enhancement and bug fixes made since the 2.4.4 release. A complete
list of change can be found here: http://lftp.yar.ru/news.html
The update is based on fixes provided by Michal Pasternak in PR pkg/16125.
* most code reviewed with help of splint
* introduce new option handling (in/out/action)
- old options are still supported, no plans to remove this
support in next releases
* some automagically handling relating to
- input
- output
- action
if not extra specified
* add more conversions, also add more support of IPv4 addresses
* the address information option (-i) now shows also
- IPv4 registries (by using included current IPv4 CIDR table)
- IPv6 registries
- OUI (vendor) of NIC, if EUI-48/64 is a global one
* an example CGI frontend called "ipv6calcweb.cgi" to display
information about a REMOTE_ADDR on a webpage
- See e.g. http://ipv6.aerasec.de/index2.html for what can be
displayed
- Currently supported languages: en, de
the version of ucd-snmp. Therefore, adjust the wildcard dependencies in
dependents to match exactly (barring "nb" version changes), and bump the
dependent's "nb" versions to reflect the change in dependencies. Otherwise,
an "ethereal" binary package (for example) built against ucd-snmp-4.2.4
will happily install against ucd-snmp-4.2.3nb1, but will fail at run-time
with, ``shared object "libucdsnmp-0.4.2.3.so" not found.''
* added NO_PACKAGE as this must be built for each host
Changes since 1.1.6:
- Added new switch to ipastat(8): -x, treat rule names as POSIX
regular expressions
- Added new switch to ipastat(8): -p <time-back>
- Added new switch to ipastat(8): -k, assume that 1k is equal to 1000 bytes
- Now it is possible to use abbreviated month names in -i and -I options
in ipastat(8)
- Now it is possible to run from the ipa(8)'s command line commands from
"reach" and "expire" sections
- Added new section "include" and new parameter "debug_include" to
the configuration file, also two switches "-tt" for ipa(8) have new sense
- bug fixes
A. Woods <woods@planix.com> with some modifications by me. Changes are:
- better support for building optional plugin packages
- install no longer overwrites existing config files
- sample config files are installed in share/examples
- build no longer fails if not done as root
- appropriate netsaint users and groups are now created
- no longer installs one-time setup script in sbin
- daemon logo
<mipam@ibb.net>. From the release notes:
1.8.4 and 1.8.5 both had bugs that were found right as we were ready
to do a full release and represented good midway points but 1.8.6
should be the stable target.
Changes include:
* The ICMP decoders have been rewritten.
* (This is a summary of recent changes -- not all mine)
* Fixed stream4 offset initialization
* Double Open of snort log file
* Lots of new rules
* Fatal error on problems other than -> and <>
* Fixed stream4 several low memory conditions
* Error checking in stream4/frag2 argument parsing
* snort-db schema updates to 1.05
* --with-pcap-includes should now look at specified pcap
* packet statistics now should be more accurate with regards to lost
frags
* double PID file write
* S4 alignment problems on SPARC fixed ( rpc_decode still has SPARC
alignment errors )
* new snmptrap code
* documentation updates
* Stability fixes in frag2
* SEQ / ACK checking should be correct
* Reassembled packets with stream4 will now also be inspected when
using -z est
* ip fragments are now calculated correctly
* rule headers correctly matched
( multiple CIDR performance greatly increased )
Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN. It
supports active and passive dissection of many protocols (even ciphered ones)
and includes many features for network and host analysis.
Submitted by Niilo Kajander <nk@bsdirc.net> in PR 16091
This new version fixes some (unnamed, sorry) bugs.
The main rationale for the upgrade is to get rid of the dependency on
kth-krb4 for NetBSD>=1.5 systems. For older systems, we provide full
functionality via (a now buildlinked) kth-krb4.
