so don't depend on devel/gindent on these two platforms.
* USE_BUILDLINK2 implies AUTOMAKE_OVERRIDE=NO.
* Don't use the hackish test for libwrap supplied in the configure script.
Instead, just specify the necessary variables to link against libwrap
in the package Makefile.
This closes PR 18712 by Greg A. Woods.
Tnm changes since 2.1.10:
15/6/01 (bug fix) Fixed a buffer overrun in ntping. This is actually
the reason to make this bugfix release public.
2/11/99 (bug fix) Make sure that remaining job times do not increase if
the system clock moves backwards.
17/5/99 (bug fix) Make sure that commands bound to a recv event are
always evaluated.
6/4/99 (bug fix) Fixed a Y2K bug in tnmHttp.c (thanks to bkozuma@aol.com
for finding this problem).
23/3/99 (bug fix) Accept derived types (e.g. DisplayString) in a varbind
list.
9/3/99 (bug fix) Fixed bugs in straps.c which could cause security
problems due to buffer overruns or signed/unsigned conversion.
8/3/99 (new feature) Added the global tnm(cache) variable which points
to a directory where Tnm saves frozen MIB files. The default value for
tnm(cache) is compatible with previous 2.1.X releases.
Tkined changes since 1.4.10:
21/4/99 (bug fix) The size of the canvas is now independent from the
resolution of the display. Further, PostScript dumps should now fit
on the selected page size.
(christianbiere at gmx dot de) in PR pkg/19152.
Changes since 0.91.0:
* Will now verify the SHA1 of downloaded files in the background.
* New configuration parameter for the directory where "bad files" not
matching their advertised SHA1 should be put (don't forget to
configure it, as it defaults to /tmp).
* Files are now copied in the background, so it is possible to setup the
various "download" directories on different filesystems.
* Node connection time and remote node's uptime(if available) are now
shown.
* It is now possible to paste a "magnet:" URI in the search to launch a
SHA1 search.
* The "connection indicator" at the bottom left is now a toggle.
Depressing it will terminate any Gnet connection but will continue to
serve uploads and process downloads.
* The active download status now shows how many sources are available and
how many are currently active (i.e. downloading). It will also show the
estimated remaining time for the whole file, as well as the global
reception rate for the file, accounting for all currently active
sources.
* Fixed bug that prevented proper downloading from recent
BearShare(4.1.x or better) and Shareaza (1.6.0.x or better) nodes
when the SHA1 of the file is known.
* Will now protect against "PUSH floods" by banning the relevant IPs.
* At startup, scan the download "tmp" dir for orphan files and reintegrate
them into the fileinfo database, moving completed files to the relevant
directory(depending on whether its SHA1 checked OK).
* Minor bug fixing: improper countdown for push timeout when falling back,
fixed corner-case processing that could lead to crashes or incorrect
behaviour, accidental localization on X-Live-Since headers, freezing of
the GUI when clearing many uploads, obscure portability fixes.
A security hole has been discovered in versions 2.2.2 through 2.2.6
of Samba that could potentially allow an attacker to gain root access
on the target machine. The word "potentially" is used because there
is no known exploit of this bug, and the Samba Team has not been able to
craft one ourselves. However, the seriousness of the problem warrants
this immediate 2.2.7 release.
1) ensure we send the notify message in the same way it is expected
to be received by srv_spoolss_receive_message().
2) attribute matching on truncate only matters when opening truncate
with current SYSTEM|HIDDEN -> NONE. It's fine to truncate on open
with current NONE -> SYSTEM | HIDDEN.
3) Fix bug in rpcclient's deldriver command
4) Don't set global_machine_password_needs_changing if
lp_machine_password_timeout() is set to zero
5) don't parse the BUFFER5 if the buffer length is zero
6) fix core dump if pdbedit is run as non-root or smbpasswd file does
not exist
7) Ensure can_delete() returns correct error code
8) correctly return NT_STATUS_DELETE_PENDING from open code
9) fix bug that assumed dos_unistr2 length was in ucs2 units, not bytes
10) check the long_archi name is not null when deleting a printer driver.
fixes core dump in smbd when using rpcclient's deldriver
11) fix fd leak with kernel change notify on Linux 2.4 kernels
12) must add one to the extra_data size to transfer the 0 string
terminator. This was causing "wbinfo --sequence" to access past the
end of malloced memory
13) fix for large systems allowing more than 65536 files open in
NTcreate&X
14) Fix bug in %U expansion
Prompted by Simon Hitzemann in PR 19061
Changes from 0.6.6.6 to 0.6.7:
0.6.7 20020702
+ Updated the passive OS fingerprint database (853 records)
!! Fixed the strlcpy bug in the the telnet dissector (oops alor mistake)
!! Fixed a possible sigfault in the rlogin dissector
!! Fixed the exit_func for Mac OS X
Avoid negative request ids (default_avoid_negative_request_ids=1) as
this might cause problems with some devices. Solution provided by
Tobias Oetiker in a private mail.
* with thresholds ... have two decimals in % mode
* give threshdesc and value as ar 4 and 5 of called threshprog
* propperly ignore signal 127 on UNIX
* make cfgmaker foundry aware
* ds3 (30) and sonet (39) are wan interface types too
added them to the $if_is_wan group in cfgmaker
* don't give up too quickly if a confcache setup entry does not match ...
* make rateup.c (64bit) work on macos x
* debug 64bit rateup ...
* drop special MacOS X includes they are harmful on 10.2. Use bsd approach
* use long long in log files to enable logging of FAST links
long long = 64 bit integers
* make cfgmaker support ifHighSpeed propperly and teach it about Juniper
* make output of cfgmaker such that indexmaker will sort propperly
bump PKGREVISION
---
1469. [bug] buffer length calculation for PX was wrong.
1468. [bug] ns_name_ntol() could overwite a zero length buffer.
1467. [bug] off by one bug in ns_makecannon().
1466. [bug] large ENDS UDP buffer size could trigger a assertion.
1465. [bug] possible NULL pointer dereference in db_sec.c
1464. [bug] the buffer used to construct the -ve record was not
big enough for all possible SOA records. use pointer
arithmetic to calculate the remaining size in this
buffer.
1463. [bug] use serial space arithmetic to determine if a SIG is
too old, in the future or has internally constistant
times.
1462. [bug] write buffer overflow in make_rr().
bump PKGREVISION.
--
825. [bug] the buffer used to construct the -ve record was not
big enough for all possible SOA records. use pointer
arithmetic to calculate the remaining size in this
buffer.
824. [bug] use serial space arithmetic to determine if a SIG is
too old, in the future or has internally constistant
times.
824. [bug] write buffer overflow in make_rr().
823. [bug] getnetbyname() was broken.
822. [bug] write buffer overflows in getnetby{name,addr}().
1400. [bug] Block the addition of wildcard NS records by IXFR
or UPDATE. [RT #3502]
1399. [bug] Use serial number arithmetic when testing SIG
timestamps. [RT #4268]
1398. [doc] ARM: notify-also should have been also-notify.
[RT #4345]
1397. [bug] J.ROOT-SERVERS.NET is now 192.58.128.30.
1396. [func] dnssec-signzone: adjust the default signing time by
1 hour to allow for clock skew.
1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
have a working implementation. [RT #4079]
1394. [func] It is now possible to check if a particular element is
in a acl. Remove duplicate entries from the localnets
acl.
1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
is not available in the kernel to prevent accidently
listening on IPv4 interfaces.
1392. [bug] named-checkzone: update usage.
1391. [func] Add support for IPv6 scoped addresses in named.
1390. [func] host now supports ixfr.
1389. [bug] named could fail to rotate long log files. [RT #3666]
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
defining HAVE_IFLIST_SYSCTL. [RT #3770]
1387. [bug] named could crash due to an access to invalid memory
space (which caused an assertion failure) in
incremental cleaning. [RT #3588]
1386. [bug] named-checkzone -z stopped on errors in a zone.
[RT #3653]
1385. [bug] Setting serial-query-rate to 10 would trigger a
REQUIRE failure.
1384. [bug] host was incompatible with BIND 8 in its exit code and
in the output with the -l option. [RT #3536]
1383. [func] Track the serial number in a IXFR response and log if
a mismatch occurs. This is a more specific error than
"not exact". [RT #3445]
1382. [bug] make install failed with --enable-libbind. [RT #3656]
1381. [bug] named failed to correctly process answers that
contained DNAME records where the resulting CNAME
resulted in a negative answer.
1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
1379. [func] 'rndc status' now reports tcp and recursion quota
states.
1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
1377. [func] dns_zone_load{new}() now reports if the zone was
loaded, queued for loading to up to date.
1376. [func] New function dns_zone_logc() to log to specified
category.
1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
data cache.
1374. [func] dns_adb_dump() now logs the lame zones associated
with each server.
1373. [bug] Recovery from expired glue failed under certian
circumstances.
1372. [bug] named crashes with an assertion failure on exit when
sharing the same port for listening and querying, and
changing listening addresses several times. [RT# 3509]
1371. [bug] notify-source-v6, transfer-source-v6 and
query-source-v6 with explict addresses and using the
same ports as named was listening on could interfere
with nameds ability to answer queries sent to those
addresses.
1370. [bug] dig '+[no]recurse' was incorrectly documented.
1369. [bug] Adding an NS record as the lexicographically last
record in a secure zone didn't work.
1368. [func] remove support for bitstring labels.
1367. [func] Use response times to select forwarders.
1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
1365. [func] "localhost" and "localnet" acls now include IPv6
addresses / prefixes.
1364. [func] Log file name when unable to open memory statistics
and dump database files. [RT# 3437]
1363. [func] Listen-on-v6 now supports specific addresses.
1362. [bug] remove IF_RUNNING test when scanning interfaces.
1361. [func] log the reason for rejecting a server when resolving
queries.
1360. [bug] --enable-libbind would fail when not built in the
source tree for certain OS's.
1359. [security] Support patches OpenSSL libraries.
http://www.cert.org/advisories/CA-2002-23.html
1358. [bug] It was possible to trigger a INSIST when debugging
large dynamic updates. [RT #3390]
1357. [bug] nsupdate was extremely wasteful of memory.
1356. [tuning] Reduce the number of events / quantum for zone tasks.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1354. [doc] lwres man pages had illegal nroff.
1353. [contrib] sdb/ldap to version 0.9.
1352. [bug] dig, host, nslookup when falling back to TCP use the
current search entry (if any). [RT #3374]
1351. [bug] lwres_getipnodebyname() returned the wrong name
when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
was set.
1350. [bug] dns_name_fromtext() failed to handle too many labels
gracefully.
1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
http://www.cert.org/advisories/CA-2002-23.html
1348. [port] Win32: Rewrote code to use I/O Completion Ports
in socket.c and eliminating a host of socket
errors. Performance is enhanced.
1347. [placeholder]
1346. [placeholder]
1345. [port] Use a explicit -Wformat with gcc. Not all versions
include it in -Wall.
1344. [func] Log if the serial number on the master has gone
backwards.
If you have multiple machines specified in the masters
clause you may want to set 'multi-master yes;' to
suppress this warning.
1343. [func] Log successful notifies received (info). Adjust log
level for failed notifies to notice.
1342. [func] Log remote address with TCP dispatch failures.
1341. [func] Allow a rate limiter to be stalled.
1340. [bug] Delay and spread out the startup refresh load.
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
lookups. Bit string lookups are no longer attempted.
1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
1336. [func] Nibble lookups under IP6.ARPA are now supported by
dns_byaddr_create(). dns_byaddr_createptrname() is
deprecated, use dns_byaddr_createptrname2() instead.
- Dutch translation of the GUI updated by Myckel Habets.
- fix the compilation problem with Berkeley DB4. (open function of db4.0 has the
same prototype as DB3 one but db4.1 does not).
- fix erroneous tooltip of virtual share entry.
- In find popup menu and user share list popup menu, only GDL having the same
size as the selected rows are displayed in the first level of the menu.
- In find popup menu and user share list popup menu, GDL entries were modified.
GDL ID is not displayed and GDL size is displayed using locale format.
- file size and upload position of the upload list is now displayed using locale
format.
- Support of new flag added: IGNORE_PUBMSG.
- it is now possible to flag user from the public chat by selecting a line (or
part of a line) containing a nickname. It is even possible to flag virtual
user like Hub-Security.
This version fixes compilation problems with old C compilers and with
Berkeley DB 4.0. Malformed MyINFO data are handled more gracefully,
IGNORE_SLOT_LIMIT properly works now, a program to send DCTC command to
running client from a script was added, and a new flag was added to ignore
public chat messages from a user.
- moved to sourceforge, maintainer changed
- manpage included in main distrib
- select(2) code included in main distrib
- multiple address range support
was altered to include sys/queue.h, which supplies a pile of macros
and defines _SYS_QUEUE_H_. Prior to this change, ettercap was able
to pull in its own ec_queue.h file to define these macros (and the
missing ones below) and also define _SYS_QUEUE_H_. The two macros
listed below are not in our definition of the macros, so we define
them manually later, if they're not defined by the include files.
---
Revision 2.3 2001/11/20 17:10:19 tliston
Added support for Linux window probes.
Revision 2.2 2001/10/02 22:51:51 tliston
I screwed up! Moved something I shouldn't oughtta move... Sorry!
Revision 2.1 2001/10/02 17:04:23 tliston
Added many new command line parameters (-T, -d, -q, -R, -o) and did some
minor bug squashing and cleanup.
20021104/PB:
update IPv6 address allocation for 2001::/16
update IPv4 databases
remove user/group on "make install" to enable non-root RPM build
update text on ipv6calcweb.cgi
minor reviews
tag version 0.44
20020830/PB:
add support of dashes on MAC/EUI-48 addresses
showinfo prints now type of EUI-48 addresses
20020817/PB:
fix configure.in, learnt now how to proper use AC_CHECK_LIB and AC_CHECK_HEADERS
credits to Arkadiusz Miskiewicz!
20020730/PB:
fix not proper autodetection code for MAC addresses
tag version 0.43
20020717/PB:
update URL to OUI database, cosmetic OUI fixes, update databases
tag version 0.42
20020511/PB:
bugfix not showing OUI on showinfo "-i"
update CIDR and OUI data
- Dutch translation of the GUI updated by Myckel Habets.
- Download date of share list added to cached share list.
- Cached share lists can now be sorted by size and by date.
- Add capability to generate automatically autoscan pattern for selected GDL.
- fix compilation problem with Berkeley DB 4 (open function has a different
prototype).
- French translation of the GUI updated by Nicolas Le Gaillart.
- GDL renaming part now works properly.
- GDL end program support added.
- fix the missing translation files problem in the RPM file.
- find result list modified. The local filename column is gone and is replaced
by a column with the connection speed of the user having the file. Currently,
only speed of users on the same hub is displayed.
- user list partially rewritten and is now displayed faster when reconnecting
to a client.
- button added to close all private chats in one click.
- dc_gui does not hang anymore when it retrieves the hublist. The "connect"
label will blink when the hublist is received.
Fixed a compilation problem with Berkeley DB4, updated the man page, and
added the ability to start a program when a GDL ends. Downloading the
hublist no longer hangs the GUI, automatic generation of autoscan patterns
was added, and a problem with missing translation files in the RPM was
fixed.
tables of DNS traffic on your network. Currently dnstop displays
tables of:
* Source IP addresses
* Destination IP addresses
* Query types
* Top level domains
* Second level domains
http://dnstop.measurement-factory.com/
- Fixed support for 32-bits IP Filter v3.4.x rule group numbers (previous
incorrect implementation was introduced in IPA-1.1.3)
- Now it is possible to remove not needed accounting systems support
with the help of -DWITHOUT_{IPFW|IP6FW|IPFIL|PF} options
- Now FreeBSD IPFW2 is supported
- "getsockopt(IPV6_FW_GET): Invalid argument" IPv6 Firewall bug was fixed
- Minor improvements for IPv4/v6 Firewall support
Changes include:
* Now uses HTTP/1.1, which implies support for persistent connections.
* gtk-gnutella will now monitor whether we're connected to Internet and
slow down its connection requests when it detects the connection was
broken (after a delay of ~3 minutes at most).
* Download swarming is now supported: gtk-gnutella will download different
portions of the same file from many hosts, as long as alternate sources
are available.
* The download mesh (alternate source collection during downloads) is now
used to fill the download queue with more sources.
* Alternate locations can also be passively collected from query hits.
You can enable this in the swarming section on the download config pane.
* Download scheduling was entiretly redesigned to avoid hammering busy
hosts and scale to 5000+ entries in the queue without slowing down the
whole.
* Is now smart about the "push" flag and will try to ignore it if possible,
in case the remote host wrongly set the flag but is not firewalled.
* gtk-gnutella now remembers the files it downloaded and will ignore
further requests to download the same file. It will visually mark those
files, as well as the ones it already shares, by showing them in lighter
color in the search results.
* It is possible to supply to gtk-gnutella your own ignore lists by SHA1
and by name/size but the feature is under-documented.
* Added an "expert mode". Only when this is enabled will gtk-gnutella show
the users some of the most complex settings.
* New Gnutella statistics pane, showing the packets we sent and received,
how many we generated, and the reasons why we drop packets, by packet
type.
* Now understands UTF-8 queries, but does not generate them.
* Fixed important bugs whereby all earlier versions of gtk-gnutella were
unintentionally corrupting the Gnutella traffic!
* Moved away from the public hostcaches and now uses the Gnutella Web
Cache.
* Will now show all upload attempts, not only the ones that are
transferring. If the connection is aborted, the reason is also shown.
* New search stats types: queries by router, whole query.
* "Queries by router" shows how many queries have been recieved from any
node gtk-gnutella was directly connected to.
* "Whole query" shows stats based on the complete query string instead of
individual query words.
* New visual indications via icons in the status bar: whether gtk-gnutella
is rebuilding the library, computing SHA1 of shared files in the
background, and whether we are connected to Internet or not.
KNOWN BUGS/PROBLEMS:
* When changing the directory for incomplete/complete files, all partially
downloaded files recorded in ~/.gtk-gnutella/fileinfo will still be
downloaded to the old directory. You need to manually change the paths
in above file using search/replace and your favourite text editor.
* Sorting order of tables is not perserved across sessions.
* Marking/highlighting of results/downloads/uploads heavily depends on
your GTK theme. Especially most themes do not set fg[ACTIVE] and
fg[NORMAL] to different values.
* There is currently no way to un-ignore a file via the gui. You can
however edit the done.sha1 and done.namesize files in your
~/.gtk-gnutella directory manually. Unignoring via gui is planned for
the next release.
