debian/0000755000000000000000000000000011421644500007163 5ustar debian/compat0000644000000000000000000000000211421112446010360 0ustar 5 debian/rules0000755000000000000000000000547711421112446010257 0ustar #!/usr/bin/make -f # -*- makefile -*- # Sample debian/rules that uses debhelper. # This file was originally written by Joey Hess and Craig Small. # As a special exception, when this file is copied by dh-make into a # dh-make output file, you may use that output file without restriction. # This special exception was added by Craig Small in version 0.37 of dh-make. # Uncomment this to turn on verbose mode. export DH_VERBOSE=1 # These are used for cross-compiling and for saving the configure script # from having to guess our platform (since we know it already) DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) CFLAGS = -Wall -g ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) CFLAGS += -O0 else CFLAGS += -O2 endif # shared library versions, option 1 #version=1.23 #major=1 # option 2, assuming the library is created as src/.libs/libfoo.so.2.0.5 or so version=`ls src/.libs/lib*.so.* | \ awk '{if (match($$0,/[0-9]+\.[0-9]+\.[0-9]+$$/)) print substr($$0,RSTART)}'` major=`ls src/.libs/lib*.so.* | \ awk '{if (match($$0,/\.so\.[0-9]+$$/)) print substr($$0,RSTART+4)}'` config.status: configure dh_testdir ifneq "$(wildcard /usr/share/misc/config.sub)" "" cp -f /usr/share/misc/config.sub config.sub endif ifneq "$(wildcard /usr/share/misc/config.guess)" "" cp -f /usr/share/misc/config.guess config.guess endif # Add here commands to configure the package. CFLAGS="$(CFLAGS)" ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info build: build-stamp build-stamp: config.status dh_testdir # Add here commands to compile the package. $(MAKE) shared touch build-stamp clean: dh_testdir dh_testroot rm -f build-stamp # Add here commands to clean up after the build process. [ ! -f Makefile ] || $(MAKE) distclean ifneq "$(wildcard /usr/share/misc/config.sub)" "" rm -f config.sub endif ifneq "$(wildcard /usr/share/misc/config.guess)" "" rm -f config.guess endif rm -f config.log dh_clean install: build dh_testdir dh_testroot dh_clean -k dh_installdirs # Add here commands to install the package into debian/tmp. cd src && $(MAKE) installshared install_prefix=$(CURDIR)/debian/tmp ls -laR debian # Build architecture-independent files here. binary-indep: build install # We have nothing to do by default. # Build architecture-dependent files here. binary-arch: build install dh_testdir dh_testroot dh_installchangelogs CHANGES dh_installdocs dh_installexamples dh_install --sourcedir=debian/tmp dh_installman dh_link dh_strip dh_compress dh_fixperms dh_makeshlibs dh_installdeb dh_shlibdeps dh_gencontrol dh_md5sums dh_builddeb binary: binary-indep binary-arch .PHONY: build clean binary-indep binary-arch binary install debian/libnids-dev.dirs0000644000000000000000000000002411421112446012241 0ustar usr/lib usr/include debian/copyright0000644000000000000000000000124411421112446011116 0ustar This package was debianized by Robert van der Meulen on Wed, 18 Oct 2000 13:53:38 +0200. The current location of this software is: http://libnids.sourceforge.net/ Upstream Author: Rafal Wojtczuk Copyright: Copyright 2000,2001,2002,2003,2004,2005 Rafal Wojtczuk. License: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. On Debian GNU/Linux systems, the complete text of the GNU General Public License can be found in `/usr/share/common-licenses/GPL'. debian/libnids1.21.dirs0000644000000000000000000000001011421112446011762 0ustar usr/lib debian/watch0000644000000000000000000000010511421112446010207 0ustar version=3 http://sf.net/libnids/libnids-(.+)\.tar\.gz debian uupdate debian/source/0000755000000000000000000000000011421435234010465 5ustar debian/source/format0000644000000000000000000000001411421435234011673 0ustar 3.0 (quilt) debian/libnids-dev.docs0000644000000000000000000000016211421112446012233 0ustar README MISC CREDITS CHANGES doc/API.txt doc/API.html doc/NEW_LIBPCAP doc/PATCH doc/TESTS doc/bugtraq_post samples debian/changelog0000644000000000000000000001574211421644466011061 0ustar libnids (1.23-2) unstable; urgency=high * Update my email address (closes: #574042). -- Vasilis Pappas Tue, 20 Jul 2010 20:12:19 -0400 libnids (1.23-1.2) unstable; urgency=high * Non-maintainer upload by the Security Team. * Fix NULL ptr dereference in src/ip_fragment.c which can be used to cause denial of service conditiions with applications using this library (Closes: #576281). -- Nico Golde Sun, 20 Jun 2010 14:20:06 +0200 libnids (1.23-1.1) unstable; urgency=low * Non-maintainer upload. * Fix FTBFS with GCC 4.4, thanks to Martin Michlmayr (Closes: #504824) -- David Paleino Mon, 21 Dec 2009 16:05:39 +0100 libnids (1.23-1) unstable; urgency=low * New upstream release. Closes: #474575. * Added the samples directory to /usr/share/doc/libnids-dev. * Added code to bypass checksum calculation in the printall sample. * Fixed debian/watch file. Closes: #449806. -- Vasilis Pappas Mon, 16 Jun 2008 11:52:28 +0300 libnids (1.21-1) unstable; urgency=low * New Maintainer. Closes: #390827. -- Vasilis Pappas Tue, 05 Dec 2006 11:40:30 +0200 libnids (1.21-0) unstable; urgency=low * QA upload. * New upstream release. * Set debhelper compatibility to 5. * Added debian/watch file. * Added homepage to description. * Fixed incorrect function return type in the manpage (Closes: #388531). Patch by Piotr Engelking . -- Anibal Monsalve Salazar Wed, 08 Nov 2006 20:18:14 +1100 libnids (1.20-4) unstable; urgency=low * QA upload. * Set Maintainer to QA Group; Orphaned: #390827 * Remove config.log on clean * Conforms with latest Standards Version 3.7.2 -- Michael Ablassmeier Sun, 15 Oct 2006 13:10:32 +0200 libnids (1.20-3) unstable; urgency=high * Fixed broken control file, which makes libnids-dev uninstallable. (libnids-dev didn't depend upon the correct version of the library). -- Steve Kemp Monday, 11 July 2005 20:28:20 +0000 libnids (1.20-2) unstable; urgency=low * Changes from Faidon Liambotis: * Renamed binary package to libnids1.20, Conflicts/Replaces libnids1. (Closes: #299560) * Cleaned up debian/rules. * Removed obsolete debhelper usage. * Updated Standards-Version to 3.6.2.2 [No Changes] -- Steve Kemp Sunday, 26 June 2005 15:51:32 +0000 libnids (1.20-1) unstable; urgency=low * New upstream release. * Updated the copyright file to distinguish between *Copyright* and *License* (Closes: #290196) * Updated URL for homepage in copyright file. * Update config.{sub guess} and build-dep upon autotools-dev so they never get out of date. -- Steve Kemp Friday, 28 February 2005 04:23:10 +0000 libnids (1.19-1) unstable; urgency=high * New upstream, which contains an important bugfix wrt FIN handling. Hence higher urgency. -- Steve Kemp Friday, 10 December 2004 15:12:01 +0000 libnids (1.18-4) unstable; urgency=high * Fixes important bug where packets weren't being recorded in some situations. (Closes: #252330) * Updated to use libnet1 rather than libnet0. (Closes: #241059) * Updated standards version to 3.6.6.1 -- Steve Kemp Wednesday, 1 December 2004 21:58:04 +0000 libnids (1.18-3) unstable; urgency=high * Make a maintainer upload, after the kind NMU from Matt Kraai this will close down the bugs which he kindly fixed for me. * Urency set to high to avoid FTBFS errors close to freeze. * Build-depend on libpcap0.8-dev instead of libpcap-dev (Closes: #262172) * Fixed FTBFS due to Build-deps (duplicate bug). (Closes: #265689) * Don't use an NMU version number for the package. (Closes: #240148) * Move the package into section 'libdevel' rather than 'devel'. -- Steve Kemp Monday, 16 August 2004 19:42:21 +0000 libnids (1.18-2.1) unstable; urgency=low * Non-maintainer upload with maintainer permission. * Build-depend on libpcap0.8-dev instead of libpcap-dev (closes: #262172). -- Matt Kraai Sun, 15 Aug 2004 07:40:35 -0700 libnids (1.18-2) unstable; urgency=low * Acknowlege NMU by Domenico - many thanks. Rebuilt with libnet0-dev (Closes: #227213) -- Steve Kemp Thursday, 22 April 2004 22:46:19 +0000 libnids (1.18-1.1) unstable; urgency=low * Rebuilt against newer libnet0-dev package (closes: #227213) - updated build dependency on libnet0-dev (>= 1.0.2a-5) * It is not a native package any more (closes: #240148) * Updated standards version to 3.6.1 * NMU with maintainer permission -- Domenico Andreoli Fri, 26 Mar 2004 00:16:34 +0100 libnids (1.18-1) unstable; urgency=high * Fixes security hole allowing arbitary code (CAN-2003-0850) Urgency set to high because of this. (Closes: #226356) * New upstream release. (Closes: #192621) * New maintainer. (Closes: #188171) -- Steve Kemp Wed, 8 Jan 2004 19:35:28 +0000 libnids (1.16-4) unstable; urgency=low * QA Upload, patch from From: Frank Lichtenheld (closes: #203824). * Change maintainer to QA Group * Remove multiline strings (closes: #195577) * Build killtcp.static (closes: #168000) * General clean-up * Update to debhelper 4 * Update Standards-Version to 3.6.0 -- Roland Mas Sun, 24 Aug 2003 10:09:36 +0200 libnids (1.16-3) unstable; urgency=low * Changed maintainer field -- Robert van der Meulen Fri, 14 Dec 2001 11:52:40 +0100 libnids (1.16-2) unstable; urgency=low * Added build depends on debhelper (Closes: #108941) -- Robert van der Meulen Fri, 14 Dec 2001 11:52:29 +0100 libnids (1.16-1) unstable; urgency=low * New upstream version -- Robert van der Meulen Thu, 16 Aug 2001 17:30:51 +0200 libnids (1.14-4) unstable; urgency=low * Fixed maintainer email address * removed bogus manpage file (Closes: #82957) * Fixed some build depends (Closes: #86891) * Removed duplicate manpage a while ago (Closes: #90280) -- Robert van der Meulen Thu, 22 Mar 2001 23:24:51 +0100 libnids (1.14-3) unstable; urgency=low * removed manpage from libnids1 (non-dev) package (closes: #79557). * added link to /usr/lib/libnids.so in -dev package . -- Robert van der Meulen Thu, 14 Dec 2000 14:59:23 +0100 libnids (1.14-2) unstable; urgency=low * Renamed directory to follow '.orig' convention. * added static library to -dev package (closes: #78220) * changed debian/rules (removed libglade stuff that was somehow there) (closes: #78218) * Renamed the shared library package to libnids1 (closes: #78217) -- Robert van der Meulen Sun, 10 Dec 2000 16:56:08 +0100 libnids (1.14-1) unstable; urgency=low * Initial Release. -- Robert van der Meulen Wed, 18 Oct 2000 13:53:38 +0200 debian/control0000644000000000000000000000306511421435764010604 0ustar Source: libnids Section: libdevel Priority: optional Maintainer: Vasilis Pappas Build-Depends: libpcap0.8-dev, libnet1-dev (>= 1.1.2.1), debhelper (>= 5), autotools-dev, pkg-config, libglib2.0-dev Standards-Version: 3.9.0 Package: libnids-dev Homepage: http://libnids.sourceforge.net/ Section: libdevel Architecture: any Depends: libnids1.21 (= ${binary:Version}), libc6-dev, ${misc:Depends} Description: IP defragmentation TCP segment reassembly library (development) Libnids is a library that provides the functionality of one of the NIDS (Network Intrusion Detection System) components, namely E-component. Libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information about them to the NIDS analyzing modules. Libnids performs assembly of TCP segments into TCP streams, IP defragmentation, and TCP port scan detection. . Package: libnids1.21 Homepage: http://libnids.sourceforge.net/ Section: libs Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Conflicts: libnids1 Replaces: libnids0, libnids1 Description: IP defragmentation TCP segment reassembly library Libnids is a library that provides the functionality of one of the NIDS (Network Intrusion Detection System) components, namely E-component. Libnids code watches all local network traffic, cooks received datagrams a bit, and provides convenient information about them to the NIDS analyzing modules. Libnids performs assembly of TCP segments into TCP streams, IP defragmentation, and TCP port scan detection. . debian/libnids-dev.manpages0000644000000000000000000000001611421112446013074 0ustar src/libnids.3 debian/libnids1.21.install0000644000000000000000000000002211421112446012472 0ustar usr/lib/lib*.so.* debian/patches/0000755000000000000000000000000011421644502010614 5ustar debian/patches/debian-changes-1.23-20000644000000000000000000000531511421644502014113 0ustar Description: Upstream changes introduced in version 1.23-2 This patch has been created by dpkg-source during the package build. Here's the last changelog entry, hopefully it gives details on why those changes were made: . libnids (1.23-2) unstable; urgency=high . * Update my email address (closes: #574042). . The person named in the Author field signed this changelog entry. Author: Vasilis Pappas Bug-Debian: http://bugs.debian.org/574042 --- The information above should follow the Patch Tagging Guidelines, please checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here are templates for supplementary fields that you might want to add: Origin: , Bug: Bug-Debian: http://bugs.debian.org/ Bug-Ubuntu: https://launchpad.net/bugs/ Forwarded: Reviewed-By: Last-Update: --- libnids-1.23.orig/src/Makefile.in +++ libnids-1.23/src/Makefile.in @@ -13,7 +13,7 @@ includedir = @includedir@ libdir = @libdir@ mandir = @mandir@ LIBSTATIC = libnids.a -LIBSHARED = libnids.so.1.23 +LIBSHARED = libnids.so.1.21 CC = @CC@ CFLAGS = @CFLAGS@ -W -Wall -DLIBNET_VER=@LIBNET_VER@ -DHAVE_ICMPHDR=@ICMPHEADER@ -DHAVE_TCP_STATES=@TCPSTATES@ -DHAVE_BSD_UDPHDR=@HAVE_BSD_UDPHDR@ --- libnids-1.23.orig/src/libnids.3 +++ libnids-1.23/src/libnids.3 @@ -55,7 +55,7 @@ int int \fBnids_getfd\fR(void); -int +void \fBnids_register_chksum_ctl\fR(struct nids_chksum_ctl *, int); void --- libnids-1.23.orig/src/ip_fragment.c +++ libnids-1.23/src/ip_fragment.c @@ -378,7 +378,7 @@ static void ip_evictor(void) { // fprintf(stderr, "ip_evict:numpack=%i\n", numpack); - while (this_host->ip_frag_mem > IPFRAG_LOW_THRESH) { + while (this_host && this_host->ip_frag_mem > IPFRAG_LOW_THRESH) { if (!this_host->ipqueue) panic("ip_evictor: memcount"); ip_free(this_host->ipqueue); --- libnids-1.23.orig/src/killtcp.c +++ libnids-1.23/src/killtcp.c @@ -118,6 +118,6 @@ void nids_killtcp(struct tcp_stream *a_t if (initialized) abort(); } -#elif +#else #error Something wrong with LIBNET_VER #endif --- libnids-1.23.orig/samples/printall.c +++ libnids-1.23/samples/printall.c @@ -116,6 +116,16 @@ main () fprintf(stderr,"%s\n",nids_errbuf); exit(1); } + + struct nids_chksum_ctl nochksumchk; + + /* disable checksum checking for all packets */ + nochksumchk.netaddr = 0; + nochksumchk.mask = 0; + nochksumchk.action = NIDS_DONT_CHKSUM; + + nids_register_chksum_ctl(&nochksumchk, 1); + nids_register_tcp (tcp_callback); nids_run (); return 0; debian/patches/series0000644000000000000000000000002611421435626012034 0ustar debian-changes-1.23-2 debian/libnids-dev.install0000644000000000000000000000005511421112446012752 0ustar usr/include/* usr/lib/lib*.a usr/lib/lib*.so