I believe that Ethereal has improved greatly since when it was removed from
ports. The only oddity I encountered is that pcre should be in WANTLIB, but
it complained on install about not finding the appropriate pcre lib. I've
added it to LIB_DEPENDS for now, but I don't think it belongs there.
On Thu, 8 Sep 2005, Matt Jibson wrote:
I believe that Ethereal has improved greatly since when it was removed from
ports.
surely, but has security improved? does it have privsep? until that has
changed, ethereal will not come back. sorry.
jakob
I have a patch I can apply that does setuid() to _ethereal once the
capture device is actually opened.
As I said in the original posting:
As far as security goes, it goes without saying:
Dont run ethereal in capture/decode mode as root.
Capture with tcpdump to a file and read with ethereal as a
On 9/8/05, ober <[EMAIL PROTECTED]> wrote:
> I have a patch I can apply that does setuid() to _ethereal once the
> capture device is actually opened.
> As I said in the original posting:
What about running ethereal only under systrace?
> As far as security goes, it goes without saying:
> Dont ru
