November 18th, 2011· fixed small memory leak.
· optimized icons
November 18th, 2011· added protocol statistics.
· added importing of find queries.
· added print toolbaritem.
· optimized progress bar during file operations.
· optimized validation of toolbar/menuitems during file operations.
· fixed UTIs.
· fixed online helpbook url.
· fixed welcome window behavior under Mac OS X 10.6.
October 18th, 2011· added new timezone localizations.
· fixed initial window positioning.
September 29th, 2011· Fixed wrong IP-dst address in IP4-analyzer (happend if hostname resolution was enabled).
· Fixed a crash bug regarding hostname resolution.
· Fixed a crash bug in german and japanese localization (happend at the end of a capture).
· Added basic printing.
September 8th, 2011· fixed capturing and scan interfaces.
September 8th, 2011· fixed a crash on ASCII/UTF8/ISO data strings.
· fixed a potential memory leak in cpasniffD.
· fixed various DHCPv6Options.
· updated the help book.
· added SMI Network Management Private Enterprise Codes for RADIUS Vendor AVP.
· added time zone support for packet dates.
· added a basic MPLS protocol analyzer.
· added advanced preferences with an option to revert to the default preferences.
· added german localization.
· added the possibility to localize the advanced find.
· added the possibility to localize the document status bar.
· added "visit website" menu-item in help-menu.
· added help-buttons.
· added opening progressbar to the document instead of a sheet.
· 10.5: using commenCrypto instead of libssl for cpasniffD verification.
· 10.6 and 10.7: using codesigning for cpasniffD verification.
· 10.6 and 10.7: support for sudden termination.
· 10.6 and 10.7: support for concurrent document open.
· 10.6 and 10.7: optimized the find filter in packets-view using multiple cores.
· 10.7 only: support for full screen window.
· 10.7 only: suppprt for concurrent document write.
June 6th, 2011· RADIUS-Analyzer: IPv6 enhancements.
· added L2TP SMI Network Management Private Enterprise Codes.
· refreshed ethernet OUI list.
· new caputured bytes history view in capture sheet.
· redesigned the welcome window.
· small user interface changes.
April 14th, 2011· DHCPv6: fixed memory bug.
· ICMPv6: completed analyzer.
· plugins preferences: pencil button brings up selected plugins preferences again.
· better support for truncated packets in some analyzers.
December 13th, 2010· IPv6CP: fixed coloring bug.
· added DHCPv6 protocol.
· fixed quicklookplugin.
· added license.txt.
November 16th, 2010· L2TP/ RADIUS: reanalyze packets when protocol ports changed.
· notification to clear analyzing caches.
· Updated ethernet vendor list.
November 4th, 2010· fixed exported UTIs.
· added PPP IPv6 Control Protocol.
· added japanese localization.
· The ICPMv6 analyzer is now part of the default installation. Please remove it from the custom plugins directory!
April 9th, 2010· small 64-Bit fixes and cleanups.
November 20th, 2009· fixed 'Open in new Window' menu bug (was opening the wrong window).
October 25th, 2009· added an option to save find queries..
· fixed some small memory leaks.
· optimized document types.
September 18th, 2009· Updated filter predicates.
· Fixed Packet Time Delta column sorting.
· Fixed Packet Received filtering.
· New combined find function to search/filter traces.
September 7th, 2009· Requires Mac OS X 10.5 (Leopard) or higher now.
· Analyzer includes a x86_64 (Intel 64-bit) binary to support big tracefiles (if you want ppc64 let me know).
· Using memory stack protection for enhanced security.
· Using obj-c 2.0 formal protocol for PlugIns.
· Fixed potential exception bugs.
· Fixed flipped open document icon bug in welcome window.
· Optimized cpasniffD.
· Optimized handling of old preferences.
August 13th, 2009· Fixed displaying bytes in raw view if selected protocol header is inside another protocol.
· Fixed opening various single packet windows if one of them is already open.
· Fixed default document window postion.
· Fixed a crash bug (happend sometimes when quitting CPA and cpasniffD was still running).
· Fixed Mac OS X 10.4 (Tiger) issues.
June 29th, 2009· Fixed a potential buffer overflow in Ethernet and ARP analyzers.
· Fixed "isDocumentEdited"-status on single packet windows.
· Compatibility with 10.6 SDK.
· Optimized progress sheets memory usage.
· Capture documents append a timestamp to the filename to avoid duplicate tempfiles.
· Added recent documents to welcome screen (incl. last opened date).
May 31st, 2009· Fixed a bug while scanning for capture devices (devices which do not support BPF caused an error while scanning the devices list).
May 31st, 2009· Fixed missing IPv6 in LoopbackAnalyzer.
· Fixed resolving tcp/udp ports if src and dst ports are the same.
· Capture sheet: stop-button is labeled "Cancel" to cancel the sheet, during capturing it will be labeled "Stop" to stop the capture.
· Enhanced "missing capture interfaces"-warning with a direct scanning for interfaces option.
· Updated MAC vendor (OUI) list.
· Added scan-button to capture sheet to (re)scan for capture interfaces.
· Added a "Capture"-menu with basic capturing functions.
· Added constants to plugins protocol and fixed the notification names.
· Added option to authenticate and start the capture daemon (cpasniffD) on app launch (so the user only has to authenticate once).
· Added IPv4, IPv6 internet and PPP dst. addresses to capture interfaces.
· Added a "Welcome Window" which opens on app start.
April 24th, 2009· Fixed a crash bug in ICMP analyzer.
· Fixed a crash bug in TCP analyzer.
· Fixed long sequence/ ack numbers in TCP analyzer.
· Renamed preferences to com.tastycocoabytes.CocoaPacketAnalyzer.
· Disabled FeedbackReporter, for feedback and bug reporting please send me emails again.
· Added value column to details view.
· Added "Export Selected" menu item (exports selected packets to a new pcap file).
· Added "Copy Value(s)" (contextual) menu to packets and details views, will copy value(s) only.
March 31st, 2009· Improved memory usage if the capture sheet is cancelled without capturing anything.
· Fixed a memory leak with the start/ stop capture buttons.
· Fixed a memory leak with canceling authentication.
· Fixed L2TP tunnelID value.
· Fixed L2TP AVP headers were displayed wrong.
· Fixed some 10.4 UI issues.
· Fixed snaplength number formatter.
· Updated quicklook plugin to support 64 bit (needed for snow leopard).
· Support for "eth" file suffix.
· Added an alternative user interface layout (Details and Raw View side by side under Packets View).
· Added FeedbackReporter from Torsten Curdt so you can send me nice feedback reports (see Help-Menu).
March 11th, 2009· Included a first version of a quicklook plugin.
· Fixed memory leaks in CCP,LCP,L2TP and RADIUS analyzers.
· Fixed missing LCP options.
· Fixed missing IPv6 hop limit.
· Fixed an issue with the status bar on Tiger.
· Fixed wrong L2TP ControlMessageAVP value in protocol overview bug.
· Fixed PPP protocol bug (was displaying wrong protocol in some cases).
· Optimized performance and memory usage.
· Hidden defaults option to analyze all protocols during opening (use "defaults write com.jf.CocoaPacketAnalyzer analyzeOnOpen -boolean YES" to enable).
February 12th, 2009· Fixed a crash with IPv6 DNS resolving.
· Fixed a bug with IPv6 options.
· Fixed a bug with the capture sheet forgetting about the last selected interface.
· Fixed a bug with LCP options.
· Single packet windows will be closed if documents get closed.
· Optimizations on packet opening.
· Optimized performance and memory usage on search and column sorting.
· Optimized status bar.
January 25th, 2009· New analyzer plugins architecture, needed for all further enhancements!
· Eliminated "first analysis thread" while opening files: just opening the file and analyzing the packetheader.
· Analyzer plugins are used for all analysis now.
· Analyzer plugins can add columns to the packet view now.
· Analyzer plugins can add search predicates.
· Added lots of new table columns.
· View menu updated (columns submenu, open packet in new window, toolbar menuitems).
· Open selected packet in a new window.
· Drag out from information view.
· Support for ethertype 802.1Q VLAN (0x8100,0x9100,0x9200,0x92300).
· Information column containing protocol info from the last analyzed protocol (if supplied by the analyzer).
· New method for saving files.
· Fixed a possible crash when canceling opening files.
· Fixed missing searchfield bug on 10.4.
· Fixed a crash when opening files with unknown format.
· Search field: uses "send whole search string" now.
· Selecting a new packet will select its packet header in information view now.
· Various other small fixes and optimizations.
November 6th, 2008· Optimized analyzers preferences.
· L2TP/ RADIUS value.strings corrections.
· Packet and Info View optimizations.
· Fixed Info and Raw View if no packets were found during search (displayed last selected packet now displaying nothing).
· General code clean ups.
· Improved packet raw views performance.
· Progress bar is reflecting real progress (bytes read and analyzed).
· Using sparkle for automatic application updates.
October 20th, 2008· new app icon.
· reworked document and plugin icons.
· refactored classes for apple naming conventions (third party plugins need recompile).
· refactored analyzer plugins.
· renamed sniffer to cpasniffD.
· new plugins protocol and reworked example plugin.
· added new notification:"CPAPluginProtocolsAndPortsDidChangeNotification" so that plugins ports can be edited by the user.
· L2TP and RADIUS analyzers: user can configure ports now
August 27th, 2008· Fixed default preferences toolbar item.
· Fixed a memory leak with split view.
· l2tp avps optimizations.
· l2tp avps datatypes fixes.
· l2tp avps respecting hidden flag now.
· Checking for truncated l2tp avps.
· Checking for truncated radius avps.
· Radius avps optimizations.
· All searches/filters, except "Packet contains string", should be case insensitive now.
August 4th, 2008· little GUI change (SplitView has a nicer bar/grip now).
· fixed a crash with PPPoED-tags.
· fixed some byte-order issues.
· fixed ARP-header (hw type, proto type, address length).
· fixed a rounding bug on "Time since first packet".
· fixed QuickStart option in IPv4 and TCP analyzer.
· fixed IPv6 version tag.
· fixed IPv6 traffic class.
· added IPv6 Routing extension.
· added IPv6 Hop-By-Hop options.
· added IPv6 Destination options.
· added IPv6 AH extension.
· added Mobility Header analyzer.
· added ESP analyzer (very basic).
· support for 6to4.
· support for IPv6-UDP/TCP checksum verification.
July 7th, 2008· MAC-resolution defaults are live updating packet view now.
· DNS-resolution defaults are live updating packet view now.
· IP-Analyzer will display hostname and IP if in DNS-resolve-mode.
· added general preferences (replacing "analysis" preferences").
· moved IP,TCP,UDP,ICMP,IGMP to own analyzer plugins.
· fixes some PPP-protocol short names.
· fixed some IP-protocol names.
· better handling of truncated packets.
· Basic IPv6 support.
· fixed a bug with selecting and displaying options in raw view.
· fixed a potential bug with RADIUS avps.
June 5th, 2008· fixed Mac OS 10.4 compatibility issues.
· fixed a bug with the default preferences (Packet View: only the time column did appear).
· fixed a bug with searching the time column.
May 26th, 2008· IPCP,CCP,LCP optimizations.
· CCP options fixes (there was a bug if more than one option was present).
· fixed a bug with IP-plugin coloring.
· fixed packet length column sorting.
· added "packet contains string" search.
· added "packet contains hex value" search.
· added "elapsed time column since the beginning of the capture".
· updating prefs for the new time column, if it doesnt work please add it manually (contextual menu on the packet view column).
· added L2TP VCCV Capability AVP(96).
· refactored lots of code - hope this introduced no bugs.
May 13th, 2008· plugins engine optimizations.
· plugins protocol coloring options.
· new ethernet plugin with MAC to vendor-ID resolution option.
· MAC to vendor-ID resolution option for packet view.
· fixed a memory leak.
· fixed a bug with the "fullPacket" option for plugins.
· reloading packet and information views data from datasources if plugins defaults did change.
· updated CPA_PlugInsProtocol.h and the example plugin source with coloring and notifications options.
March 24th, 2008· the preference filename did change - please redo your settings!
· searching for plugins in all possible domains/Application Support/CocoaPacketAnalyzer/PlugIns.
· fixed a potential crash with optional plugin methods.
· extended the plugins protocol.
· plugins can have a preferences sheet now.
· plugins can have .cpaplugin extension (will even get a cpaplugin icon).
· support for linktype PPP.
· L2TP and Radius plugins are using their own preferences.
· ARP, IP, PPP and Loopback Analyzers are plugins now.
· fixed types for linktype loopback and ppp.
· created a webpage for plugin development.
March 12th, 2008· CPA_sniffD: fixed "could not find any interfaces" bug (happend on some
· systems).
· CPA_sniffD: various bug fixes and optimizations.
· CPA_sniffD: added a kind of activity bar.
· Analyzer: fixed a bug with checksumming dns-names.
February 29th, 2008· no more CPA_sniffD zombies.
· linktype: human readable string instead of number.
· prefs: option not to compute checksums (cause of TCP checksum offload options on new gigabit adapters).
· now using pcap_findalldev() to figure out all active and usable interfaces for capturing. see new "scan"-button in capture prefs (you may need to authorize as an administrator).
· support for capturing from tun/tap devices (your driver must support this - not all do).
· support for loopback traffic.
· fixed an error with temp-file capturing (if authentication failed it reverted back to direct-file capturing).
· fixed some memory leaks.
February 11th, 2008· fixed a crash-bug with special chars in filename.
· changed default behavior not to open a new file, please select "Capture" from the menu or toolbar.
· capturing: capturing to a temporary file now, opening it as a new untitled document (to capture directly to a file please see the new option in "capture prefs"). Needs special testing - please report bugs and care for your files!
· fixed a possible dataloss bug while capturing to temp file.
· added checksum verification for TCP/IP headers.
· added "packet stepper".
· added TCP-options.
· optimized ICMP and IGMP-protocols, should be RFC conform now (need some example packet traces for better testing - someone?).
· fixed some byteorder issues.
· fixed some memory leaks.
· prepared localization (added tons of NSLocalizedStrings).
· optimized port-based-analysis (first looking for the destination port).
· LCP: displaying identification message string instead of hexvalue.
· CHAP/ PAP: fixed values.
· fixed potential ASCII-String crashes.
Find us on Google+
