Softpedia >Mac >Network/Admin >Cocoa Packet Analyzer >  Changelog

Cocoa Packet Analyzer Changelog

What's new in Cocoa Packet Analyzer 1.51

Oct 4, 2016
  • Fixed HelpViewer files.

New in Cocoa Packet Analyzer 1.50 (Sep 27, 2016)

  • updated libPCAP(1.7.4)
  • macOS Sierra compatibility fixes
  • general stability and compatibility fixes

New in Cocoa Packet Analyzer 1.31 (Aug 6, 2014)

  • fixed date format in packets view.
  • fixed Seq and Ack values in tcp-analyzer.
  • packet contains filter now case-insensitive.

New in Cocoa Packet Analyzer 1.30 (Apr 11, 2014)

  • Mac OS X 10.9 compatibility fixes.
  • ICMPv6 Router Advertisement bug fixed.

New in Cocoa Packet Analyzer 1.21 (Feb 18, 2013)

  • Hotfix for missing table columns in packet overview.

New in Cocoa Packet Analyzer 1.20 (Feb 16, 2013)

  • new and optimized packet-raw-view (thanks to Marco Rotatori!).
  • added capture live mode to monitor/ analyze packets already during capture.
  • optimized protocol coloring.
  • fixed number formatings in packets view.
  • fixed next packet toolbaritem.

New in Cocoa Packet Analyzer 1.12.1 (Sep 6, 2012)

  • updated all graphics to support high resolution (retina) displays.
  • operation queue warning bug fix for Mac OS X 10.5.

New in Cocoa Packet Analyzer 1.12 (Aug 2, 2012)

  • removed PPC compatibility.
  • fixed timezone localizations.
  • using Apple Mac Developer certificates for codesigning.
  • updated libPCAP.
  • updated list of ethernet vendor codes.
  • limited the filter field to 100 predicates - use the advanced find for all possible predicates.
  • added monitor mode option for wifi interfaces.
  • added plugin interface for ethertype protocol analyzer plugins.
  • added plugin interface for linktype protocol analyzer plugins.
  • added basic IEEE802.11 RadioTap protocol analyzer plugin.
  • added LinuxSLL protocol analyzer plugin.

New in Cocoa Packet Analyzer 1.11 (Nov 18, 2011)

  • fixed small memory leak.
  • optimized icons

New in Cocoa Packet Analyzer 1.10 (Nov 18, 2011)

  • added protocol statistics.
  • added importing of find queries.
  • added print toolbaritem.
  • optimized progress bar during file operations.
  • optimized validation of toolbar/menuitems during file operations.
  • fixed UTIs.
  • fixed online helpbook url.
  • fixed welcome window behavior under Mac OS X 10.6.

New in Cocoa Packet Analyzer 1.01 (Oct 18, 2011)

  • added new timezone localizations.
  • fixed initial window positioning.

New in Cocoa Packet Analyzer 0.75 (Sep 29, 2011)

  • Fixed wrong IP-dst address in IP4-analyzer (happend if hostname resolution was enabled).
  • Fixed a crash bug regarding hostname resolution.
  • Fixed a crash bug in german and japanese localization (happend at the end of a capture).
  • Added basic printing.

New in Cocoa Packet Analyzer 0.74 (Sep 8, 2011)

  • fixed capturing and scan interfaces.

New in Cocoa Packet Analyzer 0.73 (Sep 8, 2011)

  • fixed a crash on ASCII/UTF8/ISO data strings.
  • fixed a potential memory leak in cpasniffD.
  • fixed various DHCPv6Options.
  • updated the help book.
  • added SMI Network Management Private Enterprise Codes for RADIUS Vendor AVP.
  • added time zone support for packet dates.
  • added a basic MPLS protocol analyzer.
  • added advanced preferences with an option to revert to the default preferences.
  • added german localization.
  • added the possibility to localize the advanced find.
  • added the possibility to localize the document status bar.
  • added "visit website" menu-item in help-menu.
  • added help-buttons.
  • added opening progressbar to the document instead of a sheet.
  • 10.5: using commenCrypto instead of libssl for cpasniffD verification.
  • 10.6 and 10.7: using codesigning for cpasniffD verification.
  • 10.6 and 10.7: support for sudden termination.
  • 10.6 and 10.7: support for concurrent document open.
  • 10.6 and 10.7: optimized the find filter in packets-view using multiple cores.
  • 10.7 only: support for full screen window.
  • 10.7 only: suppprt for concurrent document write.

New in Cocoa Packet Analyzer 0.72 (Jun 6, 2011)

  • RADIUS-Analyzer: IPv6 enhancements.
  • added L2TP SMI Network Management Private Enterprise Codes.
  • refreshed ethernet OUI list.
  • new caputured bytes history view in capture sheet.
  • redesigned the welcome window.
  • small user interface changes.

New in Cocoa Packet Analyzer 0.71 (Apr 14, 2011)

  • DHCPv6: fixed memory bug.
  • ICMPv6: completed analyzer.
  • plugins preferences: pencil button brings up selected plugins preferences again.
  • better support for truncated packets in some analyzers.

New in Cocoa Packet Analyzer 0.70 (Dec 13, 2010)

  • IPv6CP: fixed coloring bug.
  • added DHCPv6 protocol.
  • fixed quicklookplugin.
  • added license.txt.

New in Cocoa Packet Analyzer 0.69 (Nov 16, 2010)

  • L2TP/ RADIUS: reanalyze packets when protocol ports changed.
  • notification to clear analyzing caches.
  • Updated ethernet vendor list.

New in Cocoa Packet Analyzer 0.68 (Nov 4, 2010)

  • fixed exported UTIs.
  • added PPP IPv6 Control Protocol.
  • added japanese localization.
  • The ICPMv6 analyzer is now part of the default installation. Please remove it from the custom plugins directory!

New in Cocoa Packet Analyzer 0.67 (Apr 9, 2010)

  • small 64-Bit fixes and cleanups.

New in Cocoa Packet Analyzer 0.66 (Nov 20, 2009)

  • fixed 'Open in new Window' menu bug (was opening the wrong window).

New in Cocoa Packet Analyzer 0.65 (Oct 25, 2009)

  • added an option to save find queries..
  • fixed some small memory leaks.
  • optimized document types.

New in Cocoa Packet Analyzer 0.64 (Sep 18, 2009)

  • Updated filter predicates.
  • Fixed Packet Time Delta column sorting.
  • Fixed Packet Received filtering.
  • New combined find function to search/filter traces.

New in Cocoa Packet Analyzer 0.63 (Sep 7, 2009)

  • Requires Mac OS X 10.5 (Leopard) or higher now.
  • Analyzer includes a x86_64 (Intel 64-bit) binary to support big tracefiles (if you want ppc64 let me know).
  • Using memory stack protection for enhanced security.
  • Using obj-c 2.0 formal protocol for PlugIns.
  • Fixed potential exception bugs.
  • Fixed flipped open document icon bug in welcome window.
  • Optimized cpasniffD.
  • Optimized handling of old preferences.

New in Cocoa Packet Analyzer 0.62 (Aug 13, 2009)

  • Fixed displaying bytes in raw view if selected protocol header is inside another protocol.
  • Fixed opening various single packet windows if one of them is already open.
  • Fixed default document window postion.
  • Fixed a crash bug (happend sometimes when quitting CPA and cpasniffD was still running).
  • Fixed Mac OS X 10.4 (Tiger) issues.

New in Cocoa Packet Analyzer 0.61 (Jun 29, 2009)

  • Fixed a potential buffer overflow in Ethernet and ARP analyzers.
  • Fixed "isDocumentEdited"-status on single packet windows.
  • Compatibility with 10.6 SDK.
  • Optimized progress sheets memory usage.
  • Capture documents append a timestamp to the filename to avoid duplicate tempfiles.
  • Added recent documents to welcome screen (incl. last opened date).

New in Cocoa Packet Analyzer 0.60.1 (May 31, 2009)

  • Fixed a bug while scanning for capture devices (devices which do not support BPF caused an error while scanning the devices list).

New in Cocoa Packet Analyzer 0.60 (May 31, 2009)

  • Fixed missing IPv6 in LoopbackAnalyzer.
  • Fixed resolving tcp/udp ports if src and dst ports are the same.
  • Capture sheet: stop-button is labeled "Cancel" to cancel the sheet, during capturing it will be labeled "Stop" to stop the capture.
  • Enhanced "missing capture interfaces"-warning with a direct scanning for interfaces option.
  • Updated MAC vendor (OUI) list.
  • Added scan-button to capture sheet to (re)scan for capture interfaces.
  • Added a "Capture"-menu with basic capturing functions.
  • Added constants to plugins protocol and fixed the notification names.
  • Added option to authenticate and start the capture daemon (cpasniffD) on app launch (so the user only has to authenticate once).
  • Added IPv4, IPv6 internet and PPP dst. addresses to capture interfaces.
  • Added a "Welcome Window" which opens on app start.

New in Cocoa Packet Analyzer 0.59 (Apr 24, 2009)

  • Fixed a crash bug in ICMP analyzer.
  • Fixed a crash bug in TCP analyzer.
  • Fixed long sequence/ ack numbers in TCP analyzer.
  • Renamed preferences to com.tastycocoabytes.CocoaPacketAnalyzer.
  • Disabled FeedbackReporter, for feedback and bug reporting please send me emails again.
  • Added value column to details view.
  • Added "Export Selected" menu item (exports selected packets to a new pcap file).
  • Added "Copy Value(s)" (contextual) menu to packets and details views, will copy value(s) only.

New in Cocoa Packet Analyzer 0.58 (Mar 31, 2009)

  • Improved memory usage if the capture sheet is cancelled without capturing anything.
  • Fixed a memory leak with the start/ stop capture buttons.
  • Fixed a memory leak with canceling authentication.
  • Fixed L2TP tunnelID value.
  • Fixed L2TP AVP headers were displayed wrong.
  • Fixed some 10.4 UI issues.
  • Fixed snaplength number formatter.
  • Updated quicklook plugin to support 64 bit (needed for snow leopard).
  • Support for "eth" file suffix.
  • Added an alternative user interface layout (Details and Raw View side by side under Packets View).
  • Added FeedbackReporter from Torsten Curdt so you can send me nice feedback reports (see Help-Menu).

New in Cocoa Packet Analyzer 0.57 (Mar 11, 2009)

  • Included a first version of a quicklook plugin.
  • Fixed memory leaks in CCP,LCP,L2TP and RADIUS analyzers.
  • Fixed missing LCP options.
  • Fixed missing IPv6 hop limit.
  • Fixed an issue with the status bar on Tiger.
  • Fixed wrong L2TP ControlMessageAVP value in protocol overview bug.
  • Fixed PPP protocol bug (was displaying wrong protocol in some cases).
  • Optimized performance and memory usage.
  • Hidden defaults option to analyze all protocols during opening (use "defaults write com.jf.CocoaPacketAnalyzer analyzeOnOpen -boolean YES" to enable).

New in Cocoa Packet Analyzer 0.56 (Feb 12, 2009)

  • Fixed a crash with IPv6 DNS resolving.
  • Fixed a bug with IPv6 options.
  • Fixed a bug with the capture sheet forgetting about the last selected interface.
  • Fixed a bug with LCP options.
  • Single packet windows will be closed if documents get closed.
  • Optimizations on packet opening.
  • Optimized performance and memory usage on search and column sorting.
  • Optimized status bar.

New in Cocoa Packet Analyzer 0.55 (Jan 25, 2009)

  • New analyzer plugins architecture, needed for all further enhancements!
  • Eliminated "first analysis thread" while opening files: just opening the file and analyzing the packetheader.
  • Analyzer plugins are used for all analysis now.
  • Analyzer plugins can add columns to the packet view now.
  • Analyzer plugins can add search predicates.
  • Added lots of new table columns.
  • View menu updated (columns submenu, open packet in new window, toolbar menuitems).
  • Open selected packet in a new window.
  • Drag out from information view.
  • Support for ethertype 802.1Q VLAN (0x8100,0x9100,0x9200,0x92300).
  • Information column containing protocol info from the last analyzed protocol (if supplied by the analyzer).
  • New method for saving files.
  • Fixed a possible crash when canceling opening files.
  • Fixed missing searchfield bug on 10.4.
  • Fixed a crash when opening files with unknown format.
  • Search field: uses "send whole search string" now.
  • Selecting a new packet will select its packet header in information view now.
  • Various other small fixes and optimizations.

New in Cocoa Packet Analyzer 0.54 (Nov 6, 2008)

  • Optimized analyzers preferences.
  • L2TP/ RADIUS value.strings corrections.
  • Packet and Info View optimizations.
  • Fixed Info and Raw View if no packets were found during search (displayed last selected packet now displaying nothing).
  • General code clean ups.
  • Improved packet raw views performance.
  • Progress bar is reflecting real progress (bytes read and analyzed).
  • Using sparkle for automatic application updates.

New in Cocoa Packet Analyzer 0.53 (Oct 20, 2008)

  • new app icon.
  • reworked document and plugin icons.
  • refactored classes for apple naming conventions (third party plugins need recompile).
  • refactored analyzer plugins.
  • renamed sniffer to cpasniffD.
  • new plugins protocol and reworked example plugin.
  • added new notification:"CPAPluginProtocolsAndPortsDidChangeNotification" so that plugins ports can be edited by the user.
  • L2TP and RADIUS analyzers: user can configure ports now

New in Cocoa Packet Analyzer 0.52 (Aug 27, 2008)

  • Fixed default preferences toolbar item.
  • Fixed a memory leak with split view.
  • l2tp avps optimizations.
  • l2tp avps datatypes fixes.
  • l2tp avps respecting hidden flag now.
  • Checking for truncated l2tp avps.
  • Checking for truncated radius avps.
  • Radius avps optimizations.
  • All searches/filters, except "Packet contains string", should be case insensitive now.

New in Cocoa Packet Analyzer 0.51 (Aug 4, 2008)

  • little GUI change (SplitView has a nicer bar/grip now).
  • fixed a crash with PPPoED-tags.
  • fixed some byte-order issues.
  • fixed ARP-header (hw type, proto type, address length).
  • fixed a rounding bug on "Time since first packet".
  • fixed QuickStart option in IPv4 and TCP analyzer.
  • fixed IPv6 version tag.
  • fixed IPv6 traffic class.
  • added IPv6 Routing extension.
  • added IPv6 Hop-By-Hop options.
  • added IPv6 Destination options.
  • added IPv6 AH extension.
  • added Mobility Header analyzer.
  • added ESP analyzer (very basic).
  • support for 6to4.
  • support for IPv6-UDP/TCP checksum verification.

New in Cocoa Packet Analyzer 0.5.0 (Jul 7, 2008)

  • MAC-resolution defaults are live updating packet view now.
  • DNS-resolution defaults are live updating packet view now.
  • IP-Analyzer will display hostname and IP if in DNS-resolve-mode.
  • added general preferences (replacing "analysis" preferences").
  • moved IP,TCP,UDP,ICMP,IGMP to own analyzer plugins.
  • fixes some PPP-protocol short names.
  • fixed some IP-protocol names.
  • better handling of truncated packets.
  • Basic IPv6 support.
  • fixed a bug with selecting and displaying options in raw view.
  • fixed a potential bug with RADIUS avps.

New in Cocoa Packet Analyzer 0.49.5 (Jun 5, 2008)

  • fixed Mac OS 10.4 compatibility issues.
  • fixed a bug with the default preferences (Packet View: only the time column did appear).
  • fixed a bug with searching the time column.

New in Cocoa Packet Analyzer 0.49.0 (May 26, 2008)

  • IPCP,CCP,LCP optimizations.
  • CCP options fixes (there was a bug if more than one option was present).
  • fixed a bug with IP-plugin coloring.
  • fixed packet length column sorting.
  • added "packet contains string" search.
  • added "packet contains hex value" search.
  • added "elapsed time column since the beginning of the capture".
  • updating prefs for the new time column, if it doesnt work please add it manually (contextual menu on the packet view column).
  • added L2TP VCCV Capability AVP(96).
  • refactored lots of code - hope this introduced no bugs.

New in Cocoa Packet Analyzer 0.48.0 (May 13, 2008)

  • plugins engine optimizations.
  • plugins protocol coloring options.
  • new ethernet plugin with MAC to vendor-ID resolution option.
  • MAC to vendor-ID resolution option for packet view.
  • fixed a memory leak.
  • fixed a bug with the "fullPacket" option for plugins.
  • reloading packet and information views data from datasources if plugins defaults did change.
  • updated CPA_PlugInsProtocol.h and the example plugin source with coloring and notifications options.

New in Cocoa Packet Analyzer 0.47.0 (Mar 24, 2008)

  • the preference filename did change - please redo your settings!
  • searching for plugins in all possible domains/Application Support/CocoaPacketAnalyzer/PlugIns.
  • fixed a potential crash with optional plugin methods.
  • extended the plugins protocol.
  • plugins can have a preferences sheet now.
  • plugins can have .cpaplugin extension (will even get a cpaplugin icon).
  • support for linktype PPP.
  • L2TP and Radius plugins are using their own preferences.
  • ARP, IP, PPP and Loopback Analyzers are plugins now.
  • fixed types for linktype loopback and ppp.
  • created a webpage for plugin development.

New in Cocoa Packet Analyzer 0.46.5 (Mar 12, 2008)

  • CPA_sniffD: fixed "could not find any interfaces" bug (happend on some
  • systems).
  • CPA_sniffD: various bug fixes and optimizations.
  • CPA_sniffD: added a kind of activity bar.
  • Analyzer: fixed a bug with checksumming dns-names.

New in Cocoa Packet Analyzer 0.46 (Feb 29, 2008)

  • no more CPA_sniffD zombies.
  • linktype: human readable string instead of number.
  • prefs: option not to compute checksums (cause of TCP checksum offload options on new gigabit adapters).
  • now using pcap_findalldev() to figure out all active and usable interfaces for capturing. see new "scan"-button in capture prefs (you may need to authorize as an administrator).
  • support for capturing from tun/tap devices (your driver must support this - not all do).
  • support for loopback traffic.
  • fixed an error with temp-file capturing (if authentication failed it reverted back to direct-file capturing).
  • fixed some memory leaks.

New in Cocoa Packet Analyzer 0.45 (Feb 11, 2008)

  • fixed a crash-bug with special chars in filename.
  • changed default behavior not to open a new file, please select "Capture" from the menu or toolbar.
  • capturing: capturing to a temporary file now, opening it as a new untitled document (to capture directly to a file please see the new option in "capture prefs"). Needs special testing - please report bugs and care for your files!
  • fixed a possible dataloss bug while capturing to temp file.
  • added checksum verification for TCP/IP headers.
  • added "packet stepper".
  • added TCP-options.
  • optimized ICMP and IGMP-protocols, should be RFC conform now (need some example packet traces for better testing - someone?).
  • fixed some byteorder issues.
  • fixed some memory leaks.
  • prepared localization (added tons of NSLocalizedStrings).
  • optimized port-based-analysis (first looking for the destination port).
  • LCP: displaying identification message string instead of hexvalue.
  • CHAP/ PAP: fixed values.
  • fixed potential ASCII-String crashes.