BSD Ports

devel/tlsh 4.8.2 NetBSD

Fuzzy matching library

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
a9b786bde0
License
apache-2.0
Categories
devel
Package size
33.3 KiB, 342.1 KiB installed

Description

TLSH is a fuzzy matching library. Given a byte stream with a minimum length of 256 bytes (and a minimum amount of randomness - see note in Python extension below), TLSH generates a hash value which can be used for similarity comparisons. Similar objects will have similar hash values which allows for the detection of similar objects by comparing their hash values. Note that the byte stream should have a sufficient amount of complexity. For example, a byte stream of identical bytes will not generate a hash value.

In the other systems

SystemPortVersion
NetBSDdevel/tlsh4.8.2
FreeBSDdevel/tlsh4.7.2
DragonFlydevel/tlsh4.7.2
HardenedBSDdevel/tlsh4.7.2
GhostBSDdevel/tlsh4.7.2

Install

Binary package:

pkgin install tlsh

From pkgsrc:

cd /usr/pkgsrc/devel/tlsh && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_644.8.2
NetBSD 10.1 aarch644.8.2
SmartOS / illumos x86_644.8.2
macOS 15 arm644.8.2

Dependencies

Required by 1

Commit history 1

DateCommitCreditsLog message
a9b786bde0 ktnb tlsh: update to 4.12.1
4.12.x fixed memeory bugs 4.11.0 added Jupyter notebook for analysis of Malware Bazaar - Pattern file for predicting malware family of unknown samples using Malware Bazaar clustering 4.10.x added Python tools for clustering file - using DBSCAN - using HAC-T - we provide scripts to show people how to cluster the Malware Bazaar - dataset using TLSH 4.9.x added options -thread and -private - -thread the TLSH is evaluated with 2 threads (faster calculation) - Only done for files / bytestreams >= 10000 bytes - But this means that it is impossible to calculate the checksum - So the checksum is set to zero - -private Does not evaluate the checksum - Useful if you do not want to leak information - Slightly faster than default TLSH (code was written to optimize this)