forked from royhills/arp-scan
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ChangeLog
750 lines (497 loc) · 27.1 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
2013-12-02 Roy Hills <[email protected]>
* link-packet-socket.c: Die with an error if we can't open a raw
packet socket to obtain the interface MAC address. This avoids
a segmentation violation on Linux if we try to run arp-scan against
a specific interface without the required privileges.
2013-12-02 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.h arp-scan.1: Added new --randomseed option,
which allows the random numer generator to be seeded with a specific
value.
* arp-scan.c, arp-scan.h, utils.c: Removed --debug (-d) option. This
has not been used for years, and the associated debug code was
causing more clutter than it was worth.
* check-host-list: Added test to check generation of random host list.
2013-12-01 Roy Hills <[email protected]>
* configure.ac, .gitignore: Added configure option --enable-gcov to
enable gcov code coverage.
2013-11-12 Roy Hills <[email protected]>
* arp-fingerprint: Added fingerprint for Cisco IOS 15.0.
2013-11-02 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.1: Added new --plain (-x) option to supress
printing of header and footer text, and only display one output
line for each responding host. Idea from Stefan Tomanek's arp-scan
fork on github at https://github.com/wertarbyte/arp-scan.
2013-09-21 Roy Hills <[email protected]>
* get-oui, get-iab: Use LWP::UserAgent instead of LWP::Simple to enable
us to obtain the raw content rather than the decoded content. This
avoids Unicode/UTF-8 issues caused by a change in behaviour between
LWP 5.813 on Debian Lenny and 5.836 on Debian Squeeze.
* ieee-oui.txt, ieee-iab.txt: Updated from IEEE website using modified
scripts.
2013-09-05 Roy Hills <[email protected]>
* arp-fingerprint: Added fingerprint for WIZnet W5100 on Arduino
Ethernet shield.
2013-09-05 Roy Hills <[email protected]>
* configure.ac: Change the bug-report string in AC_INIT from the
arp-scan email address to the github URL.
* Added references to the github repository in various files in
place of the arp-scan email address.
* Updated ieee-oui.txt and ieee-iab.txt files.
2013-08-15 Roy Hills <[email protected]>
* Removed $Id$ keywords from all files, and associated rcsid variables
from C source. These are not really needed and they don't work with
git.
* check-run1: Added GPL licence text, which had been accidentally
ommitted when the script was written.
* configure.ac: Incremented version to 1.9.2 to distinguish new
version under git revision control.
* .gitignore: new file containing file patterns that should not be
committed to the repository.
2013-08-15 Roy Hills <[email protected]>
* ChangeLog: Removed pointless id keywords.
* Final SVN revision before migration to git.
2013-07-25 Roy Hills <[email protected]>
* Released arp-scan version 1.9.
tarball arp-scan-1.9.tar.gz, size 488442 bytes
md5sum 38584d6c1edfa9f6b41d496e4a5539f1
* configure.ac: Incremented version to 1.9.1.
2013-07-24 Roy Hills <[email protected]>
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
* configure.ac: Incremented version number to 1.9.
* NEWS: Updated with latest changes.
2013-05-09 Roy Hills <[email protected]>
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
* Built with autoconf 2.69 and automake 1.11 from Debian Wheezy to
add support for ARM 64 bit CPU architecture and remove configure
warnings about conftest.dSYM on MacOS X.
2013-05-03 Roy Hills <[email protected]>
* arp-fingerprint: Added FreeBSD 8.2, FreeBSD 9.1, DragonflyBSD 3.0,
DragonflyBSD 3.2, Linux 3.2, Linux 3.8, NetBSD 5.1, NetBSD 6.0,
OpenBSD 4.8, OpenBSD 5.1 and RiscOS 5.19.
* NEWS: Updated with changes since last release.
* configure.ac: Incremented version number to 1.8.4.
2013-04-25 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.h: Changed arp-scan to use the libpcap
function pcap_sendpacket() instead of our own link-layer specific
link_send() functions. This means that we now require libpcap
version 0.9.3 or later.
* link-bpf.c, link-dlpi.c, link-packet-socket.c: Removed unneeded
link-layer specific link_send() functions. Changed link_open()
and link_close() functions to static, and modified
get_hardware_address() and get_source_ip() functions to call
link_open/link_close directly. Included link_t typedef in
link_handle struct declaration.
* configure.ac: Change the libpcap function check from
pcap_lib_version() to pcap_sendpacket(), to ensure that we have
a recent enough version of libpcap.
* arp-scan.c: New function get_source_ip() to get the interface IP
address using platform-independent code.
* link-bpf.c, link-dlpi.c, link-packet-socket.c: Removed unneeded
link-layer specific get_source_ip() functions.
2013-04-15 Roy Hills <[email protected]>
* Modified copyright statement in files to include up to 2013.
* get-oui, get-iab: Modified regex to allow optional whitespace at
the beginning of line.
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
* check-decode: Updated for new IEEE OUI vendors.
* configure.ac: Incremented version number to 1.8.3.
* arp-scan.c: Removed unneeded errlen declaration to avoid "set but
not used" warning with GCC 4.6 and later.
2013-01-01 Roy Hills <[email protected]>
* arp-fingerprint: Added Windows 8
2012-08-08 Roy Hills <[email protected]>
* configure.ac: Added OS pattern for Dragonfly BSD.
2012-06-06 Roy Hills <[email protected]>
* arp-fingerprint: Added fingerprint for BeOS.
2012-05-29 Roy Hills <[email protected]>
* arp-scan.c: Copy the pcap_header->ts structure to a temporary
struct timeval before passing to timeval_diff during rtt calculation.
We can't pass a pointer to pcap_header->ts directly to timeval_diff
because it's not guaranteed to have the same size as a struct
timeval. E.g. OpenBSD 5.1 on amd64. Thanks to Stuart Henderson at
OpenBSD for spotting this bug.
2012-05-20 Roy Hills <[email protected]>
* get-oui, get-iab: Applied patch from Stuart Henderson at OpenBSD.
This allows the -u (alternative URL) option to be correctly handled,
and changes the default URLs to the new locations on the IEEE
website (the old locations still work, but with a redirect).
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
2011-12-30 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.h, arp-scan.1: If the location of the various
MAC/Vendor mapping files (IEEE OUI, IEEE IAB or custom) are not
specified on the command line with the appropriate option, then
look for them in the current directory before looking in the system
wide location.
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
* check-decode: Updated patterns to reflect vendor name changes in
latest IEEE OUI file.
2011-12-18 Roy Hills <[email protected]>
* configure.ac: Incremented version to 1.8.2
2011-09-27 Roy Hills <[email protected]>
* arp-scan.h, arp-scan.c, arp-scan.1: Added new option --rtt (-D) to
calculate and display the packet round-trip time.
2011-08-18 Roy Hills <[email protected]>
* arp-scan.h, arp-scan.1: Raised default timeout from 100ms to 500ms.
It is suspected that the default timeout is too short in some
situations, and this may be one of the causes of duplicate responses.
* arp-scan.h, link-bpf.c: Include <net/bpf.h> before arp-scan.h in
link-bpf.c, and remove conditional inclusion of <net/bpf.h> in
arp-scan.h. This causes <net/bpf.h> to be included before <pcap.h>
on all systems that use BPF, e.g. BSD and MacOS. This should prevent
the problems that occur on some of these systems, and remove the need
for conditional inclusion to prevent them.
* arp-fingerprint: Added additional fingerprint for Linux 2.6 on
Amazon Kindle.
2011-07-31 Roy Hills <[email protected]>
* arp-fingerprint: Added fingerprint for GNU/Hurd
2011-07-04 Roy Hills <[email protected]>
* Makefile.am: Added pkt-custom-request-vlan-llc.dat to EXTRA_DIST.
2011-03-07 Roy Hills <[email protected]>
* configure.ac: Incremented version to 1.8.1.
2011-03-01 Roy Hills <[email protected]>
* Released arp-scan version 1.8.
tarball arp-scan-1.8.tar.gz, size 430221 bytes
md5sum be8826574ec566217eb7ca040fe472f9
* configure.ac: Remove version number from AM_INIT_AUTOMAKE macro,
as this usage is obsolete now. Incremented version to 1.8.
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
2011-02-26 Roy Hills <[email protected]>
* pkt-custom-request-vlan-llc.dat: New data file for check-packet
script containing custom ARP request with 802.1Q VLAN tag and
LLC/SNAP framing.
* check-packet: Added check for custom ARP request with 802.1Q VLAN
tag and LLC/SNAP framing.
2011-02-25 Roy Hills <[email protected]>
* pkt-vlan-llc-response.pcap: New file containing an example of
an ARP reply with 802.1Q tag and LLC/SNAP framing. From a Cisco
2621 router.
* pkt-trailer-response.pcap: Renamed from pkt-trailer-reply.pcap.
* check-decode: New checks for trailer response and 802.1Q/LLC
responses.
* arp-scan.c: Modified pcap filter string to capture ARP responses
with both 802.1Q tag and LLC/SNAP framing.
* Makefile.am: Include pkt-trailer-response.pcap and
pkt-vlan-llc-response.pcap.
2011-02-21 Roy Hills <[email protected]>
* arp-scan.c: Modified usage() so that it can output either brief or
detailed help output depending on a new "detailed" argument. Now,
detailed output, including information on the available options, is
only displayed when arp-scan is run with the --help option. For
error conditions such as incorrect options, it only produces brief
output.
* arp-scan.c: Modify display_packet() to report responses where the
ARP protocol type (ar$pro) is not IP (0x0800). This allows trailer
negotiation responses to be distinguished from regular ARP replies.
* pkt-trailer-reply.pcap: New file containing an example of a trailer
negotiation ARP response from a Quasijarus 4.3BSD system on SIMH VAX.
* arp-fingerprint: Added fingerprint for Blackberry OS.
2011-02-19 Roy Hills <[email protected]>
* arp-scan.h: On Apple Mac OS X systems with Xcode 2.5 and later,
include <net/bpf.h> before <pcap.h>.
* configure.ac: Increment version number to 1.7.6.
2011-02-06 Roy Hills <[email protected]>
* acinclude.m4: Changed GCC_FORTIFY_SOURCE macro so the test program
doesn't include <features.h>, because that header file is not
present on all the operating systems that we support, e.g. OpenBSD.
2011-02-04 Roy Hills <[email protected]>
* arp-scan.c: Use pcap_get_selectable_fd() rather than pcap_fileno()
to get the pcap file descriptor.
* check-host-list: Added new test to check the creation of the host
list.
2011-02-03 Roy Hills <[email protected]>
* arp-scan.c: When using --writepkttofile we no longer open a link
layer socket or a pcap handle, so we don't need root privileges.
* check-packet: Remove check for root privileges as this is no longer
needed.
* check-decode: Added two new tests to improve code coverage.
* arp-scan.c, arp-scan.h: Modify add_host_pattern() and add_host() so
we always use the more efficient inet_pton() rather than
get_host_address() for IPnet/bits, IPnet:mask and IPstart-IPend
patterns.
2011-02-02 Roy Hills <[email protected]>
* arp-scan.c: Change operation of --readpktfromfile so it reads from
a pcap savefile rather than from a raw file.
* pkt-simple-response.pcap, pkt-padding-response.pcap,
pkt-vlan-response.pcap, pkt-llc-response.pcap: New pcap format
files for check-decode.
* check-decode: Modified to use new pcap format savefiles, and remove
check for root privileges as this is no longer needed.
2011-01-31 Roy Hills <[email protected]>
* link-dlpi.c: Fix "comparison between signed and unsigned" warning in
function dlpi_msg.
* arp-fingerprint: Added fingerprint for Windows 7.
* arp-scan.c: Changed what gets displayed for the different verbose
levels, and updated the --help output to reflect the new behaviour.
2011-01-30 Roy Hills <[email protected]>
* check-packet, check-decode: New checks to check packet creation and
packet decoding.
* pkt-custom-request.dat, pkt-custom-request-llc.dat,
pkt-custom-request-padding.dat, pkt-custom-request-vlan.dat,
pkt-padding-response.dat, pkt-simple-request.dat,
pkt-simple-response.dat: Data files for check-packet and check-decode
scripts.
* Makefile.am: Add new check scripts and data files.
* arp-scan.c, arp-scan.h: Added undocumented options --writepkttofile
and --readpktfromfile to allow data to be written to or read from a
file instead of the network for testing.
* arp-scan.c: Use "stdin" instead of fdopen(0,"r") when using
--filename=-, fixing a bug which was causing fd 0 to be closed.
Set the frame type correctly for LLC/SNAP format frames: before
it was always set to 0x0806.
* configure.ac: Add headers required for --writepkttofile and
--readpktfromfile. Increment version number to 1.7.5.
2011-01-09 Roy Hills <[email protected]>
* COPYING: Changed license from GPLv2 to GPLv3.
* Modified licence statement in source files to specify GPLv3
* Modified copyright statement in files to include up to 2011.
2010-12-22 Roy Hills <[email protected]>
* arp-scan.c: Change req_interval back from unsigned to int. This
addresses a bug in the timing code that was introduced in svn
r18043, which caused the packet rate to be very high irrespective
of the specified interval.
* configure.ac: Enable -Wextra warnings for gcc. Increment version
number to 1.7.4.
2010-12-22 Roy Hills <[email protected]>
* hash.c, hash.h, obstack.c, obstack.h: Updated version of GAS hash
table code to the latest version from GNU binutils 2.21. This new
version addresses the shadowed variable warnings that the old version
used to produce when compiled with -Wshadow.
* configure.ac: define ATTRIBUTE_UNUSED macro to enable portable use
of attribute unused to mark possibly unused function arguments.
* arp-scan.c: Minor changes to remove a couple of shadowed variable
warnings.
2010-12-07 Roy Hills <[email protected]>
* acinclude.m4: Added GCC_WEXTRA macro to determine if the C compiler
supports the -Wextra switch to enable extra warnings.
* arp-scan.c, arp-scan.h, utils.c: Remove unused function parameters
and address signed/unsigned comparisons highlighted by -Wextra.
2010-12-03 Roy Hills <[email protected]>
* arp-scan.1: Added warning about setting ar$spa to the destination
IP address. Suggested by Ed Schaller.
2010-04-25 Roy Hills <[email protected]>
* arp-fingerprint: Added 2.11BSD
2009-08-15 Roy Hills <[email protected]>
* arp-scan.c, utils.c: Improve handling of --bandwidth and
--interval options: Allow either upper or lowercase
multiplier letters and give an error if an unknown multiplier
character is used. Previously an unknown multiplier character
or one with the wrong case was silently ignored and treated as
no multiplier at all.
* wrappers.c: Change Strtoul and Strtol so they give an error
if the underlying function finishes at an unconvertible
character other than NULL or whitespace.
* configure.ac: Added extra warning "-Wwrite-strings" for gcc.
2009-08-14 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.h, configure.ac, error.c: Removed syslog
functionality as this is not used and has been #ifdef'ed out
for some time.
2009-05-06 Roy Hills <[email protected]>
* autoconf.ac: Updated to autoconf 2.61
2009-03-06 Roy Hills <[email protected]>
* acinclude.m4: Added macros to detect compiler support for
-fstack-protect, -D_FORTIFY_SOURCE and -Wformat-security.
* configure.ac: Conditionally enable compiler flags for
-fstack-protect, -D_FORTIFY_SOURCE and -Wformat-security using
the new acinclude.m4 autoconf macros.
* configure.ac: Incremented version to 1.7.2.
2008-08-01 Roy Hills <[email protected]>
* arp-fingerprint get-iab get-oui: Replaced "#!/usr/bin/perl" shebang
with "#!/usr/bin/env perl" to increase portability. This allows
these perl scripts to work on systems where perl is not installed in
/usr/bin, such as NetBSD.
2008-07-26 Roy Hills <[email protected]>
* configure.ac: Incremented version to 1.7.1.
* arp-fingerprint: Added NetBSD 4.0, FreeBSD 7.0 and Vista SP1
2008-07-25 Roy Hills <[email protected]>
* Released arp-scan version 1.7.
tarball arp-scan-1.7.tar.gz, size 344,771 bytes
md5sum a9927dba2b1dbdfd1c3b3bb09615fc14
2008-07-24 Roy Hills <[email protected]>
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
* configure.ac: Incremented version to 1.7.
2008-07-11 Roy Hills <[email protected]>
* arp-scan.a: Removed reference to RMIF environment variable.
arp-scan now uses the value specified with --interface, or
if that is not specified, picks an interface with
pcap_lookupdev().
* configure.ac: Incremented version to 1.6.4 for pre-release
testing.
* *.c, *.h: Modified copyright statements to read 2005-2008.
2008-05-03 Roy Hills <[email protected]>
* arp-scan.c: Added --pcapsavefile (-W) option to allow received
ARP responses to be saved in the specified pcap savefile for
later analysis.
* TODO: Removed plan to support libpcap 0.7 as just about every
system has at least libpcap 0.8, and most have 0.9.
* arp-scan.c: changed display_packet() so it displays the source
address from the frame header in parens if it is different from the
ar$sha address. E.g.
192.168.1.255 ff:ff:ff:ff:ff:ff (00:03:a0:88:eb:a8) Broadcast
2007-12-10 Roy Hills <[email protected]>
* arp-scan.c: Change most calls to strtol() to use the new
wrapper function Strtol() instead, because this checks for
errors. Previously, a non-numeric value would be converted to
zero without any error, meaning something like "--snap=xxx"
would be silently accepted. Now such invalid inputs results in
an error.
* arp-scan.c: Added new --vlan (-Q) option to support sending
ARP packets with an 802.1Q VLAN tag. Response packets with
an 802.1Q tag are decoded and displayed irrespective of this
option.
2007-04-17 Roy Hills <[email protected]>
* arp-scan.h: Reduced MAX_FRAME from 65536 to 2048 bytes.
* arp-scan.c: Add the optional padding in marshal_arp_pkt(), and
avoid potential buffer overflow if padding is longer than the
remaining buffer size.
* arp-scan.c: Changed display_packet() to take ARP structure, extra
data and framing type as parameters passed from callback() to avoid
having to call unmarshal_arp_pkt() twice. This also means that
we don't need to pass the raw frame to display_packet() now as it
has the data in individual variables.
* arp-scan.c: Move padding addition to marshal_arp_pkt().
2007-04-14 Roy Hills <[email protected]>
* arp-scan.h, arp-scan.c: Changed MAXIP to MAX_FRAME and changed value
to 65536 bytes. This is the maximum allowable frame size, which is
used to size read/write buffers. This is much larger than any
layer-2 frame.
* arp-scan.h: Changed PACKET_OVERHEAD to 18 (6+6+2 ... +4) and
MINIMUM_FRAME_SIZE to 46.
* arp-scan.h: undefine SYSLOG, as we don't use this any more, and I
doubt that anyone else needs it. The syslog functionality may be
removed in a future release.
2007-04-13 Roy Hills <[email protected]>
* arp-scan.c: Added support for RFC 1042 LLC/SNAP framing with the
new --llc (-L) option.
2007-04-12 Roy Hills <[email protected]>
* Released arp-scan version 1.6.
tarball arp-scan-1.6.tar.gz, size 319,566 bytes
md5sum eb24303c6eb4d77c3abf23511efce642
2007-04-10 Roy Hills <[email protected]>
* mt19937ar.c: New file - Mersenne Twister random number generator.
* arp-scan.c: Changed random number implementation to use the mersenne
twister functions from mt19937ar.c rather than random() from the C
library. This improves portability, as random() is not part of
standard C.
* Updated ieee-oui.txt and ieee-iab.txt from the IEEE website
using get-oui and get-iab Perl scripts.
2007-04-08 Roy Hills <[email protected]>
* utils.c: Removed ununsed function printable().
* arp-scan.c: Added /* NOTREACHED */ comments in appropriate places.
Removed unneeded max_iter global variable.
Added call to pcap_lib_version() in arp_scan_version().
* configure.ac: Changed check for pcap_datalink_val_to_name() to
check for pcap_lib_version() instead.
2007-04-06 Roy Hills <[email protected]>
* configure.ac: Added checks for strlcat and strlcpy, with
replacement functions using the OpenBSD implementations if they are
not present.
* strlcat.c, strlcpy.c: New source files from the OpenBSD source at
http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/string
* *.c: replaced most calls to strcat and strncat with strlcat, and
calls to strcpy and strncpy with strlcpy. Two calls to strncpy
remain because the source strings are not null terminated.
2007-04-05 Roy Hills <[email protected]>
* arp-scan.c: Check the return status of pcap_dispatch() against -1
rather than < 0 to check for error because the use of pcap_breakloop
results in a return status of -2, and this is not an error. Even
though we don't use pcap_breakloop, we should still behave correctly
if it used in the future.
* arp-scan.c: Check return status of inet_pton() separately against
< 0, which indicates and error, and against == 0, which indicates
that the string is not a valid address. Previously we handled these
together with the comparison <= 0. Also return from add_host()
immediately if the host lookup fails.
2007-04-04 Roy Hills <[email protected]>
* arp-fingerprint: Check that the target host specification is not
an IP network or range, and terminate with an error message if it
is. Some users have mistakenly tried to use arp-fingerprint against
a network, and I want to give a better error message in these cases.
* arp-fingerprint: Remove the default "-N" from the arp-scan command
line as it is valid to use a hostname. Modified the associated
manpage so it agrees with this change.
2007-04-03 Roy Hills <[email protected]>
* arp-scan.c: Add ioctl to reduce the bufmod timeout to zero for
Solaris (DLPI). This prevents buffering, and ensures that packets
are available immediately. This allows arp-scan to work on
Solaris (tested on Solaris/SPARC 2.9 with Libpcap 0.9.5).
2007-03-29 Roy Hills <[email protected]>
* arp-scan.c: Change help output, so we display the default value for
the --bandwidth option, and don't display it for the --interval
option (as the latter will always be zero because we use bandwidth
by default). Updated arp-scan.1 manpage with the new output.
2007-02-15 Roy Hills <[email protected]>
* link-dlpi.c: Wrote link-level functions for DLPI. Compiles on
Solaris 9, but not fully tested.
2007-01-26 Roy Hills <[email protected]>
* Updated ieee-oui.txt and ieee-iab.txt from the IEEE website
using get-oui and get-iab Perl scripts.
2006-07-26 Roy Hills <[email protected]>
* Released version 1.5.
Tarball details:
-rw-rw-r-- 1 rsh nta 298917 2006-07-26 13:50 arp-scan-1.5.tar.gz
85b0e04323ce3a423f60ab905a589856 arp-scan-1.5.tar.gz
* configure.ac: Incremented version number to 1.5.1 in preparation
for post-1.5 changes.
2006-07-24 Roy Hills <[email protected]>
* ieee-oui.txt, ieee-iab.txt: Updated IEEE OUI and IAB listings from
IEEE website using get-oui and get-iab Perl scripts.
2006-07-22 Roy Hills <[email protected]>
* configure.ac: Increased version number to 1.4.5.
* README: Added installation instructions.
2006-07-21 Roy Hills <[email protected]>
* link-bpf.c: New file containing link-level sending functions
for BPF as used by BSD OSes.
* link-packet-socket.c: Changed socket protocol from SOCK_DGRAM to
SOCK_RAW, so the entire Ethernet frame including the header can
be controlled.
* arp-scan.c: Changed to build entire outgoing frame, rather than
just the ARP payload.
* arp-scan.c: Modifications to support BPF link-layer. This has been
tested on FreeBSD 6.1, OpenBSD 3.9, NetBSD 3.0.1 and
Darwin 7.9.0 (MacOS 10.3.9).
* arp-scan.c: Changed operation of the --srcaddr option. Now it
sets the hardware address in the frame header of outgoing packets
without altering the address of the outgoing interface.
* link-packet-socket.c, link-bpf.c: Removed set_hardware_address()
function, as this is no longer needed with the new operation of
the --srcaddr option.
2006-07-11 Roy Hills <[email protected]>
* arp-scan.c: Removed unneeded gettimeofday() call in add_host().
This increases the host addition rate considerably, so adding
a class-A network (2^24 hosts) now takes 15 seconds as opposed
to 80 seconds.
2006-07-10 Roy Hills <[email protected]>
* arp-scan.h, arp-scan.c: Removed unneeded element "n" from host
entry structure. This reduces the per-host memory usage from
32 bytes per host to 28 bytes per host.
* mac-vendor.5: New manual page for the mac-vendor.txt file format.
2006-07-03 Roy Hills <[email protected]>
* link-packet-socket.c: New file containing all functions that
use Linux packet socket link layer interface. This moves all
the packet-socket implementation dependent to this one file, which
should make future porting to other operating systems easier.
* arp-scan.c, arp-scan.h: Modified to use link-layer functions in
new link-packet-socket.c file.
* configure.ac: Increased version number to 1.4.2.
2006-06-28 Roy Hills <[email protected]>
* arp-scan.c, arp-scan.h: removed the unneeded ip_address union
and replaced it with "struct in_addr". As arp-scan is only
applicable to IPv4, we don't need to use the union. This
change reduces the size of an address from 16 bytes to 4, and
reduces the per-host memory usage from 44 bytes/host to 32.
* arp-fingerprint: Added Windows Vista Beta 2 fingerprint.
2006-06-27 Roy Hills <[email protected]>
* configure.ac: Increase version number to 1.4.1 in preparation
for future changes.
2006-06-26 Roy Hills <[email protected]>
* Released version 1.4.
This is the first stable version. v1.3 was a beta, and v1.0,
1.1 and 1.2 were NTA Monitor internal versions before it was
released under GPL.