Netsniff Ng Versions Save

A Swiss army knife for your daily Linux network plumbing.

v0.5.9-rc5

9 years ago
  1. Packet fanout support for netsniff-ng. From Michał Purzyński.
  2. Several improvements when using netsniff-ng on wireless interfaces. From Vadim Kochan.
  3. Allow to filter traffic from an input pcap to an output pcap using netsniff-ng. From Vadim Kochan.
  4. Bug fixes, performance improvements and general fixes all over the place. From Daniel Borkmann, Eric Dumazet, Vadim Kochan, Mark Latimer, Tillmann Karras, wilson, and Tobias Klauser.

v0.5.9-rc4

9 years ago
  1. Restore tpacket v2 capturing functionality. Thanks to Mike Reeves for his help with testing these changes. By Tobias Klauser.
  2. Add option --no-sock-mem to trafgen to disable adjusting socket memory (analogous to the iexisting netsniff-ng option of the same name). By Jesper Dangaard Brouer.
  3. Check for correct linktype in netlink dissector. By Daniel Borkmann.
  4. Add build flag for sparse static checking and fix some of the reported warnings. By Tobias Klauser.

v0.5.9-rc3

9 years ago
  1. Add additional mausezahn configuration file directives (port, listen-addr) and document the existing ones (see mausezahn.8 for details). From Jon Schipp.
  2. Allow mausezahn to bind to an IP address using the -l command line option, from Jon Schipp.
  3. Install mausezahn configuration file to /etc/netsniff-ng/mausezahn.conf instead of /etc/mausezahn/mz.conf. From Jon Schipp.
  4. Add the --no-hwtimestamp/-N command line option to netsniff-ng, allowing to disable hardware time stamping (as it might lead to skewed timestamps in recorded PCAPs, see https://github.com/netsniff-ng/netsniff-ng/issues/129). From Tobias Klauser.

v0.5.9-rc2

9 years ago
  1. Factor out TCP/UDP port and ethertype lookup from dissector into own module, thus making flowtop no longer depend on the dissector modules. This fixes flowtop build which was broken in v0.5.9-rc1. By Tobias Klauser.

v0.5.9-rc1

9 years ago
  1. Add a rudimenatry netlink message dissector to netsniff-ng, from Tobias Klauser.
  2. Use printf/scanf format specifiers for fixed width types (fixing a crash of ifpps in 32 bit environments), from James McCoy.
  3. Fix integer overflow related to ring size, thus now actually allowing to use ring sizes larger than 4 GiB. However, ther still exist some problems with larger ring sizes, see issue #128. By Tobias Klauser, with help from Michał Purzyński and Jon Schipp.
  4. Fix the build system to install configuration files to /etc instead of /usr/local/etc, by Kartik Mistry.

v0.5.8

10 years ago
  1. Smaller default initial ring buffer size in trafgen to reduce cache misses. From Daniel Borkmann and Jesper Dangaard Brouer.
  2. Bugfix in ifpps to always match the correct interface/device. From Jesper Dangaard Brouer.
  3. Fixes all over the place to make netsniff-ng build against the musl libc. Contributed by Christian Wiese.
  4. Build system improvements. From Christian Wiese, Daniel Borkmann, Jesper Dangaard Brouer and Tobias Klauser.
  5. Proper handling of all termination signals in all tools. From Tobias Klauser.
  6. Various documentation updates. From Daniel Borkmann, Kartik Mistry, Christian Wiese and Tobias Klauser.

v0.5.8-rc5

10 years ago
  1. Performance improvements for TX only path in trafgen, by Jesper Dangaard Brouer.

v0.5.8-rc4

10 years ago
  1. Add options to show percentage of maximum line rate (-P) and to omit printing the header in CSV mode (-o) to ifpps, from Jon Schipp, Daniel Borkmann and Tobias Klauser.
  2. Extensions to the bpfc grammar (GNU style register prefix and '#' as number prefix), from Daniel Borkmann.

v0.5.8-rc1

10 years ago
  1. Introduction of a new build system based on classical make and a customized configure file, which eventually removes the previous cmake system once and for all and avoids using autotools. Support for cross-compilation and various other options such as debug, distribution or hardening builds. From Tobias Klauser and Daniel Borkmann.
  2. Inclusion of the mausezahn high-level traffic generator. This one is unmaintained, so we decided to take up maintainer-ship and continue development on it. It's currently in our staging area as the code is not yet in a quality that we accept, but that will change over the next releases. From Tobias Klauser and Daniel Borkmann.
  3. Complete rewrite of all man-pages and removal of Documentation section. All important things that need to be said can now be found in our man-pages. Written by Daniel Borkmann, many many improvements by Tobias Klauser, Jon Schipp, Kartik Mistry and Stephen Wadeley.
  4. Initial zsh autocompletion support for all tools. From Hideo Hattori.
  5. PF_PACKET TPACKET_V3 conversion of netsniff-ng pcap capturing handler. This results in a better capturing throughout as zero-copy data is stored linear instead of slot-wise, which will result in fewer page cache misses. From Daniel Borkmann.
  6. ifpps now can handle an arbitrary number of CPUs and no longer fails on systems with more than 32 CPUs. By default now only the data for the 5 most-used CPUs is displayed, as well as the least-used CPU and average values (median can optionally be displayed). From Tobias Klauser and Daniel Borkmann.
  7. Support for different pcap types (tcpdump-capable, tcpdump-capable with ns resolution, Alexey Kuznetzov's pcap format, netsniff-ng's pcap format), introduction of a netsniff-ng internal pcap format with the following features: timeval in nanoseconds, the original packet length, the captured packet length, the timestamp hw/sw source, the interface index (sll_ifindex), the packet's protocol (sll_protocol), the packet type (sll_pkttype) and the hardware type (sll_hatype) and support for multiple link-types, from Daniel Borkmann.
  8. Add support for raw 802.11 in netsniff-ng and in trafgen, which also allows injection, from Daniel Borkmann. Next to that we have added a packet dissector for raw 802.11 frames. It is currently in an initial stage and will be further developed, from Markus Amend.
  9. Add a new dissector for the Link Layer Discovery protocol, from Tobias Klauser.
  10. Make astraceroute independant of active geoip lookups to Team CYMRU and rather use geoip library in order to not "leak" any traffic, from Daniel Borkmann.
  11. Geoip database update mechanism for astraceroute, flowtop and netsniff-ng, from Daniel Borkmann.
  12. Let netsniff-ng's dissector use geoip libary, from Daniel Borkmann.
  13. Added several Linux extensions for bpfc and the possibility to use cpp as a preprocessor like in trafgen. Moreover, added support for different output formats (e.g. for usage with xt_bpf). From Daniel Borkmann.
  14. Minimal stand-alone BPF JIT image disassembler, from Daniel Borkmann.
  15. Support for tcpdump-like high-level filter expressions next to bpfc filters in netsniff-ng, from Daniel Borkmann.
  16. trafgen got a new, powerful configuration language, it's configs can be passed through cpp, and it is now multithreaded. Moreover, trafgen also got a built-in protocol fuzzer. From Daniel Borkmann.
  17. Last but not least, numerous code cleanups and code simplifications all over the place as well as smaller features not mentioned here, from Tobias Klauser and Daniel Borkmann, and smaller fixes by Stefan Seering, Jesper Dangaard Brouer, Jim Binder, Peter Stuge, Teguh, Scott Moeller, Jon Schipp.

v0.5.8-rc2

10 years ago
  1. Build system fixes and cleanups all over the place. From Tobias Klauser and Daniel Borkmann.
  2. Mausezahn man-pages improvements from Jon Schipp.
  3. Support replaying/reading pcap capture files from/to tunnel devices from Daniel Borkmann.
  4. Fix various compiler warnings from Tobias Klauser.