ssdeep-2.13-1.fc25.i686.rpm


Advertisement

Description

ssdeep - Computes a checksum based on context triggered piecewise hashes

Distribution: Fedora 25
Repository: CERT Forensics Tools i386
Package name: ssdeep
Package version: 2.13
Package release: 1.fc25
Package architecture: i686
Package type: rpm
Installed size: 616.05 KB
Download size: 199.30 KB
Official Mirror: forensics.cert.org
Computes a checksum based on context triggered piecewise hashes for each input file. If requested, the program matches those checksums against a file of known checksums and reports any possible matches. Output is written to standard out and errors to standard error. Input from standard input is not supported.

Provides

  • ssdeep = 2.13-1.fc25
  • ssdeep(x86-32) = 2.13-1.fc25

    Download

    Install Howto

    1. Download cert-forensics-tools-release-25 rpm:
      https://forensics.cert.org/cert-forensics-tools-release-25.rpm
    2. Install cert-forensics-tools-release-25 rpm:
      # rpm -Uvh cert-forensics-tools-release*rpm
    3. Install ssdeep rpm package:
      # dnf --enablerepo=forensics install ssdeep

    Files

    • /usr/bin/ssdeep
    • /usr/share/doc/ssdeep/COPYING
    • /usr/share/doc/ssdeep/ChangeLog
    • /usr/share/doc/ssdeep/FILEFORMAT
    • /usr/share/doc/ssdeep/INSTALL
    • /usr/share/doc/ssdeep/NEWS
    • /usr/share/doc/ssdeep/README
    • /usr/share/doc/ssdeep/TODO
    • /usr/share/man/man1/ssdeep.1.gz

    Changelog

    2015-04-24 - Lawrence Rogers <lrr@cert.org> 2.13-1 * Release 2.13-1 2015-04-24: Jesse Kornblum <research@jessekornblum.com>: * ssdeep.1, NEWS: Updated release date 2015-04-01: Tsukasa OI <floss_ssdeep@irq.a4lg.com>: * dig.cpp: Support arbitrary length input from the standard input. 2014-11-07: Tsukasa OI <floss_ssdeep@irq.a4lg.com>: * edit_dist.c: Made code more portable * fuzzy.c: Multiple bug fixes 2014-10-24: Jesse Kornblum <research@jessekornblum.com>: * Makefile.am: Adding edit_dist.h 2014-10-20: Jesse Kornblum <research@jessekornblum.com>: * edit_dist.c: Replaced with new, explicitly GPL licensed code. * fuzzy.c: Removed edit distance function prototype * edit_dist.h: Added edit distance function prototype

    2014-10-24 - Lawrence Rogers <lrr@cert.org> 2.12-1 * Release 2.12-1 2014-10-24: Jesse Kornblum <research@jessekornblum.com>: * Makefile.am: Adding edit_dist.h 2014-10-20: Jesse Kornblum <research@jessekornblum.com>: * edit_dist.c: Replaced with new, explicitly GPL licensed code. * fuzzy.c: Removed edit distance function prototype * edit_dist.h: Added edit distance function prototype 2014-10-16: Jesse Kornblum <research@jessekornblum.com>: * configure.ac: Version bump to 2.12 * fuzzy.c: Fixed bug when comparing identical hashes, bug #16. * normal.sh: Use multiple cores when compiling

    2014-09-27 - Lawrence Rogers <lrr@cert.org> 2.11.1-1 * Release 2.11.1-1 Fixed bug in signature computation. Made libfuzzy a shared library again.

    2014-09-11 - Lawrence Rogers <lrr@cert.org> 2.11-1 * Release 2.11-1 * New Features - Added fuzzy_clone function to the API. - Moved to modern Win32 compiler. * Bug Fixes - Fixed edge case on signature generaion. Behavior now matches v2.9 again.

    2013-07-17 - Lawrence Rogers <lrr@cert.org> 2.10-1 * Release 2.10-1 Changes: * Fuzzy Hashing engine re-written to be thread safe. * Able to handle long file paths on Win32. * Fixed bug on comparing signatures with the same block size. * Fixed crash on comparing short signatures.

    2012-07-23 - Lawrence Rogers <lrr@cert.org> 2.9-1 * Release 2.9-1 Version 2.9 - 23 Jul 2012 * New Features - Added warning message for when some data on stdin is not hashed. - Can now hash up to 512MB of data on stdin. - Added clustering mode to group together matching files * Bug Fixes - Fixed incorrect match scores for hashes with long filenames.

    2012-05-25 - Lawrence Rogers <lrr@cert.org> 2.8-1 * Release 2.8-1 Version 2.8 - 25 May 2012 * ChangeLog: Clean up * Commented out all references to clustering * configure.ac: Added AC_SYS_LARGEFILE to handle large files on 32-bit platforms. See bug 3416762. * engine.cpp: Added const definitions * Experimental conversion to C++ * fuzzy.h: Cleanup and commenting * main.c: Bump copyright to 2012 in usage message. Add flag for clustering * main.c: Fixed error handling in getopt processing * main.cpp: Fixed some bugs in the command line argument processing * main.cpp: Updated command line argument processing * main.h: Added mode_cluster * Makefile.am: LF to CR/LF change now done by zip program * match.cpp: Convert to C++ * match.cpp: Fixed bug in Win32 filename construction * ssdeep.1: Clarifications on description. * ssdeep.1: Updating support for stdin, clarifying modes * ssdeep.h: Adding Doxygen comments * ui.c: Changed Win32 to use fputc instead of _tfprintf for filenames

    2011-09-30 - Lawrence Rogers <lrr@cert.org> 2.7-1 * Release 2.7-1 Version 2.7 - 30 Sep 2011 * New Features - Added the capability to process the first 100MB of data from standard input. - Added a warning message when the program does not process any file large enough to produce a meaningful result. * Bug Fixes - Standard errors are now sent to stderr, not stdout.

    Advertisement
    Advertisement