Log the contents of unwanted tcp and udp connections.

PR:		11973
Submitted by:	Warren Toomey

7 files changed, 61 insertions, 0 deletions

diff --git a/security/pktsuckers/Makefile b/security/pktsuckers/Makefile
new file mode 100644
index 000000000000..aca20bea386b
--- /dev/null
+++ b/security/pktsuckers/Makefile
@@ -0,0 +1,21 @@
+# New ports collection makefile for:	pktsuckers
+# Version required:	1.2
+# Date created:		31 May 1999
+# Whom:			Warren Toomey <wkt@cs.adfa.edu.au>
+#
+# $Id$
+#
+
+DISTNAME=	pktsuckers1_2
+PKGNAME=	pktsuckers-1.2
+CATEGORIES=	security net
+MASTER_SITES=	ftp://minnie.cs.adfa.edu.au/pub/NetSecurity/
+
+MAINTAINER=	wkt@cs.adfa.edu.au
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/tcpsuck ${PREFIX}/libexec
+	${INSTALL_PROGRAM} ${WRKSRC}/udpsuck ${PREFIX}/libexec
+	@${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.mk>
diff --git a/security/pktsuckers/distinfo b/security/pktsuckers/distinfo
new file mode 100644
index 000000000000..cc216ee76a67
--- /dev/null
+++ b/security/pktsuckers/distinfo
@@ -0,0 +1 @@
+MD5 (pktsuckers1_2.tar.gz) = 5b6878f7d8b81020ab2f61d4af41eac1
diff --git a/security/pktsuckers/files/patch-aa b/security/pktsuckers/files/patch-aa
new file mode 100644
index 000000000000..634ffb9ba72f
--- /dev/null
+++ b/security/pktsuckers/files/patch-aa
@@ -0,0 +1,26 @@
+--- Makefile.orig	Mon May 31 20:32:49 1999
++++ Makefile	Tue Jun  1 13:17:49 1999
+@@ -3,8 +3,8 @@
+ # $Date: 1999/06/01 03:32:48 $
+ #
+ 
+-DESTDIR= /usr/local/libexec
+-CFLAGS= -Wall
++DESTDIR= ${PREFIX}/libexec
++CFLAGS?= -Wall
+ LDFLAGS= -static
+ 
+ all:	tcpsuck udpsuck
+@@ -16,10 +16,10 @@
+ 	@echo ''
+ 
+ tcpsuck: tcpsuck.o dump_pkt.o
+-	cc -o tcpsuck $(LDFLAGS) tcpsuck.o dump_pkt.o
++	${CC} ${CFLAGS} -o tcpsuck $(LDFLAGS) tcpsuck.o dump_pkt.o
+ 
+ udpsuck: udpsuck.o dump_pkt.o
+-	cc -o udpsuck $(LDFLAGS) udpsuck.o dump_pkt.o
++	 ${CC} ${CFLAGS} -o udpsuck $(LDFLAGS) udpsuck.o dump_pkt.o
+ 
+ clean:
+ 	rm -f *.o *.BAK *.core tcpsuck udpsuck
diff --git a/security/pktsuckers/pkg-comment b/security/pktsuckers/pkg-comment
new file mode 100644
index 000000000000..a4abd3919425
--- /dev/null
+++ b/security/pktsuckers/pkg-comment
@@ -0,0 +1 @@
+Log contents of unwanted UDP packets and TCP connections
diff --git a/security/pktsuckers/pkg-descr b/security/pktsuckers/pkg-descr
new file mode 100644
index 000000000000..ac86ac2275aa
--- /dev/null
+++ b/security/pktsuckers/pkg-descr
@@ -0,0 +1,7 @@
+The two programs tcpsuck and udpsuck run out of the Inetd daemon on
+unused ports. They log the contents of packets or connections to these
+ports. This allows you to read the contents of the network strobe
+attacks on your machine. It also slows the strobes down, as they think
+you're actually running a service on several ports when you aren't.
+
+Warren Toomey, wkt@cs.adfa.edu.au
diff --git a/security/pktsuckers/pkg-message b/security/pktsuckers/pkg-message
new file mode 100644
index 000000000000..162386c5df71
--- /dev/null
+++ b/security/pktsuckers/pkg-message
@@ -0,0 +1,3 @@
+
+You need to edit your inetd.conf to enable the suckers
+
diff --git a/security/pktsuckers/pkg-plist b/security/pktsuckers/pkg-plist
new file mode 100644
index 000000000000..a12d1c0c17eb
--- /dev/null
+++ b/security/pktsuckers/pkg-plist
@@ -0,0 +1,2 @@
+libexec/tcpsuck
+libexec/udpsuck