[Devil-linux-develop] Re: [Devil-Linux-discuss] arpwatch,iptraf, ipp2p... updating applications

[Heiko Z. <he...@zu...>]

On Tue, October 4, 2005 12:45, Jan Ostrochovsky wrote:
> Heiko Zuerker wrote:
>
>
>> We can always copy the man pages manually.
>> But for now I would rather prefer updating arpwatch to the latest
>> version available.
>>
>>
> Latest version of good-old arpwatch available from
> http://www-nrg.ee.lbl.gov/ (first google match of "arpwatch") does not
> contain features like e-mailing notifications to and from different e-mail
> addresses for various network interfaces / subnets. Also NIC manufacturers
> database is quite old.
>
> These (and other) reasons led to the development of new successors of
> classic arpwatch above. For example in redhat / debian distributions is
> available modified version, which contains additional switches (specified
> as comments also in DL's /etc/init.d/arpwatch, # ARPWATCH init.d script
> added by Diego Torres <rap...@an...> # from arpwatch of the
> RedHat Distribution). Rpm attached, but I did not find
> the sources yet.
>
> Another is Arpwatch NG http://freequaos.host.sk/arpwatch/ (fourth google
> match of "arpwatch"), which also implements bugfixes, archaisms and missing
> features of good old arpwatch.

OK I agree, we either should a) add the patches or b) replace it with
arpwatch-ng.
The only question is who's doing it? I'm rather busy and we need a
volunteer for it.
To be honest, if we put it on our feature request list, you'll have to
wait forever to get it.

>>> Nmap could be also useful part of DL.
>>>
>>>
>>>
>>
>> So far we refused any request about installing tools which could be
>> used to scan other systems. It's of course always open for discussion, if
>> you got good reasons for this request.
>>
>>
> OK, I respect your opinions and I am sure, you had reasons for this
> decision.
>
> My arguments:
>
>
> Premise 1: DL is designed for network administrators (like you or me).
> Premise 2: Nmap can help network administrators with (not only) these:
> a) nmap -sP $subnet/$mask (potentially with combination with arp -a) is
> useful for getting the list of on-line hosts of home network $subnet/$mask
>  b) nmap localhost or nmap -sU localhost (fast self-diagnostic method, for
> example may be part of security audit of the system) c) getting info about
> unauthorized intruders in the home network
>
> => nmap can bring more usability for network admins to DL.
>
>
> My deep personal belief is, that to build the RIGHT society, the path
> does not lead through revoking people the power, tools or freedom, but
> through education them to responsibility for using the power. When
> somebody will want to be a cracker, he will found the way and the absence
> of nmap in DL will be no obstruction. I think, the way is to give people
> the model of behaviour, not to try restrict the possibility to show their
> bad manners. Like nuclear energy, nmap itself is not good or bad (in moral
> aspect), good or bad are people's reasons only.

I see your point.
It's like with everything else, the DL Developers can vote to add it.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org