Ike-scan Installation Guide

Obtaining ike-scan

There are four ways to obtain ike-scan:

1. Download the source-code tarball, and compile it on your system.

   This is the best way to make sure that you have the latest stable version. It will build on any Unix-like system (details below). You will need development tools including the make utility, an ANSI C compiler and C header files.

2. Download and extract the pre-compiled Windows binary zipfile.

   This is the easiest option for Windows users. You will get the latest stable version, because I release a Windows version together with the tarball for each new release. It will run on any Windows operating system.

3. Use a packaged distribution for your operating system, e.g. Redhat RPM or Debian DEB.

   This is the easiest option if you're running one of the systems that ike-scan has been packaged for, and you won't need any developer tools. However, you might not get the latest version, as some packages can be a version or two behind the latest release.

4. Get the latest development version of the source code from the git repository.

   This will get the very latest version of the source code, but it's not guaranteed to be as stable as the latest released version.

The sections below cover these three installation methods:

Building from the source tarball

1. Download the latest tarball from http://www.nta-monitor.com/tools/ike-scan/download/

   The tarball is named ike-scan-x.y.tar.gz where x.y is the version number. E.g. ike-scan-1.9.tar.gz.

2. Extract the tarball into a temporary build directory.

   On systems with GNU tar, you can use tar xzf ike-scan-x.y.tar.gz; on other systems, you may need to uncompress the tarball first and then untar it, e.g. gunzip ike-scan-x.y.tar.gz; tar xf ike-scan-x.y.tar. The tarball will be extracted into a directory called ike-scan-x.y.

3. Change directory to the newly-created ike-scan directory and run ./configure

   There are many different options that you can give to configure, most of which are the standard configure options. There are also the following ike-scan specific options:

   • --with-openssl -- Use the OpenSSL MD5 and SHA1 hash functions instead of the ike-scan built-in functions. The OpenSSL functions are faster than the built-in ones, but you need to have OpenSSL installed to use them.
4. Type make to compile ike-scan.
5. Optionally type make check to run self-tests.
6. Run make install as root to install ike-scan on your system.

You should be able to build ike-scan from source on any unix-like operating system which has:

• An ANSI C compiler with a 64-bit integer type;
• The make utility;
• The standard C header files; and
• Sockets support.

ike-scan is known to work on the following operating systems, but it will probably also work on other systems, providing that they meet the requirements above.

• Linux (tested on Debian, Redhat, Ubuntu and Gentoo);
• FreeBSD, OpenBSD and NetBSD;
• Solaris 2.x (tested on 2.6, 7, 8 and 9);
• Cygwin on Windows;
• MacOS X (tested on 10.3 and 10.4);
• SGI Irix (tested on 6.5);
• HP-UX (both GCC and HP C compilers);
• SCO OpenServer 5.0.7 (GCC only, as SCO C compiler has no 64-bit int type);
• Tru64 / OSF-1 5.1 (Tru64 C compiler).

If you want an old version of the ike-scan source code, you can get it from the ike-scan archive. This contains all the previous releases back to the original 1.0 release.

Installing the Windows zip file

1. Download the latest Windows zip file from http://www.nta-monitor.com/tools/ike-scan/download/

   The zip file is named ike-scan-win32-x.y.zip where x.y is the version number.

2. Extract the zip file into the directory that you want to run ike-scan from.

   All of the files comprising the ike-scan package should be extracted into this directory.

3. Run ike-scan from the command prompt.

   There is no need to run any installer program.

Note that the Windows version, like the Unix/Linux version, is a command line program. You should run it from the command prompt cmd.exe or command.exe, not directly from Windows.

Installing a binary package

Binary packages are available for the following operating systems:

• Redhat Linux and other RPM-based systems: RPMs are available from http://www.stearns.org/ike-scan/
• Debian Linux: ike-scan is part of the standard Debian distribution on Sarge and later in section net.
• Ubuntu Linux: ike-scan is available for Ubuntu in the Universe component.
• Gentoo Linux: ike-scan is available as a gentoo ebuild.
• FreeBSD: ike-scan is available from the FreeBSD ports and packages collection.
• OpenBSD: ike-scan is available from the OpenBSD package collection.
• NetBSD: ike-scan is available from the NetBSD package collection.
• MacOS X: ike-scan is available from Darwin Ports
• OpenSolaris: ike-scan is available from the contrib repository

The installation method for binary packages depends on the operating system, and is not covered here.

If you know of a binary ike-scan package that's not listed above, please add it to this list.

Getting the latest development version

The latest development version is available from github at https://github.com/royhills/ike-scan