ipcad 3.7.3: 2007-Apr-22 * PPPoE support, courtesy to Aaron Millisor . * ULOG collector: ability to differentiate by hook id (nlgroup). Suggested by Sergey Skachkov . * Fixed flex command line compilation problems. 3.7: 2005-Jul-06 * Added `interface file ` possibility for reading from tcpdump generated files. 3.6.6: 2005-Mar-22 * Configuration allows setting NetFlow (v5) engine-type and engine-id. Requested by in SF#1168289. * FreeBSD 5.x and pf weirdness with TCP_NODELAY fixed. Reported by . 3.6.5: 2004-Nov-11 * Portability fixes. * Improved flow capture speed by removing excessive sigprocmask()'ing. * Source and Destination interfaces are now exported via NetFlow. (Available only for these capture methods which support them (ULOG)) 3.6.4: 2004-Sep-01 * Fixed interface enumeration problem on some systems. * Fixed IPQ initialization code. Thanks to Andrey V. Mozgovoy . 3.6.3: 2004-Jun-25 * Added paranoic checks on number of bytes returned from various packet capture facilities. * Better interface naming scheme (visible groups in case of ULOG). Suggested by Denis Ognewsky . * configure --with-ifst fixed (never worked, actually). * Solaris 9 portability. 3.6.2: 2004-May-10 * Linux IPQ support is made direct, libipq(3) mediator dropped. 3.6.1: 2004-May-10 * Dynamic interface support now uses pre-opened /proc/net/dev on Linux. Makes it easier to configure ipcad in presence of chroot(). * FAQ created. 3.6: 2004-May-06 * Dynamic interfaces support (i.e., ppp*). * Proper support for configurable buffer sizes for BPF. * Documentation cleanup. 3.5.1: 2004-Apr-29 * MacOS X/Darwin support added (Apple makes the best unix laptops!). * ipcad.conf.sample renamed into ipcad.conf.default. * Linux libipq(3) support refined for newer versions of iptables. 3.5.0: 2004-Apr-13 * BSD's ipfw(8) divert(4) and tee support. * Linux libipq(3) support. 3.4.5: 2004-Apr-04 * Preserving interface name during import into ip accouting storage. * Importing IP protocol number from the dump file too. * ./configure script execution warnings removed. Some typos fixed as well. Reported by Alexey Mahotkin 3.4.4: 2004-Mar-23 * Incorporated patches for DLT_LOOP (OpenBSD-related). Submitted by Oleg Safiullin * BUGFIX: Fixed time stamps for NetFlow. Discrepancy found by Alexander Kolesnikoff 3.4.3: 2004-Mar-18 * Reviewed support for BPF and PCAP methods, fixed couple small bugs. * BPF file descriptors (/dev/bpf*) are now cached to make chroot()'ing easier in presence of interfaces which are dynamically configured. * "ttl = X;" renamed into "rsh ttl = X;". Old syntax remains valid. * ULOG interface specification now can include interface flags. * chroot()-related error messages made more clear. 3.4.1: 2004-Mar-11 * Added rsh "sh ip cache flow" command. 3.4: 2004-Mar-11 * SCTP protocol ports now being recognized. * Fixed aggregation scheme to not to do it twice for RSH and NetFlow. * Capturing conservative value of bytes via BPF for NetFlow. * BUGFIX: NetFlow ports output was wrong if capture-ports disable; * Flexibility to put capture-ports between interfaces. 3.3: 2004-Mar-10 * IP proto output. * ICMP Type/Code output (combined/presented as src/dst ports). 3.2: 2004-Mar-09 * BUGFIX: NetFlow header format still had Count in host order. * Made certain portability fixes (strouq->stroull, etc). * Added comments about capture-ports and NetFlow interoperability. 3.1: 2004-Mar-08 * BUGFIX: NetFlow record format contained entries in host order. * If flow cannot be added into NetFlow cache, flow_sequence++. * Little style/efficiency fixes in NetFlow code. * Added comment in the code (process.c) regarding the ToS. * Added BUGS file to describe NetFlow wrt. TCP FIN/RST. 3.0: 2004-Mar-05 * Implemented NetFlow export mode. 2.9.3: 2004-Jan-08 * Some small fixes to make a final release of 2.x version. 2.9.2: 2003-Dec-28 * Fighting with TIME_WAIT state by using SO_REUSEADDR side effect. 2.9.1: 2003-Oct-20 * Big-endian systems support. Reported by Nils Bokermann 2.9.0: 2003-Sep-19 * Ability to account for UDP and TCP ports. Ports aggregation. 2.8.5: 2003-Sep-07 * SIGCHLD must not be ignored, linux threading depends on it and will cry to a kernel log when wait() happens. Noticed by Al Zakharov . 2.8.4: 2003-Aug-19 * Fixed some potential and actual problems (potential memory leak, double close() and locking order problem). 2.8.3: 2003-Apr-17 * Linux iptable's ULOG support (>= 2.4.18-pre8). * Configurable IO buffer's sizes. * Allow interface to be configured even if there is no such interface when the system starts up. 2.8.2: 2002-Feb-19 * Fixed linux sh if bug (boundary checking). * Fixed aggregating bug (introduced in previous release) 10x2 . * Configuration allows zero uids to be specified explicitly. 2.8.1: 2002-Dec-25 * Changed underlying flow storage protocol: expecting significant performance increase. 2.8.0: 2002-Dec-17 * Implemented a long planned ability to support dynamic interfaces, like ppp. 2.7.1: 2002-Nov-29 * Added Token Ring support. * Added -v option to ipcad to print the version (-h prints it too). * ipcad recognizes interfaces with ':' inside its name (eth0:0). 2.7.0: 2002-Oct-28 * Added ability to specify pcap-like (as in tcpdump) filter on the interface to reduce number of packets travelling into userspace in case of BPF (will NOT help much on [old] Linux systems without kernel-level BPF language support). 2.6.3: 2002-Apr-28 * Daemonization gets rid of stdin/stderr, even with chroot(). * Added dropping privileges, but it affects the RSH server. * Added pidfile. 2.6.2: 24 Mar 2002 * rsh server configuration allows specifying the ip address on which to listen. * Added description of the FreeBSD 4.5-RELEASE kernel bug, and required patch. 2.6.1: 2002-Feb-06 * Avoided blocking on bpf devices: now will work in daemon mode with FreeBSD-4.5. 2.6: 2001-Sep-27 * Added DLT_LINUX_SLL type: Linux cooked socket. * Added rsh "sh version" command. * Added recognition of compound interface names like ed0.12. * Added possibility to compile on OpenBSD. 2.5: 2001-May-13 * Even more threading safety (inet_ntoa() avoided in threads). * Added rsh command "show interface " for FreeBSD and Linux. * Added DLT_RAW interface type. * Added "promisc" directive to ipcad.conf. * Default behaviour of putting interface into promiscuous mode changed. 2.2: 2001-Apr-23 * Official release of ipcad-2. * Fixed error in table import procedure. * Eliminated possible error in reading configuration file. 2.1.5: 2001-Apr-19 * Even more portability changes. * Headers moved from modules to one header.h. 2.1.1: 2001-Apr-18 * Portability changes 2.1: 2001-Apr-15 * Eliminated memory leaks. * Improved locking technique for dump/restore/import. 2.0: 2001-Apr-15 * Significal changes in threading design. * Multiple simultaneous RSH allowed. * libpcap can be used instead of BPF device if no BPF detected. 1.6: 2001-Apr-04 * All signals are handled in the main thread, thus... * RSH listener can be enabled or disabled. * Fixed idiotic bug with division by zero in stats. * Config parsing and rsh string handling rewritten with lex. 1.5.5: 2001-Mar-29 * Signal handling properly redesigned. 1.5.4: 2001-Mar-27 * More robust socket writes. 1.5.3: 2001-Feb-14 * Restored and justified priority value. 1.5.2: 2001-Feb-06 * "Accounting data age exact" added to the output. 1.5.1: 2001-Feb-02 * Improved accounting data age handling. 1.5: * Added aggregation engine. * RSH connection now gracefully shutdowned(). * Added chroot. 1.4: * More robust and thread-safe accounting displaying scheme. * dump, restore and import commands added to rsh listener. * Added -s and -r command line switches to save and restore data during startup or exit. 1.3: * Added smart adaptive sorting algorithm for efficient performance. 1.2: * Unnecessary linked list sorting avoided. * Improved signal handling and threading model to avoid packet drops. * Added support for loopback and PPP interfaces. * ipcad now sets priority for itself. 1.1: * Compiled and adopted for FreeBSD 3.4. This kernel does not support "see-sent" interface trigger feature. * Interface statistics added to the output. * ipcat.conf renamed to ipcad.conf (small typo ;)) * "size_t bytes" changed to "unsigned long long bytes". 1.0: * Initial release. Not tested on systems different from FreBSD 4.2.