nfdump-1.6.22

• Fix nfreplay v5 time shift bug
• add support for >=, <= comparators. #256. Thanks to piorek94
• Fix yacc/bison warnings. Cleanup unused tokens
• Fix syntax error 'flags AS' as AS is a reserved word. #255
• Add element 139 for ICMP type/code in IPv6. #250
• Fix IPv4/IPv6 statistics representation #252
• Cleanup nip/xip filter syntax. Add filter syntax 'nip in [ ]'. Request #246
• Add nfversion to nfpcapd
• Add collected netflow/sflow version in nfdump record. Request #242
• Fix GuessDir bug - issue #215
• Re-address issue #231 - remove strict rule rfc 7011
• fix coredump of nfcapd - null exporter record.

nfdump-1.6.21

Includes various bug fixes and code clean up:

• Address issue #159. Implement rfc 7011 and include sender UDP port into unique template identification
• Address issue #236 Add token 'dir' equivalent to 'flowdir' in filter syntax
• Add optional print direction ascending or descending to output of statistics -s and oredered printing -O. Request #235
• Fix issue #234
• Fix #230 - Avoid use_syslog name clash on certain OS
• Honor -n flag when printing sorted flow cache
• Fix uninitialized variable printPlain
• Fix bug #223 limit matchig flows -c
• Restore old behaviour unlimiting output flows unless in -s stat
• Fix ft2nfdump nexthop fields
• Fix ft2nfdump extension map size
• internal: put output parameters in a single struct
• Fix GuessDir bug - issue #215
• Compact Changelog
• Fix GuessDir bug - issue #215 in flow exporter

nfdump-1.6.20

Important fix for -N plain number printing. v1.6.19 may disturb many output parses relaying on -N working correctly.
No other changes.

nfdump-1.6.19

nfdump release 1.6.19.
nfdump-1.6.19 is mainly a bug fix release and improves stability. Lot's of historical code cleanup - spring cleaning. Prepare nfdump for version 1.7
For a complete list of changes see the ChangeLog file.

nfdump-1.6.18

nfdump release 1.6.18.
This release mainly Improves stability. It adds nfpcapd to generate nfdump netflow records directly from interfaces/pcaps. The old COMPAT15 mode has been removed. All old 1.5.x files should have been converted so far.
For a complete list of changes see the ChangeLog file.

nfdump-1.6.17

• New bookkeeper hash broke NfSen. Fixed. ported back to release 1.6.17

• Add program exit in nfx.c after panic with correupt data file

• Add missing size check when reading nfdump 1.5.x common record blocks

• Add missing option -M in man page. Issue #103

• Add Fix processing of influx URL in nfprofile

• Add missing json output format in nfdump help text

• Add missing -v option in nfreplay help text

• Add new output format json. Print each record as individual json object

• Add sampling elements ID 302,304,305. put them identical to ID 48,49,50

• Add option to label filter terms. syntax: () %labelname.

• Add %lbl option to print flow label in output

• Add ipfix delta timestamp elements 158/159.

• Add more detailed autogen.sh - softlink bootstrap

• Add x-late src/dst ip aggregation, if compiled with NSEL support

• Add ipfix sampling. Process option template/record with sampling elements 34 and 35

• Update nfdump.1 man page for xsrcport & xdstport aggregations. Request #109

• Update nfdump(1) man page for flowlabels

• Update sflow code to commit 7322984 of https://github.com/sflow/sflowtool

• Merge pull request #51 Influxdb from Luca. Thx for the patch

• Fix bug in sorting when guessing flow direction. Issue #92

• Fix minor bugs

• Fix definition for InfluxDB in configure.ac Issue #98

• Fix IPFIX time stamps - Fix elements #21,#22 offset calculation, but timestamps not yet evaluated. (#160)

• Fix IPFIX add fwd status tag #89 compatible to v9 (1byte)

• Fix IPFIX sampling - sampling algorithm no longer required for tag #34

• Fix IPFIX sampling add tags #305 and #304 - set them identical to #34, #35

• Fix header includes"

• Fix 64bit fts compat issue in fts_compat.c

• Fix potential memory leaks in nfpcapd

• Fix wrong offset calculation if unknown options are found

• Fix updates on existing samplers in v9 only if values change. issue 84

• Cleanup sflow code - uncomment unnecessary code

nfdump-1.6.16

nfdump 1.6.16 released.

• Add support for CISCO IOS 8 bytes timestamps ID 21/22
• Fix issue #72 - multiple stat output
• Change -B behaviour as proposed in issue #59. Should not impact with previous use, but is more flexible
• Add bzip compress switch in usage output of nfpcapd
• Fix compile issues on some platforms
• nfpcapd improvements - still beta software.
• Minor bug fixes

nfdump-1.6.15

nfdump 1.6.15 released.

• Fix Security issue
  http://www.security-assessment.com/files/documents/advisory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabilities.pdf
• Fix obyte, opps and obps output records
• Fix wrong bps type case in cvs output. Fix opbs ipbs typos

nfdump-1.6.14

nfdump 1.6.14 released.

The most important changes:

• Create libnfdump for dynamic linking
• Add -R to ModifyCompression
• Add std sampler ID 4 Bytes and allow random sampler (tag 50)
• Add BZ2 compression along existing LZ0
• Add direct write to flowtools converter ft2nfdump
• Fix CentOS compile issues with flow-tools converter
• Fix FreeBSD,OpenBSD build problems
• Fix timestamp overflow in sflow.c
• Fix IP Fragmentation in sflow collector
• Fix compile errors on other platforms
• Fix zero alignment bug, if only half of an extension is sent
• Fix nfanon time window bug in subsequent files in -R list
• Fix CommonRecordV0Type conversion bug
• Fix nfexport bug, if only one single map exists

nfdump-1.6.13

Initial release for GitHub