June-4-2007 3.12 - clear the gotIPV6 flag for each sampled header - thanks to Rita Hiu June-1-2007 3.11 - use non-blocking I/O - thanks to Wolfgang Powisch - avoid struct timeval in pcap header because time_t is 64-bits on some platforms March-28-2006 3.10 - use poll() instead of select() - removed dcd_srcIP, dcd_dstIP and used the SFLAddress fields ipsrc and ipdst instead - finished the decode of the SFLSampled_ipv6 structure - option to filter by vlan - thanks to Christian Hammers - option (-x) to strip IP payload when writing tcpdump format - thanks to Richard Clayton - bugfix: all diganostics to stderr when output is tcpdump - thanks to Richard Clayton - if netflow output, then normal text output is suppressed - bugfix: use u_char when printing MAC addresses from SFLSampled_ethernet struct Sep-19-2005 3.9 - bugfix: windows printf needs %I64 instead of %ll for 64-bit integer output Jun-28-2005 3.8 - added IPv6 header decode - on windows, now sets stdout to binary for pcap output (for piping into snort or windump) Apr-11-2005 3.7 - added experimental "process" struct entension Nov-26-2004 3.6 - bugfix: skipping over unknown structures - added "-f host/port" option to forward sflow to (multiple) collectors - added "-l" options to generate csv output with 1-line per flow or counter sample - added decode for "Processor" structure, as defined in sflow5 spec. Jul-14-2004 3.5 fixed compile problem on Opteron - added "-r " option to read sflow from tcpdump capture file instead of from UDP socket Jun-17-2004 3.4 support for SFLFLOW_SAMPLE_EXPANDED and SFLCOUNTERS_SAMPLE_EXPANDED Dec-09-2003 3.3 new MPLS and VLAN structures added Jun-18-2003 3.2 "stripped" field added to sFlow v5 Jun-19-2003 3.1 BGP next hop field added to sFlow v5 Feb-10-2003 3.0 sFlow version 5 support Oct-17-2002 2.3 bugfixes to counter value reporting Oct-8-2002 2.2 bugfixes to SNAP and IP decodes (thanks to Marc Lavine of Foundry Networks) - CFLAGS option -DSPOOFSOURCE now works on Solaris as well as Linux - bugfix to NetFlow scaling (was defaulting OFF, when supposed to be defaulting ON) July-31-2002 2.0 support for sFlow version 4 datagram (RFC 3176) May-16-2002 1.5 allow compiling with -DSPOOFSOURCE, which then enables the "-S" flag, to spoof the source address of netflow packets to match the IP address of the original sflow agent. Note that this is only necessary for netflow output. In the case of sFlow output there is a separate field for the agent IP address, so the receiver can always read it from there. May-3-2002 1.4 handle ip fragments better - especially important for udp + netflow v5 export, bytes counted from start of ipv4 header. Feb-7-2002 1.3 bugfixes to timestamps in NetFlow v5 export - thanks to Chris Cook of Asta Networks + changes to configure.in and sflowtool.h to try and improve portability across unix platforms Jan-15-2002 1.2 changes to allow compilation on Solaris - thanks to Bogdan Ionescu from University of Ottowa May-31-2001 1.0 initial release, works with sFlow version 2