CPA - Whats new!

Home | Products | Contact | Legal

Home >> Products >> CPA >> History

fixed 'Open in new Window' menu bug (was opening the wrong window).

added an option to save find queries..
fixed some small memory leaks.
optimized document types.

updated filter predicates.
fixed Packet Time Delta column sorting.
fixed Packet Received filtering.
new combined find function to search/filter traces.

requires Mac OS X 10.5 (Leopard) or later now.
analyzer includes a x86_64 (Intel 64-bit) binary to support big tracefiles (if you want ppc64 let me know).
using memory stack protection for enhanced security.
using obj-c 2.0 formal protocol for PlugIns.
fixed potential exception bugs.
fixed flipped open document icon bug in welcome window.
optimized cpasniffD.
optimized handling of old preferences.

fixed displaying bytes in raw view if selected protocol header is inside another protocol.
fixed opening various single packet windows if one of them is already open.
fixed default document window postion.
fixed a crash bug (happend sometimes when quitting CPA and cpasniffD was still running).
fixed Mac OS X 10.4 (Tiger) issues.

fixed a potential buffer overflow in Ethernet and ARP analyzers.
fixed "isDocumentEdited"-status on single packet windows.
compatibility with 10.6 SDK.
optimized progress sheets memory usage.
capture documents append a timestamp to the filename to avoid duplicate tempfiles.
added recent documents to welcome screen (incl. last opened date).

fixed a bug while scanning for capture devices (devices which do not support BPF caused an error while scanning the devices list).

fixed missing IPv6 in LoopbackAnalyzer.
fixed resolving tcp/udp ports if src and dst ports are the same.
capture sheet: stop-button is labeled "Cancel" to cancel the sheet, during capturing it will be labeled "Stop" to stop the capture.
enhanced "missing capture interfaces"-warning with a direct scanning for interfaces option.
updated MAC vendor (OUI) list.
added scan-button to capture sheet to (re)scan for capture interfaces.
added a "Capture"-menu with basic capturing functions.
added constants to plugins protocol and fixed the notification names.
added option to authenticate and start the capture daemon (cpasniffD) on app launch (so the user only has to authenticate once).
added IPv4, IPv6 internet and PPP dst. addresses to capture interfaces.
added a "Welcome Window" which opens on app start.

fixed a crash bug in ICMP analyzer.
fixed a crash bug in TCP analyzer.
fixed long sequence/ ack numbers in TCP analyzer.
renamed preferences to com.tastycocoabytes.CocoaPacketAnalyzer.
disabled FeedbackReporter, for feedback and bug reporting please send me emails again.
added value column to details view.
added "Export Selected" menu item (exports selected packets to a new pcap file).
added "Copy Value(s)" (contextual) menu to packets and details views, will copy value(s) only.

improved memory usage if the capture sheet is cancelled without capturing anything.
fixed a memory leak with the start/ stop capture buttons.
fixed a memory leak with canceling authentication.
fixed L2TP tunnelID value.
fixed L2TP AVP headers were displayed wrong.
fixed some 10.4 UI issues.
fixed snaplength number formatter.
updated quicklook plugin to support 64 bit (needed for snow leopard).
support for "eth" file suffix.
added an alternative user interface layout (Details and Raw View side by side under Packets View).
added FeedbackReporter from Torsten Curdt so you can send me nice feedback reports (see Help-Menu).

included a first version of a quicklook plugin.
fixed memory leaks in CCP,LCP,L2TP and RADIUS analyzers.
fixed missing LCP options.
fixed missing IPv6 hop limit.
fixed an issue with the status bar on Tiger.
fixed wrong L2TP ControlMessageAVP value in protocol overview bug.
fixed PPP protocol bug (was displaying wrong protocol in some cases).
optimized performance and memory usage.
hidden defaults option to analyze all protocols during opening (use "defaults write com.jf.CocoaPacketAnalyzer analyzeOnOpen -boolean YES" to enable).

fixed a crash with IPv6 DNS resolving.
fixed a bug with IPv6 options.
fixed a bug with the capture sheet forgetting about the last selected interface.
fixed a bug with LCP options.
single packet windows will be closed if documents get closed.
optimizations on packet opening.
optimized performance and memory usage on search and column sorting.
optimized status bar.

new analyzer plugins architecture, needed for all further enhancements!
eliminated "first analysis thread" while opening files: just opening the file and analyzing the packetheader.
analyzer plugins are used for all analysis now.
analyzer plugins can add columns to the packet view now.
analyzer plugins can add search predicates.
added lots of new table columns.
view menu updated (columns submenu, open packet in new window, toolbar menuitems).
open selected packet in a new window.
drag out from information view.
support for ethertype 802.1Q VLAN (0x8100,0x9100,0x9200,0x92300).
information column containing protocol info from the last analyzed protocol (if supplied by the analyzer).
new method for saving files.
fixed a possible crash when canceling opening files.
fixed missing searchfield bug on 10.4.
fixed a crash when opening files with unknown format.
search field: uses "send whole search string" now.
selecting a new packet will select its packet header in information view now.
various other small fixes and optimizations.

optimized analyzers preferences.
L2TP/ RADIUS value.strings corrections.
Packet and Info View optimizations.
fixed Info and Raw View if no packets were found during search (displayed last selected packet now displaying nothing).
general code clean ups.
improved packet raw views performance.
progress bar is reflecting real progress (bytes read and analyzed).
using sparkle for automatic application updates.

new app icon.
reworked document and plugin icons.
refactored classes for apple naming conventions (third party plugins need recompile).
refactored analyzer plugins.
renamed sniffer to cpasniffD.
new plugins protocol and reworked example plugin.
added new notification:"CPAPluginProtocolsAndPortsDidChangeNotification" so that plugins ports can be edited by the user.
L2TP and RADIUS analyzers: user can configure ports now.

fixed default preferences toolbar item.
fixed a memory leak with split view.
l2tp avps optimizations.
l2tp avps datatypes fixes.
l2tp avps respecting hidden flag now.
checking for truncated l2tp avps.
checking for truncated radius avps.
radius avps optimizations.
all searches/filters, except "Packet contains string", should be case insensitive now.

little GUI change (SplitView has a nicer bar/grip now).
fixed a crash with PPPoED-tags.
fixed some byte-order issues.
fixed ARP-header (hw type, proto type, address length).
fixed a rounding bug on "Time since first packet".
fixed QuickStart option in IPv4 and TCP analyzer.
fixed IPv6 version tag.
fixed IPv6 traffic class.
added IPv6 Routing extension.
added IPv6 Hop-By-Hop options.
added IPv6 Destination options.
added IPv6 AH extension.
added Mobility Header analyzer.
added ESP analyzer (very basic).
support for 6to4.
support for IPv6-UDP/TCP checksum verification.

MAC-resolution defaults are live updating packet view now.
DNS-resolution defaults are live updating packet view now.
IP-Analyzer will display hostname and IP if in DNS-resolve-mode.
added general preferences (replacing "analysis" preferences").
moved IP,TCP,UDP,ICMP,IGMP to own analyzer plugins.
fixes some PPP-protocol short names.
fixed some IP-protocol names.
better handling of truncated packets.
Basic IPv6 support.
fixed a bug with selecting and displaying options in raw view.
fixed a potential bug with RADIUS avps.

fixed Mac OS 10.4 compatibility issues.
fixed a bug with the default preferences (Packet View: only the time column did appear).
fixed a bug with searching the time column.

IPCP,CCP,LCP optimizations.
CCP options fixes (there was a bug if more than one option was present).
fixed a bug with IP-plugin coloring.
fixed packet length column sorting.
added "packet contains string" search.
added "packet contains hex value" search.
added "elapsed time column since the beginning of the capture".
updating prefs for the new time column, if it doesnt work please add it manually (contextual menu on the packet view column).
added L2TP VCCV Capability AVP(96).
refactored lots of code - hope this introduced no bugs.

plugins engine optimizations.
plugins protocol coloring options.
new ethernet plugin with MAC to vendor-ID resolution option.
MAC to vendor-ID resolution option for packet view.
fixed a memory leak.
fixed a bug with the "fullPacket" option for plugins.
reloading packet and information views data from datasources if plugins defaults did change.
updated CPA_PlugInsProtocol.h and the example plugin source with coloring and notifications options.

the preference filename did change - please redo your settings!
searching for plugins in all possible domains/Application Support/CocoaPacketAnalyzer/PlugIns.
fixed a potential crash with optional plugin methods.
extended the plugins protocol.
plugins can have a preferences sheet now.
plugins can have .cpaplugin extension (will even get a cpaplugin icon).
support for linktype PPP.
L2TP and Radius plugins are using their own preferences.
ARP, IP, PPP and Loopback Analyzers are plugins now.
fixed types for linktype loopback and ppp.
created a webpage for plugin development.

CPA_sniffD: fixed "could not find any interfaces" bug (happend on some systems).
CPA_sniffD: various bug fixes and optimizations.
CPA_sniffD: added a kind of activity bar.
Analyzer: fixed a bug with checksumming dns-names.

no more CPA_sniffD zombies.
linktype: human readable string instead of number.
prefs: option not to compute checksums (cause of TCP checksum offload options on new gigabit adapters).
now using pcap_findalldev() to figure out all active and usable interfaces for capturing. see new "scan"-button in capture prefs (you may need to authorize as an administrator).
support for capturing from tun/tap devices (your driver must support this - not all do).
support for loopback traffic.
fixed an error with temp-file capturing (if authentication failed it reverted back to direct-file capturing).
fixed some memory leaks.

fixed a crash-bug with special chars in filename.
changed default behavior not to open a new file, please select "Capture" from the menu or toolbar.
capturing: capturing to a temporary file now, opening it as a new untitled document (to capture directly to a file please see the new option in "capture prefs"). Needs special testing - please report bugs and care for your files!
fixed a possible dataloss bug while capturing to temp file.
added checksum verification for TCP/IP headers.
added "packet stepper".
added TCP-options.
optimized ICMP and IGMP-protocols, should be RFC conform now (need some example packet traces for better testing - someone?).
fixed some byteorder issues.
fixed some memory leaks.
prepared localization (added tons of NSLocalizedStrings).
optimized port-based-analysis (first looking for the destination port).
LCP: displaying identification message string instead of hexvalue.
CHAP/ PAP: fixed values.
fixed potential ASCII-String crashes.

optimized core: should be faster and use less memory (maybe there are all kinds of bugs now, please report them!).
first implementation of analyzer plugins for application layer payload.
fixed "jump to packet": now also scrolling to the selected packet (forgot about it a long time ago, sorry).
10.5: some little GUI changes; views should react on "Type Select" now.
updated prefs: new defaults (pugins are able to overwrite the portbased list), deleted "general prefs", added plugins prefs.

fixed a bug which happend if CPA_sniffD encountered an error.
added an error message in case CPA_sniffD unexpectly quits.

fixed a checksum error on 10.4.x.

added unknown ethertypes hex values.
fixed NSTableView datasource warnings.
added basic capturing ("sniffing") of network traffic, dumping it to file and analyzing later - alpha code, please test!
checksuming the sniffer daemon (CPA_sniffD) to make sure it was not altered.
leopard ready.

added Radius AVPtypenr to internal proto.
fixed L2TP Radius Proxy AVPs.
fixed Radius AVP Tunnel-Preference.
fixed byteorder bugs in RADIUS AVPs.
fixed a crash-bug in CHAP and PAP proto code.
added helpbook.

added radius protocol.
L2TP AVPs: can occur more than one time now.
displaying full L2TP AVP header not only value bytes.

fixed a threading issue.
added ppp-chap.

general code optimizations and bug fixing.
corrected protocol and ethertype informations.
fixed copy/expand/collapse-operation bugs (happend if more than one item was selected).
added port based protocol detection (up to port 2048).
corrected packet numbers in InfoView.
added support for PPP with HDLC-like Framing.
implemented L2TP protocol (UDP/TCP-Port based detection and IP-Type L2TP).
added Ethertype_PPP.
optimized default preferences.
IP-header: added fragement flags, DS/ECN-fields, IP-options, Header length.
fixed a bug with IPCP Option Compression (VJ compression data).
TCP-Header: added length and corrected flags.

threading and memory optimizations (should be able to open files with many packets now).
added "jump to packet" menu.
modularized PPPOES/D protocol.
added contextual menus(PacketView, PacketViewHeaderColumn, InfoView).
added protocol-history to packetView.
support for truncated packets.
opening larger files brings up a progress sheet.
some GUI work.

Next to do:

ICMP/IGMP needs small fixes and host resolution
reassamble tcp packets
stats and analysis during capture
possibility to use an analyzer on a selected payload
L2TP SMI Network Management Private Enterprise Codes
IPv6 protos(ICMPv6,IPv6CP ...)
Leopard only code, 64 bit transition to support big traces
codesign cpasniffD instead of using custom hash.
printing support
save filtered/seach traces.
quicklook plugin?
detailed and threaded search (move away from apples way to filter NSArrayConroller)
update help-book
DLT_PPP_SERIAL, DLT_PPP_ETHER and DLT_PPP_HDLC
support for various pcap formats, cap files compatibility

<< back