libnet [PSARC/2008/409 FastTrack timeout 07/03/2008]

Thu Jun 26 16:49:04 PDT 2008

 I am sponsoring this case for Daria Mehra. It requests minor binding and
times out on 0703/08

-- mark

Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI
This information is Copyright 2008 Sun Microsystems
1. Introduction
    1.1. Project/Component Working Name:
	 libnet
    1.2. Name of Document Author/Supplier:
	 Author:  Daria Mehra
    1.3  Date of This Document:
	26 June, 2008
4. Technical Description

	1.3.1. Date this project was conceived:
	       04/02/2008

   1.4. Name of Major Document Customer(s)/Consumer(s):
	1.4.1. The PAC or CPT you expect to review your project:

	1.4.2. The ARC(s) you expect to review your project:
		PSARC

	1.4.3. The Director/VP who is "Sponsoring" this project:
	       Bob Porras

	1.4.4. The name of your business unit:
	       Software

   1.5. Email Aliases:
    	1.5.1. Responsible Manager: john.hilgers at sun.com
    	1.5.2. Responsible Engineer: daria.mehra at sun.com
    	1.5.3. Marketing Manager:
	1.5.4. Interest List:

2. Project Summary
   2.1. Project Description:
   	The project is to integrate libnet into OpenSolaris.
	Libnet is a C library providing a high-level API for portable 
      	construction, handling and injection of network packets. 
      	Homepage of open source project:
      	http://www.packetfactory.net/libnet/

   2.2. Risks and Assumptions:
   	The open source project appears to be no longer in active maintenance,
	last release dates to 2005. However, libnet (v.1.1.2.1) is still used
	within the programmer community, see section 3.3.

3. Business Summary
   3.1. Problem Area:
	Adding useful applications/libraries to OpenSolaris distribution.

   3.2. Market/Requester:
   	Open source community.

   3.3. Business Justification:
   	Libnet, albeit no longer an actively maintained project, has familiarity value
	for developers coming to OpenSolaris from other platforms. It is frequently 
	used in networking-related student projects and open source projects.

	Libnet is often used with libpcap, which is already being integrated into
	OpenSolaris. Together they provide a good kit for networking application development.
	libpcap [packet capture library] http://www.tcpdump.org/

	Libnet is covered in these books:

	Network Security Tools: Writing, Hacking and Modifying Security Tools
	By Justin Clarke, Nitesh Dhanjani
	Publisher: O'Reilly
	Pub Date: April 2005
	ISBN: 0-596-00794-9
	Pages: 352

	Building Open Source Network Security Tools: Components and Techniques
	by Mike Schiffman
	Publisher: Wiley
	Pub Date: October 11, 2002
	ISBN: 0471205443
	Pages: 416

	UNIXÂ® Network Programming Volume 1, Third Edition: The Sockets Networking API
	by W. Richard Stevens; Bill Fenner; Andrew M. Rudoff
	Publisher: Addison Wesley Professional
	Pub Date: November 14, 2003
	ISBN: 0-13-141155-1
	Pages: 1024

	Some recent use cases of libnet:

	# 05/30/2008 "I am writing a program for ip forwarding using libpcap and libnet"
	http://www.experts-exchange.com/Programming/System/Linux/Q_23445172.html
	# 05/13/2008 "i am trying to do the following using libnet & libpcap: 
	sniff a specific port for a syn packet; if detected, construct a syn/ack packet"
	http://www.antionline.com/showthread.php?p=938569
	# 07/19/2007 "i'm going to use libnet to write a link dropper experimental tools"
	http://www.linuxforums.org/forum/linux-programming-scripting/98758-programming-libnet.html

	Sampling of projects which depend on libnet:

	These appear to be in active development:
	# tcpreplay [BSD tools for replay of previously captured network packets] 
	http://tcpreplay.synfin.net/trac/
	# arp_bomber [identification of misconfigured devices on IP network] 
	http://www.net.princeton.edu/software/arp_bomber/
	# snort_inline [intrusion prevention system] http://snort-inline.sourceforge.net/

	Several applications co-located with libnet itself:
	http://www.packetfactory.net/projects/
	# dnsa [DNS auditing tool]
	# egressor [router config check]
	# firewalk [gateway ACL scanner]
	# hummingbird [asychronous scanning engine]
	# ISIC [IP stack integrity checker]
	# nemesis [command line IP stack]
	# packit [tool to monitor, manipulate, and inject customized IPv4 traffic]
	# sentinel [remote promiscuous mode detection tool]

	Other projects, not sure how actively maintained:
	# ettercap [suite for man in the middle attacks on lan] 
	http://ettercap.sourceforge.net/
	# utunnel [tunneling of ip traffic over udp] 
	http://thebends.org/~allen/utunnel/
	# vnet [ethernet layer adaptive virtual network] 
	http://www.cs.northwestern.edu/~ais/software.html 

   3.4. Competitive Analysis:
	N/A

   3.5. Opportunity Window/Exposure:
	N/A

   3.6. How will you know when you are done?:
   	When libnet is integrated into sfwnv consolidation, following steps:
	http://ostest.central.sun.com/wiki/index.php/Package_Delivery_Project

4. Technical Description:
    4.1. Details:
    	 See attached FOSS checklist.

    4.2. Bug/RFE Number(s):
    	 6687609: integrate libnet into solaris

    4.3. In Scope:
    	 N/A

    4.4. Out of Scope:
	 N/A

    4.5. Interfaces:
	 See attached FOSS checklist section 4.

    4.6. Doc Impact:
    	 Libnet adds manpages for its headers, man section 3.

    4.7. Admin/Config Impact:
    	 N/A

    4.8. HA Impact:
	 N/A

    4.9. I18N/L10N Impact:
	 N/A

    4.10. Packaging & Delivery:
	 Libnet adds package SUNWlibnet.

    4.11. Security Impact:
    	  N/A

    4.12. Dependencies:
	  N/A

5. Reference Documents:
	FOSS checklist: foss-check-list-libnet.txt in case directory

6. Resources and Schedule:
   6.1. Projected Availability:
   	July 2008

   6.2. Cost of Effort:
   	2 person/weeks	

   6.3. Cost of Capital Resources:
   	N/A

   6.4. Product Approval Committee requested information:
   	6.4.1. Consolidation or Component Name: 
	       SFW
	6.4.3. Type of CPT Review and Approval expected:
	       FastTrack
        6.4.4. Project Boundary Conditions:
	       N/A
	6.4.5. Is this a necessary project for OEM agreements:
	       No
	6.4.6. Notes:
	       N/A
	6.4.7. Target RTI Date/Release:
	       snv_94
	6.4.8. Target Code Design Review Date:
	6.4.9. Update approval addition:
	       N/A

6. Resources and Schedule
    6.4. Steering Committee requested information
   	6.4.1. Consolidation C-team Name:
		SFW
    6.5. ARC review type: FastTrack
    6.6. ARC Exposure: open