diff -ru libnids-1.23/CHANGES libnids-1.24/CHANGES --- libnids-1.23/CHANGES 2008-02-23 19:28:49.000000000 +0000 +++ libnids-1.24/CHANGES 2009-12-10 15:16:07.072923079 +0000 @@ -1,3 +1,7 @@ +v1.24 Dec 10 2009 +- fixed a number of state variables which weren't reset when loading pcaps +- fix radiotap header calculation + v1.23 Feb 23 2008 - fixed remotely triggerable NULL dereference in ip_fragment.c - fix DLT_PRISM_HEADER linkoffset calculation diff -ru libnids-1.23/CREDITS libnids-1.24/CREDITS --- libnids-1.23/CREDITS 2008-02-21 10:32:58.000000000 +0000 +++ libnids-1.24/CREDITS 2009-12-10 15:15:02.187992496 +0000 @@ -269,6 +269,16 @@ "Ben, Wu CheokMan" +fix for state variables not reset when loading new pcap files offline + + "David Cannings" + + +fix for incorrect assumption about the length of radiotap headers + + "Michal Pecio" + + Libnids uses libpcap and libnet libraries: LBNL Network Research Group diff -ru libnids-1.23/doc/API.html libnids-1.24/doc/API.html --- libnids-1.23/doc/API.html 2008-02-21 10:40:55.000000000 +0000 +++ libnids-1.24/doc/API.html 2009-12-10 15:18:05.567406962 +0000 @@ -1,12 +1,12 @@ -Libnids-1.23 API +Libnids-1.24 API

====================
- libnids-1.23
+ libnids-1.24
====================

    diff -ru libnids-1.23/doc/API.txt libnids-1.24/doc/API.txt --- libnids-1.23/doc/API.txt 2008-02-21 10:41:03.000000000 +0000 +++ libnids-1.24/doc/API.txt 2009-12-10 15:16:38.812423315 +0000 @@ -1,6 +1,6 @@ ==================== - libnids-1.23 + libnids-1.24 ==================== 1. Introduction diff -ru libnids-1.23/doc/LINUX libnids-1.24/doc/LINUX --- libnids-1.23/doc/LINUX 2008-02-21 10:41:25.000000000 +0000 +++ libnids-1.24/doc/LINUX 2009-12-10 15:17:32.788898072 +0000 @@ -1,6 +1,6 @@ ==================== - libnids-1.23 + libnids-1.24 ==================== The following applies to Linux only. @@ -18,4 +18,4 @@ reassembly, as it deals perfectly with duplicate packets - tcp callback functions will not notice anything unusual. However, UDP and IP callbacks will receive duplicate packets. - \ No newline at end of file + diff -ru libnids-1.23/doc/NEW_LIBPCAP libnids-1.24/doc/NEW_LIBPCAP --- libnids-1.23/doc/NEW_LIBPCAP 2008-02-21 10:45:20.000000000 +0000 +++ libnids-1.24/doc/NEW_LIBPCAP 2009-12-10 15:17:40.444406318 +0000 @@ -1,7 +1,7 @@ ==================== - libnids-1.23 + libnids-1.24 ==================== This document is obsolete; read LINUX instead ! - \ No newline at end of file + diff -ru libnids-1.23/doc/PERFORMANCE libnids-1.24/doc/PERFORMANCE --- libnids-1.23/doc/PERFORMANCE 2008-02-21 10:45:00.000000000 +0000 +++ libnids-1.24/doc/PERFORMANCE 2009-12-10 15:17:26.008954276 +0000 @@ -1,6 +1,6 @@ ==================== - libnids-1.23 + libnids-1.24 ==================== Libnids uses efficient data structures (hash tables), so it imposes as little overhead on packets processing as possible. However, in some cases, diff -ru libnids-1.23/doc/TESTS libnids-1.24/doc/TESTS --- libnids-1.23/doc/TESTS 2008-02-21 10:41:44.000000000 +0000 +++ libnids-1.24/doc/TESTS 2009-12-10 15:17:19.024946321 +0000 @@ -1,6 +1,6 @@ ==================== - libnids-1.23 + libnids-1.24 ==================== In order to verify reliability of libnids, a number of tests were diff -ru libnids-1.23/MISC libnids-1.24/MISC --- libnids-1.23/MISC 2006-05-04 17:25:00.000000000 +0100 +++ libnids-1.24/MISC 2009-12-10 15:15:23.087406692 +0000 @@ -1,6 +1,6 @@ ==================== - libnids-1.21 + libnids-1.24 ==================== 1. Building diff -ru libnids-1.23/src/killtcp.c libnids-1.24/src/killtcp.c --- libnids-1.23/src/killtcp.c 2006-05-08 21:05:51.000000000 +0100 +++ libnids-1.24/src/killtcp.c 2009-12-10 15:19:36.259401184 +0000 @@ -118,6 +118,6 @@ if (initialized) abort(); } -#elif +#else #error Something wrong with LIBNET_VER #endif diff -ru libnids-1.23/src/libnids.c libnids-1.24/src/libnids.c --- libnids-1.23/src/libnids.c 2008-02-21 10:47:12.000000000 +0000 +++ libnids-1.24/src/libnids.c 2009-12-10 15:19:36.255419322 +0000 @@ -269,7 +269,7 @@ case DLT_IEEE802_11_RADIO: // just get rid of the radio tap header if (!linkoffset_tweaked_by_prism_code) { - nids_linkoffset = 25; // sizeof(radio tap header) + nids_linkoffset = EXTRACT_LE_16BITS(data + 2); // skip radiotap header linkoffset_tweaked_by_radio_code = 1; } //now let DLT_IEEE802_11 do the rest diff -ru libnids-1.23/src/Makefile.in libnids-1.24/src/Makefile.in --- libnids-1.23/src/Makefile.in 2008-02-21 10:40:19.000000000 +0000 +++ libnids-1.24/src/Makefile.in 2009-12-10 15:19:01.351915312 +0000 @@ -13,7 +13,7 @@ libdir = @libdir@ mandir = @mandir@ LIBSTATIC = libnids.a -LIBSHARED = libnids.so.1.23 +LIBSHARED = libnids.so.1.24 CC = @CC@ CFLAGS = @CFLAGS@ -W -Wall -DLIBNET_VER=@LIBNET_VER@ -DHAVE_ICMPHDR=@ICMPHEADER@ -DHAVE_TCP_STATES=@TCPSTATES@ -DHAVE_BSD_UDPHDR=@HAVE_BSD_UDPHDR@ diff -ru libnids-1.23/src/nids.h libnids-1.24/src/nids.h --- libnids-1.23/src/nids.h 2008-02-21 10:38:20.000000000 +0000 +++ libnids-1.24/src/nids.h 2009-12-10 15:18:28.331406714 +0000 @@ -18,7 +18,7 @@ # endif # define NIDS_MAJOR 1 -# define NIDS_MINOR 23 +# define NIDS_MINOR 24 enum { diff -ru libnids-1.23/src/tcp.c libnids-1.24/src/tcp.c --- libnids-1.23/src/tcp.c 2008-02-21 10:28:16.000000000 +0000 +++ libnids-1.24/src/tcp.c 2009-12-10 15:19:36.259401184 +0000 @@ -695,6 +695,9 @@ tcp_stream_table = NULL; free(streams_pool); streams_pool = NULL; + tcp_latest = 0; + tcp_oldest = 0; + tcp_num = 0; /* FIXME: anything else we should free? */ }