Libpcap

---------------------
- Next alpha release.

--------------------
- First alpha release.

itojuniijlab.net
- Brought in KAME IPv6/IPsec bpf compiler.
- Fixes for NetBSD.
- Support added for OpenBSD DLT_LOOP and BSD/OS DLT_C_HDLC (Cisco HDLC),
and changes to work around different BSDs having different DLT_ types
with the same numeric value.

Assar Westerlund <assarsics.se>
- Building outside the source code tree fixed.
- Changed to write out time stamps with 32-bit seconds and microseconds
fields, regardless of whether those fields are 32 bits or 64 bits in
the OS's native "struct timeval".
- Changed "pcap_lookupdev()" to dynamically grow the buffer into which
the list of interfaces is read as necessary in order to hold the
entire list.

Greg Troxel <gdtir.bbn.com>
- Added a new "pcap_compile_nopcap()", which lets you compile a filter
expression into a BPF program without having an open live capture or
capture file.

- Fix endian problem with DLT_NULL devices. From FreeBSD via Bill
Fenner (fennerparc.xerox.com)

- Fix alignment problem with FDDI under DLPI. This was causing core
dumps under Solaris.

- Added configure options to disable flex and bison. Resulted from a
bug report by barnettgrymoire.crd.ge.com (Bruce Barnett). Also added
options to disable gcc and to force a particular packet capture type.

- Added support for Fore ATM interfaces (qaa and fa) under IRIX. Thanks
to John Hawkinson (jhawkmit.edu)

- Change Linux PPP and SLIP to use DLT_RAW since the kernel does not
supply any "link layer" data.

- Change Linux to use SIOCGIFHWADDR ioctl to determine link layer type.
Thanks to Thomas Sailer (sailerife.ee.ethz.ch)

- Change IRIX PPP to use DLT_RAW since the kernel does not supply any
"link layer" data.

- Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header
formats.

- Added some new SGI snoop interface types. Thanks to Steve Alexander
(scarefugee.engr.sgi.com)

- Fixes for HP-UX 10.20 (which is similar to HP-UX 9). Thanks to
Richard Allen (rahp.is) and Steinar Haug (sthaugnethelp.no)

- Fddi supports broadcast as reported by Jeff Macdonald
(jeffiacnet.com). Also correct ieee802 and arcnet.

- Determine Linux pcap buffer size at run time or else it might not be
big enough for some interface types (e.g. FDDI). Thanks to Jes
Sorensen (Jes.Sorensencern.ch)

- Fix some linux alignment problems.

- Document promisc argument to pcap_open_live(). Reported by Ian Marsh
(ianmsics.se)

- Support Metricom radio packets under Linux. Thanks to Kevin Lai
(laikgunpowder.stanford.edu)

- Bind to interface name under Linux to avoid packets from multiple
interfaces on multi-homed hosts. Thanks to Kevin Lai
(laikgunpowder.stanford.edu)

- Change L_SET to SEEK_SET for HP-UX. Thanks to Roland Roberts
(rrobertsmuller.com)

- Fixed an uninitialized memory reference found by Kent Vander Velden
(graphixiastate.edu)

- Fixed lex pattern for IDs to allow leading digits. As reported by
Theo de Raadt (deraadtcvs.openbsd.org)

- Fixed Linux include file problems when using GNU libc.

- Ifdef ARPHRD_FDDI since not all versions of the Linux kernel have it.
Reported reported by Eric Jacksch (jackschtenebris.ca)

- Fixed bug in pcap_dispatch() that kept it from returning on packet
timeouts.

- Changed ISLOOPBACK() macro when IFF_LOOPBACK isn't available to check
for "lo" followed by an eos or digit (newer versions of Linux
apparently call the loopback "lo" instead of "lo0").

- Fixed Linux networking include files to use ints instead of longs to
avoid problems with 64 bit longs on the alpha. Thanks to Cristian
Gafton (gaftonredhat.com)

- Added Linux support.

- Fixed savefile bugs.

- Solaris x86 fix from Tim Rylance (t.rylanceelsevier.nl)

- Add support for bpf kernel port filters.

- Remove duplicate atalk protocol table entry. Thanks to Christian
Hopps (choppswater.emich.edu)

- Fixed pcap_lookupdev() to ignore nonexistent devices. This was
reported to happen under BSD/OS by David Vincenzetti
(vincecryptonet.it)

- Avoid solaris compiler warnings. Thanks to Bruce Barnett
(barnettgrymoire.crd.ge.com)

- Fixes for HP-UX 10. Thanks in part to Thomas Wolfram
(wolfprz.tu-berlin.de) and Rick Jones (rajhpisrdq.cup.hp.com)

- Added support for SINIX. Thanks to Andrej Borsenkow
(borsenkow.msksni.de)

- Fixes for AIX (although this system is not yet supported). Thanks to
John Hawkinson (jhawkmit.edu)

- Use autoconf's idea of the top level directory in install targets.
Thanks to John Hawkinson.

- Add missing autoconf packet capture result message. Thanks to Bill
Fenner (fennerparc.xerox.com)

- Fixed padding problems in the pf module.

- Fixed some more alignment problems on the alpha.

- Added explicit netmask support. Thanks to Steve Nuchia
(steveresearch.oknet.com)

- Fixed to handle raw ip addresses such as 0.0.0.1 without "left
justifying"

- Add "sca" keyword (for DEC cluster services) as suggested by Terry
Kennedy (terryspcvxa.spc.edu)

- Add "atalk" keyword as suggested by John Hawkinson.

- Add "igrp" keyword.

- Fixed HID definition in grammar.y to be a string, not a value.

- Use $CC when checking gcc version. Thanks to Carl Lindberg
(carl_lindbergblacksmith.com)

- Removed obsolete reference to pcap_immediate() from the man page.
Michael Stolarchuk (mtsterminator.rs.itd.umich.edu)

- DLT_NULL has a 4 byte family header. Thanks to Jeffrey Honig
(jchbsdi.com)