security/arpCounterattack 1.2.0_8

Detects and remedies ARP attacks

Repository: FreeBSD ports
Maintainer: [email protected]
Categories: security
Package size: 531.4 KiB, 2275.8 KiB installed

Description

arpCounterattack is a program for detecting and remedying "ARP attacks." It monitors traffic on any number of Ethernet interfaces and examines ARP replies and gratuitous ARP requests. If it notices an ARP reply or gratuitous ARP request that is in conflict with its notion of "correct" Ethernet/IP address pairs, it logs the attack if logging is enabled, and, if the Ethernet interface that the attack was seen on is configured as being in aggressive mode, it sends out a gratuitous ARP request and a gratuitous ARP reply with the "correct" Ethernet/IP address pair in an attempt to reset the ARP tables of hosts on the local network segment. The corrective gratuitous ARP request and corrective gratuitous ARP reply can be sent from an Ethernet interface other than the one that the attack was seen on.

Install

As a binary package — by origin, or by package name:

pkg install security/arpCounterattack
pkg install arpCounterattack

From the ports tree:

cd /usr/ports/security/arpCounterattack/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	arpCounterattack>0:security/arpCounterattack

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	1.2.0_8	1.2.0_8	1.2.0_8	1.2.0_8	1.2.0_8
FreeBSD:14:quarterly	1.2.0_8	1.2.0_8	n/a	1.2.0_8	1.2.0_8
FreeBSD:15:latest	1.2.0_8	1.2.0_8	n/a	1.2.0_8	1.2.0_8
FreeBSD:15:quarterly	1.2.0_8	1.2.0_8	n/a	n/a	n/a
FreeBSD:16:latest	1.2.0_8	1.2.0_8	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Repository

aarch64

amd64

armv6

armv7

i386

FreeBSD:14:latest

1.2.0_8

FreeBSD:14:quarterly

1.2.0_8

n/a

1.2.0_8

FreeBSD:15:latest

1.2.0_8

n/a

1.2.0_8

FreeBSD:15:quarterly

1.2.0_8

n/a

FreeBSD:16:latest

1.2.0_8

n/a

FreeBSD:16:quarterly

n/a

Dependencies

As this port's Makefile names them.

Library 2

libdnet.so : net/libdnet
libpcap.so : net/libpcap

The full lists below include those, and their dependencies in turn.

All build dependencies 3

All run dependencies 3

No port depends on this one.

Configuration

No options to configure.

USES: compiler:c++11-lib tar:tbz
Service scripts: arpCounterattack

Message after installing

Before starting arpCounterattack, you should edit its configuration file,
/usr/local/etc/arpCounterattack/arpCounterattack.conf. Then, add the following
line to /etc/rc.conf:

arpcounterattack_enable="YES"

Finally, to start it, run the following command:

/usr/local/etc/rc.d/arpCounterattack start

===>   NOTICE:

The arpCounterattack port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:

https://bugs.freebsd.org/bugzilla

More information about port maintainership is available at:

https://docs.freebsd.org/en/articles/contributing/#ports-contributing

Files

pkg-plist 3

sbin/arpCounterattack
@sample etc/arpCounterattack/arpCounterattack.conf.sample
etc/arpCounterattack/oui.txt

distinfo 1

File	Size	SHA256
arpCounterattack-1.2.0.tbz	507939	28cb61cb799871bbb10057fddbd7a445f10b27725eca088f370eeff157f88f3d

File

Size

SHA256

arpCounterattack-1.2.0.tbz

507939

28cb61cb799871bbb10057fddbd7a445f10b27725eca088f370eeff157f88f3d

Master sites 2

http://isis.poly.edu/~bk/arpCounterattack/
http://bk.macroblock.net/arpCounterattack/

Commit history 0

No commits in the history this site was built from.