glFlow is a (D)DoS logger written with speed in mind. It detects attacks on high speed links through real-time flow aggregation and analysis.
No changes have been submitted for this release.
Release Notes: This release adds support for generic protocol flows, thus being able to detect and report attacks with crafted packets that fake, for instance, GRE or IPSEC sessions.
Release Notes: Minor code cleanups and copyright information changes were made.
Release Notes: The host expiration criteria has changed. Now, the difference between currentTime and both m_lastFlow and m_lastPacket must exceed the host life time for the host to be deleted from the tree.
Release Notes: BPF filtering now really works. An integer overflow in HostTree.cpp was fixed.