Changelog for
yaf-devel-2.9.3-1.1.i586.rpm :
Mon Dec 25 13:00:00 2017 mardnhAATTgmx.de
- Update to version 2.9.3:
* Fixed configure-time dependency for libndpi to limit use of
v1.8.0 and greater.
init script now gives YAF more time to shut down gracefully.
Thu Nov 9 13:00:00 2017 mardnhAATTgmx.de
- update to version 2.9.2:
* Fixed configure-time bug when using libfixbuf 1.7.1
(or earlier) and p0fprinter
Tue Nov 7 13:00:00 2017 mardnhAATTgmx.de
- update to version 2.9.1:
* Fixed bug that could corrupt flow emitted to standard output
Sun Oct 22 14:00:00 2017 mardnhAATTgmx.de
- update to version 2.9.0:
* nDPI library suppport added
* Added NTP applabel
* Added RFC5610 template metadata (name and description) record output.
* Add option --no-vlan-in-key to drop VLAN ID from hash calculation
* Minor Bug Fixes
Sat Jan 7 13:00:00 2017 mardnhAATTgmx.de
- update to verison 2.8.4:
- Version 2.8.4: 2016-04-14
- Fix incompatibility with older versions of libpcap introduced in 2.8.3
- Version 2.8.3: 2016-04-12
- Important bug fix for versions 2.8.x.
Fixes a bug in decoding specific TCP Options headers.
- Version 2.8.2: 2016-04-05
- Fix application labeling bug introduced in 2.8.0 which incorrectly
labels particular REGEX labels
- Other Bug Fixes
- Version 2.8.1: 2016-02-04
- Fix compile error when configured with --disable-payload
- Force buffer emit with IPFIX Options record when inactive
- Version 2.8.0: 2015-12-22
- Remove support for fixbuf releases prior to libfixbuf-1.7.0
- PF_RING support
- PF_RING ZC (Zero Copy) support
- Add support for gzip\'d PCAP files
- Add support for decoding MPTCP headers and exporting MPTCP information
- Add LUA configuration file for yaf startup
- New SSL Server Name field export from TLS/SSL Client Hello
- New option for exporting entire X.509 Certificate
- Add Fragment flag to flowAttributes to signify that a flow contained
fragmented packets
- DHCP fingerprinting plugin now exports basic list of options by default
- ipfixDump prints number of records for each template
- Bug Fix for labeling DNS over TCP
- Bug Fix for reverseFlowDeltaMilliseconds field
- Bug Fix for collecting X.509 Certificates through a proxy
- More detailed information about ignored packets on termination/SIGUSR1
Fri Feb 20 13:00:00 2015 mardnhAATTgmx.de
- update to version 2.7.1:
- Version 2.7.1: 2015-01-27
- Fix a bug with --flow-stats in particular configurations
- Version 2.7.0: 2015-01-07
- New Gh0st RAT Application Label
- New NetBIOS Datagram Service Application Label
- yafMeta2Pcap can now accept IPFIX input
- getFlowKeyHash now exports IPFIX
- Support for indexing PCAPNG files
- New YAF option --no-output to produce no IPFIX output
- New YAF options --hash and --stime to search for a single flow with the
given hash and start time
- DNS DPI now exports query section of resource record for all responses
with nonzero RCODE
- Faster searching of pcap-meta files
- Implement SAME_SIZE flag for TCP flows
- Minor Bug Fixes
Sat Jan 3 13:00:00 2015 mardnhAATTgmx.de
- compile with p0f and app-labeling support
Tue Dec 30 13:00:00 2014 mardnhAATTgmx.de
- initial package, version 2.6.0