ssdeep-2.13-1.fc25.x86_64.rpm


Advertisement

Description

ssdeep - Computes a checksum based on context triggered piecewise hashes

Property Value
Distribution Fedora 25
Repository CERT Forensics Tools x86_64
Package name ssdeep
Package version 2.13
Package release 1.fc25
Package architecture x86_64
Package type rpm
Installed size 669.87 KB
Download size 200.92 KB
Official Mirror forensics.cert.org
Computes a checksum based on context triggered piecewise hashes for
each input file. If requested, the program matches those checksums
against a file of known checksums and reports any possible matches.
Output is written to standard out and errors to standard error.
Input from standard input is not supported.

Alternatives

Package Version Architecture Repository
ssdeep-2.14.1-1.fc25.remi.i686.rpm 2.14.1 i686 Les RPM de Remi
ssdeep-2.14.1-1.fc25.remi.x86_64.rpm 2.14.1 x86_64 Les RPM de Remi
ssdeep-2.14.1-1.fc25.i686.rpm 2.14.1 i686 Fedora Updates
ssdeep-2.14.1-1.fc25.x86_64.rpm 2.14.1 x86_64 Fedora Updates
ssdeep-2.14.1-1.fc25.i686.rpm 2.14.1 i686 CERT Forensics Tools
ssdeep-2.14.1-1.fc25.x86_64.rpm 2.14.1 x86_64 CERT Forensics Tools
ssdeep-2.14-1.fc25.remi.i686.rpm 2.14 i686 Les RPM de Remi
ssdeep-2.14-1.fc25.remi.x86_64.rpm 2.14 x86_64 Les RPM de Remi
ssdeep-2.13-3.fc24.i686.rpm 2.13 i686 Fedora
ssdeep-2.13-3.fc24.x86_64.rpm 2.13 x86_64 Fedora
ssdeep-2.13-1.fc25.i686.rpm 2.13 i686 CERT Forensics Tools
ssdeep - - -

Requires

Name Value
libc.so.6(GLIBC_2.7)(64bit) -
libgcc_s.so.1()(64bit) -
libgcc_s.so.1(GCC_3.0)(64bit) -
libm.so.6()(64bit) -
libstdc++.so.6()(64bit) -
libstdc++.so.6(CXXABI_1.3)(64bit) -
libstdc++.so.6(CXXABI_1.3.9)(64bit) -
libstdc++.so.6(GLIBCXX_3.4)(64bit) -
libstdc++.so.6(GLIBCXX_3.4.20)(64bit) -
libstdc++.so.6(GLIBCXX_3.4.21)(64bit) -
libstdc++.so.6(GLIBCXX_3.4.9)(64bit) -
rtld(GNU_HASH) -

Provides

Name Value
ssdeep = 2.13-1.fc25
ssdeep(x86-64) = 2.13-1.fc25

Download

Type URL
Binary Package ssdeep-2.13-1.fc25.x86_64.rpm
Source Package ssdeep-2.13-1.fc25.src.rpm

Install Howto

  1. Download cert-forensics-tools-release-25 rpm:
    https://forensics.cert.org/cert-forensics-tools-release-25.rpm
  2. Install cert-forensics-tools-release-25 rpm:
    # rpm -Uvh cert-forensics-tools-release*rpm
  3. Install ssdeep rpm package:
    # dnf --enablerepo=forensics install ssdeep

Files

Path
/usr/bin/ssdeep
/usr/share/doc/ssdeep/COPYING
/usr/share/doc/ssdeep/ChangeLog
/usr/share/doc/ssdeep/FILEFORMAT
/usr/share/doc/ssdeep/INSTALL
/usr/share/doc/ssdeep/NEWS
/usr/share/doc/ssdeep/README
/usr/share/doc/ssdeep/TODO
/usr/share/man/man1/ssdeep.1.gz

Changelog

2015-04-24 - Lawrence Rogers <lrr@cert.org> 2.13-1
* Release 2.13-1
2015-04-24: Jesse Kornblum <research@jessekornblum.com>:
* ssdeep.1, NEWS: Updated release date
2015-04-01: Tsukasa OI <floss_ssdeep@irq.a4lg.com>:
* dig.cpp: Support arbitrary length input from the standard input.
2014-11-07: Tsukasa OI <floss_ssdeep@irq.a4lg.com>:
* edit_dist.c: Made code more portable
* fuzzy.c: Multiple bug fixes
2014-10-24: Jesse Kornblum <research@jessekornblum.com>:
* Makefile.am: Adding edit_dist.h
2014-10-20: Jesse Kornblum <research@jessekornblum.com>:
* edit_dist.c: Replaced with new, explicitly GPL licensed code.
* fuzzy.c: Removed edit distance function prototype
* edit_dist.h: Added edit distance function prototype
2014-10-24 - Lawrence Rogers <lrr@cert.org> 2.12-1
* Release 2.12-1
2014-10-24: Jesse Kornblum <research@jessekornblum.com>:
* Makefile.am: Adding edit_dist.h
2014-10-20: Jesse Kornblum <research@jessekornblum.com>:
* edit_dist.c: Replaced with new, explicitly GPL licensed code.
* fuzzy.c: Removed edit distance function prototype
* edit_dist.h: Added edit distance function prototype
2014-10-16: Jesse Kornblum <research@jessekornblum.com>:
* configure.ac: Version bump to 2.12
* fuzzy.c: Fixed bug when comparing identical hashes, bug #16.
* normal.sh: Use multiple cores when compiling
2014-09-27 - Lawrence Rogers <lrr@cert.org> 2.11.1-1
* Release 2.11.1-1
Fixed bug in signature computation.
Made libfuzzy a shared library again.
2014-09-11 - Lawrence Rogers <lrr@cert.org> 2.11-1
* Release 2.11-1
* New Features
- Added fuzzy_clone function to the API.
- Moved to modern Win32 compiler.
* Bug Fixes
- Fixed edge case on signature generaion. Behavior now matches v2.9 again.
2013-07-17 - Lawrence Rogers <lrr@cert.org> 2.10-1
* Release 2.10-1
Changes:
* Fuzzy Hashing engine re-written to be thread safe.
* Able to handle long file paths on Win32.
* Fixed bug on comparing signatures with the same block size.
* Fixed crash on comparing short signatures.
2012-07-23 - Lawrence Rogers <lrr@cert.org> 2.9-1
* Release 2.9-1
Version 2.9 - 23 Jul 2012
* New Features
- Added warning message for when some data on stdin is not hashed.
- Can now hash up to 512MB of data on stdin.
- Added clustering mode to group together matching files
* Bug Fixes
- Fixed incorrect match scores for hashes with long filenames.
2012-05-25 - Lawrence Rogers <lrr@cert.org> 2.8-1
* Release 2.8-1
Version 2.8 - 25 May 2012
* ChangeLog: Clean up
* Commented out all references to clustering
* configure.ac: Added AC_SYS_LARGEFILE to handle large files on 32-bit platforms. See bug 3416762.
* engine.cpp: Added const definitions
* Experimental conversion to C++
* fuzzy.h: Cleanup and commenting
* main.c: Bump copyright to 2012 in usage message. Add flag for clustering
* main.c: Fixed error handling in getopt processing
* main.cpp: Fixed some bugs in the command line argument processing
* main.cpp: Updated command line argument processing
* main.h: Added mode_cluster
* Makefile.am: LF to CR/LF change now done by zip program
* match.cpp: Convert to C++
* match.cpp: Fixed bug in Win32 filename construction
* ssdeep.1: Clarifications on description.
* ssdeep.1: Updating support for stdin, clarifying modes
* ssdeep.h: Adding Doxygen comments
* ui.c: Changed Win32 to use fputc instead of _tfprintf for filenames
2011-09-30 - Lawrence Rogers <lrr@cert.org> 2.7-1
* Release 2.7-1
Version 2.7 - 30 Sep 2011
* New Features
- Added the capability to process the first 100MB of data
from standard input.
- Added a warning message when the program does not process
any file large enough to produce a meaningful result.
* Bug Fixes
- Standard errors are now sent to stderr, not stdout.

See Also

Package Description
stegdetect-0.6-2.fc25.x86_64.rpm Detect and extract steganography messages inside JPEG
super_mediator-1.4.0-1.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
super_mediator-1.5.0-1.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
super_mediator-1.5.2-1.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
super_mediator-1.5.3-1.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
super_mediator-1.5.3-2.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
super_mediator-1.6.0-1.fc25.x86_64.rpm IPFIX Super Mediator for use with the YAF and SiLK tools
tln_tools-20110729-1.fc25.noarch.rpm Timeline tools - Open Source code for Windows Forensic Analysis and Incident Response
ttestdisk-7.0-3.1.fc25.x86_64.rpm Tool to check and undelete partition, PhotoRec recovers lost files
undbx-0.21-1.fc25.x86_64.rpm undbx - Tool to extract, recover and undelete e-mail messages from Outlook Express .dbx files
unrar-5.3.0-1.fc25.x86_64.rpm Compression and decompression program rar
unrar-5.4.0-1.fc25.x86_64.rpm Compression and decompression program rar
untex-1.3-3.1.fc25.x86_64.rpm Command to strip LaTeX commands from input
videosnarf-0.63-1.fc25.x86_64.rpm Output detected media sessions
vinetto-0.07beta-1.fc25.x86_64.rpm Extract thumbnails and associated metadata from the Thumbs.db files
Advertisement
Advertisement