# changelog

author: Jerry Lundström <lundstrom.jerry@gmail.com> 1.9.0-1
changelog:
  - Release 1.9.0
    * This release adds a new option to change how the Berkeley Packet Filter
      is generated to include the host restrictions for all selections,
      previously this restriction would only apply to specific parts.
    * Additional tweaks to the RSSM plugin has been made to conform to the
      RSSAC002v3 specification. One noticeable change is that the plugin now
      requires the DNS to be parsed before counted, any error in the parsing
      will result in the message being left out of the statistics.
    * Changes:
      - Fix spacing in BPF filter to look better
      - Fix #146: Add `bpf_hosts_apply_all`, apply any host restriction to all
      - `plugin/rssm`:
        - Remove quoting of `start-period` and correctly handle empty hashes
        - Issue #152, Issue #91: Parse DNS before processing RSSM counters
      - `plugin/rssm/dnscap-rssm-rssac002`: Use `YAML::Dump()` for output
    * Commits:
      47d892b Issue #152: RSSM YAML output
      d4f1466 Issue #152, Issue #91: Parse DNS before processing RSSM counters
      68fc1ff BPF, `bpf_hosts_apply_all`


author: Jerry Lundström <lundstrom.jerry@gmail.com> 1.10.0-1
changelog:
  - Release 1.10.0
    * This release adds a new plugin type "filter" and 5 new plugins that can
      do anonymization, deanonymization and masking of the IP addresses.
    * New features:
      - Check plugins for `pluginname_type()` which returns `enum plugin_type`,
        if missing the plugin is counted as an "output" plugin
      - New plugin type "filter" which calls `pluginname_filter()` prior of
        outputting any data or calling of "output" plugins, if the new function
        returns non-zero then the packet is filtered out (dropped)
      - New extension `DNSCAP_EXT_SET_IADDR` that gives access to a function
        for setting the from and to IP addresses both in the extracted data
        and the wire
    * New plugins:
      - `anonaes128`: Anonymize IP addresses using AES128
      - `anonmask`: Pseudo-anonymize IP addresses by masking them
      - `cryptopan`: Anonymize IP addresses using an extension to Crypto-PAn
        (College of Computing, Georgia Tech) made by David Stott (Lucent)
      - `cryptopant`: Anonymize IP addresses using cryptopANT, a different
        implementation of Crypto-PAn made by the ANT project at USC/ISI
      - `ipcrypt`: Anonymize IP addresses using ipcrypt create by
        Jean-Philippe Aumasson
    * Bugfixes:
      - Fix changing `royparse` and `txtout` with other plugins (thanks to
        Duane Wessels and Paul Hoffman)
      - Free pointers to allocated strings in `text_free()` (thanks to Michał
        Kępień)
      - Fix IP checksum calculation
    * Other changes:
      - `-B` and `-E` can be used without `-w` (thanks to Duane Wessels)
      - Use `pcap_findalldevs()` instead of `pcap_lookupdev()` (thanks to
        Michał Kępień)
      - Document and add `-?` option to all plugins
      - Fix clang `scan-build` bugs and LGTM alerts
      - Use `gmtime_r()` instead of `gmtime()`
      - Update `pcap-thread` to v4.0.0
    * Commits:
      67d8e2c Fix
      fb0ed02 Plugin documentation
      a2c9a6c cryptopant
      39db1ca Deanonymize, IPv6 test
      afc7107 Crypto-PAn, cryptopANT
      f1912cc OpenSSL, anonaes128
      f2bab62 ipcrypt, anonmask
      158b1e7 anonmask help
      60ece58 anonmask
      8f1b138 Plugin types, filter plugin, set iaddr extension, anonymization
              by masking
      b7d7991 IP checksum
      641a23a Free pointers to allocated strings in text_free()
      4d313bf pcap_findalldevs()
      091e0ca Use pcap_findalldevs() instead of pcap_lookupdev()
      6a7b25e Clean up use of feature test macros on Linux
      cbba14c Configure, uninitialized
      f228c9c Code formatting
      3fd738c man-page
      770168a Test
      714e4f5 Fix -B <begin> so that it works when reading offline pcap files.
      8675bea Test
      911fec9 Implementing test9 as a test of -B and -E command line args.
      a7cc72d -B <begin> and -E <end> can work fine without -w <base>.
      04c4928 Made the same changes to txtout as were in 165a786
      165a786 Workaround for stdio mystery causing duplicate royparse output.


author: Jerry Lundström <lundstrom.jerry@gmail.com> 1.10.1-1
changelog:
  - Release 1.10.1
    * Fix various issues found by code analysis tools, a few compiler warnings
      removed, undefined bit shift behavior fixed, parameter memory leaks
      plugged and documentation updates.
    * Fixes:
      - `dump_dns`: Remove usage of `strcpy()` and use `snprintf()` instead
        of `sprintf()`
      - `bpft`:
        - Use `text_ptr->len` to store length of generated text
        - Use `memcpy()` instead of `strcat()`
        - Remove unneeded `realloc()` and `strcpy()`
      - `plugins/cryptopan`: Fix strict-aliasing warnings
      - `network`: Rework part of `dl_pkt()` to remove usage of `strcpy()`
        and use `snprintf()` instead of `sprintf()`
      - `plugins/anonaes128`: Use `a6` as dest when copying v4 addresses for
        readability and code analysis
      - `plugins/cryptopan`: Run first pass separate to eliminate a 32bit
        shift by 32 (undefined behavior)
      - `plugins/cryptopant`: Fix memory leak of `keyfile` if `-k` is
        specified more then once
    * Documentation:
      - Update `README.md` with correction to building from git and note
        about PCAP on OpenBSD
      - Fix #190: Update link to `libbind` source
    * Commits:
      074923c Funding
      5d2e84c libbind
      8ee9f2a Travis-CI
      6babd09 Fixes
      bb2d1c7 README, compile warnings
      0d9cd9c LGTM, Travis-CI


author: Jerry Lundström <lundstrom.jerry@gmail.com> 1.10.2-1
changelog:
  - Release 1.10.2
    * Fixed bug in the handling of defragmentation configuration which lead
      to the use of a local scope variable later on and caused unexpected
      behavior.
    * Commits:
      91692b8 Frag conf
      6a74376 Package
      d0d1a6d Package


author: Jerry Lundström <lundstrom.jerry@gmail.com> 1.10.3-1
changelog:
  - Release 1.10.3
    * Fixed plugins inclusion in deb packages for Debian and Ubuntu.
    * Commits:
      017ebb2 Deb packages
      cf59143 COPR, spec


