Saturday, January 10, 2009

Ubuntu: Unicornscan Revisit

I have written about how to install unicornscan on Ubuntu previously here, and it seems a lot of people have problem getting unicornscan compiled on Ubuntu/Debian. So here's the revisit of mine to make it more clear and it should work on Ubuntu 8.x if you are following the steps accordingly.

Install all dependencies -

shell>apt-get install \
libpcap0.8-dev libgeoip-dev libltdl3-dev ibdumbnet1 libdumbnet-dev

shell>sudo ln -s /usr/include/dumbnet.h /usr/include/dnet.h

Download unicornscan and decompress it -

shell>tar xvjf unicornscan-0.4.7-2.tar.bz2

shell>cd unicornscan-0.4.7

shell>./configure --prefix=/usr/local/stow/unicornscan-0.4.7

Thanks to Debian package, since libdumbnet is used, so we need to replace the linker flags, search for files with ldnet

shell>find ./ -type f -exec grep -H 'ldnet' '{}' \;
./src/Makefile.in:G_LDADD=$(LDFLAGS) -lscan -lparse -lunilib -lpcap -lltdl -ldnet -luext
./src/tools/Makefile.in: $(LIBTOOL) --mode=link $(CC) $(CFLAGS) -o fantaip fantaip.lo $(G_LDPATH) $(G_LDADD) -lpcap -ldnet
./src/tools/Makefile: $(LIBTOOL) --mode=link $(CC) $(CFLAGS) -o fantaip fantaip.lo $(G_LDPATH) $(G_LDADD) -lpcap -ldnet
./src/Makefile:G_LDADD=$(LDFLAGS) -lscan -lparse -lunilib -lpcap -lltdl -ldnet -luext
./src/scan_progs/Makefile.in:G_LDADD=-lscan -lparse -lunilib -lltdl -ldnet -luext
./src/scan_progs/Makefile:G_LDADD=-lscan -lparse -lunilib -lltdl -ldnet -luext

To replace ldnet to ldumbnet at one shot, do

shell>for i in `find ./ -type f -exec grep -l 'ldnet' '{}' \;`; do sed -i bak -e 's/ldnet/ldumbnet/g' $i; done

Now we can compile and install

shell>make

shell>sudo make install

You should now have it install in /usr/local/stow, just do

shell>cd /usr/local/stow

shell>sudo stow unicornscan-0.4.7

DONE!

Enjoy (;])

6 comments:

Anonymous said...

Would you please revisit netdude since it has been updated to 0.5.0. Thanks in advance

Anonymous said...

I agree with message above. I wasn't able to install netdude 0.5.0 into Ubuntu 8.10. Please help. Thanx.

Anonymous said...

hi i have an error:

socktrans.c: In function 'socktrans_accept':
socktrans.c:192: error: storage size of 'ccred' isn't known
make[2]: *** [socktrans.lo] Error 1
make[2]: Leaving directory `/unicornscan-0.4.7/src/unilib'
make[1]: *** [alld] Error 1
make[1]: Leaving directory `/unicornscan-0.4.7/src'
make: *** [all] Error 1

if you have an idea :)
i have ubuntu ibex, and i have just changed the prefix, all step is copy paste on your blog.

Anonymous said...
This comment has been removed by a blog administrator.
Anonymous said...

socktrans.c: In function 'socktrans_accept':
socktrans.c:192: error: storage size of 'ccred' isn't known
make[2]: *** [socktrans.lo] Error 1
make[2]: Leaving directory `/home/salax/unicornscan-0.4.7/src/unilib'
make[1]: *** [alld] Error 1
make[1]: Leaving directory `/home/salax/unicornscan-0.4.7/src'
make: *** [all] Error 1


same error..

seems it happens because previously, for the sed command, didn't find bak file or directory

root@salax-laptop:/home/salax/unicornscan-0.4.7# for i in `find ./ -type f -exec grep -l 'ldnet' '{}' \;`; do sed -i bak -e 's/ldnet/ldumbnet/g' $i; done
sed: can't read bak: No such file or directory
sed: can't read bak: No such file or directory
sed: can't read bak: No such file or directory
sed: can't read bak: No such file or directory
sed: can't read bak: No such file or directory
sed: can't read bak: No such file or directory

any suggestion?

Anonymous said...

Oh it seems to settled now with some references thru the art of googling :-)

http://itbloggen.se/cs/blogs/olle_lindgren/archive/2009/01/08/unicornscan-on-ubuntu-8-10-intrepid-ibex.aspx?CommentPosted=true#commentmessage