debian/0000755000000000000000000000000012235510543007166 5ustar debian/changelog0000644000000000000000000000252112235510522011035 0ustar pcapfix (1.0.1-1) unstable; urgency=low * New upstream release. * debian/rules: removed GCC hardening because the upstream already is doing. -- Joao Eriberto Mota Filho Sun, 03 Nov 2013 15:34:43 -0200 pcapfix (1.0.0-1) unstable; urgency=low * New upstream release. * Added a new test as example for users (file debian/test/test_without_pcap_header.dump) * debian/copyright: license changed from GPL-3.0+ to GPL-3.0 because the upstream didn't declare about "or any later version" in headers of your source code. * debian/control: - Fixed the VCS-Browser to show the summary instead the git structure. - Improved the short and long description because pcapfix now works with pcapng too. * debian/README.Debian: Improved explanations about the test files. -- Joao Eriberto Mota Filho Sat, 12 Oct 2013 16:36:57 -0300 pcapfix (0.7.3-1) unstable; urgency=low * New upstream release. * Removed Makefile.patch and pcapfix.1.patch. The upstream improved the Makefile and fixed the manpage. -- Joao Eriberto Mota Filho Thu, 01 Aug 2013 08:49:32 -0300 pcapfix (0.7.2-1) unstable; urgency=low * Initial release (Closes: #705221) -- Joao Eriberto Mota Filho Wed, 10 Apr 2013 15:39:11 +0000 debian/gbp.conf0000644000000000000000000000006512147767060010620 0ustar [DEFAULT] debian-branch = debian pristine-tar = True debian/source/0000755000000000000000000000000012226322774010475 5ustar debian/source/include-binaries0000644000000000000000000000013612226322774013635 0ustar debian/test/test.dump debian/test/test_damaged.dump debian/test/test_without_pcap_header.dump debian/source/format0000644000000000000000000000001412147766613011711 0ustar 3.0 (quilt) debian/rules0000755000000000000000000000007612235510532010247 0ustar #!/usr/bin/make -f #export DH_VERBOSE=1 %: dh $@ --parallel debian/examples0000644000000000000000000000001612147766613010741 0ustar debian/test/* debian/README.Debian0000644000000000000000000000114612226561457011243 0ustar pcapfix for Debian ------------------ There are three network dumps in /usr/share/doc/pcapfix/examples. The test.dump is an original and perfect file that works fine. The file test_damaged.dump was damaged by an ASCII FTP operation. The last file, test_without_pcap_header.dump, hasn't the pcap header and can't be read by tcpdump or another program. You can use these files to test pcapfix. PS: you must use the "-t 1" option to repair the test_without_pcap_header.dump. -- Joao Eriberto Mota Filho Wed, 22 May 2013 16:47:18 -0300; Updated at Sat, 12 Oct 2013 16:47:00 -03:00. debian/watch0000644000000000000000000000007212226561531010221 0ustar version=3 http://f00l.de/pcapfix/pcapfix-(\d+.*)\.tar\.gz debian/test/0000755000000000000000000000000012226322573010151 5ustar debian/test/test_damaged.dump0000644000000000000000000002126612147766613013501 0ustar òQS:JJ#gM~E<@@@Z1pP~9 ƆQKBBM~#gE4@2*@Z1pPz~=Q L66#gM~E(@@@Z1pP~zPsQZ#gM~E@@{@Z1pP~zPsuGET / HTTP/1.1 Host: darknet.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (X11; Linux x86_64) KHTML/4.8.4 (like Gecko) Konqueror/4.8 Accept: text/html, text/*;q=0.9, image/jpeg;q=0.9, image/png;q=0.9, image/*;q=0.9, */*;q=0.8 Accept-Encoding: gzip, deflate, x-gzip, x-deflate Accept-Charset: utf-8,*;q=0.5 Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7 Qm<<M~#gE(\@2%@Z1pPz~sP6Q0QtM~#gE\@2c@Z1pPz~sP65HTTP/1.1 200 OK Date: Wed, 22 May 2013 18:47:00 GMT Server: Apache Last-Modified: Wed, 25 Apr 2012 20:09:12 GMT ETag: "2ef-4be8671dc4a00" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 389 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html RMO0 Wp0ilm%8H[%$]waC%vrŝ)\l!K2Z.gZI瑋t>ݥS(>ůaI?w=pk6X~* C#z2WNWIErÊ8CCVd@&jvgM61Ԋxޙɐ[kz ׭mS~mׅ QvfS9qc=H9O C薢+ݞ:~\#{i IKQPiT"̳ `P6`9D_/Fz_!4g6ga xA- 9S,P|6RQt66#gM~E(@@@Z1pP~s|P~Q JJ#gM~E< @@ @Z1pP_9 ƆQM BBM~#gE4@2*@Z1pP`A3Qi 66#gM~E( @@@Z1pP`PsQ5 #gM~E @@k@Z1pP`PsGET /favicon.ico HTTP/1.1 Host: darknet.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (X11; Linux x86_64) KHTML/4.8.4 (like Gecko) Konqueror/4.8 Pragma: no-cache Cache-control: no-cache Accept: text/html, text/*;q=0.9, image/jpeg;q=0.9, image/png;q=0.9, image/*;q=0.9, */*;q=0.8 Accept-Encoding: gzip, deflate, x-gzip, x-deflate Accept-Charset: utf-8,*;q=0.5 Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7 Q<<M~#gE(?@2K@Z1pPP6QήM~#gE?@2@Z1pPP6gHTTP/1.1 200 OK Date: Wed, 22 May 2013 18:47:01 GMT Server: Apache Last-Modified: Sun, 17 Mar 2013 16:08:49 GMT ETag: "1378-4d82116730640" Accept-Ranges: bytes Content-Length: 4984 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: image/x-icon PNG  IHDR szz ;iCCPICC Profilexy4sW׽}$-n !{ {"P)eBM"#1JI%QT̙39y<9y}?|ּ  :F0ϡ :lHh[A= F;DZU+4#9; (s; +Ĺ'D@B#Bx (Ӄ {8N ,Ë(͆ 0xqs/h>`v0  ?GKuZj P}PV7j J q+k>@}& O hH8@~TG&LxD=_o2$$YlYyE%Uu M-m])SLaf>s9s.aӢ.K=zzy/ X<0(8dE(/lexDիc5qĵk֭Oް1%5m?nIߺmviތ̟?p𗬬Cه;v_O,(|É' O>SRRz; ׮ߨYwo --]߾il\J3$,$M-d])Shc偁A!_9tE _fMlP8AQ߉| 9$)J"Z7joݺ]ncӽ>~Y[{GWwOoˡF>, /~=ꀾIA27z $^[ &A&|aH^5IXb/Q@H$CF!=!kA~4e&%ROD]HPiBZnLE`p<ˌU$5E['+](3]B+ \nP>UAQHT)IYY\WeQۮ66#gM~E( @@@Z1pPPQM~#gE?@2@Z1pPP6eL5OQƇI˴q6h[j)5QӒ i6a;=LlؼeY[-Xvc5mC}k7h?ۻokG"bgmSW%n+{d.-jj,P)p4X/#׶R.!"9lh^1~ذBPbڛׇ&HN-Lm$i:gek/Y٬)9rۏpo(S^\v6lc9K.&ְ_{zc}]eEM[x6^jm=cg ) 0n{w?M !MKI 9CEjl@& PV"X4‘'&#IJJ"yd>$N짴Pթ| ͊Nku$3,ט,*+#LȮumOR`**r+P6QERO툺ƕIi6cZUtmw-{xSe_4N-v0(8dtS3g̴bl7;}Nܲy?rs~PZSbk]n,yZ{}v6T2<3CnEG6֍w% _$'&Zw:YwԬM woHyܝڻ~r(#<վZfed>␣8ͧ|X/l6ozXCk:5#q+- IS&mؗo[Զw[šÓX9|ʼn'5 . .f.+ :K:wlu5/UVT+T^Yq~{᭘zΎƌ{-<8)}mm]zWH8h|gM~Ȍ>^s{L{sxHI.?q.Q_ `x- @ t`# |Ăgp`A;@@e?/H r0-qbBQ66#gM~E( @@@Z1pP$[PQ0M~#gE?@2@Z1pP$[P6;M8f?.ޚt IDATX]l3ٝz=6L 'Z&NH)壁U@%Դ"EC_PxH_DJDUQȊ̷m^gwvv{ 鑮4;ss{$ijuEQڷob8s̙3|>ߥW_}Bv*qȑPT*+VիW? ۷s.]}Bw}oǎ'''~:K{{;AnݺFk.Bw_tiIH>䓛ǎ֭[266F$… 8qDM6q!y뭷'4y|_5a.@0?T*q'ax7h[[ΝCXP(fd2r9"bP(Dmm-a[nEu :e8y^/T*\eƍ(% f!l6{g8q/n݊8ض( r]. q4 ߏedYF#v UxEEmL0 (ض2H ȣpd(tttHR 200((BUUR 4Yv-wɓ\|y),//~#3 IROkk+}}}D" rQ( x<K$p8ݻw Aq$I:3>>ɓ'زe (4uuueTUe~~B@KK tk׮122Bss3o6{)Sؽ{,ӧOFUU,bM8L<~~wwRDXIJ,RNo=~$I+˜>}]$JF^֬gvB:x u\.$N>O%A(g.:Tzmtwwn:Xyuyfzss2>>Ε+WurL0d~~p8L6kY։ޝtu @!"0 Ch&t]D"Uÿ}(Wb۶mCBuihnna4i"{ ^x%S)4Mm6o͛7`nn}XkgϞ/tuuH$*h6^$#(=RO?4q]˲Ph4Zɖi(µ:;:#ϒNPUbX@2d߾ߟ:~]EyKKKȳH.^HPM8wsN^~el5k~eTU??~CQtVD PUijjj￧N|@<Q:66#gM~E( @@@Z1pP*PQCM~#gE?@2@Z1pP*P6)2D6ݥS(>ůaI?w=pk6X~* C#z2WNWIErÊ8CCVd@&jvgM61Ԋxޙɐ[kz ׭mS~mׅ QvfS9qc=H9O C薢+ݞ:~\#{i IKQPiT"̳ `P6`9D_/Fz_!4g6ga xA- 9S,P|6R[YRoV66TT8`w)n$E(@@Q@Z1pMPݽMڱP~4A[YRueeTT8`w)n$EW @@PZ@Z1pMPݽMڱP~5pGET /favicon.ico HTTP/1.1 Host: darknet.com.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9 Accept: image/png,image/*;q=0.8,*/*;q=0.5 Accept-Language: pt-BR,pt;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate Connection: keep-alive [YRJ 8`w)n$TTEs@3@Z1pPMݽO P?k^HTTP/1.1 200 OK Date: Sat, 12 Oct 2013 14:22:00 GMT Server: Apache Last-Modified: Sun, 17 Mar 2013 16:08:49 GMT ETag: "1378-4d82116730640" Accept-Ranges: bytes Content-Length: 4984 Keep-Alive: timeout=2, max=99 Connection: Keep-Alive Content-Type: image/x-icon PNG  IHDR szz ;iCCPICC Profilexy4sW׽}$-n !{ {"P)eBM"#1JI%QT̙39y<9y}?|ּ  :F0ϡ :lHh[A= F;DZU+4#9; (s; +Ĺ'D@B#Bx (Ӄ {8N ,Ë(͆ 0xqs/h>`v0  ?GKuZj P}PV7j J q+k>@}& O hH8@~TG&LxD=_o2$$YlYyE%Uu M-m])SLaf>s9s.aӢ.K=zzy/ X<0(8dE(/lexDիc5qĵk֭Oް1%5m?nIߺmviތ̟?p𗬬Cه;v_O,(|É' O>SRRz; ׮ߨYwo --]߾il\J3$,$M-d])Shc偁A!_9tE _fMlP8AQ߉| 9$)J"Z7joݺ]ncӽ>~Y[{GWwOoˡF>, /~=ꀾIA27z $^[ &A&|aH^5IXb/Q@H$CF!=!kA~4e&%ROD]HPiBZnLE`p<ˌU$5E['+](3]B+ \nP>UAQHT)IYY\WeL[YRq 66TT8`w)n$E(!@@Q@Z1pMPݽO \P4A[YR 8`w)n$TTEs@3@Z1pPM\ݽO P? 5OQƇI˴q6h[j)5QӒ i6a;=LlؼeY[-Xvc5mC}k7h?ۻokG"bgmSW%n+{d.-jj,P)p4X/#׶R.!"9lh^1~ذBPbڛׇ&HN-Lm$i:gek/Y٬)9rۏpo(S^\v6lc9K.&ְ_{zc}]eEM[x6^jm=cg ) 0n{w?M !MKI 9CEjl@& PV"X4‘'&#IJJ"yd>$N짴Pթ| ͊Nku$3,ט,*+#LȮumOR`**r+P6QERO툺ƕIi6cZUtmw-{xSe_4N-v0(8dtS3g̴bl7;}Nܲy?rs~PZSbk]n,yZ{}v6T2<3CnEG6֍w% _$'&Zw:YwԬM woHyܝڻ~r(#<վZfed>␣8ͧ|X/l6ozXCk:5#q+- IS&mؗo[Զw[šÓX9|ʼn'5 . .f.+ :K:wlu5/UVT+T^Yq~{᭘zΎƌ{-<8)}mm]zWH8h|gM~Ȍ>^s{L{sxHI.?q.Q_ `x- @ t`# |Ăgp`A;@@e?/H r0-qbBM[YR 66TT8`w)n$E("@@Q@Z1pMPݽO P4A[YR3 8`w)n$TTEs@3@Z1pPMݽO P?;8f?.ޚt IDATX]l3ٝz=6L 'Z&NH)壁U@%Դ"EC_PxH_DJDUQȊ̷m^gwvv{ 鑮4;ss{$ijuEQڷob8s̙3|>ߥW_}Bv*qȑPT*+VիW? ۷s.]}Bw}oǎ'''~:K{{;AnݺFk.Bw_tiIH>䓛ǎ֭[266F$… 8qDM6q!y뭷'4y|_5a.@0?T*q'ax7h[[ΝCXP(fd2r9"bP(Dmm-a[nEu :e8y^/T*\eƍ(% f!l6{g8q/n݊8ض( r]. q4 ߏedYF#v UxEEmL0 (ض2H ȣpd(tttHR 200((BUUR 4Yv-wɓ\|y),//~#3 IROkk+}}}D" rQ( x<K$p8ݻw Aq$I:3>>ɓ'زe (4uuueTUe~~B@KK tk׮122Bss3o6{)Sؽ{,ӧOFUU,bM8L<~~wwRDXIJ,RNo=~$I+˜>}]$JF^֬gvB:x u\.$N>O%A(g.:Tzmtwwn:Xyuyfzss2>>Ε+WurL0d~~p8L6kY։ޝtu @!"0 Ch&t]D"Uÿ}(Wb۶mCBuihnna4i"{ ^x%S)4Mm6o͛7`nn}XkgϞ/tuuH$*h6^$#(=RO?4q]˲Ph4Zɖi(µ:;:#ϒNPUbX@2d߾ߟ:~]EyKKKȳH.^HPM8wsN^~el5k~eTU??~CQtVD PUijjj￧N|@<[YRH 66TT8`w)n$E(#@@Q@Z1pMPݽO P4A[YR 8`w)n$TTEs@3(@Z1pPMݽO P?)2D6ݥS(>ůaI?w=pk6X~* C#z2WNWIErÊ8CCVd@&jvgM61Ԋxޙɐ[kz ׭mS~mׅ QvfS9qc=H9O C薢+ݞ:~\#{i IKQPiT"̳ `P6`9D_/Fz_!4g6ga xA- 9S,P|6RQt66#gM~E(@@@Z1pP~s|P~Q JJ#gM~E< @@ @Z1pP_9 ƆQM BBM~#gE4@2*@Z1pP`A3Qi 66#gM~E( @@@Z1pP`PsQ5 #gM~E @@k@Z1pP`PsGET /favicon.ico HTTP/1.1 Host: darknet.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (X11; Linux x86_64) KHTML/4.8.4 (like Gecko) Konqueror/4.8 Pragma: no-cache Cache-control: no-cache Accept: text/html, text/*;q=0.9, image/jpeg;q=0.9, image/png;q=0.9, image/*;q=0.9, */*;q=0.8 Accept-Encoding: gzip, deflate, x-gzip, x-deflate Accept-Charset: utf-8,*;q=0.5 Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7 Q<<M~#gE(?@2K@Z1pPP6QήM~#gE?@2@Z1pPP6gHTTP/1.1 200 OK Date: Wed, 22 May 2013 18:47:01 GMT Server: Apache Last-Modified: Sun, 17 Mar 2013 16:08:49 GMT ETag: "1378-4d82116730640" Accept-Ranges: bytes Content-Length: 4984 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: image/x-icon PNG  IHDR szz ;iCCPICC Profilexy4sW׽}$-n !{ {"P)eBM"#1JI%QT̙39y<9y}?|ּ  :F0ϡ :lHh[A= F;DZU+4#9; (s; +Ĺ'D@B#Bx (Ӄ {8N ,Ë(͆ 0xqs/h>`v0  ?GKuZj P}PV7j J q+k>@}& O hH8@~TG&LxD=_o2$$YlYyE%Uu M-m])SLaf>s9s.aӢ.K=zzy/ X<0(8dE(/lexDիc5qĵk֭Oް1%5m?nIߺmviތ̟?p𗬬Cه;v_O,(|É' O>SRRz; ׮ߨYwo --]߾il\J3$,$M-d])Shc偁A!_9tE _fMlP8AQ߉| 9$)J"Z7joݺ]ncӽ>~Y[{GWwOoˡF>, /~=ꀾIA27z $^[ &A&|aH^5IXb/Q@H$CF!=!kA~4e&%ROD]HPiBZnLE`p<ˌU$5E['+](3]B+ \nP>UAQHT)IYY\WeQۮ66#gM~E( @@@Z1pPPQM~#gE?@2@Z1pPP6eL5OQƇI˴q6h[j)5QӒ i6a;=LlؼeY[-Xvc5mC}k7h?ۻokG"bgmSW%n+{d.-jj,P)p4X/#׶R.!"9lh^1~ذBPbڛׇ&HN-Lm$i:gek/Y٬)9rۏpo(S^\v6lc9K.&ְ_{zc}]eEM[x6^jm=cg ) 0n{w?M !MKI 9CEjl@& PV"X4‘'&#IJJ"yd>$N짴Pթ| ͊Nku$3,ט,*+#LȮumOR`**r+P6QERO툺ƕIi6cZUtmw-{xSe_4N-v0(8dtS3g̴bl7;}Nܲy?rs~PZSbk]n,yZ{}v6T2<3CnEG6֍w% _$'&Zw:YwԬM woHyܝڻ~r(#<վZfed>␣8ͧ|X/l6ozXCk:5#q+- IS&mؗo[Զw[šÓX9|ʼn'5 . .f.+ :K:wlu5/UVT+T^Yq~{᭘zΎƌ{-<8)}mm]zWH8h|gM~Ȍ>^s{L{sxHI.?q.Q_ `x- @ t`# |Ăgp`A;@@e?/H r0-qbBQ66#gM~E( @@@Z1pP$[PQ0M~#gE?@2@Z1pP$[P6;M8f?.ޚt IDATX]l3ٝz=6L 'Z&NH)壁U@%Դ"EC_PxH_DJDUQȊ̷m^gwvv{ 鑮4;ss{$ijuEQڷob8s̙3|>ߥW_}Bv*qȑPT*+VիW? ۷s.]}Bw}oǎ'''~:K{{;AnݺFk.Bw_tiIH>䓛ǎ֭[266F$… 8qDM6q!y뭷'4y|_5a.@0?T*q'ax7h[[ΝCXP(fd2r9"bP(Dmm-a[nEu :e8y^/T*\eƍ(% f!l6{g8q/n݊8ض( r]. q4 ߏedYF#v UxEEmL0 (ض2H ȣpd(tttHR 200((BUUR 4Yv-wɓ\|y),//~#3 IROkk+}}}D" rQ( x<K$p8ݻw Aq$I:3>>ɓ'زe (4uuueTUe~~B@KK tk׮122Bss3o6{)Sؽ{,ӧOFUU,bM8L<~~wwRDXIJ,RNo=~$I+˜>}]$JF^֬gvB:x u\.$N>O%A(g.:Tzmtwwn:Xyuyfzss2>>Ε+WurL0d~~p8L6kY։ޝtu @!"0 Ch&t]D"Uÿ}(Wb۶mCBuihnna4i"{ ^x%S)4Mm6o͛7`nn}XkgϞ/tuuH$*h6^$#(=RO?4q]˲Ph4Zɖi(µ:;:#ϒNPUbX@2d߾ߟ:~]EyKKKȳH.^HPM8wsN^~el5k~eTU??~CQtVD PUijjj￧N|@<Q:66#gM~E( @@@Z1pP*PQCM~#gE?@2@Z1pP*P6)2D6 Build-Depends: debhelper (>= 9), dpkg-dev (>= 1.16.1~) Standards-Version: 3.9.4 Homepage: http://f00l.de/pcapfix Vcs-Browser: http://anonscm.debian.org/gitweb/?p=collab-maint/pcapfix.git;a=summary Vcs-Git: git://anonscm.debian.org/collab-maint/pcapfix.git Package: pcapfix Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Enhances: tcpdump, wireshark Description: repairs broken pcap and pcapng files libpcap (Packet CAPture) provides a portable framework for low-level network monitoring. Network dumps based on libpcap can be made by tcpdump, wireshark and other tools. Sometimes those dumps can get corrupted by several reasons. Examples of this are a copy from Linux to Windows with a conversion to DOS/ Windows text file line ending (CR-LF) or a transfer over FTP in ASCII mode instead of BINARY mode. . pcapfix tries to repair your broken pcap files, fixing the global header and recovering the packets by searching and guessing the packet headers. . pcapfix will first step through the packets top down until it recognizes a corrupted one by using plausibility checks. After that the tool will brute force further pcap packet headers by reading the file byte by byte. If another proper packet is found, pcapfix restores the data in between by adding a well-formed pcap packet header. . The PCAP Next Generation Dump File Format (or pcapng for short) is an attempt to overcome the limitations of the currently widely used (but limited) libpcap format. Since 1.0.0 version, pcapfix works with pcapng format too. debian/copyright0000644000000000000000000000210212226322650011114 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: pcapfix Source: http://f00l.de/pcapfix Files: * Copyright: 2012-2013 Robert Krause License: GPL-3.0 Files: debian/* Copyright: 2013 Joao Eriberto Mota Filho License: GPL-3.0 License: GPL-3.0 This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this program. If not, see . . On Debian systems, the complete text of the GNU General Public License version 3 can be found in "/usr/share/common-licenses/GPL-3".