tcptrace
The source is downloaded from debian.net, which is not a standard host but plausibly hosts official Debian archives; the package builds from verifiable source code with strong checksums, and no untrusted executables are run.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from debian.net, which is not a standard host but plausibly hosts official Debian archives; the package builds from verifiable source code with strong checksums, and no untrusted executables are run.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=(https://cloudfront.debian.net/debian-archive/debian/pool/main/t/tcptrace/tcptrace_6.6.7.orig.tar.gz
PKGBUILD
1 offending line(s) highlighted# Maintainer: Alireza S.N. <alireza6677@gmail.com>
# Contributor: Heath Caldwell <mrbrobro at ftml dot net>
# Contributor: Jan-Erik Rediger <badboy at archlinux dot us>
pkgname=tcptrace
pkgver=6.6.7
pkgrel=4
pkgdesc="A TCP dump file analysis tool"
arch=('i686' 'x86_64')
#url="http://tcptrace.org/"
license=('GPL-2.0-only')
makedepends=('gcc' 'make')
depends=('libpcap')
optdepends=(
'tcpdump: for generating dumps'
'gnuplot: for plotting graphs'
'xplot: for plotting graphs'
)
source=(https://cloudfront.debian.net/debian-archive/debian/pool/main/t/tcptrace/tcptrace_6.6.7.orig.tar.gz
https://cloudfront.debian.net/debian-archive/debian/pool/main/t/tcptrace/tcptrace_6.6.7-4.1.diff.gz)
b2sums=('cae5816cb25c33f71c316d14de3c18ff26f0e7452375a962b88c4818ca7c43425e7298e788bd8cb43f2e22ac7dc9b89ed1921b7bd70d0e8befab3ee791453fb1'
'83768d0a6f14525f20b484421181078a3cf7ac3adeada3cf02a7441530593632743c6e515dd8738f5a4692422d97f4eb718dda076a234489096a10defb97dd5f')
prepare() {
cd ${pkgname}-${pkgver}
patch -p1 -i "$srcdir/tcptrace_6.6.7-4.1.diff"
sed -e "s|BINDIR = /usr/local/bin|BINDIR = ${pkgdir}/usr/bin|" \
-e "s|MANDIR = /usr/local/man/|MANDIR = ${pkgdir}/usr/share/man|" \
-e "s|-o bin -g bin| -o root -g root|" \
-e "s|-g -Wall -O2|-g -Wall -O2 -std=gnu11|" -i Makefile.in
}
build() {
cd ${pkgname}-${pkgver}
./configure
make
}
package(){
cd ${pkgname}-${pkgver}
export DEB_BUILD_OPTIONS="nostrip"
make install
install -Dm755 "${srcdir}/${pkgname}-${pkgver}/xpl2gpl" \
"${pkgdir}/usr/bin/xpl2gpl"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |