
v1.7.beta.1b Mon Jan 26 16:49:08 EST 1998

Modified various check_[proto]_timeouts() to fix infinte loop problems.

v1.7.beta.1a Tue Jan 20 12:31:23 EST 1998

Modified clients to solve various formating problems in adjacency()
and ra().

v1.7 Fri Oct 10 08:35:10 EDT 1997

Brief summary of major changes from Argus 1.7

- Generalized ./configure tests for libpcap and tcp_wrappers to accomodate
  new releases of these packages.

- Modified ./configure to support client compilation when either tcp_wrappers
  or libpcap are absent.

- Added GNU style configuration strategy.
	- Updated ./configure to use newer GNU programs.
	- Added GNU subdirectories to support various platforms.
	- Modified to support Pentium II processors.

- Added Argus management records to output.
	- Modified argus output file format.
	- Added periodic interface performance records.
	- Added management record support in client programs, particularly ra().

- Added IP Fragment support.
	- Added fragment packet and byte counts to parent flow.
	- Added argus record for non reassembled fragments.

- Complete modification to ICMP reporting strategy to introduce concept of
  persistenct ICMP flows.  Needed to reduce number of reports when network
  management stations incessantly ping machines.

- Added flow source and destination TTL values.
	- Overloaded lasttime timeval to add TTL values.

- Added TCP based sequence numbers to byte fields of TCP INIT
  and ACK argus records.

- Fixed TCP state machine to handle poor TCP stack implementations.

- Fixed TCP byte count bug.

- Ported to Linux
	- Fixed all known endian problems, in server and client code.
	- Added RAW support for PPP and SLIP support in Linux.

- Ported to Solaris

- Ported to IRIX

- Ported to DEC Alpha
	- Fixed FDDI driver code.

- Added adjacency() to clients directory.  This is a sample client program
  that shows off some of the analysis capabilies using argus records.

- Added connections(), which is an argus file compression utility.  This
  reduces multiple argus records that refer to the same flow and merges
  them into a single argus records, updating the fields accordingly.

- Added rasort() to clients directory.  This sorts argus record files
  in start time order.

- Fixed select bug, where timer was not reset on each call.

- Modified queue timeout strategy to solve hanging flow problem. 

- Modified output file opening and writing strategy to
  improve performance.

- Portability issues
	- Modified data types to support portability.
	- Modified parameter calling strategy for many common routines.

- Added debug mode in argus() for flow tracking and diagnostics.

- Major overhaul of common client code to enhance client functions and to
  aid in protability.

- Major common/gencode.c rehaul and lex and yacc support changes to gain
  compiler independance from libpcap code.


