6630f9fa23
TCT is a collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after break-in. Notable TCT components are the grave-robber tool that captures information, the ils and mactime tools that display access patterns of files dead or alive, the unrm and lazarus tools that recover deleted files, and the findkey tool that recovers cryptographic keys from a running process or from files. WARNING This software is not for the faint of heart. It is relatively unpolished compared to the software that Dan and Wietse usually release. TCT can spend a lot of time collecting data. And although TCT collects lots of data, many analysis tools still need to be written. Based on patches provided in PR 15081 by frazee.23@osu.edu.
13 lines
466 B
Text
13 lines
466 B
Text
$NetBSD: patch-ai,v 1.1.1.1 2002/01/03 10:58:57 agc Exp $
|
|
|
|
--- src/lastcomm/sys_defs.h 2002/01/03 09:49:57 1.1
|
|
+++ src/lastcomm/sys_defs.h 2002/01/03 09:50:25
|
|
@@ -7,7 +7,7 @@
|
|
*/
|
|
#if defined(FREEBSD2) || defined(FREEBSD3) || defined(FREEBSD4) \
|
|
|| defined(BSDI2) || defined(BSDI3) || defined(BSDI4) \
|
|
- || defined(OPENBSD2)
|
|
+ || defined(OPENBSD2) || defined(NETBSD1)
|
|
#define SUPPORTED
|
|
#define _PATH_ACCT "/var/account/acct"
|
|
#define HAVE_COMP_BLOCK_IO_COUNT
|