Re: dsniff and tcpdump built for familiar

On Tue, Jul 17, 2001 at 08:07:51AM -0500, Hicks, Jamey wrote:
>
> I just built an ipkg for tcpdump by repackaging the dpkg. I look for
> packages in our snapshot of the Debian site:
> ftp://lorien.handhelds.org/pub/linux/Debian/pool/main/
>
> The original is at ftp://ftp.debian.org/debian/pool/main/
>
> You can also look in the stable and unstable feeds at ftp.debian.org,
> www.debian.org, or the mirror above.

For those not familiar with Debian archive layout: all the packages
are in individual directories, named after their source package name,
under individual letter directories (or lib+letter), under pool.

The various architecture binaries are all the way down in the individual
package directories. So, the tcpdump package is at:

ftp://ftp.debian.org/debian/pool/main/t/tcpdump/tcpdump_3.6.2-1_arm.deb

The source is in three files:

original tarball:
ftp://ftp.debian.org/debian/pool/main/t/tcpdump/tcpdump_3.6.2.orig.tar.gz

Debian specific diffs (includes diffs for all architectures):
ftp://ftp.debian.org/debian/pool/main/t/tcpdump/tcpdump_3.6.2-1.diff.gz

Debian control info, like package version and (if you're lucky)
Build-Depends, which are the other packages needed to build this package:

ftp://ftp.debian.org/debian/pool/main/t/tcpdump/tcpdump_3.6.2-1.dsc

I could have sworn a description of how to get the binaries out of
a .deb was posted on the wiki, but I can't find it now. I know I've
emailed it before. The key clue is that the .deb is an 'ar' archive,
containing three files, including one called 'data.tar.gz' which is the
toplevel rooted tarball of all the binaries. try:

ar p some-deb_1.10-2_arm.deb data.tar.gz | tar vztf -

HTH,
Ross
Received on Tue Jul 17 2001 - 07:35:16 EDT