cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

patch from CyberPsychotic <mlists@gizmo.kyrnet.kg>

Browse Source
This commit is contained in:
brad 1999-05-26 14:49:00 +00:00
parent f3e31a5597
commit 059ba72588
2 changed files with 47 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
net/sniffit/Makefile
View File

@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.3 1999/04/09 04:11:50 brad Exp $
# $OpenBSD: Makefile,v 1.4 1999/05/26 14:49:00 brad Exp $
# $FreeBSD: Makefile,v 1.1.1.1 1998/04/04 04:58:25 obrien Exp $
DISTNAME= sniffit.0.3.5
@ -17,9 +17,7 @@ do-install:
${INSTALL_PROGRAM} ${WRKSRC}/sniffit ${PREFIX}/sbin
${INSTALL_MAN} ${WRKSRC}/sniffit.5 ${PREFIX}/man/man5
${INSTALL_MAN} ${WRKSRC}/sniffit.8 ${PREFIX}/man/man8
.if !defined(NOPORTDOCS)
${MKDIR} ${PREFIX}/share/doc/sniffit
${INSTALL_MAN} ${WRKSRC}/README.FIRST ${PREFIX}/share/doc/sniffit
.endif
.include <bsd.port.mk>

85
net/sniffit/patches/patch-ab
View File

@ -1,39 +1,46 @@
*** sniffit.0.3.5.c.orig Fri Apr 18 16:33:58 1997
--- sniffit.0.3.5.c Thu May 7 15:02:13 1998
***************
*** 411,421 ****
--- 411,432 ----
proto=unwrap_packet(sp, info);
if(proto == NO_IP) return DONT_EXAMINE; /* no use in trying */
if(proto == NO_IP_4) return DONT_EXAMINE; /* no use in trying */
+ if(proto == CORRUPT_IP)
+ {
+ printf("Suspicious Packet detected... (Split header)\n");
+ return DONT_EXAMINE;
+ }
memcpy(&iphead,(sp+PROTO_HEAD),sizeof(struct IP_header));
so=(unsigned char *)&(iphead.source);
dest=(unsigned char *)&(iphead.destination);
+ if(info->FRAG_nf!=0)
+ {
+ printf("Fragment Skipped...\n");
+ return DONT_EXAMINE;
+ }
+
if((proto==TCP)&&(PROTOCOLS&F_TCP))
{
#ifdef DEBUG_ONSCREEN
***************
*** 1220,1225 ****
--- 1231,1239 ----
proto=unwrap_packet(sp, info);
if(proto == NO_IP) return DONT_EXAMINE; /* no use in trying */
if(proto == NO_IP_4) return DONT_EXAMINE; /* no use in trying */
+ if(proto == CORRUPT_IP) return DONT_EXAMINE; /* no use in trying */
+
+ if(info->FRAG_nf!=0) return DONT_EXAMINE;
(*IP_nr_of_packets)++;
if(proto==ICMP)
--- sniffit.0.3.5.c.orig Fri Apr 18 05:33:58 1997
+++ sniffit.0.3.5.c Wed May 26 09:42:33 1999
@@ -93,7 +93,9 @@
exit(0);
}
-void my_exit (void) { exit(0);};
+void my_exit (void) {
+ if(LOGGING=1) stop_logging();
+ exit(0);};
/* DEBUGGING INFO */
#ifdef DEBUG
@@ -411,11 +413,22 @@
proto=unwrap_packet(sp, info);
if(proto == NO_IP) return DONT_EXAMINE; /* no use in trying */
if(proto == NO_IP_4) return DONT_EXAMINE; /* no use in trying */
+ if(proto == CORRUPT_IP)
+ {
+ printf("Suspicious Packet detected... (Split header)\n");
+ return DONT_EXAMINE;
+ }
memcpy(&iphead,(sp+PROTO_HEAD),sizeof(struct IP_header));
so=(unsigned char *)&(iphead.source);
dest=(unsigned char *)&(iphead.destination);
+ if(info->FRAG_nf!=0)
+ {
+ printf("Fragment Skipped...\n");
+ return DONT_EXAMINE;
+ }
+
if((proto==TCP)&&(PROTOCOLS&F_TCP))
{
#ifdef DEBUG_ONSCREEN
@@ -1220,6 +1233,9 @@
proto=unwrap_packet(sp, info);
if(proto == NO_IP) return DONT_EXAMINE; /* no use in trying */
if(proto == NO_IP_4) return DONT_EXAMINE; /* no use in trying */
+ if(proto == CORRUPT_IP) return DONT_EXAMINE; /* no use in trying */
+
+ if(info->FRAG_nf!=0) return DONT_EXAMINE;
(*IP_nr_of_packets)++;
if(proto==ICMP)