changelog

来自「netflow,抓包」· 代码 · 共 770 行 · 第 1/2 页

* flow-print: add format 9 for tagged flows

* tcp-port: Joe St Sauver <[e-mail]> - Napster, FastTrack,
  Gnutella, etc

* flow-send: accept -V and -m flags

* flow-capture: tcp client support

* flow-stat: use system qsort() instead of internal.

* build/code: misc harmless compiler warning cleanups

* build/code: install ftlib.a in prefix/lib, install ftlib header files
  in prefix/include.  Remove HAVE_CONFIG_H dependency.  Combine header
  files in to ftlib.h

* build: ftbuild.sh hostname -s is not portable, whoami may not be in path

* ftlib: fttag.c tag flows based on ASN, Prefix, or Next-Hop

* ftlib: support.[ch] scan_ip_prefix()

* ftlib: ftchash.c sort_offset is not static

* flow-xlate: count total flows for -d1 stats, default to no compression

* ftlib: import NetBSD radix.c

* flow-merge: E. Larry Lidz <[e-mail]> not processing all
  flows in certain cases.

* flow-export: V1005 mask not set for version 1005 

* flow-print: fix -f2 core dump (introduced in 0.56)

* flow-export: fix -f1 core dump (introduced in 0.56)

* 12-28-2001 flow-tools-0.56 released

* cleanup -h in all.  Add build information via ftbuild.h

* New SGML documentation.

* Dave Plonka <[e-mail]>: patch to allow more file rotations
  per day.

* flow-filter works with the v8 formats.

* Jos Backus <[e-mail]> Superfluous trailing \0's in string literals
  (actually just need to remove old progname globals)

* Maxim Konovalov <[e-mail]>: use const for fterr_* formats.

* Paul Dokas <[e-mail]>: contrib find_scanners.  Perl script to
  provide compact summarizations of top in/out ip's, ports, etc.

* version 8.6 - 8.14 support
  DESTONLY,SRC_DEST,FULL_FLOW,AS_TOS,PROT_PORT_TOS,SRC_PREFIX_TOS,
  DST_PREFIX_TOS,PREFIX_TOS,PREFIX_PORT_TOS

* -T TCP flags filter option to flow-filter

* Robert Wariua [e-mail] : contrib acl-filter.tgz.
  mrtd + NetFlow.  community and as-path acl's.

* Updated inter.net contrib.

* flow-capture - -R option to specify program to execute on rotate.  Based on
  patch from Stefan Stefanov <[e-mail]>

* flow-capture,flow-receive - store exporter IP when multiple exporters instead
  of 0.  patch from Dave Plonka <[e-mail]> and
  Jos Backus <[e-mail]>

* Solaris compile problem - noted by Dave Hartzell <[e-mail]

* Sif Dif in flow-print format4 and -w - 
  Everton da Silva Marques <[e-mail]>

* initial support for v1005 - tagged version 5

* off by one malloc() bugs in ftio.c and support.c -- core dump noted by
  Ferry Korving <[e-mail]> and probably
  "Devon True" <[e-mail]>

* flow-cat: o: not i: in getopt - Heiko Schlichting <[e-mail]>

* 7-17-2001 flow-tools-0.55 released

* flow-receive,flow-capture: -S option to emit processed packets every n 
  minutes.

* flow-receive,flow-capture: accept wildcard source IP, demux on src_ip,
  dst_ip, and d_version.  xlate to common version when possible.

* flow-stat: update to use ftsym_*()

* flow-stat: format 1,2,3 use hash tables instead of possible overflow

* flow-print: wide output option

* flow-print: update to use ftsym_*()

* ftsym_*() implementation.  Dynamic symbol table support.

* scan_ip() will try gethostbyname() if arg looks like a hostname.

* flow-cat: preload header option (-p).  Prescans flow files to create
  better output header.

* Wilhelm Becker <[e-mail]>
  set SO_REUSEADDR on multicast socket
  ttl is u_char, not int

* added flow-import: import flows from cflowd or ASCII CSV formats

* Dave Plonka <[e-mail]> - patch for configure to emit an
  error message if zlib not found.

* flow-profile: removed.  Outdated ugly hack.

* flow-export: cflowd binary file implementation.

* fixed off by one bug in fmt_uint8() when formatting value >99

* flow-xlate: Disable header rewrite (stdin)

* flow-export: ASCII CSV (comma separated value) implementation.

* flow-stat: update to use fts3rec_compute_offsets().  Full support for v8.

* flow-stat: engine_type and engine_id reports

* added fts3rec_compute_offsets() - provides a cleaner way to handle
  the many export versions.

* 6-22-2001 flow-tools-0.54 released

* added flow-xlate.  Allow translations including packet/byte scaling,
  AS 0 substitution, classful address masking, flow mask address masking,
  and privacy mask. Translate among export version 1, 5, 6, and 7.

* Wilhelm Becker <[e-mail]> - ftio_write() and
  ftio_close() not properly updating bytes written.  Add header size to
  total size in flow-capture. -E now works in flow-capture again.

* added reference to flow-extract in contrib/README

* flow-stat: more informative header -- suggested by stanislav shalunov
  <[e-mail]>

* fixed bug: if using mmap'd files and the flow-file had no records a warning
  would be displayed and a single corrupt record would be returned by
  ftio_read()

* added Dave Plonka's Cflow perl module to the contrib area.

* added inter.net work from Miguel A.L. Paraz <[e-mail]> and
  William Emmanuel S. Yu <[e-mail]> to contrib area.  Utils
  to work with prefix lists and reporting scripts.

* flow-stat: format24-26 src prefix, dst prefix, src/dst prefix fopd

* committed E. Larry Lidz" <[e-mail]> flow-merge.c

* flow-stat: format23 - Input/Output interface flows,octets,packets,duration

* flow-stat: option -w (wide output).  Default to not printing duration field.

* flow-stat: move large arrays off the stack

* flow-stat: implement format21 - src/dst AS flows,octets,packets,duration
  report

* removed -C option to flow-stat (summarize to classful IP networks) --
  use flow-xlate instead

* flow-stat: implemented sorting options for formats which use hash tables
  (src ip, dst ip, ip, nexthop, src/dst ip)

* integrate Dave Plonka <[e-mail]>'s offsetof() method for
  computing structure element offsets.  Fixes v1 export packet decode.

* Added ToS filter capability to flow-filter

* Juniper v8 hack.  Juniper sets v8 aggregation version to 0 instead of
  2.  Reported by Jerome Fleury <[e-mail]>

* updated flow-stat to use ftchash_*

* new ftchash_* - generalized constant hash implementation to replace
  hash_ip*.c

* flow-stat - fixed bug in hash_ip.c hash_ip2.c where etime not updated on
  initial allocation

* flow-capture, flow-receive -m option.  Mask ip addresses (srcaddr,dstaddr)
  in version 1,5,6,7 with privacy mask.  Defaults to 255.255.255.255.
  Does not alter multicast S,G's.

* flow-capture, flow-send, flow-receive, flow-fanout call bigsockbuf() to
  allocate large socket buffers instead of setsockopt() directly.

* bigsockbuf() implementation.  Instead of using a hard coded value
  when attempting to extend the socket buffer size which can vary
  among systems, guess, then decrement by 512 bytes on failure until
  success.  Noted by [e-mail]

* flow-fanout handle signals, log PDU version forwarding.

* flow-fanout checks sequence numbers, version, and verifies integrity
  of received packets before forwarding

* flow-capture, flow-fanout utilize fterr_setexit() to ensure removal of
  pidfile.

* fterr_setxit() implementation

* flow-gen - do not create bogus flows, use more reasonable initialization.
  Noted by Robert Hough <[e-mail]>

* flow-stat - ignore bogus 0 packet flows instead of divide by 0
  Noted by Robert Hough <[e-mail]>

* working docs/Makefile.am

* 4-24-2001 flow-tools-0.53 released

* Solaris portability buglets

* flow-fanout,flow-receive,flow-capture support joining a multicast group
  for receiving flows localip/remoteip/port is replaced by s/g/port

* flow-send,flow-fanout set the ttl if the destination address is multicast
  localip/remoteip/port -> localip/remoteip/port/ttl.  TTL defaults to 0.

* flow-fanout maintaines pidfile

* flow-fanout will honor SIGQUIT

* flow-capture will unlink pid file on exit

* flow-capture log SIGQUIT and SIGHUP

* flow-capture will honor SIGQUIT before processing a file

* flow-fanout daemonizes by default

* flow-fanout,flow-capture,flow-send,flow-receive all use common format
  to describe peer - localip/remoteip/port

* flow-send,flow-fanout can set local IP address when sending

* flow-receive,flow-capture,flow-fanout can bind to a specific local IP

* added directory support to flow-cat

* added directory support to flow-capture and flow-expire

* flow-cat all command line options not processed due to unbalanced "

* flow-capture - filenames generated have +- GMT offset
  (example from Dave Plonka <[e-mail]>)

* ftio_set_ver(): use new ver struct for updating ftio->fth.fields, not old
  (broken v8 files)

* fttlv_enc_uint8(): 1 byte encoding, not 2
  (broken v8 files)

* 4-8-2001 flow-tools 0.52 released

* prepend FT_ to QUEUE* functions to prevent conflicting with BSDI's
  sys/queue.h

* flow-stat.c stat0() also report in realtime.

* fterr.c portablilty

* 3-14-2001 flow-tools 0.51 released

* Fixed byte ordering problem with flow-fanout

* Added ToS based format to flow-stat

* [e-mail] time fields byte order problem on BIG_ENDIAN

* Added Miguel A.L. Paraz <[e-mail]> flow-split to contrib

* flow-capture header size rewrite fix

* fixed longword alignment problem in ftio_write_header()

* generalized error/warning/info with fterr_*()

* 3-11-2001 flow-tools 0.50 released

* added mmap() support for reading flows.  flow-cat can enable it.

* initial implementation of ifName:ifIndex and alias mappings.  flow-receive
  and flow-capture will add the mappings if they exist.

* added SECURITY document

* flow-cat handles ^C

* new tool, flow-split.  Split a flow stream based on # of flows or time

* fixed sequence # calculation when encoding

* stream version 3 -- variable length header, exporter ip in flows.
  note, version 2 not supported.

* fixed memory dealloc / potential core dump on exit bug in flow-dscan.c

* new utility flow-header to just dump the header of a file/stream

* flow-capture and flow-receive update lost flows and sequence resets in
  header

* flow-receive rewrites header on close and updates fields properly

* flow-capture and flow-receive update new exporter_ip field in header

* 2-21-2001 flow-tools 0.411 released

* Andrey Zolotnicky" <[e-mail]> detach in flow-capture main() shadows
  global

* Andrey Zolotnicky" <[e-mail]> ftpdu_check_seq() fix

* 2-20-2001 flow-tools 0.41 released

* html and man docs included in make dist

* ftpdu_check_seq() implementation.  Check and report errors with
  received sequence numbers

* include everything needed for lex/yacc to build acl* including yyerror()
  for linux

* use autoconf macros to include string.h / strings.h

* All files use config.h

* inspect return val of ftio_set_version() to bomb out earlier

* ftio_init(), and ftio_set_version properly return error

* flow-gen uses same -V format as flow-receive and flow-capture

* flow-receive and flow-capture have -I <ip address of exports> and 
  -V <PDU version expecting> options.  -I required for flow-capture

* resurrected flow-export hack to dump flows in pcap format

* ftset_init() - code simplify/cleanup

* AS 0 substitition option in flow-receive and flow-capture

* CFLAGS = -g -ansi -Wall

* ftio_set_nflows() uses u_int32 not u_int64

* flow-capture not properly updating nflows in header

* ftpdu_verify() implemented

* Miguel A.L. Paraz" <[e-mail] - potential unitialized return
  value in ftio_close()

* Added perl/ftprint - example of using flow-tools with perl

* Fixed autoconfig problem where everything was linked with lex/yacc libs

* Andrey Zolotnicky" <[e-mail]> - linux modifies timeval after select()
  - fixed flow-capture.c and flow-fanout.c

* 2-11-2001 flow-tools 0.40 released

* FT_IO_MAXDECODE and FT_IO_MAXENCODE bumped up to 4K