Re: [Snort-users] libcap,libnet



The direct source at tcpdump.org, and most mirrors, should be LONG since clean of this. The trojan incident was in mid November.

If you have doubts, this article has the md5sums of both the trojaned, and untrojaned tarballs:

http://online.securityfocus.com/archive/1/299704


With trojan:
MD5 Sum 73ba7af963aff7c9e23fa1308a793dca libpcap-0.7.1.tar.gz

Without trojan:
MD5 Sum 0597c23e3496a5c108097b2a0f1bd0c7 libpcap-0.7.1.tar.gz

You can also grep the ./configure script for "mars.raketti.net" which is the site the trojan downloads some extra code from.


At 02:50 PM 12/27/2002 +0300, Denis A. Kirin wrote:
Hi All.

Where can I get Libcap and Libnet packages... without trojan?


Thanks in advance,


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



questions/problems with archive to: webmaster@mcabee.org
Mail converted by MHonArc 2.5.12