replace the old EFF pcapdiff (which seems to be broken following various

changes in python network tools, and also has been discontinued upstream)
with a similarly named similar alternative, the script itself is fairly
simple as scapy is used to do much of the work.
This commit is contained in:
sthen 2020-12-10 22:02:02 +00:00
parent 24dc82a9f9
commit 292712e33e
4 changed files with 27 additions and 40 deletions

View File

@ -1,33 +1,28 @@
# $OpenBSD: Makefile,v 1.8 2019/07/12 20:48:42 sthen Exp $
# $OpenBSD: Makefile,v 1.9 2020/12/10 22:02:02 sthen Exp $
COMMENT = compare pcap dump files
MODPY_EGG_VERSION = 0.1
DISTNAME = pcapdiff-${MODPY_EGG_VERSION}
REVISION = 3
GH_ACCOUNT = isginf
GH_PROJECT = pcap-diff
GH_COMMIT = d4c129e98527f42fbd94362d50608d5286e3f57d
DISTNAME = pcapdiff-0.20180816
CATEGORIES = net security
HOMEPAGE = https://www.eff.org/pages/pcapdiff
# GPLv2/GPLv3 (only)
# GPLv3+
PERMIT_PACKAGE = Yes
MASTER_SITES = https://www.eff.org/files/
MODULES = lang/python
RUN_DEPENDS = net/py-pcapy
RUN_DEPENDS = net/scapy,python3
NO_TEST = Yes
NO_BUILD = Yes
MODPY_ADJ_FILES = pcap_diff.py
MODPY_VERSION = ${MODPY_DEFAULT_VERSION_3}
WRKDIST = ${WRKDIR}/pcapdiff
pre-configure:
@cp ${FILESDIR}/setup.py ${WRKSRC}
post-install:
.for i in pcapdiff printpackets
mv ${PREFIX}/bin/$i.py ${PREFIX}/bin/$i
.endfor
do-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/pcapdiff
${INSTALL_DATA} ${WRKSRC}/[A-Z]* ${PREFIX}/share/doc/pcapdiff/
${INSTALL_SCRIPT} ${WRKSRC}/pcap_diff.py ${PREFIX}/bin/
.include <bsd.port.mk>

View File

@ -1,2 +1,2 @@
SHA256 (pcapdiff-0.1.tar.gz) = kSwz2msN+0rdWGfRNYSoNvhtf623+kwF00SjnL3LONM=
SIZE (pcapdiff-0.1.tar.gz) = 27325
SHA256 (pcapdiff-0.20180816-d4c129e9.tar.gz) = JURZjA13prCty/Hm9sFPQAbGtBgEx7M+MPpcGT2XDr8=
SIZE (pcapdiff-0.20180816-d4c129e9.tar.gz) = 16031

View File

@ -1,9 +1,6 @@
Pcapdiff is a tool developed by the EFF to compare two packet captures
and identify potentially forged, dropped, or mangled packets.
Two technically-inclined friends can set up packet captures on their
own computers and produce network traffic between their two computers
over the Internet.
Later, they can run pcapdiff on the two packet capture files to
identify suspicious packets for further investigation.
pcap_diff.py is a tool that takes two or more pcap files as input,
compares them, and produces a pcap file or displays to show differences
between the two. It is useful when comparing packets captured at two
points to identify interference with packets. It has options to ignore
certain parts of the packet (by default ttl, checksums and timestamps
are ignored).

View File

@ -1,10 +1,5 @@
@comment $OpenBSD: PLIST,v 1.1.1.1 2009/04/21 16:36:23 sthen Exp $
bin/pcapdiff
bin/printpackets
lib/python${MODPY_VERSION}/site-packages/pcapdiff-${MODPY_EGG_VERSION}-py${MODPY_VERSION}.egg-info
lib/python${MODPY_VERSION}/site-packages/pcapdiff.py
lib/python${MODPY_VERSION}/site-packages/pcapdiff.pyc
lib/python${MODPY_VERSION}/site-packages/pcapdiff_helper.py
lib/python${MODPY_VERSION}/site-packages/pcapdiff_helper.pyc
lib/python${MODPY_VERSION}/site-packages/printpackets.py
lib/python${MODPY_VERSION}/site-packages/printpackets.pyc
@comment $OpenBSD: PLIST,v 1.2 2020/12/10 22:02:02 sthen Exp $
bin/pcap_diff.py
share/doc/pcapdiff/
share/doc/pcapdiff/LICENSE.txt
share/doc/pcapdiff/README.rst