- Update to version 21.05
* TLS fingerprinting based on JA3
+ Extract TLS fingerprints from TLS ClientHello and
ServerHello packets
+ TLS fingerprinting example app
* TLS 1.3 support
* A brand new DPDK setup script written in Python that makes
it easier to setup DPDK
* Significant size reduction of PcapPlusPlus compiled libraries
* Calculate a packet's network data size before sending a
packet and make sure it doesn't exceed the MTU
* UDP multicast support
+ Add isMulticast() property to IPAddress, IPv4Address,
IPv6Address
+ PcapSplitter: take into consideration multicast packets
when splitting by client/server IP/port
* New protocol support:
+ SSH (parsing only)
+ IP Sec (AH + ESP, parsing only)
* Existing protocol enhancement:
+ DNS over TCP
+ Parse 2 new TLS extensions: Supported Groups and EC Point
Format
+ Added a new IPLayer interface to abstract IPv4Layer and
IPv6Layer
+ Added convenient methods to fetch source and dest ports in
TCP and UDP layers
+ GRE layer - add Transparent Ethernet Bridging support
* Major header files cleanup: remove platform-specific
includes, remove pcap.h from PcapPlusPlus includes, remove
redundant header files, replace c-str arguments with C++
std::string
* New API method to search PcapLiveDevice by IP address or name
* Parse packets with link type of LINKTYPE_IPV4 and
LINKTYPE_IPV6
* TCP reassembly
+ Add configurable out-of-order packets per flow limit
+ Expose missing bytes size on data loss
* hash5Tuple improvements
* Fix Makefile dependencies - detect when header files are
changed
* Recognize *.zstd file extension in
IFileReaderDevice::getReader()
* Moved a large portion of PcapPlusPlus CI to GitHub Actions
* Tons of bug fixes
- Refresh pcap++-paths.patch
OBS-URL: https://build.opensuse.org/request/show/894291
OBS-URL: https://build.opensuse.org/package/show/network/pcapplusplus?expand=0&rev=10
- Update to version 18.08
* Massive DPDK enhancements:
+ Major performance improvements
+ Fixed some mbuf leakages
+ DPDK 17.11 and 18.02 support (thanks @luigino !)
+ Re-designed some of DpdkDevice APIs to make them cleaner,
faster and easier to use
+ Expose DPDK-specific stats
+ RSS (Receive Side Scaling) support
+ DPDK TX buffers support
+ Enable DPDK master core configuration
* Added IP reassembly module (a.k.a IP de-fragmenetation).
Supports both IPv4 and IPv6
* Added IPv6 support for TCP reassembly
* Install to custom directory on Linux and MacOS
* Performance improvement in packet parsing
* Fixed compatibility issues with C++17 (thanks @echo-Mike !)
* Read multiple packets from pcap/pcapng files
* Build system improvements (thanks @echo-Mike !)
* New protocols:
+ Packet trailer (a.k.a footer or padding)
+ IPv6 extensions
* New and updated utilities:
+ New IPFragUtil for splitting packets into IP fragments
+ New IPDefragUtil for reassembling IP fragments into packets
+ PcapSplitter now supports round-robin splitting
* Many bugfixes
- Refreshed pcap++-dpdk.patch and pcap++-paths.patch
OBS-URL: https://build.opensuse.org/request/show/642931
OBS-URL: https://build.opensuse.org/package/show/network/pcapplusplus?expand=0&rev=6
- Update to version 17.11
* Added TCP reassembly module
* Set Unilicense as PcapPlusPlus license
* Added support for DPDK 16.11 and 17.02 (replacing old 2.1
version)
* Added 5 tutorials for getting started with PcapPlusPlus:
http://seladb.github.io/PcapPlusPlus-Doc/tutorials.html
* Added installation target ('make install') on Linux and MacOS
* New protocols:
+ SIP
+ SDP
+ IPv4 options
+ Raw IP link layer type
+ VXLAN
* New and updated utilities:
+ New TCP reassembly utility
+ PcapSplitter now includes split criteria in split file names
(for example: when splitting by client IP output files will
look like: filename-client-ip-x.x.x.x.pcap). This applies
also to splitting by server IP, server port and BPF filter
(thanks to @bpagon13 !)
+ PcapSplitter now supports splitting pcap files with link
type other than Ethernet
+ Added version information for all utilities
* Choose whether to parse a packet fully or up to a certain layer
* Added support for libpcap immediate mode where supported
(libpcap ver>=1.5) - thanks to @f-squirrel !
* pthreads on MinGW are now linked statically (upgraded pthreads
to 2.10)
* Added PcapPlusPlus version and Git info API
* Clean-ups:
+ Removed unnecessary files and reduced repo size
+ Removed compilation warnings
+ Cleaner makefiles and makefile output
+ Moved debug-new to 3rd-party
* Many bugfixes
- Dropped pcap++-rpmlint.patch and pcap++-big_endian.patch
(merged upstream)
- Refreshed pcap++-dpdk.patch
- Added pcap++-paths.patch
- Disabled dpdk until upstream catches up with current version
OBS-URL: https://build.opensuse.org/request/show/576363
OBS-URL: https://build.opensuse.org/package/show/network/pcapplusplus?expand=0&rev=3
