ArpON (Arp handler inspectiON) is a portable handler daemon with some nice tools to handle all ARP aspects. It has a lot of features and it makes Arp a bit safer. This is possible using two kinds of anti Arp Poisoning tecniques, the first is based on SARPI or "Static Arp Inspection", the second on DARPI or "Dynamic Arp Inspection" approach. Keep in mind other common tools fighting ARP poisoning usually limit their activity only to point out the problem instead of blocking it, ArpON does it using SARPI and DARPI policies. Finally you can use ArpON to pentest some switched/hubbed LAN with/without DHCP protocol, in fact you can disable the daemon in order to use the tools to poison the ARP Cache. However ArpON is also a good tool to a clever sysadmin aware of security related topics. It is a tool born to make Arp secure in order to avoid Arp Spoofing/Poisoning & co. Remember it doesn't affect the communication efficiency of the ARP protocol! Reproducible: Always Ebuild arpon-1.10-r1.ebuild # Copyright 1999-2008 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Header: $ inherit eutils MY_P="ArpON-${PV}" DESCRIPTION="ArpON (Arp handler inspectiON) is a portable Arp handler. It Detects and Blocks all ARP Poisoning/Spoofing attacks with static (SARPI) and dynamic (DARPI) approach on switched/hubbed LAN with/without DHCP protocol." HOMEPAGE="http://arpon.sourceforge.net/" SRC_URI="http://mesh.dl.sourceforge.net/sourceforge/arpon/$MY_P.tar.gz" LICENSE="BSD License" SLOT="0" KEYWORDS="~alpha amd64 hppa ia64 ppc ppc64 sparc x86" IUSE="doc" DEPEND="net-libs/libpcap >=net-libs/libnet-1.1.2.1-r1 dev-libs/libdnet" RDEPEND="net-libs/libpcap >=net-libs/libnet-1.1.2.1-r1 dev-libs/libdnet" S=${WORKDIR}/${MY_P} src_unpack() { unpack ${A} cd "${S}" epatch "${FILESDIR}"/Makefile-arpon-1.10-r1.patch } src_compile() { make || die "make failed" } src_install() { # make install || die " make intall abort" # DESTDIR="${D}" \ # docdir=/usr/share/doc/${PF} # install || die "make install abort" newsbin arpon arpon || die dodoc AUTHORS CHANGELOG INSTALL TODO || die "dodoc failed" } Patch: Makefile-arpon-1.10-r1.patch --- Makefile_orig 2008-06-05 11:00:42.000000000 +0200 +++ Makefile 2008-06-06 16:51:49.000000000 +0200 @@ -1,39 +1,10 @@ SOURCE = arpon.c EXEC = arpon -CFLAGS = -Wall -Werror +CFLAGS += -Wall -LIBS_OSX = -lpcap -ldnet -lnet -L/opt/local/lib/ -I/opt/local/include/ +LIBS_LINUX = -lpcap -ldnet -lnet -L/usr/lib -I/usr/include +LIBS_LINK_LINUX = /usr/lib/libpcap.a /usr/lib/libnet.a /usr/lib/libdnet.a -LIBS_FREEBSD = -lpcap -ldnet -lnet -L/usr/local/lib -I/usr/local/include -L/usr/local/lib/libnet11 -I/usr/local/include/libnet11 -LIBS_LINK_FREEBSD = /usr/lib/libpcap.a /usr/local/lib/libnet11/libnet.a /usr/local/lib/libdnet.a - -LIBS_LINUX = -lpcap -ldnet -lnet -L/usr/local/lib -I/usr/local/include -LIBS_LINK_LINUX = /usr/local/lib/libpcap.a /usr/lib/libnet.a /usr/local/lib/libdnet.a - -arpon: - @echo "" - @echo " Portings avaible:" - @echo " =================" - @echo " - MAC OS X run: make osx" - @echo " - FreeBSD run: make freebsd" - @echo " - GNU/Linux run: make linux" - @echo "" - -osx: $(SOURCE) - gcc $(CFLAGS) $(LIBS_OSX) -o $(EXEC) $(SOURCE) - -freebsd: $(SOURCE) - gcc $(CFLAGS) $(LIBS_FREEBSD) -o $(EXEC) $(SOURCE) $(LIBS_LINK_FREEBSD) - -linux: $(SOURCE) +make: $(SOURCE) gcc $(CFLAGS) $(LIBS_LINUX) -DLINUX -o $(EXEC) $(SOURCE) $(LIBS_LINK_LINUX) - -clean: - rm -f $(EXEC) - -install: - cp $(EXEC) /sbin - -uninstall: - rm -f /sbin/$(EXEC) ChangeLog: # ChangeLog for net-analyzer/arpon # Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2 # $Header *arpon-1.10-r1 (6 Jul 2008) 6 Jul 2008; G.Bevin <zeld@freaknet.org> ChangeLog : Write Makefile patch. Added initial ChangeLog which should be updated whenever the package is updated in any way. This changelog is targetted to users. This means that the comments should well explained and written in clean English. The details about writing correct changelogs are explained in the skel.ChangeLog file which you can find in the root directory of the portage repository.
*** This bug has been marked as a duplicate of bug 225125 ***
