Ike-scan Installation Guide

From NTA-Wiki

Contents 1 Obtaining ike-scan 2 Building from the source tarball 3 Installing the Windows zip file 4 Installing a binary package

Obtaining ike-scan

There are three ways to obtain ike-scan:

1. Download the source-code tarball, and compile it on your system.

   This is the best way to make sure that you have the latest version. It will build on any Unix-like system (details below). You will need development tools including the make utility, an ANSI C compiler and C header files.

2. Download and extract the pre-compiled Windows binary zipfile.

   This is the best option for Windows users. You will get the latest version, because I release a Windows version together with the tarball for each new release. It will run on any Windows operating system.

3. Use a packaged distribution for your operating system, e.g. Redhat RPM or Debian DEB.

   This is the easiest option if you're running one of the systems that ike-scan has been packaged for, and you won't need any developer tools. However, you might not get the latest version, as some packages can be a version or two behind the latest release.

The sections below cover these three installation methods:

Building from the source tarball

1. Download the latest tarball from http://www.nta-monitor.com/tools/ike-scan/download/

   The tarball is named ike-scan-x.y.tar.gz where x.y is the version number. E.g. ike-scan-1.9.tar.gz.

2. Extract the tarball into a temporary build directory.

   On systems with GNU tar, you can use tar xzf ike-scan-x.y.tar.gz; on other systems, you may need to uncompress the tarball first and then untar it, e.g. gunzip ike-scan-x.y.tar.gz; tar xf ike-scan-x.y.tar. The tarball will be extracted into a directory called ike-scan-x.y.

3. Change directory to the newly-created ike-scan directory and run ./configure

   There are many different options that you can give to configure, most of which are the standard configure options. There are also the following ike-scan specific options:

   • --with-openssl -- Use the OpenSSL MD5 and SHA1 hash functions instead of the ike-scan built-in functions. The OpenSSL functions are faster than the built-in ones, but you need to have OpenSSL installed to use them.
4. Type make to compile ike-scan.
5. Optionally type make check to run self-tests.
6. Run make install as root to install ike-scan on your system.

You should be able to build ike-scan from source on any unix-like operating system which has:

• An ANSI C compiler with a 64-bit integer type;
• The make utility;
• The standard C header files; and
• Sockets support.

ike-scan is known to work on the following operating systems, but it will probably also work on other systems, providing that they meet the requirements above.

• Linux (tested on Debian, Redhat, Ubuntu and Gentoo);
• FreeBSD, OpenBSD and NetBSD;
• Solaris 2.x (tested on 2.6, 7, 8 and 9);
• Cygwin on Windows;
• MacOS X (tested on 10.3 and 10.4);
• SGI Irix (tested on 6.5);
• HP-UX (both GCC and HP C compilers);
• SCO OpenServer 5.0.7 (GCC only, as SCO C compiler has no 64-bit int type);
• Tru64 / OSF-1 5.1 (Tru64 C compiler).

If you want an old version of the ike-scan source code, you can get it from the ike-scan archive. This contains all the previous releases back to the original 1.0 release.

Installing the Windows zip file

1. Download the latest Windows zip file from http://www.nta-monitor.com/tools/ike-scan/download/

   The zip file is named ike-scan-win32-x.y.zip where x.y is the version number.

2. Extract the zip file into the directory that you want to run ike-scan from.

   All of the files comprising the ike-scan package should be extracted into this directory.

3. Run ike-scan from the command prompt.

   There is no need to run any installer program.

Note that the Windows version, like the Unix/Linux version, is a command line program. You should run it from the command prompt cmd.exe or command.exe, not directly from Windows.

Installing a binary package

Binary packages are available for the following operating systems:

• Redhat Linux and other RPM-based systems: RPMs are available from http://www.stearns.org/ike-scan/
• Debian Linux: ike-scan is part of the standard Debian distribution on Sarge and later in section net.
• Ubuntu Linux: ike-scan is available for Ubuntu in the Universe component.
• Gentoo Linux: ike-scan is available as a gentoo ebuild.
• FreeBSD: ike-scan is available from the FreeBSD ports and packages collection.
• OpenBSD: ike-scan is available from the OpenBSD package collection.
• NetBSD: ike-scan is available from the NetBSD package collection.
• MacOS X: ike-scan is available from Darwin Ports
• OpenSolaris: ike-scan is available from the contrib repository

The installation method for binary packages depends on the operating system, and is not covered here.

If you know of a binary ike-scan package that's not listed above, please add it to this list.