$Id: ChangeLog,v 1.34 2006/04/17 14:54:51 bw Exp $

Version 1.1 2006-04-17
- Several parser modifications triggered by log submissions
- Added GNU adns support
- Various small fixes

Version 1.0 2004-04-25
- Made status page interactive
- Added dynamic memory allocation and fixed memory leaks
- Added basic ipfw and fwsm support
- Added stateful start to realtime response mode
- Added command line option to set report title
- Added port number to -X option
- Added CIDR support for host inclusion/exclusion
- Created web page for submission of unrecognized entries
- Updated HTML DTD to XHTML 1.1
- Updated CSS and inverted the color scheme
- Small parser improvements
- Various small fixes

Version 0.9.3 2003-06-23
- Added inclusion/exclusion functions to the command line
- Added external stylesheet embedding in realtime response mode
- All html colors are done with css styles now
- Unified some output functions, small cleanups
- Small parser improvements
- Various small fixes

Version 0.9.2 2003-04-08
- Fixed problems with multiple input file support, whois resolver and
  status web server page reload

Version 0.9.1 2003-03-22
- Added multiple input file support
- Various small fixes

Version 0.9 2002-08-20
- Added NetScreen support
- Added basic PIX version 6 support to Cisco PIX parser
- Added Elsa Lancom support contributed by Mirko Zeibig
- Added -M (maximum) option as suggested by Bram Vandoren
- Added php frontend (rewrite of a script by Kyle Amon)
- Added IPv6 support to status web server
- Various small fixes

Version 0.8.1 2002-05-15
- Modified several output functions to improve portability

Version 0.8 2002-05-08
- Added Snort support
- Added support for sending summaries by email (-T option)
- Made zlib and gettext support compile time options (-V shows options used)
- Changes in the parsers and CIDR code
- Various small fixes

Version 0.7.1 2002-04-04
was not officially released

Version 0.7 2002-03-27
- Several realtime response improvements
- Added support for configuration changes while running
- Added support for include files in configuration files
- Status page can be sorted and supports the at_least option
- SIGUSR1 reopens the log file, SIGHUP rereads the configuration file
- Documentation was updated
- HTML output now mostly uses inline CSS for colors and fonts
- Added support for external stylesheets and basic HTML color names
- The default configuration file is not parsed anymore if an alternative
  configuration file is specified
- Rewrote parts of the ipfilter parser to support resolved IP addresses
  in logs
- Various small fixes

Version 0.6 2002-02-24
- Added chain and branch selection/exclusion options
- Added Windows XP firewall log parser
- Added option to drop privileges when running as daemon
- Added traditional chinese translation (the existing is simplified chinese)
- Various small fixes

Version 0.5.2 2002-01-27
- Added 'title' option: The title of the summary and the realtime
  response status page can be customized in the configuration file
- Added -e option: 'show end times', -t now only shows start times
- Added -N option: 'resolve service names' is a new option and off by
  default now
- Added swedish translation
- I18n adjustments, small fixes

Version 0.5.1 2001-11-18
- Various fixes: whois code, mode selection, endianness problems, realtime
  response with destination/port distinction, forward chain blocking for
  iptables, international encoding, portability
- Added chinese and portuguese translations

Version 0.5 2001-10-11
- Added internationalization support with german as first language
- Added support for input from stdin in all modes
- Added options to specify paths for notifications and response scripts
- Made the check for correct ipchains rules a config file option
- Modified realtime response reaction behaviour when attacker insists
- Added display of selected parser options in realtime response status page
- Added automatic refresh of realtime response status page
- FreeBSD portablility fixes
- Various small fixes

Version 0.4 2001-08-19
- Added whois information lookup
- Added sorting by end time
- Changed pid file handling
- Renamed and introduced new listen_to option (bind_to)
- Implemented SIGHUP handling (e.g. for log rotation)
- Updated CGI scripts
- Added init script for redhat linux
- Various small fixes

Version 0.3.1 2001-05-25
- Rewrote netfilter prefix parsing code
- Made long list/chain/branch/interface names the default
- Fixed a sorting stability problem
- OpenBSD portability changes
- Various small fixes

Version 0.3 2001-04-08
- Rewrote realtime response mode to use external scripts for notifications
  and responses
- Added a first version of Cisco PIX parser
- Added 'last message repeated' handling code
- Unrecognized text is now only displayed in verbose mode

Version 0.2.1 2001-03-09
- Added compressed input file support
- Added total packet length sum option
- Added support for long chain/branch/interface names
- Modified time output (summary shows times of packet log entries, log
  times mode shows times of all entries)
- Various small fixes and cleanups

Version 0.2 2001-02-10
- Added ipfilter support
- Added host and port selection/exclusion support
- Added support for parser selection
- Realtime response mode is available also in non-ipchains and non-root
  environments now
- Various small fixes

Version 0.1.3 2001-01-22
- Replaced the sorting algorithm with a stunningly fast linked list mergesort
- Added two more sorting modes
- Added PID file for realtime response mode
- Added CIDR notation support to known host feature

Version 0.1.2 2001-01-16
- Fixed some remaining problems in realtime response mode

Version 0.1.1 2001-01-12
- Various small fixes

Version 0.1 2001-01-07
- Rewrote IP Address handling code
- Small parser and output extensions
- Added mode collision detection
- Fixed time calculation problem and warp detection

Version 0.0.28 2000-12-26
- Rewrote ipchains parser (converted to flex)
- Added support for Cisco uptime log format

Version 0.0.27 2000-12-08
- Solaris portability patches
- Added at_least option

Version 0.0.26 2000-11-11
- Added basic Cisco support
- Various small fixes

Version 0.0.25 2000-11-06
- Added basic netfilter support
- Several internal optimizations
- Various small fixes

Version 0.0.24 2000-11-01
- Extended the man page and added some options to the command line that
  were available only in the configuration file
- Various fixes and code cleanups
- Improved web interface

Version 0.0.23 2000-10-27
- Colors of the HTML output can be changed in the configuration file
- Multiple actions can be combined in realtime response mode
- Added mail notification option to realtime response mode
- Added sort order options
- Added daemon status display through own web server

Version 0.0.22 2000-10-23
- Better sample configuration
- Improved CGI demos
- Various small fixes

Version 0.0.21 2000-10-22
- Initial public release