Packet fanout support for netsniff-ng. From Michał Purzyński.
Several improvements when using netsniff-ng on wireless interfaces. From Vadim Kochan.
Allow to filter traffic from an input pcap to an output pcap using netsniff-ng. From Vadim Kochan.
Bug fixes, performance improvements and general fixes all over the place. From Daniel Borkmann, Eric Dumazet, Vadim Kochan, Mark Latimer, Tillmann Karras, wilson, and Tobias Klauser.
v0.5.9-rc4
9 years ago
Restore tpacket v2 capturing functionality. Thanks to Mike Reeves for his help with testing these changes. By Tobias Klauser.
Add option --no-sock-mem to trafgen to disable adjusting socket memory (analogous to the iexisting netsniff-ng option of the same name). By Jesper Dangaard Brouer.
Check for correct linktype in netlink dissector. By Daniel Borkmann.
Add build flag for sparse static checking and fix some of the reported warnings. By Tobias Klauser.
v0.5.9-rc3
9 years ago
Add additional mausezahn configuration file directives (port, listen-addr) and document the existing ones (see mausezahn.8 for details). From Jon Schipp.
Allow mausezahn to bind to an IP address using the -l command line option, from Jon Schipp.
Install mausezahn configuration file to /etc/netsniff-ng/mausezahn.conf instead of /etc/mausezahn/mz.conf. From Jon Schipp.
Add the --no-hwtimestamp/-N command line option to netsniff-ng, allowing to disable hardware time stamping (as it might lead to skewed timestamps in recorded PCAPs, see https://github.com/netsniff-ng/netsniff-ng/issues/129). From Tobias Klauser.
v0.5.9-rc2
9 years ago
Factor out TCP/UDP port and ethertype lookup from dissector into own module, thus making flowtop no longer depend on the dissector modules. This fixes flowtop build which was broken in v0.5.9-rc1. By Tobias Klauser.
v0.5.9-rc1
9 years ago
Add a rudimenatry netlink message dissector to netsniff-ng, from Tobias Klauser.
Use printf/scanf format specifiers for fixed width types (fixing a crash of ifpps in 32 bit environments), from James McCoy.
Fix integer overflow related to ring size, thus now actually allowing to use ring sizes larger than 4 GiB. However, ther still exist some problems with larger ring sizes, see issue #128. By Tobias Klauser, with help from Michał Purzyński and Jon Schipp.
Fix the build system to install configuration files to /etc instead of /usr/local/etc, by Kartik Mistry.
v0.5.8
10 years ago
Smaller default initial ring buffer size in trafgen to reduce cache misses. From Daniel Borkmann and Jesper Dangaard Brouer.
Bugfix in ifpps to always match the correct interface/device. From Jesper Dangaard Brouer.
Fixes all over the place to make netsniff-ng build against the musl libc. Contributed by Christian Wiese.
Build system improvements. From Christian Wiese, Daniel Borkmann, Jesper Dangaard Brouer and Tobias Klauser.
Proper handling of all termination signals in all tools. From Tobias Klauser.
Various documentation updates. From Daniel Borkmann, Kartik Mistry, Christian Wiese and Tobias Klauser.
v0.5.8-rc5
10 years ago
Performance improvements for TX only path in trafgen, by Jesper Dangaard Brouer.
v0.5.8-rc4
10 years ago
Add options to show percentage of maximum line rate (-P) and to omit printing
the header in CSV mode (-o) to ifpps, from Jon Schipp, Daniel Borkmann and
Tobias Klauser.
Extensions to the bpfc grammar (GNU style register prefix and '#' as number
prefix), from Daniel Borkmann.
v0.5.8-rc1
10 years ago
Introduction of a new build system based on classical make and a customized
configure file, which eventually removes the previous cmake system once and
for all and avoids using autotools. Support for cross-compilation and
various other options such as debug, distribution or hardening builds.
From Tobias Klauser and Daniel Borkmann.
Inclusion of the mausezahn high-level traffic generator. This one is
unmaintained, so we decided to take up maintainer-ship and continue
development on it. It's currently in our staging area as the code is
not yet in a quality that we accept, but that will change over the next
releases. From Tobias Klauser and Daniel Borkmann.
Complete rewrite of all man-pages and removal of Documentation section.
All important things that need to be said can now be found in our man-pages.
Written by Daniel Borkmann, many many improvements by Tobias Klauser,
Jon Schipp, Kartik Mistry and Stephen Wadeley.
Initial zsh autocompletion support for all tools. From Hideo Hattori.
PF_PACKET TPACKET_V3 conversion of netsniff-ng pcap capturing handler.
This results in a better capturing throughout as zero-copy data is stored
linear instead of slot-wise, which will result in fewer page cache misses.
From Daniel Borkmann.
ifpps now can handle an arbitrary number of CPUs and no longer fails on
systems with more than 32 CPUs. By default now only the data for the 5
most-used CPUs is displayed, as well as the least-used CPU and average
values (median can optionally be displayed). From Tobias Klauser and
Daniel Borkmann.
Support for different pcap types (tcpdump-capable, tcpdump-capable with ns
resolution, Alexey Kuznetzov's pcap format, netsniff-ng's pcap format),
introduction of a netsniff-ng internal pcap format with the following
features: timeval in nanoseconds, the original packet length, the captured
packet length, the timestamp hw/sw source, the interface index (sll_ifindex),
the packet's protocol (sll_protocol), the packet type (sll_pkttype) and
the hardware type (sll_hatype) and support for multiple link-types, from
Daniel Borkmann.
Add support for raw 802.11 in netsniff-ng and in trafgen, which also allows
injection, from Daniel Borkmann. Next to that we have added a packet dissector
for raw 802.11 frames. It is currently in an initial stage and will be
further developed, from Markus Amend.
Add a new dissector for the Link Layer Discovery protocol, from
Tobias Klauser.
Make astraceroute independant of active geoip lookups to Team CYMRU and
rather use geoip library in order to not "leak" any traffic, from Daniel
Borkmann.
Geoip database update mechanism for astraceroute, flowtop and netsniff-ng,
from Daniel Borkmann.
Let netsniff-ng's dissector use geoip libary, from Daniel Borkmann.
Added several Linux extensions for bpfc and the possibility to use
cpp as a preprocessor like in trafgen. Moreover, added support for
different output formats (e.g. for usage with xt_bpf). From Daniel
Borkmann.
Minimal stand-alone BPF JIT image disassembler, from Daniel Borkmann.
Support for tcpdump-like high-level filter expressions next to bpfc
filters in netsniff-ng, from Daniel Borkmann.
trafgen got a new, powerful configuration language, it's configs can
be passed through cpp, and it is now multithreaded. Moreover, trafgen
also got a built-in protocol fuzzer. From Daniel Borkmann.
Last but not least, numerous code cleanups and code simplifications all
over the place as well as smaller features not mentioned here, from Tobias
Klauser and Daniel Borkmann, and smaller fixes by Stefan Seering, Jesper
Dangaard Brouer, Jim Binder, Peter Stuge, Teguh, Scott Moeller, Jon Schipp.
v0.5.8-rc2
10 years ago
Build system fixes and cleanups all over the place. From Tobias Klauser
and Daniel Borkmann.
Mausezahn man-pages improvements from Jon Schipp.
Support replaying/reading pcap capture files from/to tunnel devices
from Daniel Borkmann.
Fix various compiler warnings from Tobias Klauser.