Bug 106351 - [NEW PORT] security/fl0p: Passive L7 flow fingerprinting tool
Summary: [NEW PORT] security/fl0p: Passive L7 flow fingerprinting tool
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Martin Wilke
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-12-04 22:10 UTC by trasz
Modified: 2006-12-04 22:50 UTC (History)
0 users

See Also:


Attachments
fl0p-0.0.2.b.shar (2.99 KB, text/plain)
2006-12-04 22:10 UTC, trasz
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description trasz 2006-12-04 22:10:10 UTC
The tool is a simple flow-analyzing passive L7 fingerprinter. It
examines the sequence of client-server exchanges, their relative
layer 7 payload sizes, and transmission intervals (as opposed to
inspecting the contents, which is what most passive fingerprinters
and "smart" sniffers would do to analyze transmissions). This is
then matched against a database of traffic pattern signatures to
infer some interesting facts about the traffic.

Generated with FreeBSD Port Tools 0.77
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2006-12-04 22:11:03 UTC
Responsible Changed
From-To: freebsd-ports-bugs->miwi

miwi@ wants this PRs
Comment 2 Martin Wilke freebsd_committer freebsd_triage 2006-12-04 22:34:13 UTC
State Changed
From-To: open->closed

New port added. Thanks!
Comment 3 dfilter service freebsd_committer freebsd_triage 2006-12-04 22:41:09 UTC
miwi        2006-12-04 22:33:37 UTC

  FreeBSD ports repository

  Modified files:
    security             Makefile 
  Added files:
    security/fl0p        Makefile distinfo pkg-descr pkg-plist 
    security/fl0p/files  patch-config.h 
  Log:
  The tool is a simple flow-analyzing passive L7 fingerprinter. It
  examines the sequence of client-server exchanges, their relative
  layer 7 payload sizes, and transmission intervals (as opposed to
  inspecting the contents, which is what most passive fingerprinters
  and "smart" sniffers would do to analyze transmissions). This is
  then matched against a database of traffic pattern signatures to
  infer some interesting facts about the traffic.
  
  PR:             ports/106351
  Submitted by:   trasz <trasz at pin.if.uz.zgora.pl>
  
  Revision  Changes    Path
  1.838     +1 -0      ports/security/Makefile
  1.1       +35 -0     ports/security/fl0p/Makefile (new)
  1.1       +3 -0      ports/security/fl0p/distinfo (new)
  1.1       +11 -0     ports/security/fl0p/files/patch-config.h (new)
  1.1       +7 -0      ports/security/fl0p/pkg-descr (new)
  1.1       +8 -0      ports/security/fl0p/pkg-plist (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"