8 Commits

Author SHA256 Message Date
c62915e04d Accepting request 1316975 from server:monitoring
OBS-URL: https://build.opensuse.org/request/show/1316975
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nfdump?expand=0&rev=16
2025-11-11 18:20:13 +00:00
e79883a7cf Accepting request 1316709 from server:monitoring
OBS-URL: https://build.opensuse.org/request/show/1316709
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nfdump?expand=0&rev=15
2025-11-10 18:16:23 +00:00
186238f83e Accepting request 1316974 from home:mnhauke:security
use tarball from the re-release *sight*

OBS-URL: https://build.opensuse.org/request/show/1316974
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/nfdump?expand=0&rev=32
2025-11-10 18:15:23 +00:00
a4adea9458 - Update to version 1.7.7
* Implement yaf file reader.
  * Improve nfpcapd on payload handling.
  * Evaluate IPv6 fragmentation header and reassemble IPv6 packets.
  * Update IPv4 fragmentation code.
  * Replace dns packet decoder with more complete SPCDNS decoder.
  * Improve payload filter.
  * Add element statistics about tunnel protocols.
  * Add TCP Flags aggregation option.
  * Add new nfdump filter syntax cheatsheet.
  * Improve HexDump output - cyber chef compatible.
  * Honor the ipVersion flag, if exported.
  * Lots of code cleanups.

OBS-URL: https://build.opensuse.org/package/show/server:monitoring/nfdump?expand=0&rev=31
2025-11-09 21:08:29 +00:00
6c71fc5c08 Accepting request 1273723 from server:monitoring
OBS-URL: https://build.opensuse.org/request/show/1273723
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nfdump?expand=0&rev=14
2025-05-01 13:22:57 +00:00
55fb773eae - Update to version 1.7.6
* Improve speed through some code optimisation.
  * Improve support for Palo Alto PA-5420.
  * Add filter for min ttl and max ttl ttl equal filter for
    min ttl == max ttl.
  * Implements Tunnel extension & IPv6 encapsulation in sfcapd.
  * Allow user selected output format with custom aggregation.
  * Add ident as %idt token in output formats.
  * Teach nfpcapd to read gzip compressed pcap files transparently.
  * Improve exporter algorithm.
  * Add Subdir -S to dynamic FlowSource -M.
  * Extend timeWindow to msec format everywhere.
  * Lot's of bug fixes and tiny changes.

OBS-URL: https://build.opensuse.org/package/show/server:monitoring/nfdump?expand=0&rev=29
2025-04-30 17:59:08 +00:00
2addf4460b Accepting request 1220174 from server:monitoring
OBS-URL: https://build.opensuse.org/request/show/1220174
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nfdump?expand=0&rev=13
2024-11-02 15:12:11 +00:00
050f074c4f - Update to version 1.7.5
* Improved parallel filtering to improve performance of nfdump.
  * Parallel processing of reading, filtering and processing data.
  * Add ndjson output format.
  * Speedup output.
  * Add ja4 processing.
  * Officially integrate torlookup into nfdump.
  * Add support for NOKIA enterprise.
  * Lot of code cleanup.
  * Bug fixes.

OBS-URL: https://build.opensuse.org/package/show/server:monitoring/nfdump?expand=0&rev=27
2024-11-02 10:35:57 +00:00
4 changed files with 75 additions and 12 deletions

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8cf76ad0b4e3c1e7edf9532ec7508b11f125adcfcdac5010fd7eec8fe792cfd8
size 756319

3
nfdump-1.7.7.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d0b46d6e3da8d8316204fb74d20d12d782d8508f01559e34d9c31e33f016d794
size 873067

View File

@@ -1,3 +1,51 @@
-------------------------------------------------------------------
Sun Nov 9 18:50:20 UTC 2025 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.7.7
* Implement yaf file reader.
* Improve nfpcapd on payload handling.
* Evaluate IPv6 fragmentation header and reassemble IPv6 packets.
* Update IPv4 fragmentation code.
* Replace dns packet decoder with more complete SPCDNS decoder.
* Improve payload filter.
* Add element statistics about tunnel protocols.
* Add TCP Flags aggregation option.
* Add new nfdump filter syntax cheatsheet.
* Improve HexDump output - cyber chef compatible.
* Honor the ipVersion flag, if exported.
* Lots of code cleanups.
-------------------------------------------------------------------
Fri Apr 18 19:25:27 UTC 2025 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.7.6
* Improve speed through some code optimisation.
* Improve support for Palo Alto PA-5420.
* Add filter for min ttl and max ttl ttl equal filter for
min ttl == max ttl.
* Implements Tunnel extension & IPv6 encapsulation in sfcapd.
* Allow user selected output format with custom aggregation.
* Add ident as %idt token in output formats.
* Teach nfpcapd to read gzip compressed pcap files transparently.
* Improve exporter algorithm.
* Add Subdir -S to dynamic FlowSource -M.
* Extend timeWindow to msec format everywhere.
* Lot's of bug fixes and tiny changes.
-------------------------------------------------------------------
Wed Oct 23 19:29:25 UTC 2024 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.7.5
* Improved parallel filtering to improve performance of nfdump.
* Parallel processing of reading, filtering and processing data.
* Add ndjson output format.
* Speedup output.
* Add ja4 processing.
* Officially integrate torlookup into nfdump.
* Add support for NOKIA enterprise.
* Lot of code cleanup.
* Bug fixes.
-------------------------------------------------------------------
Sun Mar 31 09:30:22 UTC 2024 - Bernhard Wiedemann <bwiedemann@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package nfdump
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -19,9 +19,9 @@
%define nfcapddatadir %{_localstatedir}/lib/nfcapd
%define sfcapddatadir %{_localstatedir}/lib/sfcapd
%define nfhomedir %{_var}/lib/%{name}
%define sover libnfdump-1_7_4
%define sover 1_7_7
Name: nfdump
Version: 1.7.4
Version: 1.7.7
Release: 0
Summary: CLI tools to collect and process netflow data
License: BSD-3-Clause
@@ -38,6 +38,8 @@ BuildRequires: rrdtool
BuildRequires: rrdtool-devel
BuildRequires: pkgconfig(bzip2)
BuildRequires: pkgconfig(libcurl)
BuildRequires: pkgconfig(liblz4)
BuildRequires: pkgconfig(libzstd)
Requires: rrdtool
Provides: group(%{name})
Provides: user(%{name})
@@ -47,17 +49,25 @@ The nfdump tools collect and process netflow data on the command line.
They are part of the NFSEN project which is explained more detailed at
http://www.terena.nl/tech/task-forces/tf-csirt/meeting12/nfsen-Haag.pdf
%package -n libnfdump%{sover}
%package -n libnfdump-%{sover}
Summary: Shared Library part of libnfdump
Group: System/Libraries
%description -n libnfdump%{sover}
%description -n libnfdump-%{sover}
Shared Library part of libnfdump.
%package -n libnffile-%{sover}
Summary: Shared Library part of libnffile
Group: System/Libraries
%description -n libnffile-%{sover}
Shared Library part of libnffile.
%package devel
Summary: Development files for libnfdump
Group: Development/Libraries/C and C++
Requires: libnfdump%{sover} = %{version}
Requires: libnfdump-%{sover} = %{version}
Requires: libnffile-%{sover} = %{version}
%description devel
This package contains libraries and header files for developing
@@ -84,6 +94,7 @@ install -D -d -m 0750 \
%{buildroot}%{nfcapddatadir} \
%{buildroot}%{sfcapddatadir}
rm -v "%{buildroot}/%{_libdir}"/libnfdump.{a,la}
rm -v "%{buildroot}/%{_libdir}"/libnffile.{a,la}
%check
#%%make_build check
@@ -92,8 +103,8 @@ rm -v "%{buildroot}/%{_libdir}"/libnfdump.{a,la}
%{_sbindir}/groupadd -r %{name} &>/dev/null || :
%{_sbindir}/useradd -g %{name} -s /bin/false -r -c "User for Netflow Dumper" -d %{nfhomedir} %{name} &>/dev/null || :
%post -n libnfdump%{sover} -p /sbin/ldconfig
%postun -n libnfdump%{sover} -p /sbin/ldconfig
%ldconfig_scriptlets -n libnfdump-%{sover}
%ldconfig_scriptlets -n libnffile-%{sover}
%files
%license COPYING LICENSE
@@ -120,10 +131,14 @@ rm -v "%{buildroot}/%{_libdir}"/libnfdump.{a,la}
%dir %attr(-,%{name},%{name}) %{sfcapddatadir}
%dir %attr(-,%{name},%{name}) %{nfhomedir}
%files -n libnfdump%{sover}
%files -n libnfdump-%{sover}
%{_libdir}/libnfdump-*.so
%files -n libnffile-%{sover}
%{_libdir}/libnffile-*.so
%files devel
%{_libdir}/libnfdump.so
%{_libdir}/libnffile.so
%changelog