Thu, 04 Oct 2012 20:30:05 +0200
Correct out of date build configuration, porting to Solaris 11 network
link infrastructure and new libpcap logic. This additionally allows for
device drivers in subdirectories of /dev. Correct packaged nmap
personalities and signatures to work out of the box. Finally, hack
arpd logic to properly close sockets and quit on TERM by repeating
signaling in the run command script. Sadly, all this fails to correct
the run time behaviour of honeyd which fails to bind to the IP layer.
michael@428 | 1 | .\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.22) |
michael@13 | 2 | .\" |
michael@13 | 3 | .\" Standard preamble: |
michael@13 | 4 | .\" ======================================================================== |
michael@13 | 5 | .de Sp \" Vertical space (when we can't use .PP) |
michael@13 | 6 | .if t .sp .5v |
michael@13 | 7 | .if n .sp |
michael@13 | 8 | .. |
michael@13 | 9 | .de Vb \" Begin verbatim text |
michael@13 | 10 | .ft CW |
michael@13 | 11 | .nf |
michael@13 | 12 | .ne \\$1 |
michael@13 | 13 | .. |
michael@13 | 14 | .de Ve \" End verbatim text |
michael@13 | 15 | .ft R |
michael@13 | 16 | .fi |
michael@13 | 17 | .. |
michael@13 | 18 | .\" Set up some character translations and predefined strings. \*(-- will |
michael@13 | 19 | .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left |
michael@428 | 20 | .\" double quote, and \*(R" will give a right double quote. \*(C+ will |
michael@428 | 21 | .\" give a nicer C++. Capital omega is used to do unbreakable dashes and |
michael@428 | 22 | .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, |
michael@428 | 23 | .\" nothing in troff, for use with C<>. |
michael@428 | 24 | .tr \(*W- |
michael@13 | 25 | .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' |
michael@13 | 26 | .ie n \{\ |
michael@13 | 27 | . ds -- \(*W- |
michael@13 | 28 | . ds PI pi |
michael@13 | 29 | . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch |
michael@13 | 30 | . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch |
michael@13 | 31 | . ds L" "" |
michael@13 | 32 | . ds R" "" |
michael@13 | 33 | . ds C` |
michael@13 | 34 | . ds C' |
michael@13 | 35 | 'br\} |
michael@13 | 36 | .el\{\ |
michael@13 | 37 | . ds -- \|\(em\| |
michael@13 | 38 | . ds PI \(*p |
michael@13 | 39 | . ds L" `` |
michael@13 | 40 | . ds R" '' |
michael@13 | 41 | 'br\} |
michael@13 | 42 | .\" |
michael@428 | 43 | .\" Escape single quotes in literal strings from groff's Unicode transform. |
michael@428 | 44 | .ie \n(.g .ds Aq \(aq |
michael@428 | 45 | .el .ds Aq ' |
michael@428 | 46 | .\" |
michael@13 | 47 | .\" If the F register is turned on, we'll generate index entries on stderr for |
michael@428 | 48 | .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index |
michael@13 | 49 | .\" entries marked with X<> in POD. Of course, you'll have to process the |
michael@13 | 50 | .\" output yourself in some meaningful fashion. |
michael@428 | 51 | .ie \nF \{\ |
michael@13 | 52 | . de IX |
michael@13 | 53 | . tm Index:\\$1\t\\n%\t"\\$2" |
michael@13 | 54 | .. |
michael@13 | 55 | . nr % 0 |
michael@13 | 56 | . rr F |
michael@13 | 57 | .\} |
michael@428 | 58 | .el \{\ |
michael@428 | 59 | . de IX |
michael@428 | 60 | .. |
michael@428 | 61 | .\} |
michael@13 | 62 | .\" |
michael@13 | 63 | .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). |
michael@13 | 64 | .\" Fear. Run. Save yourself. No user-serviceable parts. |
michael@13 | 65 | . \" fudge factors for nroff and troff |
michael@13 | 66 | .if n \{\ |
michael@13 | 67 | . ds #H 0 |
michael@13 | 68 | . ds #V .8m |
michael@13 | 69 | . ds #F .3m |
michael@13 | 70 | . ds #[ \f1 |
michael@13 | 71 | . ds #] \fP |
michael@13 | 72 | .\} |
michael@13 | 73 | .if t \{\ |
michael@13 | 74 | . ds #H ((1u-(\\\\n(.fu%2u))*.13m) |
michael@13 | 75 | . ds #V .6m |
michael@13 | 76 | . ds #F 0 |
michael@13 | 77 | . ds #[ \& |
michael@13 | 78 | . ds #] \& |
michael@13 | 79 | .\} |
michael@13 | 80 | . \" simple accents for nroff and troff |
michael@13 | 81 | .if n \{\ |
michael@13 | 82 | . ds ' \& |
michael@13 | 83 | . ds ` \& |
michael@13 | 84 | . ds ^ \& |
michael@13 | 85 | . ds , \& |
michael@13 | 86 | . ds ~ ~ |
michael@13 | 87 | . ds / |
michael@13 | 88 | .\} |
michael@13 | 89 | .if t \{\ |
michael@13 | 90 | . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" |
michael@13 | 91 | . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' |
michael@13 | 92 | . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' |
michael@13 | 93 | . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' |
michael@13 | 94 | . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' |
michael@13 | 95 | . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' |
michael@13 | 96 | .\} |
michael@13 | 97 | . \" troff and (daisy-wheel) nroff accents |
michael@13 | 98 | .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' |
michael@13 | 99 | .ds 8 \h'\*(#H'\(*b\h'-\*(#H' |
michael@13 | 100 | .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] |
michael@13 | 101 | .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' |
michael@13 | 102 | .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' |
michael@13 | 103 | .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] |
michael@13 | 104 | .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] |
michael@13 | 105 | .ds ae a\h'-(\w'a'u*4/10)'e |
michael@13 | 106 | .ds Ae A\h'-(\w'A'u*4/10)'E |
michael@13 | 107 | . \" corrections for vroff |
michael@13 | 108 | .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' |
michael@13 | 109 | .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' |
michael@13 | 110 | . \" for low resolution devices (crt and lpr) |
michael@13 | 111 | .if \n(.H>23 .if \n(.V>19 \ |
michael@13 | 112 | \{\ |
michael@13 | 113 | . ds : e |
michael@13 | 114 | . ds 8 ss |
michael@13 | 115 | . ds o a |
michael@13 | 116 | . ds d- d\h'-1'\(ga |
michael@13 | 117 | . ds D- D\h'-1'\(hy |
michael@13 | 118 | . ds th \o'bp' |
michael@13 | 119 | . ds Th \o'LP' |
michael@13 | 120 | . ds ae ae |
michael@13 | 121 | . ds Ae AE |
michael@13 | 122 | .\} |
michael@13 | 123 | .rm #[ #] #H #V #F C |
michael@13 | 124 | .\" ======================================================================== |
michael@13 | 125 | .\" |
michael@13 | 126 | .IX Title "UUID 8" |
michael@13 | 127 | .TH UUID 8 "OpenPKG" "UUID(8)" "OpenPKG" |
michael@428 | 128 | .\" For nroff, turn off justification. Always turn off hyphenation; it makes |
michael@428 | 129 | .\" way too many mistakes in technical documents. |
michael@428 | 130 | .if n .ad l |
michael@428 | 131 | .nh |
michael@13 | 132 | .SH "NAME" |
michael@428 | 133 | openpkg uuid \- OpenPKG UUID Update Utility |
michael@13 | 134 | .SH "SYNOPSIS" |
michael@13 | 135 | .IX Header "SYNOPSIS" |
michael@13 | 136 | \&\fBopenpkg uuid\fR [\fB\-\-verbose\fR] [\fB\-\-multicast\fR] \fBreset\fR|\fBupdate\fR|\fBinfo\fR |
michael@13 | 137 | .SH "DESCRIPTION" |
michael@13 | 138 | .IX Header "DESCRIPTION" |
michael@13 | 139 | The \fBopenpkg uuid\fR command is the maintenance utility for the \s-1DCE\s0 1.1 |
michael@13 | 140 | and \s-1ISO/IEC\s0 11578:1996 compliant \fIUniversally Unique Identifiers\fR |
michael@13 | 141 | (\s-1UUID\s0) of an \fBOpenPKG\fR instance. It is internally based on \fB\s-1OSSP\s0 |
michael@13 | 142 | uuid\fR. |
michael@13 | 143 | .PP |
michael@13 | 144 | UUIDs are 128 bit numbers which are intended to have a high likelihood |
michael@13 | 145 | of uniqueness over space and time and are computationally difficult |
michael@13 | 146 | to guess. They are globally unique identifiers which can be locally |
michael@13 | 147 | generated without contacting a global registration authority. UUIDs are |
michael@13 | 148 | intended as unique identifiers for both mass tagging objects with an |
michael@13 | 149 | extremely short lifetime and to reliably identifying very persistent |
michael@13 | 150 | objects across a network. The three classical \s-1UUID\s0 variants are \s-1DCE\s0 1.1 |
michael@13 | 151 | UUIDs of version 1 (time and node based), version 3 (name based) and |
michael@13 | 152 | version 4 (random number based). |
michael@13 | 153 | .PP |
michael@13 | 154 | For an \fBOpenPKG\fR instance, three different UUIDs are used: |
michael@13 | 155 | .ie n .IP "1. \fBOpenPKG Registry\fR (\*(C`UUID_REGISTRY\*(C')" 3 |
michael@13 | 156 | .el .IP "1. \fBOpenPKG Registry\fR (\f(CW\*(C`UUID_REGISTRY\*(C'\fR)" 3 |
michael@13 | 157 | .IX Item "1. OpenPKG Registry (UUID_REGISTRY)" |
michael@13 | 158 | This is a version 1 \s-1UUID\s0 which uniquely identifiers the \fBOpenPKG\fR |
michael@13 | 159 | instance for global registration purposes. It is generated just once in |
michael@13 | 160 | the lifetime of the \fBOpenPKG\fR instance. The value of this \s-1UUID\s0 cannot |
michael@13 | 161 | be recalculated deterministically. |
michael@13 | 162 | .ie n .IP "2. \fBOpenPKG Instance\fR (\*(C`UUID_INSTANCE\*(C')" 3 |
michael@13 | 163 | .el .IP "2. \fBOpenPKG Instance\fR (\f(CW\*(C`UUID_INSTANCE\*(C'\fR)" 3 |
michael@13 | 164 | .IX Item "2. OpenPKG Instance (UUID_INSTANCE)" |
michael@13 | 165 | This is a version 3 \s-1UUID\s0 which summarizes the \fBOpenPKG\fR |
michael@13 | 166 | instance parameters. Currently the values of the following |
michael@13 | 167 | particular OpenPKG \s-1RPM\s0 macros are uses as input: |
michael@13 | 168 | .Sp |
michael@13 | 169 | .Vb 5 |
michael@13 | 170 | \& %{l_openpkg_release} %{l_prefix} |
michael@13 | 171 | \& %{l_susr} %{l_suid} %{l_sgrp} %{l_sgid} |
michael@13 | 172 | \& %{l_musr} %{l_muid} %{l_mgrp} %{l_mgid} |
michael@13 | 173 | \& %{l_rusr} %{l_ruid} %{l_rgrp} %{l_rgid} |
michael@13 | 174 | \& %{l_nusr} %{l_nuid} %{l_ngrp} %{l_ngid} |
michael@13 | 175 | .Ve |
michael@13 | 176 | .Sp |
michael@13 | 177 | The value of this \s-1UUID\s0 can be recalculated deterministically and will |
michael@13 | 178 | not chance as long as none of the values of the above macro do not |
michael@13 | 179 | change. This \s-1UUID\s0 can be used for detecting OpenPKG release upgrades, |
michael@13 | 180 | accidentally changed UIDs or GIDs, etc. Notice that version 3 UUIDs are |
michael@13 | 181 | message digests (actually \s-1MD5\s0 based) and so are one-way functions which do |
michael@13 | 182 | not allow one to recalculate the input values from the \s-1UUID\s0. |
michael@13 | 183 | .ie n .IP "3. \fBOpenPKG Platform\fR (\*(C`UUID_PLATFORM\*(C')" 3 |
michael@13 | 184 | .el .IP "3. \fBOpenPKG Platform\fR (\f(CW\*(C`UUID_PLATFORM\*(C'\fR)" 3 |
michael@13 | 185 | .IX Item "3. OpenPKG Platform (UUID_PLATFORM)" |
michael@13 | 186 | This is a version 3 \s-1UUID\s0 which summarizes the \fBOpenPKG\fR platform |
michael@13 | 187 | parameters. Currently the OpenPKG \s-1RPM\s0 platform id plus the \s-1FQDN\s0 and \s-1IP\s0 |
michael@13 | 188 | address of the underlying host are used as input. This \s-1UUID\s0 can be used |
michael@13 | 189 | for detecting operating system and host changes. Notice that version |
michael@13 | 190 | 3 UUIDs are message digests (actually \s-1MD5\s0 based) and so are one-way |
michael@13 | 191 | functions which do not allow one to recalculate the input values from |
michael@13 | 192 | the \s-1UUID\s0. |
michael@13 | 193 | .SH "OPTIONS" |
michael@13 | 194 | .IX Header "OPTIONS" |
michael@13 | 195 | .IP "\fB\-\-verbose\fR" 4 |
michael@13 | 196 | .IX Item "--verbose" |
michael@13 | 197 | Print verbose messages during operation. |
michael@13 | 198 | .IP "\fB\-\-multicast\fR" 4 |
michael@13 | 199 | .IX Item "--multicast" |
michael@13 | 200 | Generate a random multicast \s-1MAC\s0 address instead of using the real \s-1IEEE\s0 |
michael@13 | 201 | 802 \s-1MAC\s0 address of the underlying host when generating the version 1 |
michael@13 | 202 | \&\s-1UUID\s0 \f(CW\*(C`UUID_REGISTRY\*(C'\fR. |
michael@13 | 203 | .SH "COMMANDS" |
michael@13 | 204 | .IX Header "COMMANDS" |
michael@13 | 205 | .IP "\fBreset\fR" 4 |
michael@13 | 206 | .IX Item "reset" |
michael@13 | 207 | This resets the three UUIDs \f(CW\*(C`UUID_REGISTRY\*(C'\fR, \f(CW\*(C`UUID_INSTANCE\*(C'\fR and |
michael@13 | 208 | \&\f(CW\*(C`UUID_PLATFORM\*(C'\fR to the \*(L"Nil \s-1UUID\s0\*(R". They are then automatically |
michael@13 | 209 | regenerated within one day if already done explicitly afterward with |
michael@13 | 210 | "\f(CW\*(C`openpkg uuid update\*(C'\fR". |
michael@13 | 211 | .IP "\fBupdate\fR" 4 |
michael@13 | 212 | .IX Item "update" |
michael@13 | 213 | This updates the three UUIDs \f(CW\*(C`UUID_REGISTRY\*(C'\fR, \f(CW\*(C`UUID_INSTANCE\*(C'\fR and |
michael@13 | 214 | \&\f(CW\*(C`UUID_PLATFORM\*(C'\fR to the \*(L"Nil \s-1UUID\s0\*(R". \f(CW\*(C`UUID_REGISTRY\*(C'\fR is kept unless it |
michael@13 | 215 | is the \*(L"Nil \s-1UUID\s0\*(R" (see "\f(CW\*(C`openpkg uuid reset\*(C'\fR" command above). The UUIDs |
michael@13 | 216 | \&\f(CW\*(C`UUID_INSTANCE\*(C'\fR and \f(CW\*(C`UUID_PLATFORM\*(C'\fR are updated only if their input |
michael@13 | 217 | values (and this way the resulting UUIDs) have changed. This operation |
michael@13 | 218 | is performed daily automatically. |
michael@13 | 219 | .IP "\fBinfo\fR" 4 |
michael@13 | 220 | .IX Item "info" |
michael@13 | 221 | This print summary page of identification information, including all |
michael@13 | 222 | UUIDs and all of their calculation inputs. |
michael@13 | 223 | .SH "FILES" |
michael@13 | 224 | .IX Header "FILES" |
michael@13 | 225 | The three UUIDs of the \fBOpenPKG\fR instance are stored in the file |
michael@13 | 226 | \&\f(CW\*(C`@l_prefix@/etc/openpkg/uuid\*(C'\fR in Bourne-Shell syntax. An example |
michael@13 | 227 | content is: |
michael@13 | 228 | .PP |
michael@13 | 229 | .Vb 3 |
michael@428 | 230 | \& UUID_REGISTRY="81eca44e\-4d18\-11d8\-a837\-0090272ff725" |
michael@428 | 231 | \& UUID_INSTANCE="c55a8d2d\-31bb\-3ae0\-9edb\-68337af61acc" |
michael@428 | 232 | \& UUID_PLATFORM="05ec2532\-9e3f\-37dc\-a7ed\-b291c2c463ed" |
michael@13 | 233 | .Ve |
michael@13 | 234 | .SH "CAVEATS" |
michael@13 | 235 | .IX Header "CAVEATS" |
michael@13 | 236 | By default and in full compliance with \s-1DCE\s0 1.1 and \s-1ISO/IEC\s0 11578:1996, |
michael@13 | 237 | the OpenPKG Registry \s-1UUID\s0 (\f(CW\*(C`UUID_REGISTRY\*(C'\fR) contains the \s-1IEEE\s0 802 \s-1MAC\s0 |
michael@13 | 238 | address of the underlying host. If this is not acceptable by local |
michael@13 | 239 | security policies you can easily at any time generate a new OpenPKG |
michael@13 | 240 | Registry \s-1UUID\s0 with a random multicast \s-1MAC\s0 address instead by running: |
michael@13 | 241 | .PP |
michael@13 | 242 | .Vb 2 |
michael@13 | 243 | \& $ openpkg uuid reset |
michael@428 | 244 | \& $ openpkg uuid \-\-multicast update |
michael@13 | 245 | .Ve |
michael@13 | 246 | .SH "SEE ALSO" |
michael@13 | 247 | .IX Header "SEE ALSO" |
michael@13 | 248 | \&\fB\s-1OSSP\s0 uuid\fR <http://www.ossp.org/pkg/lib/uuid/>. |
michael@13 | 249 | .SH "HISTORY" |
michael@13 | 250 | .IX Header "HISTORY" |
michael@13 | 251 | The \fBopenpkg uuid\fR command first appeared in \fBOpenPKG 2.0\fR. |