[Request] netsniff-ng 0.5.5.0

netcrash87 · 2010-10-18 18:58:43

Hi Guys,

can anyone package this? http://netsniff-ng.org

netsniff-ng is is a free, performant Linux network sniffer for packet inspection.

The gain of performance is reached by 'zero-copy' mechanisms, so that the kernel does not need to copy packets from kernelspace to userspace.

For this purpose netsniff-ng is libpcap independent, but nevertheless supports the pcap file format for capturing, replaying and performing offline-analysis of pcap dumps. Furthermore we are focussing on building a robust, clean and secure analyzer and utilities that complete netsniff-ng as a support for penetration testing.

netsniff-ng can be used for protocol analysis, reverse engineering and network debugging.

Big Thanks!

kfgz · 2010-10-18 19:05:35

http://aur.archlinux.org/packages.php?K=netsniff-ng

netcrash87 · 2010-10-18 19:10:30

Hmm.. the build is for 0.5.4.2, a very old version.

kfgz · 2010-10-18 21:15:10

Ok. In few minutes time, git version will be ready ;]

EDIT:

FFFFUUUU. Damn docs.

pkgname=netsniff-ng-git
pkgver=20101019
pkgrel=1
pkgdesc="A high performance Linux network sniffer for packet inspection."
arch=('i686' 'x86_64')
license=('GPL2')
url="http://netsniff-ng.org/"
source=('Makefile' 'Makefile2')
md5sums=('6592bbf33efb1acb9080c113a69e0dfc'
         '37b852930395b8228a6e559af3bfd0d7')
makedepends=('asciidoc' 'dblatex')

_gitroot="git://github.com/danborkmann/netsniff-ng.git"
_gitname="netsniff-ng"

build() {
  cd ${srcdir}
  msg "Connecting to github.com GIT server...."

  if [ -d ${srcdir}/${_gitname} ] ; then
  cd ${_gitname} && git pull origin
  msg "The local files are updated."
  else
  git clone ${_gitroot}
  fi

  msg "GIT checkout done or server timeout"
  msg "Creating build directory"
  if [ -d ${srcdir}/$_gitname-build ]; then rm -rf ${srcdir}/$_gitname-build; fi
  cp -R ${srcdir}/$_gitname ${srcdir}/$_gitname-build
  
  msg "Starting make..."
  cd "${srcdir}/${_gitname-build}/src/${_gitname}"
  # ugly hack x2
  cp ${srcdir}/Makefile .
  cp ${srcdir}/Makefile2 ${srcdir}/${_gitname-build}/Documentation/Makefile
  make
  make DESTDIR=${pkgdir} install
}

Makefile

#
# Makefile for netsniff-ng client
# Author: Daniel Borkmann
#

include ../definitions.mk

INCLUDE    = -I..
CFLAGS    += 
LIBS       = -lrt -lz -lpthread

core-objs  = netsniff-ng.o
lib-objs   = hash.o                  \
         dissector.o             \
         dissector_ethernet.o    \
         xmalloc.o               \
         strlcpy.o               \
         bpf.o                   \
         system.o                \
         pcap.o                  \
         deflate.o               \
         write_or_die.o          \
         twofish.o               \
         rx_ring.o               \
         tx_ring.o               \
         mersenne_twister.o      \
         netdev.o                \
         tprintf.o

target     = netsniff-ng

all: clean gen-version gen-tables build doc
debug: all
develop: all

gen-version:
    @cd .. && cat ../VERSION | xargs ./gen_build_info.pl

gen-tables:
    @cd .. && ./gen_tables.pl

build: $(lib-objs) $(core-objs)
    @$(LD) $(target) $(core-objs) $(lib-objs) $(LIBS)

doc:
    @cd ../../Documentation && make clean
    @cd ../../Documentation && make netsniff-ng
    @cp ../../Documentation/man/* .
    #@cp ../../Documentation/pdf/* .
    @cp ../../Documentation/html/* .

%.o: ../%.c
    @$(CC) $(CFLAGS) $(INCLUDE) $<

clean:
    @rm *.o *~ $(target) ../version.h ../twofish_tables.h *.gz *.pdf \
    *.html *.8 *.css > /dev/null 2>&1 || true

install:
    @install -D $(target) $(DESTDIR)/$(BINDIR)/$(target)
    @install -d $(DESTDIR)/$(ETCDIR)/$(target)/rules
    @cp -r ../rules/*.bpf $(DESTDIR)/$(ETCDIR)/$(target)/rules/
    @install -D $(target).8.gz $(DESTDIR)/usr/share/man/man8/$(target).8.gz

uninstall:
    @rm $(DESTDIR)/$(BINDIR)/$(target) || true
    @rm $(DESTDIR)/usr/share/man/man8/$(target).8.gz || true

help:
    @echo 'Cleaning targets:'
    @echo '  clean           - Remove generated files'
    @echo 'Building targets:'
    @echo '  all             - Build netsniff-ng (default)'
    @echo '  debug           - Build netsniff-ng for debugging _only_'
    @echo 'Setup targets:'
    @echo '  install         - Install netsniff-ng'
    @echo '  uninstall       - Uninstall netsniff-ng'
    @echo 'Other targets:'
    @echo '  help            - Print this help'

Makefile2

#
# Makefile for manpages
# Author: Daniel Borkmann
#

include ../src/definitions.mk

A2X_FLAGS += -d manpage 
A2X_MAN   += -f manpage
A2X_PDF   += -f pdf
A2X_HTML  += -f xhtml

netsniff-ng-objs   = netsniff-ng.8
ifpps-ng-objs      = ifpps-ng.8

all: clean build
build: netsniff-ng ifpps-ng

netsniff-ng: $(netsniff-ng-objs)
    @$(foreach page, $(netsniff-ng-objs), cat man/$(page) | \
    gzip --best > man/$(page).gz;)

ifpps-ng: $(ifpps-ng-objs)
    @$(foreach page, $(ifpps-ng-objs), cat man/$(page) | \
    gzip --best > man/$(page).gz;)

%.8: %.txt
    @echo -n 'MAN '
    @install -d man
    @$(A2X_NORM) $(A2X_FLAGS) $(A2X_MAN) $<
    @mv $(basename $<).8 man/
    @echo -n 'PDF '
    @install -d pdf
    @$(A2X_NORM) $(A2X_FLAGS) $(A2X_PDF) $<
    #@mv $(basename $<).pdf pdf/
    @# Dirty Hack!
    @echo -n 'HTM '
    @install -d html
    @$(A2X_NORM) $(A2X_FLAGS) $(A2X_HTML) $<
    @rm *.css
    @cat extra/header.txt > $(basename $<).out
    @cat $(basename $<).html | sed -n                \
    '1h;1!H;$${g;s/.*<body>\(.*\)<\/body>.*/\1/g;p}' \
    >> $(basename $<).out
    @cat extra/footer.txt >> $(basename $<).out
    @rm $(basename $<).html
    @mv $(basename $<).out html/$(basename $<).html

clean:
    @rm -rf man/ pdf/ html/ *~ > /dev/null 2>&1 || true

Last edited by kfgz (2010-10-18 22:35:25)

netcrash87 · 2010-10-19 18:44:52

Yeah, you took the master tree which is our devel branch. The actual 0.5.5.0 is here:

http://github.com/danborkmann/netsniff-ng/tree/0.5.5.0

Thanks for your efforts.

kfgz · 2010-10-19 19:16:52

Doh. There you have it.

pkgname=netsniff-ng-git
pkgver=20101019
pkgrel=1
pkgdesc="A high performance Linux network sniffer for packet inspection."
arch=('i686' 'x86_64')
license=('GPL2')
url="http://netsniff-ng.org/"

_gitroot="git://github.com/danborkmann/netsniff-ng.git"
_gitname="netsniff-ng"

build() {
  cd ${srcdir}
  msg "Connecting to github.com GIT server...."

  if [ -d ${srcdir}/${_gitname} ] ; then
  cd ${_gitname} && git pull origin
  msg "The local files are updated."
  else
  git clone -b 0.5.5.0 ${_gitroot}
  fi

  msg "GIT checkout done or server timeout"
  msg "Creating build directory"
  if [ -d ${srcdir}/$_gitname-build ]; then rm -rf ${srcdir}/$_gitname-build; fi
  cp -R ${srcdir}/$_gitname ${srcdir}/$_gitname-build
  
  msg "Starting make..."
  cd "${srcdir}/${_gitname-build}/src"
  make
  make DESTDIR=${pkgdir} install
}

EDIT:

Nvm, netsniff-ng in AUR is now up to date.

Last edited by kfgz (2010-10-19 19:32:12)

dcc24 · 2010-10-19 19:42:17

Git package here: http://aur.archlinux.org/packages.php?ID=41984
Please note that I didn't really test this package since dblatex tried to pull in 130MB of dependencies and I have absolutely no intention to install that much crap just so some package can have proper docs.

Hence,

kfgz wrote:

EDIT:
FFFFUUUU. Damn docs.

I fully agree with this statement.

Last edited by dcc24 (2010-10-19 19:45:53)

netcrash87 · 2010-10-19 19:52:45

Thanks guys

kfgz · 2010-10-19 20:22:56

Dcc24, could you correct your git package with my changes or better ripoff docs, because your package doesn't build.

Last edited by kfgz (2010-10-19 20:24:57)

Arch Linux

#1 2010-10-18 18:58:43

[Request] netsniff-ng 0.5.5.0

#2 2010-10-18 19:05:35

Re: [Request] netsniff-ng 0.5.5.0

#3 2010-10-18 19:10:30

Re: [Request] netsniff-ng 0.5.5.0

#4 2010-10-18 21:15:10

Re: [Request] netsniff-ng 0.5.5.0

#5 2010-10-19 18:44:52

Re: [Request] netsniff-ng 0.5.5.0

#6 2010-10-19 19:16:52

Re: [Request] netsniff-ng 0.5.5.0

#7 2010-10-19 19:42:17

Re: [Request] netsniff-ng 0.5.5.0

#8 2010-10-19 19:52:45

Re: [Request] netsniff-ng 0.5.5.0

#9 2010-10-19 20:22:56

Re: [Request] netsniff-ng 0.5.5.0

Board footer