FW: md5deep version 1.0 released

[Howell, Paul]

this can be found at http://md5deep.sourceforge.net/


-----Original Message-----
From: forensics-return-2022-grue=merit.edu@securityfocus.com
[mailto:forensics-return-2022-grue=merit.edu@securityfocus.com] On Behalf Of
Capt Jesse Kornblum USAF
Sent: Thursday, March 11, 2004 3:19 PM
To: forensics@securityfocus.com
Subject: md5deep version 1.0 released



I have released version 1.0 of md5deep! A brief list of the changes from 
the old version is below. md5deep is a cross-platform program to compute 
MD5 message digests on an arbitrary number of files. The program runs on 
Windows, Linux, FreeBSD, OS X, Solaris, and should run on most other 
platforms. md5deep is similar to the md5sum program found in the GNU 
Coreutils package, but has the following additional features:

  * Recursive operation - md5deep is able to recursive examine an
    entire directory tree. That is, compute the MD5 for every file in
    a directory and for every file in every subdirectory.
  * Time estimation - md5deep can produce a time estimate when it's
    processing very large files.
  * Comparison mode - md5deep can accept a list of known hashes and
    compare them to a set of input files. The program can display
    either those input files that match the list of known hashes or
    those that do not match. Hashes sets can be drawn from the
    National Software Reference Library, iLook Investigator,
    Hashkeeper, or md5sum. Users are welcome to add functionality to
    read other formats too!
  * File type mode - md5deep can process only files of a certain type,
    such as regular files, block devices, etc.


Changes in version 1.0:
- Now able to handle symbolic links properly
- If no input files are given, uses standard input
- Added file read error handling (display an error message, pad missing 
data with zeros and continue execution).
- Added expert mode; allows user to choose which and only which types of 
files are processed
- Added -X and -M to print hashes as well as matches
- Errors in files of known hashes are now treated an non-fatal
- When estimating completion time, print the filename being processed
- Corrected NSRL import code
- Cleaned up time estimation calculation
- Fixed block device time estimation for *BSD
- Fixed duplicate slashes in filenames from root directory (e.g. //usr/src)
- Fixed install process. Generally this meant removing flags from the 
install command.
- Fixed minor data type issue for Gentoo linux
- Fixed typos in copyright and error messages


-- 
Jesse Kornblum, Capt, USAF
United States Naval Academy
Chauvenet Room 329
572 Holloway Rd. Stop 9F
Annapolis, MD 21402-5002
Comm 410-293-6821  DSN 281-6821
Fax 410-293-2686  Fax DSN 281-2686
e-mail: kornblum@usna.edu
http://www.cs.usna.edu/~kornblum/


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service. For more
information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

------------------------------------------------------------------------
To unsubscribe from netsec, send mail to majordomo@merit.edu
with a body consisting of the words "unsubscribe netsec" --
without the quotes. For more help, send a message to majordomo@merit.edu
with the word "help" as the body.
------------------------------------------------------------------------