diff -Nru ncap-1.9.2/check_libbind.m4 ncap-1.9.2/check_libbind.m4 --- ncap-1.9.2/check_libbind.m4 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/check_libbind.m4 2009-05-21 00:17:18.000000000 +0000 @@ -1,9 +1,71 @@ +### +### libbind +### +AC_ARG_WITH([libbind], AC_HELP_STRING([--with-libbind=DIR], + [libbind installation path]), [], [ withval="yes" ]) +AC_MSG_CHECKING([for libbind headers]) +if test x_$withval = x_yes; then + withval="/usr /usr/local" +fi + libbind_cflags="" libbind_ldflags="" -libbind_libs="-lresolv" +libbind_libs="-lbind" + +libbind_dir="" +for dir in $withval; do + if test -f "$dir/include/bind/arpa/nameser.h"; then + found_libbind_dir="yes" + libbind_dir="$dir" + libbind_cflags="-I$dir/include/bind" + break + fi +done + +if test x_$found_libbind_dir = x_yes; then + AC_MSG_RESULT([$dir]) +else + AC_MSG_ERROR([not found]) +fi + +AC_MSG_CHECKING([for libbind library]) + +if test x_$libbind_dir != x_/usr; then + libbind_ldflags="-L$libbind_dir/lib" +fi + +save_cflags="$CFLAGS" +save_ldflags="$LDFLAGS" +save_libs="$LIBS" + +CFLAGS="$CFLAGS $libbind_cflags" +LDFLAGS="$LDFLAGS $libbind_ldflags" +LIBS="$LIBS $libbind_libs" + +AC_LINK_IFELSE( + AC_LANG_PROGRAM([[ +#include +#include +#include +]], +[[ +ns_initparse(0,0,0); +ns_name_uncompress(0,0,0,0,0); +]]), + AC_MSG_RESULT([yes]) + AC_DEFINE([HAVE_LIBBIND], [1], [Define to 1 if libbind works.]) + AC_DEFINE([HAVE_ARPA_NAMESER_H], [1], [Define to 1 if you have the header file.]) + , + AC_MSG_ERROR([not found]) + libbind_cflags="" + libbind_ldflags="" + libbind_libs="" +) + +CFLAGS="$save_cflags" +LDFLAGS="$save_ldflags" +LIBS="$save_libs" AC_SUBST([libbind_cflags]) AC_SUBST([libbind_ldflags]) AC_SUBST([libbind_libs]) - -AC_DEFINE([HAVE_LIBBIND], [1], [Define to 1 if libbind works.]) diff -Nru ncap-1.9.2/configure.ac ncap-1.9.2/configure.ac --- ncap-1.9.2/configure.ac 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/configure.ac 2009-12-05 20:19:32.000000000 +0000 @@ -38,7 +38,7 @@ AC_HEADER_STDBOOL AC_HEADER_TIME -AC_CHECK_HEADERS([arpa/inet.h arpa/nameser.h fcntl.h netinet/in_systm.h netinet/in.h dnl +AC_CHECK_HEADERS([arpa/inet.h fcntl.h netinet/in_systm.h netinet/in.h dnl stddef.h sys/ioctl.h sys/param.h sys/types.h sys/socket.h sys/time.h]) AC_CHECK_HEADERS([net/if.h], [], [], diff -Nru ncap-1.9.2/debian/changelog ncap-1.9.2/debian/changelog --- ncap-1.9.2/debian/changelog 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/changelog 2020-03-28 02:24:25.000000000 +0000 @@ -1,3 +1,41 @@ +ncap (1.9.2-6) unstable; urgency=medium + + * QA upload. + * Upload to unstable. + + -- Thiago Andrade Marques Fri, 27 Mar 2020 23:24:25 -0300 + +ncap (1.9.2-5) experimental; urgency=medium + + * QA upload. + * Bumped packaging format from "1.0" to "3.0 (quilt)". Consequently: + Added debian/patches/* (Patches: 010, 020 and 030). + * debian/clean: removed, no longer needed. + * debian/control: + - Added the field Homepage. + - Added "Multi-Arch: same" in binary libncap-dev. + - Added VCS fields. + - Bumped compat level from 11 to 12. + - Bumped Standards-Version to 4.5.0. + - Removed some build dependencies no longer needed. + * debian/copyright: Migrated to 1.0 format. Full updated. + * debian/libncap44.install: changed the source of the installation of ncap.3, + now from debian/tmp. + * debian/libncap44.symbols: created to provide symbols. + * debian/manpage/*: added to provide the ncaptool manpage. + * debian/manpages: added to install the ncaptool manpage. + * debian/ncaptool.docs: created to install the doc "FILTERS" from upstream. + * debian/ncaptool.install: changed the installation folder + from usr/bin to usr/sbin. + * debian/not-installed: created to state that the files will not be installed. + * debian/rules: removed the option "--with autoreconf", no + longer needed. + * debian/salsa-ci.yml: added to provide CI tests for Salsa. + * debian/tests/control: added a trivial CI test. + * debian/watch: added. + + -- Thiago Andrade Marques Thu, 26 Mar 2020 11:23:39 -0300 + ncap (1.9.2-4) unstable; urgency=medium * QA upload. diff -Nru ncap-1.9.2/debian/clean ncap-1.9.2/debian/clean --- ncap-1.9.2/debian/clean 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/clean 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -pyncap/build/ diff -Nru ncap-1.9.2/debian/control ncap-1.9.2/debian/control --- ncap-1.9.2/debian/control 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/control 2020-03-28 02:24:25.000000000 +0000 @@ -2,14 +2,14 @@ Section: net Priority: optional Maintainer: Debian QA Group -Build-Depends: autoconf, - automake, - debhelper-compat (= 11), +Build-Depends: debhelper-compat (= 12), dh-python, - libpcap0.8-dev, - libtool, -Standards-Version: 3.8.3 + libpcap0.8-dev +Standards-Version: 4.5.0 Rules-Requires-Root: no +Homepage: https://www.dns-oarc.net/tools/ncap +Vcs-Browser: https://salsa.debian.org/debian/ncap +Vcs-Git: https://salsa.debian.org/debian/ncap.git Package: libncap44 Section: libs @@ -28,6 +28,7 @@ Package: libncap-dev Section: libdevel Architecture: any +Multi-Arch: same Depends: libncap44 (= ${binary:Version}), ${misc:Depends} Description: static library and header files for libncap ncap is a network capture library like libpcap (on which it is based) diff -Nru ncap-1.9.2/debian/copyright ncap-1.9.2/debian/copyright --- ncap-1.9.2/debian/copyright 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/copyright 2020-03-28 02:24:25.000000000 +0000 @@ -1,101 +1,95 @@ -This package was debianized by Robert S. Edmonds on -Tue, 16 Jun 2009 23:54:44 -0400. - -It was downloaded from: - - ftp://ftp.isc.org/isc/ncap/ - -Copyright Holders: - - Copyright (C) 2007-2009 by Internet Systems Consortium, Inc. ("ISC") - -License: - - Permission to use, copy, modify, and/or distribute this software for any - purpose with or without fee is hereby granted, provided that the above - copyright notice and this permission notice appear in all copies. - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES - WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF - MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR - ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES - WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN - ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT - OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. - -The Debian packaging is: - - Copyright (C) 2009 Robert S. Edmonds - -and is licensed under the GPL version 3, -see `/usr/share/common-licenses/GPL-3'. - -Individual files: - -ipreasm.c: -ipreasm.h: - - Copyright (C) 2007 Jan Andres - - Permission to use, copy, modify, and distribute this software for any - purpose with or without fee is hereby granted, provided that the above - copyright notice and this permission notice appear in all copies. - -pyncap/ncap.pyx: -pyncap/wrap.c: -pyncap/wrap.h: - -Copyright (c) 2008 Niels Provos. - - Redistribution and use in source and binary forms, with or without - modification, are permitted provided that the following conditions - are met: - - 1. Redistributions of source code must retain the above copyright - notice, this list of conditions and the following disclaimer. - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in the - documentation and/or other materials provided with the distribution. - 3. The name of the author may not be used to endorse or promote products - derived from this software without specific prior written permission. - - THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR - IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES - OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. - IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, - INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT - NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, - DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY - THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT - (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF - THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - -acx_pthread.m4: - - Copyright (c) 2008 Steven G. Johnson - - This program is free software: you can redistribute it and/or modify it - under the terms of the GNU General Public License as published by the - Free Software Foundation, either version 3 of the License, or (at your - option) any later version. - - This program is distributed in the hope that it will be useful, but - WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General - Public License for more details. - - You should have received a copy of the GNU General Public License along - with this program. If not, see . - - As a special exception, the respective Autoconf Macro's copyright owner - gives unlimited permission to copy, distribute and modify the configure - scripts that are the output of Autoconf when processing the Macro. You - need not follow the terms of the GNU General Public License when using - or distributing such scripts, even though portions of the text of the - Macro appear in them. The GNU General Public License (GPL) does govern - all other use of the material that constitutes the Autoconf Macro. - - This special exception to the GPL applies to versions of the Autoconf - Macro released by the Autoconf Macro Archive. When you make and - distribute a modified version of the Autoconf Macro, you may extend this - special exception to the GPL to apply to your modified version as well. +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: ncap +Upstream-Contact: jandres@gmx.net +Source: https://dl.farsightsecurity.com/dist/ncap/ + +Files: * +Copyright: 1997-2002 Internet Software Consortium + 2004-2009 Internet Systems Consortium + 2007 Jan Andres +License: ISC + +Files: acx_pthread.m4 +Copyright: 2008 Steven G. Johnson +License: GPL-3+ + +Files: asprintf.c +Copyright: ? Russ Allbery +License: Public-Domain + +Files: pyncap/wrap.h + pyncap/ncap.pyx + pyncap/wrap.c +Copyright: 2008 Niels Provos +License: BSD-3-Clause + +Files: debian/* +Copyright: 2009 Sandro Tosi + 2009-2014 Robert S. Edmonds + 2015-2016 Graham Inggs + 2018 Niels Thykier + 2019 Andrey Rahmatullin + 2020 Thiago Andrade Marques +License: GPL-3 + +Files: debian/manpage/create-man.sh +Copyright: 2015-2019 Joao Eriberto Mota Filho +License: BSD-3-Clause + +License: ISC + Permission to use, copy, modify, and/or distribute this software for + any purpose with or without fee is hereby granted, provided that the + above copyright notice and this permission notice appear in all copies. + . + THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + +License: GPL-3+ or GPL-3 + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + . + This package is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License + along with this program. If not, see . + . + On Debian systems, the complete text of the GNU General + Public License version 3 can be found in "/usr/share/common-licenses/GPL-3". + +License: Public-Domain + This software is under Public Domain. + +License: BSD-3-Clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + 3. Neither the name of the University nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE HOLDERS OR + CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, + EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, + PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR + PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF + LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING + NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS + SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. diff -Nru ncap-1.9.2/debian/libncap44.install ncap-1.9.2/debian/libncap44.install --- ncap-1.9.2/debian/libncap44.install 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/libncap44.install 2020-03-28 02:24:25.000000000 +0000 @@ -1,2 +1,2 @@ -ncap.3 usr/share/man/man3 usr/lib/*/libncap*.so.* +usr/share/man/man3/ncap.3 diff -Nru ncap-1.9.2/debian/libncap44.symbols ncap-1.9.2/debian/libncap44.symbols --- ncap-1.9.2/debian/libncap44.symbols 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/libncap44.symbols 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,8 @@ +libncap.so.44 libncap44 #MINVER# +* Build-Depends-Package: libncap-dev + ncap_addrule@Base 1.9.2 + ncap_asprintf@Base 1.9.2 + ncap_create@Base 1.9.2 + ncap_filter_dns@Base 1.9.2 + ncap_filter_icmp@Base 1.9.2 + ncap_vasprintf@Base 1.9.2 diff -Nru ncap-1.9.2/debian/manpage/create-man.sh ncap-1.9.2/debian/manpage/create-man.sh --- ncap-1.9.2/debian/manpage/create-man.sh 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/manpage/create-man.sh 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,18 @@ +#!/bin/bash + +# Copyright 2015-2019 Joao Eriberto Mota Filho +# Create a manpage using txt2man command. +# +# This script can be used under BSD-3-Clause license. + +T2M_DATE="26 Mar 2020" +T2M_NAME=ncaptool +T2M_VERSION=1.9.2 +T2M_LEVEL=8 +T2M_DESC="network capture tool" + +# Don't change the following lines +TEST=$(txt2man -h 2> /dev/null) +[ "$TEST" ] || { echo -e "\nYou need to install txt2man, from https://github.com/mvertes/txt2man.\n"; exit 1; } + +txt2man -d "$T2M_DATE" -t $T2M_NAME -r $T2M_NAME-$T2M_VERSION -s $T2M_LEVEL -v "$T2M_DESC" $T2M_NAME.txt > $T2M_NAME.$T2M_LEVEL diff -Nru ncap-1.9.2/debian/manpage/ncaptool.8 ncap-1.9.2/debian/manpage/ncaptool.8 --- ncap-1.9.2/debian/manpage/ncaptool.8 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/manpage/ncaptool.8 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,147 @@ +.\" Text automatically generated by txt2man +.TH ncaptool 8 "26 Mar 2020" "ncaptool-1.9.2" "network capture tool" +.SH NAME +\fBncaptool \fP- Network capture library +\fB +.SH SYNOPSIS +.nf +.fam C +\fBncaptool\fP [\fB-h\fP] [\fB-d\fP] [\fB-m\fP] [\fB-f\fP] [\fB-r\fP] [\fB-w\fP] [\fB-v\fP] [\fB-S\fP] [\fB-e\fP] [\fB-i\fP] + [\fB-b\fP] [\fB-p\fP] [\fB-n\fP] [\fB-l\fP] [\fB-g\fP] [\fB-o\fP] [\fB-s\fP] [\fB-c\fP] [\fB-t\fP] [\fB-1\fP] + [\fB-2\fP] [\fB-k\fP] [\fB-Dmod\fP] [\fB-H\fP] + +.fam T +.fi +.fam T +.fi +.SH DESCRIPTION +\fBncaptool\fP is a network capture library like libpcap (on which it is based) +and tcpdump. It produces binary data in its own ncap format, which can be +stored in a dump file or transmitted over a UDP socket. Unlike libpcap, it +discards data link headers and only supports IPv4 and IPv6 packets, but it +can perform reassembly of IP datagrams. +.SH OPTIONS +.TP +.B +\fB-h\fP +display this help text and exit +.TP +.B +\fB-d\fP +increment debugging level +.TP +.B +\fB-m\fP +increment message trace level +.TP +.B +\fB-f\fP +flush outputs after every bufferable write +.TP +.B +\fB-r\fP +destination of \fB-s\fP can be a remote (off-LAN) address +.TP +.B +\fB-w\fP +use wallclock time not NCAP timestamp for \fB-o\fP files +.TP +.B +\fB-v\fP +emit a traffic summary to stderr on exit +.TP +.B +\fB-S\fP +stripe across all \fB-s\fP datasinks, round robin style +.TP +.B +\fB-e\fP endline +specify continuation separator +.TP +.B +\fB-i\fP ifname[+] +add interface as a datasource ('+' = promiscuous) +.TP +.B +\fB-b\fP bpf +use this bpf pattern for any \fB-i\fP or \fB-p\fP datasources +.TP +.B +\fB-p\fP file +add pcap file as a datasource ('-' = stdin) +.TP +.B +\fB-n\fP file +add ncap file as a datasource ('-' = stdin) +.TP +.B +\fB-l\fP socket +add datagram socket as a datasource (addr/port) +.TP +.B +\fB-g\fP file +write msg trace to this file ('-' = stdout) +.TP +.B +\fB-o\fP file +write ncap data to this file ('-' = stdout) +.TP +.B +\fB-s\fP so[,r[,f]] +add this datagram socket as a datasink (addr/port) +(optional ,r is the transmit rate in messages/sec) +(optional ,f is schedule frequency, default is 100) +.TP +.B +\fB-c\fP count +stop or reopen after this many msgs are processed +.TP +.B +\fB-t\fP interval +stop or reopen after this amount of time has passed +.TP +.B +\fB-1\fP [+-]value +replace, set (+), or clear (-) user1 to this value +.TP +.B +\fB-2\fP [+-]value +replace, set (+), or clear (-) user1 to this value +.TP +.B +\fB-k\fP cmd +make \fB-c\fP, \fB-t\fP continuous, run cmd on each new file +(cmd can be empty if you just want the continuity) +.TP +.B +\fB-Dmod\fP[,args] +add module +.TP +.B +\fB-H\fP [sd] +hide source and/or destination IP addresses +.PP +argument to \fB-l\fP and \fB-s\fP can be addr/port or addr/port..port (range) +.SH EXAMPLE +Common usage: +.PP +.nf +.fam C + $ ncaptool -t 3600 -k gzip -i enp9s0+ -o $FILE + +.fam T +.fi +to inspect a compressed ncap file, run something like this: +.PP +.nf +.fam C + $ zcat $FILE | ncaptool -n - -vmg - + +.fam T +.fi +.SH SEE ALSO +\fBncap\fP(3), \fBtcpdump\fP(8). +.SH AUTHOR +\fBncaptool\fP was written by Internet Systems Consortium and Jan Andres . +.PP +This manual page was written by Thiago Andrade Marques for the Debian project (but may be used by others). diff -Nru ncap-1.9.2/debian/manpage/ncaptool.txt ncap-1.9.2/debian/manpage/ncaptool.txt --- ncap-1.9.2/debian/manpage/ncaptool.txt 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/manpage/ncaptool.txt 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,62 @@ +NAME + ncaptool - Network capture library + +SYNOPSIS + ncaptool [-h] [-d] [-m] [-f] [-r] [-w] [-v] [-S] [-e] [-i] + [-b] [-p] [-n] [-l] [-g] [-o] [-s] [-c] [-t] [-1] + [-2] [-k] [-Dmod] [-H] + +DESCRIPTION + ncaptool is a network capture library like libpcap (on which it is based) + and tcpdump. It produces binary data in its own ncap format, which can be + stored in a dump file or transmitted over a UDP socket. Unlike libpcap, it + discards data link headers and only supports IPv4 and IPv6 packets, but it + can perform reassembly of IP datagrams. + +OPTIONS + -h display this help text and exit + -d increment debugging level + -m increment message trace level + -f flush outputs after every bufferable write + -r destination of -s can be a remote (off-LAN) address + -w use wallclock time not NCAP timestamp for -o files + -v emit a traffic summary to stderr on exit + -S stripe across all -s datasinks, round robin style + -e endline specify continuation separator + -i ifname[+] add interface as a datasource ('+' = promiscuous) + -b bpf use this bpf pattern for any -i or -p datasources + -p file add pcap file as a datasource ('-' = stdin) + -n file add ncap file as a datasource ('-' = stdin) + -l socket add datagram socket as a datasource (addr/port) + -g file write msg trace to this file ('-' = stdout) + -o file write ncap data to this file ('-' = stdout) + -s so[,r[,f]] add this datagram socket as a datasink (addr/port) + (optional ,r is the transmit rate in messages/sec) + (optional ,f is schedule frequency, default is 100) + -c count stop or reopen after this many msgs are processed + -t interval stop or reopen after this amount of time has passed + -1 [+-]value replace, set (+), or clear (-) user1 to this value + -2 [+-]value replace, set (+), or clear (-) user1 to this value + -k cmd make -c, -t continuous, run cmd on each new file + (cmd can be empty if you just want the continuity) + -Dmod[,args] add module + -H [sd] hide source and/or destination IP addresses + + argument to -l and -s can be addr/port or addr/port..port (range) + +EXAMPLE + Common usage: + + $ ncaptool -t 3600 -k gzip -i enp9s0+ -o $FILE + + to inspect a compressed ncap file, run something like this: + + $ zcat $FILE | ncaptool -n - -vmg - + +SEE ALSO + ncap(3), tcpdump(8). + +AUTHOR + ncaptool was written by Internet Systems Consortium and Jan Andres . + + This manual page was written by Thiago Andrade Marques for the Debian project (but may be used by others). diff -Nru ncap-1.9.2/debian/ncaptool.docs ncap-1.9.2/debian/ncaptool.docs --- ncap-1.9.2/debian/ncaptool.docs 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/ncaptool.docs 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1 @@ +FILTERS diff -Nru ncap-1.9.2/debian/ncaptool.install ncap-1.9.2/debian/ncaptool.install --- ncap-1.9.2/debian/ncaptool.install 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/ncaptool.install 2020-03-28 02:24:25.000000000 +0000 @@ -1,2 +1,2 @@ -usr/bin/ncaptool +usr/bin/ncaptool usr/sbin usr/lib/*/ncaptool/*.so diff -Nru ncap-1.9.2/debian/ncaptool.manpages ncap-1.9.2/debian/ncaptool.manpages --- ncap-1.9.2/debian/ncaptool.manpages 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/ncaptool.manpages 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1 @@ +debian/manpage/ncaptool.8 diff -Nru ncap-1.9.2/debian/not-installed ncap-1.9.2/debian/not-installed --- ncap-1.9.2/debian/not-installed 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/not-installed 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,3 @@ +usr/lib/*/libncap.la +usr/lib/*/ncaptool/mod_test.a +usr/lib/*/ncaptool/mod_test.la diff -Nru ncap-1.9.2/debian/patches/010_Makefile-am.patch ncap-1.9.2/debian/patches/010_Makefile-am.patch --- ncap-1.9.2/debian/patches/010_Makefile-am.patch 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/patches/010_Makefile-am.patch 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,16 @@ +Description: Removed wrapsrv from a variable. +Author: Robert S. Edmonds +Last-Update: 2014-08-23 +Index: ncap/Makefile.am +=================================================================== +--- ncap-1.9.2.orig/Makefile.am ++++ ncap-1.9.2/Makefile.am +@@ -18,7 +18,7 @@ + @libbind_ldflags@ @libbind_libs@ \ + @libpcap_ldflags@ @libpcap_libs@ + +-bin_PROGRAMS = ncaptool wrapsrv ++bin_PROGRAMS = ncaptool + ncaptool_CFLAGS = $(AM_CFLAGS) @libbind_cflags@ + ncaptool_SOURCES = ncaptool.c ncaptool_mod.c dump_dns.c \ + ncap.h ncaptool.h ncaptool_mod.h ncap_port.h dump_dns.h diff -Nru ncap-1.9.2/debian/patches/020_check-libbind-m4.patch ncap-1.9.2/debian/patches/020_check-libbind-m4.patch --- ncap-1.9.2/debian/patches/020_check-libbind-m4.patch 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/patches/020_check-libbind-m4.patch 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,82 @@ +Description: Fixed check_libbind.m4. +Author: Robert S. Edmonds +Last-Update: 2014-08-23 +Index: ncap/check_libbind.m4 +=================================================================== +--- ncap-1.9.2.orig/check_libbind.m4 ++++ ncap-1.9.2/check_libbind.m4 +@@ -1,71 +1,9 @@ +-### +-### libbind +-### +-AC_ARG_WITH([libbind], AC_HELP_STRING([--with-libbind=DIR], +- [libbind installation path]), [], [ withval="yes" ]) +-AC_MSG_CHECKING([for libbind headers]) +-if test x_$withval = x_yes; then +- withval="/usr /usr/local" +-fi +- + libbind_cflags="" + libbind_ldflags="" +-libbind_libs="-lbind" +- +-libbind_dir="" +-for dir in $withval; do +- if test -f "$dir/include/bind/arpa/nameser.h"; then +- found_libbind_dir="yes" +- libbind_dir="$dir" +- libbind_cflags="-I$dir/include/bind" +- break +- fi +-done +- +-if test x_$found_libbind_dir = x_yes; then +- AC_MSG_RESULT([$dir]) +-else +- AC_MSG_ERROR([not found]) +-fi +- +-AC_MSG_CHECKING([for libbind library]) +- +-if test x_$libbind_dir != x_/usr; then +- libbind_ldflags="-L$libbind_dir/lib" +-fi +- +-save_cflags="$CFLAGS" +-save_ldflags="$LDFLAGS" +-save_libs="$LIBS" +- +-CFLAGS="$CFLAGS $libbind_cflags" +-LDFLAGS="$LDFLAGS $libbind_ldflags" +-LIBS="$LIBS $libbind_libs" +- +-AC_LINK_IFELSE( +- AC_LANG_PROGRAM([[ +-#include +-#include +-#include +-]], +-[[ +-ns_initparse(0,0,0); +-ns_name_uncompress(0,0,0,0,0); +-]]), +- AC_MSG_RESULT([yes]) +- AC_DEFINE([HAVE_LIBBIND], [1], [Define to 1 if libbind works.]) +- AC_DEFINE([HAVE_ARPA_NAMESER_H], [1], [Define to 1 if you have the header file.]) +- , +- AC_MSG_ERROR([not found]) +- libbind_cflags="" +- libbind_ldflags="" +- libbind_libs="" +-) +- +-CFLAGS="$save_cflags" +-LDFLAGS="$save_ldflags" +-LIBS="$save_libs" ++libbind_libs="-lresolv" + + AC_SUBST([libbind_cflags]) + AC_SUBST([libbind_ldflags]) + AC_SUBST([libbind_libs]) ++ ++AC_DEFINE([HAVE_LIBBIND], [1], [Define to 1 if libbind works.]) diff -Nru ncap-1.9.2/debian/patches/030_configure-ac.patch ncap-1.9.2/debian/patches/030_configure-ac.patch --- ncap-1.9.2/debian/patches/030_configure-ac.patch 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/patches/030_configure-ac.patch 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,16 @@ +Description: Fixed AC_CHECK_HEADERS. +Author: Robert S. Edmonds +Last-Update: 2014-08-23 +Index: ncap/configure.ac +=================================================================== +--- ncap-1.9.2.orig/configure.ac ++++ ncap-1.9.2/configure.ac +@@ -38,7 +38,7 @@ + AC_HEADER_STDBOOL + AC_HEADER_TIME + +-AC_CHECK_HEADERS([arpa/inet.h fcntl.h netinet/in_systm.h netinet/in.h dnl ++AC_CHECK_HEADERS([arpa/inet.h arpa/nameser.h fcntl.h netinet/in_systm.h netinet/in.h dnl + stddef.h sys/ioctl.h sys/param.h sys/types.h sys/socket.h sys/time.h]) + + AC_CHECK_HEADERS([net/if.h], [], [], diff -Nru ncap-1.9.2/debian/patches/series ncap-1.9.2/debian/patches/series --- ncap-1.9.2/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/patches/series 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,3 @@ +010_Makefile-am.patch +020_check-libbind-m4.patch +030_configure-ac.patch diff -Nru ncap-1.9.2/debian/rules ncap-1.9.2/debian/rules --- ncap-1.9.2/debian/rules 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/rules 2020-03-28 02:24:25.000000000 +0000 @@ -5,4 +5,4 @@ export DEB_BUILD_MAINT_OPTIONS=hardening=+all %: - dh $@ --with autoreconf + dh $@ diff -Nru ncap-1.9.2/debian/salsa-ci.yml ncap-1.9.2/debian/salsa-ci.yml --- ncap-1.9.2/debian/salsa-ci.yml 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/salsa-ci.yml 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,4 @@ +--- +include: + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml diff -Nru ncap-1.9.2/debian/source/format ncap-1.9.2/debian/source/format --- ncap-1.9.2/debian/source/format 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/debian/source/format 2020-03-28 02:24:25.000000000 +0000 @@ -1 +1 @@ -1.0 +3.0 (quilt) diff -Nru ncap-1.9.2/debian/tests/control ncap-1.9.2/debian/tests/control --- ncap-1.9.2/debian/tests/control 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/tests/control 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1 @@ +Test-Command: ncaptool -h 2>&1 | grep ncap diff -Nru ncap-1.9.2/debian/watch ncap-1.9.2/debian/watch --- ncap-1.9.2/debian/watch 1970-01-01 00:00:00.000000000 +0000 +++ ncap-1.9.2/debian/watch 2020-03-28 02:24:25.000000000 +0000 @@ -0,0 +1,2 @@ +version=4 +https://dl.farsightsecurity.com/dist/ncap/ncap?@ANY_VERSION@@ARCHIVE_EXT@ diff -Nru ncap-1.9.2/Makefile.am ncap-1.9.2/Makefile.am --- ncap-1.9.2/Makefile.am 2020-04-28 04:02:20.000000000 +0000 +++ ncap-1.9.2/Makefile.am 2009-12-06 21:32:53.000000000 +0000 @@ -18,7 +18,7 @@ @libbind_ldflags@ @libbind_libs@ \ @libpcap_ldflags@ @libpcap_libs@ -bin_PROGRAMS = ncaptool +bin_PROGRAMS = ncaptool wrapsrv ncaptool_CFLAGS = $(AM_CFLAGS) @libbind_cflags@ ncaptool_SOURCES = ncaptool.c ncaptool_mod.c dump_dns.c \ ncap.h ncaptool.h ncaptool_mod.h ncap_port.h dump_dns.h