1Friday December 9, 2011. guy@alum.mit.edu. 2Summary for 1.2.1 libpcap release 3 Update README file. 4 Fix typoes in README.linux file. 5 Clean up some compiler warnings. 6 Fix Linux compile problems and tests for ethtool.h. 7 Treat Debian/kFreeBSD and GNU/Hurd as systems with GNU 8 toolchains. 9 Support 802.1 QinQ as a form of VLAN in filters. 10 Treat "carp" as equivalent to "vrrp" in filters. 11 Fix code generated for "ip6 protochain". 12 Add some new link-layer header types. 13 Support capturing NetFilter log messages on Linux. 14 Clean up some error messages. 15 Turn off monitor mode on exit for mac80211 interfaces on Linux. 16 Fix problems turning monitor mode on for non-mac80211 interfaces 17 on Linux. 18 Properly fail if /sys/class/net or /proc/net/dev exist but can't 19 be opened. 20 Fail if pcap_activate() is called on an already-activated 21 pcap_t, and add a test program for that. 22 Fix filtering in pcap-ng files. 23 Don't build for PowerPC on Mac OS X Lion. 24 Simplify handling of new DLT_/LINKTYPE_ values. 25 Expand pcap(3PCAP) man page. 26 27Sunday July 24, 2011. mcr@sandelman.ca. 28Summary for 1.2 libpcap release 29 All of the changes listed below for 1.1.1 and 1.1.2. 30 Changes to error handling for pcap_findalldevs(). 31 Fix the calculation of the frame size in memory-mapped captures. 32 Add a link-layer header type for STANAG 5066 D_PDUs. 33 Add a link-layer type for a variant of 3GPP TS 27.010. 34 Noted real nature of LINKTYPE_ARCNET. 35 Add a link-layer type for DVB-CI. 36 Fix configure-script discovery of VLAN acceleration support. 37 see http://netoptimizer.blogspot.com/2010/09/tcpdump-vs-vlan-tags.html 38 Linux, HP-UX, AIX, NetBSD and OpenBSD compilation/conflict fixes. 39 Protect against including AIX 5.x's <net/bpf.h> having been included. 40 Add DLT_DBUS, for raw D-Bus messages. 41 Treat either EPERM or EACCES as "no soup for you". 42 Changes to permissions on DLPI systems. 43 Add DLT_IEEE802_15_4_NOFCS for 802.15.4 interfaces. 44 45Fri. August 6, 2010. guy@alum.mit.edu. 46Summary for 1.1.2 libpcap release 47 Return DLT_ values, not raw LINKTYPE_ values from 48 pcap_datalink() when reading pcap-ng files 49 Add support for "wlan ra" and "wlan ta", to check the RA and TA 50 of WLAN frames that have them 51 Don't crash if "wlan addr{1,2,3,4}" are used without 802.11 52 headers 53 Do filtering on USB and Bluetooth capturing 54 On FreeBSD/SPARC64, use -fPIC - it's apparently necessary 55 Check for valid port numbers (fit in a 16-bit unsigned field) in 56 "port" filters 57 Reject attempts to put savefiles into non-blocking mode 58 Check for "no such device" for the "get the media types" ioctl 59 in *BSD 60 Improve error messages from bpf_open(), and let it do the error 61 handling 62 Return more specific errors from pcap_can_set_rfmon(); fix 63 documentation 64 Update description fetching code for FreeBSD, fix code for 65 OpenBSD 66 Ignore /sys/net/dev files if we get ENODEV for them, not just 67 ENXIO; fixes handling of bonding devices on Linux 68 Fix check for a constant 0 argument to BPF_DIV 69 Use the right version of ar when cross-building 70 Free any filter set on a savefile when the savefile is closed 71 Include the CFLAGS setting when configure was run in the 72 compiler flags 73 Add support for 802.15.4 interfaces on Linux 74 75Thu. April 1, 2010. guy@alum.mit.edu. 76Summary for 1.1.1 libpcap release 77 Update CHANGES to reflect more of the changes in 1.1.0. 78 Fix build on RHEL5. 79 Fix shared library build on AIX. 80 81Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu. 82Summary for 1.1.0 libpcap release 83 Add SocketCAN capture support 84 Add Myricom SNF API support 85 Update Endace DAG and ERF support 86 Add support for shared libraries on Solaris, HP-UX, and AIX 87 Build, install, and un-install shared libraries by default; 88 don't build/install shared libraries on platforms we don't support 89 Fix building from a directory other than the source directory 90 Fix compiler warnings and builds on some platforms 91 Update config.guess and config.sub 92 Support monitor mode on mac80211 devices on Linux 93 Fix USB memory-mapped capturing on Linux; it requires a new DLT_ 94 value 95 On Linux, scan /sys/class/net for devices if we have it; scan 96 it, or /proc/net/dev if we don't have /sys/class/net, even if 97 we have getifaddrs(), as it'll find interfaces with no 98 addresses 99 Add limited support for reading pcap-ng files 100 Fix BPF driver-loading error handling on AIX 101 Support getting the full-length interface description on FreeBSD 102 In the lexical analyzer, free up any addrinfo structure we got back 103 from getaddrinfo(). 104 Add support for BPF and libdlpi in OpenSolaris (and SXCE) 105 Hyphenate "link-layer" everywhere 106 Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations 107 In pcap_read_linux_mmap(), if there are no frames available, call 108 poll() even if we're in non-blocking mode, so we pick up 109 errors, and check for the errors in question. 110 Note that poll() works on BPF devices is Snow Leopard 111 If an ENXIO or ENETDOWN is received, it may mean the device has 112 gone away. Deal with it. 113 For BPF, raise the default capture buffer size to from 32k to 512k 114 Support ps_ifdrop on Linux 115 Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile 116 under cygwin. 117 Changes to Linux mmapped captures. 118 Fix bug where create_ring would fail for particular snaplen and 119 buffer size combinations 120 Update pcap-config so that it handles libpcap requiring 121 additional libraries 122 Add workaround for threadsafeness on Windows 123 Add missing mapping for DLT_ENC <-> LINKTYPE_ENC 124 DLT: Add DLT_CAN_SOCKETCAN 125 DLT: Add Solaris ipnet 126 Don't check for DLT_IPNET if it's not defined 127 Add link-layer types for Fibre Channel FC-2 128 Add link-layer types for Wireless HART 129 Add link-layer types for AOS 130 Add link-layer types for DECT 131 Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups) 132 Install headers unconditionally, and include vlan.h/bluetooth.h if 133 enabled 134 Autoconf fixes+cleanup 135 Support enabling/disabling bluetooth (--{en,dis}able-bluetooth) 136 Support disabling SITA support (--without-sita) 137 Return -1 on failure to create packet ring (if supported but 138 creation failed) 139 Fix handling of 'any' device, so that it can be opened, and no longer 140 attempt to open it in Monitor mode 141 Add support for snapshot length for USB Memory-Mapped Interface 142 Fix configure and build on recent Linux kernels 143 Fix memory-mapped Linux capture to support pcap_next() and 144 pcap_next_ex() 145 Fixes for Linux USB capture 146 DLT: Add DLT_LINUX_EVDEV 147 DLT: Add DLT_GSMTAP_UM 148 DLT: Add DLT_GSMTAP_ABIS 149 150Mon. October 27, 2008. ken@netfunctional.ca. Summary for 1.0.0 libpcap release 151 Compile with IPv6 support by default 152 Compile with large file support on by default 153 Add pcap-config script, which deals with -I/-L flags for compiling 154 DLT: Add IPMB 155 DLT: Add LAPD 156 DLT: Add AX25 (AX.25 w/KISS header) 157 DLT: Add JUNIPER_ST 158 802.15.4 support 159 Variable length 802.11 header support 160 X2E data type support 161 SITA ACN Interface support - see README.sita 162 Support for memory-mapped capture on Linux 163 Support for zerocopy BPF on platforms that support it 164 Support for setting buffer size when opening devices 165 Support for setting monitor mode when opening 802.11 devices 166 Better support for dealing with VLAN tagging/stripping on Linux 167 Fix dynamic library support on OSX 168 Return PCAP_ERROR_IFACE_NOT_UP if the interface isn't 'UP', so applications 169 can print better diagnostic information 170 Return PCAP_ERROR_PERM_DENIED if we don't have permission to open a device, so 171 applications can tell the user they need to go play with permissions 172 On Linux, ignore ENETDOWN so we can continue to capture packets if the 173 interface goes down and comes back up again. 174 On Linux, support new tpacket frame headers (2.6.27+) 175 On Mac OS X, add scripts for changing permissions on /dev/bpf* and launchd plist 176 On Solaris, support 'passive mode' on systems that support it 177 Fixes to autoconf and general build environment 178 Man page reorganization + cleanup 179 Autogenerate VERSION numbers better 180 181Mon. September 10, 2007. ken@xelerance.com. Summary for 0.9.8 libpcap release 182 Change build process to put public libpcap headers into pcap subir 183 DLT: Add value for IPMI IPMB packets 184 DLT: Add value for u10 Networks boards 185 Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted 186 libpcap files on an OS other than where the file was generated 187 188Wed. April 25, 2007. ken@xelerance.com. Summary for 0.9.6 libpcap release 189 190 Put the public libpcap headers into a pcap subdirectory in both the 191 source directory and the target include directory, and have include 192 files at the top-level directory to include those headers, for 193 backwards compatibility. 194 Add Bluetooth support 195 Add USB capturing support on Linux 196 Add support for the binary USB sniffing interface in Linux 197 Add support for new FreeBSD BIOCSDIRECTION ioctl 198 Add additional filter operations for 802.11 frame types 199 Add support for filtering on MTP2 frame types 200 Propagate some changes from the main branch, so the x.9 branch has 201 all the DLT_ and LINKTYPE_ values that the main branch does 202 Reserved a DLT_ and SAVEFILE_ value for PPI (Per Packet Info) 203 encapsulated packets 204 Add LINKTYPE_ for IEEE 802.15.4, with address fields padded as done 205 by Linux drivers 206 Add LINKTYPE_ value corresponding to DLT_IEEE802_16_MAC_CPS. 207 Add DLT for IEEE 802.16 (WiMAX) MAC Common Part Sublayer 208 Add DLT for Bluetooth HCI UART transport layer 209 When building a shared library, build with "-fPIC" on Linux to support x86_64 210 Link with "$(CC) -shared" rather than "ld -shared" when building a 211 ".so" shared library 212 Add support for autoconf 2.60 213 Fixes to discard unread packets when changing filters 214 Changes to handle name changes in the DAG library resulting from 215 switching to libtool. 216 Add support for new DAG ERF types. 217 Add an explicit "-ldag" when building the shared library, so the DAG 218 library dependency is explicit. 219 Mac OSX fixes for dealing with "wlt" devices 220 Fixes in add_or_find_if() & pcap_findalldevs() to optimize generating 221 device lists 222 Fixed a bug in pcap_open_live(). The return value of PacketSetHwFilter 223 was not checked. 224 225Tue. September 19, 2006. ken@xelerance.com. Summary for 0.9.5 libpcap release 226 227 Support for LAPD frames with vISDN 228 Support for ERF on channelized T1/E1 cards via DAG API 229 Fix capitalization that caused issues crossc compiling on Linux 230 Better failure detection on PacketGetAdapterNames() 231 Fixes for MPLS packet generation (link layer) 232 OP_PACKET now matches the beginning of the packet, instead of 233 beginning+link-layer 234 Add DLT/LINKTYPE for carrying FRF.16 Multi-link Frame Relay 235 Fix allocation of buffer for list of link-layer types 236 Added a new DLT and LINKTYPE value for ARINC 653 Interpartition Communcation Messages 237 Fixed a typo in a DLT value: it should start with DLT_ and not LINKTYPE_ 238 Redefined DLT_CAN20B and LINKTYPE_CAN20B as #190 (as this is the right value for CAN). 239 Added definition for DLT_A429 and LINKTYPE_A429 as #184. 240 Added a new DLT and LINKTYPE value for CAN v2.0B frames. 241 Add support for DLT_JUNIPER_VP. 242 Don't double-count received packets on Linux systems that 243 support the PACKET_STATISTICS getsockopt() argument on 244 PF_PACKET sockets. 245 Add support for DLT_IEEE802_11 and DLT_IEEE802_11_RADIO link 246 layers in Windows 247 Add support to build libpcap.lib and wpcap.dll under Cygnus and 248 MingW32. 249 250Mon. September 5, 2005. ken@xelerance.com. Summary for 0.9.4 libpcap release 251 252 Support for radiotap on Linux (Mike Kershaw) 253 Fixes for HP-UX 254 Support for additional Juniper link-layer types 255 Fixes for filters on MPLS-encapsulated packets 256 "vlan" filter fixed 257 "pppoed" and "pppoes" filters added; the latter modifies later 258 parts of the filter expression to look at the PPP headers and 259 headers in the PPP payload 260 261Tue. July 5, 2005. ken@xelerance.com. Summary for 0.9.3 libpcap release 262 263 Fixes for compiling on nearly every platform, 264 including improved 64bit support 265 MSDOS Support 266 Add support for sending packets 267 OpenBSD pf format support 268 IrDA capture (Linux only) 269 270Tue. March 30, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.3 release 271 272 Fixed minor problem in gencode.c that would appear on 64-bit 273 platforms. 274 Version number is now sane. 275 276Mon. March 29, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.2 release 277 278 updates for autoconf 2.5 279 fixes for ppp interfaces for freebsd 4.1 280 pcap gencode can generate code for 802.11, IEEE1394, and pflog. 281 282Wed. November 12, 2003. mcr@sandelman.ottawa.on.ca. Summary for 0.8 release 283 284 added pcap_findalldevs() 285 Win32 patches from NetGroup, Politecnico di Torino (Italy) 286 OpenBSD pf, DLT_PFLOG added 287 Many changes to ATM support. 288 lookup pcap_lookupnet() 289 Added DLT_ARCNET_LINUX, DLT_ENC, DLT_IEEE802_11_RADIO, DLT_SUNATM, 290 DLT_IP_OVER_FC, DLT_FRELAY, others. 291 Sigh. More AIX wonderfulness. 292 Document updates. 293 Changes to API: pcap_next_ex(), pcap_breakloop(), pcap_dump_flush(), 294 pcap_list_datalinks(), pcap_set_datalink(), 295 pcap_lib_version(), pcap_datalink_val_to_name(), 296 pcap_datalink_name_to_val(), new error returns. 297 298Tuesday, February 25, 2003. fenner@research.att.com. 0.7.2 release 299 300 Support link types that use 802.2 always, never, and sometimes. 301 Don't decrease the size of the BPF buffer from the default. 302 Support frame relay. 303 Handle 32-bit timestamps in DLPI, and pass the right buffer size. 304 Handle Linux systems with modern kernel but without 305 SOL_PACKET in the userland headers. 306 Linux support for ARPHRD_RAWHDLC. 307 Handle 32-bit timestamps in snoop. 308 Support eg (Octane/O2xxx/O3xxx Gigabit) devices. 309 Add new reserved DLT types. 310 311Monday October 23, 2001. mcr@sandelman.ottawa.on.ca. Summary for 0.7 release 312 313 Added pcap_findalldevs() call to get list of interfaces in a MI way. 314 315 pcap_stats() has been documented as to what its counters mean on 316 each platform. 317 318Tuesday January 9, 2001. guy@alum.mit.edu. Summary for 0.6 release 319 320 New Linux libpcap implementation, which, in 2.2 and later 321 kernels, uses PF_PACKET sockets and supports kernel packet 322 filtering (if compiled into the kernel), and supports the "any" 323 device for capturing on all interfaces. Cleans up promiscuous 324 mode better on pre-2.2 kernels, and has various other fixes 325 (handles 2.4 ARPHRD_IEEE802_TR, handles ISDN devices better, 326 doesn't show duplicate packets on loopback interface, etc.). 327 328 Fixed HP-UX libpcap implementation to correctly get the PPA for 329 an interface, to allow interfaces to be opened by interface name. 330 331 libpcap savefiles have system-independent link-layer type values 332 in the header, rather than sometimes platform-dependent DLT_ 333 values, to make it easier to exchange capture files between 334 different OSes. 335 336 Non-standard capture files produced by some Linux tcpdumps, e.g. 337 the one from Red Hat Linux 6.2 and later, can now be read. 338 339 Updated autoconf stock files. 340 341 Filter expressions can filter on VLAN IDs and various OSI 342 protocols, and work on Token Ring (with non-source-routed 343 packets). 344 345 "pcap_open_dead()" added to allow compiling filter expressions 346 to pcap code without opening a capture device or capture file. 347 348 Header files fixed to allow use in C++ programs. 349 350 Removed dependancy on native headers for packet layout. 351 Removed Linux specific headers that were shipped. 352 353 Security fixes: Strcpy replaced with strlcpy, sprintf replaced 354 with snprintf. 355 356 Fixed bug that could cause subsequent "pcap_compile()"s to fail 357 erroneously after one compile failed. 358 359 Assorted other bug fixes. 360 361 README.aix and README.linux files added to describe 362 platform-specific issues. 363 364 "getifaddrs()" rather than SIOCGIFCONF used, if available. 365 366v0.5 Sat Jun 10 11:09:15 PDT 2000 367 368itojun@iijlab.net 369- Brought in KAME IPv6/IPsec bpf compiler. 370- Fixes for NetBSD. 371- Support added for OpenBSD DLT_LOOP and BSD/OS DLT_C_HDLC (Cisco HDLC), 372 and changes to work around different BSDs having different DLT_ types 373 with the same numeric value. 374 375Assar Westerlund <assar@sics.se> 376- Building outside the source code tree fixed. 377- Changed to write out time stamps with 32-bit seconds and microseconds 378 fields, regardless of whether those fields are 32 bits or 64 bits in 379 the OS's native "struct timeval". 380- Changed "pcap_lookupdev()" to dynamically grow the buffer into which 381 the list of interfaces is read as necessary in order to hold the 382 entire list. 383 384Greg Troxel <gdt@ir.bbn.com> 385- Added a new "pcap_compile_nopcap()", which lets you compile a filter 386 expression into a BPF program without having an open live capture or 387 capture file. 388 389v0.4 Sat Jul 25 12:40:09 PDT 1998 390 391- Fix endian problem with DLT_NULL devices. From FreeBSD via Bill 392 Fenner (fenner@parc.xerox.com) 393 394- Fix alignment problem with FDDI under DLPI. This was causing core 395 dumps under Solaris. 396 397- Added configure options to disable flex and bison. Resulted from a 398 bug report by barnett@grymoire.crd.ge.com (Bruce Barnett). Also added 399 options to disable gcc and to force a particular packet capture type. 400 401- Added support for Fore ATM interfaces (qaa and fa) under IRIX. Thanks 402 to John Hawkinson (jhawk@mit.edu) 403 404- Change Linux PPP and SLIP to use DLT_RAW since the kernel does not 405 supply any "link layer" data. 406 407- Change Linux to use SIOCGIFHWADDR ioctl to determine link layer type. 408 Thanks to Thomas Sailer (sailer@ife.ee.ethz.ch) 409 410- Change IRIX PPP to use DLT_RAW since the kernel does not supply any 411 "link layer" data. 412 413- Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header 414 formats. 415 416- Added some new SGI snoop interface types. Thanks to Steve Alexander 417 (sca@refugee.engr.sgi.com) 418 419- Fixes for HP-UX 10.20 (which is similar to HP-UX 9). Thanks to 420 Richard Allen (ra@hp.is) and Steinar Haug (sthaug@nethelp.no) 421 422- Fddi supports broadcast as reported by Jeff Macdonald 423 (jeff@iacnet.com). Also correct ieee802 and arcnet. 424 425- Determine Linux pcap buffer size at run time or else it might not be 426 big enough for some interface types (e.g. FDDI). Thanks to Jes 427 Sorensen (Jes.Sorensen@cern.ch) 428 429- Fix some linux alignment problems. 430 431- Document promisc argument to pcap_open_live(). Reported by Ian Marsh 432 (ianm@sics.se) 433 434- Support Metricom radio packets under Linux. Thanks to Kevin Lai 435 (laik@gunpowder.stanford.edu) 436 437- Bind to interface name under Linux to avoid packets from multiple 438 interfaces on multi-homed hosts. Thanks to Kevin Lai 439 (laik@gunpowder.stanford.edu) 440 441- Change L_SET to SEEK_SET for HP-UX. Thanks to Roland Roberts 442 (rroberts@muller.com) 443 444- Fixed an uninitialized memory reference found by Kent Vander Velden 445 (graphix@iastate.edu) 446 447- Fixed lex pattern for IDs to allow leading digits. As reported by 448 Theo de Raadt (deraadt@cvs.openbsd.org) 449 450- Fixed Linux include file problems when using GNU libc. 451 452- Ifdef ARPHRD_FDDI since not all versions of the Linux kernel have it. 453 Reported reported by Eric Jacksch (jacksch@tenebris.ca) 454 455- Fixed bug in pcap_dispatch() that kept it from returning on packet 456 timeouts. 457 458- Changed ISLOOPBACK() macro when IFF_LOOPBACK isn't available to check 459 for "lo" followed by an eos or digit (newer versions of Linux 460 apparently call the loopback "lo" instead of "lo0"). 461 462- Fixed Linux networking include files to use ints instead of longs to 463 avoid problems with 64 bit longs on the alpha. Thanks to Cristian 464 Gafton (gafton@redhat.com) 465 466v0.3 Sat Nov 30 20:56:27 PST 1996 467 468- Added Linux support. 469 470- Fixed savefile bugs. 471 472- Solaris x86 fix from Tim Rylance (t.rylance@elsevier.nl) 473 474- Add support for bpf kernel port filters. 475 476- Remove duplicate atalk protocol table entry. Thanks to Christian 477 Hopps (chopps@water.emich.edu) 478 479- Fixed pcap_lookupdev() to ignore nonexistent devices. This was 480 reported to happen under BSD/OS by David Vincenzetti 481 (vince@cryptonet.it) 482 483- Avoid solaris compiler warnings. Thanks to Bruce Barnett 484 (barnett@grymoire.crd.ge.com) 485 486v0.2.1 Sun Jul 14 03:02:26 PDT 1996 487 488- Fixes for HP-UX 10. Thanks in part to to Thomas Wolfram 489 (wolf@prz.tu-berlin.de) and Rick Jones (raj@hpisrdq.cup.hp.com) 490 491- Added support for SINIX. Thanks to Andrej Borsenkow 492 (borsenkow.msk@sni.de) 493 494- Fixes for AIX (although this system is not yet supported). Thanks to 495 John Hawkinson (jhawk@mit.edu) 496 497- Use autoconf's idea of the top level directory in install targets. 498 Thanks to John Hawkinson. 499 500- Add missing autoconf packet capture result message. Thanks to Bill 501 Fenner (fenner@parc.xerox.com) 502 503- Fixed padding problems in the pf module. 504 505- Fixed some more alignment problems on the alpha. 506 507- Added explicit netmask support. Thanks to Steve Nuchia 508 (steve@research.oknet.com) 509 510- Fixed to handle raw ip addresses such as 0.0.0.1 without "left 511 justifing" 512 513- Add "sca" keyword (for DEC cluster services) as suggested by Terry 514 Kennedy (terry@spcvxa.spc.edu) 515 516- Add "atalk" keyword as suggested by John Hawkinson. 517 518- Add "igrp" keyword. 519 520- Fixed HID definition in grammar.y to be a string, not a value. 521 522- Use $CC when checking gcc version. Thanks to Carl Lindberg 523 (carl_lindberg@blacksmith.com) 524 525- Removed obsolete reference to pcap_immediate() from the man page. 526 Michael Stolarchuk (mts@terminator.rs.itd.umich.edu) 527 528- DLT_NULL has a 4 byte family header. Thanks to Jeffrey Honig 529 (jch@bsdi.com) 530 531v0.2 Sun Jun 23 02:28:42 PDT 1996 532 533- Add support for HP-UX. Resulted from code contributed by Tom Murray 534 (tmurray@hpindck.cup.hp.com) and Philippe-Andri Prindeville 535 (philipp@res.enst.fr) 536 537- Update INSTALL with a reminder to install include files. Thanks to 538 Mark Andrews (mandrews@aw.sgi.com) 539 540- Fix bpf compiler alignment bug on the alpha. 541 542- Use autoconf to detect architectures that can't handle misaligned 543 accesses. 544 545- Added loopback support for snoop. Resulted from report Steve 546 Alexander (sca@engr.sgi.com) 547 548v0.1 Fri Apr 28 18:11:03 PDT 1995 549 550- Fixed compiler and optimizer bugs. The BPF filter engine uses unsigned 551 comparison operators, while the code generator and optimizer assumed 552 signed semantics in several places. Thanks to Charlie Slater 553 (cslater@imatek.com) for pointing this out. 554 555- Removed FDDI ifdef's, they aren't really needed. Resulted from report 556 by Gary Veum (veum@boa.gsfc.nasa.gov). 557 558- Add pcap-null.c which allows offline use of libpcap on systems that 559 don't support live package capture. This feature resulting from a 560 request from Jan van Oorschot (j.p.m.voorschot@et.tudelft.nl). 561 562- Make bpf_compile() reentrant. Fix thanks to Pascal Hennequin 563 (Pascal.Hennequin@hugo.int-evry.fr). 564 565- Port to GNU autoconf. 566 567- Fix pcap-dlpi.c to work with isdn. Resulted from report by Flemming 568 Johansen (fsj@csd.cri.dk). 569 570- Handle multi-digit interface unit numbers (aka ppa's) under dlpi. 571 Resulted from report by Daniel Ehrlich (ehrlich@cse.psu.edu). 572 573- Fix pcap-dlpi.c to work in non-promiscuous mode. Resulted from report 574 by Jeff Murphy (jcmurphy@acsu.buffalo.edu). 575 576- Add support for "long jumps". Thanks to Jeffrey Mogul 577 (mogul@pa.dec.com). 578 579- Fix minor problems when compiling with BDEBUG as noticed by Scott 580 Bertilson (scott@unet.umn.edu). 581 582- Declare sys_errlist "const char *const" to avoid problems under 583 FreeBSD. Resulted from report by jher@eden.com. 584 585v0.0.6 Fri Apr 28 04:07:13 PDT 1995 586 587- Add missing variable declaration missing from 0.0.6 588 589v0.0.5 Fri Apr 28 00:22:21 PDT 1995 590 591- Workaround for problems when pcap_read() returns 0 due to the timeout 592 expiring. 593 594v0.0.4 Thu Apr 20 20:41:48 PDT 1995 595 596- Change configuration to not use gcc v2 flags with gcc v1. 597 598- Fixed a bug in pcap_next(); if pcap_dispatch() returns 0, pcap_next() 599 should also return 0. Thanks to Richard Stevens (rstevens@noao.edu). 600 601- Fixed configure to test for snoop before dlpi to avoid problems under 602 IRIX 5. Thanks to J. Eric Townsend (jet@abulafia.genmagic.com). 603 604- Hack around deficiency in Ultrix's make. 605 606- Fix two bugs related to the Solaris pre-5.3.2 bufmod bug; handle 607 savefiles that have more than snapshot bytes of data in them (so we 608 can read old savefiles) and avoid writing such files. 609 610- Added checkioctl which is used with gcc to check that the 611 "fixincludes" script has been run. 612 613v0.0.3 Tue Oct 18 18:13:46 PDT 1994 614 615- Fixed configure to test for snoop before dlpi to avoid problems under 616 IRIX 5. Thanks to J. Eric Townsend (jet@abulafia.genmagic.com). 617 618v0.0.2 Wed Oct 12 20:56:37 PDT 1994 619 620- Implement timeout in the dlpi pcap_open_live(). Thanks to Richard 621 Stevens. 622 623- Determine pcap link type from dlpi media type. Resulted from report 624 by Mahesh Jethanandani (mahesh@npix.com). 625 626v0.0.1 Fri Jun 24 14:50:57 PDT 1994 627 628- Fixed bug in nit_setflags() in pcap-snit.c. The streams ioctl timeout 629 wasn't being initialized sometimes resulting in an "NIOCSFLAGS: 630 Invalid argument" error under OSF/1. Reported by Matt Day 631 (mday@artisoft.com) and Danny Mitzel (dmitzel@whitney.hitc.com). 632 633- Turn on FDDI support by default. 634 635v0.0 Mon Jun 20 19:20:16 PDT 1994 636 637- Initial release. 638 639- Fixed bug with greater/less keywords, reported by Mark Andrews 640 (mandrews@alias.com). 641 642- Fix bug where '|' was defined as BPF_AND instead of BPF_OR, reported 643 by Elan Amir (elan@leeb.cs.berkeley.edu). 644 645- Machines with little-endian byte ordering are supported thanks to 646 Jeff Mogul. 647 648- Add hack for version 2.3 savefiles which don't have caplen and len 649 swapped thanks to Vern Paxson. 650 651- Added "&&" and "||" aliases for "and" and "or" thanks to Vern Paxson. 652 653- Added length, inbound and outbound keywords.
| 20Friday December 9, 2011. guy@alum.mit.edu. 21Summary for 1.2.1 libpcap release 22 Update README file. 23 Fix typoes in README.linux file. 24 Clean up some compiler warnings. 25 Fix Linux compile problems and tests for ethtool.h. 26 Treat Debian/kFreeBSD and GNU/Hurd as systems with GNU 27 toolchains. 28 Support 802.1 QinQ as a form of VLAN in filters. 29 Treat "carp" as equivalent to "vrrp" in filters. 30 Fix code generated for "ip6 protochain". 31 Add some new link-layer header types. 32 Support capturing NetFilter log messages on Linux. 33 Clean up some error messages. 34 Turn off monitor mode on exit for mac80211 interfaces on Linux. 35 Fix problems turning monitor mode on for non-mac80211 interfaces 36 on Linux. 37 Properly fail if /sys/class/net or /proc/net/dev exist but can't 38 be opened. 39 Fail if pcap_activate() is called on an already-activated 40 pcap_t, and add a test program for that. 41 Fix filtering in pcap-ng files. 42 Don't build for PowerPC on Mac OS X Lion. 43 Simplify handling of new DLT_/LINKTYPE_ values. 44 Expand pcap(3PCAP) man page. 45 46Sunday July 24, 2011. mcr@sandelman.ca. 47Summary for 1.2 libpcap release 48 All of the changes listed below for 1.1.1 and 1.1.2. 49 Changes to error handling for pcap_findalldevs(). 50 Fix the calculation of the frame size in memory-mapped captures. 51 Add a link-layer header type for STANAG 5066 D_PDUs. 52 Add a link-layer type for a variant of 3GPP TS 27.010. 53 Noted real nature of LINKTYPE_ARCNET. 54 Add a link-layer type for DVB-CI. 55 Fix configure-script discovery of VLAN acceleration support. 56 see http://netoptimizer.blogspot.com/2010/09/tcpdump-vs-vlan-tags.html 57 Linux, HP-UX, AIX, NetBSD and OpenBSD compilation/conflict fixes. 58 Protect against including AIX 5.x's <net/bpf.h> having been included. 59 Add DLT_DBUS, for raw D-Bus messages. 60 Treat either EPERM or EACCES as "no soup for you". 61 Changes to permissions on DLPI systems. 62 Add DLT_IEEE802_15_4_NOFCS for 802.15.4 interfaces. 63 64Fri. August 6, 2010. guy@alum.mit.edu. 65Summary for 1.1.2 libpcap release 66 Return DLT_ values, not raw LINKTYPE_ values from 67 pcap_datalink() when reading pcap-ng files 68 Add support for "wlan ra" and "wlan ta", to check the RA and TA 69 of WLAN frames that have them 70 Don't crash if "wlan addr{1,2,3,4}" are used without 802.11 71 headers 72 Do filtering on USB and Bluetooth capturing 73 On FreeBSD/SPARC64, use -fPIC - it's apparently necessary 74 Check for valid port numbers (fit in a 16-bit unsigned field) in 75 "port" filters 76 Reject attempts to put savefiles into non-blocking mode 77 Check for "no such device" for the "get the media types" ioctl 78 in *BSD 79 Improve error messages from bpf_open(), and let it do the error 80 handling 81 Return more specific errors from pcap_can_set_rfmon(); fix 82 documentation 83 Update description fetching code for FreeBSD, fix code for 84 OpenBSD 85 Ignore /sys/net/dev files if we get ENODEV for them, not just 86 ENXIO; fixes handling of bonding devices on Linux 87 Fix check for a constant 0 argument to BPF_DIV 88 Use the right version of ar when cross-building 89 Free any filter set on a savefile when the savefile is closed 90 Include the CFLAGS setting when configure was run in the 91 compiler flags 92 Add support for 802.15.4 interfaces on Linux 93 94Thu. April 1, 2010. guy@alum.mit.edu. 95Summary for 1.1.1 libpcap release 96 Update CHANGES to reflect more of the changes in 1.1.0. 97 Fix build on RHEL5. 98 Fix shared library build on AIX. 99 100Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu. 101Summary for 1.1.0 libpcap release 102 Add SocketCAN capture support 103 Add Myricom SNF API support 104 Update Endace DAG and ERF support 105 Add support for shared libraries on Solaris, HP-UX, and AIX 106 Build, install, and un-install shared libraries by default; 107 don't build/install shared libraries on platforms we don't support 108 Fix building from a directory other than the source directory 109 Fix compiler warnings and builds on some platforms 110 Update config.guess and config.sub 111 Support monitor mode on mac80211 devices on Linux 112 Fix USB memory-mapped capturing on Linux; it requires a new DLT_ 113 value 114 On Linux, scan /sys/class/net for devices if we have it; scan 115 it, or /proc/net/dev if we don't have /sys/class/net, even if 116 we have getifaddrs(), as it'll find interfaces with no 117 addresses 118 Add limited support for reading pcap-ng files 119 Fix BPF driver-loading error handling on AIX 120 Support getting the full-length interface description on FreeBSD 121 In the lexical analyzer, free up any addrinfo structure we got back 122 from getaddrinfo(). 123 Add support for BPF and libdlpi in OpenSolaris (and SXCE) 124 Hyphenate "link-layer" everywhere 125 Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations 126 In pcap_read_linux_mmap(), if there are no frames available, call 127 poll() even if we're in non-blocking mode, so we pick up 128 errors, and check for the errors in question. 129 Note that poll() works on BPF devices is Snow Leopard 130 If an ENXIO or ENETDOWN is received, it may mean the device has 131 gone away. Deal with it. 132 For BPF, raise the default capture buffer size to from 32k to 512k 133 Support ps_ifdrop on Linux 134 Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile 135 under cygwin. 136 Changes to Linux mmapped captures. 137 Fix bug where create_ring would fail for particular snaplen and 138 buffer size combinations 139 Update pcap-config so that it handles libpcap requiring 140 additional libraries 141 Add workaround for threadsafeness on Windows 142 Add missing mapping for DLT_ENC <-> LINKTYPE_ENC 143 DLT: Add DLT_CAN_SOCKETCAN 144 DLT: Add Solaris ipnet 145 Don't check for DLT_IPNET if it's not defined 146 Add link-layer types for Fibre Channel FC-2 147 Add link-layer types for Wireless HART 148 Add link-layer types for AOS 149 Add link-layer types for DECT 150 Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups) 151 Install headers unconditionally, and include vlan.h/bluetooth.h if 152 enabled 153 Autoconf fixes+cleanup 154 Support enabling/disabling bluetooth (--{en,dis}able-bluetooth) 155 Support disabling SITA support (--without-sita) 156 Return -1 on failure to create packet ring (if supported but 157 creation failed) 158 Fix handling of 'any' device, so that it can be opened, and no longer 159 attempt to open it in Monitor mode 160 Add support for snapshot length for USB Memory-Mapped Interface 161 Fix configure and build on recent Linux kernels 162 Fix memory-mapped Linux capture to support pcap_next() and 163 pcap_next_ex() 164 Fixes for Linux USB capture 165 DLT: Add DLT_LINUX_EVDEV 166 DLT: Add DLT_GSMTAP_UM 167 DLT: Add DLT_GSMTAP_ABIS 168 169Mon. October 27, 2008. ken@netfunctional.ca. Summary for 1.0.0 libpcap release 170 Compile with IPv6 support by default 171 Compile with large file support on by default 172 Add pcap-config script, which deals with -I/-L flags for compiling 173 DLT: Add IPMB 174 DLT: Add LAPD 175 DLT: Add AX25 (AX.25 w/KISS header) 176 DLT: Add JUNIPER_ST 177 802.15.4 support 178 Variable length 802.11 header support 179 X2E data type support 180 SITA ACN Interface support - see README.sita 181 Support for memory-mapped capture on Linux 182 Support for zerocopy BPF on platforms that support it 183 Support for setting buffer size when opening devices 184 Support for setting monitor mode when opening 802.11 devices 185 Better support for dealing with VLAN tagging/stripping on Linux 186 Fix dynamic library support on OSX 187 Return PCAP_ERROR_IFACE_NOT_UP if the interface isn't 'UP', so applications 188 can print better diagnostic information 189 Return PCAP_ERROR_PERM_DENIED if we don't have permission to open a device, so 190 applications can tell the user they need to go play with permissions 191 On Linux, ignore ENETDOWN so we can continue to capture packets if the 192 interface goes down and comes back up again. 193 On Linux, support new tpacket frame headers (2.6.27+) 194 On Mac OS X, add scripts for changing permissions on /dev/bpf* and launchd plist 195 On Solaris, support 'passive mode' on systems that support it 196 Fixes to autoconf and general build environment 197 Man page reorganization + cleanup 198 Autogenerate VERSION numbers better 199 200Mon. September 10, 2007. ken@xelerance.com. Summary for 0.9.8 libpcap release 201 Change build process to put public libpcap headers into pcap subir 202 DLT: Add value for IPMI IPMB packets 203 DLT: Add value for u10 Networks boards 204 Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted 205 libpcap files on an OS other than where the file was generated 206 207Wed. April 25, 2007. ken@xelerance.com. Summary for 0.9.6 libpcap release 208 209 Put the public libpcap headers into a pcap subdirectory in both the 210 source directory and the target include directory, and have include 211 files at the top-level directory to include those headers, for 212 backwards compatibility. 213 Add Bluetooth support 214 Add USB capturing support on Linux 215 Add support for the binary USB sniffing interface in Linux 216 Add support for new FreeBSD BIOCSDIRECTION ioctl 217 Add additional filter operations for 802.11 frame types 218 Add support for filtering on MTP2 frame types 219 Propagate some changes from the main branch, so the x.9 branch has 220 all the DLT_ and LINKTYPE_ values that the main branch does 221 Reserved a DLT_ and SAVEFILE_ value for PPI (Per Packet Info) 222 encapsulated packets 223 Add LINKTYPE_ for IEEE 802.15.4, with address fields padded as done 224 by Linux drivers 225 Add LINKTYPE_ value corresponding to DLT_IEEE802_16_MAC_CPS. 226 Add DLT for IEEE 802.16 (WiMAX) MAC Common Part Sublayer 227 Add DLT for Bluetooth HCI UART transport layer 228 When building a shared library, build with "-fPIC" on Linux to support x86_64 229 Link with "$(CC) -shared" rather than "ld -shared" when building a 230 ".so" shared library 231 Add support for autoconf 2.60 232 Fixes to discard unread packets when changing filters 233 Changes to handle name changes in the DAG library resulting from 234 switching to libtool. 235 Add support for new DAG ERF types. 236 Add an explicit "-ldag" when building the shared library, so the DAG 237 library dependency is explicit. 238 Mac OSX fixes for dealing with "wlt" devices 239 Fixes in add_or_find_if() & pcap_findalldevs() to optimize generating 240 device lists 241 Fixed a bug in pcap_open_live(). The return value of PacketSetHwFilter 242 was not checked. 243 244Tue. September 19, 2006. ken@xelerance.com. Summary for 0.9.5 libpcap release 245 246 Support for LAPD frames with vISDN 247 Support for ERF on channelized T1/E1 cards via DAG API 248 Fix capitalization that caused issues crossc compiling on Linux 249 Better failure detection on PacketGetAdapterNames() 250 Fixes for MPLS packet generation (link layer) 251 OP_PACKET now matches the beginning of the packet, instead of 252 beginning+link-layer 253 Add DLT/LINKTYPE for carrying FRF.16 Multi-link Frame Relay 254 Fix allocation of buffer for list of link-layer types 255 Added a new DLT and LINKTYPE value for ARINC 653 Interpartition Communcation Messages 256 Fixed a typo in a DLT value: it should start with DLT_ and not LINKTYPE_ 257 Redefined DLT_CAN20B and LINKTYPE_CAN20B as #190 (as this is the right value for CAN). 258 Added definition for DLT_A429 and LINKTYPE_A429 as #184. 259 Added a new DLT and LINKTYPE value for CAN v2.0B frames. 260 Add support for DLT_JUNIPER_VP. 261 Don't double-count received packets on Linux systems that 262 support the PACKET_STATISTICS getsockopt() argument on 263 PF_PACKET sockets. 264 Add support for DLT_IEEE802_11 and DLT_IEEE802_11_RADIO link 265 layers in Windows 266 Add support to build libpcap.lib and wpcap.dll under Cygnus and 267 MingW32. 268 269Mon. September 5, 2005. ken@xelerance.com. Summary for 0.9.4 libpcap release 270 271 Support for radiotap on Linux (Mike Kershaw) 272 Fixes for HP-UX 273 Support for additional Juniper link-layer types 274 Fixes for filters on MPLS-encapsulated packets 275 "vlan" filter fixed 276 "pppoed" and "pppoes" filters added; the latter modifies later 277 parts of the filter expression to look at the PPP headers and 278 headers in the PPP payload 279 280Tue. July 5, 2005. ken@xelerance.com. Summary for 0.9.3 libpcap release 281 282 Fixes for compiling on nearly every platform, 283 including improved 64bit support 284 MSDOS Support 285 Add support for sending packets 286 OpenBSD pf format support 287 IrDA capture (Linux only) 288 289Tue. March 30, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.3 release 290 291 Fixed minor problem in gencode.c that would appear on 64-bit 292 platforms. 293 Version number is now sane. 294 295Mon. March 29, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.2 release 296 297 updates for autoconf 2.5 298 fixes for ppp interfaces for freebsd 4.1 299 pcap gencode can generate code for 802.11, IEEE1394, and pflog. 300 301Wed. November 12, 2003. mcr@sandelman.ottawa.on.ca. Summary for 0.8 release 302 303 added pcap_findalldevs() 304 Win32 patches from NetGroup, Politecnico di Torino (Italy) 305 OpenBSD pf, DLT_PFLOG added 306 Many changes to ATM support. 307 lookup pcap_lookupnet() 308 Added DLT_ARCNET_LINUX, DLT_ENC, DLT_IEEE802_11_RADIO, DLT_SUNATM, 309 DLT_IP_OVER_FC, DLT_FRELAY, others. 310 Sigh. More AIX wonderfulness. 311 Document updates. 312 Changes to API: pcap_next_ex(), pcap_breakloop(), pcap_dump_flush(), 313 pcap_list_datalinks(), pcap_set_datalink(), 314 pcap_lib_version(), pcap_datalink_val_to_name(), 315 pcap_datalink_name_to_val(), new error returns. 316 317Tuesday, February 25, 2003. fenner@research.att.com. 0.7.2 release 318 319 Support link types that use 802.2 always, never, and sometimes. 320 Don't decrease the size of the BPF buffer from the default. 321 Support frame relay. 322 Handle 32-bit timestamps in DLPI, and pass the right buffer size. 323 Handle Linux systems with modern kernel but without 324 SOL_PACKET in the userland headers. 325 Linux support for ARPHRD_RAWHDLC. 326 Handle 32-bit timestamps in snoop. 327 Support eg (Octane/O2xxx/O3xxx Gigabit) devices. 328 Add new reserved DLT types. 329 330Monday October 23, 2001. mcr@sandelman.ottawa.on.ca. Summary for 0.7 release 331 332 Added pcap_findalldevs() call to get list of interfaces in a MI way. 333 334 pcap_stats() has been documented as to what its counters mean on 335 each platform. 336 337Tuesday January 9, 2001. guy@alum.mit.edu. Summary for 0.6 release 338 339 New Linux libpcap implementation, which, in 2.2 and later 340 kernels, uses PF_PACKET sockets and supports kernel packet 341 filtering (if compiled into the kernel), and supports the "any" 342 device for capturing on all interfaces. Cleans up promiscuous 343 mode better on pre-2.2 kernels, and has various other fixes 344 (handles 2.4 ARPHRD_IEEE802_TR, handles ISDN devices better, 345 doesn't show duplicate packets on loopback interface, etc.). 346 347 Fixed HP-UX libpcap implementation to correctly get the PPA for 348 an interface, to allow interfaces to be opened by interface name. 349 350 libpcap savefiles have system-independent link-layer type values 351 in the header, rather than sometimes platform-dependent DLT_ 352 values, to make it easier to exchange capture files between 353 different OSes. 354 355 Non-standard capture files produced by some Linux tcpdumps, e.g. 356 the one from Red Hat Linux 6.2 and later, can now be read. 357 358 Updated autoconf stock files. 359 360 Filter expressions can filter on VLAN IDs and various OSI 361 protocols, and work on Token Ring (with non-source-routed 362 packets). 363 364 "pcap_open_dead()" added to allow compiling filter expressions 365 to pcap code without opening a capture device or capture file. 366 367 Header files fixed to allow use in C++ programs. 368 369 Removed dependancy on native headers for packet layout. 370 Removed Linux specific headers that were shipped. 371 372 Security fixes: Strcpy replaced with strlcpy, sprintf replaced 373 with snprintf. 374 375 Fixed bug that could cause subsequent "pcap_compile()"s to fail 376 erroneously after one compile failed. 377 378 Assorted other bug fixes. 379 380 README.aix and README.linux files added to describe 381 platform-specific issues. 382 383 "getifaddrs()" rather than SIOCGIFCONF used, if available. 384 385v0.5 Sat Jun 10 11:09:15 PDT 2000 386 387itojun@iijlab.net 388- Brought in KAME IPv6/IPsec bpf compiler. 389- Fixes for NetBSD. 390- Support added for OpenBSD DLT_LOOP and BSD/OS DLT_C_HDLC (Cisco HDLC), 391 and changes to work around different BSDs having different DLT_ types 392 with the same numeric value. 393 394Assar Westerlund <assar@sics.se> 395- Building outside the source code tree fixed. 396- Changed to write out time stamps with 32-bit seconds and microseconds 397 fields, regardless of whether those fields are 32 bits or 64 bits in 398 the OS's native "struct timeval". 399- Changed "pcap_lookupdev()" to dynamically grow the buffer into which 400 the list of interfaces is read as necessary in order to hold the 401 entire list. 402 403Greg Troxel <gdt@ir.bbn.com> 404- Added a new "pcap_compile_nopcap()", which lets you compile a filter 405 expression into a BPF program without having an open live capture or 406 capture file. 407 408v0.4 Sat Jul 25 12:40:09 PDT 1998 409 410- Fix endian problem with DLT_NULL devices. From FreeBSD via Bill 411 Fenner (fenner@parc.xerox.com) 412 413- Fix alignment problem with FDDI under DLPI. This was causing core 414 dumps under Solaris. 415 416- Added configure options to disable flex and bison. Resulted from a 417 bug report by barnett@grymoire.crd.ge.com (Bruce Barnett). Also added 418 options to disable gcc and to force a particular packet capture type. 419 420- Added support for Fore ATM interfaces (qaa and fa) under IRIX. Thanks 421 to John Hawkinson (jhawk@mit.edu) 422 423- Change Linux PPP and SLIP to use DLT_RAW since the kernel does not 424 supply any "link layer" data. 425 426- Change Linux to use SIOCGIFHWADDR ioctl to determine link layer type. 427 Thanks to Thomas Sailer (sailer@ife.ee.ethz.ch) 428 429- Change IRIX PPP to use DLT_RAW since the kernel does not supply any 430 "link layer" data. 431 432- Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header 433 formats. 434 435- Added some new SGI snoop interface types. Thanks to Steve Alexander 436 (sca@refugee.engr.sgi.com) 437 438- Fixes for HP-UX 10.20 (which is similar to HP-UX 9). Thanks to 439 Richard Allen (ra@hp.is) and Steinar Haug (sthaug@nethelp.no) 440 441- Fddi supports broadcast as reported by Jeff Macdonald 442 (jeff@iacnet.com). Also correct ieee802 and arcnet. 443 444- Determine Linux pcap buffer size at run time or else it might not be 445 big enough for some interface types (e.g. FDDI). Thanks to Jes 446 Sorensen (Jes.Sorensen@cern.ch) 447 448- Fix some linux alignment problems. 449 450- Document promisc argument to pcap_open_live(). Reported by Ian Marsh 451 (ianm@sics.se) 452 453- Support Metricom radio packets under Linux. Thanks to Kevin Lai 454 (laik@gunpowder.stanford.edu) 455 456- Bind to interface name under Linux to avoid packets from multiple 457 interfaces on multi-homed hosts. Thanks to Kevin Lai 458 (laik@gunpowder.stanford.edu) 459 460- Change L_SET to SEEK_SET for HP-UX. Thanks to Roland Roberts 461 (rroberts@muller.com) 462 463- Fixed an uninitialized memory reference found by Kent Vander Velden 464 (graphix@iastate.edu) 465 466- Fixed lex pattern for IDs to allow leading digits. As reported by 467 Theo de Raadt (deraadt@cvs.openbsd.org) 468 469- Fixed Linux include file problems when using GNU libc. 470 471- Ifdef ARPHRD_FDDI since not all versions of the Linux kernel have it. 472 Reported reported by Eric Jacksch (jacksch@tenebris.ca) 473 474- Fixed bug in pcap_dispatch() that kept it from returning on packet 475 timeouts. 476 477- Changed ISLOOPBACK() macro when IFF_LOOPBACK isn't available to check 478 for "lo" followed by an eos or digit (newer versions of Linux 479 apparently call the loopback "lo" instead of "lo0"). 480 481- Fixed Linux networking include files to use ints instead of longs to 482 avoid problems with 64 bit longs on the alpha. Thanks to Cristian 483 Gafton (gafton@redhat.com) 484 485v0.3 Sat Nov 30 20:56:27 PST 1996 486 487- Added Linux support. 488 489- Fixed savefile bugs. 490 491- Solaris x86 fix from Tim Rylance (t.rylance@elsevier.nl) 492 493- Add support for bpf kernel port filters. 494 495- Remove duplicate atalk protocol table entry. Thanks to Christian 496 Hopps (chopps@water.emich.edu) 497 498- Fixed pcap_lookupdev() to ignore nonexistent devices. This was 499 reported to happen under BSD/OS by David Vincenzetti 500 (vince@cryptonet.it) 501 502- Avoid solaris compiler warnings. Thanks to Bruce Barnett 503 (barnett@grymoire.crd.ge.com) 504 505v0.2.1 Sun Jul 14 03:02:26 PDT 1996 506 507- Fixes for HP-UX 10. Thanks in part to to Thomas Wolfram 508 (wolf@prz.tu-berlin.de) and Rick Jones (raj@hpisrdq.cup.hp.com) 509 510- Added support for SINIX. Thanks to Andrej Borsenkow 511 (borsenkow.msk@sni.de) 512 513- Fixes for AIX (although this system is not yet supported). Thanks to 514 John Hawkinson (jhawk@mit.edu) 515 516- Use autoconf's idea of the top level directory in install targets. 517 Thanks to John Hawkinson. 518 519- Add missing autoconf packet capture result message. Thanks to Bill 520 Fenner (fenner@parc.xerox.com) 521 522- Fixed padding problems in the pf module. 523 524- Fixed some more alignment problems on the alpha. 525 526- Added explicit netmask support. Thanks to Steve Nuchia 527 (steve@research.oknet.com) 528 529- Fixed to handle raw ip addresses such as 0.0.0.1 without "left 530 justifing" 531 532- Add "sca" keyword (for DEC cluster services) as suggested by Terry 533 Kennedy (terry@spcvxa.spc.edu) 534 535- Add "atalk" keyword as suggested by John Hawkinson. 536 537- Add "igrp" keyword. 538 539- Fixed HID definition in grammar.y to be a string, not a value. 540 541- Use $CC when checking gcc version. Thanks to Carl Lindberg 542 (carl_lindberg@blacksmith.com) 543 544- Removed obsolete reference to pcap_immediate() from the man page. 545 Michael Stolarchuk (mts@terminator.rs.itd.umich.edu) 546 547- DLT_NULL has a 4 byte family header. Thanks to Jeffrey Honig 548 (jch@bsdi.com) 549 550v0.2 Sun Jun 23 02:28:42 PDT 1996 551 552- Add support for HP-UX. Resulted from code contributed by Tom Murray 553 (tmurray@hpindck.cup.hp.com) and Philippe-Andri Prindeville 554 (philipp@res.enst.fr) 555 556- Update INSTALL with a reminder to install include files. Thanks to 557 Mark Andrews (mandrews@aw.sgi.com) 558 559- Fix bpf compiler alignment bug on the alpha. 560 561- Use autoconf to detect architectures that can't handle misaligned 562 accesses. 563 564- Added loopback support for snoop. Resulted from report Steve 565 Alexander (sca@engr.sgi.com) 566 567v0.1 Fri Apr 28 18:11:03 PDT 1995 568 569- Fixed compiler and optimizer bugs. The BPF filter engine uses unsigned 570 comparison operators, while the code generator and optimizer assumed 571 signed semantics in several places. Thanks to Charlie Slater 572 (cslater@imatek.com) for pointing this out. 573 574- Removed FDDI ifdef's, they aren't really needed. Resulted from report 575 by Gary Veum (veum@boa.gsfc.nasa.gov). 576 577- Add pcap-null.c which allows offline use of libpcap on systems that 578 don't support live package capture. This feature resulting from a 579 request from Jan van Oorschot (j.p.m.voorschot@et.tudelft.nl). 580 581- Make bpf_compile() reentrant. Fix thanks to Pascal Hennequin 582 (Pascal.Hennequin@hugo.int-evry.fr). 583 584- Port to GNU autoconf. 585 586- Fix pcap-dlpi.c to work with isdn. Resulted from report by Flemming 587 Johansen (fsj@csd.cri.dk). 588 589- Handle multi-digit interface unit numbers (aka ppa's) under dlpi. 590 Resulted from report by Daniel Ehrlich (ehrlich@cse.psu.edu). 591 592- Fix pcap-dlpi.c to work in non-promiscuous mode. Resulted from report 593 by Jeff Murphy (jcmurphy@acsu.buffalo.edu). 594 595- Add support for "long jumps". Thanks to Jeffrey Mogul 596 (mogul@pa.dec.com). 597 598- Fix minor problems when compiling with BDEBUG as noticed by Scott 599 Bertilson (scott@unet.umn.edu). 600 601- Declare sys_errlist "const char *const" to avoid problems under 602 FreeBSD. Resulted from report by jher@eden.com. 603 604v0.0.6 Fri Apr 28 04:07:13 PDT 1995 605 606- Add missing variable declaration missing from 0.0.6 607 608v0.0.5 Fri Apr 28 00:22:21 PDT 1995 609 610- Workaround for problems when pcap_read() returns 0 due to the timeout 611 expiring. 612 613v0.0.4 Thu Apr 20 20:41:48 PDT 1995 614 615- Change configuration to not use gcc v2 flags with gcc v1. 616 617- Fixed a bug in pcap_next(); if pcap_dispatch() returns 0, pcap_next() 618 should also return 0. Thanks to Richard Stevens (rstevens@noao.edu). 619 620- Fixed configure to test for snoop before dlpi to avoid problems under 621 IRIX 5. Thanks to J. Eric Townsend (jet@abulafia.genmagic.com). 622 623- Hack around deficiency in Ultrix's make. 624 625- Fix two bugs related to the Solaris pre-5.3.2 bufmod bug; handle 626 savefiles that have more than snapshot bytes of data in them (so we 627 can read old savefiles) and avoid writing such files. 628 629- Added checkioctl which is used with gcc to check that the 630 "fixincludes" script has been run. 631 632v0.0.3 Tue Oct 18 18:13:46 PDT 1994 633 634- Fixed configure to test for snoop before dlpi to avoid problems under 635 IRIX 5. Thanks to J. Eric Townsend (jet@abulafia.genmagic.com). 636 637v0.0.2 Wed Oct 12 20:56:37 PDT 1994 638 639- Implement timeout in the dlpi pcap_open_live(). Thanks to Richard 640 Stevens. 641 642- Determine pcap link type from dlpi media type. Resulted from report 643 by Mahesh Jethanandani (mahesh@npix.com). 644 645v0.0.1 Fri Jun 24 14:50:57 PDT 1994 646 647- Fixed bug in nit_setflags() in pcap-snit.c. The streams ioctl timeout 648 wasn't being initialized sometimes resulting in an "NIOCSFLAGS: 649 Invalid argument" error under OSF/1. Reported by Matt Day 650 (mday@artisoft.com) and Danny Mitzel (dmitzel@whitney.hitc.com). 651 652- Turn on FDDI support by default. 653 654v0.0 Mon Jun 20 19:20:16 PDT 1994 655 656- Initial release. 657 658- Fixed bug with greater/less keywords, reported by Mark Andrews 659 (mandrews@alias.com). 660 661- Fix bug where '|' was defined as BPF_AND instead of BPF_OR, reported 662 by Elan Amir (elan@leeb.cs.berkeley.edu). 663 664- Machines with little-endian byte ordering are supported thanks to 665 Jeff Mogul. 666 667- Add hack for version 2.3 savefiles which don't have caplen and len 668 swapped thanks to Vern Paxson. 669 670- Added "&&" and "||" aliases for "and" and "or" thanks to Vern Paxson. 671 672- Added length, inbound and outbound keywords.
|