LADVD uses CDP / LLDP frames to inform switches about connected hosts,
which simplifies ethernet switch management. It does this by creating
the required payloads and descriptors on startup and then switching
to a non-privileged user for the remaining runtime.
o add README.OpenBSD (includes heimdal setup instructions)
o rework openafs-setup to use arla's afsd in base, and heimdal
o fix a bug since 4.1 to not blow the thread stack on 64bit time functions in libc
dnstop is a libpcap application (a la tcpdump) that displays
various tables of DNS traffic on your network. Currently dnstop
displays tables of:
* Source IP addresses
* Destination IP addresses
* Query types
* Response codes
* Opcodes
* Top level domains
* Second level domains
* Third level domains
* etc...
dnstop supports both IPv4 and IPv6 addresses.
To help find especially undesirable DNS queries, dnstop provides a
number of filters. The filters tell dnstop to display only the following
types of queries:
* For unknown/invalid TLDs
* A queries where the query name is already an IP address
* PTR queries for RFC1918 address space
ok landry@
RTG is a flexible, scalable, high-performance SNMP statistics
monitoring system. It is designed for enterprises and service
providers who need to collect time-series SNMP data from a large
number of targets quickly. All collected data is inserted into a
relational database that provides a common interface for applications
to generate complex queries and reports. RTG includes utilities
that generate configuration and target files, traffic reports, 95th
percentile reports and graphical data plots. These utilities may
be used to produce a web-based interface to the data.
* Runs as a daemon, incurring no cron or kernel startup overhead
* Written entirely in C for speed, incurring no interpreter overhead
* Multi-threaded for asynchronous polling and database insertion
* Inserts data into a relational database where complex queries
and reports may be generated
* Performs no data averaging in order to support billing, etc.
* Can poll at sub-one-minute intervals
Based on a submission from Tim Kornau via bernd@ and used at bsws
(hence high initial PKGNAME=...p5) - requested by henning@.
which provides cookie-based persistence, automatic failover, header
insertion, deletion, modification on the fly, advanced logging contents
to help troubleshoot buggy applications and/or networks, and a few other
features. It uses its own state machine to achieve up to ten thousands
hits per second on modern hardware, even with thousands of simultaneous
connections.
feedback from merdely@, okan@, wcmaier@
ok merdely@ and pval@
alignment problems have been fixed upstream and no problems have
been seen with this version with default compiler flags, so
remove the hack and bump package.
ok brad@ jakob@
CVE-2008-1105.
Specifically crafted SMB responses can result in a heap overflow
in the Samba client code. Because the server process, smbd, can
itself act as a client during operations such as printer
notification and domain authentication, this issue affects both
Samba client and server installations.
Feedback from sthen@
ok mbalmer@ sthen@
- do not enable DIV_SMALL by default, on all archs
- for now, don't use 128-bit arithmetics on amd64, as a work-around
for the gcc bug. gcc3.3 mangles arguments for __divti3, and amd64
hangs on non-DIV_SMALL, when passing correct arguments. this is
what silc-toolkit and silc-server use, too
unbreaks amd64
- for now, don't use 128-bit arithmetics on amd64, as a work-around
for the gcc bug. gcc3.3 mangles arguments for __divti3, and amd64
hangs on non-DIV_SMALL, when passing correct arguments. this is
what silc-toolkit and silc-server use, too
unbreaks amd64
tested by brad@
initial diff tested by sthen@
"definitely fine with me" brad@
The emesene Windows Live Messenger client supports tabbed chat,
custom emoticons, file transfers, offline messaging, personal
messages, nudges and MSN Plus!. The multilingual GUI can be extended
through customization including themes, smilies, sounds and tweaks
to the conversation format.
requested by and 'please commit' robert@
* remove himself from MAINTAINER as per his request
* fix data types to correct compile time warnings
* fix an off by one
- regen PLIST while here
note: this port should be marked as EOL and removed or is anyone still
using this?
Argus data clients support a range of operations on binary flow data
from Argus, such as sorting, aggregation, archival and reporting.
ok naddy@ sthen@
Argus is a fixed-model real time flow monitor designed to track and
report on the status and performance of all network transactions seen in
a data network traffic stream. Argus provides a common data format for
reporting flow metrics such as connectivity, capacity, demand, loss,
delay, and jitter on a per transaction basis. The record format that
Argus uses is flexible and extensible, supporting generic flow
identifiers and metrics, as well as application/protocol specific
information.
ok naddy@ sthen@
- Make sure client entry is not expired more than once
- Fixed silc_parse_userfqdn argument check
- Remove client from expired client list before deleting it
"Commit that" brad@ (maintainer)
* 2 missing NULL pointer checks
* fixes a cause code translation when no Q.931 code is set
* fixes possible memory leak in virtual queues on unregistered calls
* checks for the new config file on a reload
been touched in 8 years, upstream has disappeared, has a hardcoded
nic list missing almost everything modern, and doesn't build on
some arch.
"it won't make me cry" ajacoutot@
Spectrum-Tools is a set of utilities for using the Wi-Spy USB spectrum
analyzer tools from Metageek LLC (http://www.metageek.net). They include
userspace drivers for the hardware (implemented via libusb), a graphing
UI built on GTK/Cairo, network servers for remote devices, and simple
utilities for developing additional tools.
This package contains the GTK user interface, spectool_gtk.
Non-GUI tools can be found in the spectrum-tools-utils package.
thanks to matthieu@ for testing and ckuethe@ for pointing me at the
svn code (better than the previous release). it's not perfect (some
X resource leaks) but usable.
A vulnerability has been reported in Net-SNMP, which can be exploited
by malicious people to spoof authenticated SNMPv3 packets.
The authentication code reads the length to be checked from sender
input, this allows the sender to supply single byte HMAC code and
have a 1 in 256 chance of matching the correct HMAC and authenticating,
as only the first byte will be checked. The sender would need to
know a valid username.
ok rui (maintainer)
An integrated interface to current and future infrastructural services
offered by Amazon Web Services. Currently, this includes:
- Simple Storage Service (S3)
- Simple Queue Service (SQS)
- Elastic Compute Cloud (EC2)
- Mechanical Turk
- SimpleDB (SDB)
based on the original submission by Bruno Bigras <bruno@burnbox.net>
feedback and ok wcmaier@ merdely@
Net::SSH2 is a Perl interface to the libssh2 library. It supports the
SSH2 protocol (there is no support for SSH1) with all of the key
exchanges, ciphers, and compression of libssh2.
- drop privilegies in ejabberdctl
- add README.OpenBSD
from maintainer Wiktor Izdebski; with tweaks from me
tested by Wiktor Izdebski, Simon Kuhnle and sthen@
ok sthen@
everyone needs that, and it pulls in heavier dependencies)
-- -- --
The nfdump tools collect and process netflow data (v5, v7 and v9)
on the command line. They are part of the NfSen project.
nfcapd - netflow capture daemon. Reads the netflow data from the
network and stores the data into files. Automatically rotate files
every n minutes (typically every 5 minutes). nfcapd reads netflow v5,
v7 and v9 flows transparently. You need one nfcapd process for each
netflow stream.
nfdump - netflow dump. Reads the netflow data from the files stored
by nfcapd. Its syntax is similar to tcpdump. If you like tcpdump
you will like nfdump. Displays netflow data and can create lots of
top N statistics of flows IP addresses, ports etc in whichever
order you like.
nfreplay - netflow replay. Reads the netflow data from the files
stored by nfcapd and sends it over the network to another host.
A web front-end, NfSen, is available at http://nfsen.sourceforge.net/
-- -- --
nfprofile is a netflow profiler, which works with the nfdump tools.
It reads the netflow data from the files stored by nfcapd, filters
the netflow data according to the specified filter sets (profiles)
and stores the filtered data into files for later use.
-- -- --
thanks to eric@ for testing/feedback on an earlier version, and to
upstream for rolling a new release including the patches as a result.
"that should be in ports for sure" henning@
using the standard protocol and various extensions including those used
by TightVNC, UltraVNC, RealVNC and x11vnc providing for features such
as dynamic screen resizing, server-side scaling, blocking input devices
on the server, and low colour modes. Many of these can now be set from
the popup menu.
(and it's much faster than tightvnc-viewer). ok merdely, okan
Fixes checksum complaints on pkg_delete after zenmap has been run by
root (as recommended). Use MODPY_EGG_VERSION while here and bump
PKGNAME.
ok okan@, "looks ok" merdely@
- add @comment markers to keep make plist happy
- remove the need for us to install the manpage.
- alpha fix from merdely@
- workaround for Paths.pyc needing to be re-generated - from wcmaier@
(a discussion has been started with upstream to remedy this bit)
feedback and ok merdely@
* A CA cert bundle is no longer included, so point to /etc/ssl/cert.pem.
* Compile examples during build rather than fake stage.
ok sthen@, additional testing by merdely@
