- New Linux libpcap implementation, which, in 2.2 and later
kernels, uses PF_PACKET sockets and supports kernel packet
filtering (if compiled into the kernel), and supports the "any"
device for capturing on all interfaces. Cleans up promiscuous
mode better on pre-2.2 kernels, and has various other fixes
(handles 2.4 ARPHRD_IEEE802_TR, handles ISDN devices better,
doesn't show duplicate packets on loopback interface, etc.).
- Fixed HP-UX libpcap implementation to correctly get the PPA for
an interface, to allow interfaces to be opened by interface name.
- libpcap savefiles have system-independent link-layer type values
in the header, rather than sometimes platform-dependent DLT_
values, to make it easier to exchange capture files between
different OSes.
- Non-standard capture files produced by some Linux tcpdumps, e.g.
the one from Red Hat Linux 6.2 and later, can now be read.
- Updated autoconf stock files.
- Filter expressions can filter on VLAN IDs and various OSI
protocols, and work on Token Ring (with non-source-routed
packets).
- "pcap_open_dead()" added to allow compiling filter expressions
to pcap code without opening a capture device or capture file.
- Header files fixed to allow use in C++ programs.
- Removed dependancy on native headers for packet layout.
Removed Linux specific headers that were shipped.
- Security fixes: Strcpy replaced with strlcpy, sprintf replaced
with snprintf.
- Fixed bug that could cause subsequent "pcap_compile()"s to fail
erroneously after one compile failed.
- Assorted other bug fixes.
- README.aix and README.linux files added to describe
platform-specific issues.
- "getifaddrs()" rather than SIOCGIFCONF used, if available.
Solaris, narrow down the platforms, and use specific inclusion rather
than disclusion: mark them as ONLY_FOR_PLATFORM=SunOS-*-*, rather
than NOT_FOR_PLATFORM=NetBSD-*-*.
