04 22:28:51 +01:00
MAINTAINER= pkgsrc-users@NetBSD.org
Update MASTER_SITES and/or HOMEPAGE, from Sergey Svishchev.
2006-10-04 23:53:15 +02:00
HOMEPAGE= http://dns.measurement-factory.com/tools/dnstop/
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
COMMENT= Diagnose tcpdump trace for DNS queries/replies
Update dnstop to 20090128. Based on PR 41779 by Fredrik Pettai. Version 20090128: I added a new feature to dnstop today that filters on "refused" response codes. This might be useful in tracking the ongoing DNS-based DDoS attacks. To use this new feature: dnstop -R -f refused eth0 Version 20080321: The interesting changes came in a patch from Dave Plonka: Fixed a bug that cause dnstop to Memory fault when processing a DNS packet greater than PCAP_SNAPLEN (previously 1460) bytes in size. Raised PCAP_SNAPLEN to 65535 to avoid truncating large DNS packets. Eliminated unnecessary stack buffers and memcpy calls when handling packets. Also some variables have been added to the Makefile at the request of a packager so that it may be easier to customize where files are installed, etc.
2009-07-25 12:26:17 +02:00
GNU_CONFIGURE= yes
INSTALLATION_DIRS= bin ${PKGMANDIR}/man8 share/doc/dnstop
Create directories before installing files into them.
2005-06-17 05:50:19 +02:00
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
do-install:
Update dnstop to 20090128. Based on PR 41779 by Fredrik Pettai. Version 20090128: I added a new feature to dnstop today that filters on "refused" response codes. This might be useful in tracking the ongoing DNS-based DDoS attacks. To use this new feature: dnstop -R -f refused eth0 Version 20080321: The interesting changes came in a patch from Dave Plonka: Fixed a bug that cause dnstop to Memory fault when processing a DNS packet greater than PCAP_SNAPLEN (previously 1460) bytes in size. Raised PCAP_SNAPLEN to 65535 to avoid truncating large DNS packets. Eliminated unnecessary stack buffers and memcpy calls when handling packets. Also some variables have been added to the Makefile at the request of a packager so that it may be easier to customize where files are installed, etc.
2009-07-25 12:26:17 +02:00
${INSTALL_PROGRAM} ${WRKSRC}/dnstop ${DESTDIR}${PREFIX}/bin
${INSTALL_MAN} ${WRKSRC}/dnstop.8 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man8
${INSTALL_DATA} ${WRKSRC}/LICENSE ${DESTDIR}${PREFIX}/share/doc/dnstop
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
Update to 20050203: 2005/01/21 Sam Norris Added support for third-level domain statistics. Use the -t command line option to enable collection of 3rd-level stats, and use '3' while running to display them. Note that enabling 3rd-level stats collection does not automatically also enable 2nd-level stats. 2005/01/13 Duane Wessels Added a non-interactive mode. If you specify a savefile and stdout is not a TTY, dnstop prints each table at the end. 2004/03/09 Duane Wessels Added filter support. Filters can be used to restrict the input stream to queries with certain characteristics. The currently defined filters are: unknown-tlds Only includes queries for TLDs that are bogus. Useful for identifying hosts/servers that leak queries for things like "localhost" or "workgroup." A-for-A Only includes A queries for names that are already IP addresses. Certain Microsoft Windows DNS servers have a known bug that forward these queries. rfc1918-ptr PTR queries for addresses in RFC1918 space. These should never leak from inside an organization. 2003/11/13 Mark Foster <mark@foster.cc> Added 'c' to display options. This screen will combine the source and sld fields to show "who is querying for what" - reason: we see alot of duplicate querys for whatever reason. This will help separate the legitimate queries from the broken resolvers, etc. See http://www.circleid.com/article/102_0_1_0_C/ for more about that. Closes PR 29807.
2005-03-28 04:01:50 +02:00
.include "../../devel/ncurses/buildlink3.mk"
Depend on appropriate libpcap version. From Sergey Svishchev.
2007-12-02 13:59:11 +01:00
BUILDLINK_API_DEPENDS.libpcap+= libpcap>=0.7.0
Update to 20050203: 2005/01/21 Sam Norris Added support for third-level domain statistics. Use the -t command line option to enable collection of 3rd-level stats, and use '3' while running to display them. Note that enabling 3rd-level stats collection does not automatically also enable 2nd-level stats. 2005/01/13 Duane Wessels Added a non-interactive mode. If you specify a savefile and stdout is not a TTY, dnstop prints each table at the end. 2004/03/09 Duane Wessels Added filter support. Filters can be used to restrict the input stream to queries with certain characteristics. The currently defined filters are: unknown-tlds Only includes queries for TLDs that are bogus. Useful for identifying hosts/servers that leak queries for things like "localhost" or "workgroup." A-for-A Only includes A queries for names that are already IP addresses. Certain Microsoft Windows DNS servers have a known bug that forward these queries. rfc1918-ptr PTR queries for addresses in RFC1918 space. These should never leak from inside an organization. 2003/11/13 Mark Foster <mark@foster.cc> Added 'c' to display options. This screen will combine the source and sld fields to show "who is querying for what" - reason: we see alot of duplicate querys for whatever reason. This will help separate the legitimate queries from the broken resolvers, etc. See http://www.circleid.com/article/102_0_1_0_C/ for more about that. Closes PR 29807.
2005-03-28 04:01:50 +02:00
.include "../../net/libpcap/buildlink3.mk"
dnstop is a libpcap application (ala tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Top level domains * Second level domains http://dnstop.measurement-factory.com/
2002-10-30 22:13:35 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink