macOS
Homebrewvérifié · 100%
brew install knocklocal Homebrew formula metadata
MacPortsvérifié · 94%
sudo port install knockMacPorts ports tree · net/knock/Portfile · Source: api.github.com
brew
Installer knock avec Homebrew, apk, dnf, MacPorts, zypper, apt, pacman
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de knock pour les workflows d'agents IA.
installation
Commandes d'installation supplémentaires
Linux
Alpine Linux apkvérifié · 92%
sudo apk add knockAlpine Linux edge package indexes · knock · Source: dl-cdn.alpinelinux.org
Fedora dnfvérifié · 92%
sudo dnf install knockFedora Rawhide package metadata · knock · Source: dl.fedoraproject.org
openSUSE zyppervérifié · 92%
sudo zypper install knockopenSUSE Tumbleweed package metadata · knock · Source: download.opensuse.org
Debian aptvérifié · 92%
sudo apt install knockdDebian stable package indexes · knockd · Source: deb.debian.org
Arch Linux pacmanvérifié · 92%
sudo pacman -S knockdArch Linux sync databases · knockd · Source: geo.mirror.pkgbuild.com
aperçu
Résumé du paquet
Port-knock server
Liens du projet
Commandes et alias
- knock
- knock_helper_ipt.sh
- knockd
historique
Historique du projet et usages
knock is Judd Vinet's port-knocking server and client. It watches network traffic with libpcap for a configured sequence of port hits and runs commands, commonly firewall changes, when the sequence matches.
Historique du projet
The README carries a 2004 copyright notice and describes the core design that still defines the package: closed ports can receive a secret sequence because knockd sniffs link-layer traffic rather than listening on those ports. The bundled ChangeLog lists 0.1 as the initial release and shows later work adding TCP flag handling, reload behavior, timeouts, kernel-space BPF filtering, one-time sequences, interface selection, and IPv6 support.
Version 0.8 was published on 2021-04-24 with multiple fixes and IPv6 support. The GitHub repository retained a small C codebase, an example `knockd.conf`, and manpage documentation rather than growing into a larger access-control framework.
Historique d'adoption
knock spread through Unix-like distributions because it solved a specific sysadmin problem with a small daemon and client. Package names vary between `knock`, `knockd`, and distribution-specific formula names, but the underlying model stayed close to the original README example: a knock sequence opens SSH, and another sequence closes it.
Modes d'utilisation
A server runs `knockd` with a configuration file such as `/etc/knockd.conf`; a client runs `knock` to send TCP or UDP packets to the configured sequence. Commands usually add or remove firewall rules, so the tool is operationally simple but security-sensitive: the sequence should be treated like a shared secret and firewall commands must be written carefully.
Pourquoi les passionnés de paquets s'y intéressent
knock is a memorable package because it embodies a whole security pattern in a tiny Unix daemon. It is also a reminder of the early-2000s sysadmin style: libpcap, iptables commands, config files, and a tiny client were enough to make a practical layer around SSH exposure.
Chronologie
- 2004: README copyright identifies Judd Vinet's original project era.
- 0.1: ChangeLog records the initial release.
- 0.3: ChangeLog added PPP support, command timeout directives, SIGHUP config reloads, and per-port protocols.
- 0.5: ChangeLog added one-time sequences, interface selection, BPF filtering, and security fixes.
- 0.7: ChangeLog documented the target directive and consolidated OS-specific networking code.
- 2021-04-24: v0.8 release published with fixes and IPv6 support.
Related projects
- knock is related to other port-knocking and single-packet-authorization tools, firewall managers such as iptables, packet crafting tools such as sendip, and SSH hardening workflows.
Sources
posture de sécurité
Niveau de risque : blue
broad file, network, media, or database tool signal.
Classificateur de risque
risque blue · confiance moyen · tool
Pourquoi
- broad file, network, media, or database tool signal
Signaux
- text:server
Comportement d'installation
- Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
- Les métadonnées de bottle Homebrew sont disponibles pour 13 plateformes.
Revue recommandée
Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/knockd.conf
exécutables
Exécutables installés
| Commande | Type | Exposition | Note |
|---|---|---|---|
knock | cli | exécutable global | |
knock_helper_ipt.sh | cli | exécutable global | |
knockd | cli | exécutable global |
fraîcheur
Version et fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
page générée2026-07-25
version du gestionnaire0.8
gestionnaire mis à jour
données localesOK
amontnot checked
dernière version détectéenon détecté
https://github.com/jvinet/knock
- infoNo package-manager update timestamp was available.confiance faible
- infoNo cached GitHub release or tag data was available.https://github.com/jvinet/knockconfiance none
métadonnées d'installation
Métadonnées du paquet
| Clé du paquet | brew:knock |
|---|---|
| Version | 0.8 |
| Gestionnaire de paquets | Homebrew |
| Page du gestionnaire de paquets | https://formulae.brew.sh/formula/knock |
| Page d'accueil | https://github.com/jvinet/knock |
| Dépôt | https://github.com/jvinet/knock |
| Docs amont | https://github.com/jvinet/knock#readme |
| Licence | GPL-2.0-or-later |
| Archive source | https://github.com/jvinet/knock/releases/download/v0.8/knock-0.8.tar.gz |
| Bibliothèques fournies par macOS | libpcap |
| Bouteille | disponible (sur arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux) |
| post-install Homebrew | non défini |
| Service | aucun déclaré |
faits du registre
Détails de la base source
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | knock |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
correspondances dans les bases sources
Autres enregistrements de gestionnaires de paquets
Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.
apk95%
knock 0.8.2-r2
A simple port-knocking daemon
https://github.com/TDFKAOlli/knock
sudo apk add knock- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: knock
- 1 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Knock
apk95%
knock-doc 0.8.2-r2
A simple port-knocking daemon (documentation)
https://github.com/TDFKAOlli/knock
sudo apk add knock-doc- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: knock
- normalized package name match
- Correspondance par : Knock
apk95%
knock-openrc 0.8.2-r2
A simple port-knocking daemon (OpenRC init scripts)
https://github.com/TDFKAOlli/knock
sudo apk add knock-openrc- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: knock
- normalized package name match
- Correspondance par : Knock
dnf95%
knock 0.8-13.fc44
A port-knocking server/client
http://www.zeroflux.org/projects/knock
sudo dnf install knock- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: knock
- 3 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Knock
dnf95%
knock-server 0.8-13.fc44
A port-knocking server/client
http://www.zeroflux.org/projects/knock
sudo dnf install knock-server- License: GPL-2.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: knock
- 6 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Knock
zypper95%
knock 0.8-4.4
A Port-Knocking Client
http://www.zeroflux.org/knock/
sudo zypper install knock- License: GPL-2.0-or-later
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: knock
- 2 Dépendances
- 1 fournit
- normalized package name match
- Correspondance par : Knock
zypper95%
knockd 0.8-4.4
A port-knocking server
http://www.zeroflux.org/knock/
sudo zypper install knockd- License: GPL-2.0-or-later
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: knock
- 4 Dépendances
- 2 fournit
- normalized package name match
- Correspondance par : Knock
MacPorts95%
knock
sudo port install knock- normalized package name match
- Correspondance par : Knock
Debian apt92%
knockd 0.8-2+b6
small port-knock daemon
http://www.zeroflux.org/projects/knock
sudo apt install knockd- Section: net
- Architecture: amd64
- Source Package: knockd
- 4 Dépendances
- installed executable or alias match
- Correspondance par : Knockd
Ubuntu apt92%
knockd 0.8-2build2
small port-knock daemon
http://www.zeroflux.org/projects/knock
sudo apt install knockd- Section: universe/net
- Architecture: amd64
- 4 Dépendances
- installed executable or alias match
- Correspondance par : Knockd
pacman92%
knockd 0.8-2
A simple port-knocking daemon
https://github.com/jvinet/knock
sudo pacman -S knockd- License: GPL-2.0-or-later
- Architecture: x86_64
- 1 Dépendances
- installed executable or alias match
- Correspondance par : Knockd
piste source
Généré depuis les données du dépôt
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Sources utilisées
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment