Changelog for
yaf-devel-2.11.2-1.1.x86_64.rpm :
* Sun Nov 29 2020 Martin Hauke
- Update to version 2.11.2
* Corrected the patch to allow building with PF_Ring.- Update to version 2.11.1
* Fixed bugs in NTP and DNS deep packet inspection.
* Fixed a compilation error when building with metadata export enabled.
* Fixed possible compilation errors when building with nDPI support.
* Fixed compilation errors when building with newer versions of PF_Ring.
* Wed Mar 20 2019 Martin Hauke - Update to version 2.11.0
* Support for FixBuf 2.3.0 added, and is now required.
* Added support for nDPI 2.0.
* CERT Info Model support added.
* More strict DNS applabel.
* Initial NTP Mode 7 applabel supprt.
* Improved POSIX compliance for init script.
* Removed ipfixDump; it is now distributed with libfixbuf.
* DNS DPI free segfault fix.
* New YAF stats and tombstone format.
* Tue May 08 2018 mardnhAATTgmx.de- Update to version 2.10.0
* Version bump
* Thu May 03 2018 mardnhAATTgmx.de- Update to version 2.9.4:
* Support for FixBuf 2.0.0 added, and is now required.
* Derive information elements from included XML files.
* Various reporting/output bug fixes for ipfixDump.
* Support for tombstone records added.
* Mon Dec 25 2017 mardnhAATTgmx.de- Update to version 2.9.3:
* Fixed configure-time dependency for libndpi to limit use of v1.8.0 and greater. init script now gives YAF more time to shut down gracefully.
* Thu Nov 09 2017 mardnhAATTgmx.de- update to version 2.9.2:
* Fixed configure-time bug when using libfixbuf 1.7.1 (or earlier) and p0fprinter
* Tue Nov 07 2017 mardnhAATTgmx.de- update to version 2.9.1:
* Fixed bug that could corrupt flow emitted to standard output
* Sun Oct 22 2017 mardnhAATTgmx.de- update to version 2.9.0:
* nDPI library suppport added
* Added NTP applabel
* Added RFC5610 template metadata (name and description) record output.
* Add option --no-vlan-in-key to drop VLAN ID from hash calculation
* Minor Bug Fixes
* Sat Jan 07 2017 mardnhAATTgmx.de- update to verison 2.8.4: - Version 2.8.4: 2016-04-14 - Fix incompatibility with older versions of libpcap introduced in 2.8.3 - Version 2.8.3: 2016-04-12 - Important bug fix for versions 2.8.x. Fixes a bug in decoding specific TCP Options headers. - Version 2.8.2: 2016-04-05 - Fix application labeling bug introduced in 2.8.0 which incorrectly labels particular REGEX labels - Other Bug Fixes - Version 2.8.1: 2016-02-04 - Fix compile error when configured with --disable-payload - Force buffer emit with IPFIX Options record when inactive - Version 2.8.0: 2015-12-22 - Remove support for fixbuf releases prior to libfixbuf-1.7.0 - PF_RING support - PF_RING ZC (Zero Copy) support - Add support for gzip\'d PCAP files - Add support for decoding MPTCP headers and exporting MPTCP information - Add LUA configuration file for yaf startup - New SSL Server Name field export from TLS/SSL Client Hello - New option for exporting entire X.509 Certificate - Add Fragment flag to flowAttributes to signify that a flow contained fragmented packets - DHCP fingerprinting plugin now exports basic list of options by default - ipfixDump prints number of records for each template - Bug Fix for labeling DNS over TCP - Bug Fix for reverseFlowDeltaMilliseconds field - Bug Fix for collecting X.509 Certificates through a proxy - More detailed information about ignored packets on termination/SIGUSR1
* Fri Feb 20 2015 mardnhAATTgmx.de- update to version 2.7.1: - Version 2.7.1: 2015-01-27 - Fix a bug with --flow-stats in particular configurations - Version 2.7.0: 2015-01-07 - New Gh0st RAT Application Label - New NetBIOS Datagram Service Application Label - yafMeta2Pcap can now accept IPFIX input - getFlowKeyHash now exports IPFIX - Support for indexing PCAPNG files - New YAF option --no-output to produce no IPFIX output - New YAF options --hash and --stime to search for a single flow with the given hash and start time - DNS DPI now exports query section of resource record for all responses with nonzero RCODE - Faster searching of pcap-meta files - Implement SAME_SIZE flag for TCP flows - Minor Bug Fixes
* Sat Jan 03 2015 mardnhAATTgmx.de- compile with p0f and app-labeling support
* Tue Dec 30 2014 mardnhAATTgmx.de- initial package, version 2.6.0