ngrep

This release fixes an under-sized snaplen bug resulting in garbage input to the pattern matcher, a bug in the IPv6/TCP packet length calculation, and a double-free race condition during ngrep termination. It reworks packet length calculation in the main processing loop (yielding a performance improvement), simplifies the build system logic, and changed "-s 0'' to match tcpdump behaviour. It adds support for IEEE802_11_RADIO (radiotap).

This release has IPv6 support, improved support for parsing raw protocols, a new mechanism for single-line output, code reorganization to support more protocols, and updated configure to be more informative.

ngrep now builds from the same source tree for all
platforms, including Win32. New drop_privs logic
was introduced after problems were reported with
the SPC version. An off-by-one bug which caused
ngrep to exit one packet early with "-A" was
fixed. A problematic cfgtest for an old
broken-redhat-glibc UDP header was fixed. ngrep
now sets a pcap filter "ip" by default if one is
not specified. A header offset fix was made for
802.11 processing. Support for IGMP and Raw type
packets was added. Support for the latest versions
of libpcap, winpcap, and PCRE was added. autoconf
was updated to 2.59, and config.guess and
config.sub were updated to the latest versions.

Autoconf and the privilege revocation logic were entirely rewritten. Two new output modes were added, regex matches are now conducted in multi-line mode by default, and the abilities to specify the non-printable character, read the BPF filter logic from a file, and force the column width were also added. Program output under quiet mode was improved, and the documentation has been updated.

This release adds LOOP and SLL configure tests, 802.11 support,
setuid()/setgid() privilege revocation after startup, TCP ECN support,
improved OS support, and relaxed LICENSE restrictions.