diff options
author | Kris Kennaway <kris@FreeBSD.org> | 2000-09-03 01:54:26 +0000 |
---|---|---|
committer | Kris Kennaway <kris@FreeBSD.org> | 2000-09-03 01:54:26 +0000 |
commit | bad0268e82e77f4b6aee275867b5e47d5c6c9db2 (patch) | |
tree | 65434e2651b233ddf6fa1934b22e27195e5cd46c /net/despoof/files | |
parent | Mark FORBIDDEN due to remote exploits. Both people in the world still (diff) |
despoof 0.9 is a utility for comparing the TTL of a received packet which
is considered "suspicious" with the actual TTL of a test packet sent to
that host, to try and detect packet spoofing. It is intended to be used
as part of an IDS system.
Diffstat (limited to 'net/despoof/files')
-rw-r--r-- | net/despoof/files/patch-aa | 17 | ||||
-rw-r--r-- | net/despoof/files/patch-ab | 11 |
2 files changed, 28 insertions, 0 deletions
diff --git a/net/despoof/files/patch-aa b/net/despoof/files/patch-aa new file mode 100644 index 000000000000..89bfdfbd640f --- /dev/null +++ b/net/despoof/files/patch-aa @@ -0,0 +1,17 @@ +--- Makefile.orig Sat Sep 2 18:33:10 2000 ++++ Makefile Sat Sep 2 18:35:05 2000 +@@ -1,10 +1,10 @@ + # despoof makefile + # +-CC=gcc +-CFLAGS=-O3 ++CC?=gcc ++CFLAGS?=-O + PROG=despoof +-DEFS=`libnet-config --defines` +-LIBS=-lnet -lpcap ++DEFS=-I${LOCALBASE}/include `libnet-config --defines` ++LIBS=-L${LOCALBASE}/lib -lnet -lpcap + + default: all + diff --git a/net/despoof/files/patch-ab b/net/despoof/files/patch-ab new file mode 100644 index 000000000000..fde6ceb4a075 --- /dev/null +++ b/net/despoof/files/patch-ab @@ -0,0 +1,11 @@ +--- despoof.c.orig Sat Sep 2 18:34:37 2000 ++++ despoof.c Sat Sep 2 18:34:45 2000 +@@ -150,7 +150,7 @@ + + if (targetaddr == ip->ip_src.s_addr) + { +- if (((inquery == 1) && (icmp->icmp_type == ICMP_ECHOREPLY)) || ((inquery == 2) && (icmp->icmp_type == ICMP_TIMESTAMPREPLY)) || ((inquery == 3) && (sport == ntohs(tcphdr->th_dport)))) ++ if (((inquery == 1) && (icmp->icmp_type == ICMP_ECHOREPLY)) || ((inquery == 2) && (icmp->icmp_type == ICMP_TSTAMPREPLY)) || ((inquery == 3) && (sport == ntohs(tcphdr->th_dport)))) + { + if (ttlval == ip->ip_ttl) + { |