RCS file: ./RCS/README,v
2005-09-28 16:07:18-05
revision 1.11
updated build instructions for argus.  As of 2.0.6 it's split into two
packages (argus and argus-clients), so we now build in the contrib dir
of argus-clients
================================================================================
RCS file: ./RCS/Cflow.pm,v
2005-09-28 10:58:01-05
revision 1.53
updated POD to mention using binmode to setup the filehandle to use
the ":bytes" PerlIO Layer.  This is necessary to keep UTF-8 support from
screwing up the output if you write $Cflow::raw or $Cflow::reraw.
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2005-09-28 09:49:25-05
revision 1.46
used binmode to setup STDOUT to use the ":bytes" PerlIO Layer if -r or -R
is used.  This is necessary to keep UTF-8 support from screwing up the
output.
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2005-04-19 11:23:19-05
revision 1.45
syntax change only ("||" to "or")
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2005-04-08 11:00:25-05
revision 1.44
added ENCODE_SRC and ENCODE_DST routines so that user can selectively
encode just source or destination addresses
================================================================================
RCS file: ./RCS/Makefile.PL,v
2003-05-10 11:31:21-05
revision 1.11
RedHat Linux likes to put pcap.h in /usr/include/pcap, so add that to the
list of include directories for argus
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-08-28 16:12:09-05
revision 1.52
added KludgeSecs and KludgeMsecs
(I have no recollection of whether or not this is working... I'm checking
it in Sep 28, 2005)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2002-01-31 00:08:06-06
revision 1.43
used `defined' to test some protocol-specific fields when using the
"long" format, to prevent "Use of uninitialized value" errors
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-31 00:06:30-06
revision 1.24
initialize $tcp_flags to zero when processing argus ICMP flows
(for flowdumper, now that it considers warnings to be fatal)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-30 23:43:14-06
revision 1.23
Be sure that NetFlow v5 fields are initialized even if the flow source
was flow-tools or argus, which don't always have those fields.
This is necessary now that flowdumper reports warnings in the perl
expressions supplied as arguments, and treats them as fatal.
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-30 19:07:19-06
revision 1.51
fixed a problem with the FETCH method in package Cflow::SymbolicICMPTypeCode
that caused it to produce errors when processing ICMP flows now that
warnings are treated as fatal (with the "-e" expression)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2002-01-30 19:06:36-06
revision 1.42
fixed some typos in examples in the POD that caused them not to work
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2002-01-30 18:25:00-06
revision 1.41
treated warnings as fatal if the occur because of the "-I" or "-E"
expressions.
(this makes it much easier to detect typos since the will often now
produce the message "Use of uninitialized value")
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2002-01-30 18:14:16-06
revision 1.40
treated warnings as fatal if the occur because of the "-e expression"
(this makes it much easier to detect typos since the will often now
produce the message "Use of uninitialized value")
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-30 18:11:58-06
revision 1.50
fixed a typo that was causing the URGent TCP flag not to be shown in
the $symbolic_tcp_flags due to the use of an uninitialized value
================================================================================
RCS file: ./RCS/warning,v
2002-01-30 17:22:37-06
revision 1.1	locked by: dplonka;
Initial revision
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-15 10:01:13-06
revision 1.49
added "ARGUS NOTES" section
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-14 11:17:30-06
revision 1.22
updated includes

added copyright info
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-11 21:58:40-06
revision 1.48
upped Revision number in prep for release
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-11 21:57:17-06
revision 1.21
ifdef ARGUS, include <sys/socket.h> and <net/if.h>.  This got things
to go with perl 5.004_04 under Solaris 2.6.  (I suspect that newer
perls include those already which is why I didn't notice it with perl
version 5.6.1 under Linux.)
================================================================================
RCS file: ./RCS/README,v
2002-01-11 16:48:51-06
revision 1.10
updated for argus
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-11 16:34:44-06
revision 1.47
updated date and argus info
================================================================================
RCS file: ./RCS/Makefile.PL,v
2002-01-11 16:23:26-06
revision 1.10
changed tests for argus and flow-tools so that flow-tools will be
looked for, if argus is not found
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-11 16:22:41-06
revision 1.20
converted argus ether-byte counts into NetFlow-like IP-byte counts
(ifdef ARGUS)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-11 16:12:58-06
revision 1.19
added initialization of ArgusProgramName so that it will be reported with
any argus error messages

conditioned out the argus initialization that should have been ifdef ARGUS
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-11 15:40:14-06
revision 1.18
added milliseconds and duration stuff ifdef ARGUS
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-11 14:44:43-06
revision 1.17
worked on the Argus code a bit more.  This revision works pretty well.
================================================================================
RCS file: ./RCS/Cflow.xs,v
2002-01-10 19:54:45-06
revision 1.16
added support for argus-2
(not everything is working yet though)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2002-01-10 19:54:45-06
revision 1.46
added support for argus-2
(not everything is working yet though)
================================================================================
RCS file: ./RCS/Makefile.PL,v
2002-01-10 19:54:45-06
revision 1.9
added support for argus-2
(not everything is working yet though)
================================================================================
RCS file: ./RCS/README,v
2001-11-14 12:47:18-06
revision 1.9
updated flow-tools URL and some other stuff
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-11-14 12:47:00-06
revision 1.45
updated flow-tools URL
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-11-14 12:38:58-06
revision 1.39
fixed a POD typo
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-11-14 12:15:54-06
revision 1.44
forced increment of Revision number
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-11-14 12:14:54-06
revision 1.38
used File::Basename to fix a bug in the previous revisions which caused
"-o" to fail if the input file was not in the current directory

added some usage info and POD
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-11-14 08:11:03-06
revision 1.43
added "-o output_file" option so that the output file name can be a function
of the input file name (and therefore there can be multiple seperate output
files, one for each input file.  e.g. "flowdumper -s -o /tmp/%s.txt *.cflow")
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-11-14 08:11:03-06
revision 1.37
added "-o output_file" option so that the output file name can be a function
of the input file name (and therefore there can be multiple seperate output
files, one for each input file.  e.g. "flowdumper -s -o /tmp/%s.txt *.cflow")
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-11-14 07:43:51-06
revision 1.36
used Net::ParseRouteTable rather than ParseBGPDump so that we can parse
the output of JunOS "show route protocol bgp terse", which Michael added
to Net::ParseRouteTable
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-11-14 07:43:10-06
revision 1.42
updated some POD
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-07-22 14:35:14-05
revision 1.35
fixed the printing of pkts and bytes as unsigned values.
Previously they would sometimes show negative values unless you used "-s".
Thanks to Mark Fullmer <maf@eng.oar.net> for this bug report.
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-07-22 14:26:02-05
revision 1.34
modified ASPathRef::FETCH return value to produce an ARRAYREF
(Jun 23)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-06-23 11:51:29-05
revision 1.33
added the "-B" option to load a file containing Cisco "show ip bgp" output.
This then allows the user to refer to the following variables to examine
the AS path:
   $dst_as_path_arrayref, $dst_origin_as, and $dst_peer_as
   $src_as_path_arrayref, $src_origin_as, and $src_peer_as
This option requires ParseBGPDump and Net::Patricia to be loadable at
run-time.
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-06-23 11:49:14-05
revision 1.41
in Cflow::InetNtoA, added a level of indirection when blessing the object
so that I can make other classes that are based on references to the Cflow
address flow variables (like $Cflow::srcaddr, $Cflow::dstaddr, etc.)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-06-15 14:07:09-05
revision 1.40
forced check-in to up the revision number
(a changes was made to "Cflow.xs")
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-06-15 14:05:47-05
revision 1.15
fixed a malformed comment in the previous revision that caused Cflow-1.039
not to build
================================================================================
RCS file: ./RCS/README,v
2001-06-15 04:14:56-05
revision 1.8
attempted to clarify flow-tools build instructions
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-06-11 11:18:55-05
revision 1.39
reformatted some POD
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-06-11 11:18:09-05
revision 1.32
corrected usage and POD re: "-r" and "-R" options
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-06-11 10:47:31-05
revision 1.31
added the "-p" option to encode the IP addresses according to mappings
defined in the specified file

added the "-R" option to facillitate the writing of raw flow files after
they are encoded (by using the "-p" option or some other method)

added some POD
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-06-11 10:44:50-05
revision 1.38
added $Cflow::reraw which is like $Cflow::raw except that it is repacked
when referenced therefore it enables the user to modify the flow variables
beforehand

added some POD to the BUGS section
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-06-11 09:00:08-05
revision 1.14
fixed a bug that, ifdef OSU, that caused undefined behavior with regard
to whether or not the values of $src_as, $dst_as, $src_mask, $dst_mask,
$engine_type, and $engine_id where properly set when reading flow-tools
flow files for NetFlow versions 5, 6, and 7
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-06-11 08:56:31-05
revision 1.37
fixed an innocuous typo
================================================================================
RCS file: ./RCS/Makefile.PL,v
2001-05-18 17:55:37-05
revision 1.8
when linking for OSU flow-tools, specify "-lft" before "-lz"
as suggested by John Roman <jrr@wustl.edu>
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-05-18 08:27:32-05
revision 1.30
fixed some POD typos
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-05-14 22:14:13-05
revision 1.13
fixed a bug introduce with the flow-tools changes that was causing
flowdumper to report 'open "-": No such file or directory' when
doing something like 'flow-cat oeb3.flows | flowdumper'.
Reported by Mark Fullmer <maf@eng.oar.net>
================================================================================
RCS file: ./RCS/README,v
2001-05-14 21:47:01-05
revision 1.7
updated for support of NetFlow versions 1, 6, and 7 with flow-tools
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-05-14 21:46:28-05
revision 1.36
updated POD for support of NetFlow versions 1, 6, and 7 with flow-tools
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-05-14 21:45:44-05
revision 1.12
added support for NetFlow versions 1, 6, and 7 when using flow-tools
================================================================================
RCS file: ./RCS/README,v
2001-05-10 16:29:23-05
revision 1.6
updated for OSU flow-tools and lfapd
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-05-10 16:29:08-05
revision 1.35
updated the URL for lfapd
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-05-10 16:11:18-05
revision 1.29
allowed "-r" even if "-e" is not specified since this is theoretically
now useful to convert raw flow files from OSU flow-tools format to
cflowd format

rearranged the examples in order of increasing complexity

added some complicated examples which use Net::Patricia
================================================================================
RCS file: ./RCS/Makefile.PL,v
2001-05-10 16:09:00-05
revision 1.7
In the find_flow_tools subroutine: took out all the goofy stuff which
looks for the OSU flow-tools source directory and just hard-wired it
to check in "../..".  (This means that this package should be placed
in the "perl" sub-directory of the flow-tools distribution for it to
enable flow-tools compatibility.)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-05-10 16:07:40-05
revision 1.11
added support for $Cflow::raw when processing OSU flow-tools files
(Currently this can only be used to convert from flow-tools to cflowd
raw flow file format.)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-05-10 16:07:10-05
revision 1.34
added "SEE ALSO" to POD
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-05-10 15:04:58-05
revision 1.10
handled times with milliseconds with OSU flow-tools

fixed a bug which was causing ICMP flows to be mishandled with flow-tools

Introduced the duration flow variables

(May  3)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-05-10 11:52:16-05
revision 1.33
updated POD
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-05-10 11:52:16-05
revision 1.28
updated POD
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-05-10 11:14:30-05
revision 1.32
updated POD for flow-tools
================================================================================
RCS file: ./RCS/Makefile.PL,v
2001-04-27 13:42:56-05
revision 1.6
various goofiness added to attempt to discover where OSU flow-tools
is built or installed (so that we can build against it)

(Mar 23)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-04-27 13:41:30-05
revision 1.9
defined OSU in Makefile.PL

ifdef OSU, included "config.h" and worked around macro collisions with perl

(Mar 23)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-03-23 14:37:08-06
revision 1.8
added support for OSU flow-tools
(This revision pretty much works...  some things are missing such as
$Cflow::raw, $Cflow::nexthop, some of the start/stop times, etc.)
================================================================================
RCS file: ./RCS/Makefile.PL,v
2001-03-23 14:37:08-06
revision 1.5
added support for OSU flow-tools
(This revision pretty much works...  some things are missing such as
$Cflow::raw, $Cflow::nexthop, some of the start/stop times, etc.)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-03-23 14:35:34-06
revision 1.31
upped the revision number
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-02-21 12:12:03-06
revision 1.30
moved stuff that was used for verification of entry mask to "Cflow.xs"
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-21 12:11:29-06
revision 1.7
added verification of entry mask
================================================================================
RCS file: ./RCS/cflow5.h,v
2001-02-21 12:07:29-06
revision 1.2
fixed mask bit specifications
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-02-21 11:04:33-06
revision 1.29
updated copyright date

added more POD
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-21 11:01:08-06
revision 1.6
improved the argument checking to find()

included <arpa/inet.h> rather than <netinet/in.h> for ntohl, ntohs
since it seems to be portable between Linux and Solaris (at least)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-17 18:11:26-06
revision 1.5
fixed a big problem with the previous revisions which were causing the
process size to grow incredibly large because temporaries weren't being
freed until after all flows in all files were processed.  In practive
this made flowdumper all but unusuable if you specified many file names
as the arguments because it would grow to 100s of megabytes and die wit
"out of memory"
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-17 18:10:21-06
revision 1.4
Feb 16
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-14 12:39:30-06
revision 1.3
fixed a bug in the previous revision... I wasn't allowing the filename
to be "-" to mean standard input
================================================================================
RCS file: ./RCS/test.pl,v
2001-02-14 07:55:54-06
revision 1.2
added a test, pretty much just for my own personal use
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-14 07:52:07-06
revision 1.2
used POSIX PATH_MAX
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-02-14 01:13:23-06
revision 1.27
updated the copyright date and upped the required Cflow version
================================================================================
RCS file: ./RCS/cflow5.h,v
2001-02-14 01:13:04-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/MANIFEST,v
2001-02-14 01:12:50-06
revision 1.4
added the XS and header files
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-02-14 01:11:45-06
revision 1.28
replaced the find sub with an XSUB

(This also fixed a bug where the $engine_type and $engine_id where always
zero because of a typo in the previous revisions.)
================================================================================
RCS file: ./RCS/Cflow.xs,v
2001-02-14 01:11:18-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-02-14 00:27:51-06
revision 1.26
added an example of how to use flowdumper to get the head of a file
(Feb  8)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2001-02-08 12:24:20-06
revision 1.25
prototyped various functions hoping it might speed things up
(Aug 10)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-02-08 11:22:18-06
revision 1.27
initialized $total and $count because Cflow.pm would cause perl to report
the warning "Use of uninitialized value in addition (+)" if the user's
"wanted" function never returned non-zero.
This was reported by "Brett L. Hawn" <brett.hawn@rcn.com>
================================================================================
RCS file: ./RCS/Cflow.pm,v
2001-02-08 11:17:57-06
revision 1.26
stopped using inet_ntoa since a direct unpack was found to be faster
(I may have copied this method from Socket.pm - I don't recall.)
(Aug 27)
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-31 07:48:32-05
revision 1.25
upped the revision number for release after modification to flowdumper
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-31 07:47:27-05
revision 1.24
fixed a typo in an example (regarding shifting a value over by the number
of bits in the $mask)

removed the VERSION POD section - it doesn't make sense in a script
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-30 17:37:12-05
revision 1.23
fixed some comments and added POD in preparation for release
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-30 17:30:11-05
revision 1.24
changed some comments in prep for release
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-29 23:32:54-05
revision 1.22
imported tcpflags, icmptypes, and icmpcodes which were introduced in
Cflow-1.023
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-29 23:31:56-05
revision 1.23
added $ICMPType and $ICMPCode flow variables to make it more convenient
to test these

added symbolic tcpflags, icmptypes, and icmpcodes variables, also as
a convenience when testing $tcpflags, $ICMPType, and $ICMPCode
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-29 22:26:13-05
revision 1.21
added "-r" option to produce a raw flow file as output
(Primarily the intention of this option is to select flows to be redirected
into a file, or perhaps piped into another command for processing of raw
flows.  It would be ideal to use for preserving a subset of the flows from
a raw flow file into another file.)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-29 22:13:46-05
revision 1.20
added "-I" and "-E" options to define an initial and ending expression
to be evaluated, in addtion to that specified with "-e".  This allows
one to use this script for more complicated tasks which require
initialization before the flows are processed and results to be printed
afterwards.
================================================================================
RCS file: ./RCS/README,v
2000-07-17 15:26:22-05
revision 1.5
updated the URL for cflowd
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-17 09:02:37-05
revision 1.22
reformatted POD a bit so that it will won't wrap on an 80-column screen
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-17 08:59:47-05
revision 1.21
added pod to document the $TCPFlags and $ICMPTypeCode variables introduced
in an earlier revision
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-17 08:38:27-05
revision 1.20
got rid of some unnecessary white-space in $TCPFlags
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-07-14 15:39:32-05
revision 1.19
changed "-s" output a bit (got rid of extra whitespace)

used new $ICMPTypeCode and $TCPFlags variables introduced in Cflow-1.019

added "-S" option for use with scripts or whatever that break due to the
introduction of the new $ICMPTypeCode and $TCPFlags info in the short
output format
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-07-14 15:30:32-05
revision 1.19
added symbolic $TCPFlags and ICMPTypeCode to interpret $tcp_flags and
$dstport for TCP and ICMP, respectively
================================================================================
RCS file: ./RCS/MANIFEST,v
2000-03-16 17:25:20-06
revision 1.3
added "Changes" file
================================================================================
RCS file: ./RCS/flowdumper.PL,v
2000-03-16 17:12:56-06
revision 1.18
be sure we have Cflow 1.018 to avoid the bug with 1.017 which caused
the time not to be printed when invoking this script with "-s"
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-03-16 17:09:23-06
revision 1.18
fixed a long time bug that was causing $engine_type, $engine_id, $localtime,
$raw, $Bps, and $pps to not be exported when the user said they wanted
to import 'flowvars'

This was causing "flowdumper -s" to not print the time when used with the
previous revision of this module.
================================================================================
RCS file: ./RCS/Cflow.pm,v
2000-03-10 17:07:18-06
revision 1.17
added Bps (Bytes-per-second) and pps (packets-per-second) flow variables

fixed return value from find() so that it contains a proper "hit ratio"

updated POD regarding "hit ratio" return value from find()
================================================================================
RCS file: ./RCS/Cflow.pm,v
1999-10-28 14:57:48-05
revision 1.16
fixed some typos in error messages

added $Cflow::raw variable which contains the "raw" flow as read from
the input file

fixed up return value from "wanted" so that it would have the proper
syntax even when $count or $total are zero

(Sep 21)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1999-03-21 17:26:14-06
revision 1.17
bug fix - previously the flow would be printed when "-n" was used without
"-e"
================================================================================
RCS file: ./RCS/MANIFEST,v
1999-03-21 17:25:48-06
revision 1.2
removed "flowpdu.ph" from distribution
================================================================================
RCS file: ./RCS/Makefile.PL,v
1999-03-21 17:25:24-06
revision 1.4
removed "flowpdu.ph" from distribution
================================================================================
RCS file: ./RCS/MANIFEST,v
1999-03-21 17:16:02-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1999-03-21 16:54:38-06
revision 1.16
added "-s" and "-c" options to print flows in short format and to print
a count of # of flows "wanted" and processed, respectively.  (The "-c"
option requires Cflow 1.015.)

Changed the default format to that of CAIDA's flowdump(1) that is
distributed with cflowd.
================================================================================
RCS file: ./RCS/Cflow.pm,v
1999-03-21 16:50:25-06
revision 1.15
added Cflow::InetNtoA and Cflow::LocalTime packages so that I could tie
various flow variables.  This dramatically improves the performance of
this package by deferring the calls any calls to strftime(3) and
inet_ntoa(3) until the user refers to the resulting values.  In my
tests, this caused Cflow::find to execute in about 1/6 the time that
it took before.

had Cflow::find return a string containing a ratio of (# of wanted flows)/
(# of processed flows).  (This depends on the wanted function returning
a useful value indicating whether or not the given flow was "wanted" or
not.)
================================================================================
RCS file: ./RCS/Cflow.pm,v
1999-03-20 09:51:07-06
revision 1.14
added index and exporter to flowvars
(Mar 17)
================================================================================
RCS file: ./RCS/Cflow.pm,v
1999-03-17 15:13:07-06
revision 1.13
added $Cflow::exporter and $Cflow::exporterip variables
================================================================================
RCS file: ./RCS/README,v
1999-03-17 09:57:27-06
revision 1.4
updated URL and cflowd references
================================================================================
RCS file: ./RCS/Cflow.pm,v
1999-03-17 09:55:18-06
revision 1.12
lots of changes to understand the raw flow files produced by cflowd 2.0
rather than cflowd 1.3b2 which was what we handled previously.
(In this revision, the older flow file format is no longer handled.)
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1999-03-16 09:49:07-06
revision 1.15
added "\" where appropriate
(previously) some of the info in the usage didn't display correctly.)
================================================================================
RCS file: ./RCS/Makefile.PL,v
1998-11-23 14:26:01-06
revision 1.3
added PM so that "flowpdu.ph" will be installed
================================================================================
RCS file: ./RCS/test.pl,v
1998-11-23 14:24:22-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-11-23 14:13:49-06
revision 1.14
fixed up the usage info (some things needed to be "escaped")
================================================================================
RCS file: ./RCS/README,v
1998-11-23 13:59:24-06
revision 1.3
removed some old stuff
================================================================================
RCS file: ./RCS/Makefile.PL,v
1998-11-23 13:58:45-06
revision 1.2
added stuff to handle "flowdumper" script
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-11-23 13:57:43-06
revision 1.13
simplified the code since we don't need to substitute and Config values
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-11-23 13:54:29-06
revision 1.12
added code to produce script as output
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-11-23 10:59:22-06
revision 1.11
renamed to have ".in" extension
(the Makefile.PL script, like config.sub, will do substitutions)

specified the path to perl using $Config{perlpath}
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-11-23 10:41:48-06
revision 1.11
fixed VERSION to work with MakeMaker's VERSION_FROM feature
added POD
================================================================================
RCS file: ./RCS/flowpdu.ph,v
1998-11-23 10:40:58-06
revision 1.2
added comment about how this file was created
================================================================================
RCS file: ./RCS/flowpdu.ph,v
1998-11-23 10:39:51-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/Makefile.PL,v
1998-11-23 10:27:53-06
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-11-23 10:21:54-06
revision 1.10
added "-e" and "-n" options to allow query to be specified on the
command line (similarly to what can be done with flowdump)
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-11-20 15:43:00-06
revision 1.10
added the handling of an optional "per-file" code ref being passed
to "find" after the "wanted" argument
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-11-17 09:42:03-06
revision 1.9
added srcip, dstip, and nexthopip as a convenience so that the caller
does not have to convert the network ordered long themselves (with
inet_ntoa)
================================================================================
RCS file: ./RCS/README,v
1998-10-09 11:01:55-05
revision 1.2
fixed a typo
================================================================================
RCS file: ./RCS/README,v
1998-10-09 11:01:22-05
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-10-08 15:39:40-05
revision 1.9
fixed up usage info and comments a bit

added RCS Id keyword
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-10-08 15:22:07-05
revision 1.8
imported :flowvars and used $FindBin::Script to clean things up a bit
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-10-08 15:21:29-05
revision 1.8
changed the example in the POD a bit
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-10-08 14:59:47-05
revision 1.7
added Exporter stuff so that user can request that :flowvars be
exported to their namespace (for convenience)

added more POD
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-10-01 13:19:06-05
revision 1.7
used FindBin rather than $ENV{'CFLOWDPERLDIR'} to find modules/headers
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-10-01 13:14:17-05
revision 1.6
added "-v" (verbose) option
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-09-30 15:59:18-05
revision 1.5
used Cflow 1.006 which has the $Cflow::localtime variable containing
the formatted date/time

added Getopts stuff and "-a" option to print all flows.
(The printing of the flow was split out into a separate sub-routine.)
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-30 15:57:39-05
revision 1.6
fixed a misnamed reference (left over from a cut-and-paste)
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-30 15:55:33-05
revision 1.5
added $Cflow::localtime as a convenience so that the caller doesn't
have to convert from a time_t ($Cflow::unix_secs) themselves.
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-09-30 09:08:39-05
revision 1.4
pulled a bunch of code from here and organized it into "Cflow.pm".
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-30 09:06:00-05
revision 1.4
fixed a problem with the previous revisions which caused it to give up
on the rest of the flow files as soon as it warned "Invalid flow data file."
Now it will just move on to the next flow file.

reformatted some if-elsif blocks to a more switch-like structure after
reading the "perlsyn" man page.
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-30 08:29:35-05
revision 1.3
added verbose subroutine and only issued warnings if verbose is non-zero
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-28 14:23:15-05
revision 1.2
added pod

changed text of some warnings
================================================================================
RCS file: ./RCS/Cflow.pm,v
1998-09-24 15:52:25-05
revision 1.1
Initial revision
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-09-22 12:13:21-05
revision 1.3
used "flowpdu.ph" rather than pasting the perl version of the macros
defined there-in right in this file

checked that $index in the flow header had the right magic number.
Previously I didn't perform this test because cflowd erroneously always
puts 0xff in $index (even though as of this writing the correct value
would be 31.)  This validation is to be sure that someone isn't trying
to run this util on some flow file format that it doesn't understand.

added various comments, such as those describing which portions of the
cflowd sources where use to determine the formats used here.
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-09-18 15:41:03-05
revision 1.2
made some changes in an attempt to speed things up

changed the validation code a bit to skip flows involving reserved ports
and to cache TCP flows on ports 12345 and 12346
================================================================================
RCS file: ./RCS/flowdumper.PL,v
1998-09-17 16:57:42-05
revision 1.1
Initial revision
================================================================================