To get satan to run under linux get the patch from sunsite.unc.edu (or
a mirror) (/pub/Linux/system/Network/admin/satan-linux.1.1.1.diff.gz)
I did not write the patch (and I have no idea who did) I just noticed
that it was there without a readme.  I also noticed a lot of questions
about how to get satan to work with linux (there is even one in the
satan documentation trouble shooting section), so I put this readme
together.

Since I did not write the patch I can't make any claims about it,
including whether or not it works properly or whether it might break or
damage you computer or the software on it.

I had a lot of trouble getting this patch to work.  For one thing the
version of perl 5 on sunsite (perl5.001l-linux-a.out.tar.gz) does not
handle globs which the reconfig script wants.  So I had to get
perl5.001m (perl5.001m.tar.gz) and compile it myself.  This required
that I get the dld library (dld.3.2.7.tar.gz on sunsite mirrors).  The
perl FAQ suggested that older bash programs might have problems so I
upgrade my bash as well (bash-1.14.4.tar.gz)

You will need to get satan-1.1.1 to use the patch.  To find the source
you can look at the satan home page:
	http://www.fish.com/~zen/satan/satan.html
or look at this list which I got from a link from the home page:

 Europe 
          ftp://ftp.cs.ruu.nl/pub/SECURITY/satan-1.1.1.tar.Z 
          ftp://ftp.wi.leidenuniv.nl/pub/security/ 
          ftp://ftp.win.tue.nl/pub/security/ 
          ftp://ftp.kulnet.kuleuven.ac.be/pub/mirror/ftp.win.tue.nl/security/ 
          ftp://ftp.denet.dk/pub/security/tools/satan/ 
          http://ftp.luth.se/pub/unix/security/ 
          ftp://ftp.luth.se/pub/unix/security/ 
          ftp://ftp.cert.dfn.de/pub/tools/net/satan/ 
          ftp://ftp.informatik.uni-kiel.de/pub/sources/security/MIRROR.ftp.win.tue.nl/ 
          ftp://ftp.kfki.hu/pub/util/security/ftp.win.tue.nl/ 
          ftp://cnit.nsk.su/pub/unix/security/satan 
          ftp://ftp.csi.forth.gr/pub/security/ 
          ftp://ftp.ox.ac.uk/pub/comp/security/software/satan/ 
      USA 
          ftp://coast.cs.purdue.edu/pub/tools/unix/satan/ 
          ftp://ciac.llnl.gov/pub/ciac/sectools/unix/satan/ 
          ftp://ftp.acsu.buffalo.edu/pub/security/ 
          ftp://ftp.cerf.net/pub/software/unix/security/ 
          ftp://ftp.mcs.anl.gov/pub/security/ 
          ftp://ftp.net.ohio-state.edu/pub/security/satan/ 
          ftp://ftp.tisl.ukans.edu/pub/security/ 
          ftp://sunsite.unc.edu/pub/packages/security/ 
          ftp://vixen.cso.uiuc.edu/security/ 
      Australia 
          ftp://ftp.auscert.org.au/pub/mirrors/ftp.win.tue.nl/ 
          ftp://ftp.dstc.edu.au/pub/security/satan/ 
          ftp://coombs.anu.edu.au/pub/security/satan/ 

Then you need to get the a perl that works (since then one on sunsite
(perl5.001l-linux-a.out.tar.gz) didn't work for me I would suggest
getting the latest or at least "1m" which is what I used.)  From the
perl FAQ (posted to comp.lang.perl.announce, comp.lang.perl.misc,
comp.lang.perl, comp.answers, news.answers, and I would think is on
rtfm.mit.edu):

    North America:
        ftp://ftp.netlabs.com/pub/outgoing/perl5.0/         192.94.48.152
        ftp://ftp.cis.ufl.edu/pub/perl/src/5.0/             128.227.100.198
        ftp://prep.ai.mit.edu/pub/gnu/                      18.71.0.38
                not current as of 7/15/95
        ftp://ftp.uu.net/languages/perl/                    192.48.96.9
                not current as of 7/15/95
        ftp://ftp.khoros.unm.edu/pub/perl/                  198.59.155.28
                not current as of 7/15/95
        ftp://ftp.cbi.tamucc.edu/pub/duff/Perl/             165.95.1.3
        ftp://ftp.metronet.com/pub/perl/sources/            192.245.137.1
        ftp://genetics.upenn.edu/perl5/                     128.91.200.37

    Europe:
        ftp://ftp.cs.ruu.nl/pub/PERL/perl5.0/src/           131.211.80.17
        ftp://ftp.funet.fi/pub/languages/perl/ports/perl5/  128.214.248.6
        ftp://ftp.zrz.tu-berlin.de/pub/unix/perl/           130.149.4.40
        ftp://src.doc.ic.ac.uk/packages/perl5/              146.169.17.5
  
    Australia:
        ftp://sungear.mame.mu.oz.au/pub/perl/src/5.0/       128.250.209.2

    South America (mirror of ftp://prep.ai.mit.edu/pub/gnu):
        ftp://ftp.inf.utfsm.cl/pub/gnu/                     146.83.198.3


The patch seemed to work well once I figured out that it was different
from other patches that I used and seemed to need two copies of the
source code.  The second bit of confusion is that the resulting
hierarchy called satan-1.1.1.linux is the NON-patched version while
satan-1.1.1.clean was the patched version.  Next time I will pay more
attention and look for the .orig files :) At any rate the following
works (if there is a better way to use this type of patch let me
know.)

tar -xzf satan-1.1.1.tar.gz
mv satan-1.1.1 satan-1.1.1.linux
tar -xzf satan-1.1.1.tar.gz
mv satan-1.1.1 satan-1.1.1.clean
zcat satan-linux.1.1.1.diff.gz | patch
cd satan-1.1.1.clean
reconfig
make linux
./satan # to test


The reason why I needed to run satan on linux in the first place is
that I had a summer intern-ship assisting a companies security
administrator.  I am posting this because I would like to encourage
companies to use linux, since think that that is good for the linux
community in general.  As the satan readme says:

	Last but not least, SATAN was written to improve Internet
	security. Don't put [their] work to shame.

Richard Yentis, Jr.
ryentis@seas.gwu.edu