1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
|
pcapnav 0.5 Changelog
========================================================================
Mon Jun 4 18:40:21 PDT 2007 Christian <christian@whoop.org>
Final tweaks before the 0.8 release.
------------------------------------------------------------------------
Thu Apr 5 17:26:00 PDT 2007 Christian <christian@whoop.org>
Large file support! pcapnav now seems to work well with files larger
than 2GB.
------------------------------------------------------------------------
Wed Mar 1 20:26:22 GMT 2006 Christian <christian@whoop.org>
Beefed up autogen.sh to check for MacOS X's glibtoolize.
------------------------------------------------------------------------
Wed Feb 15 01:14:54 GMT 2006 Christian <christian@whoop.org>
- Preparing for the 0.7 release.
------------------------------------------------------------------------
Wed Feb 15 01:08:00 GMT 2006 Christian <christian@whoop.org>
- Added a test program for checking whether the end timestamp of a trace
can be determined correctly.
------------------------------------------------------------------------
Wed Feb 15 00:31:25 GMT 2006 Christian <christian@whoop.org>
- 64-bit fixes. pcapnav should now work on 64-bit architectures.
------------------------------------------------------------------------
Fri Feb 3 21:42:09 GMT 2006 Christian <christian@whoop.org>
- Ensure that pcapnav_timeval_add/sub() can be called with both of the
input arguments as a possible output argument.
------------------------------------------------------------------------
Tue Jan 24 13:34:01 GMT 2006 Christian <christian@whoop.org>
- Added pcapnav_timeval_init().
------------------------------------------------------------------------
Mon Jan 23 19:35:59 GMT 2006 Christian <christian@whoop.org>
- Bugfix for pcapnav_dump_open() with in append mode: pcapnav's check
for compatible link-layer types was broken because it didn't honour
pcap's internal linklayer type mapping mechanism.
Lesson learned: when comparing linklayers always use pcap_datalink(). :)
------------------------------------------------------------------------
Sun Aug 14 14:13:55 BST 2005 Christian <christian@whoop.org>
Fixed another warning.
------------------------------------------------------------------------
Wed May 4 18:19:14 BST 2005 Christian <christian@whoop.org>
This is the 0.6 release.
------------------------------------------------------------------------
Fri Mar 18 15:30:29 GMT 2005 Christian <christian@whoop.org>
- Removed acconfig.h and moved configure.ac to configure.in.
------------------------------------------------------------------------
Sat Mar 12 13:32:28 GMT 2005 Christian <christian@whoop.org>
Abort autogen.sh once one of the auto tools fails.
------------------------------------------------------------------------
Mon Jun 21 13:58:56 PDT 2004 Christian <christian@whoop.org>
More Solaris fun -- need -lsocket -lnsl as usual ... now added to the
test builds and to the output of pcapnav-config --libs.
------------------------------------------------------------------------
Fri Jun 18 11:08:24 PDT 2004 Christian <christian@whoop.org>
Committed a check for type u_int32_t in configure.ac.
------------------------------------------------------------------------
Fri Jun 18 10:32:35 PDT 2004 Christian <christian@whoop.org>
Turns out that apparently OpenBSD is the only OS where pcap uses
bpf_timeval, whereas just timeval is used everywhere else. I am thus
inverting the preprocessor check in pcapnav.h to #define bpf_timeval
when we are not on OpenBSD.
------------------------------------------------------------------------
Sun Apr 18 15:22:07 PDT 2004 Christian <christian@whoop.org>
Last commits before release:
- Documentation updates
- libnd_timestamp.h fixed to update with checkins again
------------------------------------------------------------------------
Wed Apr 14 15:51:56 PDT 2004
- More fprintfs replaced with D()s
- Removed the errbuf argument from pcapnav_dump_open as it's
redundant: we already pass in a pcap handle whose error
buffer can be used.
------------------------------------------------------------------------
Sat Apr 10 14:33:06 BST 2004 Christian <christian@whoop.org>
- Replaced lots of fprintf() with debugging output, D().
- Upped version to 0.5, release coming up :)
------------------------------------------------------------------------
Sat Apr 10 14:10:00 BST 2004 Christian <christian@whoop.org>
- Fixed a bug in __pcapnav_trace_find_packet_at_offset() that could
trigger infinite looping in case of truncated trace files. Essentially,
when looking for a valid packet at the end of a trace, don't return
the end of the trace but actually the location of the last valid
packet in the trace.
------------------------------------------------------------------------
Tue Apr 6 15:15:28 BST 2004 Christian <christian@whoop.org>
- pcapnav can now open pcap dumpers for existing trace files in a safe
manner (where a check is made whether the last packet is truncated) or
a fast mode (where it is assumed that the last packet is intact).
------------------------------------------------------------------------
Wed Mar 31 21:02:14 BST 2004 Christian <christian@whoop.org>
Added a check for compatible linklayer protocols to pcapnav_dump_open().
Now returns NULL correctly on incompatible protocols.
------------------------------------------------------------------------
Wed Mar 31 20:13:33 BST 2004 Christian <christian@whoop.org>
Bit nicer code in case the file header needs to be updated.
------------------------------------------------------------------------
Wed Mar 31 19:51:11 BST 2004 Christian <christian@whoop.org>
Added a test program for the new append feature.
------------------------------------------------------------------------
Wed Mar 31 19:12:05 BST 2004 Christian <christian@whoop.org>
Changes to libpcapnav, after a looong time of silence:
- The timestamp reported for the last packet in the trace file was
actually the timestamp of the second-last file.
- Added pcapnav_dump_open() which can be used on existing trace files
to allow appending new packets. Needs some testing ...
------------------------------------------------------------------------
Wed Dec 10 13:46:56 GMT 2003 Christian <christian@whoop.org>
- Fixed URL for source tarball in spec file.
------------------------------------------------------------------------
Wed Dec 10 11:18:44 GMT 2003 Christian <christian@whoop.org>
- Added a spec file for building RPMs :)
------------------------------------------------------------------------
Tue Nov 11 12:08:10 GMT 2003 Christian <christian@whoop.org>
0.4 released.
------------------------------------------------------------------------
Wed Oct 29 11:52:21 GMT 2003 Christian <christian@whoop.org>
- Changed pcapnav_goto_offset() so that you can specify if you want to
look for a packet only at offsets smaller or equal to the one specified,
greater than or equal, or anywhere around the offset.
- Added a test program for pcapnav_goto_offset(). It is not a test driver
that performs a check for you, rather, you can give it a file, an offset,
and a boundary and it tells you where it finds the resulting packet.
------------------------------------------------------------------------
Sun Oct 26 15:54:18 GMT 2003 Christian <christian@whoop.org>
- Two more endianness fixes
- pcapnav_goto_offset() now really jumps to the packet closest to a
desired offset. So far it only used the packet closest to the offset but
with an offset smaller than the desired one.
- pcapnav-offsets now prints the absolute offset and the one relative to
the end of the trace file header.
- Bumped version number to 0.3a.
------------------------------------------------------------------------
Wed Oct 22 12:43:33 BST 2003 Christian <christian@whoop.org>
0.3 released.
------------------------------------------------------------------------
Tue Oct 21 17:08:02 BST 2003 Christian <christian@whoop.org>
- A build fix for MacOS X contributed by Aaron Turner <aturner@pobox.com>.
I don't understand how this fixes an (incorrect) undefined symbol error,
but hey, it works now. Thanks Aaron!
- Fixed the test check to work correctly on big-endian platforms.
------------------------------------------------------------------------
Wed Oct 15 18:46:17 BST 2003 Christian <christian@whoop.org>
0.2 released.
------------------------------------------------------------------------
Wed Oct 15 18:44:06 BST 2003 Christian <christian@whoop.org>
Be more tolerant in header sanity checks. We now allow timestamps to be
slightly out of order: a packet's timestamp must be within a one-week
window either before or after the previous packet. Previously, packet
timestamps had to be nondecreasing.
------------------------------------------------------------------------
Fri Sep 19 23:14:55 BST 2003 Christian <christian@whoop.org>
0.1 released :)
------------------------------------------------------------------------
Fri Sep 19 19:39:10 BST 2003 Christian <christian@whoop.org>
I think this is our 0.1 release!
------------------------------------------------------------------------
Fri Sep 19 17:11:44 BST 2003 Christian <christian@whoop.org>
Final commits before the release ...
------------------------------------------------------------------------
Thu Sep 18 15:19:47 BST 2003 Christian <christian@whoop.org>
Small doco updates, and an important fix in pcapnav-config: forgot to
add -lpcap, so other programs had to include this manually. Obviously
not the point of a wrapper library ...
------------------------------------------------------------------------
Wed Sep 17 19:59:04 BST 2003 Christian <christian@whoop.org>
Stylesheet updates.
------------------------------------------------------------------------
Wed Sep 17 12:30:29 BST 2003 Christian <christian@whoop.org>
Small doco updates ...
------------------------------------------------------------------------
Tue Sep 16 20:47:15 BST 2003 Christian <christian@whoop.org>
Documentation updates ...
------------------------------------------------------------------------
Mon Sep 15 17:51:03 BST 2003 Christian <christian@whoop.org>
Documentation! Using docbook and gtk-doc ... quite nice, using my own
stylesheets.
------------------------------------------------------------------------
Sun Sep 14 18:43:21 BST 2003 Christian <christian@whoop.org>
- Fixed a bug that prevented the resynchronization algorithm from
working in some circumstances -- the timestamp check was broken.
- Added debugging functionality similar to libnetdude and netdude.
This is primarily cool because debugging can now be turned on and off
dynamically.
- Some debugging output.
------------------------------------------------------------------------
Sun Sep 7 16:37:42 BST 2003 Christian <christian@whoop.org>
Fixed a bug that caused the end-of-file offset seek to fail, and some
small debugging updates.
------------------------------------------------------------------------
Wed Jun 18 17:53:25 BST 2003 Christian <christian@whoop.org>
Prevent underflow when subtracting timestamps and just return 0.0 in
that case.
------------------------------------------------------------------------
Wed Jun 18 11:38:43 BST 2003 Christian <christian@whoop.org>
Let's have the test suite stuff in CVS as well.
------------------------------------------------------------------------
Tue Jun 17 18:06:26 BST 2003 Christian <christian@whoop.org>
More build fixes, FreeBSD this time. Boooooooooooooooooooooooring. :(
------------------------------------------------------------------------
Fri May 16 16:47:14 BST 2003 Christian <christian@whoop.org>
Build on MacOS :)
------------------------------------------------------------------------
Fri May 16 15:49:12 BST 2003 Christian <christian@whoop.org>
Okay .. now for the fun part -- building this everywhere. Here's a few
header inclusion fixes, particularly for the timeval vs. bpf_timeval
crap.
------------------------------------------------------------------------
Mon Mar 31 20:02:18 BST 2003 Christian <christian@whoop.org>
Added a prefix to the timestamp to avoid preprocessor collisions.
------------------------------------------------------------------------
Mon Mar 31 19:59:36 BST 2003 Christian <christian@whoop.org>
Oops. This is pcapnav -- changed the ChangeLog title.
------------------------------------------------------------------------
Mon Mar 31 19:45:34 BST 2003 Christian <christian@whoop.org>
- Added cvs.pl ChangeLog management script.
------------------------------------------------------------------------
|
