Libtrace 4.0.7

New features

• Added new API functions for exploring meta-data that is either attached to a specific packet or included in a trace as separate records (e.g. ERF provenance or pcap-ng meta-data). Many meta-data fields have a specific accessor function that can be called directly (e.g. trace_get_interface_fcslen()). You can also use trace_get_section() to get an array containing all meta-data items within a particular section, which will allow you to get access to any fields for which we have not implemented direct access functions.
• Added new API functions to instant decoding all of the post-layer 2, pre-layer 3 headers in a packet so you can now easily explore any / all VLAN, MPLS, etc. headers in a packet without having to effectively re-implement trace_get_layer3() in your own code. See trace_get_layer2_headers() for more details.
• Added support for both reading and writing TZSP sniffing streams.

Bug fixes

• Fixed uninitialised bytes in message structure sent via trace_post_reporter.
• Fixed build errors caused by attempting to #include pcap-int.h.
• Fixed bug where a corrupt ERF record could cause a libtrace program to become un-haltable.
• Fixed bug in error tracking when creating a fanout socket for the ring and int formats.
• Fixed potential segfault when halting a libtrace program that was reading from a ring: input.
• Fixed uninitialised mutex when copying a packet.

Improvements

• Improved parallel performance by skipping some needless per-packet sanity checks.