arpwatch 2.0.2, an arp activity monitoring tool. Maintain a database

of MAC <-> IP adresses mapping, and warns about changes.

8 files changed, 152 insertions, 0 deletions

diff --git a/net/arpwatch/Makefile b/net/arpwatch/Makefile
new file mode 100644
index 00000000000..a2a0de0b35d
--- /dev/null
+++ b/net/arpwatch/Makefile
@@ -0,0 +1,21 @@
+# $NetBSD: Makefile,v 1.1 1998/04/27 18:06:37 bouyer Exp $
+#
+
+DISTNAME=       arpwatch-2.0.2
+CATEGORIES=	sysutils
+MASTER_SITES=   ftp://ftp.ee.lbl.gov/
+EXTRACT_SUFX=     .tar.Z
+
+MAINTAINER=	bouyer@netbsd.org
+
+GNU_CONFIGURE=	yes
+MAN8=		arpwatch.8 arpsnmp.8
+
+post-install:
+	${INSTALL_MAN} ${WRKSRC}/arpwatch.8 ${PREFIX}/man/man8
+	${INSTALL_MAN} ${WRKSRC}/arpsnmp.8 ${PREFIX}/man/man8
+	@/bin/test -e /var/db/arpwatch || /bin/mkdir /var/db/arpwatch
+	/usr/bin/touch /var/db/arpwatch/arp.dat
+	${INSTALL_DATA} ${WRKSRC}/ethercodes.dat ${PREFIX}/etc
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/net/arpwatch/files/md5 b/net/arpwatch/files/md5
new file mode 100644
index 00000000000..c186a051cca
--- /dev/null
+++ b/net/arpwatch/files/md5
@@ -0,0 +1 @@
+MD5 (arpwatch-2.0.2.tar.Z) = 8d58b252a098d4dbebc380d652fefa0b
diff --git a/net/arpwatch/patches/patch-aa b/net/arpwatch/patches/patch-aa
new file mode 100644
index 00000000000..372ab237a18
--- /dev/null
+++ b/net/arpwatch/patches/patch-aa
@@ -0,0 +1,22 @@
+--- arpwatch.8.orig	Mon Apr 27 19:10:59 1998
++++ arpwatch.8	Mon Apr 27 19:11:47 1998
+@@ -59,7 +59,7 @@
+ .na
+ .nh
+ .nf
+-/usr/operator/arpwatch - default directory
++/var/db/arpwatch - default directory
+ arp.dat - ethernet/ip address database
+ ethercodes.dat - vendor ethernet block list
+ .ad
+--- arpsnmp.8.orig	Mon Apr 27 19:11:09 1998
++++ arpsnmp.8	Mon Apr 27 19:12:05 1998
+@@ -55,7 +55,7 @@
+ .na
+ .nh
+ .nf
+-/usr/operator/arpwatch - default directory
++/var/db/arpwatch - default directory
+ arp.dat - ethernet/ip address database
+ ethercodes.dat - vendor ethernet block list
+ .ad
diff --git a/net/arpwatch/patches/patch-ab b/net/arpwatch/patches/patch-ab
new file mode 100644
index 00000000000..d75e80f4833
--- /dev/null
+++ b/net/arpwatch/patches/patch-ab
@@ -0,0 +1,24 @@
+--- Makefile.in.orig	Mon Apr 27 18:13:13 1998
++++ Makefile.in	Mon Apr 27 19:40:23 1998
+@@ -30,8 +30,10 @@
+ BINDEST = @sbindir@
+ # Pathname of directory to install the man page
+ MANDEST = @mandir@
++# Pathname of directory to install ethernet vendor codes
++ETCDEST = $(prefix)/etc
+ # Pathname of directory to install database file
+-ARPDIR = $(prefix)/arpwatch
++ARPDIR = /var/db/arpwatch
+ 
+ # VPATH
+ srcdir = @srcdir@
+@@ -44,7 +46,8 @@
+ CC = @CC@
+ CCOPT = @V_CCOPT@
+ INCLS = -I. @V_INCLS@
+-DEFS = -DDEBUG @DEFS@ -DARPDIR=\"$(ARPDIR)\"
++DEFS = -DDEBUG @DEFS@ -DARPDIR=\"$(ARPDIR)\" \
++    -DETHERCODES=\"$(ETCDEST)/ethercodes.dat\"
+ 
+ # Standard CFLAGS
+ CFLAGS = $(CCOPT) $(DEFS) $(INCLS)
diff --git a/net/arpwatch/patches/patch-ac b/net/arpwatch/patches/patch-ac
new file mode 100644
index 00000000000..6ebb0dd4d56
--- /dev/null
+++ b/net/arpwatch/patches/patch-ac
@@ -0,0 +1,12 @@
+--- arpwatch.h.orig	Mon Apr 27 19:41:46 1998
++++ arpwatch.h	Mon Apr 27 19:42:16 1998
+@@ -3,7 +3,9 @@
+ #define NEWARPFILE "arp.dat.new"
+ #define ARPFILE "arp.dat"
+ #define OLDARPFILE "arp.dat-"
++#ifndef ETHERCODES
+ #define ETHERCODES "ethercodes.dat"
++#endif
+ #define CHECKPOINT (15*60)		/* Checkpoint time in seconds */
+ 
+ #define MEMCMP(a, b, n) memcmp((char *)a, (char *)b, n)
diff --git a/net/arpwatch/pkg/COMMENT b/net/arpwatch/pkg/COMMENT
new file mode 100644
index 00000000000..5db2703aebf
--- /dev/null
+++ b/net/arpwatch/pkg/COMMENT
@@ -0,0 +1 @@
+monitor ARP activity on a network, maintaining a database. 
diff --git a/net/arpwatch/pkg/DESCR b/net/arpwatch/pkg/DESCR
new file mode 100644
index 00000000000..bfbfd7e20bc
--- /dev/null
+++ b/net/arpwatch/pkg/DESCR
@@ -0,0 +1,63 @@
+@(#) $Header: /cvsroot/pkgsrc/net/arpwatch/pkg/Attic/DESCR,v 1.1 1998/04/27 18:06:38 bouyer Exp $ (LBL)
+
+ARPWATCH 2.0
+Lawrence Berkeley National Laboratory
+Network Research Group
+arpwatch@ee.lbl.gov
+ftp://ftp.ee.lbl.gov/arpwatch.tar.Z
+
+This directory contains source code for arpwatch and arpsnmp, tools
+that monitors ethernet activity and maintain a database of ethernet/ip
+address pairings. It also reports certain changes via email.
+
+Arpwatch uses libpcap, a system-independent interface for user-level
+packet capture.  Before building arpwatch, you must first retrieve and
+build libpcap, also from LBL, in:
+
+	ftp://ftp.ee.lbl.gov/libpcap.tar.Z.
+
+Once libpcap is built (either install it or make sure arpwatch and
+libpcap share the same parent directory), you can build arpwatch using
+the procedure in the INSTALL file.
+
+Arpsnmp has the same database features of arpwatch but relies on an
+external agent to collect the arp data. This distribution contains a
+script, arpfetch, that uses snmpwalk from the CMU SNMP package. This
+package is available from:
+
+	ftp://ftp.net.cmu.edu/pub/snmp-dist/cmu-snmp*.tar.Z
+
+It should be trivial to adaptive the output of any snmp query program
+for use with arpsnmp.
+
+The ethernet vendor codes come from:
+
+    http://www.cavebear.com/CaveBear/Ethernet/vendor.html
+
+Another source of ethernet vendor code data is:
+
+    http://standards.ieee.org/db/oui/
+
+However that version is copyrighted.
+
+Please send bugs and comments to arpwatch@ee.lbl.gov.
+
+
+ Copyright (c) 1990, 1992, 1993, 1994, 1995, 1996, 1997
+      The Regents of the University of California.  All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that: (1) source code distributions
+ retain the above copyright notice and this paragraph in its entirety, (2)
+ distributions including binary code include the above copyright notice and
+ this paragraph in its entirety in the documentation or other materials
+ provided with the distribution, and (3) all advertising materials mentioning
+ features or use of this software display the following acknowledgement:
+ ``This product includes software developed by the University of California,
+ Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
+ the University nor the names of its contributors may be used to endorse
+ or promote products derived from this software without specific prior
+ written permission.
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
+ WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
+ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
diff --git a/net/arpwatch/pkg/PLIST b/net/arpwatch/pkg/PLIST
new file mode 100644
index 00000000000..590a22ec41e
--- /dev/null
+++ b/net/arpwatch/pkg/PLIST
@@ -0,0 +1,8 @@
+@comment $NetBSD: PLIST,v 1.1 1998/04/27 18:06:38 bouyer Exp $
+sbin/arpwatch
+sbin/arpsnmp
+etc/ethercodes.dat
+man/man8/arpwatch.8
+man/man8/arpsnmp.8
+@exec /bin/mkdir /var/db/arpwatch
+@exec /usr/bin/touch /var/db/arpwatch/arp.dat