Debian Bug report logs - #479308
RFP: sipvicious -- Tools to audit SIP based VoIP systems

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: "Sebastian Castillo" <castillobuiles@gmail.com>

Date: Sun, 4 May 2008 08:33:03 UTC

Severity: wishlist

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>, Sebastian Castillo Builes <castillobuiles@gmail.com>:
Bug#479308; Package wnpp. Full text and rfc822 format available.

Acknowledgement sent to "Sebastian Castillo" <castillobuiles@gmail.com>:
New Bug report received and forwarded. Copy sent to <wnpp@debian.org>, Sebastian Castillo Builes <castillobuiles@gmail.com>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: "Sebastian Castillo" <castillobuiles@gmail.com>
To: submit@bugs.debian.org
Subject: ITP: sipvicious -- Tools to audit SIP based VoIP systems
Date: Sun, 4 May 2008 03:32:31 -0500
[Message part 1 (text/plain, inline)]
Package: wnpp
Severity: wishlist
Owner: Sebastian Castillo Builes <castillobuiles@gmail.com>

* Package name     : sipvicious
* URL              : http://code.google.com/p/sipvicious/
* License          : GPLv2
  Programming Lang : python
  Description      : Tools to audit SIP based VoIP systems
 SIPVicious suite is a set of tools that can be used
 to audit SIP based VoIP systems.
 It currently consists of four tools:
 .
  * svmap - this is a sip scanner. Lists SIP devices found on an IP range
  * svwar - identifies active extensions on a PBX
  * svcrack - an online password cracker for SIP PBX
  * svreport - manages sessions and exports reports to various formats

--
Sebastián Castillo Builes
Ingeniero de proyectos
Fluidsignal Group S.A.
Where security meets business
http://www.fuidsignal.com/
ISO 9001:2000
ISO/IEC 27001:2005
Teléfono: +57 (4) 3522627
Móvil: +57 3008242145
[Message part 2 (text/html, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Sebastian Castillo Builes <castillobuiles@gmail.com>:
Bug#479308; Package wnpp. (Mon, 24 May 2010 19:15:26 GMT) Full text and rfc822 format available.

Acknowledgement sent to Lucas Nussbaum <lucas@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Sebastian Castillo Builes <castillobuiles@gmail.com>. (Mon, 24 May 2010 19:15:26 GMT) Full text and rfc822 format available.

Message #10 received at 479308@bugs.debian.org (full text, mbox):

From: Lucas Nussbaum <lucas@debian.org>
To: 479308@bugs.debian.org
Cc: control@bugs.debian.org
Subject: sipvicious: changing back from ITP to RFP
Date: Mon, 24 May 2010 19:06:22 +0000
retitle 479308 RFP: sipvicious -- Tools to audit SIP based VoIP systems
noowner 479308
thanks

Hi,

This is an automatic email to change the status of sipvicious back from ITP
(Intent to Package) to RFP (Request for Package), because this bug hasn't seen
any activity during the last 18 months.

If you are still interested in adopting sipvicious, please send a mail to
<control@bugs.debian.org> with:

 retitle 479308 ITP: sipvicious -- Tools to audit SIP based VoIP systems
 owner 479308 !
 thanks

However, it is not recommended to keep ITP for a long time without acting on
the package, as it might cause other prospective maintainers to refrain from
packaging that software. It is also a good idea to document your progress on
this ITP from time to time, by mailing <479308@bugs.debian.org>.

Thank you for your interest in Debian,
-- 
Lucas, for the QA team




Changed Bug title to 'RFP: sipvicious -- Tools to audit SIP based VoIP systems' from 'ITP: sipvicious -- Tools to audit SIP based VoIP systems' Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Mon, 24 May 2010 19:27:28 GMT) Full text and rfc822 format available.

Removed annotation that Bug was owned by Sebastian Castillo Builes <castillobuiles@gmail.com>. Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Mon, 24 May 2010 19:27:28 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#479308; Package wnpp. (Sun, 16 Sep 2012 09:18:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Victor Seva <linuxmaniac@torreviejawireless.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Sun, 16 Sep 2012 09:18:03 GMT) Full text and rfc822 format available.

Message #19 received at 479308@bugs.debian.org (full text, mbox):

From: Victor Seva <linuxmaniac@torreviejawireless.org>
To: 479308@bugs.debian.org
Cc: control@bugs.debian.org, Sebastian Castillo <castillobuiles@gmail.com>
Subject: sipvicious: changing back from RFP to ITP
Date: Sun, 16 Sep 2012 11:15:01 +0200
retitle 479308 ITP: sipvicious -- Tools to audit SIP based VoIP systems
owner 479308 !
thanks

Hi,

initial work uploaded to the pkg-voip team svn [0]

[0] svn://svn.debian.org/svn/pkg-voip/sipvicious



Changed Bug title to 'ITP: sipvicious -- Tools to audit SIP based VoIP systems' from 'RFP: sipvicious -- Tools to audit SIP based VoIP systems' Request was from Victor Seva <linuxmaniac@torreviejawireless.org> to control@bugs.debian.org. (Sun, 16 Sep 2012 09:18:07 GMT) Full text and rfc822 format available.

Owner recorded as Victor Seva <linuxmaniac@torreviejawireless.org>. Request was from Victor Seva <linuxmaniac@torreviejawireless.org> to control@bugs.debian.org. (Sun, 16 Sep 2012 09:18:07 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#479308; Package wnpp. (Tue, 18 Sep 2012 07:57:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Victor Seva <linuxmaniac@torreviejawireless.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Tue, 18 Sep 2012 07:57:03 GMT) Full text and rfc822 format available.

Message #28 received at 479308@bugs.debian.org (full text, mbox):

From: Victor Seva <linuxmaniac@torreviejawireless.org>
To: submit@bugs.debian.org
Cc: 479308@bugs.debian.org, pkg-voip-maintainers@lists.alioth.debian.org
Subject: RFS: sipvicious/0.2.7-1 [ITP] Tools to audit SIP based VoIP systems
Date: Tue, 18 Sep 2012 09:52:24 +0200
Dear mentors,

  I am looking for a sponsor for my package "sipvicious"

 * Package name    : sipvicious
   Version         : 0.2.7-1
   Upstream Author : Sandro Gauci <sandro@enablesecurity.com>
 * URL             : http://code.google.com/p/sipvicious/
 * License         : GPL-2.0+
   Section         : misc

  It builds those binary packages:

    sipvicious - set of tools that can be used to audit SIP based VoIP systems.

  To access further information about this package, please visit the
following URL:

  http://mentors.debian.net/package/sipvicious


  Alternatively, one can download the package with dget using this command:

    dget -x http://mentors.debian.net/debian/pool/main/s/sipvicious/sipvicious_0.2.7-1.dsc

  More information about sipvicious can be obtained from
http://blog.sipvicious.org/.



Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Victor Seva <linuxmaniac@torreviejawireless.org>:
Bug#479308; Package wnpp. (Thu, 29 Nov 2012 09:09:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Helmut Grohne <helmut@subdivi.de>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Victor Seva <linuxmaniac@torreviejawireless.org>. (Thu, 29 Nov 2012 09:09:03 GMT) Full text and rfc822 format available.

Message #33 received at 479308@bugs.debian.org (full text, mbox):

From: Helmut Grohne <helmut@subdivi.de>
To: debian-mentors@lists.debian.org, 479308@bugs.debian.org
Cc: support@mentors.debian.net
Subject: Re: RFS: sipvicious/0.2.7-1 [ITP] Tools to audit SIP based VoIP systems
Date: Thu, 29 Nov 2012 10:05:03 +0100
For support@m.d.n: I believe the below package to be undistributable due
to lacking and wrong license declarations.

On Fri, Nov 02, 2012 at 12:56:21PM +0100, Victor Seva wrote:
>     sipvicious - set of tools that can be used to audit SIP based VoIP
> systems.

Can you briefly explain the relation of the tool to similar utilities
such as sipsak or sip-tester?

>     dget -x http://mentors.debian.net/debian/pool/main/s/sipvicious
> /sipvicious_0.2.7-1.dsc

I had a look at your package.

debian/changelog lists "UNRELEASED" as distribution. This has to be
changed before uploading.

The Build-Depends seem strange to me. Can you explain why you depend on
"python | python-all |python-dev | python-all-dev"? In any case listing
python-dev there seems like a Python Policy violation. Appendix A says:

| Packages that do not require the -dev packages must not build-depend
| on them. 

debian/copyright uses two different names to reference the same GPL
version. Usage of "GPL-2.0+" seems uncommon as well. Maybe you can make
this more consistent?

Looking deeper you can see that GPL-2 is actually wrong. The works are
even incompatible with GPL-2 as can be seen in the header of svcrack.py
for example.

debian/copyright also does not mention the addition of works authored by
Andi Albrecht. Indeed I totally failed to find a license for those works
so far. That would make your package undistributeable.

Going further your manual pages seem to based on the help messages of
the tools. To me it seems like the pages need to be considered
derivative works. That means they lack copyright statements for
upstream.

debian/rules still contains comments from dh-make. Can you clean those?

Maybe I missed something, but why do you Build-Depend on python-support
and then use dh --with python2 instead? That dependency seems useless.
And why do you use any of those tools when you don't ship any Python
modules?

Upstream ships Berkely DB files. I was wondering if they are in
"preferred form for modification" according to said GPL-2^H3.

Furthermore those Berkley DB files are accessed from svfphelper.py using
relative paths. So after installing those tools, the databases will not
be found unless you first cd to /usr/share/sipvicious.

You list a homepage in debian/changelog, but it is notably absent in
debian/control. Maybe you can add that?

To me it seems like more work is needed before prime time.

Helmut



Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#479308; Package wnpp. (Sat, 22 Feb 2014 16:27:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Victor Seva <linuxmaniac@torreviejawireless.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Sat, 22 Feb 2014 16:27:04 GMT) Full text and rfc822 format available.

Message #38 received at 479308@bugs.debian.org (full text, mbox):

From: Victor Seva <linuxmaniac@torreviejawireless.org>
To: 479308@bugs.debian.org
Cc: control@bugs.debian.org
Subject: sipvicious: changing back from ITP to RFP
Date: Sat, 22 Feb 2014 17:24:29 +0100
retitle 479308 RFP: sipvicious -- Tools to audit SIP based VoIP systems
noowner 479308
thanks



Changed Bug title to 'RFP: sipvicious -- Tools to audit SIP based VoIP systems' from 'ITP: sipvicious -- Tools to audit SIP based VoIP systems' Request was from Victor Seva <linuxmaniac@torreviejawireless.org> to control@bugs.debian.org. (Sat, 22 Feb 2014 16:27:24 GMT) Full text and rfc822 format available.

Removed annotation that Bug was owned by Victor Seva <linuxmaniac@torreviejawireless.org>. Request was from Victor Seva <linuxmaniac@torreviejawireless.org> to control@bugs.debian.org. (Sat, 22 Feb 2014 16:27:25 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Apr 18 16:34:39 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.