Up to [cvs.NetBSD.org] / pkgsrc / net / nfdump
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
net: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts...): net/radsecproxy/distinfo The following distfiles could not be fetched (fetched conditionally?): ./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz ./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch ./net/djbdns/distinfo djbdns-1.05-test28.diff.xz ./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch ./net/djbdns/distinfo djbdns-1.05-multiip.diff ./net/djbdns/distinfo djbdns-cachestats.patch
net: Remove SHA1 hashes for distfiles
Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
Update net/nfdump to 1.6.12, patch provided from Bartosz Kuzma in PR 49332. Changes since 1.6.6: 2014-02-16 v1.6.12 - Add NAT pool port allocation - Modify/fix NAT vrf tags. Add egress vrf ID - Modify common record due to exporter exhaustion. new common record type 10 adds 4 extra bytes. Reads v1 common record transparently - Fix sflow potential crash 2013-11-13 v1.6.11 - Add ASA/NSEL 9.x protcol changes - Make it llvm compilable 2013-08-12 v1.6.10p1 - Fix -t +/- n timeslot option - Fix bug in nfanon - stat record update. - Fix bug in netflow v5 mudule: extension map size wrong. - Fix bug nfexport: In some cases could result in wrong flow counter. - Fix nftrack - could coredump in some cases. 2013-05-16 v1.6.10 - Fix SPARC compile/optimise bug - Add output packet/bytes counter to global stat - importatnt for NSEL flows ASA > 8.5 - Add NSEL filter options xnet - Modify extension descriptor code for nfdump1.7. Still use 1.6 extension map layout for compatibility - Add prototype for nfpcapd - pcap -> nfdump collector. Converts traffoc directly to nfdump files. - Fix bug in ipfix module: uninitialised variable - Cleanup syslog/LogError calls - Fix minor non critical bugs and compile issues 2013-03-02 v1.6.9 - Fix some bugs in beta 1.6.9 NSEL code - Fix bug statistics update with aggreagted flow records - Fix sflow bug sfcapd stores wrong (ghost) dump by past samples in same sflow datagram 2013-03-02 v1.6.9 - Fix some bugs in beta 1.6.9 NSEL code - Fix bug statistics update with aggreagted flow records - Fix sflow bug sfcapd stores wrong (ghost) dump by past samples in same sflow datagram 2012-12-31 - Add time received in csv output - ICMP should handled better now - somewhat - Implement ASA NSEL records - Add definitions in nffile and nx for ASA NSEL extensions 2012-11-09 v1.6.8p1 - Add dynamic source directory tree for multiple exporters - Fix exporter bug: 'too many exporters' with large time windows - Fix uninitialised exporter sysid in default sampler record - v9 - Fix v9/ipfix cache initialisation with no templates > 1 in same packet 2012-10-26 v1.6.8 - Add ip list option for 'next ip' in filter syntax - Accept v9 sampler_id in 2bytes - Fix IPFIX mac address bug - did not get collected - Add IPFIX packet/octet TotalCount fields 85/86 - Add received timestamp to sflow collector - Fix long flow duration calculation - 32bit overflow - Fix v9 sampling ID: allow 2 byte ID - Add IPFIX options as rfc5101 section-6.2 - Add exporter records for sflow collector - Fix bug for MAC address printing %idmc and %odmc. - Add received time stamp extension - Add recursive format parser. Allows to extend predefined formats. - Change flow record sorting to heapsort. remove limit 1000 - Merge -m option to -O tstart. -m now depricated. - Add -O tend. Print order according to tend of flows ascending - Apply -O print order for printing flow cache. Applies to -A 2012-07-31 v1.6.7-tc-1 - Special version for TC - Print exporter and sampling records with nfdump -E - Added exporter and sampling records to file. 2012-07-30 v1.6.7 - Prepare for file catalog in current file format. - Fix bug in ReadBlock when reading flow from stdin pipe - Add new more flexible translation engine for v9 - Add nprobe client/server delay fields - Prepare for NSEL merging - Fix memory corruption with double -A flags - Fix bug in nfreader with compat15 mode files
Really fix inline usage.
Patch inline usage.
Update to 1.6.6 2011-03-12 1.6.6 - Minor IPFIX bug. - IPFIX implement template withdraw - For IPFIX, check packet sequence per template and observation domain - Fix time window, when no flows collected or no flows matched while processing - Fixed typos - Fix seg fault bug - test for EMPTY_LIST was missing at several places. 2011-02-19 1.6.6b1 - Fix bps/pps. make it uint64_t, as bps/pps > 4Gb/s overflows. - In record raw print mode: decode ICMP instead of src/dst ports - sflow use announced exporter IP instead of sending IP for router ID - sflow: Ignore extra fill bytes. Do not complain. - sflow: fix packet length issue. - Add IPFIX protokoll support 2011-12-31 1.6.5 - Fix 64bit bug when using byte/packet limits - for v5 and sampling use 64bit counters to prevent overflow for large sampled flows. - Fixed Ident printig bug 2011-07-11 1.6.4 - some code restructuring - prepare for IPFIX module - Add netflow v1 module. Some routers still use that - Add %sn, %dn output tags for src/dst networks - Fix buffer length check in v5. - Fix export bug: include last flow cache bucket, when exporting - number in all filter expressions accept hex values - fix an sflow colletor bug. Missing extension maps in rotated files - implement extended statistics. Currently ports and bpp distribution vectors can be collected automatically be nfcapd. Still experimental 2011-02-26 1.6.3p1 - Fix timebug fix :(, make it a compile time option - fix v7 sequence errors 2011-02-15 - Zero out unused fields after aggregation 2011-02-05 - Fix SysUptime 32bit overflow in v5 header - Add fix for strange first/last swap reported by some users. 2011-01-09 v1.6.3 - Fix extension size bug - Move IP anonymisation to separate binary nfanon - Fix initialise bug of -o fmt: and not available fields 2010-09-09 v1.6.2 - released - fixes some sflow bugs in sfcapd 2010-04-28 v1.6.1p0 - Update flow tools converter to build with Google-Code version 0.68.5 - Fix sflow bugs 2010-03-05 v1.6.1 - Fix bug in man page for -t - Test sampler infos before using them ( nfcapd startup ) - Add sampling tags #34, #35 used by JunOS - nfexpire: Fix empty .nfsat, when setting limits on an empty directory - Fix coredump for -B -m (-w) combination - Optimise some extension map code 2009-12-28 stable v1.6 - Few bug fixes in release candidates rc1, rc2 and rc3 2009-11-16 snapshot-1.6b-20091116 - Update sflow collector with new tags - Add router IP extension - Add router ID (engine type/ID) extension 2009-09-30 snapshot-1.6b-20090930 - snapshot bugfix release 2009-11-0801 snapshot-1.6b-20090806 - Add srcmask and dstmask aggregation - Add csv output mode. -o csv - Fix some bugs of previous beta - Add bidirectional aggregation of flows ( -b, -B ) - Add possibility to save aggregated flows into file ( -w ) Note: This results in a behaviour change for -w in combination with aggragation ) - Extend -N ( do not scale numbers ) to all text output not just summary - Make extension handling more robust for some moody IOSes. - Remove header lines of -s stat, when using -q ( quiet ) Note: This results in a behaviour change for -N - Remove -S option from nfdump ( legacy 1.4 compatibility ) - Make use of log (syslog) functions for nfprofile. - Move log functions to util.c 2009-06-19 snapshot-1.6b-20090717 - Flow-tools converter updated - supports more common elements. - Sflow collector updated. Supports more common elements. - Add sampling to nfdump. Sampling is automatically recognised in v5 undocumented header fields and in v9 option templates. see nfcapd.1(1) - Add @include option for filter to include more filter files. - Add flexible aggregation comparable to Flexible Netflow (FNF) - All new tags can be selected in -o fmt:... see nfdump(1) - topN stat for all new tags is implemented - Integrate developer code to read from pcap files into stable - Update filter syntax for new tags - Added more v9 tags for netflow v9. The detailed tags are listed in nfcapd(1) Adding new tags also extended the binary file format with data block format 2, which is extension based. File format for version <= 1.5.* ( Data block format 1 ) is read transparently. Data block 2 are skipped by nfdump 1.5.7. 32bit but AS and interface numbers are supported. - Add flexible storage option for nfcapd. To save disk space, the data extensions to be stored in the data file are user selectable. - Added option for multiple netflow stream to same port. -n <Ident,IP,base_directory> Example: -n router1,192.168.100.1,/var/nfdump/router1 So multiple -n options may be given at the command line Old style syntax still works for compatibility, ( -I .. -l ... ) but then only one source is supported. - Move to automake for building nfdump - Switch scaling factor ( k, M, G ) from 1024 to 1000. - Make nfdump fully 64bit compliant. ( 8bit data alignments and access ) 2009-04-17 stable 1.5.8 - Fix daylight summer time bug, when guessing sub dirs. file access ( -M, -r ) - Bug fixes for 64bits CPUs
Fix unprivileged build.
Update to version 1.5.7 Changes since last packaged version (1.5.5): 2008-02-22 - Add icmp type/code decoding - Add proper icmp v9 decoding - Fix memory leaks in -e auto expire mode in nfcapd. - Fix somee potential dead locks with file locking, when expiring - Fix multicast bug in nfreplay - Add hostname lookup for IP addresses in filter. 2007-10-15 stable-1.5.6 - Fix odd CISCO behaviour for ICMP type/code in src port. - Add fast LZO1X-1 compression option (-z) for output file. - Add lists for port in syntax -> port in [ 135 137 445] - Add lists for AS syntax -> as in [ 1024 1025 ] - Bug fix in filter for syntax 'src as and dst as'
Update to version 1.5.5 Please note that nfprofile is no longer built by default: see package option nfdump-nfprofile. Changes since last packaged version (1.5.2): 2007-08-24 stable-1.5.5 - Fix nfprofile bug, nfprofile crashes when last opts line is not valid for some reason. - Fix potential hand for nfexpire, on empty flow directories. 2007-08-08 snapshot-20070808 - Idents may contain '-' in name. - Fixed install bugs in Makefile.in and configure.in - Installs now cleanly on Solaris - Handle 4byte interface numbers in v9. Quick fix: 4bytes reduced to 2bytes. - Fix aggregation bug in statistics. - ftok(3) C library call replaced by more reliable own implementation. Did result in error messages like "Another collector is already running" - Fix minor bugs iin file range selction -R. - Add recursive behaviour for -R <directory> - New option -i can canche Ident descriptor in data files. 2007-03-12 snapshot-20070312 - Bug fix release of 20070306 2007-03-06 snapshot-20070306 - Fix bug in flist.c. Resulted in a coredump when using sub dirs and -R . ( all files ) - Fix minor bug in nfcapd.c. - Extend nfprofile for alerting system of nfsen - special version of profiles - Extend nfprofile for shadow profiles. 2007-08-10 snapshot-20070110 - Fix some compiler warnings, when compiled on a 64bit LINUX - Fixes an sflow bug: IP address was printed in wrong direction. ( lower bits first ) - Add new IP addr taging option -T for easy parsing for nfsen lookups - Add new IP list for massive address filtering: syntax: ip in [ 12345 23456 3456 ....] - Change nfprofile for channel based profiling. This breaks with old nfprofile functionality. - Remove space from ICMP type/code when followed by an IP address 2006-07-21 snapshot-20060809 - Make nfexpire ready for profile expiration - Fix bug in nfrpofile. sub dir hierarchy not handled correctly. 2006-07-21 snapshot-20060721 - Add -N option for plain number output in summary line 2006-07-21 snapshot-20060721 - Do recursive file selection when a directory is given by -R 2006-06-14 snapshot-20060621 - Add srcas/dstas/proto aggregation. Note: This changes the default aggregation behaviour, but gives more flexibility - Add tos to element statistics list 2006-06-14 snapshot-20060614 - Add additional stat line at the end of output - Add new binary nfexpire. Manages data expiry on time and/or size based limits Includes new bookkeeping records in nfcapd. See nfexpire(1) - Add ICMP type/code decoding in flow listing instead of dst port - Add packet repeater in nfcpad/sfcapd. In addition, incoming UDP packets can be directly forwarded to another IP address/Port. See new option -R - Add sub directory hierarchies: Files can be stored into various sub dir levels based on different time formats. see new option -S - Some minor bug fixes. - Code cleanup in nfcapd. better daemonize code and communication with launcher.
Improve portability and while here, fix a rather obvious buffer overflow in the argument handling. No idea how this was supposed to work, but consider running it in / with relative arguments. Bump revision.
Initial import of nfdump version 1.5.2 into The NetBSD Packages Collection. The nfdump tools collect and process netflow data on the command line. Nfdump tools: nfcapd - netflow collector daemon nfdump - netflow dump nfprofile - netflow profiler nfreplay - netflow replay nfclean.pl - cleanup old data - installed as example ft2nfdump - read flow-tools format - optional tool sfcapd - sflow collector daemon - optional tool
Initial revision