Version 1.1 of flowprobe
Release Notes: A vulnerability to a DoS attack, as described in "Denial of Service via Algorithmic Complexity Attacks" by Scott A Crosby and Dan S Wallach (http://www.cs.rice.edu/~scrosby/hash), was fixed by strengthening the crc16 hash function implementation. Note that xor8 and xor16 hashes remain vulnerable. The default hash was changed to crc16. The -B option was added. With regard to the libipulog-based version, if_nametoindex() is used as the default action to find SNMP-index. The -M option was added.
Other releases
Release Notes: A vulnerability to a DoS attack, as described in "Denial of Service via Algorithmic Complexity Attacks" by Scott A Crosby and Dan S Wallach (http://www.cs.rice.edu/~scrosby/hash), was fixed by strengthening the crc16 hash function implementation. Note that xor8 and xor16 hashes remain vulnerable. The default hash was changed to crc16. The -B option was added. With regard to the libipulog-based version, if_nametoindex() is used as the default action to find SNMP-index. The -M option was added.
Release Notes: This release features a security fix for the "change user" feature, and a fix for a typo in the CAPTURE_SIZE definition.
Release Notes: This version includes a security fix for the "change user" feature.
No changes have been submitted for this release.
Release Notes: Chroot and change user abilities were added. A compilation problem on BSDI 4.0 was fixed.
