2004-05-29 0.49a
- numerous portability fixes here and there
- real event.3 manpage
2004-05-27 0.49
- autoconf'ified, sort of
- use advanced event mechanisms (epoll, kqueue, devpoll) when available
- new option: -i file (or -i -) to read hosts to check from file
- add timeout for dsbl cookie
2004-02-17 0.46
- adopted for new DSBL format
- changed protocol names: http=>http-connect, ftp=>ftp-user
- do not stop on Content-Type: header seen in HTTP-CONNECT
responses (what an idiotic software does this?!)
- removed obsolete 118[0-4] ports (old mimail variants)
2003-08-07 0.45a
- fixed multihomed proxy detection with new DSBL
(DSBL now correctly replies with "250 listed [ip.add.re.ss]" instead of
"220 listed [ip.add.ress]" to the final end-of-message terminator)
* Support for SLP queries on multiple network interfaces
* Support for SLP query through a unicast
* DHCP code
* Added support for the net.slp.DAHeartBeat setting
* Make attribute compares case insensitive as per RFC 2608
* Added PID monitoring. Now when the process that called SLPReg()
(with SLP_REG_FLAG_WATCH_PID) dies the registration will automatically
be deregistered.
patch-a[cdefg] fix compilation warnings and errors (all the world is not
Linux/i386).
better to just vegetate while waiting in the early hours of the morning for
something to finish building rather than try to get some pkgsrc work done...
Changes:
* vpnc-0.3.2.tar.gz Mon Nov 22 01:14:29 CET 2004
* added support for preshared without xauth
* fixed NAT-T support with IOS and PIX
* fixed IP-Len header (Christian Lackas)
* fixed reconnection problems with IOS and PIX
* vpnc-0.3.1.tar.gz Sat Nov 13 01:46:42 CET 2004
* fixed segfault in --print-config
* vpnc-0.3.tar.gz Sat Nov 13 01:16:37 CET 2004
* included IPSec over UDP and NAT-T support, thanks to Tomas Mraz
and Martin von Gagern
* added support for interactive authentication (security tokens for
example)
* fixed IOS support
* updated man-page
* updated TODO list
* fixed byte-order in debug ouput
o Fixed a memory leak that would generally consume several hundred
bytes per down host scanned. While the effect for most scans is
negligible, it was overwhelming when Scott Carlson
(Scott.Carlson(a)schwab.com) tried to scan 24 million IPs
(10.0.0.0/8). Thanks to him for reporting the problem.
o Fixed a bug in ACK scan that could cause Nmap to crash with the
message "Unexpected port state: 6" in some cases. Thanks to Glyn
Geoghegan (glyng(a)corsaire.com) for reporting the problem.
o Change IP protocol scan (-sO) so that a response from the target
host in any protocol at all will prove that protocol is open. As
before, no response means "open|filtered", an ICMP protocol
unreachable means "closed", and most other ICMP error messages mean
"filered".
o Changed IP protocol scan (-sO) so that it sends valid ICMP, TCP, and
UDP headers when scanning protocols 1, 6, and 17, respectively. An
emtpy IP header is still sent for all other protocols. This should
prevent the error messages such as "sendto in send_ip_packet:
sendto(3, packet, 20, 0, 192.31.33.7, 16) => Operation not
permitted" that Linux (and perhaps other systems) would give when
they try to interpret the raw packet. This also makes it more
likely that these protocols will elicit a response, proving that the
protocol is "open".
o Null, FIN, Maimon, and Xmas scans now mark ports as "open|filtered"
instead of "open" when they fail to receive any response from the
target port. After all, it could just as easily be filtered as open.
This is the same change that was made to UDP scan in 3.70. Also as
with UDP scan, adding version detection (-sV) will change the state
from open|filtered to open if it confirms that they really are open.
o Fixed a crash on Windows systems that don't include the iphlpapi
DLL. This affects Win95 and perhaps other variants. Thanks to Ganga
Bhavani (GBhavani(a)everdreamcorp.com) for reporting the problem and
sending the patch.
o Ensured that the device type, os vendor, and os family OS
fingerprinting classification values are scrubbed for XML compliance
in the XML output. Thanks to Matthieu Verbert
(mve(a)zurich.ibm.com) for reporting the problem and sending a patch.
o Changed to Nmap XML DTD to use the same xmloutputversion (1.01) as
newer versions of Nmap. Thanks to Laurent Estieux
(laurent.estieux(a)free.fr) for reporting the problem.
Changes since 1.21:
- Updated test case, removed www.bundesregierung.de
- Geo::Mirror: fallback to using Geo::IP::PurePerl if Geo::IP
is not available
- Geo::Mirror: added support for mirror freshness
- Added support for Netspeed
- Fixed IP address in examples
Chnages:
* Properly maintain window position on restart and when hiding
or unhiding the window via the system tray icon.
* Time left estimation for active downloads (Downloading or Looking)
is now available in the downloads view right-click context menu
where appropriate, if exactly one download is selected.
* Added context menu (=right-click menu) headers to avoid accidental
selection of the first item in the list, e.g. 'Pause' in the
downloads context menu.
* Fixed/Improved core detection for MacOSX [puck lock]
* French translation of documentation added [Marc Framboisier]
* Added command line switches to disable certain pages:
--disable-dl-page
--disable-ul-page
--disable-search-page
--disable-shared-page
--disable-stats-page
* Slovak translation of the GUI added [Vaclav Ogursky]
* Updated translations: Italian [Guido Grazioli], Polish [Piotr Borys],
French [Marc Framboisier]
* miscellaneous smaller fixes [Thomas Lussnig, Stéphane Loeuillet]
* recognise donkey-53.3 hybrid and show the server list (instead of
thinking it's an overnet-only core); patch by Suren Chilingaryan
(patch #996929).
* New and improved connect dialog. This time hopefully much simpler.
Requires a core with version 1.0 or later for the local core
detection part (these cores write a cookie into /tmp which the
GUI can detect and use to authenticate on the admin port locally).
If you want to use older cores with this GUI, please use the
'remote core' function the dialog, and set up the admin user
and admin password manually in the command line client before that.
(v1.0 cores will be available soon)
Changes:
o Fixed bug in UDP connection code, using pktinfo support. [BUG #796765]
o Fixed a segfault in the DNS lookup routines, caused by invalid DNS
configurations.
o Fixed two compilation issues on SCO Unix 3.2 v 5.0.4. [BUG #857650],
[BUG #857657]
o Fixed bug in command line switch `-i' on non-linux OS such as Solaris.
[BUG #864780]
o The debugging support now works on libc's that don't allow NULL pointers
passed for string (`%s') modifiers.
Changes:
* Made code thread safe by replacing gethostbyname with gethostbyname_r
* Added GeoIP_country_code_by_ipnum and GeoIP_id_by_ipnum to use
existing ulong IP Address in numeric form instead of having to
convert it to string (Boris Hajduk)
* Updated geoipupdate to report invalid userID and productID errors
* Added support for GEOIP_INDEX_CACHE - which just caches
the most frequently access index portion of the database, resulting
in faster lookups than GEOIP_STANDARD, but less memory usage than
GEOIP_MEMORY_CACHE (Frank Mather)
* Made GEOIP_CHECK_CACHE work with GEOIP_STANDARD mode - reloads filehandle
in case file changes.
* Made GeoIP City code thread safe
* Fixed bug with geoipupdate reading in product ids
* Added support for GeoIP Netspeed geoipupdate
* Fix memleak in lookupaddress (Ludwig Nussel/SUSE)
* Add prototype for _full_path_to to make 64bit clean (Ludwig Nussel/SUSE)
so CFLAGS is used as set in the standard make(1) rules of the platform.
This should fix the problem that "-pipe" is not available on IRIX.
Don't use mv(1) or rm(1) when installing -- the binary should not be
there anyway when using pkgsrc.
Don't define ${INSTALL} -- it should be pointing to the BSD install(1)
already in the standard make(1) rules of the platform (or somehow
inherited from pkgsrc rules). Works for NetBSD, untested elsewhere.
Based on suggestions in PR pkg/27429 by Georg Schwarz.
Major changes:
Update databases
General:
- replace md5 function from openssl with a copy of coreutils (licence issue)
- add support for IEEE/iab.txt database
ipv6calc:
- add support for recognizing 6to4 addresses generated by
Microsoft OS
ipv6logconv:
- add support for recognizing 6to4 addresses generated by
Microsoft OS
- add support for ISATAP addresses
