11
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
17
This is the list of all changes to this ntop source tree.
18
The file NEWS contains a list of user-visible and/or major changes.
24
=-=-=- |_(_)____/ =-=-=-=-=-=-=-=-=-=-=-=-=
29
- better GNU autoconf-ified distribution
30
- include initial release of NtoPerl module
37
=-=-=- |_(_)_____| =-=-=-=-=-=-=-=-=-=-=-=-=
42
- Fixed PPP compatibility glitch
44
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
45
- Fixed a mutex bug that cause ntop HTML interface to lock
46
- Thpt graphs didn't show the right value (graphs where
48
- Fixed a bug in configure that prevented it to
49
recognise user specified directories
50
(e.g. --with-gdbm=...)
51
- Added a fix for address resolution
52
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
53
- Several fixes about address resolution and
54
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
55
- Fixed a bug (that caused a core) in the icmpPlugin when
56
ntop receives fragmented ICMP packets.
57
- Added fix for 1) better handling fragmented packets and
58
2) improving fragment lookup speed.
59
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
60
- Added further Suse fixes
61
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
62
- Fixed NFS plugin bug
63
(Courtesy of Scott Hebert <scott@cae.ca>)
64
- Fixed incompatibility with interfaces
65
without an IP address associated (e.g. bridge)
66
(Courtesy of Diana Eichert <deicher@sandia.gov>)
67
- ntop used to crash in interactive mode while
68
reading from a pcap capture file
69
(Courtesy of John Bates <johnb@up.edu>)
70
- Fixed an incorrect MIME type on icmpPlugin
71
- The 'Shutdown ntop' menu entry is now protected
73
- Fixed MTU size check
74
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
75
- Fixed a security flaw: ntop now check whether the
76
requested URL does not contains strings such as '..'
77
that may violate system security.
78
(Courtesy of Vanja Hrustic <vanja@relaygroup.com>)
79
- On the left HTML frame a link to a non JavaScript
80
menu has been added. ntop can now be used
81
confortably by non JavaScript-enabled browsers.
82
(Courtesy of Boja Morcos <????????????????>)
83
- nmap, neped and lsof are now searched in the
84
PATH at ntop startup and no longer by the
86
- Fixed a bug in the lsof handling code.
87
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
88
- Fixed several small problems in the SQL code
89
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
90
- Fixed a bug in the code that compares the captured
91
packet size with the MTU of the capture device.
92
- Fixed a bug that prevented ntop to properly
93
handle multiple capture devices
94
- ntop/Linux: the libnsl -if present- is included
95
because is needed on some distributions
97
(Courtesy of Brian Bothwell <brian@wisdomtools.com>)
98
- Added a few fixes to the installer/Makefile
99
and compatibility issues with FreeBSD
100
(Courtesy of Borja Marcos <borjam@sarenet.es>)
101
- Fixed yet another small glitch that might cause ntop
102
to crash under heavily loaded networks.
103
- Fixed a bug in the Makefile 'clean'
104
(Courtesy of Anthony David <adavid@deetya.gov.au>)
105
- Fixed a bug that prevented virtual interfaces
106
(e.g. eth0:0) to be properly handled by ntop.
109
- Removed '-a' flag: ntop recognises automatically
110
multihomed interfaces.
112
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
113
- Actual throughput is now calculated everytime
114
statistics are displayed
115
- Added Packets/sec 'Traffic Stats'
116
(Courtesy of Ted Staberow <tstaber@attglobal.net>)
117
- Modified HostTraffic typedef: 20% memory
118
saving for each hash bucket.
119
- Service/Port Usage table, now reports traffic for
121
- added localhost.gif icon for RH hosts with no
123
(Courtesy of Kashif Rashid <Kashif.Rashid@sbs.siemens.ca>)
124
- ntop not implements filter rules (-R flag).
125
- ntop+SSL has now a new certificate that does no
126
longer require a password at startup.
127
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
128
- Enhanced the SuSe package
129
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
130
- Added ipalias support via the '-a' flag
131
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
132
- Update the ntop man page
133
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
134
- ntop now returns a 'HTTP/1.0 501 Not Implemented' for
135
methods other than GET/POST.
136
(Courtesy of Vanja Hrustic <vanja@relaygroup.com>)
138
-------------------------
143
- Fixed bug with long site names
144
(Courtesy of Andreas Pfaller <a.pfaller@pop.gun.de>)
145
- Fixed MySQL inconsistency
146
(Courtesy of Jone Marius Vignes <vignes@nsd.uib.no>)
147
- Fixed bug with Netscape that prevented users to
148
add/modify/delete user/passwords.
149
- pcap includes installed in /usr/include/pcap are now
151
- added a fix that caused getHostInfo() to return a NULL
152
when the hash table was (almost) full.
153
- Fixed a counter bug (this problem has been introduced
154
when the fragment handling code has been modified)
155
(Owner: Anthony David <adavid@deetya.gov.au>)
156
- Fixed a bug that caused some pie charts to show
160
- Changed configure structure and improved checkings
161
(Courtesy of Albert Chin-A-Young <china@thewrittenword.com>)
162
- ntop_win32.[ch] are now part of the distribution.
163
- Options '-p' and '-F' accept both inline values or a file name
164
containing the specified values.
166
-------------------------
171
- Dropped use of values.h in favour of limits.h and float.h
172
(Courtesy of Stan Brown <stanb@awod.com>)
173
- Added configure flag (--enable-curses [default=yes]) for
174
preventing ntop from using curses if present.y
175
(Courtesy of Dmitriy Shishkin <bug@openpagepro.c>)
176
- Fixed a gdchart bug that caused the chart library to loop
178
- Fixed a bug that caused ntop to have problems with non Ethernet
179
interfaces (this problem has been introduced when multiple
180
interface support has been added).
181
- Y label is now shown on thpt graphs.
182
- Fixed bug that caused nmap not to always recognise
184
- Added -P flag for specifying the directory where ntop
185
creates the .db files (default is '.').
186
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
187
- Added Suse 6.X support
188
(Courtesy of Ralf Amandi <Ralf.Amandi@accordata.net>)
192
- Added SSL support via OpenSSL (www.openssl.org) if
193
installed. I've included a simple ntop-cert.pem file
194
that a certificate I created using OpenSSL. You should NOT
195
use it in an idead world. Nevertheless, if you really wanna
196
use it when ntop (with SSL support) starts up and it prompts
197
'Enter PEM pass phrase:' you should type the seed
198
I used for generating this test certificate, namely
199
'*****'. (see fix for 1.2a13)
200
- Added ability to specify '*' (all URLs) for protecting
202
- "make install" has been implemented
204
-------------------------
209
- Fixed a buffer overflow caused by long URL requests
210
(Courtesy of Vanja Hrustic <vanja@relaygroup.com>)
211
- Recompiled under Win32 and fixed incompatibilities
214
- Use of cascading style sheets
215
- Added icon on top of sortable table indicating
216
the sorted column name
217
- If you put an html/statsicons/flags/<domain>.gif
218
then when ntop shows the flag for <domain> it uses
219
the <domain>.gif icon instead of the default one
220
(Owner: Ross Campbell <rcampbel@us.oracle.com>)
221
- Added menu entry for shutting down ntop using
223
- Added the 's' flag that's used to specify the hash
224
table size: the smaller is the value the less memory
225
is used -> the less efficient is the hash ->
226
the slower is ntop. Life is a matter of tradeoffs!
227
- Added lastSeenPlugin.c written by
228
Andrea Marangoni <marangoni@unimc.it>. This plugins
229
is a work in progess (as ntop :-)). Many thanks Andrea!
231
------------------------------------------------------
236
- Fixed a couple of problems that caused core dumps
237
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
238
- Host names are symbolic both in MT and ST mode.
239
- Fixed some problems with mySQL (it use case sensitive
241
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
242
- ntop looks for *.html/gif/jpeg files in the local html/
243
directory if such files have not been found elsewhere
245
- Added a JavaScript fix for the traffic matrix
246
(Courtesy of Danijel Doriae
247
<danijel.doric@industrogradnja.tel.hr>)
250
- Replaced queso with nmap (it looks much more realiable)
251
- Added a new application (database/mySQLserver.pl) written
252
in Perl tuned for mySQL equivalent to ODBCServer.java.
253
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
254
- Added TCP/IP overlapping fragments detection
255
- Added ntop.ini (packages/rpm/usr/doc/ntop-1.1) startup
257
(Courtesy of Patrick Robert <PatrickR@ncr.disa.mil>)
258
- Added packet retransmission statistics
259
- Added MacOSX support
260
- If there is a local service file (similar to /etc/services)
261
then it's used insted of the default one (/etc/services)
262
(Courtesy of Ross Campbell <rcampbel@us.oracle.com>)
264
------------------------------------------------------
266
1.2a8 [Snapshot] (Tue Oct 26 17:33:08 MEST 1999)
269
- fixed buffer overflow bug in report.c
270
(Courtesy of Rainer Tammer
271
<rainer.tammer@spg.schulergroup.com>)
274
- Added support for multiple interfaces. For instance if
275
you want to capture traffic from both eth0 and eth1 do
276
ntop -i "eth0,eth1" ...
277
- Added graphics via gdchart (http://www.fred.net/brv/chart/)
278
- Added better garbage collection capability to the icmpPlugin
280
--------------------------------------------------------
285
- fixed buffer overflow bug
286
- Modified Makefile to use a symbolic link with .. instead of
287
hardcoding the $(PWD) (which don't seem to work in Linux).
288
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
289
- Added HP-UX support
290
(Courtesy of Rusetsky Dimitry <dima@nbkbr.rosmail.com>)
291
- Fixed bug that caused ntop to ask for the admin password
292
when plugins are accessed.
293
- Fixed bug on some platforms (mainly Intel based) that due to
294
big/little endian caused the arpPlugin not to display entries
295
- Fixed SLACKWARE compatibility flaws
298
- Added -B flag (Win32 only) for specifiying the NDIS driver buffer
299
- Added -D flag for specifiying the Internet domain name
300
(Owner: Stijn Jonker <s.j.c.jonker@sjc.nl>)
301
- Added the capacity to bind to a network address and a port in web
302
mode if wanted: use ipaddress:port instead of port:
303
205.205.205.205:2000 instead of 2000.
304
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
305
(Owner Chris Hall <dylix@home.com>)
306
- Added a reset Statistics option in the Admin portion of the web
307
page. I didn't modify the default denied URLs to restrict access to
308
this options however.
309
(Courtesy of Daniel Savard <daniel.savard@gespro.com>)
310
- Added libwrap support (i.e. ntop now handles /etc/hosts.allow
312
(Courtesy of Georg Schwarz <schwarz@physik.tu-berlin.de>)
313
- Added an initial, incomplete version of the ODBC plugin
314
for accessing ntop from unixODBC
316
-------------------------------------------------
321
- local throughput is now calculated correctly
322
(Owner: Philippe Dechezelles
323
<p.dechezelles@delta-informatique.com>)
324
- fixed several minor glithes that caused ntop to crash
325
- added support for Win 95/98.
327
-------------------------------------------------
329
1.2a5 [Snapshot] (Mon Aug 30 10:13:59 MEST 1999)
332
- The termination process (^C) is now smoother.
333
- Fixed a buffer overflow that caused core dumps when
334
ntop had to manage long symbolic host names.
337
- Images returned via HTTP now contain the "Last-Modified"
338
entry into the HTTP header that should allow browsers
339
to better cache images.
340
- Throughput stat graphics are not drawn using JavaScript
341
in order to produce "real" graphics
342
- ntop extensibility via user-defined plugins: so far
343
two very simple plugins have been released (arpWatch,
344
nfsWatch). Put your plugins (or symbolic links to your
345
plugins) into the plugins/ directory.
346
- DNS packets handling: ntop now decodes DNS replies in
347
order to cache sym<->num mappings hence to significantly
348
reduce the number of DNS requests
350
-------------------------------------------------
352
1.2a4 [Snapshot] (Mon Aug 9 17:59:15 CEST 1999)
355
- log file now contains stats about specified IP protocols
356
(Owner: Laurent Doublein <Laurent.Doublein@par.sita.int>)
357
- Users can now specify the mapping MAC addr <-> symbolic
358
names for non-IP hosts. Under utils/ there's a new utility
359
called 'addMacAddress' that allows to do that. See the
360
utils/README file for further info.
361
(Owner: Massimo Gais <mgais@na.astro.it>)
362
- Added support for JPEG files
365
- "tun0" interface is now properly recognized as
366
a PPP interface under FreeBSD
367
- fixed a bug that prevented "Host Info" table header
368
hyperlinks to point to valid links
369
- Fixed ntop.log: ntop now logs data correctly
370
(Owner: Sebastien Brault <sebastien.brault@cnet.francetelecom.fr>)
371
- ntop shouldn't display the help anymore when the
373
(Owner: Johan Fredrik �hman <johan@essay.org>)
375
-------------------------------------------------
377
1.2a3 [Snapshot] (Thu Jul 22 13:01:22 MET DST 1999)
380
- extended domain statistics
381
- added country icons
383
- added CGI (Common Gateway Interface) support.
384
Everything under /cgi/ is considered a cgi-like
386
- Rewritten user/password support: pw are not stored into
387
a databse in encrypted form. Administrators can protect
388
with password selected URLs. All the administration is
389
performed with ntop. The default administrator user
390
is 'admin' with password 'admin'. Make sure you change
391
these default settings for your own security.
394
- lsof/neped data now work again
396
-------------------------------------------------
401
- ntop.cache has been replaced by ntop.db
402
that is created/used is ntop has been compiled
404
- Added Internet Domain Statistics
405
(Owner: Frank Pinzin <frank.pinzin1@sheridanc.on.ca>)
406
- Symbolic Internet addresses are now mapped to
408
- Added 'delayed' free: host's memory free is delayed in
409
order to avoid situations where a host being used (e.g.
410
a report is being generated) while another thread
412
- Clicking twice on a HTML column name, the sort order
414
- Added (basic) FDDI support
416
Ron Campbell <Ron.Campbell@unixa.nerc-wallingford.ac.uk>
417
Graeme Wilford <G.Wilford@ee.surrey.ac.uk>)
418
- Added RH 6.0 pcap support
421
- Some hash tables had wrong garbage collector code. In
422
particular this caused the main table become full. This
423
was the main cause of performance degradation due to
425
- red.gif is now sent properly (the HTTP header format
426
used to be of wrong type)
427
- Added missing "<center>" tag on the throughput
430
--------------------------------
435
- The list of MAC vendors is now based on
436
http://standards.ieee.org/regauth/oui/oui.txt
437
(Owner: Massimo Gais <mgais@na.astro.it>)
438
- Added support for 'special' (e.g multicast/vendors specific)
440
(Owner: Bertrand Petit <elrond@phoe.netdev.net>)
443
- Peer hosts now show up
444
- Fixed bug that prevented the 'Last Contacted Peers'
445
table to show up on hosts that have received but not
447
- Traffic Thpt is now sorted properly (again)
449
--------------------------------
454
- Added queso (http://www.apostols.org/) support. Now each host
455
lists the OS that's *supposed* to run
456
- red.gif is not included in ntop (so there's no need
457
to necessarely have it on html/)
458
(Courtesy of Hans Werner Strube <strube@physik3.gwdg.de>)
459
- Porting to Digital Unix OSF/1
460
(Courtesy of Stephen Carr <Stephen.Carr@adelaide.edu.au>)
461
- Added '-e' flag, that allow users to specify the maximum number
462
of HTML rows (default is 384)
463
(Owner: Dennis <d.schulze@mc-wetter.de>)
465
--------------------------------
467
pre3-1.1 [Candidate Release]
470
- the 'sh' varable is now set properly in the Makefile
471
(Owner: Igor Schein <igor@txc.com>)
473
--------------------------------
475
pre2-1.1 [Candidate Release]
478
- Added Slackware '-d' support
479
- Fixed $HOME bug (ntop used to core when $HOME isn't defined)
480
(Owner: Richard L. Hamilton <rlhamil@mindwarp.smart.net>)
483
- Added OSI (on Ethernet, not IP) support
485
--------------------------------
487
pre1-1.1 [Candidate Release]
490
- Labels for 'Other IP' rows have been changed
491
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
492
- 'IP Traffic' tables can now be sorted
493
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
494
- Fixed a bug that caused ntop to process TR packets with
495
a wrong (negative) length
496
(Owner: Holger Marzen <marzen@mgi.de>)
497
- Both '.ntop' and HTML pages are now searched on
498
/etc/ntop and other dirs (see dirs[] on http.c). In addition
499
'.ntop' is first searched under $HOME.
500
(Owner: Cerqui Marco <marco.cerqui@alcatel.ch>)
502
(Owner: Bertrand Petit <elrond@phoe.netdev.net>)
504
--------------------------------
506
v1.1cr7 [Candidate Release]
509
- Fixed minor interactive mode glitch.
510
(Owner: David.Anthony <David.Anthony@comcare.gov.au>)
511
- Added missing caption to a table contained on "IP Protocol Distribution"
512
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
513
- Fixed a bug in formatKBytes routine (GB/TB problem)
514
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
515
- OSPF and other columns in interactive mode are now
516
sorted properly (again)
517
- Added support for Slackware Linux
518
- Bar labels in the "Throughput Stats" graph are now more readable
519
- Added '-d' flag: ntop can now become a daemon.
520
- Added SIGHUP support: ntop statistics are reset when the SIGHUP signal
524
- The html/ directory is searched locally first and then
525
under /etc/ntop/html and other dirs such as
526
/usr/local/... opt/...
527
- The makefile now can build new install packages for additional
530
--------------------------------
532
v1.1cr6 [Candidate Release]
535
- Fixed a bug on broadcast addresses handling
536
that caused ntop to crash
537
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
538
- Fixed a buffer overflow problem
539
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
540
- Fixed the default refresh time in interactive mode
541
- Fixed a bug that caused ntop to crash after stats
542
reset ('r' key on interactive mode)
543
(Owner: <sorry I forgot who reported me the bug>)
544
- Added support for SunOS 4.x
545
(Owner: Hermann Hueni <hueni@glue.ch>)
546
- lib(n)curses is not checked if (n)curses.h has not been found
547
(Owner: Dave Warner <davew@lucent.com>)
548
- Fixed a bug that prevented networks flows/traffic
549
matrix entries to be updated properly.
550
- Fixed a bug that caused lsof to create a costant increasing
551
list of processes (this cased ntop to crash).
552
- Fixed a bug that caused wrong values for "Other IP" counters
554
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
555
- HTML links for ethernet addresses are now
556
compatible with MS Explorer
557
- Fixed (R)ARP bug: this is not IP but in some tables it
559
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
560
- ntop now recognizes the file 'index.html' if present in
563
--------------------------------
565
v1.1cr5 [Candidate Release]
568
- The optional BPF filter reported an error on the
569
screen whenever a wrong filter was specified
570
- Multicast stats no longer crash ntop
571
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
574
- Added host peak throughput
575
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
576
- Default thpt refresh is now 15 seconds (it used to be 120)
577
- Added customisable HTML menu appearance
578
- Added bytes on multicast stats
579
- Added new checks (the argument must be a number) for
580
flags that require numeric arguments
584
v1.1cr4 [Candidate Release]
587
- HTTP passwd compatibility glitch fixed.
588
- Fixed a bug that caused some URLs to crash ntop
589
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
590
- Fixed a compilation glitch with Slackware
591
- Token Ring on AIX works now
592
(Owner: Jean Paul L�pez y Driessen
593
<jean_p_lopez_driessen@es.ibm.com>)
594
- Fixed "IP Protocol Subnet Usage" entries
595
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
596
- The local domain name used to be empty on some
597
not well configured hosts
598
- The message "Dropping..." isn't displayed anymore. Instead
599
of discarding addresses, they are kept in numerical form.
600
(Owner: Davin Milun <milun@cse.buffalo.edu>)
601
- Fixed cosmetic flaw
602
(Owner: William R. McDonough <wrmcd@wilmcd.com>)
603
- Removed a lot (if not all) of warnings (-Wall)
604
- Added new ports (ssh,domain,login,nntp) to the
606
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
607
- Network traffic is now counted on full packet size (ethernet
608
packet) and not on the encapsulated packet/protocol length
609
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
610
- Added missing captions to several tables
611
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
612
- Fixed a problem with PPP (analog not ISDN)
613
(Owner: Bill Swisher <bswisher@micronet.net>).
614
- Several lsof fixes have been included
617
- Added RAW IP support
619
---------------------------------
620
v1.1cr3 [Candidate Release]
623
- Fixed bug that prevented some IP addresses not to be resolved
624
to their symbolic name.
625
- Fixed a problem that occurred during the parsing of the
626
command line protocols (-l flag)
627
- Fixed a nasty problem (pbuf.c, FIN/ACK handling) that caused some
628
data structures to be corrupted. This problem caused the ntop crash.
629
- Column sort works again
630
- Fixed compatibility glitches with AIX and Solaris 2.x
631
- ntop (interactive mode) no longer crashes when the help
632
screen is displayed and no key has been pressed.
633
(Owner: Igor Schein <igor@txc.com>)
636
- The code is now Win32 friendly.
637
- IP Traffic Matrix content has been redesigned.
640
---------------------------------
642
v1.1cr2 [Candidate Release]
645
- ntop compiles properly on Solaris
646
(Owner: Igor Schein <igor@txc.com>)
647
- Lsof accounting now displays data correctly
648
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
649
- In some cases ntop didn't contain the HTTP header
650
that might have caused problems with old M$ Explorer
652
(Owner: Felipe Tonioli <tonioli@mtec.com.br>)
653
- Non IP hosts (i.e. those that don't have an IP address)
654
are now displayed again. They are considered as non-local
658
- Added PPP interface support
659
(Owner: Fabrizio Carrai <f.carrai@iol.it>)
660
- Lsof information is updated only if needed (i.e. if ntop
661
receives a packet for a local port that is not yet known)
662
and not more than once a minute.
663
- configure allows to enable (default) or disable both
664
lsof and threads support:
665
- configure -enable-lsof=no
666
- configure -enable-threads=no
671
v1.1cr1 [Candidate Release]
674
- The 'q' key in MT/interactive mode works again
675
(Owner: Felipe Tonioli <tonioli@mtec.com.br>)
676
- While symbolic addresses are resolved, the temporarely address
677
is no longer '?' but the numeric one (with '*' around to indicate
679
(Owner: Felipe Tonioli <tonioli@mtec.com.br>)
680
- Broadcast addresses for specified (-m flag) networks are now
682
(Owner: Antonello Maiorca <marty@tai.it>)
683
- Some combination of networks/netmasks were not handled properly
684
(Owner: Axel Morhenn <morhenn@comspace.de>)
685
- Non IP-based hosts (e.g. IPX based) are being now displayed
686
(Owner: Rick Morris <rmorris@csp.net>)
687
- Added division by zero ckecks
688
(Owner: Peter Marquardt <wwwutz@mpimg-berlin-dahlem.mpg.de>)
691
- Added support (-m flag) for non IPv6 netmasks. Namely -m now
692
accepts both 131.114.21.0/24 and 131.114.21.0/255.255.255.0
693
(Courtesy of Antonello Maiorca <marty@tai.it>)
694
- Added new HTML menu entry 'Local Nw Usage' that keeps track of the
695
traffic generated by local applications/users. This enhancement
696
makes use of lsof (see FAQ).
700
v1.1cr0 [Candidate Release] 14/01/1999
702
Enhancements (Multithread only):
703
- All the main ntop functionality are now handled by threads
704
- Address resolution (DNS) is now asynchronous
705
- Semaphores (where available) are now used
708
- Minor interface changes
709
- Added support for AIX, HP-UX
715
- Removed several warnings (-Wall)
716
- Spawned child proceses should now be handled properly
717
(no zombies anymore, I hope)
718
- Fixed a typo that prevented ntop to compile in single
720
- Fixed a bug that caused the time to be corrupted when
721
ntop returns data from an interface from which packets
722
have not yet been received
723
- Removed a warning that was issued when ntop was unable to
724
locate a fragment: the code looks good but sometimes a fragment
725
is not located because ntop started capturing data after the first
726
fragment was transmitted.
732
- Thpt value now are shown properly
735
- Added network flows (-F flag)
736
- added multitrhead support
740
v1.1a8 [Snapshot] Tue Dec 22 16:27:33 CET 1998
743
- The connection duration values have been fixed
744
- Counters should now display correct values
745
- The function that checked whether an address is a multicast
747
- Local hosts are no longer purged: this caused the traffic
748
matrix to have some problems when some hosts are purged.
749
- The vendor name is now shown properly on interactive mode
750
- The 'Hosts Info' page can now be properly sorted according
752
(Owner: Jerome.Le-Tanou@ujf-grenoble.fr)
755
- Traffic is now counted using 64 bits counters
756
- Some basic protocols are added to the ntop known services
757
regardeless of their inclusion in /etc/services
758
- X11 has been added to the default IP protocols
759
- IP fragments are now handled properly.
760
(Owners: Leon Verrall <leon@reading.sgi.com>).
761
- The traffix matrix cells have a bg color (blue-green-red)
762
depending on the cell traffic
763
- All HTML tables entries have now some content
764
(empty cells/rows aren't generated)
765
- Added the list of the last 16 peers that exchanged data with
766
a given host (Info about ...)
767
- Added a "Multicast Stats" entry
771
v1.1a7 [Snapshot] Tue Dec 15 10:51:54 MET 1998
774
- install-sh has the permissions set to 755
775
(Owner: of "David.Anthony" <David.Anthony@comcare.gov.au>)
776
- Some #ifdefs are missing on BSD: they are now defined in ntop.h
777
(Owner: James Ponder <james@oaktree.co.uk>)
778
- The configure file resolves u_int (needed on SunOS 4.X)
779
(Owner: Rich Kulawiec <rsk@gsp.org>)
780
- The configure file now checks more strictly the presence of (n)curses
781
- Fixed the pcap_XXX_version problem on BSD systems
782
(Owner: James Ponder <james@oaktree.co.uk>)
786
v1.1a6 [Snapshot] Mon Dec 14 16:31:01 MET 1998
789
- ntop core dump (idle sessions were not freed smoothly)
790
Unfortunately, there are apparently other problems that might
791
cause cores. Those problems are still under investigation.
792
(Owners: David.Anthony <David.Anthony@comcare.gov.au> and
793
Leon Verrall <leon@reading.sgi.com>).
794
- Fixed interactive-mode column display
795
- Fixed a bug that prevented UDP sessions to show up
796
properly (Info about ...)
799
- '-m' flag has been added for specifying subnets whose traffic is
801
(Owner: James Ponder <james@oaktree.co.uk>).
802
- Added new links on table columns for sorting purposes
803
- Added for each host (Info about ...) a table that shows the host traffic
804
and a table that displays the uses for ports (0-1024)
805
(Owner: Robert Greimel <greimel@beluga.phys.uvic.ca>)
807
----------------------------------------------
808
v1.1a5 [Snapshot] Fri Dec 4 10:47:16 MET 1998
811
- Total traffic bars/stats: the counter should now be fixed.
812
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
813
- The function that prints the time should now work properly
814
(Owners: "William R. McDonough" <wrmcd@wilmcd.com>,
815
"David.Anthony" <David.Anthony@comcare.gov.au>).
816
- Fixed bugs that prevented some IP addresses to be converted to symbolic
818
- HTTP passwords non '\n'-terminated are now handled properly
819
(Owner: Leon Verrall <leon@reading.sgi.com>)
820
- Fixed some typos/problems in the man page
821
(Owner: Robert Greimel <greimel@beluga.phys.uvic.ca>)
822
- The log file is flushed once an entry is added
823
(Owner: Robert Greimel <greimel@beluga.phys.uvic.ca>)
824
- Pkts number (trafficStats.html) is now displayed correctly.
825
- Fixed a bug in the traffic matrix table that prevented numeric hosts
826
name to be shown properly.
827
- Optimization of the HTML code generated for the matrix table resulting in
829
- Fixed the vendor for "00:00:83" cards.
830
- AppleTalk/IPX have been added to the web graphs
831
(Owner: Ian Reinhart Geiser <geiseri@msoe.edu>)
834
- Added per protocol global statistics
835
- Added bandwidth column (Hosts Info entry)
836
- Table columns can now be sorted by clicking on the column name link.
837
- The '-r' flag can now be used to specify HTML page refresh rate
838
(Owner: Robert Greimel <greimel@beluga.phys.uvic.ca>)
839
- Added support for Netbios (over Ethernet), OSPF, IGMP.
841
----------------------------------------------
842
v1.1a4 [Snapshot] Fri Nov 20 01:08:47 CET 1998
845
- Added (hopefully) token ring support
846
(Owner: Holger Marzen <marzen@mgi.de>/Martin Olsson <root@elof.vasteras.se>).
847
- Ability to sort (HTML mode) table columns
848
- IP ports (-p flag) can be specified both in numeric and symbolic form
849
- Added -f flag for reading tcpdump captured traffic
850
(Owner: Matthew Franz <mdfranz@txdirect.net>).
851
- Fixed interactive mode column length
852
(Owner: Davin Milun <milun@cse.Buffalo.EDU>)
853
- Hosts/Connections idle for very long time will be flushed
854
(Owner: "William R. McDonough" <wrmcd@wilmcd.com>).
855
- Only active TCP connections are shown (no TIME_WAIT or FIN_ACK_1 status)
856
(Owner: Lutz Vieweg <lkv@isg.de>).
859
- Colored bar percentages are now shown properly
860
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
862
Implicitly Fixed Bugs:
863
- Added support for IRC (ports 6667-7000 and 4400)
864
(Owner: Thomas Marmetschke <tom@krush.net>).
865
- Added Log facility and the ability to show hourly/daily/weekly traffic like MRTG
866
(Owner: Kwon Soon Son <cessi@yellow.hpcnet.ne.kr>)
868
-------------------------------------------------------------
870
v1.1a3 [Snapshot] ?????
874
-------------------------------------------------------------
875
v1.1a2 [Snapshot] ?????
878
- ntop.c:mapGlobalToLocalIdx
879
Fixed bug that caused ntop to crash when the port to examine was
880
not contained in the range 0 - TOP_IP_PORT.
881
- Fixed bug that prevented time to be formatted properly
884
-------------------------------------------------------------
886
v1.1a1 [Snapshot] ?????
889
- pcap.h is now located correctly
890
- http page load is damn fast now
891
- fixed minor bar/color/font glithes
893
-------------------------------------------------------------
895
v1.0a0 [Snapshot] Fri Nov 6 00:16:30 CET 1998
898
- Added 1 minute, 5 minutes throughput
899
- Added throughput mode in both interactive ('p' key) and web mode
900
(Owner: Lutz Vieweg <lkv@isg.de>).
901
- The -p/-l flags have now different functionalities.
902
- Removed -L(see -l)/-d flags (too many flags = too much mess)
903
- Added counter for broadcast and multicast packets
904
- Changed the log format (-l flag)
906
Bugs supposed to have been fixed:
907
- With very busy nets some HTML pages generated by ntop are empty.
908
(Owner: Frank Heinzius <frimp@mms.de>).
909
- Fixed throughput formula (sometimes the thput value was wrong)
910
(Owner: carlier.k@js.mil.be).
911
- Added a check inside getHostInfo() that allows to find anyway and
912
entry (the ancient one is purged in the worst case) and then
913
that avoids to loop indefinitively.
914
(Owner: Olaf Schnapauff <O.Schnapauff@tu-bs.de>).
915
- Some bars (web mode) didn't show percentages
916
- The screen refresh (interactive mode) should display nicely: no
917
lines too long anymore. (the screen width/resize bug is still
920
-------------------------------------------------------------
922
v1.0 Mon Oct 5 16:21:54 CEST 1998
925
- Added support for further protocols (IP and non-IP ones).
926
- The web interface has been redesigned
927
- Added support for non IP protocols hence non IP hosts are
928
identified with ethernet addresses ('n' key toggles addresses
929
format: symbolic <-> numeric <-> MAC <-> Nw Board Vendor)
930
- Added support for: NFS, Netbios (over Ethernet), X11,
931
IPX, DLC/LLC, ARP/RARP, Decnet, AppleTalk.
932
- Added column sort for the three last columns ('y' key)
933
- Added log facility that records TCP/UDP sessions
934
- Added an online help ('h' interactive command)
935
(thanks to Peter Gervai <grin@tolna.net>).
938
- Fixed glith that caused ntop to create a lot of zombie processes when
940
- Fixed bug that prevented TCP/UDP counters to show the
942
- Fixed a but that prevented ntop to work properly on ethernet
943
headerless interfaces such as the loopback interface
944
(thanks to Martin Kammerhofer <dada@sbox.tu-graz.ac.at>).
945
- Many fixes in both ntop and configure. This is to fix some
946
glithes and make the package compatible with NetBSD.
947
(thanks to Kimmo Suominen <kim@tac.nyc.ny.us>).
948
- Fixed a glitch that prevented ntop to compile under Solaris
949
2.5.x and SunOS 4.x (thanks to Peter Williams
950
<williams@eisws25.jpl.nasa.gov> and Igor Schein <igor@txc.com>).
952
------------------------------------------------------------
954
v0.4 Mon Aug 3 12:49:01 CEST 1998
957
- Added web support '-w' flag. ntop can now be started in a
958
'daemon-like mode' and accessed using a conventional web browser.
961
- modified some files for better compatibility with
962
SunOS 4.X. (thanks to Pat Myrto <pat@rwing.com>).
964
------------------------------------------------------------
966
v0.3.1 Fri Jul 31 10:01:44 CEST 1998
969
- some files contained the line #include "gnuc.h"
970
instead of #include <gnuc.h> (gnuc.h is part of libpcap).
971
(thanks to Daniel Ellis <dellis@frycomm.com>).
972
- the Makefile section related to the man page installation
973
was broken (the Makefile was trying to instell ntop.1 instead
974
of ntop.8). In addition the man page had a small
975
typo. (thanks to Igor Schein <igor@txc.com>).
976
- The code that calculates the network usage percentage is
977
wrong: the data sent/received percentages are inverted.
978
(thanks to Davin Milun <milun@cs.buffalo.edu>).
979
- Fixed some problems that prevent ntop to compile nicely
980
on BSD systems. (thanks to James Ponder <james@oaktree.co.uk>).
982
------------------------------------------------------------
984
v0.3 Thu Jul 30 11:48:05 CEST 1998
987
- In some cases the last column contained some junk trailer char.
988
(thanks to Igor Schein <igor@txc.com>)
991
- Whenever the user presses a valid key ('t' for instance), the
992
screen update is now perfomed immediately.
993
- The network interface being used is not shown on the first line.
994
- Pressing the space bar while ntop is running, modifies the
995
content of the last three columns.
996
- A man page has been written.
997
- ntop has been compiled against libpcap-0.4a7/
998
(thanks to Douglas Berry <doug@cancom.net>)
1000
------------------------------------------------------------
1002
v0.2.2 Mon Jul 13 12:20:36 CEST 1998
1005
- Non IP pkts value has been fixed (it was always zero).
1006
- Fixed hashtable bugs that caused ntop to stop working after
1007
some time of activity.
1009
------------------------------------------------------------
1011
v0.2.1 Fri Jul 10 10:07:56 CEST 1998
1014
- Fixed some minor C problems (shown using the -Wall compile flag)
1015
- Fixed some minor glitches that show up on SunOS 4
1018
- enhanced the way IP packets are handled
1019
(thanks to Paul D. Smith <psmith@baynetworks.com>)
1020
- Added the 'B' status flag to indicate a host that both
1023
------------------------------------------------------------
1025
v0.2 Thu Jul 9 15:16:30 CEST 1998
1028
- core dump when DNS takes a lot of time to resolve addresses
1031
- added "-p" flag: traffic can now be shown in percentage
1032
- added "-r" flag: refresh time setting
1033
- added "-d" flag: shows/hides idle (with respect to the last refresh) hosts
1034
(thanks to Rui Ataide <ra@ufp.pt>)
1035
- network throughput is now shown on the top-right corner
1036
- the new defaults are: show local hosts/hide idle hosts
1037
- the domain name is not shown for local hosts
1039
------------------------------------------------------------
1041
v0.1.1 Tue Jul 7 20:03:07 CEST 1998
1043
- core dump when the terminal window is too large (> 80 cols)
1044
- ip_print: added cast to void* [this is supposed to fix
1045
byte alignment problems]
1046
(thanks to Paul D. Smith <psmith@baynetworks.com>)
1048
- added "-l" flag: ntop lists hosts that belong to the local subnet
1050
------------------------------------------------------------
1052
v0.1 Tue Jul 7 09:40:06 MET DST 1998
1055
------------------------------------------------------------
1057
1998 - Luca Deri <deri@ntop.org>
added
removed
ntop/ChangeLog
