Revisions of nfdump
buildservice-autocommit
accepted
request 1163788
from
Martin Hauke (mnhauke)
(revision 26)
baserev update by copy to link target
Martin Hauke (mnhauke)
accepted
request 1163778
from
Bernhard Wiedemann (bmwiedemann)
(revision 25)
Update to version 1.7.4 * make builds reproducible (boo#1047218) * various bug fixes and stability fixes * Lot of old code got cleaned up
buildservice-autocommit
accepted
request 1144920
from
Martin Hauke (mnhauke)
(revision 24)
baserev update by copy to link target
Martin Hauke (mnhauke)
accepted
request 1144891
from
Dominique Leuenberger (dimstar)
(revision 23)
- Provide user/group symbol for the user created during pre.
buildservice-autocommit
accepted
request 1111351
from
Martin Hauke (mnhauke)
(revision 22)
baserev update by copy to link target
Martin Hauke (mnhauke)
accepted
request 1108561
from
Martin Hauke (mnhauke)
(revision 21)
- Update to versin 1.7.3 * Add zstd compression speeds compression (multi threading) * Add compression levels. * Fix some nfprofile issues. - Update to versin 1.7.2 * Update nfcapd/sfcapd man pages for erspan data link. * Implement erspan protocol in nfpcapd packet processing. * Sync ipfix and netflow_v9 for option field processing. * Handle buggy option data(!) from exporter. * Fixes compile warnings for Linux(es) and *BSDs. * Fix v9 option template processing. * Fix option record processing for multiple records. * Fix ipfix nbar processing. * Update pcap reader with erspan device. * Fix fmt argument parsing. * Add IPv4 in IPv6 special cases in geolookup. * Fix IP version check in geolookup. * Disable signals in threads. Different OS handle signals differently. * Recongnize old sampler with missing algorithm tag. * Fix memory leaks. * Update pcap_reader and add CISCO application performance monitor tags. * Add ERSPAN decoding to pcap_reader. * Check uid root for src spoofing option. * Fix valgrind error for uninitalised memory. * Update lz4 code. * Update number of enabled tags in v9 and ipfix. * Add collector option -X to limit stored data. * Implement %sasn, %dasn organisation name printing tags.
buildservice-autocommit
accepted
request 1060181
from
Eric Schirra (ecsos)
(revision 20)
baserev update by copy to link target
Eric Schirra (ecsos)
committed
(revision 19)
Eric Schirra (ecsos)
accepted
request 1057744
from
Martin Hauke (mnhauke)
(revision 18)
- Update to version 1.7.0 * Fix #394. Event labeling * Implement #393 consistent logging * Add feature #391. Add country code aggregation * Fix #392. Fix format options with IPv6 * Implement #390. Aggregation for GeoDB's enriched AS data * Add OpenBSD pflog decoding in nfpcapd and nfdump * Fix #389 receiving IPv4 on IPv6 socket in sfcapd * Fix #385 bug when compiled on i386 arch - 32bit alignment * Fix #384 bug when compile with --enable-nsel * Implement #366 Linux NFLOG link layer protocol in nfpcapd * Fix #381 pcap overwrite in nfpcapd fixed * Implement #377. Rework sampling code in general. Switch to packet interval/space notation. Map older sampling to new notation. * Fix #375 relative timestamps with sysUptime id 160 * Rework nbar code. Use new array records and fix nbar bug in older versions. * Fix #370. Help shows correct option -A * Fix #369. Legacy -M for NfSen works again * Improve nbar handling. Add private enterprise number decoding
buildservice-autocommit
accepted
request 1009677
from
Dirk Stoecker (dstoecker)
(revision 17)
baserev update by copy to link target
Dirk Stoecker (dstoecker)
accepted
request 1008291
from
Martin Hauke (mnhauke)
(revision 16)
- Update to version 1.7.0.1 * Fix build issues in nfdump-1.7.0 - Drop patches: * 0001-Add-missing-variable-initialization.patch * 0002-Handle-fscanf-return-value-in-pidfile.c.patch * 0003-Fix-snprintf-length-argument.patch * fix-build.patch - Update to version 1.7.0 * nfdump is now a multi-threaded program and uses parallel threads mainly for reading, writing and processing flows as well as for sorting. This may result in a 2 to 3 times faster flow processing, depending on the tasks. The speed improvement also heavily depends on the hardware (SSD/HD) and flow compression option. * For netflow v9 and IPFIX, nfdump now supports flexible length fields. This improves compatibility with some exporters such as yaf and others. The netflow v9 decoder is more flexible in decoding. * Support for Cisco Network Based Application Recognition (NBAR). * Supports Maxmind geo location information to tag/geolocate IP addresses and AS numbers. * nfpcapd automatically uses TPACKET_V3 for Linux. This improves packet processing. It adds new options to collect MAC and VLAN information as well as the first packet of the payload. * Metric exports: By default, every 60s a flow summary statistics can be sent to a UNIX socket. The corresponding program may be nfinflux to insert these metrics into an influxDB or nfexporter for Prometheus monitoring. - Add patches:
buildservice-autocommit
accepted
request 978529
from
Martin Hauke (mnhauke)
(revision 15)
baserev update by copy to link target
Martin Hauke (mnhauke)
accepted
request 978523
from
Martin Hauke (mnhauke)
(revision 14)
- Add patch: * fix-build.patch (fix build on TW)
buildservice-autocommit
accepted
request 965576
from
Dirk Stoecker (dstoecker)
(revision 13)
baserev update by copy to link target
Dirk Stoecker (dstoecker)
accepted
request 965018
from
Martin Hauke (mnhauke)
(revision 12)
- Update to version 1.6.24 * Fix cmd line processinf in nfanon. #328 * Make configure.ac autoconf 2.69 compatible * Cleanup automake files. Fixes #304. * Fix link handling in nfpcapd * Fix compile flags #304 * Add NAT event record support for IPFIX. #298 * Fix issue #296 - broken json format with option -q * Fix json msec formating * Silence short packet logs due to small snaplen in pcaproc.c #221 * Fix minor bugs
buildservice-autocommit
accepted
request 891847
from
Lars Vogdt (lrupp)
(revision 11)
baserev update by copy to link target
Lars Vogdt (lrupp)
accepted
request 891124
from
Martin Hauke (mnhauke)
(revision 10)
- Update to version 1.6.23 * Fix potential FreeNode without valid Node in nfpcapd. * Add all non TCP/UDP IP protocols as streams in nfpcapd * Add mpls unwrap in nfpcapd. Skip MPLS labels * Add ESP to processed protocols in nfpcapd. * Some Code cleanup * Change spin lock to native C11 lock * Cleanup code for issue #283 * Fix minor nfpcapd issues * Add mpls unwrap in sflow code - adds mpls labels if available * Update rbtree. * Fix potential deadlock in nfpcapd if it terminates. * Add packet capture buffer size to nfpcapd * Fix sflow code extended field parsing. #262 and #273 * Fix endless loop of nfexpire, if it does not find files * Fix processing deoding error for yaf exporter * Zero out tcp flags for non TCP records * Add reverse element enterprise ID 29305 for counter values * Add biFlow direction element 239 * Add flow end reason element 136 * Make -Tall the default for nfcapd to collect extensions * Code cleanup and boundary checks in option template processing * Implement element 160 (SystemInitTime) in option template * Add Element 160 (SystemInitTime) in flow record used by Huawei * Fix path handling for -l * Fix print plain numbers #263
buildservice-autocommit
accepted
request 856479
from
Martin Hauke (mnhauke)
(revision 9)
baserev update by copy to link target
Martin Hauke (mnhauke)
accepted
request 851667
from
Martin Hauke (mnhauke)
(revision 8)
- Update to version 1.6.22 * Fix nfreplay v5 time shift bug * add support for >=, <= comparators. * Fix yacc/bison warnings. Cleanup unused tokens * Fix syntax error 'flags AS' as AS is a reserved word. * Add element 139 for ICMP type/code in IPv6. * Fix IPv4/IPv6 statistics representation. * Cleanup nip/xip filter syntax. Add filter syntax 'nip in [ <iplist>]'. * Add nfversion to nfpcapd * Add collected netflow/sflow version in nfdump record. * Fix GuessDir bug. * Re-address issue #231 - remove strict rule rfc 7011.
buildservice-autocommit
accepted
request 824142
from
Dirk Stoecker (dstoecker)
(revision 7)
baserev update by copy to link target
Displaying revisions 1 - 20 of 26