AFFLIB

tcpflow 1.0.1 is released!

September 26, 2011

I am happy to announce that tcpflow 1.0.1 is now available. Improvements in tcpflow 1.0.1 over the version widely in use today (version 0.21) include:

• Support for VLANs
• Support for IPv6 (thanks to contributions from Jan Görig).
• Regression testing (note: the IPv6 is currently not regression tested because due to implementation differences of inet_ntop on MacOS and Linux).

The new version is available for download at http://afflib.org/downloads/tcpflow-1.0.1.tar.gz

Background: With the original author’s approval, I have taken over the management of maintenance of the tcpflow open source TCP reconstructor. I brought the software up-to-date with the current release of GNU autotools, applied various patches that were floating around, and added the VLAN support. I am now trying to get the tcpflow in various Linux distributions updated.

Future Direction: I would like to rewrite parts of tcpflow in C++ so that I can take advantage of the STL map class, which is significantly more efficient than the current data structure used by tcpflow to maintain state. I also want to make a linkable tcp flow reconstruction library. I am looking for input from tcpflow users as to 1) whether rewriting in C++ is okay, and 2) what form the library should take.

Once again, you can download the new version from http://afflib.org/downloads/tcpflow-1.0.1.tar.gz

 

Filed under: tcpflow

Tags: release, tcpflow