2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	Version 0.2.0
	
	* configure.ac: Removed commented-out CPPFLAGS.

	* Makefile.in (install): Do not use -D option (does not work on
	BSD).  Create directories separately.  Install data using the
	INSTALL_DATA program.  Do not run tests.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: main.cc, packet.cc, packet.hh
	(packet_field_type::packet_field_type): Changed message of
	invalid_argument exception to the invalid field name.
	(main): Print error message when an invalid field name is
	specified.

	* man/dns-analyzer.1 (BUGS): Removed abort on invalid field name
	bug.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: Check for a header without specifying any includes
	so the ac_includes_default variable is properly defined.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.hh, analyzer.hh, fast_map.hh, packet-dns.hh,
	packet.hh, pcap.hh, performance.hh, pointers.hh, r-project.hh,
	timer.hh, util.hh, value.hh, variable.hh: Do not include config.h.
	This is be done by the .cc files instead, before including any other
	.hh files.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: Grammar changes.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* makedist.sh (replace_version): added replacement information
	message.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: Initial description added.  Example of using
	the -T option added.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: stricter checking for presence of required header
	files.  Stop checking for gettimeofday and getrusage as these
	checks do not work with C++ on Solaris.

2003-03-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: updated version number.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: fixed typo.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	Version 0.1

	* src/main.cc: Include package version and bug report e-mail
	address in usage information.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: Updated BUGS section.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/packet.cc: use size_t to iterate over IPv6 address instead
	of int.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile.in: install dns-analyzer.1 manual page.  Added
	distclean target.  Realclean cleans more.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* makedist.sh: Do not include doc directory.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: Changed version to 0.1.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* makedist.sh, man/dns-analyzer.1: update the version number in
	both the README and the manual page.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: use @version@ (replaced by makedist.sh).

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* README: added installation instructions.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: Do not define _POSIX_C_SOURCE and _BSD_SOURCE
	because it makes some types disappear on FreeBSD 5.0-CURRENT.
	Instead, simply assume the compiler does the right thing.  Check
	for the u_short type.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* man/dns-analyzer.1: Initial man page.  Description still to be
	done.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: remove unnecessary type checks.  Use new style
	type checks.  Added comment on gettimeofday and Solaris.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac, src/packet.cc: Solaris port.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* makedist.sh: Remove .cvsignore files before building
	distribution.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac, src/aggregation.cc, src/analyzer.cc, src/main.cc,
	src/packet.cc, src/packet-dns.cc, src/packet.hh, src/pcap.cc,
	src/performance.cc, src/r-project.cc, src/timer.cc, src/util.cc,
	src/util.hh, src/value.cc, src/variable.cc, src/tests/main.cc,
	src/tests/packet.cc, src/tests/packet-dns.cc, src/tests/pcap.cc,
	src/tests/value.cc, src/tests/variable.cc, src/tools/packet2c.cc:
	define source type using the CPPFLAGS variable instead of in the
	.cc files.  Fixed compile errors with the Intel C++ compiler 7.0.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* R/dns.R, src/r-project.cc: Renamed dns.name to dns.domain for
	consistency.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/main.cc: Removing debugging print statements.  Add the -h
	option for usage information.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile.in: Renamed 'main' target to 'dns-analyzer'.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* COPYRIGHT, Doxyfile, GPL, Makefile.in, configure.ac, makedist.sh,
	R/dns.R, src/Makefile, src/aggregation.cc, src/aggregation.hh,
	src/analyzer.cc, src/analyzer.hh, src/fast_map.hh, src/main.cc,
	src/packet-dns.cc, src/packet-dns.hh, src/packet.cc, src/packet.hh,
	src/pcap.cc, src/pcap.hh, src/performance.cc, src/performance.hh,
	src/pointers.hh, src/r-project.cc, src/r-project.hh, src/timer.cc,
	src/timer.hh, src/util.cc, src/util.hh, src/value.cc, src/value.hh,
	src/variable.cc, src/variable.hh, src/tests/Makefile,
	src/tests/main.cc, src/tests/packet-dns.cc, src/tests/packet.cc,
	src/tests/packet.hh, src/tests/pcap.cc, src/tests/value.cc,
	src/tests/variable.cc, src/tools/Makefile, src/tools/packet2c.cc:
	Added copyright notice.

2003-03-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: Require libpcap.  Check for gettimeofday,
	getrusage, and sqrt.

	* src/timer.cc: Minor style fix.

2003-02-28  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac, src/packet.hh: Improved checking for FreeBSD.

2003-02-28  Erik Rozendaal  <erik@nlnetlabs.nl>

	* makedist.sh: Fixed removal of autoconf cache directory.

2003-02-28  Erik Rozendaal  <erik@nlnetlabs.nl>

	* .cvsignore, makedist.sh, src/.cvsignore: Implemented script to
	build a distribution tar file.

2003-02-28  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac: Program name should be one word for makedist.sh
	script.

2003-02-28  Erik Rozendaal  <erik@nlnetlabs.nl>

	* configure.ac, install-sh, Makefile, Makefile.in,
	src/aggregation.hh, src/analyzer.hh, src/fast_map.hh,
	src/packet-dns.cc, src/packet-dns.hh, src/packet.cc, src/packet.hh,
	src/pcap.hh, src/performance.hh, src/pointers.hh, src/r-project.hh,
	src/timer.hh, src/util.hh, src/value.hh, src/variable.hh:
	Implemented autoconf based configuration script.

2003-02-07  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, analyzer.cc, analyzer.hh,
	main.cc, packet-dns.cc, packet-dns.hh, packet.cc, packet.hh,
	performance.cc, r-project.cc, util.cc, util.hh, value.hh,
	variable.cc, variable.hh, tests/packet-dns.cc, tests/packet.cc,
	tests/packet.hh, tests/variable.cc: Code cleanups and documentation
	added.

2002-12-30  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: variable.cc, variable.hh: Also remove stats from the
	updated set when pruning to avoid crashes.

2002-12-30  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: value.cc, value.hh, tests/value.cc, tests/variable.cc:
	Removed unused false/true value and lt, eq, and gt values.

2002-12-19  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, main.cc, performance.cc,
	value.hh, variable.cc, variable.hh, tests/variable.cc: Optimized
	measuring time based intervals.

2002-12-19  Erik Rozendaal  <erik@nlnetlabs.nl>

	* doc/AnalyzerActions.txt: Added descriptions for options 3 and 4.

2002-12-11  Erik Rozendaal  <erik@nlnetlabs.nl>

	* doc/AnalyzerActions.txt: Started.

2002-12-10  Erik Rozendaal  <erik@nlnetlabs.nl>

	* doc/AnalyzerActions.txt: Document possible actions to be taken
	against misbehaving clients.

2002-12-10  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, analyzer.cc, analyzer.hh,
	main.cc, packet.cc, packet.hh, performance.hh, variable.cc,
	variable.hh, tests/variable.cc: Implemented measuring based on time
	intervals to detect high-load clients.

2002-12-02  Erik Rozendaal  <erik@nlnetlabs.nl>

	* R/.cvsignore: Ignore .Rhistory file.

2002-11-13  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, analyzer.cc, analyzer.hh,
	main.cc, packet.cc, packet-dns.cc, packet-dns.hh, packet.hh,
	r-project.cc, util.cc, util.hh, value.hh, variable.cc, variable.hh,
	tests/variable.cc: Reduced compile dependencies.  Improved output
	formatting.

2002-11-11  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, main.cc, packet-dns.cc,
	value.cc, value.hh, variable.cc: Use reference counting for
	value_ref.  Use getopt to parse options.

2002-11-07  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/aggregation.cc, src/aggregation.hh,
	src/analyzer.cc, src/analyzer.hh, src/main.cc, src/packet-dns.cc,
	src/packet-dns.hh, src/performance.cc, src/performance.hh,
	src/r-project.cc, src/timer.cc, src/util.cc, src/util.hh,
	src/value.cc, src/value.hh, src/variable.cc, src/variable.hh:
	Support printing all aggregated information.  Performance
	enhancements.

2002-11-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/analyzer.cc, src/analyzer.hh, src/main.cc,
	src/packet.cc, src/packet-dns.cc, src/packet.hh, src/pcap.cc,
	src/pcap.hh, src/pointers.hh, src/timer.cc, src/timer.hh: Support
	dumping interesting and exception packets into a tcpdump file for
	analyzing with other tools.

2002-11-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/aggregation.cc: Changed exception and exception message.
	Changed way timestamp is stored in aggregation map.

2002-11-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/variable.cc: Avoid copying entries in the variable
	aggregation map.

2002-11-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/value.hh: Changed hashing function for doubles and vectors.

2002-11-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/r-project.cc: Removed old commented out debugging code.
	Changed exception message.

2002-11-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, packet.cc, packet.hh,
	variable.cc, variable.hh: Increased efficiency of pruning
	aggregation sets.  Aggregation based on packet timestamp is now
	supported.

2002-11-04  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: value.cc, value.hh, tests/value.cc: Null-value can have
	multiple instances.  Adjusted comparison operators to deal with
	this.

2002-10-31  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/aggregation.cc, src/aggregation.hh,
	src/analyzer.cc, src/analyzer.hh, src/main.cc, src/packet.cc,
	src/packet-dns.cc, src/packet-dns.hh, src/packet.hh,
	src/r-project.cc, src/r-project.hh, src/value.hh, src/variable.hh:
	Aggregation columns can now be specified on the command line.  Use
	hash table instead of tree to gather aggregation information.

2002-10-31  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/pointers.hh: Initial version.

2002-10-31  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: aggregation.cc, aggregation.hh, main.cc, variable.cc,
	variable.hh: Implemented pruning of "uninteresting" combinations.
	Implemented printing the top N combinations instead of combinations
	that are outside of the 95% percentile.

2002-10-24  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/aggregation.cc, src/aggregation.hh,
	src/analyzer.cc, src/analyzer.hh, src/main.cc, src/r-project.cc,
	src/r-project.hh, src/variable.cc, src/variable.hh: Refactored
	analyzer to separate different analysis into different classes.
	These classes are registered as "listeners" to the main analyzer
	class.

2002-10-23  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile: Use cppunit-config to determine CppUnit compiler flags.

2002-10-23  Erik Rozendaal  <erik@nlnetlabs.nl>

	* R/.cvsignore: Ignore data files.

2002-10-23  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, R/dns.R, src/main.cc, src/packet-dns.cc,
	src/packet-dns.hh, src/packet.cc, src/packet.hh, src/pcap.hh,
	src/value.hh: Added flags for enabling statistics, gathering of
	interesting packets, and splitting the output file by number of
	packets written.

2002-09-12  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/main.cc: Print packets with ns_type > ns_t_any.

2002-09-12  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/packet-dns.cc: Removed trailing whitespace.

2002-09-11  Erik Rozendaal  <erik@nlnetlabs.nl>

	* R/dns.R, src/main.cc, src/packet-dns.cc, src/packet.cc,
	src/packet.hh, src/tests/packet-dns.cc, src/tests/packet.hh:
	Support exporting data to R.  Some utility functions for R to
	analyze the data.

2002-09-03  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: main.cc, packet-dns.cc, packet-dns.hh, packet.cc,
	packet.hh, variable.cc, variable.hh, tests/packet-dns.cc: Parse
	resource records correctly.  Print packets in human readable form.

2002-08-21  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/main.cc, src/value.cc, src/value.hh,
	src/variable.cc, src/variable.hh, src/tests/value.cc,
	src/tests/variable.cc: Gather simple statistics from DNS queries.

2002-08-20  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/main.cc: Count queries by domain.

2002-08-20  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/main.cc, src/packet-dns.cc, src/packet-dns.hh,
	src/packet.cc, src/packet.hh, src/value.cc, src/value.hh,
	src/tests/packet-dns.cc: Implemented simple statistic counting
	based on client IP and domain name query.

2002-08-19  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet-dns.cc, packet-dns.hh, tests/packet-dns.cc: Allow
	iteration over the resource records of a DNS packet.

2002-08-19  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet-dns.cc, packet-dns.hh, tests/packet.cc,
	tests/packet-dns.cc: Started implementation of iterating over the
	DNS resource records.

2002-08-15  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet-dns.cc, packet-dns.hh, tests/packet-dns.cc: Support
	determining total size of labels and compressed labels.

2002-08-15  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet-dns.cc, packet-dns.hh, tests/packet-dns.cc: Added
	support for reading (compressed) domain names from DNS packet data.

2002-08-12  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/packet-dns.cc, src/packet-dns.hh, src/packet.cc,
	src/packet.hh, src/tests/packet-dns.cc, src/tests/packet.cc,
	src/tests/packet.hh: Split out the dns_packet class and test cases
	into separate files.

2002-08-12  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/packet.hh: Fixed portability to FreeBSD.

2002-08-11  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet.cc, packet.hh, tests/packet.cc: Made private
	header() functions non-member functions to reduce include overhead
	in packet.hh.

2002-08-09  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: main.cc, packet.cc, pcap.cc, tests/main.cc,
	tests/packet.cc, tests/pcap.cc: Portability to BSD.

2002-08-09  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/main.cc, src/packet.cc, src/pcap.cc,
	src/tests/main.cc, src/tests/packet.cc, src/tests/pcap.cc: Ported
	to linux.

2002-08-08  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/packet.cc, src/packet.hh, src/tests/packet.cc,
	src/tests/traces/README, src/tests/traces/ipv6-trace: Implemented
	simple IPv6 support.  Added support for retrieving the source and
	destination addresses from IP packets.

2002-08-07  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/packet.cc, src/packet.hh, src/tests/packet.cc,
	src/tests/traces/README, src/tests/traces/simple-trace: Added
	support for DNS packets.  Implemented wrapper class around raw
	packet data to allow for packet copying.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/: packet.cc, tests/packet.cc: Improved version of good()
	member for ipv4_packet and udp_packet so all test cases pass.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile: Added -Wwrite-strings to warnings.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* .cvsignore, Makefile, src/packet.cc, src/packet.hh, src/pcap.cc,
	src/pcap.hh, src/tests/packet.cc, src/tests/pcap.cc,
	src/tools/.cvsignore, src/tools/Makefile, src/tools/packet2c.cc:
	Implemented simple parsing of ethernet, IPv4, and UPD packets.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* Makefile, src/Makefile, src/tests/Makefile: Fixed some Makefile
	bugs.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* .cvsignore, Makefile, SConstruct, src/.cvsignore, src/Makefile,
	src/tests/.cvsignore, src/tests/Makefile: Changed to 'GNU Make'
	from 'SCons' to build software.

2002-08-06  Erik Rozendaal  <erik@nlnetlabs.nl>

	* src/pcap.cc, src/pcap.hh (PacketCapture::good): no longer an
	inline function.

2002-08-05  Erik Rozendaal  <erik@nlnetlabs.nl>

	* SConstruct, src/pcap.cc, src/pcap.hh, src/tests/pcap.cc,
	src/tests/traces/README, src/tests/traces/empty,
	src/tests/traces/empty-trace, src/tests/traces/simple-trace:
	Implemented opening and closing trace files.

	* src/pcap.hh, src/pcap.cc, src/tests/pcap.cc,
	  src/tests/traces/README, src/tests/traces/empty,
	  src/tests/traces/empty-trace, src/tests/traces/simple-trace: New
	  files.

	* SConstruct: updated to reflect new files and link in the pcap
	  (Packet Capture) library.

2002-08-05  Erik Rozendaal  <erik@nlnetlabs.nl>

	* CODING: Private member names should have a leading underscore
	instead of a trailing underscore.

2002-08-01  Erik Rozendaal  <erik@nlnetlabs.nl>

	* SConstruct:
	* SConstruct: Changed order of building 'all' target.  'scons -c'
	  works properly now.

2002-08-01  Erik Rozendaal  <erik@nlnetlabs.nl>

	* .cvsignore, CODING, Doxyfile, README, SConstruct, src/.cvsignore,
	src/main.cc, src/tests/.cvsignore, src/tests/main.cc: Start of DNS
	Analyzer project.

