CHANGELOG

2005-07-26  mederchik

	* man page updated with example on using SNMP module

2005-07-26  mederchik

	* several sample snmp_sysdescr substrings for freebsd and mac os

2005-07-26  mederchik

	* finished SNMPv2c module, registers keyword "snmp_sysdescr", which
	should be a substring of a sysDescr.0 string

2005-07-26  mederchik

	* fix for port_is_open() method to correctly test whether given
	port is open

2005-07-21  mederchik

	* a list of community strings to try is in xprobe2.conf file

2005-07-21  mederchik

	* skeleton for the SNMP module

2005-07-21  mederchik

	* a slight change in logic of the module, now it send NBT node
	status query before session setup packet

2005-07-18  mederchik

	* base for SNMP module

2005-07-18  mederchik

	* fixed several bugs and added more sanity checks. Also added NBT
	node status query to get the name remote box listens on (also gets
	us MAC).

2005-07-18  mederchik

	* added OS_Matrix::add_result(XPROBE_MATCH_NO) calls when no
	matches are found

2005-07-18  mederchik

	* added OpenUDPSocket routine

2005-07-18  mederchik

	* fixed bug when using Xprobe_Module_Params INTLIST. The bug showed
	up after we added possibility to have variable number of keywords
	for fingerprints and resulted in extra OS_Matrix::add_result calls

2005-07-18  mederchik

	* base for SNMP module

2005-07-18  mederchik

	* update from Ofir (keywords for smb module)

2005-06-26  mederchik

	* added support for OS_Matrix to be able to still give 100%
	whenever different fingerprints have different number of keywords

2005-06-26  mederchik

	* several updates to the modules: -added new checkpoint value for
	TTL singature generation (60); -added sanity check to the SMB
	module;

2005-06-26  mederchik

	* minor updates to the man page and howtos

2005-06-23  mederchik

	* new SMB module import. Module extract Native OS and Native Lanman
	from session setup and X reply. Module supports both SMB over
	NBT(139) and naked SMB(445). Module will be executed if either 139
	or 445 TCP port is open

2005-06-23  mederchik

	* util func to compare strings

2005-06-23  mederchik

	* added method to check if specific port is open

2005-06-20  mederchik

	* updated TODO

2005-06-19  mederchik

	* update from Ofir

2005-06-17  mederchik

	* removed debugging printf()

2005-06-17  mederchik

	* CREDITS

2005-06-17  mederchik

	* small fix for compiler warning on osx

2005-06-17  mederchik

	* fixes for bugs reported by Alf B Lervaag <alfborge@stud.ntnu.no>

2005-06-09  mederchik

	* update from Ofir

2005-02-16  mederchik

	* stupid bug in if statment, resulted in 97% match, as border value
	of echoed_dtsize was equal 64

2005-02-15  mederchik

	* updated CHANGELOG

2005-02-15  mederchik

	* new default port 65534

2005-02-15  mederchik

	* fixed to_string as it displayed the same ip because of
	inet_ntoa() call

2005-02-15  mederchik

	* upate from Ofir

2005-02-14  mederchik

	* update man page with info on -A and add some checks for proper
	use of -A

2005-02-14  mederchik

	* experimental suport for detection of transparent proxies,
	firewalls/NIDSs spoofing RSTs on behalf of target added to
	portscanner, to enable use -T in conjunction with -A

2005-02-14  mederchik

	* fixed singature generation and matching: echoed_dtsize of
	icmp_unreach can now have arbitrary number, ip_id_strategy
	generation in tcp_rst now matches <=256 instead of <256 for I

2005-02-14  mederchik

	* added int_to_string() to xp_lib

2005-02-14  mederchik

	* nicer ouput of packets

2005-02-14  mederchik

	* signature update from Ofir including updated fingerprints for new
	module

2005-02-13  mederchik

	* employ new usi++ methods

2005-02-13  mederchik

	* usi++ modifications for packet comparison that will be used by
	portscanner to detect variations in replies from target

2005-02-13  mederchik

	* updated port list for -B in example

2005-02-13  mederchik

	* cosmetic change to be consistent with xprobe2 output

2005-02-13  mederchik

	* fixed bug when configure for USI++ was run two times; added some
	symbols to configure.in to port to MacOSX

2005-02-09  mederchik

	* automatically generated CHANGELOG

2005-02-09  mederchik

	* fixed ICMP info module disabling issue

2005-02-09  mederchik

	* added new keywords, added some minor optimizations, fixes and
	minor enhacements

2005-02-09  mederchik

	* added operator=, as default was copying pointers

2005-02-09  mederchik

	* updated from Ofir + added full FreeBSD 5.3 fingerprint with and
	without rfc 13223 extensions enabled

2005-02-09  mederchik

	* start using CREDITS for credits

2005-02-09  mederchik

	* commited fixes from Kurt Congdon <kurt@vdubgeek.net>

2005-02-09  mederchik

	* New TCP RST module added

2005-01-14  mederchik

	* fix bug reported by Kurt Congdon <kurt@vdubgeek.net>:
	Target_Net::getnext() returned special addresses (network num and
	broadcast)

2005-01-12  mederchik

	* signature update from Ofir, forget to remove a var from
	xp_lib.cc, update copyright to 2005

2005-01-12  mederchik

	* fixed non-zero ACK in SYN packet

2005-01-12  mederchik

	* remove debugging statements

2005-01-12  mederchik

	* new xprobe_module_param type introduced _INTLIST, which handles
	comma separated list of integers as value

2005-01-12  mederchik

	* regenerated configure script, got rid of Wmissing-prototypes, as
	it was causing warnings

2005-01-12  mederchik

	* move tokenize to a xp_lib class that from now on will be holding
	all utility methods/funcs. TODO: move all xp_ funcs there too

2005-01-10  mederchik

	* new configure script for usi

2005-01-10  mederchik

	* port 6000 added to blind guess list

2005-01-10  mederchik

	* got duplicate sigs from somwhere, fixed

2005-01-05  mamezo

	* sigs update

2004-12-27  mederchik

	* Richard Atterer <atterer@debian.org> pointed to old config.guess
	and config.sub, update to new version

2004-12-27  mederchik

	* get rid of carriage return char

2004-12-20  mederchik

	* update from Ofir

2004-12-17  mederchik

	* fixed emails

2004-12-17  mederchik

	* update from Ofir

2004-12-16  mamezo

	* sync

2004-12-15  mederchik

	* forgot to remove -P from man

2004-12-15  mederchik

	* got rid of -P as it was useless, fixed portscanner not to run if
	no ports specified

2004-12-15  mederchik

	* update from Ofir

2004-12-15  mederchik

	* updated man

2004-12-12  mederchik

	* algnment fix

2004-12-09  mederchik

	* name feature blind guess

2004-11-29  mederchik

	* -B option added to bruteforce TCP ports in tcp handshake module

2004-11-12  mederchik

	* fix ttl_calc module to associate ICMP packets w/ respective
	UDP/TCP packets

2004-10-21  mederchik

	* fix to make module recognize its packets more precisely

2004-10-17  mederchik

	* updated

2004-10-17  mederchik

	* fixed timeouts and make pcap_next() nonblocking

2004-10-14  mederchik

	* suspend warning when compiling on linux

2004-10-14  mederchik

	* updated CHANGELOG

2004-10-12  mederchik

	* remove the annoying usi++() set_dst() call from constructor to
	fix the problem when local hostname does not resolve

2004-09-05  mederchik

	* XSD schema for XPROBEs XML output

2004-09-05  mederchik

	* changed XML output to comply with XSD schema

2004-08-28  mederchik

	* small initialization bug, resulted in failure to parse the config
	file

2004-06-09  mederchik

	* minor cosmetic fix

2004-06-09  mederchik

	* some fixex for MacOSX, portscan progress report in percents

2004-06-09  mederchik

	* added endiannes check to USI++, updated config.sub and
	config.guess

2004-06-09  mederchik

	* SHA1 is now part of xplib

2003-12-29  mederchik

	* dump select() in USIs sniffpack() for portability, localhost
	should be now supported

2003-10-15  mederchik

	* fixed line wrapping bug

2003-10-14  mederchik

	* fixed reproted bugs

2003-09-25  mederchik

	* state of other ports is reported in xml output now

2003-09-24  mederchik

	* added check for generated incomplete fingerprints

2003-09-24  mederchik

	* hehe :) added tabs (promise this is last one)

2003-09-24  mederchik

	* made fingerprint output nicer

2003-09-24  mederchik

	* BUGFIX: added check on where do logging or not (forgot that :) )

2003-09-23  mederchik

	* XML output added, version is 0.2, updated README

2003-09-23  mederchik

	* Loggin class + XML logging

2003-09-23  mederchik

	* update from Ofir

2003-08-20  mederchik

	* -L output changed, added \n to unable to resolve message

2003-08-20  mederchik

	* added signature generation (-F), portscan is conducted in a
	random port order, minor fixes

2003-08-05  mederchik

	* uncommited stuff, see CHANGELOG

2003-07-12  fygrave

	*
	Updates from Ofir

2003-07-12  fygrave

	* Ofir's update 12/07/2003

2003-07-03  mederchik

	* update from Ofir (windoze and linux sigs added)

2003-07-02  mederchik

	* return OK;

2003-07-02  mederchik

	* change from map ptr to map

2003-07-02  mederchik

	* fix 10->0x10

2003-07-02  mederchik

	* update from Ofir

2003-07-01  mederchik

	* ok, several fixes for xprobe_module_param (_ZNZORIG, _ZNZVAL,
	etc), also added another layer into xprobe_module_param, now
	modules have to use Xprobe_Module_Param_ICMP or _TCP which defines
	the parameter type for check_param(); also finished TCP Handshake
	module, it is ready to go

2003-07-01  mederchik

	* fix BROKEN_BSD stuff: tot_len and frag_off were saved in host
	byte order, but get_totlen() and get_fragoff() returned them in
	network byte order

2003-07-01  mederchik

	* XProbe->Xprobe

2003-07-01  mederchik

	* new fingerprints file, includes new keywords

2003-06-26  mederchik

	* new tcp_handshake module

2003-06-26  mederchik

	* New type XPROBE_MODULE_PARAM_ZNZVAL

2003-06-26  mederchik

	* new tcp_handshake module

2003-06-26  mederchik

	* change the way TCP options are set in USI++, instead of padding
	after each option set, do padding and set th_off when send_pack()
	is called

2003-06-26  mederchik

	* Makefile with new module

2003-06-26  mederchik

	* beta version of the TCP handshake module. TODO: NONE value for
	WSCALE and fingerprinting

2003-06-24  mederchik

	* fixed another bug reported by Ofir, added correct timeout checks
	and more debugging

2003-06-23  mederchik

	* fix for bugreport from Ofir

2003-06-08  mederchik

	* more signatures from Ofir

2003-06-03  mederchik

	* bugfix - did not do osmtx->add_result(...XPROBE_MATCH_NO)

2003-05-28  mederchik

	* added ability to disable modules and specify number of matches to
	display

2003-05-28  mederchik

	* bug reported by atterer@debian.org fixed as suggested (do not
	build shared USI++ for now)

2003-05-14  mederchik

	* update from Ofir

2003-05-07  mederchik

	* fixed CFGDIR

2003-05-07  mederchik

	* last one to become GNU

2003-05-07  mederchik

	* Richard Atterer pointed out a bug, clear is removed

2003-05-07  mederchik

	* update from Ofir (windows 2003 server added)

2003-04-29  fygrave

	* new config.guess

2003-04-23  fygrave

	* License change

2003-04-08  fygrave

	*  Richard Atterer <atterer@debian.org> pointed bugs (and fixes)

2003-04-07  fygrave

	*
	Cosmetic changes :) (welcome meder as author ;-))

2003-04-06  mederchik

	* new fingerprints from Ofir

2003-04-04  mederchik

	* 0.1 RELEASE minor fixes

2003-04-04  mederchik

	* STL includes fix

2003-04-04  mederchik

	* code cleanup, removed unused code

2003-04-03  mederchik

	* v.1.0 RC2 :)

2003-04-03  mederchik

	* IP constructor now sets the IP ID value to !0

2003-04-01  mederchik

	* updated AUTHORS file, update from Ofir for xprobe2.conf, fixed
	xprobe_module_param RANGE type to match <=

2003-03-25  mederchik

	* update from Ofir to reflect new keyword, updated TODO

2003-03-19  mederchik

	* added new ip id keywords for each module, fixed build_DNS_reply()
	that was causing segfaults with gcc v.3, moved all modules except
	icmp_port_unreach to Xprobe_Module_Param

2003-02-12  mederchik

	* new type for xprobe_module_param + new VALUE (SENT) for
	icmp_echo_ip_id

2003-01-30  mederchik

	* sig update from Ofir (IOSs and MAC OS)

2003-01-20  mederchik

	* fixed payload, now we should be RFC compliant

2003-01-20  mederchik

	* added new method and fixed the timestamp payload, now we should
	be RFC compliant

2002-12-07  mederchik

	* small fix if no DNS record for www.securityfocus.com can be found

2002-11-26  mederchik

	* timestamp is defined in netinet/ip.h on linux, oh well we will
	have Timestamp :)

2002-11-24  mederchik

	* not our UDP packet does not just put static ip into DNS reply,
	but looks up ip of www.securityfocus.com and then puts the ip into
	packet

2002-11-24  mederchik

	* moved payload funcs into ICMP class of USI++, added the right
	payload for each ICMP probe

2002-11-24  mederchik

	* xp_get_src_addr() to return source IP for packets

2002-11-24  mederchik

	* xp_get_src_addr() added to support interface aliases

2002-11-13  mederchik

	* UNIX-like payload added to icmp echo req

2002-11-13  mederchik

	* xp_get_ping_payload() UNIX like payload for pings

2002-11-06  mederchik

	* fixed calc_ipsum(), bug reported by Jamie Van Randwyk

2002-11-04  mederchik

	* xp_get_random_data() added

2002-10-21  mederchik

	* using namespace std; added

2002-10-10  mederchik

	* fix for ioctl(SIOCGIFFLAGS)

2002-09-28  mederchik

	* updated man (-p) and -h

2002-09-23  mederchik

	* -p added + ttl_calc prints * now

2002-09-12  mederchik

	* updated new-fingerprints-howto

2002-09-10  mederchik

	* tell user of failed ttl precalculation

2002-09-10  mederchik

	* new man page (-r included)

2002-09-10  uid32118

	* Ofir's update :)

2002-09-09  mederchik

	* solaris 9 added

2002-09-07  mederchik

	* added -r support for traceroute-like output

2002-09-01  mederchik

	* get rid of -i completely (cmdopts())

2002-08-26  fygrave

	* update from Ofir

2002-08-26  fygrave

	* Fingerprints howto :-)

2002-08-25  mederchik

	* minor fix for the default config file path (needed slash)

2002-08-24  fygrave

	* Ofir's update on OpenBSD 3.1.x :-)

2002-08-24  fygrave

	* make install fixes.

2002-08-24  fygrave

	* config dir fixes.

2002-08-21  mederchik

	* added TTL fuzziness

2002-08-21  fygrave

	* Update from Ofir.

2002-08-17  mederchik

	* fuzzines in TTL matching

2002-08-17  mederchik

	* GPL

2002-08-15  mederchik

	* document -c and get rid of -i

2002-08-14  mederchik

	* patch submitted by Jamie Van Randwyk (fixes bug in interface
	lookup)

2002-08-14  mederchik

	* fixed hardcoded number of keywords (my fault)

2002-08-14  mederchik

	* fixed bug (registered extra keywords)

2002-08-12  mederchik

	* signature updates

2002-08-11  mederchik

	* fix in ip_sum calculation

2002-08-10  fygrave

	* Sigs update from Ofir :)

2002-08-10  fygrave

	* Signature fixes.  More "debuggery" to icmp_echo_id Meder: you
	cant do if (foo == "bar") .. if foo is char *, only if doo is
	string, otherwise you have to use strcmp ;-)

2002-08-09  fygrave

	* it is 0xc0 not Oxc0 ;-)

2002-08-09  fygrave

	* Oops.. it is icmp_echo_ip_id, not icmp_echo_id, damn ;p

2002-08-09  mederchik

	* got rid of setfilter() + minor cleaning

2002-08-08  mederchik

	* fixed icmp_unreach_echoed_dtsize parsing, it is UDP
	header+payload

2002-08-08  fygrave

	* More files.

2002-08-08  fygrave

	* initial commit

2002-08-08  fygrave

	* initial commit

2002-08-08  fygrave

	* Initial commit