/usr/local/poudriere/data/packages/e24a8cae34360705d022f17584bb6b4507b8eb89-build1/All/nepenthes-0.2.2_8.txz vs.
/usr/local/poudriere/data/packages/e24a8cae34360705d022f17584bb6b4507b8eb89-build2/All/nepenthes-0.2.2_8.txz
nepenthes-0.2.2_8.txz-content
+MANIFEST
Offset 1, 1 lines modifiedOffset 1, 1 lines modified
1 {"name":​"nepenthes",​"origin":​"net/​nepenthes",​"version":​"0.​2.​2_8",​"comment":​"Determine·​the·​malware·​activity·​on·​a·​network",​"maintainer":​"ports@FreeBSD.​org",​"www":​"http:​/​/​nepenthes.​carnivore.​it/​",​"abi":​"FreeBSD:​11:​amd64",​"arch":​"freebsd:​11:​x86:​64",​"prefix":​"/​usr/​local",​"flatsize":​6787310,​"licenselogic":​"single",​"desc":​"Nepenthes·​can·​determine·​the·​malware·​activity·​on·​a·​network·​by·​deploying\na·​nepenthes·​sensor·​(i.​e.​·​honey·​pot)​.​·​The·​programm·​emulates·​different\nwell·​known·​vulnerabilities·​waiting·​for·​malicious·​connections·​trying·​to\nexploit·​them.​\n\nWWW:​·​http:​/​/​nepenthes.​carnivore.​it/​",​"deps":​{"adns":​{"origin":​"dns/​adns",​"version":​"1.​5.​0"},​"perl5":​{"origin":​"lang/​perl5.​20",​"version":​"5.​20.​3_13"},​"curl":​{"origin":​"ftp/​curl",​"version":​"7.​48.​0_2"},​"pcre":​{"origin":​"devel/​pcre",​"version":​"8.​38_1"},​"gcc":​{"origin":​"lang/​gcc",​"version":​"4.​8.​5_2"}},​"categories":​["net"],​"shlibs_required":​["libadns.​so.​1",​"libcurl.​so.​4",​"libpcre.​so.​1",​"libstdc++.​so.​6",​"libgcc_s.​so.​1"],​"options":​{"DEBUG_LOGGING":​"off",​"PRELUDE":​"off"},​"files":​·​✂1 {"name":​"nepenthes",​"origin":​"net/​nepenthes",​"version":​"0.​2.​2_8",​"comment":​"Determine·​the·​malware·​activity·​on·​a·​network",​"maintainer":​"ports@FreeBSD.​org",​"www":​"http:​/​/​nepenthes.​carnivore.​it/​",​"abi":​"FreeBSD:​11:​amd64",​"arch":​"freebsd:​11:​x86:​64",​"prefix":​"/​usr/​local",​"flatsize":​6787310,​"licenselogic":​"single",​"desc":​"Nepenthes·​can·​determine·​the·​malware·​activity·​on·​a·​network·​by·​deploying\na·​nepenthes·​sensor·​(i.​e.​·​honey·​pot)​.​·​The·​programm·​emulates·​different\nwell·​known·​vulnerabilities·​waiting·​for·​malicious·​connections·​trying·​to\nexploit·​them.​\n\nWWW:​·​http:​/​/​nepenthes.​carnivore.​it/​",​"deps":​{"adns":​{"origin":​"dns/​adns",​"version":​"1.​5.​0"},​"perl5":​{"origin":​"lang/​perl5.​20",​"version":​"5.​20.​3_13"},​"curl":​{"origin":​"ftp/​curl",​"version":​"7.​48.​0_2"},​"pcre":​{"origin":​"devel/​pcre",​"version":​"8.​38_1"},​"gcc":​{"origin":​"lang/​gcc",​"version":​"4.​8.​5_2"}},​"categories":​["net"],​"shlibs_required":​["libadns.​so.​1",​"libcurl.​so.​4",​"libpcre.​so.​1",​"libstdc++.​so.​6",​"libgcc_s.​so.​1"],​"options":​{"DEBUG_LOGGING":​"off",​"PRELUDE":​"off"},​"files":​·​✂
/usr/local/bin/nepenthes
readelf --wide --hex-dump=.rodata {}
Offset 419, 16 lines modifiedOffset 419, 16 lines modified
419 ··​0x0041b900·​68617320·​67696420·​25750a00·​47726f75·​has·​gid·​%u.​.​Grou419 ··​0x0041b900·​68617320·​67696420·​25750a00·​47726f75·​has·​gid·​%u.​.​Grou
420 ··​0x0041b910·​70202573·​20686173·​20676964·​2025690a·​p·​%s·​has·​gid·​%i.​420 ··​0x0041b910·​70202573·​20686173·​20676964·​2025690a·​p·​%s·​has·​gid·​%i.​
421 ··​0x0041b920·​0050726f·​63657373·​2067726f·​75706964·​.​Process·​groupid421 ··​0x0041b920·​0050726f·​63657373·​2067726f·​75706964·​.​Process·​groupid
422 ··​0x0041b930·​2025690a·​00436861·​6e676564·​20726f6f··​%i.​.​Changed·​roo422 ··​0x0041b930·​2025690a·​00436861·​6e676564·​20726f6f··​%i.​.​Changed·​roo
423 ··​0x0041b940·​7420746f·​2025730a·​0072756e·​20697320·​t·​to·​%s.​.​run·​is·423 ··​0x0041b940·​7420746f·​2025730a·​0072756e·​20697320·​t·​to·​%s.​.​run·​is·
424 ··​0x0041b950·​646f6e65·​2025690a·​00302e32·​2e32004e·​done·​%i.​.​0.​2.​2.​N424 ··​0x0041b950·​646f6e65·​2025690a·​00302e32·​2e32004e·​done·​%i.​.​0.​2.​2.​N
425 ··​0x0041b960·​6570656e·​74686573·​20566572·​73696f6e·​epenthes·​Version425 ··​0x0041b960·​6570656e·​74686573·​20566572·​73696f6e·​epenthes·​Version
426 ··​0x0041b970·​20257320·​0a00672b·​2b003130·​3a35363a··​%s·​.​.​g++.​10:​56:​426 ··​0x0041b970·​20257320·​0a00672b·​2b003231·​3a31373a··​%s·​.​.​g++.​21:​17:​
427 ··​0x0041b980·​3433004a·​756e2031·​30203230·​31360078·43.​Jun·​10·​2016.​x427 ··​0x0041b980·​3237004a·​756e2031·​31203230·​31360078·27.​Jun·​11·​2016.​x
428 ··​0x0041b990·​38365f36·​34004672·​65654253·​4400342e·​86_64.​FreeBSD.​4.​428 ··​0x0041b990·​38365f36·​34004672·​65654253·​4400342e·​86_64.​FreeBSD.​4.​
429 ··​0x0041b9a0·​382e3500·​20202d25·​732c202d·​2d252d31·​8.​5.​··​-​%s,​·​-​-​%-​1429 ··​0x0041b9a0·​382e3500·​20202d25·​732c202d·​2d252d31·​8.​5.​··​-​%s,​·​-​-​%-​1
430 ··​0x0041b9b0·​39732025·​730a0063·​6f6e6669·​673d4649·​9s·​%s.​.​config=FI430 ··​0x0041b9b0·​39732025·​730a0063·​6f6e6669·​673d4649·​9s·​%s.​.​config=FI
431 ··​0x0041b9c0·​4c45002f·​7573722f·​6c6f6361·​6c2f6574·​LE.​/​usr/​local/​et431 ··​0x0041b9c0·​4c45002f·​7573722f·​6c6f6361·​6c2f6574·​LE.​/​usr/​local/​et
432 ··​0x0041b9d0·​632f6e65·​70656e74·​6865732e·​636f6e66·​c/​nepenthes.​conf432 ··​0x0041b9d0·​632f6e65·​70656e74·​6865732e·​636f6e66·​c/​nepenthes.​conf
433 ··​0x0041b9e0·​00430063·​61706162·​696c6974·​69657300·​.​C.​capabilities.​433 ··​0x0041b9e0·​00430063·​61706162·​696c6974·​69657300·​.​C.​capabilities.​
434 ··​0x0041b9f0·​6469736b·​2d6c6f67·​00646973·​6b206c6f·​disk-​log.​disk·​lo434 ··​0x0041b9f0·​6469736b·​2d6c6f67·​00646973·​6b206c6f·​disk-​log.​disk·​lo
/usr/local/lib/nepenthes/logirc.a
readelf --wide --string-dump=.rodata.str1.8 {}
Offset 1, 13 lines modifiedOffset 1, 13 lines modified
  
1 File:​·​lib.​a(IrcDialogue.​o)​1 File:​·​lib.​a(IrcDialogue.​o)​
  
2 String·​dump·​of·​section·​'.​rodata.​str1.​8':​2 String·​dump·​of·​section·​'.​rodata.​str1.​8':​
3 ··​[·····​0]··​.​.​/​.​.​/​nepenthes-​core/​src/​Buffer.​cpp3 ··​[·····​0]··​.​.​/​.​.​/​nepenthes-​core/​src/​Buffer.​cpp
4 ··​[····​28]···​:​nepenthes·​v0.​2.​2·​compiled·​on·​[Jun·​10·​2016·10:​58:​23]·​with·​g++·​4.​8.​54 ··​[····​28]···​:​nepenthes·​v0.​2.​2·​compiled·​on·​[Jun·​11·​2016·21:​19:​44]·​with·​g++·​4.​8.​5
5 ··​[····​70]··​IRC·​Server·​"%s"·​sent·​line·​beginning·​with·​two·​colons5 ··​[····​70]··​IRC·​Server·​"%s"·​sent·​line·​beginning·​with·​two·​colons
6 ··​[····​a8]··​Connected·​to·​IRC·​server·​"%s"·​through·​TOR·​proxy·​"%s"6 ··​[····​a8]··​Connected·​to·​IRC·​server·​"%s"·​through·​TOR·​proxy·​"%s"
7 ··​[····​e0]··​Relaying·​to·​IRC·​server·​"%s"·​denied·​by·​TOR·​proxy·​"%s"7 ··​[····​e0]··​Relaying·​to·​IRC·​server·​"%s"·​denied·​by·​TOR·​proxy·​"%s"
8 ··​[···​118]···​:​nepenthes·​v0.​2.​2·​log-​irc·​control·​interface8 ··​[···​118]···​:​nepenthes·​v0.​2.​2·​log-​irc·​control·​interface
9 ··​[···​148]···​:​··​!version·​-​·​print·​detailed·​version·​information9 ··​[···​148]···​:​··​!version·​-​·​print·​detailed·​version·​information
10 ··​[···​180]···​:​··​!pattern·​<logtags>·​-​·​set·​log·​pattern·​for·​this·​log-​irc·​instance10 ··​[···​180]···​:​··​!pattern·​<logtags>·​-​·​set·​log·​pattern·​for·​this·​log-​irc·​instance
11 ··​[···​1c8]···​:​··​!help·​-​·​display·​this·​help·​message11 ··​[···​1c8]···​:​··​!help·​-​·​display·​this·​help·​message
/usr/local/lib/nepenthes/logirc.so
readelf --wide --hex-dump=.rodata {}
Offset 23, 16 lines modifiedOffset 23, 16 lines modified
23 ··​0x00008ed0·​5249564d·​5347004e·​4f544943·​4500504f·​RIVMSG.​NOTICE.​PO23 ··​0x00008ed0·​5249564d·​5347004e·​4f544943·​4500504f·​RIVMSG.​NOTICE.​PO
24 ··​0x00008ee0·​4e472000·​504f4e47·​00203a20·​0d0a0003·​NG·​.​PONG.​·​:​·​.​.​.​.​24 ··​0x00008ee0·​4e472000·​504f4e47·​00203a20·​0d0a0003·​NG·​.​PONG.​·​:​·​.​.​.​.​
25 ··​0x00008ef0·​34000336·​00033133·​00033900·​03313400·​4.​.​6.​.​13.​.​9.​.​14.​25 ··​0x00008ef0·​34000336·​00033133·​00033900·​03313400·​4.​.​6.​.​13.​.​9.​.​14.​
26 ··​0x00008f00·​2e2e2f2e·​2e2f6e65·​70656e74·​6865732d·​.​.​/​.​.​/​nepenthes-​26 ··​0x00008f00·​2e2e2f2e·​2e2f6e65·​70656e74·​6865732d·​.​.​/​.​.​/​nepenthes-​
27 ··​0x00008f10·​636f7265·​2f737263·​2f427566·​6665722e·​core/​src/​Buffer.​27 ··​0x00008f10·​636f7265·​2f737263·​2f427566·​6665722e·​core/​src/​Buffer.​
28 ··​0x00008f20·​63707000·​00000000·​203a6e65·​70656e74·​cpp.​.​.​.​.​·​:​nepent28 ··​0x00008f20·​63707000·​00000000·​203a6e65·​70656e74·​cpp.​.​.​.​.​·​:​nepent
29 ··​0x00008f30·​68657320·​76302e32·​2e322063·​6f6d7069·​hes·​v0.​2.​2·​compi29 ··​0x00008f30·​68657320·​76302e32·​2e322063·​6f6d7069·​hes·​v0.​2.​2·​compi
30 ··​0x00008f40·​6c656420·​6f6e205b·​4a756e20·​31302032·​led·​on·​[Jun·​10·​230 ··​0x00008f40·​6c656420·​6f6e205b·​4a756e20·​31312032·​led·​on·​[Jun·​11·​2
31 ··​0x00008f50·​30313620·​31303a35·​383a3231·​5d207769·​016·10:​58:​21]·​wi31 ··​0x00008f50·​30313620·​32313a31·​393a3431·​5d207769·​016·21:​19:​41]·​wi
32 ··​0x00008f60·​74682067·​2b2b2034·​2e382e35·​0d0a0000·​th·​g++·​4.​8.​5.​.​.​.​32 ··​0x00008f60·​74682067·​2b2b2034·​2e382e35·​0d0a0000·​th·​g++·​4.​8.​5.​.​.​.​
33 ··​0x00008f70·​49524320·​53657276·​65722022·​25732220·​IRC·​Server·​"%s"·33 ··​0x00008f70·​49524320·​53657276·​65722022·​25732220·​IRC·​Server·​"%s"·
34 ··​0x00008f80·​73656e74·​206c696e·​65206265·​67696e6e·​sent·​line·​beginn34 ··​0x00008f80·​73656e74·​206c696e·​65206265·​67696e6e·​sent·​line·​beginn
35 ··​0x00008f90·​696e6720·​77697468·​2074776f·​20636f6c·​ing·​with·​two·​col35 ··​0x00008f90·​696e6720·​77697468·​2074776f·​20636f6c·​ing·​with·​two·​col
36 ··​0x00008fa0·​6f6e730a·​00000000·​436f6e6e·​65637465·​ons.​.​.​.​.​Connecte36 ··​0x00008fa0·​6f6e730a·​00000000·​436f6e6e·​65637465·​ons.​.​.​.​.​Connecte
37 ··​0x00008fb0·​6420746f·​20495243·​20736572·​76657220·​d·​to·​IRC·​server·37 ··​0x00008fb0·​6420746f·​20495243·​20736572·​76657220·​d·​to·​IRC·​server·
38 ··​0x00008fc0·​22257322·​20746872·​6f756768·​20544f52·​"%s"·​through·​TOR38 ··​0x00008fc0·​22257322·​20746872·​6f756768·​20544f52·​"%s"·​through·​TOR