+ add user _icecast (home directory in /var/icecast)
+ enable chroot by default
+ populate chroot with all the necessary files
ok okan@ sthen@ ajacoutot@
aget is a multithreaded HTTP -for now- download accelerator. aget first
sends a HEAD request to retrieve the length of the file, and divides it
into equal segments according to the number user has requested. Then
for each segment, it connects to the server and gets only the part which
it is to download.
cleaned up submission from Girish Venkatachalam
ok merdely@ long time ago
*IMPORTANT*: Due to a fix in the zone update process, the ixfr.db has a
new format. When you are planning to upgrade to NSD 3.2.x release, make
sure to process the old ixfr.db before starting the new release (by
running nsdc patch).
A bug in the getbulk handling code could let anyone with even minimal
access crash the agent.
(straight out of malloc(3) "be careful to avoid...")
ok rui@ (maintainer)
- add license marker, fix MASTER_SITES, and reorder Makefile
- add perl plugin
- add support for dbus
- links correctly with iconv+intl
reworked from an original diff by Sergey Prysiazhnyi
Telepathy-pinocchio is a connection manager meant for testing Telepathy
applications. Pinocchio interacts with settings files on the filesystem
instead of a remote server, thereby removing two of the biggest
stumbling blocks for testing a Telepathy-based application: the network
and control over the back-end server.
volume by volume salvage by default. This way, servers with lots of files
can be up salvaging volume by volume instead of down until the last volume
is salvaged.
"if it works, go for it" ckuethe@
- specify license version
- take maintainership (prodded by previous maintainer, cannings@)
- reformat DESCR
- add some Gnutella Web Caches that actually work by default
o function'ize openafs-setup and let it setup not just the 1st but also
subsequent afs servers, letting admins choose which afs server programs to
run on each, `works for me(tm)'
bump PKGNAME
maintainers to upgrade their BitlBee daemons as soon as possible,
since this release fixes a security bug that was probably there for
a long time already."""
more info, bitlbee.org
tested by merdely@, wcmaier@, Andrew Dalgleish, Wiktor Izdebski
ok merdely@, wcmaier@
- s/%SYSCONFDIR%/etc where it makes sense (e.g. /etc/rc.conf.local will
always be /etc/rc.conf.local whatever value ${SYSCONFDIR} is set to)
- use SUBST_CMD
- don't hardcode /usr/local
- precise license marker
- s/definately/definitely/ (from sthen@)
"looks good" sthen@, ok todd@
o no longer require kernel sources since not building lkm; if this changes,
the attic can be raided
o typo in openafs-setup comments from sthen@; thanks!
o obey CFLAGS and CC
o twiddle lwp.h patch to be OpenBSD specific
bump PKGNAME
fail to exec autoconf-2.60
o update README.OpenBSD to include rc.local and rc.shutdown bits
o invade and cleanup openafs-setup
- polish consistency
- prompt for a sample general purpose user
- backup CellServDB and restore on script failure
- compact output
- better cleanup incase it is restarted
- show all afs commands as they are run
- reorder various places to make more logical sense
- DO NOT DO RECURSIVE MOUNTS, this leads to panics;
(thanks bob/art for explaining).. i.e. no 'fs mkm /afs/.root.afs root.afs')
- add a few gratuitous remote cells during setup as examples
- add files of consequence to /etc/changelist
bump PKGNAME
arp-scan is a command-line tool for system discovery and fingerprinting.
It constructs and sends ARP requests to the specified IP addresses,
and displays any responses that are received.
arp-scan allows you to:
* Send ARP packets to any number of destination hosts, using a
configurable output bandwidth or packet rate.
This is useful for system discovery, where you may need
to scan large address spaces.
* Construct the outgoing ARP packet in a flexible way.
arp-scan gives control of all of the fields in the ARP
packet and the fields in the Ethernet frame header.
* Decode and display any returned packets.
arp-scan will decode and display any received ARP packets
and lookup the vendor using the MAC address.
* Fingerprint IP hosts using the arp-fingerprint tool.
ok phessler@
pdnsd is a proxy dns server with permanent caching (the cache
contents are written to hard disk on exit) that is designed to cope
with unreachable or down dns servers (for example in dial-in
networking).
original port by dlg@ and robert@, banged into shape by me.
not hooked to the builds as this needs further testing/tweaking
Fixes a couple of edge-case bugs in the mapping of pieces to
mmap'd files on-disk. This makes multi-file torrent downloads
more reliable.
From maintainer Niall O'Higgins
- Support for Fast Extensions (BEP 6), avoiding long hash checks
with Fast Resume and many bugfixes which make transfers happen at
a faster rate.
from niallo@. ok merdely@
- support for OpenBSD's SIOCGIFDESCR
- support for hw.vendor and hw.product on OpenBSD
- manpage now lists default user (_ladvd on OpenBSD)
- location support also works for LLDP (-L)
from MAINTAINER Paul de Weerd, thanks!
any problems on tested arch (including the ones that used to
have trouble).
- repair sysctl() use in cpu_sysctl.c, it was using the wrong
type and at least on some arch the system call was failing, so
because the code isn't careful about checking return codes and
thus used uninitialized space, it tried to allocate memory for
info structures for 128 million CPUs on one of my systems...
"definitely ok" rui@
- SNMP support is now available through an experimental Perl script.
- If snmp.conf is being used in your radiusd.conf you should delete or comment that entry.
- Check the Changelog for more information.
input and ok ajacoutot@
- addresses two potential anonymity issues.
- starts to fix a bug where in rare cases traffic from one Tor stream gets mixed into another stream.
- fixes a variety of smaller issues.
ok fgsch@
Yet another network load monitor. Slurm started as a port of a Linux
PPP link monitor called pppstatus by Gabriel Montenegro. It was then
transformed into a generic netowrk load monitor that supports *BSD,
Linux, HP-UX, and Solaris.
Slurm shows `realtime' traffic statistics, has three graph modes,
can monitor any network device, and uses curses to draw ascii
graphics, including ascii theme support.
From maintainer Ryan Freeman, adjusted by myself and ajacoutot.
ok ajacoutot@
- Tweak how CONFIGURE_ARGS are passed along so as to remove
cases where the Makefile will pass along --without-foo
--with-foo
- Add missing crypto lib for WANTLIB with the ads FLAVOR
Part of the CONFIGURE_ARGS tweaking from form@
Missing lib from WANTLIB pointed out by sthen@
ok sthen@ ajacoutot@
- add -fPIC unconditionally (requested by naddy@) by adding it to
unix.mak (in pwlib) which get sourced by the other ports
feedback from and ok naddy@, thanks!
installed under /etc, whatever $SYSCONFDIR value is)
- s/PREFIX/LOCALBASE and the opposite where it makes sense
- README.OpenBSD is part of samba-docs, so no need to tell the user to
install samba-docs
ok mbalmer@ who gave me ten bonus points for solving the samba puzzle!
Net::FTPSSL is an object oriented Perl module which implements a simple
FTP client over a Secure Socket Layer (SSL) connection written following
the directives described in RFC959 and RFC2228.
from Pierre-Emmanuel Andre
LADVD uses CDP / LLDP frames to inform switches about connected hosts,
which simplifies ethernet switch management. It does this by creating
the required payloads and descriptors on startup and then switching
to a non-privileged user for the remaining runtime.
o add README.OpenBSD (includes heimdal setup instructions)
o rework openafs-setup to use arla's afsd in base, and heimdal
o fix a bug since 4.1 to not blow the thread stack on 64bit time functions in libc
dnstop is a libpcap application (a la tcpdump) that displays
various tables of DNS traffic on your network. Currently dnstop
displays tables of:
* Source IP addresses
* Destination IP addresses
* Query types
* Response codes
* Opcodes
* Top level domains
* Second level domains
* Third level domains
* etc...
dnstop supports both IPv4 and IPv6 addresses.
To help find especially undesirable DNS queries, dnstop provides a
number of filters. The filters tell dnstop to display only the following
types of queries:
* For unknown/invalid TLDs
* A queries where the query name is already an IP address
* PTR queries for RFC1918 address space
ok landry@
RTG is a flexible, scalable, high-performance SNMP statistics
monitoring system. It is designed for enterprises and service
providers who need to collect time-series SNMP data from a large
number of targets quickly. All collected data is inserted into a
relational database that provides a common interface for applications
to generate complex queries and reports. RTG includes utilities
that generate configuration and target files, traffic reports, 95th
percentile reports and graphical data plots. These utilities may
be used to produce a web-based interface to the data.
* Runs as a daemon, incurring no cron or kernel startup overhead
* Written entirely in C for speed, incurring no interpreter overhead
* Multi-threaded for asynchronous polling and database insertion
* Inserts data into a relational database where complex queries
and reports may be generated
* Performs no data averaging in order to support billing, etc.
* Can poll at sub-one-minute intervals
Based on a submission from Tim Kornau via bernd@ and used at bsws
(hence high initial PKGNAME=...p5) - requested by henning@.
which provides cookie-based persistence, automatic failover, header
insertion, deletion, modification on the fly, advanced logging contents
to help troubleshoot buggy applications and/or networks, and a few other
features. It uses its own state machine to achieve up to ten thousands
hits per second on modern hardware, even with thousands of simultaneous
connections.
feedback from merdely@, okan@, wcmaier@
ok merdely@ and pval@
alignment problems have been fixed upstream and no problems have
been seen with this version with default compiler flags, so
remove the hack and bump package.
ok brad@ jakob@
CVE-2008-1105.
Specifically crafted SMB responses can result in a heap overflow
in the Samba client code. Because the server process, smbd, can
itself act as a client during operations such as printer
notification and domain authentication, this issue affects both
Samba client and server installations.
Feedback from sthen@
ok mbalmer@ sthen@
- do not enable DIV_SMALL by default, on all archs
- for now, don't use 128-bit arithmetics on amd64, as a work-around
for the gcc bug. gcc3.3 mangles arguments for __divti3, and amd64
hangs on non-DIV_SMALL, when passing correct arguments. this is
what silc-toolkit and silc-server use, too
unbreaks amd64
- for now, don't use 128-bit arithmetics on amd64, as a work-around
for the gcc bug. gcc3.3 mangles arguments for __divti3, and amd64
hangs on non-DIV_SMALL, when passing correct arguments. this is
what silc-toolkit and silc-server use, too
unbreaks amd64
tested by brad@
initial diff tested by sthen@
"definitely fine with me" brad@
The emesene Windows Live Messenger client supports tabbed chat,
custom emoticons, file transfers, offline messaging, personal
messages, nudges and MSN Plus!. The multilingual GUI can be extended
through customization including themes, smilies, sounds and tweaks
to the conversation format.
requested by and 'please commit' robert@
* remove himself from MAINTAINER as per his request
* fix data types to correct compile time warnings
* fix an off by one
- regen PLIST while here
note: this port should be marked as EOL and removed or is anyone still
using this?
Argus data clients support a range of operations on binary flow data
from Argus, such as sorting, aggregation, archival and reporting.
ok naddy@ sthen@
Argus is a fixed-model real time flow monitor designed to track and
report on the status and performance of all network transactions seen in
a data network traffic stream. Argus provides a common data format for
reporting flow metrics such as connectivity, capacity, demand, loss,
delay, and jitter on a per transaction basis. The record format that
Argus uses is flexible and extensible, supporting generic flow
identifiers and metrics, as well as application/protocol specific
information.
ok naddy@ sthen@
- Make sure client entry is not expired more than once
- Fixed silc_parse_userfqdn argument check
- Remove client from expired client list before deleting it
"Commit that" brad@ (maintainer)
* 2 missing NULL pointer checks
* fixes a cause code translation when no Q.931 code is set
* fixes possible memory leak in virtual queues on unregistered calls
* checks for the new config file on a reload
been touched in 8 years, upstream has disappeared, has a hardcoded
nic list missing almost everything modern, and doesn't build on
some arch.
"it won't make me cry" ajacoutot@
Spectrum-Tools is a set of utilities for using the Wi-Spy USB spectrum
analyzer tools from Metageek LLC (http://www.metageek.net). They include
userspace drivers for the hardware (implemented via libusb), a graphing
UI built on GTK/Cairo, network servers for remote devices, and simple
utilities for developing additional tools.
This package contains the GTK user interface, spectool_gtk.
Non-GUI tools can be found in the spectrum-tools-utils package.
thanks to matthieu@ for testing and ckuethe@ for pointing me at the
svn code (better than the previous release). it's not perfect (some
X resource leaks) but usable.
A vulnerability has been reported in Net-SNMP, which can be exploited
by malicious people to spoof authenticated SNMPv3 packets.
The authentication code reads the length to be checked from sender
input, this allows the sender to supply single byte HMAC code and
have a 1 in 256 chance of matching the correct HMAC and authenticating,
as only the first byte will be checked. The sender would need to
know a valid username.
ok rui (maintainer)
An integrated interface to current and future infrastructural services
offered by Amazon Web Services. Currently, this includes:
- Simple Storage Service (S3)
- Simple Queue Service (SQS)
- Elastic Compute Cloud (EC2)
- Mechanical Turk
- SimpleDB (SDB)
based on the original submission by Bruno Bigras <bruno@burnbox.net>
feedback and ok wcmaier@ merdely@
Net::SSH2 is a Perl interface to the libssh2 library. It supports the
SSH2 protocol (there is no support for SSH1) with all of the key
exchanges, ciphers, and compression of libssh2.
- drop privilegies in ejabberdctl
- add README.OpenBSD
from maintainer Wiktor Izdebski; with tweaks from me
tested by Wiktor Izdebski, Simon Kuhnle and sthen@
ok sthen@
everyone needs that, and it pulls in heavier dependencies)
-- -- --
The nfdump tools collect and process netflow data (v5, v7 and v9)
on the command line. They are part of the NfSen project.
nfcapd - netflow capture daemon. Reads the netflow data from the
network and stores the data into files. Automatically rotate files
every n minutes (typically every 5 minutes). nfcapd reads netflow v5,
v7 and v9 flows transparently. You need one nfcapd process for each
netflow stream.
nfdump - netflow dump. Reads the netflow data from the files stored
by nfcapd. Its syntax is similar to tcpdump. If you like tcpdump
you will like nfdump. Displays netflow data and can create lots of
top N statistics of flows IP addresses, ports etc in whichever
order you like.
nfreplay - netflow replay. Reads the netflow data from the files
stored by nfcapd and sends it over the network to another host.
A web front-end, NfSen, is available at http://nfsen.sourceforge.net/
-- -- --
nfprofile is a netflow profiler, which works with the nfdump tools.
It reads the netflow data from the files stored by nfcapd, filters
the netflow data according to the specified filter sets (profiles)
and stores the filtered data into files for later use.
-- -- --
thanks to eric@ for testing/feedback on an earlier version, and to
upstream for rolling a new release including the patches as a result.
"that should be in ports for sure" henning@
using the standard protocol and various extensions including those used
by TightVNC, UltraVNC, RealVNC and x11vnc providing for features such
as dynamic screen resizing, server-side scaling, blocking input devices
on the server, and low colour modes. Many of these can now be set from
the popup menu.
(and it's much faster than tightvnc-viewer). ok merdely, okan
Fixes checksum complaints on pkg_delete after zenmap has been run by
root (as recommended). Use MODPY_EGG_VERSION while here and bump
PKGNAME.
ok okan@, "looks ok" merdely@
- add @comment markers to keep make plist happy
- remove the need for us to install the manpage.
- alpha fix from merdely@
- workaround for Paths.pyc needing to be re-generated - from wcmaier@
(a discussion has been started with upstream to remedy this bit)
feedback and ok merdely@
* A CA cert bundle is no longer included, so point to /etc/ssl/cert.pem.
* Compile examples during build rather than fake stage.
ok sthen@, additional testing by merdely@
The Galago presence daemon, which is the center of all presence
transactions for Galago. This service is automatically launched by D-BUS
when needed.
ok ajacoutot@
Net::SSH::Gateway is a library for programmatically tunneling
connections to servers via a single "gateway" host. It is useful for
establishing Net::SSH connections to servers behind firewalls, but
can also be used to forward ports and establish connections of other
types, like HTTP, to servers with restricted access.
Net::SCP is a pure-Ruby implementation of the SCP protocol. This operates
over SSH (and requires the Net::SSH library), and allows files and
directory trees to copied to and from a remote server.
OPAL is an open-source class library for the development of applications
that wish to use the SIP and H.323 protocols for multi-media
communications over packet based networks.
