kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/ike-scan/Makefile

28 lines
749 B
Makefile
Raw Normal View History

PKGREVISION bumps for the security/openssl 1.0.1d update.
2013-02-07 00:20:50 +01:00
# $NetBSD: Makefile,v 1.16 2013/02/06 23:23:38 jperkin Exp $
ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets.
2004-02-27 23:12:51 +01:00
Update to 1.9 a) Experimental IKEv2 support (--ikev2) b) RFC 3947 NAT traversal support (--nat-t) c) Source IP spoofing (--sourceip) - Requires raw sockets. d) Nortel proprietary pre-shared key cracking support. e) psk-crack can read dictionary files from stdin (--dictionary=-) f) Backoff patterns may contain only a single packet. g) Two new packet display options: --timestamp and --shownum h) ike-scan now uses the Mersenne twister PRNG, with new --randomseed option. i) --rcookie option allows the responder cookie to be specified in outgoing packets. j) Several new backoff patterns and vendor IDs added. k) ike-scan wiki launched: http://www.nta-monitor.com/wiki/
2007-01-28 02:34:42 +01:00
DISTNAME= ike-scan-1.9
PKGREVISION bumps for the security/openssl 1.0.1d update.
2013-02-07 00:20:50 +01:00
PKGREVISION= 3
ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets.
2004-02-27 23:12:51 +01:00
CATEGORIES= security
pkglint cleanup; update HOMEPAGE/MASTER_SITES. From Sergey Svishchev in private mail.
2007-02-22 20:01:13 +01:00
MASTER_SITES= http://www.nta-monitor.com/tools/ike-scan/download/
ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets.
2004-02-27 23:12:51 +01:00
Give up MAINTAINER
2009-07-17 20:00:13 +02:00
MAINTAINER= pkgsrc-users@NetBSD.org
pkglint cleanup; update HOMEPAGE/MASTER_SITES. From Sergey Svishchev in private mail.
2007-02-22 20:01:13 +01:00
HOMEPAGE= http://www.nta-monitor.com/tools/ike-scan/
ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets.
2004-02-27 23:12:51 +01:00
COMMENT= Fingerprinting IKE implementation
Changes 1.7.1: * Fixed bug which caused hostnames containing hyphens to fail with an error. * Improved mapping of ID numbers to names in decode. This allows sparse IDs ranges (e.g. 1,2,3,65000) to be supported, which means that we can now decode XAUTH authentication method amongst other things. * Added SO_BROADCAST option to UDP socket to allow sending to broadcast addresses. Previously this gave a permission denied error.
2005-02-28 17:04:28 +01:00
GNU_CONFIGURE= yes
- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14 09:36:54 +01:00
CONFIGURE_ARGS+= --with-openssl
Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05 21:49:47 +01:00
SUBST_CLASSES+= man
- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14 09:36:54 +01:00
SUBST_STAGE.man= post-patch
SUBST_FILES.man= ike-scan.1
SUBST_SED.man= -e "s|/usr/local|${PREFIX}|g"
Removed the superfluous "quotes" and 'quotes' from variables that don't need them, for example RESTRICTED and SUBST_MESSAGE.*.
2006-04-22 11:22:05 +02:00
SUBST_MESSAGE.man= Fixing man pages.
- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14 09:36:54 +01:00
DESTDIR support
2010-01-27 23:05:28 +01:00
INSTALLATION_DIRS+= share/doc/ike-scan
- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14 09:36:54 +01:00
post-install:
DESTDIR support
2010-01-27 23:05:28 +01:00
${INSTALL_DATA} ${WRKSRC}/README ${DESTDIR}${PREFIX}/share/doc/ike-scan/README
- Update to 1.7 - Add bl3 and openssl support - Fix paths in man pages - Install extra documentation - Remove un-needed options from pkgsrc Makefile Lots of changes/bugfixes from 1.6 including: psk-crack.c: New program to crack Aggressive Mode Pre-Shared Keys using dictionary attack. This uses the output from "ike-scan -P" together with a dictionary.
2005-01-14 09:36:54 +01:00
.include "../../security/openssl/buildlink3.mk"
ike-scan, IKE fingerprinting tool --- ike-scan discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern. ike-scan does two things: a) Discovery: Determine which hosts are running IKE. This is done by displaying those hosts which respond to the IKE requests sent by ike-scan. b) Fingerprinting: Determine which IKE implementation the hosts are using. This is done by recording the times of the IKE response packets from the target hosts and comparing the observed retransmission backoff pattern against known patterns. The retransmission backoff fingerprinting concept is discussed in more detail in the UDP backoff fingerprinting paper which should be included in the ike-scan kit as udp-backoff-fingerprinting-paper.txt. The program sends IKE main mode requests to the specified hosts and displays any responses that are received. It handles retry and retransmission with backoff to cope with packet loss. It also limits the amount of bandwidth used by the outbound IKE packets.
2004-02-27 23:12:51 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink