changelog

来自「netflow,抓包」· 代码 · 共 770 行 · 第 1/2 页

* 4-3-2003 flow-tools-0.66 released

* reapply flow-fanout linux patch, also infected flow-send

* 4-3-2003 flow-tools-0.65 released

* flow-send, flow-fanout: -s source IP address spoofing.

* build: builddir != srcdir problems - noted by [e-mail]

* build: All default config files installed by default.

* build: config files end in .cfg, symbol files end in .sym.  Note this changes
  the names of the default configuration files.

* ftlib: ftfil.c - random sample filter - reqested by
  Edward Balas <[e-mail]>

* ftlib: ftstat.c - ip-destination-address-source-count missing count - noted
  by Christian Cinetto <[e-mail]>

* build: example tags file installed by default.

* ftlib: ftstat.c - broken ip-source-address/ip-destination-port - noted
  by [e-mail]

* ftlib: ftstat.c - broken ip-destination-address/destination-as - noted
  by [e-mail]

* remove bin scripts (mostly historical OSU stuff)

* upgrade to automake 1.7.3 and autoconf 2.57

* docs: flow-report.sgml missing
    ip-source/destination-address/ip-protocol/ip-tos/ip-source/destination-port
  noted by [e-mail]

* flow-fanout: will not compile under linux - patch from
  [e-mail]

* ftlib: ftstat.c - use FMT_SYM_LEN instead of hard coded 32 byte length.
  increase len to 64 bytes.

* ftlib: fmt.c - fmt_uint*s() did not properly null terminate when symbol
  strlen >= max - noted by [e-mail]

* 2-23-2003 flow-tools-0.64 released

* flow-fanout, flow-capture, flow-receive: add startup= to STAT: line

* docs: flow-fanout - missing -f -F - noted by [e-mail]

* flow-split: consuming too many resources, noted by [e-mail]

* ftlib: ftstat.c - rec2: in summary-detail report missing time_real field
  - noted by [e-mail]

* build: strouq() -> strtoull().  Check if strtoul() is really strtoull() -
  noted by [e-mail]

* ftlib: ftstat.c - protect potential divide by 0 errors - noted by
  [e-mail]

* flow-split: stag not initialized - patch from [e-mail]

* build: ftlib.h should not require ftconfig.h - noted by [e-mail]

* build: lib/ftconfig.h does not belong in dist - noted by [e-mail]

* ftlib: ftlib.h - FT_SO_RCV_BUFSIZE default to 4MB

* ftlib: suppport.c - bigsockbuf() - more agressive reduction on large
  buffers.  Report size.

* ftlib: ftmask.c - flow-mask: rn_deladdr(): failed.  Missing masklen
  set - noted by [e-mail]

* ftlib: ftfil.c - invert option to filter-definition req by [e-mail]

* ftlib: shadowed variable names - [e-mail]

* flow-cat: exit status 1 if no streams processed - req by
  [e-mail]

* ftlib: ftstat.c - bucket_dump_1(): loop typo noted by
  [e-mail]

* flow-capture: reload tags and filters with SIGHUP

* flow-import: format4 wire format.

* ftlib: ftstat.c - tag mask option should not require local tagging - noted
  by [e-mail]

* flow-*: catch extra command line args - noted by [e-mail]

* ftlib: fttag.c - fix ToS tagging, add ANY tagging.

* 12-12-2002 flow-tools-0.63 released

* ftlib: ftstat.c - More informative error message when invalid field -
  patch from [e-mail]

* docs: flow-capture - hosts.allow requires flow-capture-client, not
  flow-capture - noted by [e-mail]

* flow-capture: TCP client port should be same as UDP netflow port - noted
  by [e-mail]

* ftlib: ftfil.c: moved primitive initialization code to
  parse_primitive_type() to avoid state loss when 'default'
  or 'mask' keyword used before a permit/deny.

* ftlib: ftfil.c: tos, marked_tos, tcp_flags mask applied to flow not
  to a copy - noted by [e-mail]

* flow-export -f4 wire format - requested by [e-mail]

* docs: flow-print.sgml - document column headers.

* flow-report / ftstat.c - added runtime variable binding and output
  path substitution support, ie run with -v ROUTER=NYCM and use
  output path '/report/@ROUTER/report-out'

* ftlib: ftvar.c - variable binding functions.

* ftlib: ftstat.c - summary-detail report will produce core if no flows
  are processed - noted by [e-mail]

* docs: not all targets included in distribution - noted by
  Jeje <[e-mail]>

* ftlib: ftio.c byte order of output not always in synch with flags -
  noted by [e-mail]

* docs: flow-filter port correction - [e-mail] 

* ftlib: ftstat.c names option works with IP addresses -- DNS lookups.
  req by [e-mail]

* ftlib: ftstat.c: min_pps,max_pps,min_bps,max_bps calculations,
  reduce memory and CPU footprint if *ps calculations are not selected.
  req by [e-mail]

* ftlib: ftstat.c: linear-interpolated-flows-octets-packets,first,last,
  duration,ip-source-address/source-tag,ip-source-address/destination-tag,
  ip-destination-address/source-tag,ip-destination-address/destination-tag,
  ip-source/destination-address/source/destination-tag,
  ip-source/destination-address/ip-protocol/ip-tos reports.
  req by [e-mail]

* ftlib: ftstat.c: new fields, index,first,last
  req by [e-mail]

* ftlib: ftstat.c: integrated mask eval
  req by [e-mail]

* flow-mask: new - replace mask length based on prefix.
  req by [e-mail]

* ftlib: fttag.c: tag on tcp-src-port, tcp-dst-port, tcp-port, udp-src-port,
  udp-dst-port, udp-port, tos.
  req by [e-mail]

* ftlib: fttag.c: rework to use jump tables to support more match types
  w/o performance impact.

* flow-stat: -f32 did not have symbol lookups enabled, noted by
  Michael Redinger <[e-mail]

* docs: flow-tag man page example does not work - noted by
  [e-mail]

* flow-fanout: -V does not work, noted by [e-mail]

* 10-15-2002 flow-tools-0.62 released

* ftlib: ftstat.c: fcount displayed (flows counted in pps and bbs calcs)

* build: localstatedir no longer hardcoded to /var/ft.  man and html pages
  have localstatedir substitution.

* ftlib: ftstat.c: multiple output per report, output to a pipe,
  source/destination address format, source/destination address count
  report.

* flow-import: -m allows ascii input.  #:<fields> in ascii output
  automatically parsed as -m option.

* flow-export: fix -m, -m now allows ascii input, ie -m unix_secs,dpkts,doctets

* ftlib: ftstat.c masked tag not restored if filter evaluated to DENY.

* ftlib: ftstat.c bucket record count in header not correct.

* ftlib: ftstat.c ip-address and ip-port to pick up flow-stat -f7 and -f11
  style reports.  noted by [e-mail]

* flow-cat / flow-receive: Pay closer attention to FT_FIELD_CAP_START and
  FT_FIELD_CAP_END so a bogus capture period is not displayed on
  output from flow-receive > file.  noted by  [e-mail]

* flow-print: Missing leading 0's on msec formats, noted by
  [e-mail]

* ftlib: ftfil.c: use consistent naming with flow-report

* flow-fanout, flow-receive, flow-capture: handle interrupted recvmsg()
  syscall which happens on some linux MP configurations.

* ftlib: ftfil.c - pps/bps not handled correctly - patch from [e-mail]

* flow-print - format 24 from [e-mail]

* flow-import - Cisco NFC format from [e-mail]

* flow-capture - more informative err message on bind() failure - noted by
  [e-mail]

* docs: flow-capture.sgml - no -o option - noted by [e-mail]

* flow-search - remove hard coded path, noted by [e-mail]

* ftlib: ftdecode.c - ftpdu_verify() can segv on invalid packets < 4 bytes
  noted by Eric Stewart [e-mail]

* ftlib: ftfil.c - PERMIT/DENY reversed for many when default PERMIT --
  noted by [e-mail]

* ftlib: ftstat.c - tag mask before filter - noted by [e-mail]

* 8-27-2002 flow-tools-0.61 released

* ftlib: strtoull.c - missing ULLONG_MAX - noted by [e-mail]

* build: --with-mysql allows path, ie --with-mysql=/usr/local

* ftlib: ftstat.c - don't require FT_XFIELD_SRC_MASK / FT_XFIELD_DST_MASK -
  dynamically add the requirement when FT_STAT_OPT_PREFIX_* is set -
  noted by [e-mail]

* ftlib: ftio.c - more informative warning when trying to process non
  flow-tools files.

* ftlib: ftfile.c - more informative warning when ignoring files.

* ftlib: fttag.c - parser requires 'type' for a match and 'term' in a
  definition.

* ftlib: ftdecode.c - allow padded Cat 6K packets.

* flow-receive, flow-capture: no longer need ftio_set_xip() - noted by
  [e-mail]

* flow-tag, ftstat: allow retagging - noted by [e-mail]

* flow-cat: cleanup error message

* flow-export: len = 0, mysql typo

* ftlib: ftstat.c missed a few , - noted by [e-mail]

* 8-15-2002 flow-tools-0.60 released

* flow-capture,flow-receive,flow-fanout: add filter option.

* flow-export: MySQL support based on patch from [e-mail]

* ftlib: ftfil.c pps and bps filter.

* build: scripts in bin directory get installed

* build/ftlib: added BSD strtoull.c for DEC portability - noted by
  [e-mail]

* flow-report: future replacement for flow-stat

* ftlib: added ftstat.c - stats and report library

* ftlib:  FT_RECGET_* macros

* docs: updated documentation.

* configs: updated asn.txt and asn symbol file

* ftlib: fmt.c - fmt_ipv4prefix() was not processing 0/0 correctly.

* ftlib: ftfil.c - fix memory leak with ftd->name and ftfil->name

* ftlib: ftfil.c - delay primitive resolution until file is parsed
  -- a filter-definition can precede a filter-primitive 

* ftlib: ftfil.c - time only primitive implemented.  Req by [e-mail]

* 7-6-2002 flow-tools-0.59 released

* build: ftbuild.h created by configure

* ftlib: ftfil.c - time -> time-date

* flow-cat: -t start_time -T end_time options for file inclusion based on
  time/date.

* contrib: update pyflowtools to pyflowtools-0.3.tar.gz

* contrib: updated inter.net to Inter.netPH-1.3.tar.gz

* flow-stat: format 23 bug input/output are u_int16 not u_int8.  patch from
  [e-mail]

* ftlib: ftfil.c - too many hash bits, src/dst reversed, bzero() fed wrong
  size.  Noted by William Emmanuel S. Yu.

* flow-receive: tag_active should default to null not "".  noted by
  "Saro Hayan" <[e-mail]>

* 6-11-2002 flow-tools-0.58 released

* 0.57 dist stats: 815 downloads (651 unique).  253 mailing list members.

* ftlib: fttag.c cleanup, walk_free()

* signal() portability, potential SIGCHLD race condition in flow-capture.
  Noted by Jarkko Torppa <[e-mail]>

* flow-split: split on tags.

* flow-filter: -x nexthop_filter patch from Jen Linkova <[e-mail]>

* flow-capture,flow-receive: tagging integration.

* ftlib: ftio_header_print() updated for new 8.x agg methods

* flow-nfilter: new improved version of flow-filter

* ftlib: ftfil.c - new flow filtering library

* ftlib: import getdate.c

* ftlib: Unitialized variable in ftio_header_print - noted by 
  "Dutky, Steve" <[e-mail]>

* flow-capture,flow-fanout : -p pidfile option.
  req by "Ed Ravin" <[e-mail]>

* flow-filter,flow-tag,flow-xlate: -k (keep time) option.
  req by Annie Tong <[e-mail]>

* flow-gen: tos variance, v1005 support

* ftlib: byte order fix - noted by [e-mail]

* ftlib,flow-capture: fix memory leak - noted by [e-mail]

* flow-fanout: missing #include <time.h> - noted by [e-mail]

* build: autoconf/automake update 2.53/1.6.1

* 4-20-2002 flow-tools-0.57 released

* 0.56 dist stats: 1512 downloads (1269 unique).  209 mailing list members.

* flow-print: avoid divide by 0 when processing corrupt flows (dPkts=0)

* flow-filter: add -o option to OR instead of AND filters.  From
  Cougar <[e-mail]>

* ftlib: ftfile_pathname() would not properly generate pathnames for
  nesting level -1 and -2.  Patch from Arvids <[e-mail]>,
  also fixed by Chris Timmons <[e-mail]>.

* docs: add .sgml source to distribution

* contrib: add Robin Sommer's pyflowtools (Python module for ftlib)

* contrib: update inter.net

* flow-fanout: support multiple exporters.  Add -S stat_inverval

* flow-tag: new utility.  Tag flows using fttag logic.

* docs: clean up html formatting of man pages

* flow-xlate: add -tT options to mask tag