aboutsummaryrefslogtreecommitdiffstats
path: root/security/nessus-libraries/files
diff options
context:
space:
mode:
authorobraun <obraun@FreeBSD.org>2003-04-20 04:40:13 +0800
committerobraun <obraun@FreeBSD.org>2003-04-20 04:40:13 +0800
commita6d4771d523bdd5fded4a499b132d592a2b9b319 (patch)
tree0b239ba0541641a2ebf4315af87dbee4a43e468d /security/nessus-libraries/files
parent996c50af473600b30871639b059a1621d8191646 (diff)
downloadfreebsd-ports-gnome-a6d4771d523bdd5fded4a499b132d592a2b9b319.tar.gz
freebsd-ports-gnome-a6d4771d523bdd5fded4a499b132d592a2b9b319.tar.zst
freebsd-ports-gnome-a6d4771d523bdd5fded4a499b132d592a2b9b319.zip
- Update to 2.0.4.
- Add dependency on bpf for the server. - Add "client only" knob. PR: ports/51126 Submitted by: maintainer
Diffstat (limited to 'security/nessus-libraries/files')
-rw-r--r--security/nessus-libraries/files/README.BPF46
-rw-r--r--security/nessus-libraries/files/patch-aa16
2 files changed, 54 insertions, 8 deletions
diff --git a/security/nessus-libraries/files/README.BPF b/security/nessus-libraries/files/README.BPF
new file mode 100644
index 000000000000..90185da60834
--- /dev/null
+++ b/security/nessus-libraries/files/README.BPF
@@ -0,0 +1,46 @@
+Nessus uses the pcap library, which uses the
+berkeley packet filter (bpf) to do its job.
+
+Since Nessus used multiple processes, several pcap-aware plugins will
+need to access the the bpf at the same time.
+
+This means that you need to recompile your kernel with the
+following option :
+
+For FreeBSD 5.x:
+pseudo-device bpfilter
+
+For FreeBSD 4.x:
+pseudo-device bpfilter NUM
+
+Where 'NUM' is the number of bpf you want -- it should be equal to
+the 'max hosts number' option you enter in nessusd x the
+'max plugins' option.
+
+If for instance you want to have 10 nessusd running at the same time,
+each running 5 plugins in parallel, you should create 50 (10 * 5) bpfs
+(as nessusd is extremely lightweight, you can expect to have this amount
+ of processes running at the same time)
+
+If you plan to scan a whole network, we recommand you create at least
+100 of them.
+
+Once your kernel has been rebuilt, get root, cd to /dev
+and do :
+
+ i=0; while [ $i -lt 100];
+ do
+ ./MAKEDEV bpf$i
+ let i=$i+1
+ done
+
+On FreeBSD, you can directly do :
+ ./MAKEDEV bpf+100
+
+(For FreeBSD 5.x this is not needed since the devfs creates devices when needed)
+
+If you can not recompile your kernel, you can try to run the configure
+script with the option --enable-bpf-sharing. In this case, nessusd will
+try to share one /dev/bpf among multiple processes and do the filtering
+in userland. NOTE THAT THIS OPTION IS HIGHLY EXPERIMENTAL AND WE DO
+NOT RECOMMAND ENABLING IT.
diff --git a/security/nessus-libraries/files/patch-aa b/security/nessus-libraries/files/patch-aa
index 9d914ce75c0c..2eca56c14a81 100644
--- a/security/nessus-libraries/files/patch-aa
+++ b/security/nessus-libraries/files/patch-aa
@@ -1,10 +1,10 @@
---- Makefile.orig Thu May 31 15:51:08 2001
-+++ Makefile Wed Oct 10 20:16:14 2001
-@@ -46,7 +46,6 @@
+--- Makefile.orig Tue Jan 21 15:25:01 2003
++++ Makefile Wed Jan 22 08:40:19 2003
+@@ -51,7 +51,6 @@
cd libhosts_gatherer && ${MAKE} install
- cd libpcap-nessus && ${MAKE} install
-- $(INSTALL) -m 0444 include/includes.h ${includedir}/nessus
- $(INSTALL) -m 0444 include/libnessus.h ${includedir}/nessus
- $(INSTALL) -m 0444 include/harglists.h ${includedir}/nessus
- $(INSTALL) -m 0444 include/libvers.h ${includedir}/nessus
+
+- $(INSTALL) -m 0444 include/includes.h $(DESTDIR)${includedir}/nessus
+ $(INSTALL) -m 0444 include/libnessus.h $(DESTDIR)${includedir}/nessus
+ $(INSTALL) -m 0444 include/harglists.h $(DESTDIR)${includedir}/nessus
+ $(INSTALL) -m 0444 include/libvers.h $(DESTDIR)${includedir}/nessus