"Fossies" - the Fresh Open Source Software Archive 
"Fossies" - the Fresh Open Source Software Archive 
1.5.0_vs_1.6.1.A hint: This file contains one or more very long lines, so maybe it is better readable using the pure text view mode that shows the contents as wrapped lines within the browser window.
1 2018-11-18 Simson Garfinkel <simsong@acm.org> 2 * updated for pcap_findalldevs 3 * added -Wno-address-of-packed-member to avoid error 4 5 2017-07-12 Simson Garfinkel <simsong@acm.org> 6 * updated to work with Fedora 26 compilers 7 * Found bug in sbuf.cpp 8 * Fixed C++ warnings in hash 9 * Now works with OpenSSL 1.1.0f-fips 25 May 2017 10 11 2014-02-24 Man Page <simsong@mncrnpsedu.local> 12 13 * src/tcpflow.cpp (main): alternating color output option changed from -J to -g 14 15 2013-12-06 Basic <simsong@ncr.nps.edu> 16 17 * configure.ac: upped version number to 1.4.3 18 19 * tests/test-multifile.sh (OUT): now handles multifile and nitroba packets not being present. 20 21 2013-11-28 Basic <simsong@Mucha.local> 22 23 * src/scan_http.cpp (scan_http): BUGFIX: was not clearing byte_run DFXML between each attachment. Now does. 24 25 2013-11-18 Basic <simsong@Mucha.local> 26 27 * src/wifipcap/wifipcap.cpp (WifipcapCallbacks::decode_data_frame): now calls Handle80211Data() for all data packets 28 29 * configure.ac: changes to test per Ryan Schmidt <notifications@github.com> 30 31 2013-11-17 Basic <simsong@Mucha.local> 32 33 * configure.ac: updated to 1.4.2 34 35 * src/be13_api/be13_configure.m4: fixed so that it still compiles on MacOS 10.8. 36 37 2013-11-15 Basic <simsong@Mucha.local> 38 39 * src/datalink.cpp (dl_null): removed DLT_NULL_BROKEN; it's not needed anymore. 40 41 2013-10-21 Man Page <simsong@mncrnpsedu.local> 42 43 * src/flow.cpp (flow::filename): Since some people don't understand what %c and %C do, they don't provide it. It is required, so now a %c is appended if it is not specified. 44 45 2013-06-11 Basic <simsong@Mucha.local> 46 47 * doc/tcpflow.1.in (std): removed explaination of filtering expressions 48 49 2013-05-26 Basic <simsong@Mucha.local> 50 51 * src/tcpip.cpp (tcpip::print_packet): implemented hex dump 52 53 * src/scan_netviz.cpp (scan_netviz): disabled by default for now. 54 55 * src/tcpip.cpp (tcpip::print_packet): now prints 'filename' with console output (wasn't working due to bug). 56 57 2013-04-17 Simson Garfinkel <simsong@mncrnpsedu.local> 58 59 * src/iptree.h (template): changed inc() to add() 60 2013-04-16 Simson Garfinkel <simsong@Mucha.local> 61 62 * src/iptree.h: changed 'trim' to 'prune' for correct terminology. 63 64 2013-03-30 Simson Garfinkel <simsong@Mucha.local> 65 66 * src/scan_tcpdemux.cpp (scan_tcpdemux): added -S tcp_timeout 67 68 2013-03-03 Simson Garfinkel <simsong@Mucha.local> 69 70 * src/scan_netviz.cpp (scan_netviz): scan_netviz enabled by default 71 72 2013-02-27 Simson Garfinkel <simsong@Mucha.local> 73 74 * configure.ac: added /usr/boost/include to search path 75 76 2013-01-27 Simson Garfinkel <simsong@FC17> 77 78 * src/tcpdemux.cpp (close_all_fd): now calls close_file(false), to preven openflows from being modified while it is being iterated. 79 80 * src/tcpflow.h: removed SET_BIT as it wasn't being used 81 82 * configure.ac: removed bcopy & bzero 83 84 2013-01-26 Simson Garfinkel <simsong@npsair.local> 85 86 2013-01-08 Simson Garfinkel <simsong@mncrnpsedu.local> 87 88 * src/scan_netviz.cpp (th_shutdown): th_one_page is now lazily created and destroyed at end 89 90 2013-01-03 Simson Garfinkel <simsong@Mucha.local> 91 92 * src/tcpflow.cpp (main): opt_gzip_decompress renamed to gzip_decompress and implemented. 93 94 * src/flow.cpp (flow::new_filename): now automatically makes subdirectories if necessary 95 96 2013-01-02 Simson Garfinkel <simsong@mncrnpsedu.local> 97 98 * src/scan_http.cpp: zero-length attachments are no longer created on disk. 99 100 * src/tcpip.cpp (tcpip::store_packet): zero-length flows are no longer created on disk. 101 102 2012-12-27 Simson Garfinkel <simsong@Mucha.local> 103 104 * renamed stored_flow as saved_flow becuase they are all stored, but only some are saved in the ring bufer. 105 106 * src/tcpdemux.cpp (tcpdemux::close_all): renamed close_all_fd(). close_tcpip renamed close_tcpip_fd; close_oldest renamed close_oldest_fd() 107 (tcpdemux::remove_all_flows): renamed. 108 109 2012-12-24 Simson Garfinkel <simsong@Mucha.local> 110 111 * src/tcpip.h (class flow): removed connection_count from flow identifier becuase it cannot be derrived from the flow. We really should have the LSN as part of the flow or something. The connection_count will be found when the filename is made. 112 113 2012-12-23 Simson Garfinkel <simsong@Mucha.local> 114 115 * src/tcpdemux.cpp (tcpdemux::process_tcp): option output_enabled changed to store_output 116 117 2012-12-22 Simson Garfinkel <simsong@Mucha.local> 118 119 * src/be13_api/sbuf.cpp (sbuf_t::map_file): 120 121 * src/scan_http.cpp (scan_http_cbo::on_headers_complete): changed retrying_open to open() to eliminate dependency on tcpdemux 122 123 * src/tcpip.h: put in its own file 124 125 * src/util.cpp (mmap): moved fake mmap() cover to util.cpp 126 127 * src/tcpip.cpp (tcpip): no longer closes the file at the end of every tcpip and then re-opens it if there is post-processing. Now it re-uses the same fd. 128 (tcpip): renamed opt_after_header to opt_post_processing 129 130 2012-12-18 Simson Garfinkel <simsong@Mucha.local> 131 132 * src/tcpflow.cpp (main): fixed opt_all; it was always true, but it shoudln't be. 133 134 2012-12-16 Simson Garfinkel <simsong@Mucha.local> 135 136 * src/tcpdemux.h (class tcpdemux): removed write_to_file 137 (class tcpdemux): removed struct packet_info_t 138 * src/tcpdemux.cpp (tcpdemux::post_process_capture_flow): added delete of sbuf 139 140 * src/scan_http.cpp (scan_http_cbo::on_headers_complete): changed O_APPEND to O_TRUNC 141 142 * src/tcpdemux.cpp: removed process_gzip, since it is now done in scan_http 143 144 2012-12-07 Simson Garfinkel <simsong@Mucha.local> 145 146 * src/tcpdemux.h (class flow_addr): fixed operator< type 147 148 2012-11-17 Simson Garfinkel <simsong@npsair.local> 149 150 * src/tcpflow.cpp (usage): usage now goes to stdout and not stderr. 151 152 2012-11-15 Simson Garfinkel <simsong@npsair.local> 153 154 * src/tcpdemux.h (class tcpdemux): retrying_open now takes a std:;string 155 156 2012-11-14 Simson Garfinkel <simsong@npsair.local> 157 158 * src/tcpip.cpp (tcpip::store_packet): added bytes_processed addition so that <fileobject> <filesize> is properly updated. 159 160 * src/be13_api/bulk_extractor_i.h: renamed histograms to be feature_histograms 161 162 * src/plugin.cpp (process_sbuf): renamed process_extract to process_sbuf and put it here. 163 164 2012-11-06 Simson Garfinkel <simsong@mncrnpsedu.local> 165 166 * src/tcpdemux.cpp (tcpdemux::process_tcp): first packet sense was inverted. Fixed. 167 168 * src/main.cpp (main): renamed main.cpp to tcpflow.cpp 169 170 2012-11-05 Simson Garfinkel <simsong@npsair.local> 171 172 * src/main.cpp (main): print_usage() renamed usage() for consistency with bulk_extractor 173 (usage): usage made static 174 175 2012-10-28 Simson Garfinkel <simsong@npsair.local> 176 177 * src/pcb_timehistogram.cpp: made histograms static 178 179 * src/tcpip.cpp (tcpip::store_packet): debug_level changed to debug in all files. 180 181 2012-10-26 Simson Garfinkel <simsong@npsair.local> 182 183 * src/flow.cpp (flow::print_usage): shortened filename template usage. 184 185 * src/tcpip.cpp (insert): added this function to insert a space at the beginning of a file. Now tcpflow can handle a flow with missing SYNs and out-of-order packets. 186 187 2012-10-25 Simson Garfinkel <simsong@npsair.local> 188 189 * src/tcpip.cpp (tcpip::print_packet): implemented strip-on-fputc 190 191 * src/tcpdemux.cpp (do_strip_nonprint): removed this function, as it could be replaced with strip-on-fputc 192 193 2012-10-24 Simson Garfinkel <simsong@npsair.local> 194 195 * src/tcpdemux.cpp (tcpdemux::open_tcpfile): now asserts that file is not open 196 (tcpdemux::open_tcpfile): retrying_fopen changed to retrying_open 197 (tcpdemux::process_tcp): completely rewrote the TCP implementation 198 (tcpdemux::process_ip4): 199 200 The old state machine kept tract of each flow's initial sequence 201 number (ISN) and computed the absolute 32-bit position within the 202 TCP flow for each TCP segment. The problem with this approach is 203 that it would not handle segments larger than 4GiB. The new state 204 machine computes what it expects the Next Sequence Number (NSN) to 205 be based on the previously processed segment in the flow. If there 206 is a difference between the actual NSN and the predicted NSN then 207 there is a relative seek done in the file. If I file needs to be 208 closed (due to file handle exhaustion) and re-opened (because a 209 segment on the flow shows up), the file pointer is put at the end 210 of the file and the NSN is predicted from the ISN (which was 211 cached). This will allow closing and re-opening flows bigger than 212 4GiB because the bits over 32 bit will be ignored in the NSN 213 calculation. 214 215 * src/tcpdemux.h (class tcpip): store_packet modified to take a delta rather than a sequence number 216 (class tcpip): changed from FILE* to fd for all i/o 217 218 * src/tcpdemux.cpp (tcpdemux::process_tcp): renamed console_only 219 to console_output; modified order of stripping and console_output 220 checking to check first for console output before checking to see if data should be stripped 221 222 2012-10-23 Simson Garfinkel <simsong@mncrnpsedu.local> 223 224 * src/tcpdemux.cpp (tcpdemux::tcpdemux): packet_time renamed packet_counter 225 226 * src/tcpdemux.h (class tcpip): renamed last_packet_time to be last_packet_number as it was not being used 227 228 * src/tcpip.cpp (tcpip::store_packet): removed the 'finished' flag from the tcpip:: class. It was being set when the flow went over demux.max_bytes_per_flow. However, if a packet was then received which was less than max_bytes_per_flow the bytes would not be recorded, because the max had already been passed. 229 230 2012-10-21 Simson Garfinkel <simsong@air2.local> 231 232 * src/tcpip.cpp (tcpip::store_packet): removed syn_set parameter and put in tcpdemux::process_tcp 233 234 * configure.ac: changed version number to 1.3.1devel 235 236 2012-10-20 Simson Garfinkel <simsong@air2.local> 237 238 * src/tcpdemux.h (class tcpdemux): process_tcp, process_ip, process_ip4 and process_ip6 now take const struct timeval &ts instead of const struct timeval *ts as their first argument, becuase ts should never be NULL. 239 240 2012-09-16 Simson Garfinkel <simsong@Mucha.local> 241 242 * src/flow.cpp (flow::filename): TM_FORMAT is now "%Y-%m-%dT%H:%M:%SZ" 243 244 * src/xml.cpp (xml::add_DFXML_execution_environment): TM_FORMAT is now always "%Y-%m-%dT%H:%M:%SZ" 245 246 2012-09-11 Simson Garfinkel <simsong@Mucha.local> 247 248 * src/datalink.cpp (dl_ethernet): now handles ETHERTYPE_LOOPBACK not defined. 249 250 2012-08-20 Simson Garfinkel <simsong@FC17> 251 252 * configure.ac: increased version number to 1.3.0 253 254 2012-08-16 Simson Garfinkel <simsong@mucha.lan> 255 256 * src/tcpdemux.cpp (tcpdemux::process_tcp): fixed bug in which myflow.tlast wasn't being set. 257 258 2012-08-16 Simson Garfinkel <simsong@Mucha.local> 259 260 * configure.ac: Increased version number to 1.2.9 261 262 263 * src/main.cpp (main): fixed compile bugs that resulted from adoption of standard DFXML header. 264 265 2012-08-10 Simson Garfinkel <simsong@imac3.local> 266 267 * configure.ac (HAVE_PTHREAD): fixed typo in configure.ac 268 269 2012-08-08 Simson Garfinkel <simsong@FC17> 270 271 * src/tcpdemux.h: removed struct ip as it was redundent to struct iphdr 272 273 * configure.ac: tcpflow now compiles under mingw for Windows 274 275 * src/tcpdemux.cpp: moved tcpdemux class methods into this new file. 276 277 2012-08-03 Simson Garfinkel <simsong@mncrnpsedu.local> 278 279 * src/tcpip.cpp (tcpip::close_file): added support for FUTIMENS, but I don't yet have a system on which to test it. Hope that it's good. 280 281 2012-07-23 Simson Garfinkel <simsong@Mucha.local> 282 283 * src/main.cpp (main): added calling process_infile(expression,device,"",true) when no files are provided to fix bug of no live capture. 284 285 * configure.ac: version 1.2.8 286 287 2012-07-02 Simson Garfinkel <simsong@mncrnpsedu.local> 288 289 * src/sysdep.h: removed; put code in tcpflow.h for simplicity 290 291 2012-06-26 mike <mike@reem> 292 293 * src/datalink.cpp (dl_null): moved ETHERTYPE_IPV6 from sysdep.h 294 to datalink.cpp 295 296 2012-06-18 Simson Garfinkel <simsong@mncrnpsedu.local> 297 298 * bootstrap.sh: added --add-missing to bootstrap.sh 299 300 2012-05-24 Simson Garfinkel <simsong@it153582.ern.nps.edu> 301 302 * configure.ac: increased version to 1.2.7. 303 304 * src/main.cpp (main): -r option now allows for multiple files to be specified. 305 306 * src/main.cpp (main): -R option now allows for incomplete tcp connections to be finished. 307 308 2012-05-16 Simson Garfinkel <simsong@Mucha.local> 309 310 * src/main.cpp (main): removed global "tcpdemux demux" 311 variable. Now it's passed as *user in the datalink methods, as it 312 should be. 313 314 * src/tcpdemux.h (class tcpip): bytes_printed renamed to bytes_processed, as it will be used in packet processing as well. 315 316 2012-04-19 Simson Garfinkel <simsong@imac3.home> 317 318 * configure.ac: incremented version to 1.2.6 (1.2.5 had a bad tag) 319 320 321 * src/tcpip.cpp (tcpip::print_packet): fixed error in fwrite(). 322 323 2012-04-11 Simson Garfinkel <simsong@mncrnpsedu.local> 324 325 * created version 1.2.4 tag 326 327 2012-04-03 Simson Garfinkel <simsong@imac3.home> 328 329 * src/main.cpp (print_usage): fixed misspelling of name 330 331 * src/tcpip.cpp (tcpdemux::tcpdemux): default outdir is now "." 332 333 2012-03-26 Simson Garfinkel <simsong@imac3.home> 334 335 * src/xml.cpp (xml::add_cpuid): better handling of CPUID instruction. Now it really should not show up on non-Intel architectures. 336 337 2012-03-19 Simson Garfinkel <simsong@imac3.home> 338 339 * src/xml.cpp: added unistd.h 340 341 2012-03-18 Simson Garfinkel <simsong@imac3.local> 342 343 * src/main.cpp (main): added printing stats for debug level 3. 344 345 * src/datalink.cpp (find_handler): changed 'looking for handler' to debug level 2. 346 347 2012-03-18 Simson Garfinkel <simsong@imac3.home> 348 349 * src/tcpip.cpp (tcpdemux::close_all): Jeremey's FD ring has been replaced with an unordere dset. 350 351 * src/tcpdemux.h (class tcpdemux): tcpdemux is now a class. By 1.3 it will be a linkable class separate from this program. 352 353 2012-03-11 Simson L. Garfinkel <simsong@ps14412.dreamhostps.com> 354 355 * configure.ac: added -funit-at-a-time 356 357 2012-03-10 Simson Garfinkel <simsong@imac3.home> 358 359 * COPYING: updated to GPLv3 360 361 2012-03-10 Simson Garfinkel <simsong@mucha> 362 363 * src/xml.cpp (xml::xmlout): writing with size-length tag just outputs the value now. 364 365 2012-03-03 Simson Garfinkel <simsong@it152983.ern.nps.edu> 366 367 * configure.ac: changed verison number to 1.2.1 368 369 * src/xml.cpp (xml::cpuid): added another #if defined(HAVE_ASM_CPUID) to protect another __asm__("cpuid") 370 371 2012-03-03 Simson Garfinkel <simsong@imac3.home> 372 373 * configure.ac: changed version number to 1.2.0 374 375 2012-03-09 Simson Garfinkel <simsong@Mucha.local> 376 377 * src/tcpip.cpp (tcpip::attempt_fopen): output files now opened in binary mode 378 (tcpip::store_packet): added error message for packet received after flow finished 379 380 * src/md5.c: added file. 381 382 * src/md5.h: added file. 383 384 * src/tcpip.cpp (tcpip::open_file): removed "done" variable, as it was not needed. 385 (tcpip): string constants that are converted to strings are now const statics. 386 387 2012-02-26 Simson Garfinkel <simsong@mucha> 388 389 * src/flow.cpp (flow::filename): completely rewrote to support templates. 390 (flow::print_usage): added to give information on templates. 391 392 * src/flow.h (class flow): renamed flow_t to flow 393 394 * src/main.cpp (main): removed last vistaves of DEFAULT_FILTER 395 (main): error is now a local variable. 396 397 2012-02-23 Simson Garfinkel <simsong@mucha> 398 399 * src/sysdep.h: changed to C++ headers for stdio, stdlib, cctype, cstdarg and cerrorno 400 401 * src/tcpip.cpp (tcpip::tcpip): outdir changed from const char * 402 to std::string. Flow names no longer have ./ prepended if outdir 403 is ".". 404 405 2012-01-18 Simson Garfinkel <simsong@Mucha.local> 406 407 * src/tcpip.cpp (tcpip::process_tcp): converted dir_cs and dir_sc to a single dir enum type. 408 409 2012-01-15 Simson Garfinkel <simsong@mucha.home> 410 411 * src/tcpip.cpp (tcpip): fixed crashing bug when no XML file was being generated. 412 413 2012-01-06 Simson Garfinkel <simsong@mncrnpsedu.local> 414 415 * src/flow.h (class tcpip): replaced std::map with std::tr1::unordered_map. Old performance: 416 <rusage> 417 <utime>2.879478</utime> 418 <stime>3.227067</stime> 419 <maxrss>7675904</maxrss> 420 <minflt>1953</minflt> 421 <majflt>26</majflt> 422 <nswap>0</nswap> 423 <inblock>3</inblock> 424 <oublock>4649</oublock> 425 <clocktime>14.634266</clocktime> 426 </rusage> 427 428 new performance: 429 <rusage> 430 <utime>1.323023</utime> 431 <stime>2.676657</stime> 432 <maxrss>7430144</maxrss> 433 <minflt>1921</minflt> 434 <majflt>0</majflt> 435 <nswap>0</nswap> 436 <inblock>0</inblock> 437 <oublock>4739</oublock> 438 <clocktime>8.399374</clocktime> 439 </rusage> 440 441 442 2012-01-05 Simson Garfinkel <simsong@mncrnpsedu.local> 443 444 * src/tcpip.cpp (do_strip_nonprint): do_strip_nonprint is now threadsafe 445 446 * src/flow.h (class tcpip): pos changed from long to uint64_t 447 448 * src/tcpip.cpp (tcpip::process_tcp): whoops; only drop the connection if the seek is bigger than min_offset 449 450 2012-01-04 Simson Garfinkel <simsong@mncrnpsedu.local> 451 452 * configure.ac: incremented version counter to beta2 453 454 * src/main.cpp (main): fixed option parsing bug. 455 456 2012-01-03 Simson Garfinkel <simsong@mncrnpsedu.local> 457 458 * src/tcpip.cpp (do_strip_nonprint): removed; do_strip_nonprint is now embedded in the caller, and is now thread-safe. 459 460 * src/util.cpp (check_malloc): removed 461 462 * src/tcpip.cpp (tcpip::store_packet): flow_state renamed tcpip (because it is). 463 464 * src/flow.h (class flow_state): first is now called tstart and appears in the flow_t. 465 (class flow_addr): renamed flow_t to flow_addr; it's the flow address. 466 (class flow_t): created this class which has additional per-flow information 467 (class flow_addr): moved vlan to flow_t from flow_addr 468 469 2012-01-01 Simson Garfinkel <simsong@Mucha.local> 470 471 * src/tcpflow.h (struct): flow_t renamed to be the flow class. 472 (class ipaddr): created class for IP addresses 473 (class flow_state_struct): created class from struct 474 475 * src/main.cpp (print_usage): -X added for XML output. 476 477 2011-12-29 Simson Garfinkel <simsong@Mucha.local> 478 479 * src/main.cpp (main): changed bytes_per_flow from int to uint64_t 480 progname is now a global. 481 482 added support for named semaphores to lock output between invocations. 483 484 * src/util.cpp: removed cvsid 485 486 * src/tcpip.cpp: removed cvsid 487 488 * src/datalink.cpp: removed cvsid 489 490 * src/flow.cpp: removed cvsid 491 492 * Makefile.am (EXTRA_DIST): added m4/ax_pthread.m4 to EXTRA_DIST 493 494 * configure.ac: increased version number to 1.0.7 495 496 * src/main.cpp (main): added -B option to force binary output. 497 498 * doc/tcpflow.1: corrected typo in -c/-C which crept it. 499 500 2011-12-23 Simson Garfinkel <simsong@Mucha.local> 501 502 * src/util.cpp: removed copy_argv(); replaced with a simple std::string manipulation. 503 (flow_filename): modified to work with outdir 504 505 * src/tcpip.cpp: renamed from tcpip.c to tcpip.cpp 506 507 * src/main.cpp: renamed from main.c to main.cpp; 508 509 * src/util.cpp: renamed util.c; changed most "char *" to "const char *" 510 511 * src/flow.cpp: renamed flow.c to flow.cpp 512 513 2011-12-04 Simson Garfinkel <simsong@Alphonse-Mucha.local> 514 515 516 * configure.ac: increased version counter to 1.0.6 517 518 * src/tcpflow.h (flow_state_struct): added bytes_printed counter 519 520 * src/tcpip.c (print_packet): modified to respect bytes_per_flow 521 522 * configure.ac: increased version counter to 1.0.5 523 524 * src/sysdep.h: added #ifndef for ETHERTYPE_VLAN for Oracle Enterprise Linux. 525 526 2011-11-24 Simson Garfinkel <simsong@it006834.ern.nps.edu> 527 528 * configure.ac: increased version counter to 1.0.4 529 530 2011-10-13 Simson Garfinkel <simsong@alphonse-mucha.home> 531 532 * src/main.c (main): removed prepending of (ip or ip6 or vlan) from user expressions. We now just use what the user provided. 533 534 2011-09-30 Simson Garfinkel <simsong@alphonse-mucha.home> 535 536 * configure.ac: incremented version counter to 1.0.2 and re-released. 537 538 2011-09-20 Simson Garfinkel <simsong@alphonse-mucha> 539 540 * src/flow.c (open_file): replaced FGETPOS(flow_state->fp, &(flow_state->pos)) with ftell() 541 542 * src/tcpip.c (store_packet): FSETPOS replaced with fseek (it's better now than in 1999) 543 544 2011-09-20 Simson Garfinkel <simsong@Alphonse-Mucha.local> 545 546 * src/util.c: applied ipv6 patches 547 548 * src/tcpip.c: applied ipv6 patches 549 550 * src/tcpflow.h: applied ipv6 patches 551 552 * src/sysdep.h: applied ipv6 patches 553 554 * src/main.c: applied ipv6 patches 555 556 * src/datalink.c: applied ipv6 patches 557 558 * configure.ac: applied ipv6 patches. 559 560 * src/sysdep.h: removed standards.h and added sys/cdefs.h. 561 562 2011-04-14 Simson Garfinkel <simsong@Magneto.local> 563 564 * Makefile.am (EXTRA_DIST): added TODO.txt 565 566 2011-03-12 Simson Garfinkel <simsong@imac3.home> 567 568 * doc/tcpflow.1.in: updated doc to reflect new author and distribution point. 569 570 * src/main.c (print_usage): removed "by Jeremy Elson <jelson@circlemud.org>" from usage. 571 572 * src/util.c (flow_filename): vlan changed from [42] to --42 to avoid some shell issues. 573 574 * Applied debian patch 20_fix-usage, which fixed the usage statement. 575 576 2011-02-27 Simson Garfinkel <simsong@Silver-Surfer.local> 577 578 * manually applied debian patch 10_extra-opts, which improves color rendering and passes the state structure, rather than forcing it to be re-calculated. 579 580 2008-10-06 Simson Garfinkel <simsong@Silver-Surfer.local> 581 582 * src/flow.c (flow_same): created a flow_same() function to return true if two flows are the same (because we will be adding additional information to the flow) 583 (close_file): modified so that flows are timestamped with the time of the closing 584 585 * src/tcpflow.h: reimplemented portable_signal to return void, rather than RETSIGTYPE, since RETSIGTYPE hasn't been used for at least 15 years. 586 587 * src/sysdep.h: added #include <net/if_var.h> before #include <net/if.h> 588 589 * configure.ac: rewrote to remove patches for circa 2002 Linux bugs. Fixed prerequisite header for net/if.h 590 591 2003-08-07 Jeremy Elson <jelson@circlemud.org> 592 * Released v0.21. Sticking to my strict schedule of releasing at 593 least one minor release per year. :-) 594 595 2003-08-07 Jeremy Elson <jelson@circlemud.org> 596 597 * src/main.c: Fixed format string attack. Found by David 598 Goldsmith of atstake.com. 599 600 2002-03-29 Jeremy Elson <jelson@concorde.cs.ucla.edu> 601 602 * configure.in: Fixed --with-pcap (was broken since moving sources 603 into src) 604 605 2002-03-29 Jeremy Elson <jelson@circlemud.org> 606 607 * src/datalink.c: Added support for ISDN (/dev/ippp0), datalink 608 handler for DLT_LINUX_SLL. Contributed by Detlef Conradin 609 <dconradin at gmx.net> 610 611 2001-08-23 Jeremy Elson <jelson@circlemud.org> 612 613 * src/tcpip.c: fflush stdout in console print mode, from 614 suggestion of Andreas Schweitzer <andy at physast.uga.edu>, who 615 says "Otherwise, I can't redirect or pipe the console output. At 616 least on FreeBSD. I will check later today if this also cures the 617 same problems I had on OpenBSD." 618 619 620 2001-02-26 Jeremy Elson <jelson@circlemud.org> 621 622 * Released version 0.20. 623 624 * util.c, main.c: we now catch SIGTERM, SIGINT and SIGHUP, and 625 call exit(). Should give libpcap a chance to reset the interface 626 state (it calls onexit()). 627 628 * main.c, tcpflow.1.in: Added patch from "Jose M. Alcaide" <jose 629 at we.lc.ehu.es> (FreeBSD port maintainer) so that tcpflow can 630 read from tcpdump output files. 631 632 2000-01-12 Jeremy Elson <jelson@circlemud.org> 633 634 * tcpflow.spec.in: New file for creating RPMs, submitted by Ross 635 Golder <rossigee at bigfoot.com>. 636 637 * configure.in: Added generation of tcpflow.spec 638 * Makefile.am: Added distribution of tcpflow.spec.in 639 640 1999-04-20 Jeremy Elson <jelson@circlemud.org> 641 642 * Released version 0.12. 643 644 1999-04-20 Jeremy Elson <jelson@circlemud.org> 645 646 * tcpflow.1.in: Updated man page. 647 648 * main.c (main): libpcap, when running under Linux, doesn't seem 649 to be able to handle filtering expressions when using DLT_NULL 650 (usually the loopback interface -- i.e. "localhost"), so we don't 651 allow those expressions and print a warning if the user is trying 652 to use one. Controlled via the DLT_NULL_BROKEN define in conf.h. 653 * datalink.c (dl_null): We no longer check that the datalink type 654 is AF_INET if DLT_NULL_BROKEN is defined. 655 * configure.in: Added AC_CANONICAL_SYSTEM, and define 656 DLT_NO_BROKEN if we are using Linux. 657 * acconfig.h: Added entry for DLT_NULL_BROKEN. 658 659 * tcpflow.h: We use __attribute__ now only if __GNUC__ is defined, 660 so that the code compiles on non-GCC compilers. 661 662 * configure.in: Check for standards.h, for IRIX compatibility. 663 (I have a custom autoconf that I changed to automatically #include 664 standards.h, if the check succeeds, in future header file checks.) 665 * sysdep.h: Conditional #include <standards.h> added. 666 667 * configure.in: Only check for -lnsl if gethostbyaddr() doesn't 668 work without it; same for -lsocket and socket(). 669 670 * tcpip.c (process_ip, process_tcp, do_strip_nonprint, 671 print_packet, store_packet): Changed to take a u_char. 672 * tcpflow.h: Changed packet handling function argument prototypes 673 and return values to use u_char instead of char. 674 * configure.in: Added checking for u_char. 675 * acconfig.h: Added entry for u_char. 676 677 * tcpip.c (process_ip, process_tcp): Added debugging messages. 678 679 * tcpip.c (store_packet): Changed debug level of messages. 680 681 1999-04-14 Jeremy Elson <jelson@circlemud.org> 682 683 * tcpip.c (store_packet): Now correctly checking the return value 684 of fwrite(). Pointed out by Johnny Tevessen <j.tevessen at gmx.net>. 685 686 1999-04-13 Jeremy Elson <jelson@circlemud.org> 687 688 * Released version 0.11. 689 690 1999-04-13 Jeremy Elson <jelson@circlemud.org> 691 692 * tcpip.c (process_ip): Portability: added typecast of an int to a 693 long, and changed the printf format to use a long (%ld) instead of 694 an int (%d). This is because some systems define these variables 695 as long to begin with. 696 * tcpip.c (store_packet): Same thing. 697 * util.c (init_debug): Same thing. 698 699 * main.c (print_usage): Added function to give help. 700 701 * sysdep.h: Linux libc5 systems have different names for certain 702 structures. Patch sent by Johnny Tevessen <j.tevessen at gmx.net> 703 704 * configure.in: All system header files are now detected by 705 autoconf and conditionally included in sysdep.h. 706 * sydep.h: Same. 707 * main.c: Same. 708 * tcpip.c: Same. 709 710 * Makefile.am (EXTRA_DIST): Changed from tcpflow.1 to tcpflow.1.in 711 to reflect the fact that tcpflow.1 is now created by 'configure'. 712 * configure.in: Same. 713 * tcpflow.1.in: Same. 714 715 * AUTHORS: Created & added initial entries. 716 717 1999-04-12 Jeremy Elson <jelson@circlemud.org> 718 719 * Initial public release. 720 721 722 723