credits

基于TCP/IP协议的网络入侵检测系统是在Linux平台下

Libnids author:

    Nergal <[e-mail]>


Corrections to make libnids build on *BSD; bugfixes, GNU autoconf support,
libnids(3) manpage, alpha platform problems solved:

    Dug Song <[e-mail]>


The fix of the problem with gcc 2.95 and 2.0.x asm code; the ideas of
nids_getfd(), nids_next():
    
    Adam Langley <[e-mail]>


The idea of ip_filter function

   Sebastian <[e-mail]>


WIN32 support

  Michael Davis <[e-mail]> 


Memory leak in tcp.c reported

  billzh <[e-mail]>, Rob Willis <[e-mail]>


Possible improper behaviour of notify()

  Rob Willis <[e-mail]>


Stupid bug found in nids_register_ip_frag()

   Gabe Wachob <[e-mail]>, Solar Designer <[e-mail]>


Patches to support libc5

  Solar Designer <[e-mail]>, Denis Ducamp <[e-mail]>


Requests for features, constructive critics

  Solar Designer <[e-mail]>


Support for token ring

  Vacuum <[e-mail]>


Alignment bug in hash.c

 Anders Thulin <[e-mail]>
 Ken Mandelberg <[e-mail]>


in.h missing in "configure" test programs. Damn, if a include file X needs 
structures defined in Y, why doesn't X include Y ? Stupid Solaris.

 Raymond Scott <[e-mail]>


dangerous typo found in libpcap.c, in code handling source routed frames 

 Keiji Takeda <[e-mail]>



Libnids uses libpcap and libnet libraries:
    
   LBNL Network Research Group <[e-mail]>
   ftp://ftp.ee.lbl.gov/libpcap.tar.Z

   Mike D. Schiffman <[e-mail]>
   route|daemon9 <[e-mail]>
   http://www.packetfactory.net/libnet
 
Libnids emulates algorithms present in Linux 2.0.36 kernel. The files
ip_fragment.c and ip_options.c are the modified respective files from Linux 
2.0.36 kernel source. The asm code used for checksums computing is taken
from Linux 2.2.10 kernel source.