-
Mon Jan 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 2.5.1-1
- Updated to version 2.5.1
- Upstream change notes:
* This patch release fixes `assert()` usage for compatibility with newer
libc versions and handles byte order correctly in cryptopan plugin to
work for big endian systems.
* Commits:
ac12e05 copyright
ed3ea49 cryptopan reference implementation
997f047 cryptopan endian
fa3cabb assert
-
Mon Jan 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-3
- Use upstream's fix for cryptopan's endianness handling.
-
Wed Dec 03 2025 Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
- Modified upstream RPM .spec file.
- Made it follow Fedora Package Guidelines.
- Patched cryptopan to have expected output on big endian systems.
-
Tue Oct 21 2025 Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
- Release 2.5.0
* This release adds two new plugin extensions, rewrites the compressed PCAP
reader, removes a PCAP header check to not drop valid packets and fixes
problems with `-e` filtering.
* New plugin extensions:
- `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
- `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
* Compressed PCAP reader:
- Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
- Add support to read bzip2 PCAPs
- New option `-o override_compress_extension=<ext>` to force a specific compression when reading
* Fixes:
- Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
- `-e`: Fix #356
- Provide usage warning instead of assert'ing on empty option
- Remove confusing part of documentation (may still be a bit confusing...)
- Fix filtering where TC=1 and no rcode
* Other changes:
- Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
- Update email address, remove old obsolete list address
- Various fixes for CI and code coverage
* Commits:
6fb07d6 -e filter
66a26b9 fix scan-build
43f1137 CI updates
8e22e9f CI
90402ac bsd builds
ba531eb slim deps
d401d81 builds
219d05d ci
6795ad3 Migrate to Codeberg
09747ce RPM
81f142c Compress read
e583788 Fix dropped packets
a042145 proper fix gcov
b1741d4 fix gcov
6914dc9 breakloop
07917b4 C++
0ebdffc C++
5b768e5 Email
-
Thu Jun 26 2025 Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
- Release 2.4.1
* This patch release fixes a bug introduced in v2.4.0 where writing gziped
PCAPs broke, and readds sending timestamp to plugins close function which
was incorrectly removed in v2.2.1.
* Changes:
- Remove obsolete code with zlib being required
- Add gz write test
- Fix #334:
- Readd timestamp when calling plugin close
- Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
* Commits:
9abd07d plugin close
b10f923 gz write
-
Mon Jun 23 2025 Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
- Release 2.4.0
* This release brings support for reading compressed PCAPs, a few new
plugin extensions and updates to autotools.
* Changes:
- Add `CHANGES` to docs
- Update autotools requirement to 2.69 and fix deprecation warnings
- Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
- New plugin extensions:
- `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
- `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
* Commits:
f7e4cad SLE/openSUSE lz4
b30d82f Autotools, compressed PCAPs, plugin extensions
ac7f37b CHANGES
-
Thu Apr 24 2025 Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
- Release 2.3.1
* This patch release fixes issues on 32bit systems when they are using
64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
to require libpcap with `DLT_LINUX_SLL2` support.
* Commits:
a5e9a4a pcap-thread v4.1.1
731d9e0 Add support for 64bit time structures on 32bit systems
-
Thu Apr 17 2025 Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
- Release 2.3.0
* This release adds support for Linux cooked v2 link-type, a new output
format, a new plugin and fixes a couple of issues.
* The new output format `tcpdns` can be used to generate a file with the
DNS as a TCP stream, first 16bit size (network order) then the DNS
message, which is compatible with `dnsperf -B`.
* The new plugin `asudp` can be used to rewrite outgoing packet by taking
the DNS that's found and construct UDP packets from it.
* Other changes:
- Fix #314:
- man-page: Clarify that `pktsize` is shown before parsing the IP packet
- `-g`: Quote `,` characters
- Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
- Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
- Handle extension function pointers better
- Clarify that `-C` counts uncompressed output
- Block PCAP output if TCP reassemble is used
- Increase maximum DNS messages in a reassembled TCP message
- Add new extension interface for setting output packet
- Update pcap-thread to v4.1.0
* Commits:
e689bc8 pcap-thread v4.1.0
29d184b DLT_LINUX_SLL2
ba793a9 Fixes, asudp plugin, tcpdns output format
6c133d4 Ethernet padding
420548a Diag output
8b92a52 SPEC
a3fb1dd Mailing-list
-
Tue Sep 10 2024 Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
- Release 2.2.1
* This patch release fixes the BPF to correct capture ICMPv6, a typo in
the filter had it matching "ip" and not "ip6".
* Other changes are updates to GitHub workflows and man-pages.
* Commits:
ea82cd1 Copyright
aa14a9f ICMP BPF filter
6ef17e2 Badges
6722677 Workflow
1cb22f0 Man-page opt, Dumper