1 v3.0.712 (November 2008)
2 - Web: Add --no-macs option to hide mac addresses.
4 - Web: Make tables prettier.
5 - Host detail view now triggers a DNS lookup.
6 - Manpage tweaks, also move from section 1 to section 8.
7 - Track and show how long ago a host was last seen.
8 Suggested by: Prof A Olowofoyeku (The African Chief)
9 - Show pcap_stats (like number of packets dropped) in the web
10 interface and also upon exit.
12 v3.0.711 (August 2008)
13 - Split --debug into --verbose and --no-daemon
14 - Include launchd config and instructions for running darkstat
15 on Mac OS X. Contributed by Damien Clauzel.
16 - Implement PPPoE decoding on ethernet iface. (--pppoe)
17 - Web: Add automatic reload button. Thanks Dennis!
18 - Web: Add a graph legend with min/avg/max.
19 - Web: Remove hashtable stats pages.
23 - Implement limiting of number of ports tracked per host,
24 configurable on the commandline (--ports-max)
25 - Optionally don't track high ports (--highest-port)
27 - Fix rare use-after-free resulting from hosts table reduction.
28 - Make hosts limit configurable (--hosts-max)
29 - Option to read from capfile as alternative to live capture
30 (really only useful for development, benchmarking)
31 - Add the sniffed interface name to HTML reports.
36 - Fix silly bug in formatting hex.
37 - Check for pcap.h in include/pcap/ for old RedHat-a-likes.
38 - New commandline parser.
39 - To stay in foreground, pass --debug instead of -d.
40 - We can now reset all statistics at runtime (send SIGUSR1)
41 - Make chroot dir configurable on cmdline (--chroot)
42 - Make privdrop user configurable on cmdline (--user)
43 - Implement daylog (brings back a v2 feature)
44 - Import and export hosts and graphs, this brings back a fairly
45 major v2 feature. Big ups to Ben for doing a lot of the
46 design and implementation of this feature!
47 Note that the v3 database format is, by design, incompatible
49 - Report average KB/s in and out on graphs.
50 Thanks to Damian Lozinski for suggestion and first cut at the
52 - Fix graph rotation when the delay between rotations is big
53 enough to clear an entire graph.
54 - Make ip_proto 8 bits wide, to match the IP header.
55 - Implement pidfile functionality for people who prefer to
56 handle daemons in this manner.
60 - Decode DLT_PPP and DLT_PPP_SERIAL on NetBSD,
61 patch courtesy of Bartosz Kuzma.
62 - Don't use pcap_setnonblock(), with help from Colin Phipps.
63 - Reduce the number of syscalls made.
64 - Answer FAQ about graph axes / labels / scale.
65 - Fix build on OpenBSD (thanks Chris!) and Solaris.
66 - Commandline arg (-n) to disable promiscuous mode when
67 sniffing, thanks to Chris Kuethe for the implementation.
68 - Commandline arg (-r) to disable DNS resolver.
69 - Track and report per-host last seen MAC address.
70 - Move FAQ into manpage.
71 - Implement display of start time and running time.
72 - Web: implement sorting the hosts table by in/out/total.
73 - Web: implement paging through the hosts table.
74 - Web: implement full view of hosts table.
75 - Don't die if the capture interface loses its IP address.
76 - Make daemonize (previously -d) the default, and make -D the
77 argument to suppress it.
78 - Commandline arg (-l) to graph traffic entering/leaving the
79 local network as opposed to just the local IP. v2 had this.
80 - Allow configure-time override of CHROOT_DIR and PRIVDROP_USER.
81 - Web: new color scheme.
85 - Fix build against old libpcap (thanks Claudio)
86 - Fix build on AIX (thanks Andreas)
87 - Fix build warnings on NetBSD (thanks Bartosz)
88 - Deny writes to BPF socket (thanks Can)
89 - Reverse-resolve IPs less aggressively.
90 - Free up the DNS queue as we process it.
91 - Fix dns_reply silliness.
92 - Web: tweak the look of the top bar.
93 - Web: update total packets and bytes as part of graph update.
94 - Decode DLT_LINUX_SLL (ippp0 on Linux),
95 patch courtesy of Ingo Bressler
99 - Fix build on NetBSD.
100 - Fix shutdown on Linux.
101 - Performance improvements.
103 - Work around BPF being immediate on Linux.
104 This improves performance.
105 - Drop privileges when we don't need them. Chroot. Generally
106 be more paranoid. Thanks to Chris Kuethe for patches and
108 - Daemonize. (run in the background)
109 - Graphs: Make the entire bar have the same label (instead of
110 different labels for in/out), add thousands separators for
111 legibility, include the position/index (i.e. day 22)
112 - Instead of reducing the hosts_db based on time, do it based on
114 - Implement somewhat better handling of time moving backwards -
115 we assume that real time is monotonic and just renumber the
116 graph bars. (time is hard)
117 - Greatly improve IPC with the DNS child, make it more efficient
118 and much more robust.
119 - Decode DLT_PPP_ETHER (pppoe0 on OpenBSD), patch courtesy of
124 First public release of darkstat 3. Almost a complete rewrite
125 since v2.6. Architecture much improved, better portability and
126 stability. Approximate feature parity with v2, missing
131 End of the line for darkstat 2