Quentin Garnier.
Arping can be used to find out it a specific IP address on the LAN is 'taken'
and what MAC address owns it. Sure, you *could* just use 'ping' to find out if
it's taken and even if the computer blocks ping (and everything else) you still
get an entry in your ARP cache. But what if you aren't on a routable net? Or
the host blocks ping (all ICMP even)? Then you're screwed. Or you use arping.
<drue at users.sourceforge.net>.
Argus is a system and network monitoring application. It will monitor
anything you ask it to monitor (TCP + UDP applications, IP connectivity,
SNMP OIDS, Programs, Databases, etc), presents a nice clean, easy to view
web interface, it can send alerts numerous ways (such as via pager) and
can automatically escalate if someone falls asleep.
traps arrive in a steady stream, straps will exit before the client
(scotty) manages to connect, because traps are handled before new
client connections in straps. Adds a sleep(3) first, and rearranges
the order of handling of these events, so that scotty can get around
to connecting as a client before the first trap is handled by straps.
Bump pkgrevision to 3.
hlfl stands for "High Level Firewall Language". It permits writing
firewalling rules using a high level language, and transforms them into
rules for real softwares, like ipfilter, ipchains or cisco rules.
This module a simple file-based database. This database simply contains IP
blocks as keys, and countries as values. The data contains all public IP
addresses and should be more complete and accurate than reverse complete
COMPLETE and accurate than reverse DNS lookups.
This module can be used to automatically select the geographically closest
mirror, or to analyze your web server logs to determine the countries of
your visitors.
Changes since 1.3.1:
* Fixed bug where *.gz file(s) didn't get removed after geoipupdate
* Added support for NetSpeed lookup to geoiplookup
* inet_addr patch for 64 bit systems (Thomas Steudten)
* Added Support for automated downloads of GeoIP Region, City, ISP
and Organization databases (Frank Mather)
* INADDR_NONE Patch for Solaris 9 (John Young)
* Added support for Maxmind NetSpeed
- Grab maintainership of the package (with ok of previous owner)
- Use SUBST_* code
Ok'ed wiz@, snj@, salo@
From the changelog:
2004-05-06 Daniel Roelker <droelker@sourcefire.com>
* src/detection-plugins/sp_pattern_match.c:
Fixed rule read up error when parsing hexmode content options.
Thanks for pointing it out Toni Maatta. (Roelker)
* src/preprocessors/spp_stream4.c:
Fixed null pointer dereference when detect_scans were enabled and
creating a new session that had funky flags. Thanks to Chad
Kreimendahl for reporting the bug and testing the fix. (Roelker)
2004-04-20 Daniel Roelker <droelker@sourcefire.com>
* src/event_queue.c:
* src/event_queue.h:
* src/sfutil/sfeventq.c:
* src/sfutil/sfeventq.h:
Added multi-event queueing in Snort. Snort now supports logging
multiple events per packet, and prioritizing those events using
different methods. Thanks to H.D. Moore for illustrating event
obfuscations when snort only logged one event per packet. (Roelker)
* src/snort.c:
* src/decode.c:
* src/detect.c:
* src/fpcreate.c:
* src/fpdetect.c:
* src/preprocessors/spp_arpspoof.c:
* src/preprocessors/spp_bo.c:
* src/preprocessors/spp_frag2.c:
* src/preprocessors/snort_httpinspect.c:
* src/preprocessors/spp_rpc_decode.c:
* src/preprocessors/spp_stream4.c:
Updated event generators to use new event queueing sytem. (Roelker)
* src/output-plugins/spo_alert_fast.c:
Added newline to 'cmg' alert output, so IP decode is easier to
read. (Roelker)
* src/output-plugins/spo_database.c:
Updated how current/utc times are calculated, as well as how they are
formatted, thanks Marcus Janoski. (Reid)
* src/parser.c:
Error on unterminated IP lists. Added 'config event_queue' parameter.
Configuration changes to 'config checksum_mode' for specifying
which checksums to do. (Norton)
* src/plugbase.h:
Fixes from Chris Reid for timestamp routines. (Reid)
* src/tag.c:
Revert to old tag functionality. Will add proposed tagging
configurations in the future. (Roelker)
changes:
- Bug fixes:
- SOAPpy/Server.py: Check if header information contains SOAPAction
key before checking its value.
- Fixes for generating SOAP from complexType arrays, contributed by
antonio.beamud@linkend.com
- Fixed bug that caused typedArrayTypes to lose their type
information when rendered to SOAP and added corresponding
test case.
- New Features
- Enhancements to fault handling: The faultType Faultstring is now
a non-variable string (i.e. no nsmethod in it) so that it can be
programmatically checked. In addition fault handlers can now be
registered to handle specific types of faults.
- SOAPpy/Server.py: Modified unregsiterObject function to take
optional namespace/path args to be consistent with registerObject.
- SOAPpy/Server.py: Added an unregisterObject function
- Changes to allow SOAPBuilder so it can handle a 'raw' Python object.
For details see:
http://sourceforge.net/project/showfiles.php?group_id=26590
Ok'ed wiz@/snj@
From the CHANGELOG:
2004-03-24 Hajimu UMEMOTO <ume@mahoroba.org>
* Socket6.pm: Bump version number to 0.17.
* Socket6.xs: Shut up signed/unsigned mismatch warning from
Microsoft C++.
Reported by: "David Town" <dtown@cpan.org>
* Makefile.PL: CC is not a valid parameter for WriteMakefile().
Use CONFIGURE instead.
Submitted by: "David Town" <dtown@cpan.org>
* Socket6.pm: Correct typos (inaddr6_* -> in6addr_*).
Submitted by: "David Town" <dtown@cpan.org>
2004-03-23 Hajimu UMEMOTO <ume@mahoroba.org>
* Provide substitutes for systems the lack support for inet_ntop()
and inet_pton().
Submitted by: "David Town" <dtown@cpan.org>
* Add support for MSWin32. It was tested with the following
configuration:
- ActivePerl 5.8.0 (805)
- Windows 2000
- Microsoft IPv6 Technology Preview for Windows 2000 (not needed
for XP)
(http://msdn.microsoft.com/downloads/sdks/platform/tpipv6.asp)
- Microsoft Visual C++ v6.0
- Microsoft Platform SDK February 2003 (must have at least
August 2001)
(http://www.microsoft.com/msdownload/platformsdk/sdkupdate/downlevel.htm)
Submitted by: "David Town" <dtown@cpan.org>
* t/use.t: Pass an empty string as the SERVICENAME to
getaddrinfo(). MSWin32's getaddrinfo() doesn't like "0" as a
numeric servname.
Submitted by: "David Town" <dtown@cpan.org>
2004-02-21 Hajimu UMEMOTO <ume@mahoroba.org>
* Socket6.pm: Bump version number to 0.16.
* aclocal.m4: inet_ntop and inet_pton are in libnsl on Solaris.
Submitted by: Mike McCauley <mikem@open.com.au>
2004-01-05 Hajimu UMEMOTO <ume@mahoroba.org>
* Socket6.pm: Bump version number to 0.14.
* gailookup.pl.in: Though some systems has NI_WITHSCOPEID, RFC
2553 doesn't mention it, and RFC 3493 deprecated it. So, make use
of NI_WITHSCOPEID optional.
* gailookup.pl.in: Add -S option which suppress scopeid. RFC 3493
system always adds scopeid in a result of getnameinfo().
* Socket6.xs: Make pack_sockaddr_in6() and pack_sockaddr_in6_all()
actual work on systems which have sin6_len in struct sockaddr_in6.
2004-01-04 Hajimu UMEMOTO <ume@mahoroba.org>
* aclocal.m4: getaddrinfo() is a macro on some systems.
* Socket6.pm: Bump version number to 0.13.
* getaddrinfo.c (getaddrinfo): EAI_NODATA was deprecated in RFC
3493. return EAI_NONAME instead.
* getnameinfo.c (getnameinfo): add support for NI_NAMEREQD.
2003-12-29 Hajimu UMEMOTO <ume@mahoroba.org>
* add simple test.
CTorrent is a BitTorrent client written in the C programming language.
It currently runs on most Linux variants, MacOS and FreeBSD, but
hopefully on Windows as well! CTorrent is built as a console program,
which means that it doesn't require any graphical components (such as an
X server) on the machine you are running it on, you can even run it
remotely through a terminal if you wish.
- Add option to build with SpeedyCGI support (USE_SPEEDY)
- Use @RCD_SCRIPTS_SHELL@ instead of hardcoded /bin/sh
- Use REPLACE_PERL instead of patch/sed hack
Closes PR #25549 submitted by me.
Ok'ed wiz@/bouyer@
From the CHANGELOG:
2004/05/12 -- 1.30
* fix nodata_color syntax --tobi
* when inserting unknown values into sorted rtt list, do this on the outside
... U:U:1:2:3:U:U and not in the middle. This will make the graphs more
smokei when there is data loss. --tobi
* config files with different probes should work ... fixed problem introduced
in 1.29 --tobi
2004/05/08 -- 1.29
* while running, make all die and warn things go to the log file if there is
one --tobi
* added rawlog option for logging actual gatherd data --tobi (for virtela)
* added alertee option to send a copy of any alert generated to additional
'perbranche' people --tobi
* cgi should not complain about non existing hosts ... the daemon does that i
already --tobi
* actually allow empty alerts -- tobi
* added nodata_color property to specify background color for graph when
when no data is available -- David Hull <hull@dslextreme.com>
* new option subtitle for indexmaker
* added new options for printing date inside the graph:
TimeStrPos[] and TimeStrFmt[]
* fix indexmaker when used with 14all
* translation updates
* added 3com RMON VLAN detection to cfgmaker
Changes:
- completion for bm: URL scheme implemented.
- fixed `du' command with large files >2Gb.
- fixed saving old directory when no cd verification is performed.
- compilation on HP-UX fixed.
IRIX:
- add flexibility to PLIST
- add configure arguments to point to openssl if not builtin
- don't use '-print0' to find(1). IRIX' find does not have this capability,
and since we know for a fact that it will not be needed, we can leave it
out in this case.
changes:
* kppp: Fix flow control for non-English users
* kppp: Added /dev/ttyS4 device. Custom devices still cannot be set
unfortunately.
* kget: Fix filesize display for files > 2GB
* kopete: Don't add temporary Yahoo! contacts to the serverside list.
* kopete: Kopete doesn't save settings when exiting KDE
* kopete: Close button doesn't close application when the system tray is
disabled
* kopete: Ignoring incoming IRC conversations crashes Kopete
* kopete: Avoid using libpng if no image is present
* kopete: When I type more than one space in a row, Kopete sends the
characters " "
* kopete: Yahoo won't connect with correct password on AMD64
Howl is a cross-platform implementation of the Zeroconf networking standard.
Branded as Rendezvous tm by Apple Computer, Inc., Zeroconf standardizes
networking protocols for delivering hassle-free ad-hoc networking, service
discovery, and IP configuration.
Howl version 0.6 contains both runtime components, which deliver the
Zeroconf/Rendezvous functionality, and an SDK for embedding Zeroconf/Rendezvous
functionality in your applications.
- Introduce adduser/deluser script from samba2 package.
- Here is changes:
Changelog of Samba2.2 Japanese Edition
Samba Users Group Japan
Here is the fix list of Samba2.2 Japanese Edition.
The sign of each line means:
*: Fix of Samba Japanese Edition only
x: Fix of sending a patch to Samba Team
c: Fix of being commited a patch by Samba Team
o: Fix of adopting a patch created by Samba team
samba-2.2.8a-ja-1.2alpha3
~~~~~~~~~~~~~~~~~~~~~~~~~
o Fixed oplocks problem for Linux kernel 2.4 or later
[sugj-tech:6096]
samba-2.2.8a-ja-1.2alpha2
~~~~~~~~~~~~~~~~~~~~~~~~~
Changes to the internationalized version
* Support Kerberos V not only for FreeBSD [sugj-tech:6030]
* Adjust some directory specifications for RPM [sugj-tech:6029]
* Fixed unavailable winbind auth problem on FreeBSD [sugj-tech:6049]
* Fixed smbwrapper.64.so problem for 64bit Solaris [sugj-tech:6048]
Changes to the original version
* Suppressed abortion in some commands when resolve order is specified
[sugj-tech:6031]
* Fixed unchangeable password problem when Samba is PDC for BSDish OS
[sugj-tech:6073]
samba-2.2.8a-ja-1.2alpha1
~~~~~~~~~~~~~~~~~~~~~~~~~
Changes to the internationalized version
* Fixed unavailable Japanese problem for username in username map
[samba-jp:15437]
Changes to the original version
* Fixed build problem with Mac OS X [samba-jp:15461]
* Fixed unaccessable problem in BSD/OS, Mac OS X [samba-jp:15472]
configure script of this package replaces @LDFLAGS@ with
${CONFIGURE_LDFLAGS}, not with ${LDFLAGS}. This fixes the problem
that ed2k_gui doesn't run on some platforms due to incorrect rpath.
Bump PKGREVISION.
Revision history for Net::DNS
=============================
*** 0.47 April 1, 2004
safe_push() is back in Net::DNS::Packet, due to the excellent debate
skills of Luis E Monoz. However, the name safe_push() is deprecated,
use the new name unique_push() instead.
Fixed a bug in Net::DNS::Nameserver which caused the class to build
packets incorrectly in some cases. [Ask Bjorn Hansen]
Error message cleanups in Net::DNS::typesbyname()
and Net::DNS::typesbyval() [Ask Bjorn Hansen]
Net::DNS::RR::new_from_hash() now works with unknown RR types [Olaf].
Changes:
========
Several bugs fixed. Encrypted FXP support added. CPU usage optimizations.
- encrypted FXP is now supported with CPSV or SSCN commands.
- new setting ftp:ssl-protect-fxp (default is no).
- cpu usage optimizations, sftp speed-up.
- fixed uploading of zero sized files over ftp.
- fixed coredump when AUTH SSL was used and the server refused to setup ssl
connection.
- fixed coredump on unexpected extra ftp server reply.
- added workaround for ftp servers violating RFC2389 (format of FEAT reply).
- added workaround for ftp servers which refuse to switch to utf-8 before
login.
- fixed compilation on systems without strtok_r.
patch provided by Michal Pasternak in PR pkg/25705
changes:
- Address objects for IPv4 and Unix addresses throughout twisted.internet.
- Improved connected UDP APIs.
- Refactored SSH client support.
- Initial implementation of Windows I/O Completion Ports event loop.
- Bug fixes and feature enhancements.
- Nevow support for Lore (so your Lore documents can use Nevow directives).
- This is the last release before Twisted begins splitting up.
* Fixed some bugs, including an important tracker bug
* Added 'warning message' so trackers can send non-fatal human
readable messages to clients
* Fixed problem where some users got 'could not find file' message
Changes:
- better DESCR and COMMENT
3.0.3:
======
* cls for sftp can now print symbolic user, group and number of hard links.
* make cd dir/ check if dir exists.
* follow ftp:ssl-force even if ftp server does not advertise AUTH in FEAT reply.
* fixed excessive STAT commands in FXP transfer.
* fixed core dump when disconnecting with active FXP transfer.
* fixed memory leak in sftp uploading and file renaming.
Major changes since 0.55:
+ Merged SOAP::MIME into SOAP::Lite's core
+ Cleaned up the UI for the Makefile.PL script - it now detects and
indicated whether certain Perl modules have been detected. The
table displaying installation preferences has been substantially
cleaned up, the code is much more modular and relies on a simple
data structure representing potential module dependencies.
+ Made the Makefile.PL script iterative - meaning, the user will be
continually be presented with their preferences until they
explicity choose to accept them and continue (bug 747295)
+ Differentiate between xsd:int and xsd:long to fix interoperability
bug with Java Web services
! Fixed MIME interoperability bug with Apache Axis - Axis' MIME
parser requires that MIME boundaries are terminiated by a CRLF
character where the MIME::Tools package only outputs a CR
character. A patch was integrated into the MIME::Tools module
which allows SOAP::Lite to specify its own MIME Boundary delimiter
! SOAP Faultcodes are now properly typed a xsd:QName, whereas
before they were xsd:string - to be honest, they are left untyped
so that toolkits can serialize them according to the schema
(bug 747283)
! Fixed documentation error around turning on a trace for multiple
"channels" (bug 747310)
! Disabled SOAPStruct (bug 747316)
! Fixed XML::Parser::Expat vulnerability (bug 747265)
! Added item in TROUBLESHOOTING section explaining that there is a
bug in Perl 5.8 that prevents +autodispatch from working properly.
The workaround is to use dispatch_from instead (bug 747290)
! Fixed warning when autodispatched call has no parameters
(bug 747286)
! Fixed warning when empty SOAPAction specified (bug 747278)
! Turned off HTTP keep alive patch by default, however users can now
turn on the patch by setting the constant PATCH_HTTP_KEEPALIVE to
1 (bug 747281)
! Removed dependency on the URI module for non-HTTP transports
(bug 747306)
IPv6) but not the successor RFC 2553. The configure script detects this
and decides that tnftp needs to compile its own version of getaddrinfo().
This produces the error message
/usr/include/netdb.h:248: `getaddrinfo' previously defined here
because Unixware provides an implementation of getaddrinfo() in netdb.h
instead of a prototype declaration :-/. Since netdb.h cannot be omitted,
we will always get this definition and tnftp's version of getaddrinfo
will always create a conflict.
This ugly preprocessor hack works around the problem. Hints for a better
solution welcome.
New:
- test suite supports testing over other transports (tcp, udp6, unix, ...)
(see the -P switch to the testing/RUNTESTS script)
- Solaris supports the use of it's PKCS#11 library for supporting
cryptographic functions (OpenSSL isn't required if PKCS#11 is available)
(see configure's --with-pkcs flag)
Fixes:
- Improvements on 64 bit architectures.
- A few minor memory leaks fixed.
- An extremely large number of minor bug fixes.
- Many perl module specific bug fixes.
- snmpd will safely handle more signals.
Ports:
- Many many significant Windows improvements.
- A win32 build script in win32/build.pl
- Support for the MinGW compiler
- (see the README.win32 file for details on new ports)
- Various helpful win32/*.bat files for installation, etc.
- Some linux 2.6 support improvements
