CVS commit: pkgsrc/security/ipv6-toolkit

["Marcin Gondek" <drixter%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   drixter
Date:           Thu Jun 18 19:01:53 UTC 2026

Modified Files:
        pkgsrc/security/ipv6-toolkit: DESCR Makefile PLIST distinfo
Removed Files:
        pkgsrc/security/ipv6-toolkit/patches: patch-Makefile patch-aa

Log Message:
security/ipv6-toolkit: Update to v2.2

SI6 Networks IPv6 Toolkit 2.2
   * All: Ensure consistency in version numbers across tools and documentation.
   * path6: Fix bug that prevented setting TCP flags
   * blackhole6: Fixed bug that lead to errors for paths >= 10 hops
   * blackhole6: Polished the code
     Removed unnecessary comments, and prevented some internal errors to make it
     to the tool output.
   * blackhole6: Set different default destination port numbers for TCP and UDP
     The default UDP destination port has been changed to port 53.

SI6 Networks IPv6 Toolkit v2.1 (Jan)
   * addr6: Add support for accepting only one address per prefix
     Option '--block-dup-preflen' was added
   * scan6: Fix bug in smart scan
     There was a bug in the generation of low-byte and pattern-byte addresses.
   * scan6: Improve VMWare scans
     We have now added vSphere and ESX server entries
   * scan6: Fix bug in default ports
     When port-scanning, if not range was specified, the tool would not scan
     any ports.
   * script6: Add alias for "get-alexa-domains"
     Some documents were using the "get-alexa" script name (rather than
     "get-alexa-domains") but the short name of the script had been removed.
     Now added.

SI6 Networks IPv6 Toolkit v2.0 (Guille)
   * path6: New tool
     Added a fully-IPv6-capable traceroute tool, named path6.
   * script6: New tool
     Added a new tool which incorporates new functionality and also provides
     a shortcut to other existing tools.
   * blackhole6: New tool
     Added a new tool isolates IPv6 blackholes.
   * udp6: New tool
     Added a new tool that can send arbirary UDP/IPv6 packets.
   * All: Fix bug when reading packets
     lipcap "internals" together with select() would cause (at times)
     delays when reading packets.
   * All: Add support for Solaris
     Solaris is now a supported platform.
   * All: Fix bug in next hop determination
     A bug caused, in some scenarios, the tools to fail with "cannot find
     next hop".
   * All: Fix support for loopback interface
     The tools failed to set the "virtual" "Ether Proto" for packets sent
     on the loopback interface, and hence they were discarded.
   * All: Add support for domain names
     All tools now support domain names in their "-d" options.
   * addr6: Fix bug in address scope filtering
     A bug caused address scope filters to behave incorrectly.
   * addr6: Fix error in manual page
     Some of the long-option names were incorrect.
   * scan6: Fixes bug in address range computation
     Prefixes that were not multiple of 16 resulted in bogus address ranges.
   * scan6: Add support for port scanning
     scan6 now implements several techniques for TCP and UDP port scanning.
   * scan6: Add support for heuristic host scanning
     scan6 can now automatically infer the IID type of a target and reduce
     the search space accordingly (just "-d example.com/64" or
     "-d IPV6ADDRESS/64".
   * tcp6: Add TCP probe mode
     Probe mode allows you to employ tcp6 for simple probing (e.g.,
     port scanning)
   * tcp6: Add "--open-mode" and "--close-mode" options
     These two options allow you to cause a TCP connection at a remote
     node to transition to any specific state (and hene perform e.g.,
     FIN-WAIT-2 floods)
   * tcp6: Add "--data" option
     This options allows to set a specific TCP payload from the
     command-line (e.g., an HTTP "GET" command).
   * script6: Fix bug in get-aaaa, get-ns, and get-mx
     Domains that had a CNAME would be skipped.
   * frag6: Fix bug in Frag ID assessment
     Probes are now sent every 10ms rather than in batches, to minimize packet
     reordering.

SI6 Networks IPv6 Toolkit v1.5.3

   * All: Fix packet size issues
     Many tools were using a (sometimes non-initialized) max_packet_size
     variable, instead of the corresponding member of the idata structure.
   * All: Add support for some Mac OS version
     The toolkit would not compile on Lion (10.7.5) or Snow Leopard (10.6.8),
     as a result of inconsistencies of how BYTE_ORDER-related constants were
     (not) set in those versions of Mac OS.

SI6 Networks IPv6 Toolkit v1.5.2

   * All: Add support for GNU Debian/kfreebsd
     The toolkit would not build on GNU Debian/kfreebsd before this release.
   * tcp6: Add support for TCP/IPv6 probes
     tcp6 can now send TCP/IPv6 packets ("--probe-mode" option), and read the
     TCP response packets, if any. This can be leveraged for port scans, and
     miscellaneous measurements.

SI6 Networks IPv6 Toolkit v1.5.1
   * Fix Mac OS breakage
     libipv6.h had incorrect definitions for "struct tcp_hdr".

SI6 Networks IPv6 Toolkit v1.5

   * All: Improved the next-hop determination
     Since the toolkit employs libpcap (as there is no portable way to forge
     IPv6 addresses and do other tricks), it was relying on the user specifying
     a network interface ("-i" was mandatory for all tools) and that routers
     would send Router Advertisements on the local links. This not only was
     rather inconvenient for users (specifying a network interface was not
     warranted), but also meant that in setups where RAs where not available
     (e.g., manual configuration), the tools would fail. The toolkit now
     employs routing sockets (in BSDs) or Netlink (in Linux), and only uses
     "sending RAs" as a fall-back in case of failure (IPv6 not configured on
     the local host).
   * All: Improved source address selection
     This is closely related to the previous bullet.
   * All: More code moved to libipv6
     More and more code was moved to libipv6 and removed to the individual tool
     source files. As with some of the above, this was painful and
     time-consuming, but was necessary -- and in the long run it will make
     code maintenance easier.
   * All: libipv6 used throughout all tools
     This was rather painful and non-exciting, but necessary.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/security/ipv6-toolkit/DESCR
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/ipv6-toolkit/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/ipv6-toolkit/PLIST
cvs rdiff -u -r1.12 -r1.13 pkgsrc/security/ipv6-toolkit/distinfo
cvs rdiff -u -r1.3 -r0 pkgsrc/security/ipv6-toolkit/patches/patch-Makefile
cvs rdiff -u -r1.4 -r0 pkgsrc/security/ipv6-toolkit/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ipv6-toolkit/DESCR
diff -u pkgsrc/security/ipv6-toolkit/DESCR:1.1.1.1 pkgsrc/security/ipv6-toolkit/DESCR:1.2
--- pkgsrc/security/ipv6-toolkit/DESCR:1.1.1.1  Mon Feb 11 06:55:05 2013
+++ pkgsrc/security/ipv6-toolkit/DESCR  Thu Jun 18 19:01:53 2026
@@ -1,20 +1,3 @@
 The SI6 Networks' IPv6 toolkit is a set of IPv6
 security/trouble-shooting tools, that can send arbitrary IPv6-based
 packets.
-
-flow6: A tool to perform a security asseessment of the IPv6 Flow Label.
-frag6:  A tool to perform IPv6 fragmentation-based attacks and to
-       perform a security assessment of a number of fragmentation-related
-       aspects.
-icmp6: A tool to perform attacks based on ICMPv6 error messages.
-jumbo6:        A tool to assess potential flaws in the handling of IPv6 Jumbograms.
-na6:   A tool to send arbitrary Neighbor Advertisement messages.
-ni6:   A tool to send arbitrary ICMPv6 Node Information messages, and
-       assess possible flaws in the processing of such packets.
-ns6:   A tool to send arbitrary Neighbor Solicitation messages.
-ra6:   A tool to send arbitrary Router Advertisement messages.
-rd6:   A tool to send arbitrary ICMPv6 Redirect messages.
-rs6:   A tool to send arbitrary Router Solicitation messages.
-scan6: An IPv6 address scanning tool.
-tcp6:  A tool to send arbitrary TCP segments and perform a variety of
-       TCP-based attacks.

Index: pkgsrc/security/ipv6-toolkit/Makefile
diff -u pkgsrc/security/ipv6-toolkit/Makefile:1.9 pkgsrc/security/ipv6-toolkit/Makefile:1.10
--- pkgsrc/security/ipv6-toolkit/Makefile:1.9   Mon Sep  9 06:42:44 2013
+++ pkgsrc/security/ipv6-toolkit/Makefile       Thu Jun 18 19:01:53 2026
@@ -1,33 +1,31 @@
-# $NetBSD: Makefile,v 1.9 2013/09/09 06:42:44 agc Exp $
+# $NetBSD: Makefile,v 1.10 2026/06/18 19:01:53 drixter Exp $
 
-DISTNAME=      ipv6toolkit-v1.4.1
-PKGNAME=       ${DISTNAME:C/-v/-/}
+DISTNAME=      ipv6toolkit-2.2
 CATEGORIES=    security net
-MASTER_SITES=  http://www.si6networks.com/tools/ipv6toolkit/
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=fgont/}
+GITHUB_TAG=    refs/tags/v${PKGVERSION_NOREV}
 
-MAINTAINER=    agc%NetBSD.org@localhost
+MAINTAINER=    drixter%e-utp.net@localhost
 HOMEPAGE=      http://www.si6networks.com/tools/ipv6toolkit
 COMMENT=       IPv6 security assessment and troubleshooting tool
 LICENSE=       gnu-gpl-v3
 
-AUTO_MKDIRS=   yes
+WRKSRC=                ${WRKDIR}/${DISTNAME}
 
-BINS=          flow6 frag6 icmp6 jumbo6 na6 ni6 ns6 ra6 rd6 rs6 scan6 tcp6
-MAN1=          flow6.1 frag6.1 icmp6.1 jumbo6.1 na6.1 ni6.1 ns6.1
-MAN1+=         ra6.1 rd6.1 rs6.1 scan6.1 tcp6.1
-MAN5=          ipv6toolkit.conf.5
-
-do-install:
-       for f in ${BINS}; do                                            \
-               ${INSTALL_PROGRAM} ${WRKSRC}/$$f ${DESTDIR}${PREFIX}/bin/$$f; \
-       done
-       for f in ${MAN1}; do                                            \
-               ${INSTALL_MAN} ${WRKSRC}/manuals/$$f ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1/$$f; \
-       done
-       for f in ${MAN5}; do                                            \
-               ${INSTALL_MAN} ${WRKSRC}/manuals/$$f ${DESTDIR}${PREFIX}/${PKGMANDIR}/man5/$$f; \
-       done
+USE_TOOLS+=    perl
 
-.include "../../net/libpcap/buildlink3.mk"
+REPLACE_PERL+= tools/blackhole6 tools/script6 tools/messi
+
+post-install:
+       ${INSTALL_MAN_DIR} ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
+       ${INSTALL_MAN_DIR} ${DESTDIR}${PREFIX}/${PKGMANDIR}/man5
+       ${INSTALL_MAN_DIR} ${DESTDIR}${PREFIX}/${PKGMANDIR}/man7
+
+       ${INSTALL_MAN} ${WRKSRC}/manuals/*.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1/
+       ${INSTALL_MAN} ${WRKSRC}/manuals/*.5 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man5/
+       ${INSTALL_MAN} ${WRKSRC}/manuals/*.7 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man7/
 
+
+.include "../../net/libpcap/buildlink3.mk"
+.include "../../lang/perl5/module.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/ipv6-toolkit/PLIST
diff -u pkgsrc/security/ipv6-toolkit/PLIST:1.3 pkgsrc/security/ipv6-toolkit/PLIST:1.4
--- pkgsrc/security/ipv6-toolkit/PLIST:1.3      Mon Sep  9 06:42:44 2013
+++ pkgsrc/security/ipv6-toolkit/PLIST  Thu Jun 18 19:01:53 2026
@@ -1,26 +1,49 @@
-@comment $NetBSD: PLIST,v 1.3 2013/09/09 06:42:44 agc Exp $
-bin/flow6
-bin/frag6
-bin/icmp6
-bin/jumbo6
-bin/na6
-bin/ni6
-bin/ns6
-bin/ra6
-bin/rd6
-bin/rs6
-bin/scan6
-bin/tcp6
+@comment $NetBSD: PLIST,v 1.4 2026/06/18 19:01:53 drixter Exp $
+bin/addr6
+man/man1/addr6.1
+man/man1/blackhole6.1
 man/man1/flow6.1
 man/man1/frag6.1
 man/man1/icmp6.1
 man/man1/jumbo6.1
+man/man1/mldq6.1
 man/man1/na6.1
 man/man1/ni6.1
 man/man1/ns6.1
+man/man1/path6.1
 man/man1/ra6.1
 man/man1/rd6.1
 man/man1/rs6.1
 man/man1/scan6.1
+man/man1/script6.1
 man/man1/tcp6.1
+man/man1/udp6.1
 man/man5/ipv6toolkit.conf.5
+man/man7/ipv6toolkit.7
+sbin/blackhole6
+sbin/flow6
+sbin/frag6
+sbin/icmp6
+sbin/jumbo6
+sbin/messi
+sbin/mldq6
+sbin/na6
+sbin/ni6
+sbin/ns6
+sbin/path6
+sbin/ra6
+sbin/rd6
+sbin/rs6
+sbin/scan6
+sbin/script6
+sbin/tcp6
+sbin/udp6
+share/ipv6toolkit/country-data.csv
+share/ipv6toolkit/dns-dictionary.txt
+share/ipv6toolkit/dns-gov-uk-domains.csv
+share/ipv6toolkit/dns-tld-database.csv
+share/ipv6toolkit/oui.txt
+share/ipv6toolkit/public_suffix_list.dat
+share/ipv6toolkit/rir-database.csv
+share/ipv6toolkit/service-names-port-numbers.csv
+share/ipv6toolkit/top-port-numbers.csv

Index: pkgsrc/security/ipv6-toolkit/distinfo
diff -u pkgsrc/security/ipv6-toolkit/distinfo:1.12 pkgsrc/security/ipv6-toolkit/distinfo:1.13
--- pkgsrc/security/ipv6-toolkit/distinfo:1.12  Tue Oct 26 11:17:10 2021
+++ pkgsrc/security/ipv6-toolkit/distinfo       Thu Jun 18 19:01:53 2026
@@ -1,7 +1,5 @@
-$NetBSD: distinfo,v 1.12 2021/10/26 11:17:10 nia Exp $
+$NetBSD: distinfo,v 1.13 2026/06/18 19:01:53 drixter Exp $
 
-BLAKE2s (ipv6toolkit-v1.4.1.tar.gz) = 006b8a2a55430fba6a5c21525c5ce95b3aeca8b26d9be3ca1d63fb7435176552
-SHA512 (ipv6toolkit-v1.4.1.tar.gz) = 50a3f66a02a417f07c5f8befb684629ea027fac6835866b957febf35581ddc0f611a8981030cade4dd10757dafc87b0a3d19384edee0f58f2fd713f23003a57d
-Size (ipv6toolkit-v1.4.1.tar.gz) = 469374 bytes
-SHA1 (patch-Makefile) = f8471f18a7fb1604357a9a4e55808e1c1f9c8f94
-SHA1 (patch-aa) = 594fb41b77258cae0d3ba81a78144c312728faa8
+BLAKE2s (ipv6toolkit-2.2.tar.gz) = 380610181c047df5f35830d73fb976c60e917c43f8a6ca74dc0430a65ace6397
+SHA512 (ipv6toolkit-2.2.tar.gz) = 10cd9e4ab5fa6c31b30f374fee064ab54581dc785ec42f9994d4efa7567240263aec84e2394c82a0c95f0175dbcd257f64858bfcb172c362b477a0eb52019056
+Size (ipv6toolkit-2.2.tar.gz) = 1003009 bytes