nipper processes network device configuration files, performs a
security audit and outputs a security report with recommendations and
a configuration report. nipper currently supports Cisco IOS, PIX, ASA,
FWSM, NMP, CatOS and Juniper NetScreen devices.
WWW: http://sourceforge.net/projects/nipper
Author: Ian Ventura-Whiting <ivwhiting at users.sourceforge.net>
Also added a new pkg-message to explain the reason that airmon-ng is missing.
Thanks for the advises to:
Eric P. Scott, Jan Henrik Sylvester and zion.
PR: 112189
Submitted by: Lars Engels <lars.engels@0x20.net> (maintainer)
Notes:
because only parts of it work on FreeBSD and the port is
superseded by net-mgmt/aircrack-ng which now completely
builds on FreeBSD and is still being developed.
PR: 112165
Submitted by: Lars Engels <lars.engels@0x20.net> (maintainer)
Changelog:
http://download.aircrack-ng.org/ChangeLog
Notes:
aireplay-ng, airdump-ng and airtun-ng now build successfully on 7-Current
PR: 112164
Submitted by: Lars Engels <lars.engels@0x20.net> (maintainer)
- Update pkg-message: Tor's control port can also be
specified through Vidalia's configuration file.
- Clean up Tor detection (as seen in security/dns-proxy-tor)
- Bump PORTREVISION
Submitted by: krisbot
Fabian Keil (maintainer)
Changelog:
- Fix for incorrect performance data file write/append mode options
- Fix for current status of hosts with no host check command defined
- SIGSEGV signals should now be logged again (broken in 2.8)
- Configure script fix for no mail program found/installed on system
- Configure script option bug fixes for cygwin and embedded perl
- Command definitions and host/service plugin perfdata with HTML should now be
escaped in CGIs
- Patch for incorrect time down percentage in availability CGI
- Updated init script to fix a race condition during restarts
PR: 111505
Submitted by: Jarrod Sayers <jarrod@netleader.com.au> (maintainer)
2007-03-28 graphics/hobbes-icons-xpm: Archaic port
2007-04-10 japanese/firefox-ja: Incomplete pkg-plist
2007-04-10 japanese/lookup-xemacs: Does not install
2007-04-10 lang/linux-hla: Does not compile
2007-04-10 mail/vmailmgr: Incomplete pkg-plist
2007-04-10 multimedia/qvamps: Touches filesystem prior to 'make install'
2007-03-10 net-mgmt/sting: Broken on all supported versions of FreeBSD
2007-04-10 net-mgmt/tas: Incomplete pkg-plist
2007-04-10 net-p2p/verlihub-plugins: Does not configure, it needs at least verlihub 1.0
2007-04-10 news/inn-stable: Fails to patch
2007-04-10 palm/malsync: Does not build with new pilot-link
2007-04-10 russian/elm.language: Leaves behind files on deinstall
2007-04-10 russian/pine.language: Leaves behind config file on deinstall
2007-04-01 science/py-scipy03: Replaced by py-scipy
2007-04-10 security/php4-cryptopp: Does not compile
Pktstat listens to the network and shows the bandwidth being consumed
by packets of various kinds in realtime. It understands some protocols
(including FTP, HTTP, and X11) and adds a descriptive name next to the
entry.
WWW: http://www.adaptive-enterprises.com.au/~d/software/pktstat/
Author: David Leonard <leonard at users.sourceforge.net>
Adapted from: OpenBSD port
Major changes since 0.61.0
- remove IP2Location and GeoIP files, add related configure options
instead (thanks to Niko Tyni for contribution)
--with-ip2location-headers=DIR
IP2Location include files location
--with-ip2location-lib=DIR
IP2Location library location
--with-ip2location-static
Explicitly link IP2Location statically
(default=no)
--with-geoip-headers=DIR
GeoIP include files location
--with-geoip-lib=DIR GeoIP library location
--with-geoip-static Explicitly link GeoIP statically (default=no)
--with-geoip-default-file=file
Use a default GeoIP database file when
- add support for use of IPv6-enabled IP2Location API
(GeoIP still only supports IPv4)
- add anoynmization action in ipv6calc
$ ipv6calc -q 2001:db8:0123:4567:89ab:cdef:0123:4567 --action anonymize
2001:db8:123::
$ ipv6calc -q 192.0.2.1 --action anonymize
192.0.2.0
- add tool "ipv6loganon" for anonymizing web server log files
- Getopts support: configure detects now the presence of system getopts
library
- several bugfixes
Rancid monitors a router's (or device's) configuration, including software
and hardware (cards, serial numbers, etc), using CVS. Rancid currently
supports Bay routers, Cisco routers, Juniper routers, Catalyst switches,
Foundry switches, Redback NASs, ADC EZT3 muxes, MRTd (and thus likely IRRd),
Alteon switches, HP procurve switches, Hitachi routers.
Rancid logs into each of the devices in a router table file, runs various
commands, chomps the output, and emails any differences ( sample) from
the previous collection to a mail list.
A looking glass is also included with rancid, based on Ed Kern's in use on
http://nitrous.digex.net/. Rancid version has added functions, supports cisco,
juniper, and foundry and uses the login scripts that come with rancid;
so it can use rsh, telnet, or ssh to connect to your router(s).
WWW: http://www.shrubbery.net/rancid/
PR: 110607
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
Repocopy by: marcus
PR ports/63759 was committed (3 years ago). Try to use normal TERM
signal for graceful termination [1].
- Increase /bin/ps cache size from 16KB to 120KB. This should fix
process counter (ex prCount.1) on the server which has large number
of processes [2].
PR: ports/103811 [1], ports/110498 [2]
Reported by: Yuri Arabadji <yuri@deepunix.net> [1],
Mike Andrews <mandrews@bit0.com> [2]
certificate expires. The check is done via an SSL connection (STARTTLS
mechanisms are not supported). The plugin is written in Perl, should work with
the embedded Perl interpreter (not tested though) and requires Net::SSLeay and
Date::Manip to be installed on the Nagios host.
Author: Holger Weiss <holger@CIS.FU-Berlin.DE>
WWW: http://www.jhweiss.de/software/nagios.html
PR: ports/110603
Submitted by: Eric Cronin <ecronin@gizmolabs.org>
- Add backup master site
- Remove MASTER_SITES from SUB_LIST which does not work properly
and is not right when there is more than one master sites
PR: ports/110457
Submitted by: Kian Mohageri <kian.mohageri at gmail.com> (maintainer)
- Bug fix for calculating notification interval with service escalations
- Bug fix for using servicegroups in service dependency definitions
- Bug fix for bad date format submission in command CGI
- Possible segfault fix during restarts when daemon was performing host checks
- Fix for missing check timeout in event broker calls
- Fix for handling signals under NPTL
- Added error messages for passive service checks that don't correspond to a
defined service
PR: 110262
Submitted by: Jarrod Sayers <jarrod@netleader.com.au> (maintainer)
monitoring system. This plugin checks the status of PF, the OpenBSD
packet filter, and compares the current state count to given or default
thresholds, returning the result. It is written in C.
WWW: http://www.zampanosbits.com/check_pf/
PR: ports/110112
Submitted by: Kian Mohageri <kian.mohageri at gmail.com>
KEYWORD: FreeBSD scourge. We have ignored this keyword
for a long time now, so this is a non-functional change
(therefore no PORTREVISION bumps).
Insert a $FreeBSD tag where needed, and adjust a comment
in mail/milter-regex to match reality.
files, program output or other text data. The counters use regular expressions
to count the number of matches, or parse out specific text/numbers. The
resulting data can then be queried or graphed with the usual SNMP tools.
PR: ports/109103
Submitted by: brock at cotcomsol.com
these will be added as soon as I can track them down properly (probably
along with an upgrade to 3.1.1)
This update incorporates contributions from Dru Lavigne and Dmitriy
Kirhlarov, and was sponsored by the University of Tromsø (uit.no).
Groundwork Fruity is a PHP based web-frontend to your Nagios
configuration. It support handling Nagios 2.x configurations and it
can import your old Nagios 1.x configurations. It also supports
Nagios templates and makes them even more powerful.
Feature List:
- Supports Nagios 2.x Directives
- Supports New Servicegroups
- Supports Nagios Templates with Advanced Features
- Supports inherited templates
- Supports Overridding Template Values
- Supports Importing Nagios 2.x and 1.x Configurations
WWW: http://fruity.sourceforge.net/
of jobs that have already run. It obtains its information from your catalog
database. Aside from a nice graphical display, it provides summaries of your
jobs, as well as graphs of job usage. This is a fairly high level bacula
management tool. Here are a few points that one user made concerning this
important tool:
- It is web-based so can be accessed from anywhere.
- It is "read only" users can examine the state of the backups but not write
to anything and therefore do no damage
- It packs a phenomenal amount of information into a single web-page - that I
credit as being very good design!
The documentation for bacula-web can be found in a separate bacula-web
document in the bacula-docs release.
WWW: http://www.bacula.org/
PR: ports/107617
Submitted by: Dan Langille <dan at langille.org>
- Make sure nagios user/group is created when installing from ports
- Pass maintainership to submitter
PR: ports/107175
Submitted by: Dan Langille <dan at langille.org>
NDPMon, Neighbor Discovery Protocol Monitor, is a tool working with
ICMPv6 packets. NDPMon observes the local network to see if nodes
using neighbor discovery messages behave properly. When it detects
a suspicious Neighbor Discovery message, it notifies the administrator
by writing in the syslog and in some cases by sending an email
report.
WWW: http://ndpmon.sourceforge.net
Janos Mohacsi <janos.mohacsi@bsd.hu>
PR: ports/106840
Submitted by: janos.mohacsi at bsd.hu
or network device clients. It is used to transfer
configurations, boot images, and kernels images
(eg: IOS) to the devices.
These files are often tranfered with TFTP, but TFTP
has reliability and speed issues and file size
limitations due to it's protocol specification and
underlying transport; while RCP is not affected.
WWW: http://www.shrubbery.net/rcpd/
Submitted by: Babak Farrokhi <farrokhi at FreeBSD.org>
