head 1.4; access; symbols pkgsrc-2026Q1:1.3.0.102 pkgsrc-2026Q1-base:1.3 pkgsrc-2025Q4:1.3.0.100 pkgsrc-2025Q4-base:1.3 pkgsrc-2025Q3:1.3.0.98 pkgsrc-2025Q3-base:1.3 pkgsrc-2025Q2:1.3.0.96 pkgsrc-2025Q2-base:1.3 pkgsrc-2025Q1:1.3.0.94 pkgsrc-2025Q1-base:1.3 pkgsrc-2024Q4:1.3.0.92 pkgsrc-2024Q4-base:1.3 pkgsrc-2024Q3:1.3.0.90 pkgsrc-2024Q3-base:1.3 pkgsrc-2024Q2:1.3.0.88 pkgsrc-2024Q2-base:1.3 pkgsrc-2024Q1:1.3.0.86 pkgsrc-2024Q1-base:1.3 pkgsrc-2023Q4:1.3.0.84 pkgsrc-2023Q4-base:1.3 pkgsrc-2023Q3:1.3.0.82 pkgsrc-2023Q3-base:1.3 pkgsrc-2023Q2:1.3.0.80 pkgsrc-2023Q2-base:1.3 pkgsrc-2023Q1:1.3.0.78 pkgsrc-2023Q1-base:1.3 pkgsrc-2022Q4:1.3.0.76 pkgsrc-2022Q4-base:1.3 pkgsrc-2022Q3:1.3.0.74 pkgsrc-2022Q3-base:1.3 pkgsrc-2022Q2:1.3.0.72 pkgsrc-2022Q2-base:1.3 pkgsrc-2022Q1:1.3.0.70 pkgsrc-2022Q1-base:1.3 pkgsrc-2021Q4:1.3.0.68 pkgsrc-2021Q4-base:1.3 pkgsrc-2021Q3:1.3.0.66 pkgsrc-2021Q3-base:1.3 pkgsrc-2021Q2:1.3.0.64 pkgsrc-2021Q2-base:1.3 pkgsrc-2021Q1:1.3.0.62 pkgsrc-2021Q1-base:1.3 pkgsrc-2020Q4:1.3.0.60 pkgsrc-2020Q4-base:1.3 pkgsrc-2020Q3:1.3.0.58 pkgsrc-2020Q3-base:1.3 pkgsrc-2020Q2:1.3.0.54 pkgsrc-2020Q2-base:1.3 pkgsrc-2020Q1:1.3.0.34 pkgsrc-2020Q1-base:1.3 pkgsrc-2019Q4:1.3.0.56 pkgsrc-2019Q4-base:1.3 pkgsrc-2019Q3:1.3.0.52 pkgsrc-2019Q3-base:1.3 pkgsrc-2019Q2:1.3.0.50 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.3.0.48 pkgsrc-2019Q1-base:1.3 pkgsrc-2018Q4:1.3.0.46 pkgsrc-2018Q4-base:1.3 pkgsrc-2018Q3:1.3.0.44 pkgsrc-2018Q3-base:1.3 pkgsrc-2018Q2:1.3.0.42 pkgsrc-2018Q2-base:1.3 pkgsrc-2018Q1:1.3.0.40 pkgsrc-2018Q1-base:1.3 pkgsrc-2017Q4:1.3.0.38 pkgsrc-2017Q4-base:1.3 pkgsrc-2017Q3:1.3.0.36 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.32 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.3.0.30 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.28 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.26 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.24 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.22 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.20 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.18 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.16 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.14 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.12 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.10 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.8 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.6 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.4 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.2 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.1.0.2 pkgsrc-2013Q2-base:1.1; locks; strict; comment @# @; 1.4 date 2026.06.18.19.01.53; author drixter; state dead; branches; next 1.3; commitid MNXJS5hPG331sjKG; 1.3 date 2013.09.09.06.42.45; author agc; state Exp; branches; next 1.2; commitid OeIm1xHAB6KIiJ4x; 1.2 date 2013.08.24.16.12.24; author agc; state Exp; branches; next 1.1; commitid ITaUB4sYXGsiYI2x; 1.1 date 2013.05.11.21.15.55; author agc; state Exp; branches; next ; commitid mNjM5ZMjTyEY1gPw; desc @@ 1.4 log @security/ipv6-toolkit: Update to v2.2 SI6 Networks IPv6 Toolkit 2.2 * All: Ensure consistency in version numbers across tools and documentation. * path6: Fix bug that prevented setting TCP flags * blackhole6: Fixed bug that lead to errors for paths >= 10 hops * blackhole6: Polished the code Removed unnecessary comments, and prevented some internal errors to make it to the tool output. * blackhole6: Set different default destination port numbers for TCP and UDP The default UDP destination port has been changed to port 53. SI6 Networks IPv6 Toolkit v2.1 (Jan) * addr6: Add support for accepting only one address per prefix Option '--block-dup-preflen' was added * scan6: Fix bug in smart scan There was a bug in the generation of low-byte and pattern-byte addresses. * scan6: Improve VMWare scans We have now added vSphere and ESX server entries * scan6: Fix bug in default ports When port-scanning, if not range was specified, the tool would not scan any ports. * script6: Add alias for "get-alexa-domains" Some documents were using the "get-alexa" script name (rather than "get-alexa-domains") but the short name of the script had been removed. Now added. SI6 Networks IPv6 Toolkit v2.0 (Guille) * path6: New tool Added a fully-IPv6-capable traceroute tool, named path6. * script6: New tool Added a new tool which incorporates new functionality and also provides a shortcut to other existing tools. * blackhole6: New tool Added a new tool isolates IPv6 blackholes. * udp6: New tool Added a new tool that can send arbirary UDP/IPv6 packets. * All: Fix bug when reading packets lipcap "internals" together with select() would cause (at times) delays when reading packets. * All: Add support for Solaris Solaris is now a supported platform. * All: Fix bug in next hop determination A bug caused, in some scenarios, the tools to fail with "cannot find next hop". * All: Fix support for loopback interface The tools failed to set the "virtual" "Ether Proto" for packets sent on the loopback interface, and hence they were discarded. * All: Add support for domain names All tools now support domain names in their "-d" options. * addr6: Fix bug in address scope filtering A bug caused address scope filters to behave incorrectly. * addr6: Fix error in manual page Some of the long-option names were incorrect. * scan6: Fixes bug in address range computation Prefixes that were not multiple of 16 resulted in bogus address ranges. * scan6: Add support for port scanning scan6 now implements several techniques for TCP and UDP port scanning. * scan6: Add support for heuristic host scanning scan6 can now automatically infer the IID type of a target and reduce the search space accordingly (just "-d example.com/64" or "-d IPV6ADDRESS/64". * tcp6: Add TCP probe mode Probe mode allows you to employ tcp6 for simple probing (e.g., port scanning) * tcp6: Add "--open-mode" and "--close-mode" options These two options allow you to cause a TCP connection at a remote node to transition to any specific state (and hene perform e.g., FIN-WAIT-2 floods) * tcp6: Add "--data" option This options allows to set a specific TCP payload from the command-line (e.g., an HTTP "GET" command). * script6: Fix bug in get-aaaa, get-ns, and get-mx Domains that had a CNAME would be skipped. * frag6: Fix bug in Frag ID assessment Probes are now sent every 10ms rather than in batches, to minimize packet reordering. SI6 Networks IPv6 Toolkit v1.5.3 * All: Fix packet size issues Many tools were using a (sometimes non-initialized) max_packet_size variable, instead of the corresponding member of the idata structure. * All: Add support for some Mac OS version The toolkit would not compile on Lion (10.7.5) or Snow Leopard (10.6.8), as a result of inconsistencies of how BYTE_ORDER-related constants were (not) set in those versions of Mac OS. SI6 Networks IPv6 Toolkit v1.5.2 * All: Add support for GNU Debian/kfreebsd The toolkit would not build on GNU Debian/kfreebsd before this release. * tcp6: Add support for TCP/IPv6 probes tcp6 can now send TCP/IPv6 packets ("--probe-mode" option), and read the TCP response packets, if any. This can be leveraged for port scans, and miscellaneous measurements. SI6 Networks IPv6 Toolkit v1.5.1 * Fix Mac OS breakage libipv6.h had incorrect definitions for "struct tcp_hdr". SI6 Networks IPv6 Toolkit v1.5 * All: Improved the next-hop determination Since the toolkit employs libpcap (as there is no portable way to forge IPv6 addresses and do other tricks), it was relying on the user specifying a network interface ("-i" was mandatory for all tools) and that routers would send Router Advertisements on the local links. This not only was rather inconvenient for users (specifying a network interface was not warranted), but also meant that in setups where RAs where not available (e.g., manual configuration), the tools would fail. The toolkit now employs routing sockets (in BSDs) or Netlink (in Linux), and only uses "sending RAs" as a fall-back in case of failure (IPv6 not configured on the local host). * All: Improved source address selection This is closely related to the previous bullet. * All: More code moved to libipv6 More and more code was moved to libipv6 and removed to the individual tool source files. As with some of the above, this was painful and time-consuming, but was necessary -- and in the long run it will make code maintenance easier. * All: libipv6 used throughout all tools This was rather painful and non-exciting, but necessary. @ text @$NetBSD: patch-Makefile,v 1.3 2013/09/09 06:42:45 agc Exp $ Take ${CC} from environment --- Makefile 2013/05/11 20:47:52 1.1 +++ Makefile 2013/05/11 20:48:02 @@@@ -18,7 +18,7 @@@@ # typically employed by package developers. -CC= gcc +CC?= gcc CFLAGS+= -Wall LDFLAGS+= -lpcap -lm @@@@ -78,14 +78,14 @@@@ rd6: $(SRCPATH)/rd6.c $(SRCPATH)/rd6.h $(SRCPATH)/ipv6toolkit.h $(CC) $(CPPFLAGS) $(CFLAGS) -o rd6 $(SRCPATH)/rd6.c $(LDFLAGS) -rs6: $(SRCPATH)/rs6.c $(SRCPATH)/rs6.h $(SRCPATH)/ipv6toolkit.h - $(CC) $(CPPFLAGS) $(CFLAGS) -o rs6 $(SRCPATH)/rs6.c $(LDFLAGS) +rs6: $(SRCPATH)/rs6.c $(SRCPATH)/rs6.h $(LIBS) $(SRCPATH)/ipv6toolkit.h + $(CC) $(CPPFLAGS) $(CFLAGS) -o rs6 $(SRCPATH)/rs6.c $(LIBS) $(LDFLAGS) scan6: $(SRCPATH)/scan6.c $(SRCPATH)/scan6.h $(SRCPATH)/ipv6toolkit.h $(CC) $(CPPFLAGS) $(CFLAGS) -o scan6 $(SRCPATH)/scan6.c $(LDFLAGS) -tcp6: $(SRCPATH)/tcp6.c $(SRCPATH)/tcp6.h $(SRCPATH)/ipv6toolkit.h - $(CC) $(CPPFLAGS) $(CFLAGS) -o tcp6 $(SRCPATH)/tcp6.c $(LDFLAGS) +tcp6: $(SRCPATH)/tcp6.c $(SRCPATH)/tcp6.h $(LIBS) $(SRCPATH)/ipv6toolkit.h + $(CC) $(CPPFLAGS) $(CFLAGS) -o tcp6 $(SRCPATH)/tcp6.c $(LIBS) $(LDFLAGS) libipv6.o: $(SRCPATH)/libipv6.c $(SRCPATH)/libipv6.h $(CC) $(CPPFLAGS) $(CFLAGS) -c -o libipv6.o $(SRCPATH)/libipv6.c @ 1.3 log @Update security/ipv6-toolkit to version 1.4.1 Changes since previous version: SI6 Networks' IPv6 Toolkit v1.4.1 * frag6: Fixed bug that prevented Ethernet header from being filled A bug in the code caused Ethernet frames to go on te wire without any of their header fields completed. * All: Use of library to avoid code replication An "libipv6" library was created, such that common functions do not need to be replicated for each tool. ni6, ns6, rs6, and tcp6 now employ such library. pkgsrc changes: * address6 and its man page are no longer installed * extend the Makefile changes to include the correct linkage for rs6 and tcp6 i.e. include the libipv6 object mentioned above @ text @d1 1 a1 1 $NetBSD: patch-Makefile,v 1.2 2013/08/24 16:12:24 agc Exp $ @ 1.2 log @Update ipv6-toolkit to version 1.4 from 1.3.4 Pkgsrc changes: + quieten warnings from gcc 4.5.3 about uninitialised variables Distribution changes: SI6 Networks' IPv6 Toolkit v1.4 release * frag6: Fixed the flooding option Fixed the fragment size used when employing the flooding option. It was prevously sending fragment sizes that where not a multiple of eight, and hence these fragments were dropped. * scan6: Added support for 64-bit encoding of IPv4 addresses Option "--tgt-ipv4" was augmented to support both encodings (32 bit and 64 bit) of embedded IPv4 addresses. * tcp6: Fixed response to Neighbor Solicitations tcp6 was not responding to incomming Neighbor Solicitations. Hence, when packets were sent from spoofed addresses, tcp6 would never receive the response packets, because the NSs sent by the local router or target node would never be responded. * tcp6: Added support for TCP Window-based attacks tcp6 can now close the window after sending an app-layer command, and also "modulate" the TCP window to circumvent trivial mitigations for these attacks ("--window-mode" and "--win-modulate" options). * tcp6: Support for multiple connection-establishment types tcp6 can now cause e.g. TCP simultaneous opens (see the "--open-mode" option). * tcp6: Support for multiple connection-termination types tcp6 can now perform multiple connection-termination types (see the "--close-mode" option). * tcp6: Support for sending application layer requests tcp6 can now send application-layer requests with the "--data" option. * Many improvements to the manual pages. Fixed the troff encoding of many manual pages. Added ipv6toolkit(7), that describes a general description of the toolkit. * All: Fixed bug in link-layer destination address selection Tools now try to find a local router or perform Neighbor Discovery only when necessary (i.e., underlying link-layer is *not* loopback or tunnel, destination address is *not* link-local, and a link-layer destination address has *not* been specified). * All: Fixed bug in option handling Incorrect data type was used for the return value of getopt_long(), thus leading to problems in some architectures. * All: Fixed a number of issues with pcap_next_ex() The timeout parameter of pcap_next_ex() is now based on the platform (the previous constant value had different semantics in different platforms). Additionally, handle the case where pcap_next_ex() returns no packets. * All: General improvements and clean-up The development process now includes building the toolkit with the clang compiler (in addition to gcc), which has lead to the identification of a number of issues. * All: Improved support for building the toolkit. The toolkit now contains one makefile for pmake, and another for GNU make. Added support for the DESTDIR variable. Appropriate paths are selected based on the value of a number of variables. Configuration file is dynamically generated, with the right path to the oui.txt file. @ text @d1 1 a1 1 $NetBSD: patch-Makefile,v 1.1 2013/05/11 21:15:55 agc Exp $ d16 19 @ 1.1 log @Allow this package to be cross-built too - take the compiler from the environment if it's there. @ text @d1 1 a1 1 $NetBSD$ d7 4 a10 4 @@@@ -1,7 +1,7 @@@@ # # SI6 Networks' IPv6 toolkit Makefile # d15 1 a15 1 MANPATH= /usr/share/man @