Libpcap

itojuniijlab.net
- Brought in KAME IPv6/IPsec bpf compiler.
- Fixes for NetBSD.
- Support added for OpenBSD DLT_LOOP and BSD/OS DLT_C_HDLC (Cisco HDLC),
and changes to work around different BSDs having different DLT_ types
with the same numeric value.

Assar Westerlund <assarsics.se>
- Building outside the source code tree fixed.
- Changed to write out time stamps with 32-bit seconds and microseconds
fields, regardless of whether those fields are 32 bits or 64 bits in
the OS's native "struct timeval".
- Changed "pcap_lookupdev()" to dynamically grow the buffer into which
the list of interfaces is read as necessary in order to hold the
entire list.

Greg Troxel <gdtir.bbn.com>
- Added a new "pcap_compile_nopcap()", which lets you compile a filter
expression into a BPF program without having an open live capture or
capture file.

- Fix endian problem with DLT_NULL devices. From FreeBSD via Bill
Fenner (fennerparc.xerox.com)

- Fix alignment problem with FDDI under DLPI. This was causing core
dumps under Solaris.

- Added configure options to disable flex and bison. Resulted from a
bug report by barnettgrymoire.crd.ge.com (Bruce Barnett). Also added
options to disable gcc and to force a particular packet capture type.

- Added support for Fore ATM interfaces (qaa and fa) under IRIX. Thanks
to John Hawkinson (jhawkmit.edu)

- Change Linux PPP and SLIP to use DLT_RAW since the kernel does not
supply any "link layer" data.

- Change Linux to use SIOCGIFHWADDR ioctl to determine link layer type.
Thanks to Thomas Sailer (sailerife.ee.ethz.ch)

- Change IRIX PPP to use DLT_RAW since the kernel does not supply any
"link layer" data.

- Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header
formats.

- Added some new SGI snoop interface types. Thanks to Steve Alexander
(scarefugee.engr.sgi.com)

- Fixes for HP-UX 10.20 (which is similar to HP-UX 9). Thanks to
Richard Allen (rahp.is) and Steinar Haug (sthaugnethelp.no)

- Fddi supports broadcast as reported by Jeff Macdonald
(jeffiacnet.com). Also correct ieee802 and arcnet.

- Determine Linux pcap buffer size at run time or else it might not be
big enough for some interface types (e.g. FDDI). Thanks to Jes
Sorensen (Jes.Sorensencern.ch)

- Fix some linux alignment problems.

- Document promisc argument to pcap_open_live(). Reported by Ian Marsh
(ianmsics.se)

- Support Metricom radio packets under Linux. Thanks to Kevin Lai
(laikgunpowder.stanford.edu)

- Bind to interface name under Linux to avoid packets from multiple
interfaces on multi-homed hosts. Thanks to Kevin Lai
(laikgunpowder.stanford.edu)

- Change L_SET to SEEK_SET for HP-UX. Thanks to Roland Roberts
(rrobertsmuller.com)

- Fixed an uninitialized memory reference found by Kent Vander Velden
(graphixiastate.edu)

- Fixed lex pattern for IDs to allow leading digits. As reported by
Theo de Raadt (deraadtcvs.openbsd.org)

- Fixed Linux include file problems when using GNU libc.

- Ifdef ARPHRD_FDDI since not all versions of the Linux kernel have it.
Reported reported by Eric Jacksch (jackschtenebris.ca)

- Fixed bug in pcap_dispatch() that kept it from returning on packet
timeouts.

- Changed ISLOOPBACK() macro when IFF_LOOPBACK isn't available to check
for "lo" followed by an eos or digit (newer versions of Linux
apparently call the loopback "lo" instead of "lo0").

- Fixed Linux networking include files to use ints instead of longs to
avoid problems with 64 bit longs on the alpha. Thanks to Cristian
Gafton (gaftonredhat.com)

- Added Linux support.

- Fixed savefile bugs.

- Solaris x86 fix from Tim Rylance (t.rylanceelsevier.nl)

- Add support for bpf kernel port filters.

- Remove duplicate atalk protocol table entry. Thanks to Christian
Hopps (choppswater.emich.edu)

- Fixed pcap_lookupdev() to ignore nonexistent devices. This was
reported to happen under BSD/OS by David Vincenzetti
(vincecryptonet.it)

- Avoid solaris compiler warnings. Thanks to Bruce Barnett
(barnettgrymoire.crd.ge.com)

- Fixes for HP-UX 10. Thanks in part to Thomas Wolfram
(wolfprz.tu-berlin.de) and Rick Jones (rajhpisrdq.cup.hp.com)

- Added support for SINIX. Thanks to Andrej Borsenkow
(borsenkow.msksni.de)

- Fixes for AIX (although this system is not yet supported). Thanks to
John Hawkinson (jhawkmit.edu)

- Use autoconf's idea of the top level directory in install targets.
Thanks to John Hawkinson.

- Add missing autoconf packet capture result message. Thanks to Bill
Fenner (fennerparc.xerox.com)

- Fixed padding problems in the pf module.

- Fixed some more alignment problems on the alpha.

- Added explicit netmask support. Thanks to Steve Nuchia
(steveresearch.oknet.com)

- Fixed to handle raw ip addresses such as 0.0.0.1 without "left
justifying"

- Add "sca" keyword (for DEC cluster services) as suggested by Terry
Kennedy (terryspcvxa.spc.edu)

- Add "atalk" keyword as suggested by John Hawkinson.

- Add "igrp" keyword.

- Fixed HID definition in grammar.y to be a string, not a value.

- Use $CC when checking gcc version. Thanks to Carl Lindberg
(carl_lindbergblacksmith.com)

- Removed obsolete reference to pcap_immediate() from the man page.
Michael Stolarchuk (mtsterminator.rs.itd.umich.edu)

- DLT_NULL has a 4 byte family header. Thanks to Jeffrey Honig
(jchbsdi.com)

- Add support for HP-UX. Resulted from code contributed by Tom Murray
(tmurrayhpindck.cup.hp.com) and Philippe-Andri Prindeville
(philippres.enst.fr)

- Update INSTALL with a reminder to install include files. Thanks to
Mark Andrews (mandrewsaw.sgi.com)

- Fix bpf compiler alignment bug on the alpha.

- Use autoconf to detect architectures that can't handle misaligned
accesses.

- Added loopback support for snoop. Resulted from report Steve
Alexander (scaengr.sgi.com)

- Fixed compiler and optimizer bugs. The BPF filter engine uses unsigned
comparison operators, while the code generator and optimizer assumed
signed semantics in several places. Thanks to Charlie Slater
(cslaterimatek.com) for pointing this out.

- Removed FDDI ifdef's, they aren't really needed. Resulted from report
by Gary Veum (veumboa.gsfc.nasa.gov).

- Add pcap-null.c which allows offline use of libpcap on systems that
don't support live package capture. This feature resulting from a
request from Jan van Oorschot (j.p.m.voorschotet.tudelft.nl).

- Make bpf_compile() reentrant. Fix thanks to Pascal Hennequin
(Pascal.Hennequinhugo.int-evry.fr).

- Port to GNU autoconf.

- Fix pcap-dlpi.c to work with isdn. Resulted from report by Flemming
Johansen (fsjcsd.cri.dk).

- Handle multi-digit interface unit numbers (aka ppa's) under dlpi.
Resulted from report by Daniel Ehrlich (ehrlichcse.psu.edu).

- Fix pcap-dlpi.c to work in non-promiscuous mode. Resulted from report
by Jeff Murphy (jcmurphyacsu.buffalo.edu).

- Add support for "long jumps". Thanks to Jeffrey Mogul
(mogulpa.dec.com).

- Fix minor problems when compiling with BDEBUG as noticed by Scott
Bertilson (scottunet.umn.edu).

- Declare sys_errlist "const char *const" to avoid problems under
FreeBSD. Resulted from report by jhereden.com.