Patch-ID# 112915-06

Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security snoop packet tunneling ripv2 wan-capable network boot install
Synopsis: SunOS 5.9: snoop Patch
Date: Jan/06/2009

Install Requirements: NA

Solaris Release: 9

SunOS Release: 5.9

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 114262

Topic: SunOS 5.9: snoop Patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #

Changes incorporated in this version: 6748431

Patches accumulated and obsoleted by this patch: 112699-02 115516-01

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:


Problem Description:

6748431 Solaris 9 snoop patch should not require rebootafter and singleuser mode
(from 112915-05)
6655168 snoop has problems capturing and displaying SMB traffic
6709607 interpret_netbios_ses calls interpret_smb with wrong data length
(from 112915-04)
5024476 snoop: dlpromisconreq: strgetmsg: MOREDATA
4874672 snoop: can drive into the ditch while parsing bogus DNS packets
4328452 snoop: simple filter expression can cause infinite loop
(from 112915-03)
4676230 Signal 11 errors (sigsegv) when snooping ldap port(389)
(from 112915-02)
        This revision accumulates S9U5 feature point patch 115516-01.
(from 112915-01)
        This revision accumulates S9U1 feature point patch 112699-02.
(from 112699-02)
        This revision synchronizes package version strings between S9 and S9U1.
(from 112699-01)
1148813 subnet routes turn into host routes (routed)
1240645 in.routed: add support for subnet number of all 0's or all 1's per RFC 1812
4075054 Solaris 2.6 doesn't deliver routing deamon to support variable length subnet
4327168 in.routed replies for RIP cmd request with norip option
4341344 in.rdisc does not generate advertisements with a lifetime of zero
4475921 in.routed rtlookup in addrouteforif() has poor error checking
4532805 ip_icmp.h is missing some necessary definitions
4532808 in.routed is not lint-clean
4532860 snoop should support RIPv2
4559001 <protocols/routed.h> needs RIP-2 definitions
4587434 net/route.h should have latest BSD RTAX_* defines
4637330 new in.routed rdisc behavior is bad
4635766 in.routed loses control when ripped off
4637788 in.routed aggregating away learned routes because of static default route
4648299 in.routed fails to discover default router on multi-homed host via discovery
4479794 can't configure tunnels over IPv6
4396697 IPv6 tunnel support needed
4425786 ifconfig prints tunnel addresses incorrectly
4417647 snoop handles unknown IPv6 destination options incorrectly
4592876 in.ndpd daemonizes too soon
4648388 snoop's parsing of tunnel encap limit dst opts goes off into the weeds
(from 115516-01)
4259149 WAN-capable network boot/install
4744248 boot argument processing is broken on sparcv9
4763631 boot code could be cleaned up
4473583 boot: 64-bit stat on 32-bit kernels

Patch Installation Instructions:
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' scripts provided with Solaris.
The following example installs a patch to a standalone machine:
       example# patchadd /var/spool/patch/123456-07
The following example removes a patch from a standalone system:
       example# patchrm 123456-07
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

Special Install Instructions:
NOTE 1:  To get the complete Packet Tunneling over IPv6 feature, please
         also install the following patches:
         112902-01 (or greater)  ip driver patch
         112903-01 (or greater)  tun patch
         112911-01 (or greater)  ifconfig patch
         112912-01 (or greater) patch
         112928-01 (or greater)  in.ndpd patch
NOTE 2:  To get the complete RIPv2 feature, please install the following
         112914-01 (or greater)  in.routed patch
         112916-01 (or greater)  rtquery patch
         112918-01 (or greater)  route.h patch
         112929-01 (or greater)  RIPv2 headers patch
NOTE 3:  To get the complete WAN-capable network boot/install feature,
         please install the following patches:
         112233-09 (or greater)  Kernel Update patch
         113457-04 (or greater)  ufs headers patch
         113981-03 (or greater)  devfsadm patch
         113026-11 (or greater)  meta command files patch
         114131-02 (or greater) patch
         114349-02 (or greater)  dhcpagent & libdhcputil patch
         115685-01 (or greater)  netstrategy patch
         115683-01 (or greater)  WAN boot header files patch

README -- Last modified date: Friday, November 9, 2012