ports/77801: [new-port] add PADS, a passive network asset logger
Andrew Thompson
andy at fud.org.nz
Sun Feb 20 19:50:40 UTC 2005
>Number: 77801
>Category: ports
>Synopsis: [new-port] add PADS, a passive network asset logger
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Sun Feb 20 19:50:21 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Andrew Thompson
>Release: FreeBSD 6.0-CURRENT i386
>Organization:
>Environment:
System: FreeBSD veg.fud.org.nz 6.0-CURRENT FreeBSD 6.0-CURRENT #0: Sun Feb 6 01:14:02 NZDT 2005 thompsa at veg.fud.org.nz:/usr/obj/usr/src/sys/DEV i386
>Description:
Add PADS, a passive network asset logger that was recently reviewed in the
SysAdmin magazine. It listens to the network and logs computers and their TCP
services to a csv file.
http://passive.sourceforge.net/
>How-To-Repeat:
>Fix:
# This is a shell archive. Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file". Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
# net-mgmt/pads
# net-mgmt/pads/pkg-descr
# net-mgmt/pads/distinfo
# net-mgmt/pads/Makefile
# net-mgmt/pads/pkg-plist
#
echo c - net-mgmt/pads
mkdir -p net-mgmt/pads > /dev/null 2>&1
echo x - net-mgmt/pads/pkg-descr
sed 's/^X//' >net-mgmt/pads/pkg-descr << 'END-of-net-mgmt/pads/pkg-descr'
XPADS is a signature based detection engine used to passively detect
Xnetwork assets. It is designed to complement IDS technology by
Xproviding context to IDS alerts.
X
XGoals:
X
X* Passive: Records and identifies traffic seen on a network without
X actively "scanning" a system. There will never be a packet sent
X from the pads applications.
X
X* Portable: Has the ability to be placed easily on a remote system.
X Does not require additional external libraries other than those
X associated with libpcap.
X
X* Lightweight: Logging is sent to a simple CSV file. There is no need
X for a database or other data repository installed on the local
X machine. All correlation is done outside of the pads program.
X
XWWW: http://passive.sourceforge.net
END-of-net-mgmt/pads/pkg-descr
echo x - net-mgmt/pads/distinfo
sed 's/^X//' >net-mgmt/pads/distinfo << 'END-of-net-mgmt/pads/distinfo'
XMD5 (pads-1.1.3.tar.gz) = 659063d820ebea77f64aaab28df7e806
XSIZE (pads-1.1.3.tar.gz) = 628536
END-of-net-mgmt/pads/distinfo
echo x - net-mgmt/pads/Makefile
sed 's/^X//' >net-mgmt/pads/Makefile << 'END-of-net-mgmt/pads/Makefile'
X# New ports collection makefile for: pads
X# Date created: 21 Feburary 2005
X# Whom: Andrew Thompson <andy at fud.org.nz>
X#
X# $FreeBSD$
X#
X
XPORTNAME= pads
XPORTVERSION= 1.1.3
XCATEGORIES= net-mgmt
XMASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
XMASTER_SITE_SUBDIR= passive
X
XMAINTAINER= andy at fud.org.nz
XCOMMENT= Passively detect network assets
X
XLIB_DEPENDS= pcre.0:${PORTSDIR}/devel/pcre
X
XGNU_CONFIGURE= yes
X
XMAN8= pads.8 pads-report.8
X
X.include <bsd.port.mk>
END-of-net-mgmt/pads/Makefile
echo x - net-mgmt/pads/pkg-plist
sed 's/^X//' >net-mgmt/pads/pkg-plist << 'END-of-net-mgmt/pads/pkg-plist'
Xbin/pads
Xbin/pads-report
X%%DATADIR%%/pads-signature-list
X%%DATADIR%%/pads-ether-codes
X at dirrm %%DATADIR%%
END-of-net-mgmt/pads/pkg-plist
exit
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list