<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="44">
<package pkgid="b869bba2517288fc3ddc6cae2b0d55043c6241233256deb17c9ecde4b0c829bb" name="cryptopant" arch="src">
  <version epoch="0" ver="1.3.1" rel="150600.11.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1543492800">- Initial v1.1.0 code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1560945600">- Update to v1.2.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1569931200">- Update to v1.2.1</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1710936000">- Update to v1.3.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1712836800">- Update to v1.3.1</changelog>
</package>
<package pkgid="d1ffa553f599ec6121ad0ce0f73f8d35bff0ec32201703e4338543ce5a120416" name="cryptopant-devel" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="150600.11.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1543492800">- Initial v1.1.0 code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1560945600">- Update to v1.2.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1569931200">- Update to v1.2.1</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1710936000">- Update to v1.3.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1712836800">- Update to v1.3.1</changelog>
</package>
<package pkgid="78489209ff7670ab29a6f8ef30d1da94aff1e974c524e288088d0cd8971272b7" name="cryptopant-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="150600.11.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1543492800">- Initial v1.1.0 code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1560945600">- Update to v1.2.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1569931200">- Update to v1.2.1</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1710936000">- Update to v1.3.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1712836800">- Update to v1.3.1</changelog>
</package>
<package pkgid="7adcf435f6c228166069df0645a7ac0785dfdbe530acc8dbb98df83819bdde37" name="dnscap" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.0-1" date="1591012800">- Release 1.11.0
  * This release includes a new plugin called `eventlog`, contributed
    by Byron Darrah (@ByronDarrah), output DNS activity as log events,
    including answers to A and AAAA queries.
  * Other changes includes compile warning and code analysis fixes.
  * Commits:
    382eac4 COPR
    4c03650 Compile warn
    21d6a67 Slight change -- wording now matches usage() output.
    dd19b0b Added the eventlog.so plugin...
    1ebf504 Added new dnscap plugin: evenlog.so...
    f3f9aaa Compile warnings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.1-1" date="1597924800">- Release 1.11.1
  * This release fixes a lot of issues found by code analysis, adds a
    explicit memory zeroing function to remove account information (read
    when dropping privileges) and adds code coverage reporting.
  * The `dnscap_memzero()` will use `explicit_bzero()` on FreeBSD and
    OpenBSD, or `memset_s()` (if supported), otherwise it will manually
    set the memory to zero. This will hopefully ensure that the memory
    is zeroed as compilers can optimize out `memset()`'s that is just
    before `free()`.
  * The plugins exit code for the help option `-?` has been changed to 0
    to have the same as `dnscap -?`.
  * Commits:
    d9747ee memzero
    1cf17c6 Coverage
    19c7120 Coverage
    7435676 Sonarcloud
    928e181 Sonarcloud
    ca4afd0 Sonarcloud
    028f5e0 Badges
    db0d6a1 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.12.0-1" date="1603368000">- Release 1.12.0
  * This release fixes the handling of `-?` option for dnscap and all plugins,
    previously the handling varied between places and depending on `getopt()`
    implementation an invalid option could return the wrong exit code.
  * Other changes:
    - Fix typo in configure help text
    - `plugins/anonmask`: Fix typo in help text
    - `plugins/rzkeychange`:
      - Add `-D`, dry run mode, for testing
      - Fix handling of `-a` and error on too many
  * KNOWN ISSUES:
    On OpenBSD the system library libc exports the same symbols as libbind
    does and this causes runtime warnings. Until now this has not caused any
    known problems but is now also causing segfaults if the packet filter used
    (BPF) includes IPv6 addresses.
    On all other platforms OARC supports, these symbols are macros and in so
    should not cause any problem.
  * Commits:
    ee478c0 Known issues
    2f9d957 Tests
    3c663a2 Tests
    c88efc5 rzkeychange test
    f062f33 Tests</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.0-1" date="1613131200">- Release 2.0.0
  * This major release contains three backward incompatible changes, two
    new command line options and a completely restructured man-page(!),
    please read the change notes carefully before upgrading!
  * The first backward incompatible change has to do with the removal of
    libbind dependency. This library was causing segfaults on OpenBSD due to
    shared (and overwritten) symbols with OpenBSD's libc.
    It was replaced with LDNS and LDNS renders domain names as Fully
    Qualified Domain Names (FQDN, the trailing dot!) so every output of a
    domain name has been changed to a FQDN.
    This also changes `-X`/`-x`, which will now match against FQDNs.
  * The second backward incompatible change is that `-6` has been removed.
    This was used to alter the BPF in order to "fix" it, dnscap adds
    specific filters to IP and UDP headers which does not work for IPv6
    traffic.
    The generated BPF has been changed to allow IPv6 to always pass, making
    the option obsolete. IPv6 filtering is then done in dnscap.
  * The last backward incompatible change has to do with the output format
    of `-g` related to EDNS0 and is now more consistent with the rest of
    the parsable output:
    - No more spaces in the output
    - Fix incorrect `\` and extra empty new-line
    - All EDNS0 options are added after `edns0[...]` using comma separation, example: `edns0[],edns0opt[],...`
    - Client Subnet format: `edns0opt[ECS,family=nn,source=nn,scope=nn,addr=...]`
    - Unknown/unsupported code: `edns0opt[code=nn,codelen=nn]`
    - Parsing error messages have changed, they came from libbind, now comes from LDNS
  * New options:
    - Add `-q` and `-Q` to filter on matched/not matched QTYPE
  * Bugfixes:
    - Fix memory leak in EDNS0 ECS address parsing
    - `network`: Fix sonarcloud issues, potential `memcpy()` of null pointer
  * Other changes:
    - Fix CBOR output inclusion, LDNS is always available now
    - Add macros for Apple and Windows endian functions
    - Restructure and correct the man-page
  * Commits:
    557e5f5 man-page
    025529f v6bug, interval
    37b79e9 FQDN
    ebcf434 QTYPE match, args, tests
    0cb5562 v6bug
    75f6115 Endian
    aaeb213 Sonarcloud
    8685946 CBOR output
    3e26802 Sonarcloud
    30aa366 libbind
    3f94d0b Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.1-1" date="1615464000">- Release 2.0.1
  * Fixed incorrect line break in eventlog's (plugin) output.
  * Commits:
    5df363c remove trailing newline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.2-1" date="1646740800">- Release 2.0.2
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    memory leaks when using `-x`/`-X` regexp filtering due to incorrect
    usage of LDNS library.
  * Other minor changes:
    - Clarify what happens if you don't specify `-i` and add information about `any` and `all`
    - Update debhelper compatibility level to 10
  * Commits:
    a8925a7 ldns_pkt_all() clones RRs which need to be freed with ldns_rr_list_deep_free()
    5104814 Doc
    30c36aa debhelper
    4ae4356 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.3-1" date="1655121600">- Release 2.0.3
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    an issue with filtering where DNS messages without a question section
    would bypass it.
  * Commits:
    ba2112c Fix COPR
    0e019ab Filtering
    c7e1c8f Refactor and fix qtype and qname matching/filtering.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.0-1" date="1662724800">- Release 2.1.0
  * This release adds a new option (`-o pid_file=&lt;file&gt;`) to specify a PID
    file when running as daemon, corrects handling of LDNS include files
    for some plugins and updates the Root Server Scaling Measurement (RSSM)
    plugin w.r.t. the upcoming version 5 of RSSAC002 specifications.
  * The RSSM plugin can now optionally generate `label-count` metric. This
    is enabled with `-L` and is tagged as `rssac002v5-draft` until v5 is
    finalized.
    The merge tool `dnscap-rssm-rssac002` has also been updated because of
    this, there is now `--skip-unsupported` to skip all unsupported
    RSSAC002 version metrics instead of `die()`'ing.
  * Commits:
    ca7707d RSSAC002v5 label-count metric
    3ebee80 Made label count metric optional
    41b029a Adding support for label acount metric
    799c3fe Missing includes
    7089f12 PID file</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.1-1" date="1675425600">- Release 2.1.1
  * This release includes fixes to TCP state code, anonymizing plugins and
    handling of EDNS extended error code.
    - Ken Renards @kdrenard (PR #275) fixed handling of EDNS extended error
      code, the previous code looked at `arcount` but ldns "consumes" OPT
      records so the count could be zero even with existing extended error
      code.
    - Changed anonymizing plugins to anonymize both sending and receiving
      IP address if both used the server port, part of issue #276 reported
      by Duane Wessels @wessels. This fixes situations where clients
      weren't anonymize because they sent using that port.
    - Fixed multiple issues with garbage collection in TCP state handling.
      It was reusing a pointer that was meant to return the current TCP
      state so it could return the wrong state when garbage collection
      was triggered.
      It also just unlinked stale states and didn't free them, new code
      uses the discard function so released state is also tagged as
      "gc stale".
      Lastly the discard function was fixed to clear the current TCP state
      pointer used by plugins if the discarded state was it.
  * Commits:
    7f2ddcf Copyright
    fd5b744 CodeQL alerts
    726d241 TCP state GC
    dff421e Anonymize clients
    2eb8489 Add CodeQL workflow for GitHub code scanning
    c5a0919 Better test for presence of EDNS option with extended error code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.2-1" date="1686830400">- Release 2.1.2
  * This release fixes reusing of TCP state during an out-of-memory event,
    the reused structure was not cleared of old information. And fixes
    compatibility with OpenSSL v3.0+ due to deprecated functions.
  * Commits:
    756f78a OpenSSL 3.0+
    d2bd12f tcpstate on out of memory</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.3-1" date="1687867200">- Release 2.1.3
  * This release fixes a memory leak when using pattern matching options
    `-x` or `-X`, the LDNS packet was not freed correctly.
  * The processing of the LDNS packet during matching has also been
    improved.
  * Commits:
    3990795 Test
    ee5d554 Pattern match</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.0-1" date="1692792000">- Release 2.2.0
  * This release adds anonymization of EDNS Client Subnet to all
    anonymizer plugins and improves TCP state handling by adding a hash
    table for lookup rather than walking a list.
  * Plugins that anonymize can now take two new options:
    - `-e`: also anonymize EDNS Client Subnet
    - `-E`: only anonymize EDNS Client Subnet
  * Other changes:
    - Cleanup and improvements to building and testing
    - Mention PowerTools repository for building on CentOS etc
    - Remove old workarounds in tests before #133
  * Commits:
    d4e0b2c TCP state hash table
    1ea8d3f Doc
    12ea061 EDNS Client Subnet anonymization
    c9ed7be pcap-dist
    b76f745 Cleanup
    7682d41 hashtbl</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.1-1" date="1725969600">- Release 2.2.1
  * This patch release fixes the BPF to correct capture ICMPv6, a typo in
    the filter had it matching "ip" and not "ip6".
  * Other changes are updates to GitHub workflows and man-pages.
  * Commits:
    ea82cd1 Copyright
    aa14a9f ICMP BPF filter
    6ef17e2 Badges
    6722677 Workflow
    1cb22f0 Man-page opt, Dumper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.0-1" date="1744891200">- Release 2.3.0
  * This release adds support for Linux cooked v2 link-type, a new output
    format, a new plugin and fixes a couple of issues.
  * The new output format `tcpdns` can be used to generate a file with the
    DNS as a TCP stream, first 16bit size (network order) then the DNS
    message, which is compatible with `dnsperf -B`.
  * The new plugin `asudp` can be used to rewrite outgoing packet by taking
    the DNS that's found and construct UDP packets from it.
  * Other changes:
    - Fix #314:
      - man-page: Clarify that `pktsize` is shown before parsing the IP packet
      - `-g`: Quote `,` characters
    - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
    - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
    - Handle extension function pointers better
    - Clarify that `-C` counts uncompressed output
    - Block PCAP output if TCP reassemble is used
    - Increase maximum DNS messages in a reassembled TCP message
    - Add new extension interface for setting output packet
    - Update pcap-thread to v4.1.0
  * Commits:
    e689bc8 pcap-thread v4.1.0
    29d184b DLT_LINUX_SLL2
    ba793a9 Fixes, asudp plugin, tcpdns output format
    6c133d4 Ethernet padding
    420548a Diag output
    8b92a52 SPEC
    a3fb1dd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.1-1" date="1745496000">- Release 2.3.1
  * This patch release fixes issues on 32bit systems when they are using
    64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
    to require libpcap with `DLT_LINUX_SLL2` support.
  * Commits:
    a5e9a4a pcap-thread v4.1.1
    731d9e0 Add support for 64bit time structures on 32bit systems</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.0-1" date="1750680000">- Release 2.4.0
  * This release brings support for reading compressed PCAPs, a few new
    plugin extensions and updates to autotools.
  * Changes:
    - Add `CHANGES` to docs
    - Update autotools requirement to 2.69 and fix deprecation warnings
    - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
    - New plugin extensions:
      - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
      - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
  * Commits:
    f7e4cad SLE/openSUSE lz4
    b30d82f Autotools, compressed PCAPs, plugin extensions
    ac7f37b CHANGES</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.1-1" date="1750939200">- Release 2.4.1
  * This patch release fixes a bug introduced in v2.4.0 where writing gziped
    PCAPs broke, and readds sending timestamp to plugins close function which
    was incorrectly removed in v2.2.1.
  * Changes:
    - Remove obsolete code with zlib being required
    - Add gz write test
    - Fix #334:
      - Readd timestamp when calling plugin close
      - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
  * Commits:
    9abd07d plugin close
    b10f923 gz write</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1761048000">- Release 2.5.0
  * This release adds two new plugin extensions, rewrites the compressed PCAP
    reader, removes a PCAP header check to not drop valid packets and fixes
    problems with `-e` filtering.
  * New plugin extensions:
    - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
    - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
  * Compressed PCAP reader:
    - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
    - Add support to read bzip2 PCAPs
    - New option `-o override_compress_extension=&lt;ext&gt;` to force a specific compression when reading
  * Fixes:
    - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
    - `-e`: Fix #356
      - Provide usage warning instead of assert'ing on empty option
      - Remove confusing part of documentation (may still be a bit confusing...)
      - Fix filtering where TC=1 and no rcode
  * Other changes:
    - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
    - Update email address, remove old obsolete list address
    - Various fixes for CI and code coverage
  * Commits:
    6fb07d6 -e filter
    66a26b9 fix scan-build
    43f1137 CI updates
    8e22e9f CI
    90402ac bsd builds
    ba531eb slim deps
    d401d81 builds
    219d05d ci
    6795ad3 Migrate to Codeberg
    09747ce RPM
    81f142c Compress read
    e583788 Fix dropped packets
    a042145 proper fix gcov
    b1741d4 fix gcov
    6914dc9 breakloop
    07917b4 C++
    0ebdffc C++
    5b768e5 Email</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1769428800">- Release 2.5.1
  * This patch release fixes `assert()` usage for compatibility with newer
    libc versions and handles byte order correctly in cryptopan plugin to
    work for big endian systems.
  * Commits:
    ac12e05 copyright
    ed3ea49 cryptopan reference implementation
    997f047 cryptopan endian
    fa3cabb assert</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1772020800">- Release 2.5.2
  * This patch release fixes compatibility with GNU/Hurd and fixes running
    tests in parallel.
  * Commits:
    ea9c431 GNU/Hurd
    67800d4 Paralell tests take 2
    57dd3e0 Plugins tests
    f5246e4 strptime</changelog>
</package>
<package pkgid="34c554c221d0b41909dc7501bc3ed2c17b35b794fa748fd0a516db53e38421b7" name="dnscap" arch="src">
  <version epoch="0" ver="2.5.2" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.0-1" date="1591012800">- Release 1.11.0
  * This release includes a new plugin called `eventlog`, contributed
    by Byron Darrah (@ByronDarrah), output DNS activity as log events,
    including answers to A and AAAA queries.
  * Other changes includes compile warning and code analysis fixes.
  * Commits:
    382eac4 COPR
    4c03650 Compile warn
    21d6a67 Slight change -- wording now matches usage() output.
    dd19b0b Added the eventlog.so plugin...
    1ebf504 Added new dnscap plugin: evenlog.so...
    f3f9aaa Compile warnings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.1-1" date="1597924800">- Release 1.11.1
  * This release fixes a lot of issues found by code analysis, adds a
    explicit memory zeroing function to remove account information (read
    when dropping privileges) and adds code coverage reporting.
  * The `dnscap_memzero()` will use `explicit_bzero()` on FreeBSD and
    OpenBSD, or `memset_s()` (if supported), otherwise it will manually
    set the memory to zero. This will hopefully ensure that the memory
    is zeroed as compilers can optimize out `memset()`'s that is just
    before `free()`.
  * The plugins exit code for the help option `-?` has been changed to 0
    to have the same as `dnscap -?`.
  * Commits:
    d9747ee memzero
    1cf17c6 Coverage
    19c7120 Coverage
    7435676 Sonarcloud
    928e181 Sonarcloud
    ca4afd0 Sonarcloud
    028f5e0 Badges
    db0d6a1 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.12.0-1" date="1603368000">- Release 1.12.0
  * This release fixes the handling of `-?` option for dnscap and all plugins,
    previously the handling varied between places and depending on `getopt()`
    implementation an invalid option could return the wrong exit code.
  * Other changes:
    - Fix typo in configure help text
    - `plugins/anonmask`: Fix typo in help text
    - `plugins/rzkeychange`:
      - Add `-D`, dry run mode, for testing
      - Fix handling of `-a` and error on too many
  * KNOWN ISSUES:
    On OpenBSD the system library libc exports the same symbols as libbind
    does and this causes runtime warnings. Until now this has not caused any
    known problems but is now also causing segfaults if the packet filter used
    (BPF) includes IPv6 addresses.
    On all other platforms OARC supports, these symbols are macros and in so
    should not cause any problem.
  * Commits:
    ee478c0 Known issues
    2f9d957 Tests
    3c663a2 Tests
    c88efc5 rzkeychange test
    f062f33 Tests</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.0-1" date="1613131200">- Release 2.0.0
  * This major release contains three backward incompatible changes, two
    new command line options and a completely restructured man-page(!),
    please read the change notes carefully before upgrading!
  * The first backward incompatible change has to do with the removal of
    libbind dependency. This library was causing segfaults on OpenBSD due to
    shared (and overwritten) symbols with OpenBSD's libc.
    It was replaced with LDNS and LDNS renders domain names as Fully
    Qualified Domain Names (FQDN, the trailing dot!) so every output of a
    domain name has been changed to a FQDN.
    This also changes `-X`/`-x`, which will now match against FQDNs.
  * The second backward incompatible change is that `-6` has been removed.
    This was used to alter the BPF in order to "fix" it, dnscap adds
    specific filters to IP and UDP headers which does not work for IPv6
    traffic.
    The generated BPF has been changed to allow IPv6 to always pass, making
    the option obsolete. IPv6 filtering is then done in dnscap.
  * The last backward incompatible change has to do with the output format
    of `-g` related to EDNS0 and is now more consistent with the rest of
    the parsable output:
    - No more spaces in the output
    - Fix incorrect `\` and extra empty new-line
    - All EDNS0 options are added after `edns0[...]` using comma separation, example: `edns0[],edns0opt[],...`
    - Client Subnet format: `edns0opt[ECS,family=nn,source=nn,scope=nn,addr=...]`
    - Unknown/unsupported code: `edns0opt[code=nn,codelen=nn]`
    - Parsing error messages have changed, they came from libbind, now comes from LDNS
  * New options:
    - Add `-q` and `-Q` to filter on matched/not matched QTYPE
  * Bugfixes:
    - Fix memory leak in EDNS0 ECS address parsing
    - `network`: Fix sonarcloud issues, potential `memcpy()` of null pointer
  * Other changes:
    - Fix CBOR output inclusion, LDNS is always available now
    - Add macros for Apple and Windows endian functions
    - Restructure and correct the man-page
  * Commits:
    557e5f5 man-page
    025529f v6bug, interval
    37b79e9 FQDN
    ebcf434 QTYPE match, args, tests
    0cb5562 v6bug
    75f6115 Endian
    aaeb213 Sonarcloud
    8685946 CBOR output
    3e26802 Sonarcloud
    30aa366 libbind
    3f94d0b Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.1-1" date="1615464000">- Release 2.0.1
  * Fixed incorrect line break in eventlog's (plugin) output.
  * Commits:
    5df363c remove trailing newline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.2-1" date="1646740800">- Release 2.0.2
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    memory leaks when using `-x`/`-X` regexp filtering due to incorrect
    usage of LDNS library.
  * Other minor changes:
    - Clarify what happens if you don't specify `-i` and add information about `any` and `all`
    - Update debhelper compatibility level to 10
  * Commits:
    a8925a7 ldns_pkt_all() clones RRs which need to be freed with ldns_rr_list_deep_free()
    5104814 Doc
    30c36aa debhelper
    4ae4356 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.3-1" date="1655121600">- Release 2.0.3
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    an issue with filtering where DNS messages without a question section
    would bypass it.
  * Commits:
    ba2112c Fix COPR
    0e019ab Filtering
    c7e1c8f Refactor and fix qtype and qname matching/filtering.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.0-1" date="1662724800">- Release 2.1.0
  * This release adds a new option (`-o pid_file=&lt;file&gt;`) to specify a PID
    file when running as daemon, corrects handling of LDNS include files
    for some plugins and updates the Root Server Scaling Measurement (RSSM)
    plugin w.r.t. the upcoming version 5 of RSSAC002 specifications.
  * The RSSM plugin can now optionally generate `label-count` metric. This
    is enabled with `-L` and is tagged as `rssac002v5-draft` until v5 is
    finalized.
    The merge tool `dnscap-rssm-rssac002` has also been updated because of
    this, there is now `--skip-unsupported` to skip all unsupported
    RSSAC002 version metrics instead of `die()`'ing.
  * Commits:
    ca7707d RSSAC002v5 label-count metric
    3ebee80 Made label count metric optional
    41b029a Adding support for label acount metric
    799c3fe Missing includes
    7089f12 PID file</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.1-1" date="1675425600">- Release 2.1.1
  * This release includes fixes to TCP state code, anonymizing plugins and
    handling of EDNS extended error code.
    - Ken Renards @kdrenard (PR #275) fixed handling of EDNS extended error
      code, the previous code looked at `arcount` but ldns "consumes" OPT
      records so the count could be zero even with existing extended error
      code.
    - Changed anonymizing plugins to anonymize both sending and receiving
      IP address if both used the server port, part of issue #276 reported
      by Duane Wessels @wessels. This fixes situations where clients
      weren't anonymize because they sent using that port.
    - Fixed multiple issues with garbage collection in TCP state handling.
      It was reusing a pointer that was meant to return the current TCP
      state so it could return the wrong state when garbage collection
      was triggered.
      It also just unlinked stale states and didn't free them, new code
      uses the discard function so released state is also tagged as
      "gc stale".
      Lastly the discard function was fixed to clear the current TCP state
      pointer used by plugins if the discarded state was it.
  * Commits:
    7f2ddcf Copyright
    fd5b744 CodeQL alerts
    726d241 TCP state GC
    dff421e Anonymize clients
    2eb8489 Add CodeQL workflow for GitHub code scanning
    c5a0919 Better test for presence of EDNS option with extended error code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.2-1" date="1686830400">- Release 2.1.2
  * This release fixes reusing of TCP state during an out-of-memory event,
    the reused structure was not cleared of old information. And fixes
    compatibility with OpenSSL v3.0+ due to deprecated functions.
  * Commits:
    756f78a OpenSSL 3.0+
    d2bd12f tcpstate on out of memory</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.3-1" date="1687867200">- Release 2.1.3
  * This release fixes a memory leak when using pattern matching options
    `-x` or `-X`, the LDNS packet was not freed correctly.
  * The processing of the LDNS packet during matching has also been
    improved.
  * Commits:
    3990795 Test
    ee5d554 Pattern match</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.0-1" date="1692792000">- Release 2.2.0
  * This release adds anonymization of EDNS Client Subnet to all
    anonymizer plugins and improves TCP state handling by adding a hash
    table for lookup rather than walking a list.
  * Plugins that anonymize can now take two new options:
    - `-e`: also anonymize EDNS Client Subnet
    - `-E`: only anonymize EDNS Client Subnet
  * Other changes:
    - Cleanup and improvements to building and testing
    - Mention PowerTools repository for building on CentOS etc
    - Remove old workarounds in tests before #133
  * Commits:
    d4e0b2c TCP state hash table
    1ea8d3f Doc
    12ea061 EDNS Client Subnet anonymization
    c9ed7be pcap-dist
    b76f745 Cleanup
    7682d41 hashtbl</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.1-1" date="1725969600">- Release 2.2.1
  * This patch release fixes the BPF to correct capture ICMPv6, a typo in
    the filter had it matching "ip" and not "ip6".
  * Other changes are updates to GitHub workflows and man-pages.
  * Commits:
    ea82cd1 Copyright
    aa14a9f ICMP BPF filter
    6ef17e2 Badges
    6722677 Workflow
    1cb22f0 Man-page opt, Dumper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.0-1" date="1744891200">- Release 2.3.0
  * This release adds support for Linux cooked v2 link-type, a new output
    format, a new plugin and fixes a couple of issues.
  * The new output format `tcpdns` can be used to generate a file with the
    DNS as a TCP stream, first 16bit size (network order) then the DNS
    message, which is compatible with `dnsperf -B`.
  * The new plugin `asudp` can be used to rewrite outgoing packet by taking
    the DNS that's found and construct UDP packets from it.
  * Other changes:
    - Fix #314:
      - man-page: Clarify that `pktsize` is shown before parsing the IP packet
      - `-g`: Quote `,` characters
    - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
    - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
    - Handle extension function pointers better
    - Clarify that `-C` counts uncompressed output
    - Block PCAP output if TCP reassemble is used
    - Increase maximum DNS messages in a reassembled TCP message
    - Add new extension interface for setting output packet
    - Update pcap-thread to v4.1.0
  * Commits:
    e689bc8 pcap-thread v4.1.0
    29d184b DLT_LINUX_SLL2
    ba793a9 Fixes, asudp plugin, tcpdns output format
    6c133d4 Ethernet padding
    420548a Diag output
    8b92a52 SPEC
    a3fb1dd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.1-1" date="1745496000">- Release 2.3.1
  * This patch release fixes issues on 32bit systems when they are using
    64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
    to require libpcap with `DLT_LINUX_SLL2` support.
  * Commits:
    a5e9a4a pcap-thread v4.1.1
    731d9e0 Add support for 64bit time structures on 32bit systems</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.0-1" date="1750680000">- Release 2.4.0
  * This release brings support for reading compressed PCAPs, a few new
    plugin extensions and updates to autotools.
  * Changes:
    - Add `CHANGES` to docs
    - Update autotools requirement to 2.69 and fix deprecation warnings
    - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
    - New plugin extensions:
      - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
      - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
  * Commits:
    f7e4cad SLE/openSUSE lz4
    b30d82f Autotools, compressed PCAPs, plugin extensions
    ac7f37b CHANGES</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.1-1" date="1750939200">- Release 2.4.1
  * This patch release fixes a bug introduced in v2.4.0 where writing gziped
    PCAPs broke, and readds sending timestamp to plugins close function which
    was incorrectly removed in v2.2.1.
  * Changes:
    - Remove obsolete code with zlib being required
    - Add gz write test
    - Fix #334:
      - Readd timestamp when calling plugin close
      - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
  * Commits:
    9abd07d plugin close
    b10f923 gz write</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1761048000">- Release 2.5.0
  * This release adds two new plugin extensions, rewrites the compressed PCAP
    reader, removes a PCAP header check to not drop valid packets and fixes
    problems with `-e` filtering.
  * New plugin extensions:
    - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
    - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
  * Compressed PCAP reader:
    - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
    - Add support to read bzip2 PCAPs
    - New option `-o override_compress_extension=&lt;ext&gt;` to force a specific compression when reading
  * Fixes:
    - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
    - `-e`: Fix #356
      - Provide usage warning instead of assert'ing on empty option
      - Remove confusing part of documentation (may still be a bit confusing...)
      - Fix filtering where TC=1 and no rcode
  * Other changes:
    - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
    - Update email address, remove old obsolete list address
    - Various fixes for CI and code coverage
  * Commits:
    6fb07d6 -e filter
    66a26b9 fix scan-build
    43f1137 CI updates
    8e22e9f CI
    90402ac bsd builds
    ba531eb slim deps
    d401d81 builds
    219d05d ci
    6795ad3 Migrate to Codeberg
    09747ce RPM
    81f142c Compress read
    e583788 Fix dropped packets
    a042145 proper fix gcov
    b1741d4 fix gcov
    6914dc9 breakloop
    07917b4 C++
    0ebdffc C++
    5b768e5 Email</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1769428800">- Release 2.5.1
  * This patch release fixes `assert()` usage for compatibility with newer
    libc versions and handles byte order correctly in cryptopan plugin to
    work for big endian systems.
  * Commits:
    ac12e05 copyright
    ed3ea49 cryptopan reference implementation
    997f047 cryptopan endian
    fa3cabb assert</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1772020800">- Release 2.5.2
  * This patch release fixes compatibility with GNU/Hurd and fixes running
    tests in parallel.
  * Commits:
    ea9c431 GNU/Hurd
    67800d4 Paralell tests take 2
    57dd3e0 Plugins tests
    f5246e4 strptime</changelog>
</package>
<package pkgid="02f5f770bd21846500c930f7846e202e6245b4516dbeca282c9e7f0e5f259537" name="dnscap" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.0-1" date="1591012800">- Release 1.11.0
  * This release includes a new plugin called `eventlog`, contributed
    by Byron Darrah (@ByronDarrah), output DNS activity as log events,
    including answers to A and AAAA queries.
  * Other changes includes compile warning and code analysis fixes.
  * Commits:
    382eac4 COPR
    4c03650 Compile warn
    21d6a67 Slight change -- wording now matches usage() output.
    dd19b0b Added the eventlog.so plugin...
    1ebf504 Added new dnscap plugin: evenlog.so...
    f3f9aaa Compile warnings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.11.1-1" date="1597924800">- Release 1.11.1
  * This release fixes a lot of issues found by code analysis, adds a
    explicit memory zeroing function to remove account information (read
    when dropping privileges) and adds code coverage reporting.
  * The `dnscap_memzero()` will use `explicit_bzero()` on FreeBSD and
    OpenBSD, or `memset_s()` (if supported), otherwise it will manually
    set the memory to zero. This will hopefully ensure that the memory
    is zeroed as compilers can optimize out `memset()`'s that is just
    before `free()`.
  * The plugins exit code for the help option `-?` has been changed to 0
    to have the same as `dnscap -?`.
  * Commits:
    d9747ee memzero
    1cf17c6 Coverage
    19c7120 Coverage
    7435676 Sonarcloud
    928e181 Sonarcloud
    ca4afd0 Sonarcloud
    028f5e0 Badges
    db0d6a1 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.12.0-1" date="1603368000">- Release 1.12.0
  * This release fixes the handling of `-?` option for dnscap and all plugins,
    previously the handling varied between places and depending on `getopt()`
    implementation an invalid option could return the wrong exit code.
  * Other changes:
    - Fix typo in configure help text
    - `plugins/anonmask`: Fix typo in help text
    - `plugins/rzkeychange`:
      - Add `-D`, dry run mode, for testing
      - Fix handling of `-a` and error on too many
  * KNOWN ISSUES:
    On OpenBSD the system library libc exports the same symbols as libbind
    does and this causes runtime warnings. Until now this has not caused any
    known problems but is now also causing segfaults if the packet filter used
    (BPF) includes IPv6 addresses.
    On all other platforms OARC supports, these symbols are macros and in so
    should not cause any problem.
  * Commits:
    ee478c0 Known issues
    2f9d957 Tests
    3c663a2 Tests
    c88efc5 rzkeychange test
    f062f33 Tests</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.0-1" date="1613131200">- Release 2.0.0
  * This major release contains three backward incompatible changes, two
    new command line options and a completely restructured man-page(!),
    please read the change notes carefully before upgrading!
  * The first backward incompatible change has to do with the removal of
    libbind dependency. This library was causing segfaults on OpenBSD due to
    shared (and overwritten) symbols with OpenBSD's libc.
    It was replaced with LDNS and LDNS renders domain names as Fully
    Qualified Domain Names (FQDN, the trailing dot!) so every output of a
    domain name has been changed to a FQDN.
    This also changes `-X`/`-x`, which will now match against FQDNs.
  * The second backward incompatible change is that `-6` has been removed.
    This was used to alter the BPF in order to "fix" it, dnscap adds
    specific filters to IP and UDP headers which does not work for IPv6
    traffic.
    The generated BPF has been changed to allow IPv6 to always pass, making
    the option obsolete. IPv6 filtering is then done in dnscap.
  * The last backward incompatible change has to do with the output format
    of `-g` related to EDNS0 and is now more consistent with the rest of
    the parsable output:
    - No more spaces in the output
    - Fix incorrect `\` and extra empty new-line
    - All EDNS0 options are added after `edns0[...]` using comma separation, example: `edns0[],edns0opt[],...`
    - Client Subnet format: `edns0opt[ECS,family=nn,source=nn,scope=nn,addr=...]`
    - Unknown/unsupported code: `edns0opt[code=nn,codelen=nn]`
    - Parsing error messages have changed, they came from libbind, now comes from LDNS
  * New options:
    - Add `-q` and `-Q` to filter on matched/not matched QTYPE
  * Bugfixes:
    - Fix memory leak in EDNS0 ECS address parsing
    - `network`: Fix sonarcloud issues, potential `memcpy()` of null pointer
  * Other changes:
    - Fix CBOR output inclusion, LDNS is always available now
    - Add macros for Apple and Windows endian functions
    - Restructure and correct the man-page
  * Commits:
    557e5f5 man-page
    025529f v6bug, interval
    37b79e9 FQDN
    ebcf434 QTYPE match, args, tests
    0cb5562 v6bug
    75f6115 Endian
    aaeb213 Sonarcloud
    8685946 CBOR output
    3e26802 Sonarcloud
    30aa366 libbind
    3f94d0b Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.1-1" date="1615464000">- Release 2.0.1
  * Fixed incorrect line break in eventlog's (plugin) output.
  * Commits:
    5df363c remove trailing newline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.2-1" date="1646740800">- Release 2.0.2
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    memory leaks when using `-x`/`-X` regexp filtering due to incorrect
    usage of LDNS library.
  * Other minor changes:
    - Clarify what happens if you don't specify `-i` and add information about `any` and `all`
    - Update debhelper compatibility level to 10
  * Commits:
    a8925a7 ldns_pkt_all() clones RRs which need to be freed with ldns_rr_list_deep_free()
    5104814 Doc
    30c36aa debhelper
    4ae4356 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.3-1" date="1655121600">- Release 2.0.3
  * Thanks to a patch from Duane Wessels (@wessels) this release fixes
    an issue with filtering where DNS messages without a question section
    would bypass it.
  * Commits:
    ba2112c Fix COPR
    0e019ab Filtering
    c7e1c8f Refactor and fix qtype and qname matching/filtering.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.0-1" date="1662724800">- Release 2.1.0
  * This release adds a new option (`-o pid_file=&lt;file&gt;`) to specify a PID
    file when running as daemon, corrects handling of LDNS include files
    for some plugins and updates the Root Server Scaling Measurement (RSSM)
    plugin w.r.t. the upcoming version 5 of RSSAC002 specifications.
  * The RSSM plugin can now optionally generate `label-count` metric. This
    is enabled with `-L` and is tagged as `rssac002v5-draft` until v5 is
    finalized.
    The merge tool `dnscap-rssm-rssac002` has also been updated because of
    this, there is now `--skip-unsupported` to skip all unsupported
    RSSAC002 version metrics instead of `die()`'ing.
  * Commits:
    ca7707d RSSAC002v5 label-count metric
    3ebee80 Made label count metric optional
    41b029a Adding support for label acount metric
    799c3fe Missing includes
    7089f12 PID file</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.1-1" date="1675425600">- Release 2.1.1
  * This release includes fixes to TCP state code, anonymizing plugins and
    handling of EDNS extended error code.
    - Ken Renards @kdrenard (PR #275) fixed handling of EDNS extended error
      code, the previous code looked at `arcount` but ldns "consumes" OPT
      records so the count could be zero even with existing extended error
      code.
    - Changed anonymizing plugins to anonymize both sending and receiving
      IP address if both used the server port, part of issue #276 reported
      by Duane Wessels @wessels. This fixes situations where clients
      weren't anonymize because they sent using that port.
    - Fixed multiple issues with garbage collection in TCP state handling.
      It was reusing a pointer that was meant to return the current TCP
      state so it could return the wrong state when garbage collection
      was triggered.
      It also just unlinked stale states and didn't free them, new code
      uses the discard function so released state is also tagged as
      "gc stale".
      Lastly the discard function was fixed to clear the current TCP state
      pointer used by plugins if the discarded state was it.
  * Commits:
    7f2ddcf Copyright
    fd5b744 CodeQL alerts
    726d241 TCP state GC
    dff421e Anonymize clients
    2eb8489 Add CodeQL workflow for GitHub code scanning
    c5a0919 Better test for presence of EDNS option with extended error code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.2-1" date="1686830400">- Release 2.1.2
  * This release fixes reusing of TCP state during an out-of-memory event,
    the reused structure was not cleared of old information. And fixes
    compatibility with OpenSSL v3.0+ due to deprecated functions.
  * Commits:
    756f78a OpenSSL 3.0+
    d2bd12f tcpstate on out of memory</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.1.3-1" date="1687867200">- Release 2.1.3
  * This release fixes a memory leak when using pattern matching options
    `-x` or `-X`, the LDNS packet was not freed correctly.
  * The processing of the LDNS packet during matching has also been
    improved.
  * Commits:
    3990795 Test
    ee5d554 Pattern match</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.0-1" date="1692792000">- Release 2.2.0
  * This release adds anonymization of EDNS Client Subnet to all
    anonymizer plugins and improves TCP state handling by adding a hash
    table for lookup rather than walking a list.
  * Plugins that anonymize can now take two new options:
    - `-e`: also anonymize EDNS Client Subnet
    - `-E`: only anonymize EDNS Client Subnet
  * Other changes:
    - Cleanup and improvements to building and testing
    - Mention PowerTools repository for building on CentOS etc
    - Remove old workarounds in tests before #133
  * Commits:
    d4e0b2c TCP state hash table
    1ea8d3f Doc
    12ea061 EDNS Client Subnet anonymization
    c9ed7be pcap-dist
    b76f745 Cleanup
    7682d41 hashtbl</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.2.1-1" date="1725969600">- Release 2.2.1
  * This patch release fixes the BPF to correct capture ICMPv6, a typo in
    the filter had it matching "ip" and not "ip6".
  * Other changes are updates to GitHub workflows and man-pages.
  * Commits:
    ea82cd1 Copyright
    aa14a9f ICMP BPF filter
    6ef17e2 Badges
    6722677 Workflow
    1cb22f0 Man-page opt, Dumper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.0-1" date="1744891200">- Release 2.3.0
  * This release adds support for Linux cooked v2 link-type, a new output
    format, a new plugin and fixes a couple of issues.
  * The new output format `tcpdns` can be used to generate a file with the
    DNS as a TCP stream, first 16bit size (network order) then the DNS
    message, which is compatible with `dnsperf -B`.
  * The new plugin `asudp` can be used to rewrite outgoing packet by taking
    the DNS that's found and construct UDP packets from it.
  * Other changes:
    - Fix #314:
      - man-page: Clarify that `pktsize` is shown before parsing the IP packet
      - `-g`: Quote `,` characters
    - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
    - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
    - Handle extension function pointers better
    - Clarify that `-C` counts uncompressed output
    - Block PCAP output if TCP reassemble is used
    - Increase maximum DNS messages in a reassembled TCP message
    - Add new extension interface for setting output packet
    - Update pcap-thread to v4.1.0
  * Commits:
    e689bc8 pcap-thread v4.1.0
    29d184b DLT_LINUX_SLL2
    ba793a9 Fixes, asudp plugin, tcpdns output format
    6c133d4 Ethernet padding
    420548a Diag output
    8b92a52 SPEC
    a3fb1dd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.3.1-1" date="1745496000">- Release 2.3.1
  * This patch release fixes issues on 32bit systems when they are using
    64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
    to require libpcap with `DLT_LINUX_SLL2` support.
  * Commits:
    a5e9a4a pcap-thread v4.1.1
    731d9e0 Add support for 64bit time structures on 32bit systems</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.0-1" date="1750680000">- Release 2.4.0
  * This release brings support for reading compressed PCAPs, a few new
    plugin extensions and updates to autotools.
  * Changes:
    - Add `CHANGES` to docs
    - Update autotools requirement to 2.69 and fix deprecation warnings
    - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
    - New plugin extensions:
      - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
      - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
  * Commits:
    f7e4cad SLE/openSUSE lz4
    b30d82f Autotools, compressed PCAPs, plugin extensions
    ac7f37b CHANGES</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.1-1" date="1750939200">- Release 2.4.1
  * This patch release fixes a bug introduced in v2.4.0 where writing gziped
    PCAPs broke, and readds sending timestamp to plugins close function which
    was incorrectly removed in v2.2.1.
  * Changes:
    - Remove obsolete code with zlib being required
    - Add gz write test
    - Fix #334:
      - Readd timestamp when calling plugin close
      - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
  * Commits:
    9abd07d plugin close
    b10f923 gz write</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1761048000">- Release 2.5.0
  * This release adds two new plugin extensions, rewrites the compressed PCAP
    reader, removes a PCAP header check to not drop valid packets and fixes
    problems with `-e` filtering.
  * New plugin extensions:
    - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
    - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
  * Compressed PCAP reader:
    - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
    - Add support to read bzip2 PCAPs
    - New option `-o override_compress_extension=&lt;ext&gt;` to force a specific compression when reading
  * Fixes:
    - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
    - `-e`: Fix #356
      - Provide usage warning instead of assert'ing on empty option
      - Remove confusing part of documentation (may still be a bit confusing...)
      - Fix filtering where TC=1 and no rcode
  * Other changes:
    - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
    - Update email address, remove old obsolete list address
    - Various fixes for CI and code coverage
  * Commits:
    6fb07d6 -e filter
    66a26b9 fix scan-build
    43f1137 CI updates
    8e22e9f CI
    90402ac bsd builds
    ba531eb slim deps
    d401d81 builds
    219d05d ci
    6795ad3 Migrate to Codeberg
    09747ce RPM
    81f142c Compress read
    e583788 Fix dropped packets
    a042145 proper fix gcov
    b1741d4 fix gcov
    6914dc9 breakloop
    07917b4 C++
    0ebdffc C++
    5b768e5 Email</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1769428800">- Release 2.5.1
  * This patch release fixes `assert()` usage for compatibility with newer
    libc versions and handles byte order correctly in cryptopan plugin to
    work for big endian systems.
  * Commits:
    ac12e05 copyright
    ed3ea49 cryptopan reference implementation
    997f047 cryptopan endian
    fa3cabb assert</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1772020800">- Release 2.5.2
  * This patch release fixes compatibility with GNU/Hurd and fixes running
    tests in parallel.
  * Commits:
    ea9c431 GNU/Hurd
    67800d4 Paralell tests take 2
    57dd3e0 Plugins tests
    f5246e4 strptime</changelog>
</package>
<package pkgid="aad103abc6aa1011ac9a3350681c676a35939a589d4347b49a9dfcc6f3a823b4" name="dnsjit" arch="aarch64">
  <version epoch="0" ver="1.5.1" rel="150600.1.12"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.6-1" date="1533124800">- Alpha release 0.9.6</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.7-1" date="1548417600">- Alpha release 0.9.7</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.8-1" date="1559649600">- Alpha release 0.9.8</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1595505600">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1612353600">- Release 1.1.0
  * This releases adds a new module for handling Base64 URLs and new calls
    for error handling and opening PCAPs using file descriptors, along with
    a bug fix in `lib.getopt` and other changes.
  * The `dnssim` module has also gotten its own version and changelog, this
    is to prepare it for being moved outside of dnsjit's repository in the
    future.
  * New modules, calls, features:
    - New `lib.base64url`: Utility library to convert data to base64url format
    - `core.log`: New call `Log.errstr()`: Convert error number to its text representation
    - `input.fpcap`: New call `Fpcap.openfp()`: Open a PCAP file for processing using a file descriptor, for example `io.stdin`
    - `output.dnssim`: Support for DNS-over-HTTPS
  * Bug fixes:
    - `lib.getopt`: Fix bug where `-` and `--` could not be used as arguments to options
  * Other changes:
    - Fix typo in configure help text
    - Add coverage
    - `filter.ipsplit`: Extend PRNG modulus to 2^31, new implementation is the same as glibc's `rand()`
    - `lib.ip`: Fix typo in documentation
    - `output.dnssim`:
      - This module now has it's own changelog
      - Updated to v20210129
      - Depend on libhttp2 for dnssim DNS-over-HTTPS capabilities
    - `output.pcap`: Log libpcap error when failing to open
    - SUSE packages now depend on moonjit because of lack of LuaJIT support
  * Commits:
    d001ccb m4
    4b63bce output/dnssim: add changelog
    7355810 output/dnssim: add version checks
    95fa6a9 input pcap/fpcap, getopt
    99c3d9f test/test_ipsplit: update to use new PRNG
    3235b09 filter/ipsplit: extend PRNG modulus to 2^31
    8ff81a0 fixup! input.fpcap: filename "-" reads from stdin
    63cf0a4 output/dnssim: fix regression in DoH GET
    367d0b8 input.pcap: document stdin feature of open_offline()
    8d94504 input.fpcap: filename "-" reads from stdin
    617058e getopt: accept singleton - also as option value
    7d7f17c output/dnssim: unify failed to bind error messages
    bdf1517 output/dnssim: add IPv4 support
    15a21da Sonarcloud
    ceeea1d SUSE
    1fc3c82 PR179
    2f5d38f output/dnssim: allow user-set instance log name
    b036c68 Info
    0af1ffb Travis, configure
    49bdc08 output/dnssim: implement udp(tcp_fallback) method
    b4f9cf9 man: update gitlab.labs.nic.cz to gitlab.nic.cz
    45b977d output/dnssim: update man page
    4184090 output/dnssim: https2 - fix connection closure issues
    342f33e output/dnssim: https2 - omit closing connection inside callback
    67a76d5 output/dnssim: handle all states when closing connection
    41f04d8 output/dnssim: document importance of conn state enum ordering
    795ab6f output/dnssim: tls - fix handling of CONGESTED connections
    8792b32 output/dnssim: match QUESTION section of received responses
    3a88f5b Coverage
    4f611c8 dnssim
    6e35d5b Compile
    63faa44 README, format code, man-page
    925f85e lib: add missing man reference
    9239087 output/dnssim: fix man formatting
    bd7bee5 fix lua log levels
    4083efd output/dnssim: fix doc typo
    24c22b8 lib/base64url: add lua bindings
    69be2a1 core/log: add errstr() utility function
    0c14d74 output/dnssim: improve https2() documentation and behaviour
    f74e19c output/pcap: log errors when opening output PCAP
    6fe699a output/dnssim: cleanup and nitpicks
    96db8a9 output/https2: handle max_concurrent_streams similar to nghttp2
    15ea609 output/dnssim: https2 - ensure uri authority is always set
    fad3ed6 output/dnssim: https2 - fix some TODOs
    0bee6d8 output/dnssim: https2 - lua documentation
    e83e010 output/dnssim: https2 - implement GET method
    b553e0f output/dnssim: https2 - configure method
    a431a0d contrib: add base64url functions
    c753097 output/dnssim: https2 - set default concurrent stream limit
    d49f275 output/dnssim: https2 - track number of open streams
    2f7217f output/dnssim: https2 - improve data send edge cases
    c0abebc output/dnssim: https2 - return correct error code on send failure
    5b1f6c3 output/dnssim: conn - avoid assert when tearing down failed connections
    5c42266 output/dnssim: exit when file descriptors run out
    1ab2ab6 output/dnssim: https2 - additional asserts to detect invalid data
    4424eb3 output/dnssim: https2 - check response code
    303f2cd output/dnssim: https2 - improve QID mismatch debug msg
    86e3761 output/dnssim: https2 - bugfixes
    4a52f47 output/dnssim: https2 - use more consistent code style for pointers
    c8d853e output/dnssim: conn - fix potential memory leak
    3e6038b output/dnssim: https2 - enable zero-ing out msgid
    712634c output/dnssim: https2 - properly match dnsmsg to query from http request
    5abe943 output/dnssim: https2 - free memory on teardown
    39a9e9e output/dnssim: https2 - initial implementation
    058aee2 output/dnssim: https2 - initialize and setup session
    85eb4a3 output/dnssim: https2 - add libnghttp2 dependency
    6712bd6 output/dnssim: https2 - add skeleton</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1625486400">- Release 1.2.0
  * This release adds development files and autotool examples for C/Lua
    modules or stand-alone tools for dnsjit.
    In `examples/` you'll now also find:
    - `modules/input-example`
      This input example is based on `dnsjit.input.zero` which was a testing
      modules during the early days of dnsjit.
      It's a C module that generates empty objects for the receiver.
    - `modules/filter-example`:
      This filter example is C module that counts the number of objects
      passed to it before sending it to the receiver.
    - `modules/output-example`:
      This output example is based on `dnsjit.output.null` which was a testing
      modules during the early days of dnsjit.
      It's a C module that will just discard objects it receives.
    - `modules/lib-example`:
      This example Lua module takes two `core_timespec_t` C objects and gives
      the duration between them as a string.
    - `stand-alone-tool`:
      This example is based on `test_pcap_read.lua` and `test_throughput.lua`
      which was previous located in `examples/`.
      There are two installable Lua programs and shows how to depend on
      a dnsjit version, depend on specific dnsjit modules and how to run
      tests using `make test`.
  * All these examples can easily be copied and renamed to build and
    distribute your own dnsjit modules and tools, using autotool for
    `configure`, `make` and `make install`.
  * Development files will also be installed, or can be installed via
    `dnsjit-dev`/`dnsjit-devel` packages. All C headers have been prefixed
    with `dnsjit/` (for example `#include &lt;dnsjit/version.h&gt;`).
  * Thanks to this new setup, the module `output.dnssim` has been moved out
    from dnsjit's repository and placed in DNS shotgun's:
      https://gitlab.nic.cz/knot/shotgun/-/tree/master/replay/dnssim
    This will help CZ.NIC to maintain and release both the module and tool
    at the same time.
  * New modules:
    - Added `input.zpcap`, module for reading LZ4/ZSTD compressed PCAPs
    - Added `core.loader`, module for loading C modules using LuaJIT's `ffi` interface and `package.cpath`
    - Added `core.file` with `core_file_exists()`, a C function to check if a file exists
  * Other changes:
    - Add `&lt;dnsjit/version.h&gt;` for `DNSJIT_MAJOR_VERSION`, `DNSJIT_MINOR_VERSION`, `DNSJIT_PATCH_VERSION`
    - `dnsjit`: Remove version print on start
    - `dnsjit.input.zero`: Will `require("example.input.zero")` for backwards compatibility
    - `dnsjit.output.null`: Will `require("example.output.null")` for backwards compatibility
    - `core/timespec`: Add `:max_init()`, return a new object with maximum values set for seconds and nanoseconds.
    - `output/pcap`:
      - Update `open()` man-page, indicate usage of `pcap_dump_open()`
      - Add `have_errors()` to check for write errors during/after dumping
    - `input.fpcap`: Add `fadvise_sequential()` to advise sequential read of the file
    - `examples/dumpdns.lua`: Add support for dumping compressed PCAPs
  * Bugfixes:
    - `lib/getopt`: Fix short options, error if length is not 1
    - `core/timespec`: Fix typo in struct documentation
  * Commits:
    892ac65 example lib
    ae7e647 stand alone tool, dnsjit
    2d937a5 Package
    5c5ba74 Package
    6059bb5 Package
    48df46f zpcap
    ff13586 Remove dnssim
    389f274 filter example
    45e0102 output example
    9d76760 Example input
    f823db8 Example modules - input
    df12078 f/m-advise
    31ee04d WIP: Advise kernel that inputs are read sequentially
    eff6313 Output PCAP man-page, errors
    ac60fec Timespec
    cea7936 Bye Travis
    a5c967f getopt
    506ee99 getopt: detect incorrect short strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1625659200">- Release 1.2.1
  * This patch release fixes packages for SLE/openSUSE and the generation
    of an environment script for the stand-alone tool example.
  * Commits:
    9c6f630 SLE/openSUSE
    f07ac4a Stand-alone tool example</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.2-1" date="1636113600">- Release 1.2.2
  * This patch release fixes a small issues with the generated
    compatibility code and updates the package control files for Debian.
  * Commits:
    3cdd801 Fix compat
    cb352c6 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.3-1" date="1647864000">- Release 1.2.3
  * This patch release fixes compilation issues on FreeBSD for LLVM v12+.
  * Commits:
    4346a48 static inline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1701950400">- Release 1.3.0
  * This release adds `core.object.dns:reset()` to reset DNS objects so they
    can be reused correctly.
  * Example scripts have been updated to reflect this along with correctly
    setting `includes_dnslen` for TCP packets.
  * New example converter `pcap2tcpdns` added that can be used to create bin
    files for replaying with `dnsperf -B`.
  * Commits:
    f0d0b39 pkg-config
    464a198 pcap2tcpdns
    b40ad6d example convertor from PCAP to TCP DNS format used by dnsperf -B option
    ac51bfd pkg-config
    198bae9 Copyright
    5a87e37 DNS reset, dnslen TCP
    f2d6b05 Doc
    265a577 COPR fix</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1724846400">- Release 1.4.0
  * This release adds a new module `input.zmmpcap` to read compressed PCAPs
    using `mmap()`, changes how `core.thread` push/pop, removes signal
    blocking and squashes a few bugs.
  * For `core.thread`, the `push()`/`pop()` now uses `double` instead of
    `int64_t` to match the conversion table of LuaJIT and to support
    floating point numbers.
  * Updates:
    - `examples/dumpdns`:
      - Add support for reading PCAPs using `mmpcap` or `zmmpcap`
      - Add support for reading PCAPs from stdin
    - `zpcap`: Add support for reading zlib/lzma compressed PCAPs
  * Fixes:
    - Fix #234: Remove signal blocking
    - Fix #233: floating point numbers not supported by `dnsjit.core.thread` push/pop
    - Fix a potential memory leak in trie
    - `zpcap`: Fix incorrect check if having enough to read
  * Commits:
    b376ac9 Fix a potential memory leak in trie
    dfeb20e Badges
    e4fa047 Fix zzmpcap
    88b5ccf Compressed PCAPs, Copyright
    36b8266 thread push number
    0056736 thread push number
    0247ec6 Signals, code format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1744804800">- Release v1.5.0
  * This releases adds a new function to return a label quoted as described
    in RFC 1035, adds support for link-type Linux cooked v2 and fixes
    padding calculations for UDP, IPv4 and IPv6 packets.
  * New:
    - `core.object.dns.label`: Add `torfc1035()`
    - `core.object`: Add `linuxsll2` object
    - `filter.layer`: Add support for DLT_LINUX_SLL2
    - `filter.copy`: Add support for DLT_LINUX_SLL2
  * Fixes:
    - Fix #250: handle endian in tests
    - Fix #252
      - `core.object.ip6`: Add `hlen` for total length of header with all extensions
      - `filter.layer`:
        - correct UDP padding calculation
        - Fix padding calculation for IPv4 packet when options exists
        - Fix padding calculation for IPv6 packets
        - Store `hlen` for IPv6 packets
      - Add test for padding
  * Other changes:
    - Simplify and speedup pcap2tcpdns example
  * Commits:
    d03a184 DLT_LINUX_SLL2
    1cd3836 torfc1035
    8d8746f Fix IPv6 hlen
    75b634b Padding
    b8bfcf8 Simplify and speedup pcap2tcpdns example
    e37bb92 Fix log name in examples/pcap2tcpdns.lua
    80b7c34 UDP padding
    9a28aee ipsplit endian
    375e9e8 SPEC
    c82c0ca RPM
    74fbda2 COPR tweaks
    3691bd8 RPM spec</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.1-1" date="1770206400">- Release v1.5.1
  * This patch release fixes a couple of things related to DNS labels and
    testing on big endian systems.
  * Changes:
    - Use RFC 3597 format for output of unknown types and classes
    - Fixed #267: Return root label instead of empty string
    - Fixed `Label.torfc1035()` to output non-printable bytes correctly as per RFC 1035 sec. 5.1.
  * Commits:
    28fb9be class/type rfc 3597
    932a196 copyright
    5bda1d7 Fix Label.torfc1035 to output non-printable bytes correctly
    9fcb5fd Make conditional tests for ipsplit line 122
    2e37903 root label to string
    15f0442 Use RFC 3597 format for output of unknown types and classes
    6e6dbf7 scan-build
    53f0c54 CI updates
    8484f54 builds
    80379e1 Migrate to Codeberg
    829627d fix gcov</changelog>
</package>
<package pkgid="94f856eec9b11182e11adfe584dfd2bee126a350b17719024a34aa84536b1c96" name="dnsjit" arch="src">
  <version epoch="0" ver="1.5.1" rel="150600.1.12"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.6-1" date="1533124800">- Alpha release 0.9.6</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.7-1" date="1548417600">- Alpha release 0.9.7</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.8-1" date="1559649600">- Alpha release 0.9.8</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1595505600">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1612353600">- Release 1.1.0
  * This releases adds a new module for handling Base64 URLs and new calls
    for error handling and opening PCAPs using file descriptors, along with
    a bug fix in `lib.getopt` and other changes.
  * The `dnssim` module has also gotten its own version and changelog, this
    is to prepare it for being moved outside of dnsjit's repository in the
    future.
  * New modules, calls, features:
    - New `lib.base64url`: Utility library to convert data to base64url format
    - `core.log`: New call `Log.errstr()`: Convert error number to its text representation
    - `input.fpcap`: New call `Fpcap.openfp()`: Open a PCAP file for processing using a file descriptor, for example `io.stdin`
    - `output.dnssim`: Support for DNS-over-HTTPS
  * Bug fixes:
    - `lib.getopt`: Fix bug where `-` and `--` could not be used as arguments to options
  * Other changes:
    - Fix typo in configure help text
    - Add coverage
    - `filter.ipsplit`: Extend PRNG modulus to 2^31, new implementation is the same as glibc's `rand()`
    - `lib.ip`: Fix typo in documentation
    - `output.dnssim`:
      - This module now has it's own changelog
      - Updated to v20210129
      - Depend on libhttp2 for dnssim DNS-over-HTTPS capabilities
    - `output.pcap`: Log libpcap error when failing to open
    - SUSE packages now depend on moonjit because of lack of LuaJIT support
  * Commits:
    d001ccb m4
    4b63bce output/dnssim: add changelog
    7355810 output/dnssim: add version checks
    95fa6a9 input pcap/fpcap, getopt
    99c3d9f test/test_ipsplit: update to use new PRNG
    3235b09 filter/ipsplit: extend PRNG modulus to 2^31
    8ff81a0 fixup! input.fpcap: filename "-" reads from stdin
    63cf0a4 output/dnssim: fix regression in DoH GET
    367d0b8 input.pcap: document stdin feature of open_offline()
    8d94504 input.fpcap: filename "-" reads from stdin
    617058e getopt: accept singleton - also as option value
    7d7f17c output/dnssim: unify failed to bind error messages
    bdf1517 output/dnssim: add IPv4 support
    15a21da Sonarcloud
    ceeea1d SUSE
    1fc3c82 PR179
    2f5d38f output/dnssim: allow user-set instance log name
    b036c68 Info
    0af1ffb Travis, configure
    49bdc08 output/dnssim: implement udp(tcp_fallback) method
    b4f9cf9 man: update gitlab.labs.nic.cz to gitlab.nic.cz
    45b977d output/dnssim: update man page
    4184090 output/dnssim: https2 - fix connection closure issues
    342f33e output/dnssim: https2 - omit closing connection inside callback
    67a76d5 output/dnssim: handle all states when closing connection
    41f04d8 output/dnssim: document importance of conn state enum ordering
    795ab6f output/dnssim: tls - fix handling of CONGESTED connections
    8792b32 output/dnssim: match QUESTION section of received responses
    3a88f5b Coverage
    4f611c8 dnssim
    6e35d5b Compile
    63faa44 README, format code, man-page
    925f85e lib: add missing man reference
    9239087 output/dnssim: fix man formatting
    bd7bee5 fix lua log levels
    4083efd output/dnssim: fix doc typo
    24c22b8 lib/base64url: add lua bindings
    69be2a1 core/log: add errstr() utility function
    0c14d74 output/dnssim: improve https2() documentation and behaviour
    f74e19c output/pcap: log errors when opening output PCAP
    6fe699a output/dnssim: cleanup and nitpicks
    96db8a9 output/https2: handle max_concurrent_streams similar to nghttp2
    15ea609 output/dnssim: https2 - ensure uri authority is always set
    fad3ed6 output/dnssim: https2 - fix some TODOs
    0bee6d8 output/dnssim: https2 - lua documentation
    e83e010 output/dnssim: https2 - implement GET method
    b553e0f output/dnssim: https2 - configure method
    a431a0d contrib: add base64url functions
    c753097 output/dnssim: https2 - set default concurrent stream limit
    d49f275 output/dnssim: https2 - track number of open streams
    2f7217f output/dnssim: https2 - improve data send edge cases
    c0abebc output/dnssim: https2 - return correct error code on send failure
    5b1f6c3 output/dnssim: conn - avoid assert when tearing down failed connections
    5c42266 output/dnssim: exit when file descriptors run out
    1ab2ab6 output/dnssim: https2 - additional asserts to detect invalid data
    4424eb3 output/dnssim: https2 - check response code
    303f2cd output/dnssim: https2 - improve QID mismatch debug msg
    86e3761 output/dnssim: https2 - bugfixes
    4a52f47 output/dnssim: https2 - use more consistent code style for pointers
    c8d853e output/dnssim: conn - fix potential memory leak
    3e6038b output/dnssim: https2 - enable zero-ing out msgid
    712634c output/dnssim: https2 - properly match dnsmsg to query from http request
    5abe943 output/dnssim: https2 - free memory on teardown
    39a9e9e output/dnssim: https2 - initial implementation
    058aee2 output/dnssim: https2 - initialize and setup session
    85eb4a3 output/dnssim: https2 - add libnghttp2 dependency
    6712bd6 output/dnssim: https2 - add skeleton</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1625486400">- Release 1.2.0
  * This release adds development files and autotool examples for C/Lua
    modules or stand-alone tools for dnsjit.
    In `examples/` you'll now also find:
    - `modules/input-example`
      This input example is based on `dnsjit.input.zero` which was a testing
      modules during the early days of dnsjit.
      It's a C module that generates empty objects for the receiver.
    - `modules/filter-example`:
      This filter example is C module that counts the number of objects
      passed to it before sending it to the receiver.
    - `modules/output-example`:
      This output example is based on `dnsjit.output.null` which was a testing
      modules during the early days of dnsjit.
      It's a C module that will just discard objects it receives.
    - `modules/lib-example`:
      This example Lua module takes two `core_timespec_t` C objects and gives
      the duration between them as a string.
    - `stand-alone-tool`:
      This example is based on `test_pcap_read.lua` and `test_throughput.lua`
      which was previous located in `examples/`.
      There are two installable Lua programs and shows how to depend on
      a dnsjit version, depend on specific dnsjit modules and how to run
      tests using `make test`.
  * All these examples can easily be copied and renamed to build and
    distribute your own dnsjit modules and tools, using autotool for
    `configure`, `make` and `make install`.
  * Development files will also be installed, or can be installed via
    `dnsjit-dev`/`dnsjit-devel` packages. All C headers have been prefixed
    with `dnsjit/` (for example `#include &lt;dnsjit/version.h&gt;`).
  * Thanks to this new setup, the module `output.dnssim` has been moved out
    from dnsjit's repository and placed in DNS shotgun's:
      https://gitlab.nic.cz/knot/shotgun/-/tree/master/replay/dnssim
    This will help CZ.NIC to maintain and release both the module and tool
    at the same time.
  * New modules:
    - Added `input.zpcap`, module for reading LZ4/ZSTD compressed PCAPs
    - Added `core.loader`, module for loading C modules using LuaJIT's `ffi` interface and `package.cpath`
    - Added `core.file` with `core_file_exists()`, a C function to check if a file exists
  * Other changes:
    - Add `&lt;dnsjit/version.h&gt;` for `DNSJIT_MAJOR_VERSION`, `DNSJIT_MINOR_VERSION`, `DNSJIT_PATCH_VERSION`
    - `dnsjit`: Remove version print on start
    - `dnsjit.input.zero`: Will `require("example.input.zero")` for backwards compatibility
    - `dnsjit.output.null`: Will `require("example.output.null")` for backwards compatibility
    - `core/timespec`: Add `:max_init()`, return a new object with maximum values set for seconds and nanoseconds.
    - `output/pcap`:
      - Update `open()` man-page, indicate usage of `pcap_dump_open()`
      - Add `have_errors()` to check for write errors during/after dumping
    - `input.fpcap`: Add `fadvise_sequential()` to advise sequential read of the file
    - `examples/dumpdns.lua`: Add support for dumping compressed PCAPs
  * Bugfixes:
    - `lib/getopt`: Fix short options, error if length is not 1
    - `core/timespec`: Fix typo in struct documentation
  * Commits:
    892ac65 example lib
    ae7e647 stand alone tool, dnsjit
    2d937a5 Package
    5c5ba74 Package
    6059bb5 Package
    48df46f zpcap
    ff13586 Remove dnssim
    389f274 filter example
    45e0102 output example
    9d76760 Example input
    f823db8 Example modules - input
    df12078 f/m-advise
    31ee04d WIP: Advise kernel that inputs are read sequentially
    eff6313 Output PCAP man-page, errors
    ac60fec Timespec
    cea7936 Bye Travis
    a5c967f getopt
    506ee99 getopt: detect incorrect short strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1625659200">- Release 1.2.1
  * This patch release fixes packages for SLE/openSUSE and the generation
    of an environment script for the stand-alone tool example.
  * Commits:
    9c6f630 SLE/openSUSE
    f07ac4a Stand-alone tool example</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.2-1" date="1636113600">- Release 1.2.2
  * This patch release fixes a small issues with the generated
    compatibility code and updates the package control files for Debian.
  * Commits:
    3cdd801 Fix compat
    cb352c6 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.3-1" date="1647864000">- Release 1.2.3
  * This patch release fixes compilation issues on FreeBSD for LLVM v12+.
  * Commits:
    4346a48 static inline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1701950400">- Release 1.3.0
  * This release adds `core.object.dns:reset()` to reset DNS objects so they
    can be reused correctly.
  * Example scripts have been updated to reflect this along with correctly
    setting `includes_dnslen` for TCP packets.
  * New example converter `pcap2tcpdns` added that can be used to create bin
    files for replaying with `dnsperf -B`.
  * Commits:
    f0d0b39 pkg-config
    464a198 pcap2tcpdns
    b40ad6d example convertor from PCAP to TCP DNS format used by dnsperf -B option
    ac51bfd pkg-config
    198bae9 Copyright
    5a87e37 DNS reset, dnslen TCP
    f2d6b05 Doc
    265a577 COPR fix</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1724846400">- Release 1.4.0
  * This release adds a new module `input.zmmpcap` to read compressed PCAPs
    using `mmap()`, changes how `core.thread` push/pop, removes signal
    blocking and squashes a few bugs.
  * For `core.thread`, the `push()`/`pop()` now uses `double` instead of
    `int64_t` to match the conversion table of LuaJIT and to support
    floating point numbers.
  * Updates:
    - `examples/dumpdns`:
      - Add support for reading PCAPs using `mmpcap` or `zmmpcap`
      - Add support for reading PCAPs from stdin
    - `zpcap`: Add support for reading zlib/lzma compressed PCAPs
  * Fixes:
    - Fix #234: Remove signal blocking
    - Fix #233: floating point numbers not supported by `dnsjit.core.thread` push/pop
    - Fix a potential memory leak in trie
    - `zpcap`: Fix incorrect check if having enough to read
  * Commits:
    b376ac9 Fix a potential memory leak in trie
    dfeb20e Badges
    e4fa047 Fix zzmpcap
    88b5ccf Compressed PCAPs, Copyright
    36b8266 thread push number
    0056736 thread push number
    0247ec6 Signals, code format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1744804800">- Release v1.5.0
  * This releases adds a new function to return a label quoted as described
    in RFC 1035, adds support for link-type Linux cooked v2 and fixes
    padding calculations for UDP, IPv4 and IPv6 packets.
  * New:
    - `core.object.dns.label`: Add `torfc1035()`
    - `core.object`: Add `linuxsll2` object
    - `filter.layer`: Add support for DLT_LINUX_SLL2
    - `filter.copy`: Add support for DLT_LINUX_SLL2
  * Fixes:
    - Fix #250: handle endian in tests
    - Fix #252
      - `core.object.ip6`: Add `hlen` for total length of header with all extensions
      - `filter.layer`:
        - correct UDP padding calculation
        - Fix padding calculation for IPv4 packet when options exists
        - Fix padding calculation for IPv6 packets
        - Store `hlen` for IPv6 packets
      - Add test for padding
  * Other changes:
    - Simplify and speedup pcap2tcpdns example
  * Commits:
    d03a184 DLT_LINUX_SLL2
    1cd3836 torfc1035
    8d8746f Fix IPv6 hlen
    75b634b Padding
    b8bfcf8 Simplify and speedup pcap2tcpdns example
    e37bb92 Fix log name in examples/pcap2tcpdns.lua
    80b7c34 UDP padding
    9a28aee ipsplit endian
    375e9e8 SPEC
    c82c0ca RPM
    74fbda2 COPR tweaks
    3691bd8 RPM spec</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.1-1" date="1770206400">- Release v1.5.1
  * This patch release fixes a couple of things related to DNS labels and
    testing on big endian systems.
  * Changes:
    - Use RFC 3597 format for output of unknown types and classes
    - Fixed #267: Return root label instead of empty string
    - Fixed `Label.torfc1035()` to output non-printable bytes correctly as per RFC 1035 sec. 5.1.
  * Commits:
    28fb9be class/type rfc 3597
    932a196 copyright
    5bda1d7 Fix Label.torfc1035 to output non-printable bytes correctly
    9fcb5fd Make conditional tests for ipsplit line 122
    2e37903 root label to string
    15f0442 Use RFC 3597 format for output of unknown types and classes
    6e6dbf7 scan-build
    53f0c54 CI updates
    8484f54 builds
    80379e1 Migrate to Codeberg
    829627d fix gcov</changelog>
</package>
<package pkgid="f679391d5f6641aef310a288e384e53f80d848a3227b90cbee3cedcccc7403b9" name="dnsjit" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.1.12"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.6-1" date="1533124800">- Alpha release 0.9.6</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.7-1" date="1548417600">- Alpha release 0.9.7</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.8-1" date="1559649600">- Alpha release 0.9.8</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1595505600">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1612353600">- Release 1.1.0
  * This releases adds a new module for handling Base64 URLs and new calls
    for error handling and opening PCAPs using file descriptors, along with
    a bug fix in `lib.getopt` and other changes.
  * The `dnssim` module has also gotten its own version and changelog, this
    is to prepare it for being moved outside of dnsjit's repository in the
    future.
  * New modules, calls, features:
    - New `lib.base64url`: Utility library to convert data to base64url format
    - `core.log`: New call `Log.errstr()`: Convert error number to its text representation
    - `input.fpcap`: New call `Fpcap.openfp()`: Open a PCAP file for processing using a file descriptor, for example `io.stdin`
    - `output.dnssim`: Support for DNS-over-HTTPS
  * Bug fixes:
    - `lib.getopt`: Fix bug where `-` and `--` could not be used as arguments to options
  * Other changes:
    - Fix typo in configure help text
    - Add coverage
    - `filter.ipsplit`: Extend PRNG modulus to 2^31, new implementation is the same as glibc's `rand()`
    - `lib.ip`: Fix typo in documentation
    - `output.dnssim`:
      - This module now has it's own changelog
      - Updated to v20210129
      - Depend on libhttp2 for dnssim DNS-over-HTTPS capabilities
    - `output.pcap`: Log libpcap error when failing to open
    - SUSE packages now depend on moonjit because of lack of LuaJIT support
  * Commits:
    d001ccb m4
    4b63bce output/dnssim: add changelog
    7355810 output/dnssim: add version checks
    95fa6a9 input pcap/fpcap, getopt
    99c3d9f test/test_ipsplit: update to use new PRNG
    3235b09 filter/ipsplit: extend PRNG modulus to 2^31
    8ff81a0 fixup! input.fpcap: filename "-" reads from stdin
    63cf0a4 output/dnssim: fix regression in DoH GET
    367d0b8 input.pcap: document stdin feature of open_offline()
    8d94504 input.fpcap: filename "-" reads from stdin
    617058e getopt: accept singleton - also as option value
    7d7f17c output/dnssim: unify failed to bind error messages
    bdf1517 output/dnssim: add IPv4 support
    15a21da Sonarcloud
    ceeea1d SUSE
    1fc3c82 PR179
    2f5d38f output/dnssim: allow user-set instance log name
    b036c68 Info
    0af1ffb Travis, configure
    49bdc08 output/dnssim: implement udp(tcp_fallback) method
    b4f9cf9 man: update gitlab.labs.nic.cz to gitlab.nic.cz
    45b977d output/dnssim: update man page
    4184090 output/dnssim: https2 - fix connection closure issues
    342f33e output/dnssim: https2 - omit closing connection inside callback
    67a76d5 output/dnssim: handle all states when closing connection
    41f04d8 output/dnssim: document importance of conn state enum ordering
    795ab6f output/dnssim: tls - fix handling of CONGESTED connections
    8792b32 output/dnssim: match QUESTION section of received responses
    3a88f5b Coverage
    4f611c8 dnssim
    6e35d5b Compile
    63faa44 README, format code, man-page
    925f85e lib: add missing man reference
    9239087 output/dnssim: fix man formatting
    bd7bee5 fix lua log levels
    4083efd output/dnssim: fix doc typo
    24c22b8 lib/base64url: add lua bindings
    69be2a1 core/log: add errstr() utility function
    0c14d74 output/dnssim: improve https2() documentation and behaviour
    f74e19c output/pcap: log errors when opening output PCAP
    6fe699a output/dnssim: cleanup and nitpicks
    96db8a9 output/https2: handle max_concurrent_streams similar to nghttp2
    15ea609 output/dnssim: https2 - ensure uri authority is always set
    fad3ed6 output/dnssim: https2 - fix some TODOs
    0bee6d8 output/dnssim: https2 - lua documentation
    e83e010 output/dnssim: https2 - implement GET method
    b553e0f output/dnssim: https2 - configure method
    a431a0d contrib: add base64url functions
    c753097 output/dnssim: https2 - set default concurrent stream limit
    d49f275 output/dnssim: https2 - track number of open streams
    2f7217f output/dnssim: https2 - improve data send edge cases
    c0abebc output/dnssim: https2 - return correct error code on send failure
    5b1f6c3 output/dnssim: conn - avoid assert when tearing down failed connections
    5c42266 output/dnssim: exit when file descriptors run out
    1ab2ab6 output/dnssim: https2 - additional asserts to detect invalid data
    4424eb3 output/dnssim: https2 - check response code
    303f2cd output/dnssim: https2 - improve QID mismatch debug msg
    86e3761 output/dnssim: https2 - bugfixes
    4a52f47 output/dnssim: https2 - use more consistent code style for pointers
    c8d853e output/dnssim: conn - fix potential memory leak
    3e6038b output/dnssim: https2 - enable zero-ing out msgid
    712634c output/dnssim: https2 - properly match dnsmsg to query from http request
    5abe943 output/dnssim: https2 - free memory on teardown
    39a9e9e output/dnssim: https2 - initial implementation
    058aee2 output/dnssim: https2 - initialize and setup session
    85eb4a3 output/dnssim: https2 - add libnghttp2 dependency
    6712bd6 output/dnssim: https2 - add skeleton</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1625486400">- Release 1.2.0
  * This release adds development files and autotool examples for C/Lua
    modules or stand-alone tools for dnsjit.
    In `examples/` you'll now also find:
    - `modules/input-example`
      This input example is based on `dnsjit.input.zero` which was a testing
      modules during the early days of dnsjit.
      It's a C module that generates empty objects for the receiver.
    - `modules/filter-example`:
      This filter example is C module that counts the number of objects
      passed to it before sending it to the receiver.
    - `modules/output-example`:
      This output example is based on `dnsjit.output.null` which was a testing
      modules during the early days of dnsjit.
      It's a C module that will just discard objects it receives.
    - `modules/lib-example`:
      This example Lua module takes two `core_timespec_t` C objects and gives
      the duration between them as a string.
    - `stand-alone-tool`:
      This example is based on `test_pcap_read.lua` and `test_throughput.lua`
      which was previous located in `examples/`.
      There are two installable Lua programs and shows how to depend on
      a dnsjit version, depend on specific dnsjit modules and how to run
      tests using `make test`.
  * All these examples can easily be copied and renamed to build and
    distribute your own dnsjit modules and tools, using autotool for
    `configure`, `make` and `make install`.
  * Development files will also be installed, or can be installed via
    `dnsjit-dev`/`dnsjit-devel` packages. All C headers have been prefixed
    with `dnsjit/` (for example `#include &lt;dnsjit/version.h&gt;`).
  * Thanks to this new setup, the module `output.dnssim` has been moved out
    from dnsjit's repository and placed in DNS shotgun's:
      https://gitlab.nic.cz/knot/shotgun/-/tree/master/replay/dnssim
    This will help CZ.NIC to maintain and release both the module and tool
    at the same time.
  * New modules:
    - Added `input.zpcap`, module for reading LZ4/ZSTD compressed PCAPs
    - Added `core.loader`, module for loading C modules using LuaJIT's `ffi` interface and `package.cpath`
    - Added `core.file` with `core_file_exists()`, a C function to check if a file exists
  * Other changes:
    - Add `&lt;dnsjit/version.h&gt;` for `DNSJIT_MAJOR_VERSION`, `DNSJIT_MINOR_VERSION`, `DNSJIT_PATCH_VERSION`
    - `dnsjit`: Remove version print on start
    - `dnsjit.input.zero`: Will `require("example.input.zero")` for backwards compatibility
    - `dnsjit.output.null`: Will `require("example.output.null")` for backwards compatibility
    - `core/timespec`: Add `:max_init()`, return a new object with maximum values set for seconds and nanoseconds.
    - `output/pcap`:
      - Update `open()` man-page, indicate usage of `pcap_dump_open()`
      - Add `have_errors()` to check for write errors during/after dumping
    - `input.fpcap`: Add `fadvise_sequential()` to advise sequential read of the file
    - `examples/dumpdns.lua`: Add support for dumping compressed PCAPs
  * Bugfixes:
    - `lib/getopt`: Fix short options, error if length is not 1
    - `core/timespec`: Fix typo in struct documentation
  * Commits:
    892ac65 example lib
    ae7e647 stand alone tool, dnsjit
    2d937a5 Package
    5c5ba74 Package
    6059bb5 Package
    48df46f zpcap
    ff13586 Remove dnssim
    389f274 filter example
    45e0102 output example
    9d76760 Example input
    f823db8 Example modules - input
    df12078 f/m-advise
    31ee04d WIP: Advise kernel that inputs are read sequentially
    eff6313 Output PCAP man-page, errors
    ac60fec Timespec
    cea7936 Bye Travis
    a5c967f getopt
    506ee99 getopt: detect incorrect short strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1625659200">- Release 1.2.1
  * This patch release fixes packages for SLE/openSUSE and the generation
    of an environment script for the stand-alone tool example.
  * Commits:
    9c6f630 SLE/openSUSE
    f07ac4a Stand-alone tool example</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.2-1" date="1636113600">- Release 1.2.2
  * This patch release fixes a small issues with the generated
    compatibility code and updates the package control files for Debian.
  * Commits:
    3cdd801 Fix compat
    cb352c6 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.3-1" date="1647864000">- Release 1.2.3
  * This patch release fixes compilation issues on FreeBSD for LLVM v12+.
  * Commits:
    4346a48 static inline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1701950400">- Release 1.3.0
  * This release adds `core.object.dns:reset()` to reset DNS objects so they
    can be reused correctly.
  * Example scripts have been updated to reflect this along with correctly
    setting `includes_dnslen` for TCP packets.
  * New example converter `pcap2tcpdns` added that can be used to create bin
    files for replaying with `dnsperf -B`.
  * Commits:
    f0d0b39 pkg-config
    464a198 pcap2tcpdns
    b40ad6d example convertor from PCAP to TCP DNS format used by dnsperf -B option
    ac51bfd pkg-config
    198bae9 Copyright
    5a87e37 DNS reset, dnslen TCP
    f2d6b05 Doc
    265a577 COPR fix</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1724846400">- Release 1.4.0
  * This release adds a new module `input.zmmpcap` to read compressed PCAPs
    using `mmap()`, changes how `core.thread` push/pop, removes signal
    blocking and squashes a few bugs.
  * For `core.thread`, the `push()`/`pop()` now uses `double` instead of
    `int64_t` to match the conversion table of LuaJIT and to support
    floating point numbers.
  * Updates:
    - `examples/dumpdns`:
      - Add support for reading PCAPs using `mmpcap` or `zmmpcap`
      - Add support for reading PCAPs from stdin
    - `zpcap`: Add support for reading zlib/lzma compressed PCAPs
  * Fixes:
    - Fix #234: Remove signal blocking
    - Fix #233: floating point numbers not supported by `dnsjit.core.thread` push/pop
    - Fix a potential memory leak in trie
    - `zpcap`: Fix incorrect check if having enough to read
  * Commits:
    b376ac9 Fix a potential memory leak in trie
    dfeb20e Badges
    e4fa047 Fix zzmpcap
    88b5ccf Compressed PCAPs, Copyright
    36b8266 thread push number
    0056736 thread push number
    0247ec6 Signals, code format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1744804800">- Release v1.5.0
  * This releases adds a new function to return a label quoted as described
    in RFC 1035, adds support for link-type Linux cooked v2 and fixes
    padding calculations for UDP, IPv4 and IPv6 packets.
  * New:
    - `core.object.dns.label`: Add `torfc1035()`
    - `core.object`: Add `linuxsll2` object
    - `filter.layer`: Add support for DLT_LINUX_SLL2
    - `filter.copy`: Add support for DLT_LINUX_SLL2
  * Fixes:
    - Fix #250: handle endian in tests
    - Fix #252
      - `core.object.ip6`: Add `hlen` for total length of header with all extensions
      - `filter.layer`:
        - correct UDP padding calculation
        - Fix padding calculation for IPv4 packet when options exists
        - Fix padding calculation for IPv6 packets
        - Store `hlen` for IPv6 packets
      - Add test for padding
  * Other changes:
    - Simplify and speedup pcap2tcpdns example
  * Commits:
    d03a184 DLT_LINUX_SLL2
    1cd3836 torfc1035
    8d8746f Fix IPv6 hlen
    75b634b Padding
    b8bfcf8 Simplify and speedup pcap2tcpdns example
    e37bb92 Fix log name in examples/pcap2tcpdns.lua
    80b7c34 UDP padding
    9a28aee ipsplit endian
    375e9e8 SPEC
    c82c0ca RPM
    74fbda2 COPR tweaks
    3691bd8 RPM spec</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.1-1" date="1770206400">- Release v1.5.1
  * This patch release fixes a couple of things related to DNS labels and
    testing on big endian systems.
  * Changes:
    - Use RFC 3597 format for output of unknown types and classes
    - Fixed #267: Return root label instead of empty string
    - Fixed `Label.torfc1035()` to output non-printable bytes correctly as per RFC 1035 sec. 5.1.
  * Commits:
    28fb9be class/type rfc 3597
    932a196 copyright
    5bda1d7 Fix Label.torfc1035 to output non-printable bytes correctly
    9fcb5fd Make conditional tests for ipsplit line 122
    2e37903 root label to string
    15f0442 Use RFC 3597 format for output of unknown types and classes
    6e6dbf7 scan-build
    53f0c54 CI updates
    8484f54 builds
    80379e1 Migrate to Codeberg
    829627d fix gcov</changelog>
</package>
<package pkgid="f8b23206ac3182c9da013798672da5fb0dc9d484d0429f36a478af62daee6462" name="dnsjit-devel" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="150600.1.12"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.6-1" date="1533124800">- Alpha release 0.9.6</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.7-1" date="1548417600">- Alpha release 0.9.7</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.8-1" date="1559649600">- Alpha release 0.9.8</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1595505600">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1612353600">- Release 1.1.0
  * This releases adds a new module for handling Base64 URLs and new calls
    for error handling and opening PCAPs using file descriptors, along with
    a bug fix in `lib.getopt` and other changes.
  * The `dnssim` module has also gotten its own version and changelog, this
    is to prepare it for being moved outside of dnsjit's repository in the
    future.
  * New modules, calls, features:
    - New `lib.base64url`: Utility library to convert data to base64url format
    - `core.log`: New call `Log.errstr()`: Convert error number to its text representation
    - `input.fpcap`: New call `Fpcap.openfp()`: Open a PCAP file for processing using a file descriptor, for example `io.stdin`
    - `output.dnssim`: Support for DNS-over-HTTPS
  * Bug fixes:
    - `lib.getopt`: Fix bug where `-` and `--` could not be used as arguments to options
  * Other changes:
    - Fix typo in configure help text
    - Add coverage
    - `filter.ipsplit`: Extend PRNG modulus to 2^31, new implementation is the same as glibc's `rand()`
    - `lib.ip`: Fix typo in documentation
    - `output.dnssim`:
      - This module now has it's own changelog
      - Updated to v20210129
      - Depend on libhttp2 for dnssim DNS-over-HTTPS capabilities
    - `output.pcap`: Log libpcap error when failing to open
    - SUSE packages now depend on moonjit because of lack of LuaJIT support
  * Commits:
    d001ccb m4
    4b63bce output/dnssim: add changelog
    7355810 output/dnssim: add version checks
    95fa6a9 input pcap/fpcap, getopt
    99c3d9f test/test_ipsplit: update to use new PRNG
    3235b09 filter/ipsplit: extend PRNG modulus to 2^31
    8ff81a0 fixup! input.fpcap: filename "-" reads from stdin
    63cf0a4 output/dnssim: fix regression in DoH GET
    367d0b8 input.pcap: document stdin feature of open_offline()
    8d94504 input.fpcap: filename "-" reads from stdin
    617058e getopt: accept singleton - also as option value
    7d7f17c output/dnssim: unify failed to bind error messages
    bdf1517 output/dnssim: add IPv4 support
    15a21da Sonarcloud
    ceeea1d SUSE
    1fc3c82 PR179
    2f5d38f output/dnssim: allow user-set instance log name
    b036c68 Info
    0af1ffb Travis, configure
    49bdc08 output/dnssim: implement udp(tcp_fallback) method
    b4f9cf9 man: update gitlab.labs.nic.cz to gitlab.nic.cz
    45b977d output/dnssim: update man page
    4184090 output/dnssim: https2 - fix connection closure issues
    342f33e output/dnssim: https2 - omit closing connection inside callback
    67a76d5 output/dnssim: handle all states when closing connection
    41f04d8 output/dnssim: document importance of conn state enum ordering
    795ab6f output/dnssim: tls - fix handling of CONGESTED connections
    8792b32 output/dnssim: match QUESTION section of received responses
    3a88f5b Coverage
    4f611c8 dnssim
    6e35d5b Compile
    63faa44 README, format code, man-page
    925f85e lib: add missing man reference
    9239087 output/dnssim: fix man formatting
    bd7bee5 fix lua log levels
    4083efd output/dnssim: fix doc typo
    24c22b8 lib/base64url: add lua bindings
    69be2a1 core/log: add errstr() utility function
    0c14d74 output/dnssim: improve https2() documentation and behaviour
    f74e19c output/pcap: log errors when opening output PCAP
    6fe699a output/dnssim: cleanup and nitpicks
    96db8a9 output/https2: handle max_concurrent_streams similar to nghttp2
    15ea609 output/dnssim: https2 - ensure uri authority is always set
    fad3ed6 output/dnssim: https2 - fix some TODOs
    0bee6d8 output/dnssim: https2 - lua documentation
    e83e010 output/dnssim: https2 - implement GET method
    b553e0f output/dnssim: https2 - configure method
    a431a0d contrib: add base64url functions
    c753097 output/dnssim: https2 - set default concurrent stream limit
    d49f275 output/dnssim: https2 - track number of open streams
    2f7217f output/dnssim: https2 - improve data send edge cases
    c0abebc output/dnssim: https2 - return correct error code on send failure
    5b1f6c3 output/dnssim: conn - avoid assert when tearing down failed connections
    5c42266 output/dnssim: exit when file descriptors run out
    1ab2ab6 output/dnssim: https2 - additional asserts to detect invalid data
    4424eb3 output/dnssim: https2 - check response code
    303f2cd output/dnssim: https2 - improve QID mismatch debug msg
    86e3761 output/dnssim: https2 - bugfixes
    4a52f47 output/dnssim: https2 - use more consistent code style for pointers
    c8d853e output/dnssim: conn - fix potential memory leak
    3e6038b output/dnssim: https2 - enable zero-ing out msgid
    712634c output/dnssim: https2 - properly match dnsmsg to query from http request
    5abe943 output/dnssim: https2 - free memory on teardown
    39a9e9e output/dnssim: https2 - initial implementation
    058aee2 output/dnssim: https2 - initialize and setup session
    85eb4a3 output/dnssim: https2 - add libnghttp2 dependency
    6712bd6 output/dnssim: https2 - add skeleton</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1625486400">- Release 1.2.0
  * This release adds development files and autotool examples for C/Lua
    modules or stand-alone tools for dnsjit.
    In `examples/` you'll now also find:
    - `modules/input-example`
      This input example is based on `dnsjit.input.zero` which was a testing
      modules during the early days of dnsjit.
      It's a C module that generates empty objects for the receiver.
    - `modules/filter-example`:
      This filter example is C module that counts the number of objects
      passed to it before sending it to the receiver.
    - `modules/output-example`:
      This output example is based on `dnsjit.output.null` which was a testing
      modules during the early days of dnsjit.
      It's a C module that will just discard objects it receives.
    - `modules/lib-example`:
      This example Lua module takes two `core_timespec_t` C objects and gives
      the duration between them as a string.
    - `stand-alone-tool`:
      This example is based on `test_pcap_read.lua` and `test_throughput.lua`
      which was previous located in `examples/`.
      There are two installable Lua programs and shows how to depend on
      a dnsjit version, depend on specific dnsjit modules and how to run
      tests using `make test`.
  * All these examples can easily be copied and renamed to build and
    distribute your own dnsjit modules and tools, using autotool for
    `configure`, `make` and `make install`.
  * Development files will also be installed, or can be installed via
    `dnsjit-dev`/`dnsjit-devel` packages. All C headers have been prefixed
    with `dnsjit/` (for example `#include &lt;dnsjit/version.h&gt;`).
  * Thanks to this new setup, the module `output.dnssim` has been moved out
    from dnsjit's repository and placed in DNS shotgun's:
      https://gitlab.nic.cz/knot/shotgun/-/tree/master/replay/dnssim
    This will help CZ.NIC to maintain and release both the module and tool
    at the same time.
  * New modules:
    - Added `input.zpcap`, module for reading LZ4/ZSTD compressed PCAPs
    - Added `core.loader`, module for loading C modules using LuaJIT's `ffi` interface and `package.cpath`
    - Added `core.file` with `core_file_exists()`, a C function to check if a file exists
  * Other changes:
    - Add `&lt;dnsjit/version.h&gt;` for `DNSJIT_MAJOR_VERSION`, `DNSJIT_MINOR_VERSION`, `DNSJIT_PATCH_VERSION`
    - `dnsjit`: Remove version print on start
    - `dnsjit.input.zero`: Will `require("example.input.zero")` for backwards compatibility
    - `dnsjit.output.null`: Will `require("example.output.null")` for backwards compatibility
    - `core/timespec`: Add `:max_init()`, return a new object with maximum values set for seconds and nanoseconds.
    - `output/pcap`:
      - Update `open()` man-page, indicate usage of `pcap_dump_open()`
      - Add `have_errors()` to check for write errors during/after dumping
    - `input.fpcap`: Add `fadvise_sequential()` to advise sequential read of the file
    - `examples/dumpdns.lua`: Add support for dumping compressed PCAPs
  * Bugfixes:
    - `lib/getopt`: Fix short options, error if length is not 1
    - `core/timespec`: Fix typo in struct documentation
  * Commits:
    892ac65 example lib
    ae7e647 stand alone tool, dnsjit
    2d937a5 Package
    5c5ba74 Package
    6059bb5 Package
    48df46f zpcap
    ff13586 Remove dnssim
    389f274 filter example
    45e0102 output example
    9d76760 Example input
    f823db8 Example modules - input
    df12078 f/m-advise
    31ee04d WIP: Advise kernel that inputs are read sequentially
    eff6313 Output PCAP man-page, errors
    ac60fec Timespec
    cea7936 Bye Travis
    a5c967f getopt
    506ee99 getopt: detect incorrect short strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1625659200">- Release 1.2.1
  * This patch release fixes packages for SLE/openSUSE and the generation
    of an environment script for the stand-alone tool example.
  * Commits:
    9c6f630 SLE/openSUSE
    f07ac4a Stand-alone tool example</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.2-1" date="1636113600">- Release 1.2.2
  * This patch release fixes a small issues with the generated
    compatibility code and updates the package control files for Debian.
  * Commits:
    3cdd801 Fix compat
    cb352c6 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.3-1" date="1647864000">- Release 1.2.3
  * This patch release fixes compilation issues on FreeBSD for LLVM v12+.
  * Commits:
    4346a48 static inline</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1701950400">- Release 1.3.0
  * This release adds `core.object.dns:reset()` to reset DNS objects so they
    can be reused correctly.
  * Example scripts have been updated to reflect this along with correctly
    setting `includes_dnslen` for TCP packets.
  * New example converter `pcap2tcpdns` added that can be used to create bin
    files for replaying with `dnsperf -B`.
  * Commits:
    f0d0b39 pkg-config
    464a198 pcap2tcpdns
    b40ad6d example convertor from PCAP to TCP DNS format used by dnsperf -B option
    ac51bfd pkg-config
    198bae9 Copyright
    5a87e37 DNS reset, dnslen TCP
    f2d6b05 Doc
    265a577 COPR fix</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1724846400">- Release 1.4.0
  * This release adds a new module `input.zmmpcap` to read compressed PCAPs
    using `mmap()`, changes how `core.thread` push/pop, removes signal
    blocking and squashes a few bugs.
  * For `core.thread`, the `push()`/`pop()` now uses `double` instead of
    `int64_t` to match the conversion table of LuaJIT and to support
    floating point numbers.
  * Updates:
    - `examples/dumpdns`:
      - Add support for reading PCAPs using `mmpcap` or `zmmpcap`
      - Add support for reading PCAPs from stdin
    - `zpcap`: Add support for reading zlib/lzma compressed PCAPs
  * Fixes:
    - Fix #234: Remove signal blocking
    - Fix #233: floating point numbers not supported by `dnsjit.core.thread` push/pop
    - Fix a potential memory leak in trie
    - `zpcap`: Fix incorrect check if having enough to read
  * Commits:
    b376ac9 Fix a potential memory leak in trie
    dfeb20e Badges
    e4fa047 Fix zzmpcap
    88b5ccf Compressed PCAPs, Copyright
    36b8266 thread push number
    0056736 thread push number
    0247ec6 Signals, code format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1744804800">- Release v1.5.0
  * This releases adds a new function to return a label quoted as described
    in RFC 1035, adds support for link-type Linux cooked v2 and fixes
    padding calculations for UDP, IPv4 and IPv6 packets.
  * New:
    - `core.object.dns.label`: Add `torfc1035()`
    - `core.object`: Add `linuxsll2` object
    - `filter.layer`: Add support for DLT_LINUX_SLL2
    - `filter.copy`: Add support for DLT_LINUX_SLL2
  * Fixes:
    - Fix #250: handle endian in tests
    - Fix #252
      - `core.object.ip6`: Add `hlen` for total length of header with all extensions
      - `filter.layer`:
        - correct UDP padding calculation
        - Fix padding calculation for IPv4 packet when options exists
        - Fix padding calculation for IPv6 packets
        - Store `hlen` for IPv6 packets
      - Add test for padding
  * Other changes:
    - Simplify and speedup pcap2tcpdns example
  * Commits:
    d03a184 DLT_LINUX_SLL2
    1cd3836 torfc1035
    8d8746f Fix IPv6 hlen
    75b634b Padding
    b8bfcf8 Simplify and speedup pcap2tcpdns example
    e37bb92 Fix log name in examples/pcap2tcpdns.lua
    80b7c34 UDP padding
    9a28aee ipsplit endian
    375e9e8 SPEC
    c82c0ca RPM
    74fbda2 COPR tweaks
    3691bd8 RPM spec</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.1-1" date="1770206400">- Release v1.5.1
  * This patch release fixes a couple of things related to DNS labels and
    testing on big endian systems.
  * Changes:
    - Use RFC 3597 format for output of unknown types and classes
    - Fixed #267: Return root label instead of empty string
    - Fixed `Label.torfc1035()` to output non-printable bytes correctly as per RFC 1035 sec. 5.1.
  * Commits:
    28fb9be class/type rfc 3597
    932a196 copyright
    5bda1d7 Fix Label.torfc1035 to output non-printable bytes correctly
    9fcb5fd Make conditional tests for ipsplit line 122
    2e37903 root label to string
    15f0442 Use RFC 3597 format for output of unknown types and classes
    6e6dbf7 scan-build
    53f0c54 CI updates
    8484f54 builds
    80379e1 Migrate to Codeberg
    829627d fix gcov</changelog>
</package>
<package pkgid="b568a9a694c63e89bf3419c685c2674c0a9bd6301aae9daf453e89e96ed6bea9" name="dnsmeter" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150600.2.5"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1568808000">- First package release</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1569240000">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1570449600">- Release 1.0.1
  * This release fixes a few minor bugs and a dependency issue which made
    `dnsmeter` throw an exception when using the `-r` option.
  * Bugfixes:
    - Use existing `rtt_avg`, was showing total RTT divided by number of threads
    - Fix an issue which missed the first 8 bytes of a text payload
  * Commits:
    72197b5 PCAP detect
    665be2d RTT average
    3fe7b66 pplib dependencies, RTT average
    e565d42 Funding
    1a1ea40 README</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1622635200">- Release 1.0.2
  * This release fixes an issue with source port being static when only
    using `-q` to generate traffic from one host/IP. The source port is
    now randomized for every DNS query.
  * Other changes is mainly about build system, packages and fixed issues
    detected by code analysis tools.
  * Commits:
    05000cc Typo, random source port
    6a71707 Coverage
    1c724ce SonarCloud
    0776d20 Badges
    c274884 LGTM
    5a12c61 COPR
    f77efed Build dependency
    a359b66 iconv</changelog>
</package>
<package pkgid="498fd609fd8740df907ef77fdde3f0fcd319db9718e714bb5753bf41ff0bc7b4" name="dnsmeter" arch="src">
  <version epoch="0" ver="1.0.2" rel="150600.2.5"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1568808000">- First package release</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1569240000">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1570449600">- Release 1.0.1
  * This release fixes a few minor bugs and a dependency issue which made
    `dnsmeter` throw an exception when using the `-r` option.
  * Bugfixes:
    - Use existing `rtt_avg`, was showing total RTT divided by number of threads
    - Fix an issue which missed the first 8 bytes of a text payload
  * Commits:
    72197b5 PCAP detect
    665be2d RTT average
    3fe7b66 pplib dependencies, RTT average
    e565d42 Funding
    1a1ea40 README</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1622635200">- Release 1.0.2
  * This release fixes an issue with source port being static when only
    using `-q` to generate traffic from one host/IP. The source port is
    now randomized for every DNS query.
  * Other changes is mainly about build system, packages and fixed issues
    detected by code analysis tools.
  * Commits:
    05000cc Typo, random source port
    6a71707 Coverage
    1c724ce SonarCloud
    0776d20 Badges
    c274884 LGTM
    5a12c61 COPR
    f77efed Build dependency
    a359b66 iconv</changelog>
</package>
<package pkgid="d00cab168bc6b9c09e995c1f23362e0e0b6b562a36d2bd5b0c7cc641f9419c35" name="dnsmeter" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150600.2.5"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1568808000">- First package release</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1569240000">- Release 1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1570449600">- Release 1.0.1
  * This release fixes a few minor bugs and a dependency issue which made
    `dnsmeter` throw an exception when using the `-r` option.
  * Bugfixes:
    - Use existing `rtt_avg`, was showing total RTT divided by number of threads
    - Fix an issue which missed the first 8 bytes of a text payload
  * Commits:
    72197b5 PCAP detect
    665be2d RTT average
    3fe7b66 pplib dependencies, RTT average
    e565d42 Funding
    1a1ea40 README</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1622635200">- Release 1.0.2
  * This release fixes an issue with source port being static when only
    using `-q` to generate traffic from one host/IP. The source port is
    now randomized for every DNS query.
  * Other changes is mainly about build system, packages and fixed issues
    detected by code analysis tools.
  * Commits:
    05000cc Typo, random source port
    6a71707 Coverage
    1c724ce SonarCloud
    0776d20 Badges
    c274884 LGTM
    5a12c61 COPR
    f77efed Build dependency
    a359b66 iconv</changelog>
</package>
<package pkgid="5c164c7a8c232fcc3a7942ce360bf3cc2f3915f3e028592c2ed7931df5a910f3" name="dnsperf" arch="aarch64">
  <version epoch="0" ver="2.16.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.2-1" date="1614081600">- Release 2.4.2
  * This release fixes a few issues with reading of the datafile which
    could lead to "ran out of data" errors.
  * The problem was that reading from the datafile was done before finding
    a socket to send it on, or socket readyness, and that lead to progressing
    the queries without really doing anything.
    Another issues that's been fixed was that if the read lines perfectly
    aligned with the buffer, it would be treated like EOF and caused an exit.
  * Commits:
    9937287 resperf TLS
    6736956 datafile
    55faec6 ran out of data</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1615550400">- Release 2.5.0
  * This release adds re-connection support for TCP and DoT protocol,
    new options to `resperf` and fixes a few bugs.
  * `dnsperf` and `resperf` will now try to re-connect when they lose a TCP
    or DoT connection, and with that comes a few new statistics metrics.
    For `dnsperf`, if a connection oriented protocol is used, it will now
    show the total number of re-connections made and the connection latency.
    For `resperf` it also shows the total number of re-connections made and
    the gnuplot data now contains the total number of connections made and
    the connection latency for each interval.
    Beside re-connection support, improvements have been made when it comes
    to tracking socket readiness while connections are established which
    should generate less warnings about "socket not ready".
  * New `resperf` options:
    - `-R`: Reopen the datafile if it runs out of data before the testing
      is completed. This allows for long running tests on very small and
      simple query datafile.
    - `-F &lt;fall_behind&gt;`: Sets the maximum number of queries that can fall
      behind being sent. `resperf` will stop when this many queries should
      have been sent and it can be relative easy to hit if `-m &lt;max_qps&gt;`
      is set too high.
      The default is 1000 and setting it to zero (0) disables the check.
  * Bugfixes:
    - Fixed port handling for host/network format when setting client side
      port with `-x`
    - Fix support for quoted characters, `\000` and `\.`, in domain names,
      this was lost when removing BIND's internal development libraries
    - Fix issue in `dnsperf`, it would loop forever if no connection could
      be established
    - Fix potential buffer overrun in `resperf` when using response id
      for `queries[]`
    - DoT: Fix bug when sending from buffer
  * Other changes:
    - Always use `IPV6_V6ONLY` socket option for IPv6
    - Add man-page on `-W` option added in v2.4.0
    - Reformat man-pages
    - `resperf`:
      - Try and process more request each run to hopefully not hit max
        outstanding so easy when high QPS
      - Add default value to `-C` so it shows in help
  * Commits:
    9308361 man-page format
    0e52fb4 man-page, opts, tuneups
    e36211d stats
    d9b9ba3 Response qid to index
    2b2c37e fixes, reconnection
    acd31e5 dname quote
    de8f049 net</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1616414400">- Release 2.5.1
  * This release re-adds support for TYPEnnn and ANY in the datafile, this
    was missed during the removal of the dependency on BINDs development
    libraries in v2.4.0.
  * Also note that with v2.5.0, this software now depends on Concurrency
    Kit (ck) for atomic operations.
  * Commits:
    924e6ea ANY
    0a444c0 TYPEnnn</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1616673600">- Release 2.5.2
  * This release tweaks the reconnect code for TCP and DoT.
  * For TCP, atomic operations are used to signal the need to reconnect
    from the receiving thread to the sending, as the sending is the one in
    charge of reconnecting.
    This speeds up detection of connection lost which reduces the amount of
    lost queries on a disconnect.
  * This change does not affect DoT as much, as the SSL context shared
    between the threads are protected by a mutex.
    But a bug was found in `sendto()` for DoT that could drop a query if
    the socket was busy sending.
  * The connect and reconnect socket events has been split into connecting,
    connected and reconnecting, reconnected. This is to report more correct
    reconnect events when it comes to DoT, because the connection can be
    lost while negotiating TLS.
  * Lastly, additional tests has been added for the network code.
  * Commits:
    d9e5663 net test
    22f49df network tests
    8e5b56e reconnect</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.6.0-1" date="1622462400">- Release 2.6.0
  * This release adds EDNS options parameter `-E` to `resperf` and a script
    for generating EDNS Client Subnet options (see `contrib/ecs-gen`).
  * Commits:
    d29d880 ECS opt
    877f31e edns option</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1628510400">- Release 2.7.0
  * This release adds DNS-over-HTTPS support!
  * DNS-over-HTTPS can be used by specifying transport mode `doh` and you
    should also look at the dnsperf(1) man-page (or `-H`) for the extended
    options `doh-uri` and `doh-method`, which controls aspects of DoH/HTTP/2
    that you might want to set.
  * Other fixes:
    - Add check when constructing DNS packet so that total length of labels
      does not exceed 255 bytes
    - Fix connection/reconnection state handling for DoT transport
    - Fix event handling by initializing them directly when opening the
      sockets, otherwise events could have been missed which would give
      incorrect statistics
  * Commits:
    61b5eac Tests with dumdumd
    d71071c Tests with dumdumd
    b42f92e DoH sending
    2fa40bb Net stats
    f7f8692 DoH fixes
    ea62b49 DoH concurrent streams
    91929f1 DoH reconnect
    17660e6 DoH fixes
    5276aa6 resperf buckets
    585860e Packages
    3ffc601 Fixes
    1570609 Man-page
    6bcadc7 README
    f81adf1 Fixes
    1acd71f Code structure
    6c47876 Fixes
    2d379f4 Fixes
    4d5384b Fixes
    cee93b3 Initial DNS-over-HTTPS support implementation
    4ff3ebc Events
    8b24bbf DoT state
    6a5b5ef Fix too long name
    71fa09f long opts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.1-1" date="1631880000">- Release 2.7.1
  * This release fixes issues with constructing wire-format DNS when the
    domain names includes escaped characters such as `\123` or `\.`.
  * Other changes:
    - Bump Debian package compat level to 10
  * Commits:
    4873f02 DNS encoding
    c4eccc0 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1635854400">- Release 2.8.0
  * This release fixes response handling for DNS-over-HTTPS when multiple
    responses are received within the same receive cycle, and adds a new
    option to suppress some of the normal and verbose output.
  * The network model within dnsperf and resperf can not process more then
    one response at a time from a protocol module, so a buffer has been added
    to the DNS-over-HTTPS module to handle this situation (this already exists
    in all other modules).
  * The new option `-O suppress=&lt;message,...&gt;` can selectively suppress parts
    of the normal and verbose output. Some of these messages might be
    excessively displayed due to the network model and depending on what
    protocol you use which makes usage harder then necessary. For example
    during TCP connection stage, if you end-point is slow to establish
    connection you will get a lot of output saying that the socket isn't ready
    yet.
  * Commits:
    6a452b0 DoH response handling
    e2828e7 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1638964800">- Release 2.9.0
  * This release brings a new message suppression option and a way to control
    how many queries are sent over a connection.
  * You can now suppress the message about receiving unexpected DNS message
    IDs by using `-O suppress=unexpected`.
  * With `-O num-queries-per-conn=&lt;num&gt;` you can now limit the number of
    queries sent over a connection before triggering a re-connection, see
    the `dnsperf(3)` man-page for more information how this works.
  * Commits:
    cd9df40 Tests
    864a968 Queries per connection
    7c5d6ab Suppress unexpected
    8e9f4a2 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1668168000">- Release 2.10.0
  * This release adds a binary datafile (DNS wire) format to `dnsperf`
    thanks to a contribution from Petr Špaček @pspacek (ISC).
  * The new binary format greatly improves performance in some cases, for
    Petr's case it was testing dynamic updates. Switching to this
    pre-compiled DNS wire format increased QPS from 4k to 600k, an increase
    of 150 times throughput from `dnsperf`!
  * See man-page for `-B` for more information and examples how to use.
  * Commits:
    5971cb9 Doc
    a241068 CodeQL
    2a7d10a Fix CodeQL workflow
    0ce15f6 Fix COPR
    0ae4a54 CodeQL
    f52e4b1 wire format input
    c423aa9 wire format input
    2b0693d Input binary format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1675857600">- Release 2.11.0
  * A couple of new features this release courtesy of Petr Špaček
    @pspacek (ISC) and a bunch of bugfixes.
  * First off `dnsperf` can now do verbose statistics during each interval
    when using `-S`, see long option `verbose-interval-stats`.
  * Next is a new latency histogram output using data structures (hg64)
    created by Tony Finch @fanf2 (ISC), see long option
    `latency-histogram`. These will also be shown during `-S` when used
    together with `verbose-interval-stats`.
  * Lastly a small change to boolean long options, they no longer require
    a value (`=yes`) to be enabled.
  * Bugfixes:
    - Make sure the number of outstanding queries don't go negative,
      happens if queries are timed out before being sent
    - Fixed #208:
      - `recv_one()`: Fix handling errno, only store EAGAIN if no other
        error has been received
      - `do_recv()`: Don't break on error as it will count it as a received
        message
      - Treat `EBADF` as `EAGAIN` for stateful connections, receive thread
        might read from a closed socket if send thread is reconnecting
    - `dnsperf`: warn if -c, -T, -q, -Q values are auto-adjusted
    - Fixed #222: don't process unexpected message if the message is
      suppressed
  * Commits:
    14db835 Opt arg
    fb81481 Suppress unexpected
    64b8c6d stats_t initialization
    8290775 Fix first call to diff_stats
    4f8bd24 Compile support histograms
    a9b4f04 External code, latency histograms
    d1f4b65 add detailed latency histograms
    044e3a2 data structures for detailed latency histograms
    ad3fb03 Opt, verbose statistics
    38bc936 Command usage warnings
    9f31595 Bad file descriptor
    d3650eb Receive socket error handling
    84c8e72 Negative outstanding
    e7df5e1 Clarify meaning of dnsperf -S output in the man page
    830eb43 verbose interval stats for dnsperf</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1678449600">- Release 2.11.1
  * Fixed long option argument handling that broke in v2.11.0 and enhanced
    long option help text, now includes argument type.
  * Commits:
    034e893 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1678968000">- Release 2.11.2
  * Fixed long option argument handling (again), wasn't completely fixed
    in v2.11.1.
  * Commits:
    e6dbd78 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1684670400">- Release 2.12.0
  * This release fixes a segfault when doing DNS-over-HTTPS and changes the
    way maximum queries per second are handled.
  * The DNS-over-HTTPS module handled reconnecting incorrectly and destroyed
    the nghttp2 context during callbacks. Thanks to the help from
    @kgillis2000 it was quickly found and fixed.
  * The way maximum QPS is handled has been changed by Petr Špaček @pspacek
    (ISC). The new way solves an over-shoot problem that happened due to
    max QPS being counted for the whole runtime and based on completed
    queries, not just sent.
  * A new option `qps_threshold_wait` has also been added. This controls
    the threshold for using `nanosleep()` between sending packet and the
    default is measured on start-up. If the time between packets, based on
    max QPS `-Q`, is smaller then no sleep will be performed. This improves
    performance when doing high max QPS limiting.
  * Other changes:
    - `dnsperf`: Statistics output
      - Fixed missing connection statistics if only reconnections happened
      - Flush output to allow pipe/grep processing
      - Add percentage on reconnections based on total connections
    - Support OpenSSL 3.0+
  * Commits:
    9aca046 OpenSSL 3.0
    6d3d6b4 Stats, DoH
    316f901 qps_threshold_wait
    ed52770 WIP: use busy wait only if necessary
    32229b6 WIP: import nanosleep benchmark
    1842b88 Fix dnsperf -Q to not overshot target value</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1686830400">- Release 2.13.0
  * This release adds a new option `-O tls-sni=...` to set the Server Name
    Indication when using TLS transport, currently for DNS-over-TLS and
    DNS-over-HTTPS.
  * Commits:
    dbe84f6 TLS SNI
    5fb2282 Add TLS Server Name Indication extension support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1692792000">- Release 2.13.1
  * This release fixes a few issues with in-progress queries and the TCP
    transport module.
  * When using stateful connections, such as TCP, if the full query couldn't
    be sent in one go then the query and connection could get stuck as
    "in-progress".
    This could easily happen if you limited the in-flight queries to 1 and
    sent very large DNS messages using the stream binary format.
    Additional socket ready checks has been added to flush in-progress
    queries as quickly as possible.
  * The TCP module's handling of errors when continuing in-progress queries
    has been fixed. Previously it would interpret EAGAIN as an unrecoverable
    error and trigger a reconnect, dropping the quer-y/ies in-progress for
    that connection.
  * Other changes:
    - Fix input data buffer to allow for maximum binary blob wire format, 2 byte size + max DNS message
    - Mention PowerTools repository for building on CentOS etc
  * Commits:
    56e180c In-progress, bitmaps, clang-format
    bbc48db In-progress
    059619d In-progress
    752575a TCP EAGAIN
    d51a453 Max input
    76764d7 64k TCP/DoT payload support
    8201f50 Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1705579200">- Release 2.14.0
  * This release rewords connection statistics, adds names to threads and
    fixes a bug with using TSIG in more than one thread.
  * In "Connection Statistics", reconnections has been renamed to
    connection attempts and now includes both the initial connection
    attempt and following reconnections.
  * If supported, threads will now be named after what they do, such as
    "perf-send-&lt;num&gt;" and "perf-recv-&lt;num&gt;".
  * The TSIG context was shared between all threads and would case a crash
    if more than one sending thread was used. This has been fixed and TSIG
    contexts are now per thread.
  * Commits:
    81dc36b TSIG context per thread
    55011c6 Thread names
    8bdd480 thread names
    17c680d Set thread names for dnsperf
    54e641d Add library function to set thread names
    fb19440 Dockerfile
    a80de21 Reword connection statistics
    688a4fd Reword connection statistics</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1768824000">- Release 2.15.0
  * This release brings several new features and a few bug fixes.
  * Both `dnsperf` and `resperf` will now report statistics on receiving
    unexpected DNS message IDs in responses.
  * Datafiles now support `\DDD` encoding in domain names as specified in
    RFC1035 "5.1. Format".
  * Thanks to funding from Internet Systems Consortium (isc.org) statistics
    in `dnsperf` can now be outputted as a stream of JSON objects using
    the new option `-j`, see man-page for more details.
  * Bugfixes:
    - Output correct histogram for connection latency, it was showing the histogram for response latency
    - Fixed double new-line in some perf_log_* calls
  * Other changes:
    - `dnsperf`: Fixed order of options in man-page
    - `test`: Use valid DNS queries as largest UDP and TCP test payloads
    - Fixed/modernize spec file
    - Fix for gcov, was not removing old profile data from subdirectories
    - `resperf`: Fixed scan-build inability to know fatal ends the program
    - Fixed test 5, wait for background process instead of sleeping
    - `test5`: Use a different port for DoH, `dumdumd` and `dumdohd` seems to interfere with each other
    - `Dockerfile`: Track the latest LTS version of Ubuntu
    - Migrate to Codeberg
  * Commits:
    40adb3e Copyright
    9ce0a3f openSUSE/SLE packages
    3cef733 json-c
    09d9e5d quoting
    ab4632d json statistics
    f3e95e6 json statistics
    4952b6c domain name quoting
    4145323 Conn Latency histogram
    b3cd9c6 Track the latest LTS version of Ubuntu in the Dockerfile
    0b02010 fix scan-build
    d9f2df9 CI updates
    bd1fdf3 CI
    0bf22cd bsd builds, debian build
    6d67d0d builds
    12d6789 Migrate to Codeberg
    0585df1 unexpected
    5748811 Add stats for unexpected message IDs
    c4a3515 test 5
    acfe3bc test5
    fcb556e fix gcov
    15057bc SPEC
    3c131a7 Badges
    1ef5b41 largest blobs
    ef41ffa Use valid DNS queries as largest UDP and TCP test payloads
    32d2a7e Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1776254400">- Release 2.15.1
  * This release fixes issues receiving DNS-over-HTTPS responses, previously
    responses could be dropped due to incorrect handling in callbacks from
    libnghttp2.
  * Other changes;
    - Updated internal known QTYPE table
    - Updates to CI
  * Commits:
    53c06f2 DoH
    ad8c352 DOH
    16a2975 actions
    ed0a553 QTYPEs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1785931200">- Release 2.16.0
  * This release adds TLS session resumption and `SSLKEYLOGFILE` support
    for DNS-over-TLS and DNS-over-HTTPS, work contributed by
    Ranya Sharma (PCH) and Sara Dickinson (Sinodun IT).
  * Commits:
    2b91cd0 format, fixes, doc, tests
    3c3f521 Implement session resumption for DoT and DoH</changelog>
</package>
<package pkgid="8c0cb30da5ff28c548da210f4bb3e14a4818c4df3597617abff53e3145514bec" name="dnsperf" arch="src">
  <version epoch="0" ver="2.16.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.2-1" date="1614081600">- Release 2.4.2
  * This release fixes a few issues with reading of the datafile which
    could lead to "ran out of data" errors.
  * The problem was that reading from the datafile was done before finding
    a socket to send it on, or socket readyness, and that lead to progressing
    the queries without really doing anything.
    Another issues that's been fixed was that if the read lines perfectly
    aligned with the buffer, it would be treated like EOF and caused an exit.
  * Commits:
    9937287 resperf TLS
    6736956 datafile
    55faec6 ran out of data</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1615550400">- Release 2.5.0
  * This release adds re-connection support for TCP and DoT protocol,
    new options to `resperf` and fixes a few bugs.
  * `dnsperf` and `resperf` will now try to re-connect when they lose a TCP
    or DoT connection, and with that comes a few new statistics metrics.
    For `dnsperf`, if a connection oriented protocol is used, it will now
    show the total number of re-connections made and the connection latency.
    For `resperf` it also shows the total number of re-connections made and
    the gnuplot data now contains the total number of connections made and
    the connection latency for each interval.
    Beside re-connection support, improvements have been made when it comes
    to tracking socket readiness while connections are established which
    should generate less warnings about "socket not ready".
  * New `resperf` options:
    - `-R`: Reopen the datafile if it runs out of data before the testing
      is completed. This allows for long running tests on very small and
      simple query datafile.
    - `-F &lt;fall_behind&gt;`: Sets the maximum number of queries that can fall
      behind being sent. `resperf` will stop when this many queries should
      have been sent and it can be relative easy to hit if `-m &lt;max_qps&gt;`
      is set too high.
      The default is 1000 and setting it to zero (0) disables the check.
  * Bugfixes:
    - Fixed port handling for host/network format when setting client side
      port with `-x`
    - Fix support for quoted characters, `\000` and `\.`, in domain names,
      this was lost when removing BIND's internal development libraries
    - Fix issue in `dnsperf`, it would loop forever if no connection could
      be established
    - Fix potential buffer overrun in `resperf` when using response id
      for `queries[]`
    - DoT: Fix bug when sending from buffer
  * Other changes:
    - Always use `IPV6_V6ONLY` socket option for IPv6
    - Add man-page on `-W` option added in v2.4.0
    - Reformat man-pages
    - `resperf`:
      - Try and process more request each run to hopefully not hit max
        outstanding so easy when high QPS
      - Add default value to `-C` so it shows in help
  * Commits:
    9308361 man-page format
    0e52fb4 man-page, opts, tuneups
    e36211d stats
    d9b9ba3 Response qid to index
    2b2c37e fixes, reconnection
    acd31e5 dname quote
    de8f049 net</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1616414400">- Release 2.5.1
  * This release re-adds support for TYPEnnn and ANY in the datafile, this
    was missed during the removal of the dependency on BINDs development
    libraries in v2.4.0.
  * Also note that with v2.5.0, this software now depends on Concurrency
    Kit (ck) for atomic operations.
  * Commits:
    924e6ea ANY
    0a444c0 TYPEnnn</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1616673600">- Release 2.5.2
  * This release tweaks the reconnect code for TCP and DoT.
  * For TCP, atomic operations are used to signal the need to reconnect
    from the receiving thread to the sending, as the sending is the one in
    charge of reconnecting.
    This speeds up detection of connection lost which reduces the amount of
    lost queries on a disconnect.
  * This change does not affect DoT as much, as the SSL context shared
    between the threads are protected by a mutex.
    But a bug was found in `sendto()` for DoT that could drop a query if
    the socket was busy sending.
  * The connect and reconnect socket events has been split into connecting,
    connected and reconnecting, reconnected. This is to report more correct
    reconnect events when it comes to DoT, because the connection can be
    lost while negotiating TLS.
  * Lastly, additional tests has been added for the network code.
  * Commits:
    d9e5663 net test
    22f49df network tests
    8e5b56e reconnect</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.6.0-1" date="1622462400">- Release 2.6.0
  * This release adds EDNS options parameter `-E` to `resperf` and a script
    for generating EDNS Client Subnet options (see `contrib/ecs-gen`).
  * Commits:
    d29d880 ECS opt
    877f31e edns option</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1628510400">- Release 2.7.0
  * This release adds DNS-over-HTTPS support!
  * DNS-over-HTTPS can be used by specifying transport mode `doh` and you
    should also look at the dnsperf(1) man-page (or `-H`) for the extended
    options `doh-uri` and `doh-method`, which controls aspects of DoH/HTTP/2
    that you might want to set.
  * Other fixes:
    - Add check when constructing DNS packet so that total length of labels
      does not exceed 255 bytes
    - Fix connection/reconnection state handling for DoT transport
    - Fix event handling by initializing them directly when opening the
      sockets, otherwise events could have been missed which would give
      incorrect statistics
  * Commits:
    61b5eac Tests with dumdumd
    d71071c Tests with dumdumd
    b42f92e DoH sending
    2fa40bb Net stats
    f7f8692 DoH fixes
    ea62b49 DoH concurrent streams
    91929f1 DoH reconnect
    17660e6 DoH fixes
    5276aa6 resperf buckets
    585860e Packages
    3ffc601 Fixes
    1570609 Man-page
    6bcadc7 README
    f81adf1 Fixes
    1acd71f Code structure
    6c47876 Fixes
    2d379f4 Fixes
    4d5384b Fixes
    cee93b3 Initial DNS-over-HTTPS support implementation
    4ff3ebc Events
    8b24bbf DoT state
    6a5b5ef Fix too long name
    71fa09f long opts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.1-1" date="1631880000">- Release 2.7.1
  * This release fixes issues with constructing wire-format DNS when the
    domain names includes escaped characters such as `\123` or `\.`.
  * Other changes:
    - Bump Debian package compat level to 10
  * Commits:
    4873f02 DNS encoding
    c4eccc0 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1635854400">- Release 2.8.0
  * This release fixes response handling for DNS-over-HTTPS when multiple
    responses are received within the same receive cycle, and adds a new
    option to suppress some of the normal and verbose output.
  * The network model within dnsperf and resperf can not process more then
    one response at a time from a protocol module, so a buffer has been added
    to the DNS-over-HTTPS module to handle this situation (this already exists
    in all other modules).
  * The new option `-O suppress=&lt;message,...&gt;` can selectively suppress parts
    of the normal and verbose output. Some of these messages might be
    excessively displayed due to the network model and depending on what
    protocol you use which makes usage harder then necessary. For example
    during TCP connection stage, if you end-point is slow to establish
    connection you will get a lot of output saying that the socket isn't ready
    yet.
  * Commits:
    6a452b0 DoH response handling
    e2828e7 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1638964800">- Release 2.9.0
  * This release brings a new message suppression option and a way to control
    how many queries are sent over a connection.
  * You can now suppress the message about receiving unexpected DNS message
    IDs by using `-O suppress=unexpected`.
  * With `-O num-queries-per-conn=&lt;num&gt;` you can now limit the number of
    queries sent over a connection before triggering a re-connection, see
    the `dnsperf(3)` man-page for more information how this works.
  * Commits:
    cd9df40 Tests
    864a968 Queries per connection
    7c5d6ab Suppress unexpected
    8e9f4a2 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1668168000">- Release 2.10.0
  * This release adds a binary datafile (DNS wire) format to `dnsperf`
    thanks to a contribution from Petr Špaček @pspacek (ISC).
  * The new binary format greatly improves performance in some cases, for
    Petr's case it was testing dynamic updates. Switching to this
    pre-compiled DNS wire format increased QPS from 4k to 600k, an increase
    of 150 times throughput from `dnsperf`!
  * See man-page for `-B` for more information and examples how to use.
  * Commits:
    5971cb9 Doc
    a241068 CodeQL
    2a7d10a Fix CodeQL workflow
    0ce15f6 Fix COPR
    0ae4a54 CodeQL
    f52e4b1 wire format input
    c423aa9 wire format input
    2b0693d Input binary format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1675857600">- Release 2.11.0
  * A couple of new features this release courtesy of Petr Špaček
    @pspacek (ISC) and a bunch of bugfixes.
  * First off `dnsperf` can now do verbose statistics during each interval
    when using `-S`, see long option `verbose-interval-stats`.
  * Next is a new latency histogram output using data structures (hg64)
    created by Tony Finch @fanf2 (ISC), see long option
    `latency-histogram`. These will also be shown during `-S` when used
    together with `verbose-interval-stats`.
  * Lastly a small change to boolean long options, they no longer require
    a value (`=yes`) to be enabled.
  * Bugfixes:
    - Make sure the number of outstanding queries don't go negative,
      happens if queries are timed out before being sent
    - Fixed #208:
      - `recv_one()`: Fix handling errno, only store EAGAIN if no other
        error has been received
      - `do_recv()`: Don't break on error as it will count it as a received
        message
      - Treat `EBADF` as `EAGAIN` for stateful connections, receive thread
        might read from a closed socket if send thread is reconnecting
    - `dnsperf`: warn if -c, -T, -q, -Q values are auto-adjusted
    - Fixed #222: don't process unexpected message if the message is
      suppressed
  * Commits:
    14db835 Opt arg
    fb81481 Suppress unexpected
    64b8c6d stats_t initialization
    8290775 Fix first call to diff_stats
    4f8bd24 Compile support histograms
    a9b4f04 External code, latency histograms
    d1f4b65 add detailed latency histograms
    044e3a2 data structures for detailed latency histograms
    ad3fb03 Opt, verbose statistics
    38bc936 Command usage warnings
    9f31595 Bad file descriptor
    d3650eb Receive socket error handling
    84c8e72 Negative outstanding
    e7df5e1 Clarify meaning of dnsperf -S output in the man page
    830eb43 verbose interval stats for dnsperf</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1678449600">- Release 2.11.1
  * Fixed long option argument handling that broke in v2.11.0 and enhanced
    long option help text, now includes argument type.
  * Commits:
    034e893 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1678968000">- Release 2.11.2
  * Fixed long option argument handling (again), wasn't completely fixed
    in v2.11.1.
  * Commits:
    e6dbd78 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1684670400">- Release 2.12.0
  * This release fixes a segfault when doing DNS-over-HTTPS and changes the
    way maximum queries per second are handled.
  * The DNS-over-HTTPS module handled reconnecting incorrectly and destroyed
    the nghttp2 context during callbacks. Thanks to the help from
    @kgillis2000 it was quickly found and fixed.
  * The way maximum QPS is handled has been changed by Petr Špaček @pspacek
    (ISC). The new way solves an over-shoot problem that happened due to
    max QPS being counted for the whole runtime and based on completed
    queries, not just sent.
  * A new option `qps_threshold_wait` has also been added. This controls
    the threshold for using `nanosleep()` between sending packet and the
    default is measured on start-up. If the time between packets, based on
    max QPS `-Q`, is smaller then no sleep will be performed. This improves
    performance when doing high max QPS limiting.
  * Other changes:
    - `dnsperf`: Statistics output
      - Fixed missing connection statistics if only reconnections happened
      - Flush output to allow pipe/grep processing
      - Add percentage on reconnections based on total connections
    - Support OpenSSL 3.0+
  * Commits:
    9aca046 OpenSSL 3.0
    6d3d6b4 Stats, DoH
    316f901 qps_threshold_wait
    ed52770 WIP: use busy wait only if necessary
    32229b6 WIP: import nanosleep benchmark
    1842b88 Fix dnsperf -Q to not overshot target value</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1686830400">- Release 2.13.0
  * This release adds a new option `-O tls-sni=...` to set the Server Name
    Indication when using TLS transport, currently for DNS-over-TLS and
    DNS-over-HTTPS.
  * Commits:
    dbe84f6 TLS SNI
    5fb2282 Add TLS Server Name Indication extension support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1692792000">- Release 2.13.1
  * This release fixes a few issues with in-progress queries and the TCP
    transport module.
  * When using stateful connections, such as TCP, if the full query couldn't
    be sent in one go then the query and connection could get stuck as
    "in-progress".
    This could easily happen if you limited the in-flight queries to 1 and
    sent very large DNS messages using the stream binary format.
    Additional socket ready checks has been added to flush in-progress
    queries as quickly as possible.
  * The TCP module's handling of errors when continuing in-progress queries
    has been fixed. Previously it would interpret EAGAIN as an unrecoverable
    error and trigger a reconnect, dropping the quer-y/ies in-progress for
    that connection.
  * Other changes:
    - Fix input data buffer to allow for maximum binary blob wire format, 2 byte size + max DNS message
    - Mention PowerTools repository for building on CentOS etc
  * Commits:
    56e180c In-progress, bitmaps, clang-format
    bbc48db In-progress
    059619d In-progress
    752575a TCP EAGAIN
    d51a453 Max input
    76764d7 64k TCP/DoT payload support
    8201f50 Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1705579200">- Release 2.14.0
  * This release rewords connection statistics, adds names to threads and
    fixes a bug with using TSIG in more than one thread.
  * In "Connection Statistics", reconnections has been renamed to
    connection attempts and now includes both the initial connection
    attempt and following reconnections.
  * If supported, threads will now be named after what they do, such as
    "perf-send-&lt;num&gt;" and "perf-recv-&lt;num&gt;".
  * The TSIG context was shared between all threads and would case a crash
    if more than one sending thread was used. This has been fixed and TSIG
    contexts are now per thread.
  * Commits:
    81dc36b TSIG context per thread
    55011c6 Thread names
    8bdd480 thread names
    17c680d Set thread names for dnsperf
    54e641d Add library function to set thread names
    fb19440 Dockerfile
    a80de21 Reword connection statistics
    688a4fd Reword connection statistics</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1768824000">- Release 2.15.0
  * This release brings several new features and a few bug fixes.
  * Both `dnsperf` and `resperf` will now report statistics on receiving
    unexpected DNS message IDs in responses.
  * Datafiles now support `\DDD` encoding in domain names as specified in
    RFC1035 "5.1. Format".
  * Thanks to funding from Internet Systems Consortium (isc.org) statistics
    in `dnsperf` can now be outputted as a stream of JSON objects using
    the new option `-j`, see man-page for more details.
  * Bugfixes:
    - Output correct histogram for connection latency, it was showing the histogram for response latency
    - Fixed double new-line in some perf_log_* calls
  * Other changes:
    - `dnsperf`: Fixed order of options in man-page
    - `test`: Use valid DNS queries as largest UDP and TCP test payloads
    - Fixed/modernize spec file
    - Fix for gcov, was not removing old profile data from subdirectories
    - `resperf`: Fixed scan-build inability to know fatal ends the program
    - Fixed test 5, wait for background process instead of sleeping
    - `test5`: Use a different port for DoH, `dumdumd` and `dumdohd` seems to interfere with each other
    - `Dockerfile`: Track the latest LTS version of Ubuntu
    - Migrate to Codeberg
  * Commits:
    40adb3e Copyright
    9ce0a3f openSUSE/SLE packages
    3cef733 json-c
    09d9e5d quoting
    ab4632d json statistics
    f3e95e6 json statistics
    4952b6c domain name quoting
    4145323 Conn Latency histogram
    b3cd9c6 Track the latest LTS version of Ubuntu in the Dockerfile
    0b02010 fix scan-build
    d9f2df9 CI updates
    bd1fdf3 CI
    0bf22cd bsd builds, debian build
    6d67d0d builds
    12d6789 Migrate to Codeberg
    0585df1 unexpected
    5748811 Add stats for unexpected message IDs
    c4a3515 test 5
    acfe3bc test5
    fcb556e fix gcov
    15057bc SPEC
    3c131a7 Badges
    1ef5b41 largest blobs
    ef41ffa Use valid DNS queries as largest UDP and TCP test payloads
    32d2a7e Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1776254400">- Release 2.15.1
  * This release fixes issues receiving DNS-over-HTTPS responses, previously
    responses could be dropped due to incorrect handling in callbacks from
    libnghttp2.
  * Other changes;
    - Updated internal known QTYPE table
    - Updates to CI
  * Commits:
    53c06f2 DoH
    ad8c352 DOH
    16a2975 actions
    ed0a553 QTYPEs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1785931200">- Release 2.16.0
  * This release adds TLS session resumption and `SSLKEYLOGFILE` support
    for DNS-over-TLS and DNS-over-HTTPS, work contributed by
    Ranya Sharma (PCH) and Sara Dickinson (Sinodun IT).
  * Commits:
    2b91cd0 format, fixes, doc, tests
    3c3f521 Implement session resumption for DoT and DoH</changelog>
</package>
<package pkgid="3348e5e31cdf7c77202e78d2dcec73d403a885245d2a3b11f36c7344bcbd4d0d" name="dnsperf" arch="x86_64">
  <version epoch="0" ver="2.16.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.2-1" date="1614081600">- Release 2.4.2
  * This release fixes a few issues with reading of the datafile which
    could lead to "ran out of data" errors.
  * The problem was that reading from the datafile was done before finding
    a socket to send it on, or socket readyness, and that lead to progressing
    the queries without really doing anything.
    Another issues that's been fixed was that if the read lines perfectly
    aligned with the buffer, it would be treated like EOF and caused an exit.
  * Commits:
    9937287 resperf TLS
    6736956 datafile
    55faec6 ran out of data</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1615550400">- Release 2.5.0
  * This release adds re-connection support for TCP and DoT protocol,
    new options to `resperf` and fixes a few bugs.
  * `dnsperf` and `resperf` will now try to re-connect when they lose a TCP
    or DoT connection, and with that comes a few new statistics metrics.
    For `dnsperf`, if a connection oriented protocol is used, it will now
    show the total number of re-connections made and the connection latency.
    For `resperf` it also shows the total number of re-connections made and
    the gnuplot data now contains the total number of connections made and
    the connection latency for each interval.
    Beside re-connection support, improvements have been made when it comes
    to tracking socket readiness while connections are established which
    should generate less warnings about "socket not ready".
  * New `resperf` options:
    - `-R`: Reopen the datafile if it runs out of data before the testing
      is completed. This allows for long running tests on very small and
      simple query datafile.
    - `-F &lt;fall_behind&gt;`: Sets the maximum number of queries that can fall
      behind being sent. `resperf` will stop when this many queries should
      have been sent and it can be relative easy to hit if `-m &lt;max_qps&gt;`
      is set too high.
      The default is 1000 and setting it to zero (0) disables the check.
  * Bugfixes:
    - Fixed port handling for host/network format when setting client side
      port with `-x`
    - Fix support for quoted characters, `\000` and `\.`, in domain names,
      this was lost when removing BIND's internal development libraries
    - Fix issue in `dnsperf`, it would loop forever if no connection could
      be established
    - Fix potential buffer overrun in `resperf` when using response id
      for `queries[]`
    - DoT: Fix bug when sending from buffer
  * Other changes:
    - Always use `IPV6_V6ONLY` socket option for IPv6
    - Add man-page on `-W` option added in v2.4.0
    - Reformat man-pages
    - `resperf`:
      - Try and process more request each run to hopefully not hit max
        outstanding so easy when high QPS
      - Add default value to `-C` so it shows in help
  * Commits:
    9308361 man-page format
    0e52fb4 man-page, opts, tuneups
    e36211d stats
    d9b9ba3 Response qid to index
    2b2c37e fixes, reconnection
    acd31e5 dname quote
    de8f049 net</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1616414400">- Release 2.5.1
  * This release re-adds support for TYPEnnn and ANY in the datafile, this
    was missed during the removal of the dependency on BINDs development
    libraries in v2.4.0.
  * Also note that with v2.5.0, this software now depends on Concurrency
    Kit (ck) for atomic operations.
  * Commits:
    924e6ea ANY
    0a444c0 TYPEnnn</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1616673600">- Release 2.5.2
  * This release tweaks the reconnect code for TCP and DoT.
  * For TCP, atomic operations are used to signal the need to reconnect
    from the receiving thread to the sending, as the sending is the one in
    charge of reconnecting.
    This speeds up detection of connection lost which reduces the amount of
    lost queries on a disconnect.
  * This change does not affect DoT as much, as the SSL context shared
    between the threads are protected by a mutex.
    But a bug was found in `sendto()` for DoT that could drop a query if
    the socket was busy sending.
  * The connect and reconnect socket events has been split into connecting,
    connected and reconnecting, reconnected. This is to report more correct
    reconnect events when it comes to DoT, because the connection can be
    lost while negotiating TLS.
  * Lastly, additional tests has been added for the network code.
  * Commits:
    d9e5663 net test
    22f49df network tests
    8e5b56e reconnect</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.6.0-1" date="1622462400">- Release 2.6.0
  * This release adds EDNS options parameter `-E` to `resperf` and a script
    for generating EDNS Client Subnet options (see `contrib/ecs-gen`).
  * Commits:
    d29d880 ECS opt
    877f31e edns option</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1628510400">- Release 2.7.0
  * This release adds DNS-over-HTTPS support!
  * DNS-over-HTTPS can be used by specifying transport mode `doh` and you
    should also look at the dnsperf(1) man-page (or `-H`) for the extended
    options `doh-uri` and `doh-method`, which controls aspects of DoH/HTTP/2
    that you might want to set.
  * Other fixes:
    - Add check when constructing DNS packet so that total length of labels
      does not exceed 255 bytes
    - Fix connection/reconnection state handling for DoT transport
    - Fix event handling by initializing them directly when opening the
      sockets, otherwise events could have been missed which would give
      incorrect statistics
  * Commits:
    61b5eac Tests with dumdumd
    d71071c Tests with dumdumd
    b42f92e DoH sending
    2fa40bb Net stats
    f7f8692 DoH fixes
    ea62b49 DoH concurrent streams
    91929f1 DoH reconnect
    17660e6 DoH fixes
    5276aa6 resperf buckets
    585860e Packages
    3ffc601 Fixes
    1570609 Man-page
    6bcadc7 README
    f81adf1 Fixes
    1acd71f Code structure
    6c47876 Fixes
    2d379f4 Fixes
    4d5384b Fixes
    cee93b3 Initial DNS-over-HTTPS support implementation
    4ff3ebc Events
    8b24bbf DoT state
    6a5b5ef Fix too long name
    71fa09f long opts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.1-1" date="1631880000">- Release 2.7.1
  * This release fixes issues with constructing wire-format DNS when the
    domain names includes escaped characters such as `\123` or `\.`.
  * Other changes:
    - Bump Debian package compat level to 10
  * Commits:
    4873f02 DNS encoding
    c4eccc0 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1635854400">- Release 2.8.0
  * This release fixes response handling for DNS-over-HTTPS when multiple
    responses are received within the same receive cycle, and adds a new
    option to suppress some of the normal and verbose output.
  * The network model within dnsperf and resperf can not process more then
    one response at a time from a protocol module, so a buffer has been added
    to the DNS-over-HTTPS module to handle this situation (this already exists
    in all other modules).
  * The new option `-O suppress=&lt;message,...&gt;` can selectively suppress parts
    of the normal and verbose output. Some of these messages might be
    excessively displayed due to the network model and depending on what
    protocol you use which makes usage harder then necessary. For example
    during TCP connection stage, if you end-point is slow to establish
    connection you will get a lot of output saying that the socket isn't ready
    yet.
  * Commits:
    6a452b0 DoH response handling
    e2828e7 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1638964800">- Release 2.9.0
  * This release brings a new message suppression option and a way to control
    how many queries are sent over a connection.
  * You can now suppress the message about receiving unexpected DNS message
    IDs by using `-O suppress=unexpected`.
  * With `-O num-queries-per-conn=&lt;num&gt;` you can now limit the number of
    queries sent over a connection before triggering a re-connection, see
    the `dnsperf(3)` man-page for more information how this works.
  * Commits:
    cd9df40 Tests
    864a968 Queries per connection
    7c5d6ab Suppress unexpected
    8e9f4a2 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1668168000">- Release 2.10.0
  * This release adds a binary datafile (DNS wire) format to `dnsperf`
    thanks to a contribution from Petr Špaček @pspacek (ISC).
  * The new binary format greatly improves performance in some cases, for
    Petr's case it was testing dynamic updates. Switching to this
    pre-compiled DNS wire format increased QPS from 4k to 600k, an increase
    of 150 times throughput from `dnsperf`!
  * See man-page for `-B` for more information and examples how to use.
  * Commits:
    5971cb9 Doc
    a241068 CodeQL
    2a7d10a Fix CodeQL workflow
    0ce15f6 Fix COPR
    0ae4a54 CodeQL
    f52e4b1 wire format input
    c423aa9 wire format input
    2b0693d Input binary format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1675857600">- Release 2.11.0
  * A couple of new features this release courtesy of Petr Špaček
    @pspacek (ISC) and a bunch of bugfixes.
  * First off `dnsperf` can now do verbose statistics during each interval
    when using `-S`, see long option `verbose-interval-stats`.
  * Next is a new latency histogram output using data structures (hg64)
    created by Tony Finch @fanf2 (ISC), see long option
    `latency-histogram`. These will also be shown during `-S` when used
    together with `verbose-interval-stats`.
  * Lastly a small change to boolean long options, they no longer require
    a value (`=yes`) to be enabled.
  * Bugfixes:
    - Make sure the number of outstanding queries don't go negative,
      happens if queries are timed out before being sent
    - Fixed #208:
      - `recv_one()`: Fix handling errno, only store EAGAIN if no other
        error has been received
      - `do_recv()`: Don't break on error as it will count it as a received
        message
      - Treat `EBADF` as `EAGAIN` for stateful connections, receive thread
        might read from a closed socket if send thread is reconnecting
    - `dnsperf`: warn if -c, -T, -q, -Q values are auto-adjusted
    - Fixed #222: don't process unexpected message if the message is
      suppressed
  * Commits:
    14db835 Opt arg
    fb81481 Suppress unexpected
    64b8c6d stats_t initialization
    8290775 Fix first call to diff_stats
    4f8bd24 Compile support histograms
    a9b4f04 External code, latency histograms
    d1f4b65 add detailed latency histograms
    044e3a2 data structures for detailed latency histograms
    ad3fb03 Opt, verbose statistics
    38bc936 Command usage warnings
    9f31595 Bad file descriptor
    d3650eb Receive socket error handling
    84c8e72 Negative outstanding
    e7df5e1 Clarify meaning of dnsperf -S output in the man page
    830eb43 verbose interval stats for dnsperf</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1678449600">- Release 2.11.1
  * Fixed long option argument handling that broke in v2.11.0 and enhanced
    long option help text, now includes argument type.
  * Commits:
    034e893 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1678968000">- Release 2.11.2
  * Fixed long option argument handling (again), wasn't completely fixed
    in v2.11.1.
  * Commits:
    e6dbd78 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1684670400">- Release 2.12.0
  * This release fixes a segfault when doing DNS-over-HTTPS and changes the
    way maximum queries per second are handled.
  * The DNS-over-HTTPS module handled reconnecting incorrectly and destroyed
    the nghttp2 context during callbacks. Thanks to the help from
    @kgillis2000 it was quickly found and fixed.
  * The way maximum QPS is handled has been changed by Petr Špaček @pspacek
    (ISC). The new way solves an over-shoot problem that happened due to
    max QPS being counted for the whole runtime and based on completed
    queries, not just sent.
  * A new option `qps_threshold_wait` has also been added. This controls
    the threshold for using `nanosleep()` between sending packet and the
    default is measured on start-up. If the time between packets, based on
    max QPS `-Q`, is smaller then no sleep will be performed. This improves
    performance when doing high max QPS limiting.
  * Other changes:
    - `dnsperf`: Statistics output
      - Fixed missing connection statistics if only reconnections happened
      - Flush output to allow pipe/grep processing
      - Add percentage on reconnections based on total connections
    - Support OpenSSL 3.0+
  * Commits:
    9aca046 OpenSSL 3.0
    6d3d6b4 Stats, DoH
    316f901 qps_threshold_wait
    ed52770 WIP: use busy wait only if necessary
    32229b6 WIP: import nanosleep benchmark
    1842b88 Fix dnsperf -Q to not overshot target value</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1686830400">- Release 2.13.0
  * This release adds a new option `-O tls-sni=...` to set the Server Name
    Indication when using TLS transport, currently for DNS-over-TLS and
    DNS-over-HTTPS.
  * Commits:
    dbe84f6 TLS SNI
    5fb2282 Add TLS Server Name Indication extension support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1692792000">- Release 2.13.1
  * This release fixes a few issues with in-progress queries and the TCP
    transport module.
  * When using stateful connections, such as TCP, if the full query couldn't
    be sent in one go then the query and connection could get stuck as
    "in-progress".
    This could easily happen if you limited the in-flight queries to 1 and
    sent very large DNS messages using the stream binary format.
    Additional socket ready checks has been added to flush in-progress
    queries as quickly as possible.
  * The TCP module's handling of errors when continuing in-progress queries
    has been fixed. Previously it would interpret EAGAIN as an unrecoverable
    error and trigger a reconnect, dropping the quer-y/ies in-progress for
    that connection.
  * Other changes:
    - Fix input data buffer to allow for maximum binary blob wire format, 2 byte size + max DNS message
    - Mention PowerTools repository for building on CentOS etc
  * Commits:
    56e180c In-progress, bitmaps, clang-format
    bbc48db In-progress
    059619d In-progress
    752575a TCP EAGAIN
    d51a453 Max input
    76764d7 64k TCP/DoT payload support
    8201f50 Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1705579200">- Release 2.14.0
  * This release rewords connection statistics, adds names to threads and
    fixes a bug with using TSIG in more than one thread.
  * In "Connection Statistics", reconnections has been renamed to
    connection attempts and now includes both the initial connection
    attempt and following reconnections.
  * If supported, threads will now be named after what they do, such as
    "perf-send-&lt;num&gt;" and "perf-recv-&lt;num&gt;".
  * The TSIG context was shared between all threads and would case a crash
    if more than one sending thread was used. This has been fixed and TSIG
    contexts are now per thread.
  * Commits:
    81dc36b TSIG context per thread
    55011c6 Thread names
    8bdd480 thread names
    17c680d Set thread names for dnsperf
    54e641d Add library function to set thread names
    fb19440 Dockerfile
    a80de21 Reword connection statistics
    688a4fd Reword connection statistics</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1768824000">- Release 2.15.0
  * This release brings several new features and a few bug fixes.
  * Both `dnsperf` and `resperf` will now report statistics on receiving
    unexpected DNS message IDs in responses.
  * Datafiles now support `\DDD` encoding in domain names as specified in
    RFC1035 "5.1. Format".
  * Thanks to funding from Internet Systems Consortium (isc.org) statistics
    in `dnsperf` can now be outputted as a stream of JSON objects using
    the new option `-j`, see man-page for more details.
  * Bugfixes:
    - Output correct histogram for connection latency, it was showing the histogram for response latency
    - Fixed double new-line in some perf_log_* calls
  * Other changes:
    - `dnsperf`: Fixed order of options in man-page
    - `test`: Use valid DNS queries as largest UDP and TCP test payloads
    - Fixed/modernize spec file
    - Fix for gcov, was not removing old profile data from subdirectories
    - `resperf`: Fixed scan-build inability to know fatal ends the program
    - Fixed test 5, wait for background process instead of sleeping
    - `test5`: Use a different port for DoH, `dumdumd` and `dumdohd` seems to interfere with each other
    - `Dockerfile`: Track the latest LTS version of Ubuntu
    - Migrate to Codeberg
  * Commits:
    40adb3e Copyright
    9ce0a3f openSUSE/SLE packages
    3cef733 json-c
    09d9e5d quoting
    ab4632d json statistics
    f3e95e6 json statistics
    4952b6c domain name quoting
    4145323 Conn Latency histogram
    b3cd9c6 Track the latest LTS version of Ubuntu in the Dockerfile
    0b02010 fix scan-build
    d9f2df9 CI updates
    bd1fdf3 CI
    0bf22cd bsd builds, debian build
    6d67d0d builds
    12d6789 Migrate to Codeberg
    0585df1 unexpected
    5748811 Add stats for unexpected message IDs
    c4a3515 test 5
    acfe3bc test5
    fcb556e fix gcov
    15057bc SPEC
    3c131a7 Badges
    1ef5b41 largest blobs
    ef41ffa Use valid DNS queries as largest UDP and TCP test payloads
    32d2a7e Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1776254400">- Release 2.15.1
  * This release fixes issues receiving DNS-over-HTTPS responses, previously
    responses could be dropped due to incorrect handling in callbacks from
    libnghttp2.
  * Other changes;
    - Updated internal known QTYPE table
    - Updates to CI
  * Commits:
    53c06f2 DoH
    ad8c352 DOH
    16a2975 actions
    ed0a553 QTYPEs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1785931200">- Release 2.16.0
  * This release adds TLS session resumption and `SSLKEYLOGFILE` support
    for DNS-over-TLS and DNS-over-HTTPS, work contributed by
    Ranya Sharma (PCH) and Sara Dickinson (Sinodun IT).
  * Commits:
    2b91cd0 format, fixes, doc, tests
    3c3f521 Implement session resumption for DoT and DoH</changelog>
</package>
<package pkgid="f773eadd86a5c62c6e335d2e1edc5f7b6447aac6c06e3dee8b30d1b6be0669b5" name="dnswire" arch="src">
  <version epoch="0" ver="0.5.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1584705600">- Release v0.1.1
  * Fix RPM devel package dependencies
  * Commits:
    b451169 package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.2.0-1" date="1603454400">- Release 0.2.0
  * This release fixes various issues and bugs in the API, fix typos and
    adds coverage tests.
  * Fixes:
    - `dnstap_decode_protobuf()`: Fix setting of unknown socket family and protocol, was setting DNSTAP_MESSAGE_TYPE_ enums.
    - `enum dnstap_message_type`: Fix typo in unknown enum, now correct `DNSTAP_SOCKET_FAMILY_UNKNOWN`
    - `dnswire_encoder_encode()`: Remove setting state when to the same state it was
    - `dnswire_writer_set_bufsize()`: Fix bug with changing buffer size while having something in the buffer
  * Commits:
    3bfd7e2 Travis, configure
    27f69ab Coverage
    d04b810 Coverage
    ee153d7 Badges
    a381843 Travis
    f3a3e43 COPR
    4b6640f Compile warnings
    bc1b2e2 Funding
    ae537a9 Examples, tests
    c139dd7 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.0-1" date="1643198400">- Release 0.3.0
  * This release updates the Protobuf definition for DNSTAP to include
    new message types, new protocols and the new Policy object.
  * Changes:
    - Update debhelper compatibility level to 10
    - Update to latest `dnstap.pb`, new message types, protocols and message policy
  * Commits:
    87e7909 New dnstap.pb
    f215476 debhelper
    20bf38f Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.1-1" date="1643716800">- Release 0.3.1
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Bump SO version for Debian/Ubuntu</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.2-1" date="1643803200">- Release 0.3.2
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Fix Debian/Ubuntu package replaces/breaks to solve filename conflicts
  * Commits:
    dea8e35 Deb packages
    8398f65 Deb packages</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.3-1" date="1643803201">- Release 0.3.3
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Replace/break all previous Debian/Ubuntu versions</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.4.0-1" date="1677844800">- Release 0.4.0
  * Updated `dnstap.pb` to include recently added DNS-over-QUIC (DOQ)
    socket protocol.
  * Commits:
    a03a989 Fix COPR
    e3f1167 dnstap.pb, DOQ</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.5.0-1" date="1773316800">- Release 0.5.0
  * This release updates DNSTAP's protobuf to include the recently added
    HTTP Protocol attribute in Message along with a few bug fixes.
  * Bug fixes:
    - Add libprotobuf-c to pkg-config dependencies to correctly build on some platforms
    - Fix missing decode checks for Message type and and socket protocol
    - Correct setting the right _UNKNOWN for several enums
    - Fix reader_sender example
    - Fix various packaging and CI issues
  * Commits:
    46526c4 Copyright
    508a19a Fixes
    c0b588b clean up, autoconf, !wip, DNSTAP
    118858e pkgconfig
    266058e fix scan-build
    4b93d68 CI updates
    2454951 builds
    4f83aaf Codeberg, docs
    50ee1ab SPEC
    e559d1b Example
    5281827 Badges
    27dc30d Workflow
    a3dea1f Workflow
    fef838c RPM, Test</changelog>
</package>
<package pkgid="74830652ad7bfe61bfc646dcedcd9764515cb01d3c46eb66964103226dfd1aee" name="dnswire-devel" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1584705600">- Release v0.1.1
  * Fix RPM devel package dependencies
  * Commits:
    b451169 package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.2.0-1" date="1603454400">- Release 0.2.0
  * This release fixes various issues and bugs in the API, fix typos and
    adds coverage tests.
  * Fixes:
    - `dnstap_decode_protobuf()`: Fix setting of unknown socket family and protocol, was setting DNSTAP_MESSAGE_TYPE_ enums.
    - `enum dnstap_message_type`: Fix typo in unknown enum, now correct `DNSTAP_SOCKET_FAMILY_UNKNOWN`
    - `dnswire_encoder_encode()`: Remove setting state when to the same state it was
    - `dnswire_writer_set_bufsize()`: Fix bug with changing buffer size while having something in the buffer
  * Commits:
    3bfd7e2 Travis, configure
    27f69ab Coverage
    d04b810 Coverage
    ee153d7 Badges
    a381843 Travis
    f3a3e43 COPR
    4b6640f Compile warnings
    bc1b2e2 Funding
    ae537a9 Examples, tests
    c139dd7 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.0-1" date="1643198400">- Release 0.3.0
  * This release updates the Protobuf definition for DNSTAP to include
    new message types, new protocols and the new Policy object.
  * Changes:
    - Update debhelper compatibility level to 10
    - Update to latest `dnstap.pb`, new message types, protocols and message policy
  * Commits:
    87e7909 New dnstap.pb
    f215476 debhelper
    20bf38f Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.1-1" date="1643716800">- Release 0.3.1
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Bump SO version for Debian/Ubuntu</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.2-1" date="1643803200">- Release 0.3.2
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Fix Debian/Ubuntu package replaces/breaks to solve filename conflicts
  * Commits:
    dea8e35 Deb packages
    8398f65 Deb packages</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.3-1" date="1643803201">- Release 0.3.3
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Replace/break all previous Debian/Ubuntu versions</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.4.0-1" date="1677844800">- Release 0.4.0
  * Updated `dnstap.pb` to include recently added DNS-over-QUIC (DOQ)
    socket protocol.
  * Commits:
    a03a989 Fix COPR
    e3f1167 dnstap.pb, DOQ</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.5.0-1" date="1773316800">- Release 0.5.0
  * This release updates DNSTAP's protobuf to include the recently added
    HTTP Protocol attribute in Message along with a few bug fixes.
  * Bug fixes:
    - Add libprotobuf-c to pkg-config dependencies to correctly build on some platforms
    - Fix missing decode checks for Message type and and socket protocol
    - Correct setting the right _UNKNOWN for several enums
    - Fix reader_sender example
    - Fix various packaging and CI issues
  * Commits:
    46526c4 Copyright
    508a19a Fixes
    c0b588b clean up, autoconf, !wip, DNSTAP
    118858e pkgconfig
    266058e fix scan-build
    4b93d68 CI updates
    2454951 builds
    4f83aaf Codeberg, docs
    50ee1ab SPEC
    e559d1b Example
    5281827 Badges
    27dc30d Workflow
    a3dea1f Workflow
    fef838c RPM, Test</changelog>
</package>
<package pkgid="4b2417eccb64098eb0e69205ea90801ed8f5b2b6a7be77d1901e900ca77a552a" name="dnswire-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1584705600">- Release v0.1.1
  * Fix RPM devel package dependencies
  * Commits:
    b451169 package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.2.0-1" date="1603454400">- Release 0.2.0
  * This release fixes various issues and bugs in the API, fix typos and
    adds coverage tests.
  * Fixes:
    - `dnstap_decode_protobuf()`: Fix setting of unknown socket family and protocol, was setting DNSTAP_MESSAGE_TYPE_ enums.
    - `enum dnstap_message_type`: Fix typo in unknown enum, now correct `DNSTAP_SOCKET_FAMILY_UNKNOWN`
    - `dnswire_encoder_encode()`: Remove setting state when to the same state it was
    - `dnswire_writer_set_bufsize()`: Fix bug with changing buffer size while having something in the buffer
  * Commits:
    3bfd7e2 Travis, configure
    27f69ab Coverage
    d04b810 Coverage
    ee153d7 Badges
    a381843 Travis
    f3a3e43 COPR
    4b6640f Compile warnings
    bc1b2e2 Funding
    ae537a9 Examples, tests
    c139dd7 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.0-1" date="1643198400">- Release 0.3.0
  * This release updates the Protobuf definition for DNSTAP to include
    new message types, new protocols and the new Policy object.
  * Changes:
    - Update debhelper compatibility level to 10
    - Update to latest `dnstap.pb`, new message types, protocols and message policy
  * Commits:
    87e7909 New dnstap.pb
    f215476 debhelper
    20bf38f Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.1-1" date="1643716800">- Release 0.3.1
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Bump SO version for Debian/Ubuntu</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.2-1" date="1643803200">- Release 0.3.2
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Fix Debian/Ubuntu package replaces/breaks to solve filename conflicts
  * Commits:
    dea8e35 Deb packages
    8398f65 Deb packages</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.3-1" date="1643803201">- Release 0.3.3
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Replace/break all previous Debian/Ubuntu versions</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.4.0-1" date="1677844800">- Release 0.4.0
  * Updated `dnstap.pb` to include recently added DNS-over-QUIC (DOQ)
    socket protocol.
  * Commits:
    a03a989 Fix COPR
    e3f1167 dnstap.pb, DOQ</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.5.0-1" date="1773316800">- Release 0.5.0
  * This release updates DNSTAP's protobuf to include the recently added
    HTTP Protocol attribute in Message along with a few bug fixes.
  * Bug fixes:
    - Add libprotobuf-c to pkg-config dependencies to correctly build on some platforms
    - Fix missing decode checks for Message type and and socket protocol
    - Correct setting the right _UNKNOWN for several enums
    - Fix reader_sender example
    - Fix various packaging and CI issues
  * Commits:
    46526c4 Copyright
    508a19a Fixes
    c0b588b clean up, autoconf, !wip, DNSTAP
    118858e pkgconfig
    266058e fix scan-build
    4b93d68 CI updates
    2454951 builds
    4f83aaf Codeberg, docs
    50ee1ab SPEC
    e559d1b Example
    5281827 Badges
    27dc30d Workflow
    a3dea1f Workflow
    fef838c RPM, Test</changelog>
</package>
<package pkgid="db40c8c07ae73f5644e98a27d50cb5d5b52ea8cb80043f8c63350dd4cebc6296" name="drool" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150600.2.2"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.1-1" date="1488801600">- Initial package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.2-1" date="1490443200">- Release 1.0.0-beta.2
  * Some minor changes and documentation updates prior to making the
    repository public.
  * Commits:
    79ce5cc Add description
    3f63cff Update all submodules to latest develop
    0bbe9dc Log format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.3-1" date="1490788800">- Release 1.0.0-beta.3
  * Various compatibility fixes across GNU/Linux, FreeBSD, OpenBSD and
    OS X, along with a bugfix in pcap-thread.
  * Special thanks to Brian Carpenter (@geeknik) for fuzzing drool.
  * Commits:
    82273cc Fix #50: Compat for OS X
    fc9d87c Issue #50: Update pcap-thread to v2.1.2
    04817f0 const not needed on size_t
    7ab1811 Update submodules: sllq v1.0.0, parseconf v1.0.0 and omg-dns
            v1.0.0
    242c67a Fix CID 1421861
    9f3914f Add Travis and Coverity badges
    ae33c90 Check for `clock_gettime()` in librt, needed for older glibc
    594c877 Add Travis-CI
    b7e19a2 Fix compiler warnings and check errors from `sigwait()`
    3b9f2dc Fix #43, fix #44, fix #45: Update pcap-thread to fix one off
            in IP layer</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.4-1" date="1503403200">- Release 1.0.0-beta.4
  * Compatibility fixes and packaging.
  * Commits:
    f6b6251 Fix #66: Check for libev/ev.h also
    8dff723 Code formatting
    a5af21d Update pcap-thread to v2.1.3
    e622612 Prepare SPEC for OSB/COPR
    3c8fbb0 Fix #57: Update README with build tools and environment setup
    456d586 Add debian packaging files
    a0a74cb Add dependencies</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.rc.1-1" date="1505736000">- Release 1.0.0-rc.1
  * Mostly documentation updates and clarifications but also a new timing
    mode `best_effort` to send packets as fast as possible without warnings
    and a correct usage of `nanosleep()` on systems that does not support
    `clock_nanosleep()`.
  * Commits:
    114f984 Fix #74: Best effort timing mode, fix usage of `nanosleep()`
    a32201c Rework development notes
    3999214 Add examples and default values
    1e70ab9 Design documentation
    6e530ee Fix #64: More documentation around context and client_pool,
            and how configuration relates to each other.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1513684800">- Release 1.0.1 (v1.0)
  * Thanks to a few people, especially Petr Špaček @pspacek (CZ.NIC), for
    testing and reporting issues and other oddities (documentation is hard),
    release v1.0 is now ready!
    9c26a5a pcap-thread and tests
  * Increase of version because of how distributions compare package versions.
  * Commits:
    f9a55bc Update pcap-thread to v3.1.0
    a069d84 Fix #87: Use `sockaddr_storage`, add more debug and error messages
    047abe6 Fix #84: don't loop client list on timeout handling
    5377698 Fix #82: Parse TCP payload, add Known Issues
    05013f0 Fix #82: Send query length
    aea71ad Correct `timing multiply` in README also
    6437fe7 Fix man page example for timing multiply</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1516104000">- Release 1.0.2
  * Bugfixes:
    - TCP option parsing was fixed in pcap-thread 3.0.0 but the work-around
      code was still in drool
    - The month in the console output was incorrect
  * Commits:
    a47ed95 Update copyright year
    4d44801 TCP options was fixed in pcap-thread 3.0.0
    cb5cebf Fix #93: `tm_mon` is 0-11</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1518782400">- Release 1.1.0
  * Rework of the timing code to make it more effective, based on
    proof-of-concept from Petr Špaček @pspacek (CZ.NIC).
  * The `best_effort` timing mode is now deprecated, this is now the same
    mode as `keep` and the warnings `keep` made when unable to follow
    timings have been removed.
  * Commits:
    6e81a31 Timing
    d30918c WIP: timing rework</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.1-7" date="1530878400">- Release 1.99.1
  * Alpha version using dnsjit</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.2-1" date="1532001600">- Alpha release 1.99.2</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.3-1" date="1533124800">- Alpha release 1.99.3</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.4-1" date="1548417600">- Alpha release 1.99.4</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.0-1" date="1626436800">- Release 2.0.0
  * This major release is a complete rewrite of drool to Lua using dnsjit!
  * This includes two commands:
    - `drool reply`: replay DNS traffic from packet capture (PCAP) files
      and send it to a specified server, with options such as to manipulate
      the timing between packets, as well as loop packets infinitely or for
      a set number of iterations.
    - `drool respdiff`: replay DNS queries found in the PCAP, but only if
      a correlating response is also found. The query, original response
      and the received response is then stored into a LMDB database which
      can then be used by respdiff by CZ.NIC (see https://gitlab.labs.nic.cz/knot/respdiff)
      for analysis.
  * See `man drool`, `man drool reply` and `man drool respdiff` for more
    information.
  * Commits:
    9357c54 RPM
    dc27432 configure
    5a60fd3 Bye Travis
    21d950c Info, Travis
    eb44217 Badges
    5623d60 COPR
    1b5bd66 COPR, spec
    2033d26 Package
    61264d2 Funding
    c3eb323 (tag: v1.99.4) Copyright, v1.99.4
    ff9dfd5 Timing Mode
    fc55d2d (tag: v1.99.3) Respdiff fix
    e432c91 (tag: v1.99.2) Respdiff, v1.99.2
    8e99d0e Dependencies
    46712c0 Packaging
    dcc5450 Configure options
    de63694 (tag: v1.99.1) Rewrite, v1.99.1
    e96a9f9 (tag: v1.99.0) Backends
    8c99925 pcapthread
    cf3f65a Split
    99542e5 Rewrite into Lua using `dnsjit`</changelog>
</package>
<package pkgid="cb848150c6761a3d50413db3ef919b8802b142cb50b0b5a50faa5d8a1454ae72" name="drool" arch="src">
  <version epoch="0" ver="2.0.0" rel="150600.2.2"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.1-1" date="1488801600">- Initial package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.2-1" date="1490443200">- Release 1.0.0-beta.2
  * Some minor changes and documentation updates prior to making the
    repository public.
  * Commits:
    79ce5cc Add description
    3f63cff Update all submodules to latest develop
    0bbe9dc Log format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.3-1" date="1490788800">- Release 1.0.0-beta.3
  * Various compatibility fixes across GNU/Linux, FreeBSD, OpenBSD and
    OS X, along with a bugfix in pcap-thread.
  * Special thanks to Brian Carpenter (@geeknik) for fuzzing drool.
  * Commits:
    82273cc Fix #50: Compat for OS X
    fc9d87c Issue #50: Update pcap-thread to v2.1.2
    04817f0 const not needed on size_t
    7ab1811 Update submodules: sllq v1.0.0, parseconf v1.0.0 and omg-dns
            v1.0.0
    242c67a Fix CID 1421861
    9f3914f Add Travis and Coverity badges
    ae33c90 Check for `clock_gettime()` in librt, needed for older glibc
    594c877 Add Travis-CI
    b7e19a2 Fix compiler warnings and check errors from `sigwait()`
    3b9f2dc Fix #43, fix #44, fix #45: Update pcap-thread to fix one off
            in IP layer</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.beta.4-1" date="1503403200">- Release 1.0.0-beta.4
  * Compatibility fixes and packaging.
  * Commits:
    f6b6251 Fix #66: Check for libev/ev.h also
    8dff723 Code formatting
    a5af21d Update pcap-thread to v2.1.3
    e622612 Prepare SPEC for OSB/COPR
    3c8fbb0 Fix #57: Update README with build tools and environment setup
    456d586 Add debian packaging files
    a0a74cb Add dependencies</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0.rc.1-1" date="1505736000">- Release 1.0.0-rc.1
  * Mostly documentation updates and clarifications but also a new timing
    mode `best_effort` to send packets as fast as possible without warnings
    and a correct usage of `nanosleep()` on systems that does not support
    `clock_nanosleep()`.
  * Commits:
    114f984 Fix #74: Best effort timing mode, fix usage of `nanosleep()`
    a32201c Rework development notes
    3999214 Add examples and default values
    1e70ab9 Design documentation
    6e530ee Fix #64: More documentation around context and client_pool,
            and how configuration relates to each other.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1513684800">- Release 1.0.1 (v1.0)
  * Thanks to a few people, especially Petr Špaček @pspacek (CZ.NIC), for
    testing and reporting issues and other oddities (documentation is hard),
    release v1.0 is now ready!
    9c26a5a pcap-thread and tests
  * Increase of version because of how distributions compare package versions.
  * Commits:
    f9a55bc Update pcap-thread to v3.1.0
    a069d84 Fix #87: Use `sockaddr_storage`, add more debug and error messages
    047abe6 Fix #84: don't loop client list on timeout handling
    5377698 Fix #82: Parse TCP payload, add Known Issues
    05013f0 Fix #82: Send query length
    aea71ad Correct `timing multiply` in README also
    6437fe7 Fix man page example for timing multiply</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1516104000">- Release 1.0.2
  * Bugfixes:
    - TCP option parsing was fixed in pcap-thread 3.0.0 but the work-around
      code was still in drool
    - The month in the console output was incorrect
  * Commits:
    a47ed95 Update copyright year
    4d44801 TCP options was fixed in pcap-thread 3.0.0
    cb5cebf Fix #93: `tm_mon` is 0-11</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1518782400">- Release 1.1.0
  * Rework of the timing code to make it more effective, based on
    proof-of-concept from Petr Špaček @pspacek (CZ.NIC).
  * The `best_effort` timing mode is now deprecated, this is now the same
    mode as `keep` and the warnings `keep` made when unable to follow
    timings have been removed.
  * Commits:
    6e81a31 Timing
    d30918c WIP: timing rework</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.1-7" date="1530878400">- Release 1.99.1
  * Alpha version using dnsjit</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.2-1" date="1532001600">- Alpha release 1.99.2</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.3-1" date="1533124800">- Alpha release 1.99.3</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.99.4-1" date="1548417600">- Alpha release 1.99.4</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.0.0-1" date="1626436800">- Release 2.0.0
  * This major release is a complete rewrite of drool to Lua using dnsjit!
  * This includes two commands:
    - `drool reply`: replay DNS traffic from packet capture (PCAP) files
      and send it to a specified server, with options such as to manipulate
      the timing between packets, as well as loop packets infinitely or for
      a set number of iterations.
    - `drool respdiff`: replay DNS queries found in the PCAP, but only if
      a correlating response is also found. The query, original response
      and the received response is then stored into a LMDB database which
      can then be used by respdiff by CZ.NIC (see https://gitlab.labs.nic.cz/knot/respdiff)
      for analysis.
  * See `man drool`, `man drool reply` and `man drool respdiff` for more
    information.
  * Commits:
    9357c54 RPM
    dc27432 configure
    5a60fd3 Bye Travis
    21d950c Info, Travis
    eb44217 Badges
    5623d60 COPR
    1b5bd66 COPR, spec
    2033d26 Package
    61264d2 Funding
    c3eb323 (tag: v1.99.4) Copyright, v1.99.4
    ff9dfd5 Timing Mode
    fc55d2d (tag: v1.99.3) Respdiff fix
    e432c91 (tag: v1.99.2) Respdiff, v1.99.2
    8e99d0e Dependencies
    46712c0 Packaging
    dcc5450 Configure options
    de63694 (tag: v1.99.1) Rewrite, v1.99.1
    e96a9f9 (tag: v1.99.0) Backends
    8c99925 pcapthread
    cf3f65a Split
    99542e5 Rewrite into Lua using `dnsjit`</changelog>
</package>
<package pkgid="4b72368caa7a158bc9ad8a8bee228f1a03b8b65ed9c5badaaf2311381caa69fc" name="dsc" arch="aarch64">
  <version epoch="0" ver="2.16.1" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1534248000">- Release 2.7.0
  * Add support for Linux "cooked" capture encapsulation (`DLT_LINUX_SLL`).
  * Fixes:
    - `grok_question()`: Remove usage of `strcpy()`
    - `pcap_tcp_handler()`: Use `snprintf()`
    - `printable_dnsname()`: Use `snprintf()`
    - Fix CID 104450, 186871
  * Commits:
    41d59ac man-page HTML
    476d6ed pcap_layers, CID
    747131b Configure options
    43c9ad0 DLT_LINUX_SLL
    8a48667 Support the linux cooked sll frame
    bd4a94f Fix CID 104450
- change me</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1549886400">- Release 2.8.0
  * This release brings an new indexer `response_time` (funded by NIC.AT!),
    support for MaxMind DB (GeoIP2) and an option to set the DNS port.
  * The new indexer `response_time` can track queries and report the time
    it took to receive the response in buckets of microseconds or in
    logarithmic scales (see `response_time_mode`). It will also report
    timeouts, missing queries (received a response but have never seen the
    query), dropped queries (due to memory limitations) and internal errors.
  * Here is an example output of log10 mode:
    &lt;array name="response_time" dimensions="2" start_time="1478727151"
        stop_time="1478727180"&gt;
      &lt;dimension number="1" type="All"/&gt;
      &lt;dimension number="2" type="ResponseTime"/&gt;
      &lt;data&gt;
        &lt;All val="ALL"&gt;
          &lt;ResponseTime val="100000-1000000" count="77"/&gt;
          &lt;ResponseTime val="10000-100000" count="42"/&gt;
          &lt;ResponseTime val="1000-10000" count="3"/&gt;
          &lt;ResponseTime val="missing_queries" count="1"/&gt;
        &lt;/All&gt;
      &lt;/data&gt;
    &lt;/array&gt;
  * New configuration options:
    - `asn_indexer_backend`: Control what backend to use for the ASN indexer
    - `country_indexer_backend`: Control what backend to use for the
      country indexer
    - `maxminddb_asn`: Specify database for ASN lookups using MaxMind DB
    - `maxminddb_country`: Specify database for country lookups using
      MaxMind DB
    - `dns_port`: Control the DNS port
    - `response_time_mode`: Set the output mode of the response time indexer
    - `response_time_bucket_size`: The size of bucket (microseconds)
    - Following options exists to control internal aspects of `response_time`
      indexer, see man-page for more information:
      - `response_time_max_queries`
      - `response_time_full_mode`
      - `response_time_max_seconds`
      - `response_time_max_sec_mode`
  * Fixes:
    - Add LGTM and fix alerts
    - Update `pcap_layers` with fixes for `scan-build` warnings
    - Fix port in debug output of DNS message, was showing server port
      on responses
  * Commits:
    f38a655 License
    48cd44e Man-page, interface any, response time
    8b9345f LGTM Alert
    e57a013 DNS port
    38aa018 Response time statistics
    7a60d53 Cleanup
    5c45ce2 Copyright
    0dc8a3c MaxMind DB (GeoIP2)
    473387b LGTM, README, packages, scan-build</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.1-1" date="1556020800">- Release 2.8.1
  * Added all missing config options for the response time indexer:
    - `response_time_mode`
    - `response_time_bucket_size`
    - `response_time_max_queries`
    - `response_time_full_mode`
    - `response_time_max_seconds`
    - `response_time_max_sec_mode`
  * Commits:
    36f0280 Response time config</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1584705600">- Release 2.9.0
  * This release adds support for receiving DNS messages over DNSTAP along
    with documentation updates and eliminated compiler warnings.
  * To enable DNSTAP support, install dependencies (check `README.md`) and
    run configure with `--enable-dnstap`.
  * New configuration options:
    - `dnstap_file`: specify input from DNSTAP file
    - `dnstap_unixsock`: specify DNSTAP input from UNIX socket
    - `dnstap_tcp`: specify DNSTAP input from TCP connections (dsc listens)
    - `dnstap_udp`: specify DNSTAP input from UDP connections (dsc listens)
    - `dnstap_network`: specify network information in place of missing DNSTAP attributes
  * Other changes:
    - Add documentation about extra configure options that might be needed for FreeBSD/OpenBSD
    - Fix compile warnings on FreeBSD 11.2
    - Fix compile warning `snprintf()` truncation
    - Packaging updates
  * Commits:
    60e6950 DNSTAP
    af0417b README
    1f1b489 COPR, spec
    435e136 Package
    3f24feb FreeBSD 11 compatibility
    563b986 Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.1-1" date="1585828800">- Release 2.9.1
  * This release fixes a few bugs, removes a lot of the debug messages
    about DNSTAP and removes GeoIP from openSUSE/SLE packages as it has
    been deprecated on those platforms.
  * Changes:
    - `daemon`: Fix bug with listening for SIGINT when in foreground mode
    - `dnstap`:
      - Fix #217: Unlink UNIX socket on exit if successfully initiated
      - Fix startup bug, `exit()` if unable to initialize
      - Fix #220:
        - Remove/hide a lot of debug messages and the printing of the DNSTAP message
        - Clarify a lot of the info and error messages
        - Prefix all DNSTAP related messages with `DNSTAP: `
    - Fix compile warnings and include headers when GeoIP is missing
    - `asn_indexer`: Fix bug, said unknown IPv4 when it was IPv6
  * Commits:
    08bad5b DNSTAP debug
    1232264 LGTM
    589ea7a GeoIP, asn indexer
    4fea0d2 sigint, DNSTAP UNIX socket, DNSTAP init</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1588852800">- Release 2.10.0
  * This release adds new configuration options to `dnstap_unixsock` to
    control ownership and permissions for the DNSTAP socket file.
  * Other fixes:
    - Unlink the DNSTAP socket file if an error during initialization occur
    - Do hard exit in forks to not run `atexit()` (which will unlink the
      DNSTAP socket file)
  * Commits:
    9d1d49a fork
    733b286 DNSTAP socket</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1591012800">- Release 2.11.0
  * This release updates the built in known TLDs table and adds the optional
    configuration option `knowntlds_file` to, instead of using the built in
    table, load the data from a file.
  * If compiled with only MaxMindDB support then ASN and Country indexer
    would complain (and exit) that no database has been specified.
    This release changes the behavior to match that of GeoIP support,
    making it possible to run without specifying a database.
  * Other changes:
    - Fix compile warnings
    - COPR packaging fixes
    - `country_indexer`: Fixed typos in log messages (was copied from ASN)
    - Fix issues and false-positives reported by newer version of scan-build
  * Commits:
    e937d1 COPR
    1382370 country, asn
    423a813 scanbuild
    2571b97 Compile warnings
    4f69447 Known TLDs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1597752000">- Release 2.11.1
  * This release fixes a 17-year old code cut&amp;paste mistake in the
    classification indexer, until now it's been classifying funny query
    types based on the query class. This fix was sent in by Jim Hague
    (Sinodun), thanks Jim!
  * Other changes are based on code analysis reports and setup for code
    coverage.
  * Commits:
    8d4763c Correct funny-qtype classification.
    a1dd55e getline
    29bd143 Coverage
    685e504 SonarCloud
    f759515 Badges</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1603195200">- Release 2.11.2
  * This release fixes a bug in `asn_indexer` that didn't enabled the usage
    of MaxMindDB after successful initiation. Other changes include a typo
    fix in `configure` and a lot of coverage tests.
  * Commits:
    395b11a Travis, configure
    ffea9ed Tests
    8b0bebd Tests
    09f8174 Config tests
    d1514d4 Coverage
    66b018c Coverage, ASN indexer</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1642075200">- Release 2.12.0
  * This release adds a new conf option `tld_list` to control what DSC
    considers are TLDs, and a script to convert the Public Suffix List to
    this format (see `man dsc-psl-convert` for more information).
  * For example, using this option will allow DSC to gather statistics on
    domains like `co.uk` and `net.au` that would otherwise be counted as
    `uk` and `au`.
  * The release also updates the man-pages, clarifying how to use multiple
    `interface` and other similar options. And removes the deprecated cron
    upload scripts.
  * Commits:
    e779a87 Remove upload scripts
    2880f93 PSL TLD list
    ea04022 Update Copyright and known TLDs
    5cbc7a4 Output format
    b7e6c35 Doc
    e66dae4 dh_auto_test
    6a3e817 debhelper
    89d033f Bye Travis
    fa1c179 Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1643371200">- Release 2.13.0
  * This release fixes a huge performance issue with hashing IPv6
    addresses, adds support for new DNSTAP messages types and protocols,
    and adds two new indexers.
  * Thanks to a patch sent in by Ken Renard (@kdrenard) a rather huge
    performance issue related to hashing IPv6 addresses has been solved.
    Old code used a very incorrect assumption about addresses in general
    and while same way was used for IPv4, it didn't hit as hard as it did
    for IPv6.
    New code uses hashing functions on both address types and to quote
    the GitHub issue (by Ken):
    -"This performs about 5% better than what I did (51 sec versus 54 sec)
      for 5GB pcap file with nearly 50/50 split of IPv4 and IPv6 (3.7M/3.5M
      v4/v6 queries).
      Old inXaddr_hash() has been running for 75 minutes and is about 20%
      done. I say this is a winner!"
    Many thanks to Ken for pointing this out and supplying a patch!
  * DSC now depends on dnswire v0.3.0 which includes new DNSTAP messages
    types and protocols that was recently added to DNSTAP's Protobuf
    definition.
    The new `UPDATE_QUERY` and `UPDATE_RESPONSE` messages types are
    now supported and are interpret as `AUTH_QUERY` and `AUTH_RESPONSE`.
    The new socket protocols for DOT, DOH and DNSCrypt are also supported
    and are interpret as TCP for indexers such as `ip_proto` and
    `transport`. To get stats on the encryption itself you can use the
    new indexer `encryption`.
  * Two new indexers have been added:
    - `label_count`: Number of labels in the QNAME
    - `encryption`: Indicates whether the DNS message was carried over an
      encrypted connection or not, and if so over which. For example
      "unencrypted", "dot" (DNS-over-TLS), "doh" (DNS-over-HTTPS).
  * Other changes:
    - `inX_addr`: Rework structure, separate IPv4 and IPv6 addresses
    - Fix some DNSTAP tests
    - `transport_index`: Fix typo in code documentation
  * Commits:
    37df703 DNSTAP update, encryption indexer
    d27171f Label count indexer
    6932247 Adding labellen indexer which counts the number of labels in a DNS message
    68cc9c7 New IP hashing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1650542400">- Release 2.13.1
  * This patch release is mainly for build and packages where MaxMind DB
    library is preferred over the legacy GeoIP library.
    MaxMind has announced that the databases for GeoIP will be EOL May 2022
    and recommends switching to GeoIP2 databases.
  * Also updated DSC's description, removing references to the now
    discontinued Presenter and pointing to dsc-datatool instead.
  * Commits:
    d891e2c Package, description
    c23406c Optional GeoIP
    26dd506 GeoIP</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.2-1" date="1676030400">- Release 2.13.2
  * Updated pcap-thread to v4.0.1:
    Fixed issue with `pcap_dispatch()` during non-threaded timed runs by
    checking packet timestamp and use `pcap_breakloop()` if the run
    should end.
    Based on reports, it looks like `pcap_dispatch()` won't stop
    processing if load is high enough even if documentation says "only
    one bufferful of packets is read at a time".
  * Many thanks to Klaus Darilion @klaus3000 (NIC.AT) for the report
    and helping to track down the issue and test fixes!
  * Commits:
    e7d92fe Fix COPR
    7ecf217 pcap-thread</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1680523200">- Release 2.14.0
  * This release adds new configure option to control the file access to
    the output files, support for newer DNSTAP, improved DNSTAP message
    handling and updated Public Suffix List.
    - Fix #279: Add new conf options to control output file access:
      - `output_user`: set output file user ownership
      - `output_group`: set output file group ownership
      - `output_mod`: set output file mode bits
    - `dnstap`: Move DNSTAP essential attributes checks inside each type and customize them for that specific type
    - Update dnswire dependencies to v0.4.0
    - `encryption_index`: Add support for new DNSTAP DNS-over-QUIC socket protocol
    - Update builtin Public Suffix List (PSL)
  * Commits:
    abfe245 DNSTAP
    da06317 Output file access
    af01a48 DOQ transport, PSL update</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.1-1" date="1686830400">- Release 2.14.1
  * Fixed a bug in TLD handling when using `tld_list`, it did not reset
    where it was in the QNAME when nothing was found and could therefor
    wrongly indicate something as a TLD.
    Also fixed a typo in the `dsc.conf` man-page.
  * Commits:
    976589d GCOV
    c3afee4 TLD list, doc typo</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1691582400">- Release 2.15.0
  * This release fixes DNS parsing w.r.t. EDNS, implements better loop
    detection during name decompression and adds a lot of EDNS indexers
    and filters.
  * Previously the DNS parser expected the additional records to come
    straight after the question section. Meaning that if the DNS packet
    had any answer or authority records, they would be parsed as additional
    records for the OPT record and EDNS information.
  * Following new indexers has been added:
    - edns_cookie
    - edns_cookie_len
    - edns_cookie_client
    - edns_cookie_server
    - edns_ecs
    - edns_ecs_family
    - edns_ecs_source_prefix
    - edns_ecs_scope_prefix
    - edns_ecs_address
    - edns_ecs_subnet
    - edns_ede
    - edns_ede_code
    - edns_ede_textlen
    - edns_ede_text
    - edns_nsid
    - edns_nsid_len
    - edns_nsid_data
    - edns_nsid_text
    Following new filters has been added:
    - edns0-only
    - edns0-cookie-only
    - edns0-nsid-only
    - edns0-ede-only
    - edns0-ecs-only
    See man-page dsc.conf(5) for more information.
  * Other fixes/additions:
    - Only parse entire DNS message if EDNS indexers are used
    - `dns_protocol`: Implement proper loop detection during decompression
    - `xmalloc`: Check return of `amalloc()` before using `memset()`/`memcpy()` because it's undefined behavior on null pointers
  * Commits:
    8259f30 EDNS filters
    41f3b9a strtohex, nsid text
    a666c04 EDNS(0) Client Subnet
    b5164fe EDNS
    7cabfd9 EDNS0 parsing fixes and additional EDNS0 indexers.
    46b1797 memcpy/memset fixes
    8fd7b7a EDNS parsing
    cee2bf7 EDNS0 parsing, multi RR test
    a2c00c9 DNS compression loop detection
    9875a3e RR parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1713873600">- Release 2.15.1
  * This release fixes client subnet indexer which overwrote the mask
    options during initialization so the conf option `client_v4_mask` and
    `client_v6_mask` was never used.
  * Other changes:
    - Update documentation
    - Update builtin known TLDs based on PSL
    - Update copyright year
  * Commits:
    d577a97 Copyright
    f71edff Known TLDs
    dedafdd Client mask
    8ef947c Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.2-1" date="1725019200">- Release 2.15.2
  * This releases fixes 3 issues detected by code analysis tools:
    - File not closed and memory not freed during error while loading known
      TLD file
    - https://github.com/DNS-OARC/dsc/security/code-scanning/22
      label buffer should be static
    - https://github.com/DNS-OARC/dsc/security/code-scanning/20
      unsigned difference expression
  * Commits:
    855f037 CodeQL
    b00cb11 Stack
    c4d3634 Sonar
    26c3b9e Badges, fixes
    b4a9171 Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1781092800">- Release 2.16.0
  * This release updates funny classes/qtypes for the query classification
    indexer, updates pcap-threads to v4.2.0 and, thanks to Jens Finkhaeuser,
    fixes a 8 year old bug from a refactoring (sorry!).
  * The query classification indexers funny class/qtype list has been updated
    to use the (semi-automatically updated) full list from IANA, which had
    not been updated for a while. So you'll see a lot less funny stuff now,
    no promises tho, it's DNS after all.
  * With pcap-thread v4.2.0, DSC now supports reading link-type Linux cooked
    v2 (DLT_LINUX_SLL2) and better handling when processing PCAPs.
  * The priming query filter was incorrectly refactored to return true if it
    wasn't a priming query, this has been fixed so it once again return true
    for priming queries.
  * Other changes are related to the migration to Codeberg, CI and
    documentation.
  * Commits:
    28e6194 Copyright, known TLDs, IANA types
    b6670f3 Fix comparison; strcmp() is funny.
    9025a0a actions
    37dcd3c autoconf, funny qtypes, known TLDs
    c4c3cfd fix scan-build
    c9348b2 CI updates
    869b833 builds
    6fc068c Migrate to Codeberg
    66888e1 pcap-thread
    aed7568 proper fix gcov
    f7a8f40 fix gcov
    0f59561 pcap-thread v4.1.1
    387bef3 pcap-thread v4.1.0
    8fc8446 SPEC
    e1b79a9 SPEC
    1a324cd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.1-1" date="1783080000">- Release 2.16.1
  * This release updates `pcap_layers` to allow for very large packets
    (&gt;1500 bytes).
  *  This can happen if you're using jumbo frames or are capturing packets
    before they are split into segments (TCP Segmentation Offloading etc).
    Previously, `pcap_layers` would silently drop any packet with a payload
    larger than 1460 bytes.
  * Commits:
    52fd4d9 fix large packets</changelog>
</package>
<package pkgid="27acef2f9a4950ec321646960f71c3ca2e1d9115c25175cf6f906bb7af55aec0" name="dsc" arch="src">
  <version epoch="0" ver="2.16.1" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1534248000">- Release 2.7.0
  * Add support for Linux "cooked" capture encapsulation (`DLT_LINUX_SLL`).
  * Fixes:
    - `grok_question()`: Remove usage of `strcpy()`
    - `pcap_tcp_handler()`: Use `snprintf()`
    - `printable_dnsname()`: Use `snprintf()`
    - Fix CID 104450, 186871
  * Commits:
    41d59ac man-page HTML
    476d6ed pcap_layers, CID
    747131b Configure options
    43c9ad0 DLT_LINUX_SLL
    8a48667 Support the linux cooked sll frame
    bd4a94f Fix CID 104450
- change me</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1549886400">- Release 2.8.0
  * This release brings an new indexer `response_time` (funded by NIC.AT!),
    support for MaxMind DB (GeoIP2) and an option to set the DNS port.
  * The new indexer `response_time` can track queries and report the time
    it took to receive the response in buckets of microseconds or in
    logarithmic scales (see `response_time_mode`). It will also report
    timeouts, missing queries (received a response but have never seen the
    query), dropped queries (due to memory limitations) and internal errors.
  * Here is an example output of log10 mode:
    &lt;array name="response_time" dimensions="2" start_time="1478727151"
        stop_time="1478727180"&gt;
      &lt;dimension number="1" type="All"/&gt;
      &lt;dimension number="2" type="ResponseTime"/&gt;
      &lt;data&gt;
        &lt;All val="ALL"&gt;
          &lt;ResponseTime val="100000-1000000" count="77"/&gt;
          &lt;ResponseTime val="10000-100000" count="42"/&gt;
          &lt;ResponseTime val="1000-10000" count="3"/&gt;
          &lt;ResponseTime val="missing_queries" count="1"/&gt;
        &lt;/All&gt;
      &lt;/data&gt;
    &lt;/array&gt;
  * New configuration options:
    - `asn_indexer_backend`: Control what backend to use for the ASN indexer
    - `country_indexer_backend`: Control what backend to use for the
      country indexer
    - `maxminddb_asn`: Specify database for ASN lookups using MaxMind DB
    - `maxminddb_country`: Specify database for country lookups using
      MaxMind DB
    - `dns_port`: Control the DNS port
    - `response_time_mode`: Set the output mode of the response time indexer
    - `response_time_bucket_size`: The size of bucket (microseconds)
    - Following options exists to control internal aspects of `response_time`
      indexer, see man-page for more information:
      - `response_time_max_queries`
      - `response_time_full_mode`
      - `response_time_max_seconds`
      - `response_time_max_sec_mode`
  * Fixes:
    - Add LGTM and fix alerts
    - Update `pcap_layers` with fixes for `scan-build` warnings
    - Fix port in debug output of DNS message, was showing server port
      on responses
  * Commits:
    f38a655 License
    48cd44e Man-page, interface any, response time
    8b9345f LGTM Alert
    e57a013 DNS port
    38aa018 Response time statistics
    7a60d53 Cleanup
    5c45ce2 Copyright
    0dc8a3c MaxMind DB (GeoIP2)
    473387b LGTM, README, packages, scan-build</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.1-1" date="1556020800">- Release 2.8.1
  * Added all missing config options for the response time indexer:
    - `response_time_mode`
    - `response_time_bucket_size`
    - `response_time_max_queries`
    - `response_time_full_mode`
    - `response_time_max_seconds`
    - `response_time_max_sec_mode`
  * Commits:
    36f0280 Response time config</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1584705600">- Release 2.9.0
  * This release adds support for receiving DNS messages over DNSTAP along
    with documentation updates and eliminated compiler warnings.
  * To enable DNSTAP support, install dependencies (check `README.md`) and
    run configure with `--enable-dnstap`.
  * New configuration options:
    - `dnstap_file`: specify input from DNSTAP file
    - `dnstap_unixsock`: specify DNSTAP input from UNIX socket
    - `dnstap_tcp`: specify DNSTAP input from TCP connections (dsc listens)
    - `dnstap_udp`: specify DNSTAP input from UDP connections (dsc listens)
    - `dnstap_network`: specify network information in place of missing DNSTAP attributes
  * Other changes:
    - Add documentation about extra configure options that might be needed for FreeBSD/OpenBSD
    - Fix compile warnings on FreeBSD 11.2
    - Fix compile warning `snprintf()` truncation
    - Packaging updates
  * Commits:
    60e6950 DNSTAP
    af0417b README
    1f1b489 COPR, spec
    435e136 Package
    3f24feb FreeBSD 11 compatibility
    563b986 Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.1-1" date="1585828800">- Release 2.9.1
  * This release fixes a few bugs, removes a lot of the debug messages
    about DNSTAP and removes GeoIP from openSUSE/SLE packages as it has
    been deprecated on those platforms.
  * Changes:
    - `daemon`: Fix bug with listening for SIGINT when in foreground mode
    - `dnstap`:
      - Fix #217: Unlink UNIX socket on exit if successfully initiated
      - Fix startup bug, `exit()` if unable to initialize
      - Fix #220:
        - Remove/hide a lot of debug messages and the printing of the DNSTAP message
        - Clarify a lot of the info and error messages
        - Prefix all DNSTAP related messages with `DNSTAP: `
    - Fix compile warnings and include headers when GeoIP is missing
    - `asn_indexer`: Fix bug, said unknown IPv4 when it was IPv6
  * Commits:
    08bad5b DNSTAP debug
    1232264 LGTM
    589ea7a GeoIP, asn indexer
    4fea0d2 sigint, DNSTAP UNIX socket, DNSTAP init</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1588852800">- Release 2.10.0
  * This release adds new configuration options to `dnstap_unixsock` to
    control ownership and permissions for the DNSTAP socket file.
  * Other fixes:
    - Unlink the DNSTAP socket file if an error during initialization occur
    - Do hard exit in forks to not run `atexit()` (which will unlink the
      DNSTAP socket file)
  * Commits:
    9d1d49a fork
    733b286 DNSTAP socket</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1591012800">- Release 2.11.0
  * This release updates the built in known TLDs table and adds the optional
    configuration option `knowntlds_file` to, instead of using the built in
    table, load the data from a file.
  * If compiled with only MaxMindDB support then ASN and Country indexer
    would complain (and exit) that no database has been specified.
    This release changes the behavior to match that of GeoIP support,
    making it possible to run without specifying a database.
  * Other changes:
    - Fix compile warnings
    - COPR packaging fixes
    - `country_indexer`: Fixed typos in log messages (was copied from ASN)
    - Fix issues and false-positives reported by newer version of scan-build
  * Commits:
    e937d1 COPR
    1382370 country, asn
    423a813 scanbuild
    2571b97 Compile warnings
    4f69447 Known TLDs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1597752000">- Release 2.11.1
  * This release fixes a 17-year old code cut&amp;paste mistake in the
    classification indexer, until now it's been classifying funny query
    types based on the query class. This fix was sent in by Jim Hague
    (Sinodun), thanks Jim!
  * Other changes are based on code analysis reports and setup for code
    coverage.
  * Commits:
    8d4763c Correct funny-qtype classification.
    a1dd55e getline
    29bd143 Coverage
    685e504 SonarCloud
    f759515 Badges</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1603195200">- Release 2.11.2
  * This release fixes a bug in `asn_indexer` that didn't enabled the usage
    of MaxMindDB after successful initiation. Other changes include a typo
    fix in `configure` and a lot of coverage tests.
  * Commits:
    395b11a Travis, configure
    ffea9ed Tests
    8b0bebd Tests
    09f8174 Config tests
    d1514d4 Coverage
    66b018c Coverage, ASN indexer</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1642075200">- Release 2.12.0
  * This release adds a new conf option `tld_list` to control what DSC
    considers are TLDs, and a script to convert the Public Suffix List to
    this format (see `man dsc-psl-convert` for more information).
  * For example, using this option will allow DSC to gather statistics on
    domains like `co.uk` and `net.au` that would otherwise be counted as
    `uk` and `au`.
  * The release also updates the man-pages, clarifying how to use multiple
    `interface` and other similar options. And removes the deprecated cron
    upload scripts.
  * Commits:
    e779a87 Remove upload scripts
    2880f93 PSL TLD list
    ea04022 Update Copyright and known TLDs
    5cbc7a4 Output format
    b7e6c35 Doc
    e66dae4 dh_auto_test
    6a3e817 debhelper
    89d033f Bye Travis
    fa1c179 Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1643371200">- Release 2.13.0
  * This release fixes a huge performance issue with hashing IPv6
    addresses, adds support for new DNSTAP messages types and protocols,
    and adds two new indexers.
  * Thanks to a patch sent in by Ken Renard (@kdrenard) a rather huge
    performance issue related to hashing IPv6 addresses has been solved.
    Old code used a very incorrect assumption about addresses in general
    and while same way was used for IPv4, it didn't hit as hard as it did
    for IPv6.
    New code uses hashing functions on both address types and to quote
    the GitHub issue (by Ken):
    -"This performs about 5% better than what I did (51 sec versus 54 sec)
      for 5GB pcap file with nearly 50/50 split of IPv4 and IPv6 (3.7M/3.5M
      v4/v6 queries).
      Old inXaddr_hash() has been running for 75 minutes and is about 20%
      done. I say this is a winner!"
    Many thanks to Ken for pointing this out and supplying a patch!
  * DSC now depends on dnswire v0.3.0 which includes new DNSTAP messages
    types and protocols that was recently added to DNSTAP's Protobuf
    definition.
    The new `UPDATE_QUERY` and `UPDATE_RESPONSE` messages types are
    now supported and are interpret as `AUTH_QUERY` and `AUTH_RESPONSE`.
    The new socket protocols for DOT, DOH and DNSCrypt are also supported
    and are interpret as TCP for indexers such as `ip_proto` and
    `transport`. To get stats on the encryption itself you can use the
    new indexer `encryption`.
  * Two new indexers have been added:
    - `label_count`: Number of labels in the QNAME
    - `encryption`: Indicates whether the DNS message was carried over an
      encrypted connection or not, and if so over which. For example
      "unencrypted", "dot" (DNS-over-TLS), "doh" (DNS-over-HTTPS).
  * Other changes:
    - `inX_addr`: Rework structure, separate IPv4 and IPv6 addresses
    - Fix some DNSTAP tests
    - `transport_index`: Fix typo in code documentation
  * Commits:
    37df703 DNSTAP update, encryption indexer
    d27171f Label count indexer
    6932247 Adding labellen indexer which counts the number of labels in a DNS message
    68cc9c7 New IP hashing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1650542400">- Release 2.13.1
  * This patch release is mainly for build and packages where MaxMind DB
    library is preferred over the legacy GeoIP library.
    MaxMind has announced that the databases for GeoIP will be EOL May 2022
    and recommends switching to GeoIP2 databases.
  * Also updated DSC's description, removing references to the now
    discontinued Presenter and pointing to dsc-datatool instead.
  * Commits:
    d891e2c Package, description
    c23406c Optional GeoIP
    26dd506 GeoIP</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.2-1" date="1676030400">- Release 2.13.2
  * Updated pcap-thread to v4.0.1:
    Fixed issue with `pcap_dispatch()` during non-threaded timed runs by
    checking packet timestamp and use `pcap_breakloop()` if the run
    should end.
    Based on reports, it looks like `pcap_dispatch()` won't stop
    processing if load is high enough even if documentation says "only
    one bufferful of packets is read at a time".
  * Many thanks to Klaus Darilion @klaus3000 (NIC.AT) for the report
    and helping to track down the issue and test fixes!
  * Commits:
    e7d92fe Fix COPR
    7ecf217 pcap-thread</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1680523200">- Release 2.14.0
  * This release adds new configure option to control the file access to
    the output files, support for newer DNSTAP, improved DNSTAP message
    handling and updated Public Suffix List.
    - Fix #279: Add new conf options to control output file access:
      - `output_user`: set output file user ownership
      - `output_group`: set output file group ownership
      - `output_mod`: set output file mode bits
    - `dnstap`: Move DNSTAP essential attributes checks inside each type and customize them for that specific type
    - Update dnswire dependencies to v0.4.0
    - `encryption_index`: Add support for new DNSTAP DNS-over-QUIC socket protocol
    - Update builtin Public Suffix List (PSL)
  * Commits:
    abfe245 DNSTAP
    da06317 Output file access
    af01a48 DOQ transport, PSL update</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.1-1" date="1686830400">- Release 2.14.1
  * Fixed a bug in TLD handling when using `tld_list`, it did not reset
    where it was in the QNAME when nothing was found and could therefor
    wrongly indicate something as a TLD.
    Also fixed a typo in the `dsc.conf` man-page.
  * Commits:
    976589d GCOV
    c3afee4 TLD list, doc typo</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1691582400">- Release 2.15.0
  * This release fixes DNS parsing w.r.t. EDNS, implements better loop
    detection during name decompression and adds a lot of EDNS indexers
    and filters.
  * Previously the DNS parser expected the additional records to come
    straight after the question section. Meaning that if the DNS packet
    had any answer or authority records, they would be parsed as additional
    records for the OPT record and EDNS information.
  * Following new indexers has been added:
    - edns_cookie
    - edns_cookie_len
    - edns_cookie_client
    - edns_cookie_server
    - edns_ecs
    - edns_ecs_family
    - edns_ecs_source_prefix
    - edns_ecs_scope_prefix
    - edns_ecs_address
    - edns_ecs_subnet
    - edns_ede
    - edns_ede_code
    - edns_ede_textlen
    - edns_ede_text
    - edns_nsid
    - edns_nsid_len
    - edns_nsid_data
    - edns_nsid_text
    Following new filters has been added:
    - edns0-only
    - edns0-cookie-only
    - edns0-nsid-only
    - edns0-ede-only
    - edns0-ecs-only
    See man-page dsc.conf(5) for more information.
  * Other fixes/additions:
    - Only parse entire DNS message if EDNS indexers are used
    - `dns_protocol`: Implement proper loop detection during decompression
    - `xmalloc`: Check return of `amalloc()` before using `memset()`/`memcpy()` because it's undefined behavior on null pointers
  * Commits:
    8259f30 EDNS filters
    41f3b9a strtohex, nsid text
    a666c04 EDNS(0) Client Subnet
    b5164fe EDNS
    7cabfd9 EDNS0 parsing fixes and additional EDNS0 indexers.
    46b1797 memcpy/memset fixes
    8fd7b7a EDNS parsing
    cee2bf7 EDNS0 parsing, multi RR test
    a2c00c9 DNS compression loop detection
    9875a3e RR parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1713873600">- Release 2.15.1
  * This release fixes client subnet indexer which overwrote the mask
    options during initialization so the conf option `client_v4_mask` and
    `client_v6_mask` was never used.
  * Other changes:
    - Update documentation
    - Update builtin known TLDs based on PSL
    - Update copyright year
  * Commits:
    d577a97 Copyright
    f71edff Known TLDs
    dedafdd Client mask
    8ef947c Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.2-1" date="1725019200">- Release 2.15.2
  * This releases fixes 3 issues detected by code analysis tools:
    - File not closed and memory not freed during error while loading known
      TLD file
    - https://github.com/DNS-OARC/dsc/security/code-scanning/22
      label buffer should be static
    - https://github.com/DNS-OARC/dsc/security/code-scanning/20
      unsigned difference expression
  * Commits:
    855f037 CodeQL
    b00cb11 Stack
    c4d3634 Sonar
    26c3b9e Badges, fixes
    b4a9171 Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1781092800">- Release 2.16.0
  * This release updates funny classes/qtypes for the query classification
    indexer, updates pcap-threads to v4.2.0 and, thanks to Jens Finkhaeuser,
    fixes a 8 year old bug from a refactoring (sorry!).
  * The query classification indexers funny class/qtype list has been updated
    to use the (semi-automatically updated) full list from IANA, which had
    not been updated for a while. So you'll see a lot less funny stuff now,
    no promises tho, it's DNS after all.
  * With pcap-thread v4.2.0, DSC now supports reading link-type Linux cooked
    v2 (DLT_LINUX_SLL2) and better handling when processing PCAPs.
  * The priming query filter was incorrectly refactored to return true if it
    wasn't a priming query, this has been fixed so it once again return true
    for priming queries.
  * Other changes are related to the migration to Codeberg, CI and
    documentation.
  * Commits:
    28e6194 Copyright, known TLDs, IANA types
    b6670f3 Fix comparison; strcmp() is funny.
    9025a0a actions
    37dcd3c autoconf, funny qtypes, known TLDs
    c4c3cfd fix scan-build
    c9348b2 CI updates
    869b833 builds
    6fc068c Migrate to Codeberg
    66888e1 pcap-thread
    aed7568 proper fix gcov
    f7a8f40 fix gcov
    0f59561 pcap-thread v4.1.1
    387bef3 pcap-thread v4.1.0
    8fc8446 SPEC
    e1b79a9 SPEC
    1a324cd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.1-1" date="1783080000">- Release 2.16.1
  * This release updates `pcap_layers` to allow for very large packets
    (&gt;1500 bytes).
  *  This can happen if you're using jumbo frames or are capturing packets
    before they are split into segments (TCP Segmentation Offloading etc).
    Previously, `pcap_layers` would silently drop any packet with a payload
    larger than 1460 bytes.
  * Commits:
    52fd4d9 fix large packets</changelog>
</package>
<package pkgid="cdd653a8f25c81acedb2876dafef96c34a205d4722c2fb7ee84940b2c55c7c2a" name="dsc" arch="x86_64">
  <version epoch="0" ver="2.16.1" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1534248000">- Release 2.7.0
  * Add support for Linux "cooked" capture encapsulation (`DLT_LINUX_SLL`).
  * Fixes:
    - `grok_question()`: Remove usage of `strcpy()`
    - `pcap_tcp_handler()`: Use `snprintf()`
    - `printable_dnsname()`: Use `snprintf()`
    - Fix CID 104450, 186871
  * Commits:
    41d59ac man-page HTML
    476d6ed pcap_layers, CID
    747131b Configure options
    43c9ad0 DLT_LINUX_SLL
    8a48667 Support the linux cooked sll frame
    bd4a94f Fix CID 104450
- change me</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1549886400">- Release 2.8.0
  * This release brings an new indexer `response_time` (funded by NIC.AT!),
    support for MaxMind DB (GeoIP2) and an option to set the DNS port.
  * The new indexer `response_time` can track queries and report the time
    it took to receive the response in buckets of microseconds or in
    logarithmic scales (see `response_time_mode`). It will also report
    timeouts, missing queries (received a response but have never seen the
    query), dropped queries (due to memory limitations) and internal errors.
  * Here is an example output of log10 mode:
    &lt;array name="response_time" dimensions="2" start_time="1478727151"
        stop_time="1478727180"&gt;
      &lt;dimension number="1" type="All"/&gt;
      &lt;dimension number="2" type="ResponseTime"/&gt;
      &lt;data&gt;
        &lt;All val="ALL"&gt;
          &lt;ResponseTime val="100000-1000000" count="77"/&gt;
          &lt;ResponseTime val="10000-100000" count="42"/&gt;
          &lt;ResponseTime val="1000-10000" count="3"/&gt;
          &lt;ResponseTime val="missing_queries" count="1"/&gt;
        &lt;/All&gt;
      &lt;/data&gt;
    &lt;/array&gt;
  * New configuration options:
    - `asn_indexer_backend`: Control what backend to use for the ASN indexer
    - `country_indexer_backend`: Control what backend to use for the
      country indexer
    - `maxminddb_asn`: Specify database for ASN lookups using MaxMind DB
    - `maxminddb_country`: Specify database for country lookups using
      MaxMind DB
    - `dns_port`: Control the DNS port
    - `response_time_mode`: Set the output mode of the response time indexer
    - `response_time_bucket_size`: The size of bucket (microseconds)
    - Following options exists to control internal aspects of `response_time`
      indexer, see man-page for more information:
      - `response_time_max_queries`
      - `response_time_full_mode`
      - `response_time_max_seconds`
      - `response_time_max_sec_mode`
  * Fixes:
    - Add LGTM and fix alerts
    - Update `pcap_layers` with fixes for `scan-build` warnings
    - Fix port in debug output of DNS message, was showing server port
      on responses
  * Commits:
    f38a655 License
    48cd44e Man-page, interface any, response time
    8b9345f LGTM Alert
    e57a013 DNS port
    38aa018 Response time statistics
    7a60d53 Cleanup
    5c45ce2 Copyright
    0dc8a3c MaxMind DB (GeoIP2)
    473387b LGTM, README, packages, scan-build</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.1-1" date="1556020800">- Release 2.8.1
  * Added all missing config options for the response time indexer:
    - `response_time_mode`
    - `response_time_bucket_size`
    - `response_time_max_queries`
    - `response_time_full_mode`
    - `response_time_max_seconds`
    - `response_time_max_sec_mode`
  * Commits:
    36f0280 Response time config</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1584705600">- Release 2.9.0
  * This release adds support for receiving DNS messages over DNSTAP along
    with documentation updates and eliminated compiler warnings.
  * To enable DNSTAP support, install dependencies (check `README.md`) and
    run configure with `--enable-dnstap`.
  * New configuration options:
    - `dnstap_file`: specify input from DNSTAP file
    - `dnstap_unixsock`: specify DNSTAP input from UNIX socket
    - `dnstap_tcp`: specify DNSTAP input from TCP connections (dsc listens)
    - `dnstap_udp`: specify DNSTAP input from UDP connections (dsc listens)
    - `dnstap_network`: specify network information in place of missing DNSTAP attributes
  * Other changes:
    - Add documentation about extra configure options that might be needed for FreeBSD/OpenBSD
    - Fix compile warnings on FreeBSD 11.2
    - Fix compile warning `snprintf()` truncation
    - Packaging updates
  * Commits:
    60e6950 DNSTAP
    af0417b README
    1f1b489 COPR, spec
    435e136 Package
    3f24feb FreeBSD 11 compatibility
    563b986 Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.1-1" date="1585828800">- Release 2.9.1
  * This release fixes a few bugs, removes a lot of the debug messages
    about DNSTAP and removes GeoIP from openSUSE/SLE packages as it has
    been deprecated on those platforms.
  * Changes:
    - `daemon`: Fix bug with listening for SIGINT when in foreground mode
    - `dnstap`:
      - Fix #217: Unlink UNIX socket on exit if successfully initiated
      - Fix startup bug, `exit()` if unable to initialize
      - Fix #220:
        - Remove/hide a lot of debug messages and the printing of the DNSTAP message
        - Clarify a lot of the info and error messages
        - Prefix all DNSTAP related messages with `DNSTAP: `
    - Fix compile warnings and include headers when GeoIP is missing
    - `asn_indexer`: Fix bug, said unknown IPv4 when it was IPv6
  * Commits:
    08bad5b DNSTAP debug
    1232264 LGTM
    589ea7a GeoIP, asn indexer
    4fea0d2 sigint, DNSTAP UNIX socket, DNSTAP init</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1588852800">- Release 2.10.0
  * This release adds new configuration options to `dnstap_unixsock` to
    control ownership and permissions for the DNSTAP socket file.
  * Other fixes:
    - Unlink the DNSTAP socket file if an error during initialization occur
    - Do hard exit in forks to not run `atexit()` (which will unlink the
      DNSTAP socket file)
  * Commits:
    9d1d49a fork
    733b286 DNSTAP socket</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1591012800">- Release 2.11.0
  * This release updates the built in known TLDs table and adds the optional
    configuration option `knowntlds_file` to, instead of using the built in
    table, load the data from a file.
  * If compiled with only MaxMindDB support then ASN and Country indexer
    would complain (and exit) that no database has been specified.
    This release changes the behavior to match that of GeoIP support,
    making it possible to run without specifying a database.
  * Other changes:
    - Fix compile warnings
    - COPR packaging fixes
    - `country_indexer`: Fixed typos in log messages (was copied from ASN)
    - Fix issues and false-positives reported by newer version of scan-build
  * Commits:
    e937d1 COPR
    1382370 country, asn
    423a813 scanbuild
    2571b97 Compile warnings
    4f69447 Known TLDs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1597752000">- Release 2.11.1
  * This release fixes a 17-year old code cut&amp;paste mistake in the
    classification indexer, until now it's been classifying funny query
    types based on the query class. This fix was sent in by Jim Hague
    (Sinodun), thanks Jim!
  * Other changes are based on code analysis reports and setup for code
    coverage.
  * Commits:
    8d4763c Correct funny-qtype classification.
    a1dd55e getline
    29bd143 Coverage
    685e504 SonarCloud
    f759515 Badges</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1603195200">- Release 2.11.2
  * This release fixes a bug in `asn_indexer` that didn't enabled the usage
    of MaxMindDB after successful initiation. Other changes include a typo
    fix in `configure` and a lot of coverage tests.
  * Commits:
    395b11a Travis, configure
    ffea9ed Tests
    8b0bebd Tests
    09f8174 Config tests
    d1514d4 Coverage
    66b018c Coverage, ASN indexer</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1642075200">- Release 2.12.0
  * This release adds a new conf option `tld_list` to control what DSC
    considers are TLDs, and a script to convert the Public Suffix List to
    this format (see `man dsc-psl-convert` for more information).
  * For example, using this option will allow DSC to gather statistics on
    domains like `co.uk` and `net.au` that would otherwise be counted as
    `uk` and `au`.
  * The release also updates the man-pages, clarifying how to use multiple
    `interface` and other similar options. And removes the deprecated cron
    upload scripts.
  * Commits:
    e779a87 Remove upload scripts
    2880f93 PSL TLD list
    ea04022 Update Copyright and known TLDs
    5cbc7a4 Output format
    b7e6c35 Doc
    e66dae4 dh_auto_test
    6a3e817 debhelper
    89d033f Bye Travis
    fa1c179 Mattermost</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1643371200">- Release 2.13.0
  * This release fixes a huge performance issue with hashing IPv6
    addresses, adds support for new DNSTAP messages types and protocols,
    and adds two new indexers.
  * Thanks to a patch sent in by Ken Renard (@kdrenard) a rather huge
    performance issue related to hashing IPv6 addresses has been solved.
    Old code used a very incorrect assumption about addresses in general
    and while same way was used for IPv4, it didn't hit as hard as it did
    for IPv6.
    New code uses hashing functions on both address types and to quote
    the GitHub issue (by Ken):
    -"This performs about 5% better than what I did (51 sec versus 54 sec)
      for 5GB pcap file with nearly 50/50 split of IPv4 and IPv6 (3.7M/3.5M
      v4/v6 queries).
      Old inXaddr_hash() has been running for 75 minutes and is about 20%
      done. I say this is a winner!"
    Many thanks to Ken for pointing this out and supplying a patch!
  * DSC now depends on dnswire v0.3.0 which includes new DNSTAP messages
    types and protocols that was recently added to DNSTAP's Protobuf
    definition.
    The new `UPDATE_QUERY` and `UPDATE_RESPONSE` messages types are
    now supported and are interpret as `AUTH_QUERY` and `AUTH_RESPONSE`.
    The new socket protocols for DOT, DOH and DNSCrypt are also supported
    and are interpret as TCP for indexers such as `ip_proto` and
    `transport`. To get stats on the encryption itself you can use the
    new indexer `encryption`.
  * Two new indexers have been added:
    - `label_count`: Number of labels in the QNAME
    - `encryption`: Indicates whether the DNS message was carried over an
      encrypted connection or not, and if so over which. For example
      "unencrypted", "dot" (DNS-over-TLS), "doh" (DNS-over-HTTPS).
  * Other changes:
    - `inX_addr`: Rework structure, separate IPv4 and IPv6 addresses
    - Fix some DNSTAP tests
    - `transport_index`: Fix typo in code documentation
  * Commits:
    37df703 DNSTAP update, encryption indexer
    d27171f Label count indexer
    6932247 Adding labellen indexer which counts the number of labels in a DNS message
    68cc9c7 New IP hashing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1650542400">- Release 2.13.1
  * This patch release is mainly for build and packages where MaxMind DB
    library is preferred over the legacy GeoIP library.
    MaxMind has announced that the databases for GeoIP will be EOL May 2022
    and recommends switching to GeoIP2 databases.
  * Also updated DSC's description, removing references to the now
    discontinued Presenter and pointing to dsc-datatool instead.
  * Commits:
    d891e2c Package, description
    c23406c Optional GeoIP
    26dd506 GeoIP</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.2-1" date="1676030400">- Release 2.13.2
  * Updated pcap-thread to v4.0.1:
    Fixed issue with `pcap_dispatch()` during non-threaded timed runs by
    checking packet timestamp and use `pcap_breakloop()` if the run
    should end.
    Based on reports, it looks like `pcap_dispatch()` won't stop
    processing if load is high enough even if documentation says "only
    one bufferful of packets is read at a time".
  * Many thanks to Klaus Darilion @klaus3000 (NIC.AT) for the report
    and helping to track down the issue and test fixes!
  * Commits:
    e7d92fe Fix COPR
    7ecf217 pcap-thread</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1680523200">- Release 2.14.0
  * This release adds new configure option to control the file access to
    the output files, support for newer DNSTAP, improved DNSTAP message
    handling and updated Public Suffix List.
    - Fix #279: Add new conf options to control output file access:
      - `output_user`: set output file user ownership
      - `output_group`: set output file group ownership
      - `output_mod`: set output file mode bits
    - `dnstap`: Move DNSTAP essential attributes checks inside each type and customize them for that specific type
    - Update dnswire dependencies to v0.4.0
    - `encryption_index`: Add support for new DNSTAP DNS-over-QUIC socket protocol
    - Update builtin Public Suffix List (PSL)
  * Commits:
    abfe245 DNSTAP
    da06317 Output file access
    af01a48 DOQ transport, PSL update</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.1-1" date="1686830400">- Release 2.14.1
  * Fixed a bug in TLD handling when using `tld_list`, it did not reset
    where it was in the QNAME when nothing was found and could therefor
    wrongly indicate something as a TLD.
    Also fixed a typo in the `dsc.conf` man-page.
  * Commits:
    976589d GCOV
    c3afee4 TLD list, doc typo</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1691582400">- Release 2.15.0
  * This release fixes DNS parsing w.r.t. EDNS, implements better loop
    detection during name decompression and adds a lot of EDNS indexers
    and filters.
  * Previously the DNS parser expected the additional records to come
    straight after the question section. Meaning that if the DNS packet
    had any answer or authority records, they would be parsed as additional
    records for the OPT record and EDNS information.
  * Following new indexers has been added:
    - edns_cookie
    - edns_cookie_len
    - edns_cookie_client
    - edns_cookie_server
    - edns_ecs
    - edns_ecs_family
    - edns_ecs_source_prefix
    - edns_ecs_scope_prefix
    - edns_ecs_address
    - edns_ecs_subnet
    - edns_ede
    - edns_ede_code
    - edns_ede_textlen
    - edns_ede_text
    - edns_nsid
    - edns_nsid_len
    - edns_nsid_data
    - edns_nsid_text
    Following new filters has been added:
    - edns0-only
    - edns0-cookie-only
    - edns0-nsid-only
    - edns0-ede-only
    - edns0-ecs-only
    See man-page dsc.conf(5) for more information.
  * Other fixes/additions:
    - Only parse entire DNS message if EDNS indexers are used
    - `dns_protocol`: Implement proper loop detection during decompression
    - `xmalloc`: Check return of `amalloc()` before using `memset()`/`memcpy()` because it's undefined behavior on null pointers
  * Commits:
    8259f30 EDNS filters
    41f3b9a strtohex, nsid text
    a666c04 EDNS(0) Client Subnet
    b5164fe EDNS
    7cabfd9 EDNS0 parsing fixes and additional EDNS0 indexers.
    46b1797 memcpy/memset fixes
    8fd7b7a EDNS parsing
    cee2bf7 EDNS0 parsing, multi RR test
    a2c00c9 DNS compression loop detection
    9875a3e RR parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1713873600">- Release 2.15.1
  * This release fixes client subnet indexer which overwrote the mask
    options during initialization so the conf option `client_v4_mask` and
    `client_v6_mask` was never used.
  * Other changes:
    - Update documentation
    - Update builtin known TLDs based on PSL
    - Update copyright year
  * Commits:
    d577a97 Copyright
    f71edff Known TLDs
    dedafdd Client mask
    8ef947c Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.2-1" date="1725019200">- Release 2.15.2
  * This releases fixes 3 issues detected by code analysis tools:
    - File not closed and memory not freed during error while loading known
      TLD file
    - https://github.com/DNS-OARC/dsc/security/code-scanning/22
      label buffer should be static
    - https://github.com/DNS-OARC/dsc/security/code-scanning/20
      unsigned difference expression
  * Commits:
    855f037 CodeQL
    b00cb11 Stack
    c4d3634 Sonar
    26c3b9e Badges, fixes
    b4a9171 Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1781092800">- Release 2.16.0
  * This release updates funny classes/qtypes for the query classification
    indexer, updates pcap-threads to v4.2.0 and, thanks to Jens Finkhaeuser,
    fixes a 8 year old bug from a refactoring (sorry!).
  * The query classification indexers funny class/qtype list has been updated
    to use the (semi-automatically updated) full list from IANA, which had
    not been updated for a while. So you'll see a lot less funny stuff now,
    no promises tho, it's DNS after all.
  * With pcap-thread v4.2.0, DSC now supports reading link-type Linux cooked
    v2 (DLT_LINUX_SLL2) and better handling when processing PCAPs.
  * The priming query filter was incorrectly refactored to return true if it
    wasn't a priming query, this has been fixed so it once again return true
    for priming queries.
  * Other changes are related to the migration to Codeberg, CI and
    documentation.
  * Commits:
    28e6194 Copyright, known TLDs, IANA types
    b6670f3 Fix comparison; strcmp() is funny.
    9025a0a actions
    37dcd3c autoconf, funny qtypes, known TLDs
    c4c3cfd fix scan-build
    c9348b2 CI updates
    869b833 builds
    6fc068c Migrate to Codeberg
    66888e1 pcap-thread
    aed7568 proper fix gcov
    f7a8f40 fix gcov
    0f59561 pcap-thread v4.1.1
    387bef3 pcap-thread v4.1.0
    8fc8446 SPEC
    e1b79a9 SPEC
    1a324cd Mailing-list</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.1-1" date="1783080000">- Release 2.16.1
  * This release updates `pcap_layers` to allow for very large packets
    (&gt;1500 bytes).
  *  This can happen if you're using jumbo frames or are capturing packets
    before they are split into segments (TCP Segmentation Offloading etc).
    Previously, `pcap_layers` would silently drop any packet with a payload
    larger than 1460 bytes.
  * Commits:
    52fd4d9 fix large packets</changelog>
</package>
<package pkgid="56db5726b69c12b2ba73bb4e49a1978fec360a7c3e98d7ae87aeddd27d475947" name="dsc-datatool" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150600.9.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.02-1" date="1481803200">- Initial package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.03-1" date="1481889600">- Release 0.03
  * Support processing of 25 of the 37 DAT files that the Extractor
    can produce, the others can not be converted into time series data
    since they lack timestamps.  Processing of XML is the recommended
    approach to secure all information.
  * Commits:
    72e829c Implement processing of DAT directories
    45294d0 RPM spec
    4e8ff69 Fix 5.24 forbidden keys usage
    7589ad2 Use perl 5.24 also
    cfac110 Fix #16: Handle directories in --xml and warn that --dat is
            not implemented yet</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.04-1" date="1548072000">- Release 0.04
  * Package dependency fix and update of example Grafana dashboards.
  * Commits:
    d3babc9 Copyright years
    9955c88 Travis Perl versions
    134a8b3 Debian dependency
    2d2114d Fix #23: Rework Grafana dashboards to hopefully show more
            correct numbers and also split them up.
    9bca0d3 Prepare SPEC for OSB/COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.05-1" date="1559304000">- Release 0.05
  * Fixed issue with empty values in InfluxDB output, they are now
    quoted as an empty string.
  * Commits:
    9917c4e InfluxDB quote keys/values</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1586952000">- Prepare for v1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-2" date="1596456000">- Release 1.0.0
  * This release brings a complete rewrite of the tool, from Perl to
    Python. This rewrite was made possible thanks to funding from EURid,
    and will help with maintainability and packaging.
  * Core design and command line syntax is kept the same but as the
    libraries the generators use have been changed additional command line
    options must be used.
    - client_subnet_authority (generator)
      This generator now uses IANA's IP address space registry CSVs to
      look up the network authority, therefor it needs either to fetch
      the CSV files or be given them on command line.
      See `man dsc-datatool-generator client_subnet_authority` for more
      information.
    - client_subnet_country (generator)
      This generator now uses MaxMind databases to look up country based
      on subnet.
      See `man dsc-datatool generator client_subnet_country` for more
      information and setup guide of the MaxMind databases.
  * Commits:
    589ea8b Badges
    c32038b nonstrict
    0ea3e32 LGTM
    cff2e1c COPR
    02c31b0 COPR
    e8332fd COPR
    6d9f71c Input, YAML
    93ba755 EPEL 8 packages
    3e2df6f Authority
    f5d023f Debian packaging
    1a59f09 Documentation
    85cb1e1 restructure
    decd3f6 man-pages, URLs
    f264854 man-pages
    d73c319 man-pages
    f5ca007 man-pages
    7bfaf53 Fedora dependencies
    3452b48 RPM dependencies
    7a4edbc Test
    ed43406 client_subnet_authority
    62c7d9d Server, node
    e0c6419 RPM package
    938f154 Rewrite
    5400464 README
    968ccb1 COPR, spec
    14d987f RPM requires
    ee10efb Package
    a25870f Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1596801600">- Release 1.0.1
  * This release adds compatibility with Python v3.5 which allows
    packages to be built for Ubuntu Xenial.
  * Commits:
    bc0be5b python 3.5</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1603281600">- Release 1.0.2
  * This release fixed a bug in DAT file parsing that was discovered when
    adding coverage tests.
  * Commits:
    45b1aa3 Coverage
    7aedc1a Coverage
    64957b9 DAT, Coverage
    370fb86 Coverage
    891cb7c Coverage
    9374faa Coverage</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1649160000">- Release 1.1.0
  * This releases adds support for Prometheus' node_exporter using it's
    Textfile Collector (see `man dsc-datatool-output prometheus`) and
    fixes a bug in InfluxDB output when selecting what timestamp to use.
    Also updates packages and Grafana test site dashboards.
  * Commits:
    4381541 RPM
    19bc153 Typo/clarification
    2a32dd8 Prometheus, InfluxDB, Copyright
    dd5323e debhelper
    7352c1e Bye Travis
    32b3bbe Grafana dashboards
    304ab76 Info</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1655121600">- Release 1.2.0
  * This release fixes handling of base64'ed strings in DSC XML and will
    now decode them back into text when reading, the selected output will
    then handling any quoting or escaping needed.
  * Added a new option for Prometheus output to set a prefix for metrics so
    that they can be easily separated from other metrics if needed, see
    `man dsc-datatool-output prometheus`.
  * Commits:
    5f9f972 Fix COPR
    3d72019 Prometheus metric prefix
    bdc992e base64 labels</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1668081600">- Release 1.3.0
  * This release adds option `nonstrict` to `client_subnet_authority`
    generator for skipping bad data in datasets.
  * The contrib DSC+Grafana test site dashboards has been moved to its
    own repository, feel free to contribute your own creations to it:
      https://github.com/DNS-OARC/dsc-datatool-grafana
  * Commits:
    90b232d Add CodeQL workflow for GitHub code scanning
    e4fa3b0 Test site
    474f97d client_subnet_authority non-strict mode</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1686830400">- Release 1.4.0
  * This release adds the option `--encoding` to set an encoding to use
    for reading and writing files.
  * Commits:
    f64c8b6 encoding man-page
    09c0ce9 Encoding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1701864000">- Release 1.4.1
  * This release fixes issue with InfluxDB quoting, was missing to quote
    the quote character.
  * Other changes:
    - Dependency correction for SLE 15.5
    - Tweaks to test layouts
  * Commits:
    b44b874 Tests
    eef3ae0 SLE 15.5
    75c7fc1 Influx quoting</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1718712000">- Release 1.4.2
  * This release fixes issues with IANA's IPv6 parameters file,
    dsc-datatool expected a RIR in the Designation field but IANA recently
    added a title for SRv6 reservation which caused an exception.
  * Other updates are related to packages and GitHub workflows.
  * Commits:
    7560d82 Tests
    8568c84 Fix client subnet authority
    a8c58a9 Workflow
    fd8915c RPM SUSE</changelog>
</package>
<package pkgid="df1b497fead2056dfc78fb00e883ed893802bfe390b733e65ebb6128d6102064" name="dsc-datatool" arch="src">
  <version epoch="0" ver="1.4.2" rel="150600.9.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.02-1" date="1481803200">- Initial package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.03-1" date="1481889600">- Release 0.03
  * Support processing of 25 of the 37 DAT files that the Extractor
    can produce, the others can not be converted into time series data
    since they lack timestamps.  Processing of XML is the recommended
    approach to secure all information.
  * Commits:
    72e829c Implement processing of DAT directories
    45294d0 RPM spec
    4e8ff69 Fix 5.24 forbidden keys usage
    7589ad2 Use perl 5.24 also
    cfac110 Fix #16: Handle directories in --xml and warn that --dat is
            not implemented yet</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.04-1" date="1548072000">- Release 0.04
  * Package dependency fix and update of example Grafana dashboards.
  * Commits:
    d3babc9 Copyright years
    9955c88 Travis Perl versions
    134a8b3 Debian dependency
    2d2114d Fix #23: Rework Grafana dashboards to hopefully show more
            correct numbers and also split them up.
    9bca0d3 Prepare SPEC for OSB/COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.05-1" date="1559304000">- Release 0.05
  * Fixed issue with empty values in InfluxDB output, they are now
    quoted as an empty string.
  * Commits:
    9917c4e InfluxDB quote keys/values</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1586952000">- Prepare for v1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-2" date="1596456000">- Release 1.0.0
  * This release brings a complete rewrite of the tool, from Perl to
    Python. This rewrite was made possible thanks to funding from EURid,
    and will help with maintainability and packaging.
  * Core design and command line syntax is kept the same but as the
    libraries the generators use have been changed additional command line
    options must be used.
    - client_subnet_authority (generator)
      This generator now uses IANA's IP address space registry CSVs to
      look up the network authority, therefor it needs either to fetch
      the CSV files or be given them on command line.
      See `man dsc-datatool-generator client_subnet_authority` for more
      information.
    - client_subnet_country (generator)
      This generator now uses MaxMind databases to look up country based
      on subnet.
      See `man dsc-datatool generator client_subnet_country` for more
      information and setup guide of the MaxMind databases.
  * Commits:
    589ea8b Badges
    c32038b nonstrict
    0ea3e32 LGTM
    cff2e1c COPR
    02c31b0 COPR
    e8332fd COPR
    6d9f71c Input, YAML
    93ba755 EPEL 8 packages
    3e2df6f Authority
    f5d023f Debian packaging
    1a59f09 Documentation
    85cb1e1 restructure
    decd3f6 man-pages, URLs
    f264854 man-pages
    d73c319 man-pages
    f5ca007 man-pages
    7bfaf53 Fedora dependencies
    3452b48 RPM dependencies
    7a4edbc Test
    ed43406 client_subnet_authority
    62c7d9d Server, node
    e0c6419 RPM package
    938f154 Rewrite
    5400464 README
    968ccb1 COPR, spec
    14d987f RPM requires
    ee10efb Package
    a25870f Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1596801600">- Release 1.0.1
  * This release adds compatibility with Python v3.5 which allows
    packages to be built for Ubuntu Xenial.
  * Commits:
    bc0be5b python 3.5</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1603281600">- Release 1.0.2
  * This release fixed a bug in DAT file parsing that was discovered when
    adding coverage tests.
  * Commits:
    45b1aa3 Coverage
    7aedc1a Coverage
    64957b9 DAT, Coverage
    370fb86 Coverage
    891cb7c Coverage
    9374faa Coverage</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1649160000">- Release 1.1.0
  * This releases adds support for Prometheus' node_exporter using it's
    Textfile Collector (see `man dsc-datatool-output prometheus`) and
    fixes a bug in InfluxDB output when selecting what timestamp to use.
    Also updates packages and Grafana test site dashboards.
  * Commits:
    4381541 RPM
    19bc153 Typo/clarification
    2a32dd8 Prometheus, InfluxDB, Copyright
    dd5323e debhelper
    7352c1e Bye Travis
    32b3bbe Grafana dashboards
    304ab76 Info</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1655121600">- Release 1.2.0
  * This release fixes handling of base64'ed strings in DSC XML and will
    now decode them back into text when reading, the selected output will
    then handling any quoting or escaping needed.
  * Added a new option for Prometheus output to set a prefix for metrics so
    that they can be easily separated from other metrics if needed, see
    `man dsc-datatool-output prometheus`.
  * Commits:
    5f9f972 Fix COPR
    3d72019 Prometheus metric prefix
    bdc992e base64 labels</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1668081600">- Release 1.3.0
  * This release adds option `nonstrict` to `client_subnet_authority`
    generator for skipping bad data in datasets.
  * The contrib DSC+Grafana test site dashboards has been moved to its
    own repository, feel free to contribute your own creations to it:
      https://github.com/DNS-OARC/dsc-datatool-grafana
  * Commits:
    90b232d Add CodeQL workflow for GitHub code scanning
    e4fa3b0 Test site
    474f97d client_subnet_authority non-strict mode</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1686830400">- Release 1.4.0
  * This release adds the option `--encoding` to set an encoding to use
    for reading and writing files.
  * Commits:
    f64c8b6 encoding man-page
    09c0ce9 Encoding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1701864000">- Release 1.4.1
  * This release fixes issue with InfluxDB quoting, was missing to quote
    the quote character.
  * Other changes:
    - Dependency correction for SLE 15.5
    - Tweaks to test layouts
  * Commits:
    b44b874 Tests
    eef3ae0 SLE 15.5
    75c7fc1 Influx quoting</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1718712000">- Release 1.4.2
  * This release fixes issues with IANA's IPv6 parameters file,
    dsc-datatool expected a RIR in the Designation field but IANA recently
    added a title for SRv6 reservation which caused an exception.
  * Other updates are related to packages and GitHub workflows.
  * Commits:
    7560d82 Tests
    8568c84 Fix client subnet authority
    a8c58a9 Workflow
    fd8915c RPM SUSE</changelog>
</package>
<package pkgid="c1e21d4036f574974912a7ff9454808da3fe50cb9c2b3e6d660613ace0a9e55c" name="dsc-datatool-doc" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150600.9.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.02-1" date="1481803200">- Initial package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.03-1" date="1481889600">- Release 0.03
  * Support processing of 25 of the 37 DAT files that the Extractor
    can produce, the others can not be converted into time series data
    since they lack timestamps.  Processing of XML is the recommended
    approach to secure all information.
  * Commits:
    72e829c Implement processing of DAT directories
    45294d0 RPM spec
    4e8ff69 Fix 5.24 forbidden keys usage
    7589ad2 Use perl 5.24 also
    cfac110 Fix #16: Handle directories in --xml and warn that --dat is
            not implemented yet</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.04-1" date="1548072000">- Release 0.04
  * Package dependency fix and update of example Grafana dashboards.
  * Commits:
    d3babc9 Copyright years
    9955c88 Travis Perl versions
    134a8b3 Debian dependency
    2d2114d Fix #23: Rework Grafana dashboards to hopefully show more
            correct numbers and also split them up.
    9bca0d3 Prepare SPEC for OSB/COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.05-1" date="1559304000">- Release 0.05
  * Fixed issue with empty values in InfluxDB output, they are now
    quoted as an empty string.
  * Commits:
    9917c4e InfluxDB quote keys/values</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-1" date="1586952000">- Prepare for v1.0.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.0-2" date="1596456000">- Release 1.0.0
  * This release brings a complete rewrite of the tool, from Perl to
    Python. This rewrite was made possible thanks to funding from EURid,
    and will help with maintainability and packaging.
  * Core design and command line syntax is kept the same but as the
    libraries the generators use have been changed additional command line
    options must be used.
    - client_subnet_authority (generator)
      This generator now uses IANA's IP address space registry CSVs to
      look up the network authority, therefor it needs either to fetch
      the CSV files or be given them on command line.
      See `man dsc-datatool-generator client_subnet_authority` for more
      information.
    - client_subnet_country (generator)
      This generator now uses MaxMind databases to look up country based
      on subnet.
      See `man dsc-datatool generator client_subnet_country` for more
      information and setup guide of the MaxMind databases.
  * Commits:
    589ea8b Badges
    c32038b nonstrict
    0ea3e32 LGTM
    cff2e1c COPR
    02c31b0 COPR
    e8332fd COPR
    6d9f71c Input, YAML
    93ba755 EPEL 8 packages
    3e2df6f Authority
    f5d023f Debian packaging
    1a59f09 Documentation
    85cb1e1 restructure
    decd3f6 man-pages, URLs
    f264854 man-pages
    d73c319 man-pages
    f5ca007 man-pages
    7bfaf53 Fedora dependencies
    3452b48 RPM dependencies
    7a4edbc Test
    ed43406 client_subnet_authority
    62c7d9d Server, node
    e0c6419 RPM package
    938f154 Rewrite
    5400464 README
    968ccb1 COPR, spec
    14d987f RPM requires
    ee10efb Package
    a25870f Funding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.1-1" date="1596801600">- Release 1.0.1
  * This release adds compatibility with Python v3.5 which allows
    packages to be built for Ubuntu Xenial.
  * Commits:
    bc0be5b python 3.5</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.0.2-1" date="1603281600">- Release 1.0.2
  * This release fixed a bug in DAT file parsing that was discovered when
    adding coverage tests.
  * Commits:
    45b1aa3 Coverage
    7aedc1a Coverage
    64957b9 DAT, Coverage
    370fb86 Coverage
    891cb7c Coverage
    9374faa Coverage</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1649160000">- Release 1.1.0
  * This releases adds support for Prometheus' node_exporter using it's
    Textfile Collector (see `man dsc-datatool-output prometheus`) and
    fixes a bug in InfluxDB output when selecting what timestamp to use.
    Also updates packages and Grafana test site dashboards.
  * Commits:
    4381541 RPM
    19bc153 Typo/clarification
    2a32dd8 Prometheus, InfluxDB, Copyright
    dd5323e debhelper
    7352c1e Bye Travis
    32b3bbe Grafana dashboards
    304ab76 Info</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1655121600">- Release 1.2.0
  * This release fixes handling of base64'ed strings in DSC XML and will
    now decode them back into text when reading, the selected output will
    then handling any quoting or escaping needed.
  * Added a new option for Prometheus output to set a prefix for metrics so
    that they can be easily separated from other metrics if needed, see
    `man dsc-datatool-output prometheus`.
  * Commits:
    5f9f972 Fix COPR
    3d72019 Prometheus metric prefix
    bdc992e base64 labels</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1668081600">- Release 1.3.0
  * This release adds option `nonstrict` to `client_subnet_authority`
    generator for skipping bad data in datasets.
  * The contrib DSC+Grafana test site dashboards has been moved to its
    own repository, feel free to contribute your own creations to it:
      https://github.com/DNS-OARC/dsc-datatool-grafana
  * Commits:
    90b232d Add CodeQL workflow for GitHub code scanning
    e4fa3b0 Test site
    474f97d client_subnet_authority non-strict mode</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1686830400">- Release 1.4.0
  * This release adds the option `--encoding` to set an encoding to use
    for reading and writing files.
  * Commits:
    f64c8b6 encoding man-page
    09c0ce9 Encoding</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1701864000">- Release 1.4.1
  * This release fixes issue with InfluxDB quoting, was missing to quote
    the quote character.
  * Other changes:
    - Dependency correction for SLE 15.5
    - Tweaks to test layouts
  * Commits:
    b44b874 Tests
    eef3ae0 SLE 15.5
    75c7fc1 Influx quoting</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1718712000">- Release 1.4.2
  * This release fixes issues with IANA's IPv6 parameters file,
    dsc-datatool expected a RIR in the Designation field but IANA recently
    added a title for SRv6 reservation which caused an exception.
  * Other updates are related to packages and GitHub workflows.
  * Commits:
    7560d82 Tests
    8568c84 Fix client subnet authority
    a8c58a9 Workflow
    fd8915c RPM SUSE</changelog>
</package>
<package pkgid="e492688151e2f76206d6e182c0e83eadb8472f7689c19f1a1811180c88156bb1" name="libcryptopant1" arch="aarch64">
  <version epoch="0" ver="1.3.1" rel="150600.11.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1543492800">- Initial v1.1.0 code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1560945600">- Update to v1.2.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1569931200">- Update to v1.2.1</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1710936000">- Update to v1.3.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1712836800">- Update to v1.3.1</changelog>
</package>
<package pkgid="23027a83e9e36588539735e7c401c868195b378e4aab5084d0fba5030d03dde0" name="libcryptopant1" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="150600.11.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.1.0-1" date="1543492800">- Initial v1.1.0 code</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.0-1" date="1560945600">- Update to v1.2.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.2.1-1" date="1569931200">- Update to v1.2.1</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1710936000">- Update to v1.3.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1712836800">- Update to v1.3.1</changelog>
</package>
<package pkgid="087117eb2920ff654c60ab9b1762dddd313f5dfe368676344ba7072d8188d5f0" name="libdnswire1" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1584705600">- Release v0.1.1
  * Fix RPM devel package dependencies
  * Commits:
    b451169 package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.2.0-1" date="1603454400">- Release 0.2.0
  * This release fixes various issues and bugs in the API, fix typos and
    adds coverage tests.
  * Fixes:
    - `dnstap_decode_protobuf()`: Fix setting of unknown socket family and protocol, was setting DNSTAP_MESSAGE_TYPE_ enums.
    - `enum dnstap_message_type`: Fix typo in unknown enum, now correct `DNSTAP_SOCKET_FAMILY_UNKNOWN`
    - `dnswire_encoder_encode()`: Remove setting state when to the same state it was
    - `dnswire_writer_set_bufsize()`: Fix bug with changing buffer size while having something in the buffer
  * Commits:
    3bfd7e2 Travis, configure
    27f69ab Coverage
    d04b810 Coverage
    ee153d7 Badges
    a381843 Travis
    f3a3e43 COPR
    4b6640f Compile warnings
    bc1b2e2 Funding
    ae537a9 Examples, tests
    c139dd7 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.0-1" date="1643198400">- Release 0.3.0
  * This release updates the Protobuf definition for DNSTAP to include
    new message types, new protocols and the new Policy object.
  * Changes:
    - Update debhelper compatibility level to 10
    - Update to latest `dnstap.pb`, new message types, protocols and message policy
  * Commits:
    87e7909 New dnstap.pb
    f215476 debhelper
    20bf38f Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.1-1" date="1643716800">- Release 0.3.1
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Bump SO version for Debian/Ubuntu</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.2-1" date="1643803200">- Release 0.3.2
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Fix Debian/Ubuntu package replaces/breaks to solve filename conflicts
  * Commits:
    dea8e35 Deb packages
    8398f65 Deb packages</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.3-1" date="1643803201">- Release 0.3.3
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Replace/break all previous Debian/Ubuntu versions</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.4.0-1" date="1677844800">- Release 0.4.0
  * Updated `dnstap.pb` to include recently added DNS-over-QUIC (DOQ)
    socket protocol.
  * Commits:
    a03a989 Fix COPR
    e3f1167 dnstap.pb, DOQ</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.5.0-1" date="1773316800">- Release 0.5.0
  * This release updates DNSTAP's protobuf to include the recently added
    HTTP Protocol attribute in Message along with a few bug fixes.
  * Bug fixes:
    - Add libprotobuf-c to pkg-config dependencies to correctly build on some platforms
    - Fix missing decode checks for Message type and and socket protocol
    - Correct setting the right _UNKNOWN for several enums
    - Fix reader_sender example
    - Fix various packaging and CI issues
  * Commits:
    46526c4 Copyright
    508a19a Fixes
    c0b588b clean up, autoconf, !wip, DNSTAP
    118858e pkgconfig
    266058e fix scan-build
    4b93d68 CI updates
    2454951 builds
    4f83aaf Codeberg, docs
    50ee1ab SPEC
    e559d1b Example
    5281827 Badges
    27dc30d Workflow
    a3dea1f Workflow
    fef838c RPM, Test</changelog>
</package>
<package pkgid="7257f9be54e6adbe3ccd05da2ea0d0b9c64669d9284f8f4e51bba884dbf24505" name="libdnswire1" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1584705600">- Release v0.1.1
  * Fix RPM devel package dependencies
  * Commits:
    b451169 package</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.2.0-1" date="1603454400">- Release 0.2.0
  * This release fixes various issues and bugs in the API, fix typos and
    adds coverage tests.
  * Fixes:
    - `dnstap_decode_protobuf()`: Fix setting of unknown socket family and protocol, was setting DNSTAP_MESSAGE_TYPE_ enums.
    - `enum dnstap_message_type`: Fix typo in unknown enum, now correct `DNSTAP_SOCKET_FAMILY_UNKNOWN`
    - `dnswire_encoder_encode()`: Remove setting state when to the same state it was
    - `dnswire_writer_set_bufsize()`: Fix bug with changing buffer size while having something in the buffer
  * Commits:
    3bfd7e2 Travis, configure
    27f69ab Coverage
    d04b810 Coverage
    ee153d7 Badges
    a381843 Travis
    f3a3e43 COPR
    4b6640f Compile warnings
    bc1b2e2 Funding
    ae537a9 Examples, tests
    c139dd7 LGTM</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.0-1" date="1643198400">- Release 0.3.0
  * This release updates the Protobuf definition for DNSTAP to include
    new message types, new protocols and the new Policy object.
  * Changes:
    - Update debhelper compatibility level to 10
    - Update to latest `dnstap.pb`, new message types, protocols and message policy
  * Commits:
    87e7909 New dnstap.pb
    f215476 debhelper
    20bf38f Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.1-1" date="1643716800">- Release 0.3.1
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Bump SO version for Debian/Ubuntu</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.2-1" date="1643803200">- Release 0.3.2
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Fix Debian/Ubuntu package replaces/breaks to solve filename conflicts
  * Commits:
    dea8e35 Deb packages
    8398f65 Deb packages</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.3.3-1" date="1643803201">- Release 0.3.3
  * This is a package only update release to correct mistakes in Debian/
    Ubuntu packages.
  * Replace/break all previous Debian/Ubuntu versions</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.4.0-1" date="1677844800">- Release 0.4.0
  * Updated `dnstap.pb` to include recently added DNS-over-QUIC (DOQ)
    socket protocol.
  * Commits:
    a03a989 Fix COPR
    e3f1167 dnstap.pb, DOQ</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.5.0-1" date="1773316800">- Release 0.5.0
  * This release updates DNSTAP's protobuf to include the recently added
    HTTP Protocol attribute in Message along with a few bug fixes.
  * Bug fixes:
    - Add libprotobuf-c to pkg-config dependencies to correctly build on some platforms
    - Fix missing decode checks for Message type and and socket protocol
    - Correct setting the right _UNKNOWN for several enums
    - Fix reader_sender example
    - Fix various packaging and CI issues
  * Commits:
    46526c4 Copyright
    508a19a Fixes
    c0b588b clean up, autoconf, !wip, DNSTAP
    118858e pkgconfig
    266058e fix scan-build
    4b93d68 CI updates
    2454951 builds
    4f83aaf Codeberg, docs
    50ee1ab SPEC
    e559d1b Example
    5281827 Badges
    27dc30d Workflow
    a3dea1f Workflow
    fef838c RPM, Test</changelog>
</package>
<package pkgid="ee843ad7c74ec124ddf7b286d307a5d0180be678e955f75aca3c2dd76d99aa65" name="libtinyframe0" arch="aarch64">
  <version epoch="0" ver="0.1.1" rel="150600.8.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1603368000">- Release 0.1.1
  * This release adds a few assert check on augments to some of the function
    calls, fixes a type in configure and adds coverage tests.
    - `tinyframe_write_control()`:
      - assert arguments and content fields data
      - check for valid content field types
    - `tinyframe_write_control_start()`: assert arguments
    - `tinyframe_write_frame()`: assert arguments
    - `tinyframe_write_control_stop()`: assert arguments
    - `tinyframe_set_header()`: assert arguments
    - Remove `sprintf()` usage from tracing
  * Commits:
    c6fbfea Travis, configure
    ba616b0 Coverage
    97dfeb7 Coverage
    f69665b Badges
    907a894 COPR
    f07d4e8 Funding
    242b1b2 Trace
    8d36cf7 LGTM</changelog>
</package>
<package pkgid="52993dee593fc67837db39c17cae67596f44fff03945c4a6dbf598cf26b8fb76" name="libtinyframe0" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="150600.8.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1603368000">- Release 0.1.1
  * This release adds a few assert check on augments to some of the function
    calls, fixes a type in configure and adds coverage tests.
    - `tinyframe_write_control()`:
      - assert arguments and content fields data
      - check for valid content field types
    - `tinyframe_write_control_start()`: assert arguments
    - `tinyframe_write_frame()`: assert arguments
    - `tinyframe_write_control_stop()`: assert arguments
    - `tinyframe_set_header()`: assert arguments
    - Remove `sprintf()` usage from tracing
  * Commits:
    c6fbfea Travis, configure
    ba616b0 Coverage
    97dfeb7 Coverage
    f69665b Badges
    907a894 COPR
    f07d4e8 Funding
    242b1b2 Trace
    8d36cf7 LGTM</changelog>
</package>
<package pkgid="47a0e6c37dd06985158d03c06f1d7627e4decffaa0de093058f7fd1616a3e85f" name="packetq" arch="aarch64">
  <version epoch="0" ver="1.7.3" rel="150600.7.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1496145600">- Release 1.3.0
  * First release under DNS-OARC management with license changed to GPL v3.0,
    minor version jump to not conflict with forked repositories that
    increased the version themselves.
  * Software now using Travis-CI and Jenkins to compile and test under Debian,
    Ubuntu, CentOS, FreeBSD and OpenBSD. Coverity Scan used for code analysis
    and 30 defects have been solved.
  * Bug fixes / enhancements:
    - Big endian supported correctly
    - Check data length when processing TCP/UDP packets
    - Support VLAN-tagged packets
    - Support for older compilers (CentOS 6)
    - Prevent "time of check, time of use"
    - Use `snprintf()` instead of `sprinf()`
  * Commits:
    6782f1f libpcap is not needed
    23a1ca0 Add more 'order by' in tests to ahve concurrent results
    f14ab5d Run tests in Travis also
    1a0c98a Add test for bigendian PCAP
    64ee5a8 - fixed reading of big-endian pcap files (including gzipped pcap)
            - added sample-bigendian.pcap.gz
    dd6ab57 Add test based on the extended regression tests
    27518c5 More regression tests
    d889228 Updated regression-test.sh to make the ordering of test query
            results more consistent, to avoid false positives.
    d157fef Expanded the regression tests.
    b3df6c2 Added checks for bad TCP and UDP packet lengths (which could
            cause malloc requests for humongous amounts of memory...)
    2e46729 Added support for VLAN-tagged ethertypes.
    10ae2d6 Fix #20: Support CentOS 6 compiler (and hopefully RHEL6 also)
    e7a8163 Format code using `clang-format`
    a9ae0fe Change namespace to `packetq` and uniform header defines
    6ab0fde Add Coverity badge
    63b480b Use `open()`, `fstat()` and `fdopen()` to prevent "time of check,
            time of use" problem
    446a5bf Fix CIDs
    01be348 Fix CIDs
    d11a61f Use `snprintf()`
    0bc8e57 Add regression test (from example) for all output formats
    09b9037 Move wiki documentation into the repository
    5e41dbb Update README.md
    6b2263f Add dependencies
    9cd6e5a Add Travis-CI badge
    cf582f8 Add Travis-CI
    d7eaa55 Cleanup and license change</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1496404800">- Release 1.3.1
  * This release add packaging files for DEB and RPM distributions and
    fixes a couple of bugs:
    - ICMP code to fill the tables was wrong and created segfault using
      normal select, aggregation or group functions. The code has been
      rewritten to work as the DNS code does and ICMP tests have been
      added.
    - Historically PacketQ parses all resource records but only saves
      the first and last record, this would overwrite EDNS information
      if it was not the first or last record. This has been fixed by
      saving the EDNS information as it is found.
  * Thanks to Anand Buddhdev (RIPE NCC) and Daniel Stirnimann (SWITCH)
    for providing PCAPs to help resolve the bugs.
  * Commits:
    9c2627f Fix CID 1439421
    5423c1d Fix #17: Save EDNS information when it's found
    ecb166e Fix #48: ICMP parsing and a little better memory handling
    0052024 Fix #45: Add packaging files</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1499774400">- Release 1.4.0
  * This release adds new fields for IP version and EDNS0 Client Subnet along
    with documentation updates, new usage (`--help`) and a buffer overflow
    check. Rework of the way OPT records are parsed has been done to make it
    easier to add support for other EDNS options in the future.
  * New fields:
    - `ip_version`: The IP version as an int (4/6)
    - `edns0_ecs`: A bool that is true if Client Subnet (RFC7871) was found
    - `edns0_ecs_family`: An int with the address family
    - `edns0_ecs_source`: An int with the source prefix length
    - `edns0_ecs_scope`: An int with the scope prefix length
    - `edns0_ecs_address`: A textual representation of the address
  * Bugfix:
    - `get_ushort()` in DNS parsing was not checking length of buffer before
      accessing it.
  * Commits:
    0e7c34a Rewrote usage, add option descriptions, tables and fields
    3943dda Update documentation and tests
    f4b9464 Add IP_Version
    0b309e6 ECS addresses and OPT RR parsing
    875fd60 Correct type in documentation also
    b5a91b7 Damn the common keyboard sequences...
    358b9af Buf overflow check, move OPT RR parsing, rework EDNS0 ECS
    d38fffc Add EDNS option codes and EDNS Client Subnet (ECS) support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1510228800">- Release 1.4.1
  * Fixed an issue with the in-memory representation of DNS records which
    was not initialized correctly and could cause the reuse of old data,
    especially if the record was incomplete (such as FormErr).
  * Commits:
    6a790e6 Fix #61: Make sure variables are initialized
    ed37b88 Update Murmur location
    5afb576 Update code format and move Murmur into it's own dir</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1583150400">- Release 1.4.2
  * Updated list of DNS resource types and work on CI and packaging.
  * Commits:
    4bdb9e3 Add missing rr types
    7c529ed README
    d610061 COPR, spec
    96763d8 Package
    5aa5984 Funding
    377be2d spec
    a0b5fb7 Travis-CI</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.3-1" date="1603454400">- Release 1.4.3
  * This release updates the DNS resource record types list with the new
    types SVCB and HTTPS. It also fixes a lot of issues reported by code
    analysis and adds code coverage tests.
  * Commits:
    0ddbc42 Info, Travis, configure
    37a8136 Add SVCB, HTTPS rrtypes
    6188935 m4
    c159904 Coverage
    7907eb4 Documentation, sonar
    2fe937a Badges
    90a5e55 LGTM
    fae992a COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1636113600">- Release 1.5.0
  * This release fixes issues with CSV and JSON w.r.t. quoted strings. CSV
    output now conforms to RFC4180 and JSON output conforms to RFC8259.
    Also added a new option (`--rfc1035`) to output and quote domain names
    as described in RFC1035.
  * Other changes:
    - Update debian control files
    - Fix typo in `--help` text
    - Fix OpenBSD clang++ compiler warnings
    - `Output::add_int()`: Fix potential memory overwrite
  * Commits:
    8206e0f OpenBSD clang warnings
    6c1247f Code format
    d6c82d4 New option to escape DNS names
    2bf6f26 Fix typo in --help around --xml parameter
    9c95d15 Conform to CSV/JSON RFCs
    feb0596 debhelper
    be37ad0 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.6.0-1" date="1646913600">- Release 1.6.0
  * This release adds a new SQL function for masking addresses and adds
    support for Pcap's LINUX_SLL link layer.
  * The new `netmask()` function (added by Ken Renard @kdrenard) is used
    as follows: `NETMASK(address [, v4_mask_length [, v6_mask_length]])`
  * Other fixes:
    - `packet_handler`: Clean up header parsing, size checks etc
    - Remove own defines of ether/proto types and don't overlap `struct in6_addr`
  * Commits:
    ae211e6 LINUX_SLL, netmask(), ether types
    d847c97 Adding Netmask description to FUNCTIONS.md
    4be804d Adding Netmask function.  Usage "netmask (&lt;address_field&gt;[, &lt;IPv4-mask-length&gt;[, &lt;IPv6-mask-length&gt;]])"</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.0-1" date="1649851200">- Release 1.7.0
  * This release adds two new columns for the number of labels in the
    query and in the first answer, and two new functions for looking up
    country code and autonomous system number (ASN) of addresses using
    MaxMind databases (see `FUNCTIONS.md` on how to specify database
    to use).
    - New column `qlabels`, number of labels in `qname`
    - New column `alabels`, number of labels in `aname`
    - New function `CC(address)`, the 2-letter ISO country code associated with the address
    - New function `ASN(address)`, the ASN associated with the address
  * Commits:
    64d1d72 Couting labels
    b3b970d Adding field qlabel_count as the count of the number of labels in the query
    0866f45 auto
    53c27ca SonarCloud, LGTM, packages
    1e5f986 MaxMind DB
    3967c31 Adding country-code and ASN lookup from MaxMind DB as functions on address strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.1-1" date="1654171200">- Release 1.7.1
  * This patch release fixes a bug in the domain name parsing that cuts
    off very long names.
  * Commits:
    4ec95e7 FQDN parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.2-1" date="1724932800">- Release 1.7.2
  * This patch release fixes various issues reported by CI/code analysis
    tools.
  * Fixes:
    - `RefCountString`: Use anonymous array for `data`
    - `sql`: Fix heap overflow [[sonarcloud](https://sonarcloud.io/project/issues?open=AZF-b0jIXv-Y5-GmvUlN&amp;id=dns-oarc%3APacketQ)]
    - Fix CodeQL issues:
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/35
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/37
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/38
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/39
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/40
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/5
  * Commits:
    68b5385 Cleanup
    1dfd47b CodeQL, code format
    6224234 CodeQL fixes
    6771f3a Copyright
    3283c43 Heap overflow
    1ff69df Badges
    d4e93ec Workflow
    75283cc Doc
    25adefa Add CodeQL workflow for GitHub code scanning
    bb7be53 Fix COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.3-1" date="1725451200">- Release 1.7.3
  * This patch release fixes memory alignment issues and the handling of
    TCP segments. Many thanks to Ray Bellis (ISC) for reporting this and
    helping greatly with fixing it!
  * Commits:
    d8a06a3 C++11
    8c99466 Memory align, TCP assemble</changelog>
</package>
<package pkgid="7ec4501272f19d849bfe45d64852b8c64b1e690b42d4c663c5453192c055c6fc" name="packetq" arch="src">
  <version epoch="0" ver="1.7.3" rel="150600.7.1"/>
  <changelog author="Roger Murray &lt;undocumented@release&gt; 1.1.11-1" date="1398254400">- Release 1.1.11
  * This release and prior releases was not documented here, see repository
    for more information.</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1496145600">- Release 1.3.0
  * First release under DNS-OARC management with license changed to GPL v3.0,
    minor version jump to not conflict with forked repositories that
    increased the version themselves.
  * Software now using Travis-CI and Jenkins to compile and test under Debian,
    Ubuntu, CentOS, FreeBSD and OpenBSD. Coverity Scan used for code analysis
    and 30 defects have been solved.
  * Bug fixes / enhancements:
    - Big endian supported correctly
    - Check data length when processing TCP/UDP packets
    - Support VLAN-tagged packets
    - Support for older compilers (CentOS 6)
    - Prevent "time of check, time of use"
    - Use `snprintf()` instead of `sprinf()`
  * Commits:
    6782f1f libpcap is not needed
    23a1ca0 Add more 'order by' in tests to ahve concurrent results
    f14ab5d Run tests in Travis also
    1a0c98a Add test for bigendian PCAP
    64ee5a8 - fixed reading of big-endian pcap files (including gzipped pcap)
            - added sample-bigendian.pcap.gz
    dd6ab57 Add test based on the extended regression tests
    27518c5 More regression tests
    d889228 Updated regression-test.sh to make the ordering of test query
            results more consistent, to avoid false positives.
    d157fef Expanded the regression tests.
    b3df6c2 Added checks for bad TCP and UDP packet lengths (which could
            cause malloc requests for humongous amounts of memory...)
    2e46729 Added support for VLAN-tagged ethertypes.
    10ae2d6 Fix #20: Support CentOS 6 compiler (and hopefully RHEL6 also)
    e7a8163 Format code using `clang-format`
    a9ae0fe Change namespace to `packetq` and uniform header defines
    6ab0fde Add Coverity badge
    63b480b Use `open()`, `fstat()` and `fdopen()` to prevent "time of check,
            time of use" problem
    446a5bf Fix CIDs
    01be348 Fix CIDs
    d11a61f Use `snprintf()`
    0bc8e57 Add regression test (from example) for all output formats
    09b9037 Move wiki documentation into the repository
    5e41dbb Update README.md
    6b2263f Add dependencies
    9cd6e5a Add Travis-CI badge
    cf582f8 Add Travis-CI
    d7eaa55 Cleanup and license change</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1496404800">- Release 1.3.1
  * This release add packaging files for DEB and RPM distributions and
    fixes a couple of bugs:
    - ICMP code to fill the tables was wrong and created segfault using
      normal select, aggregation or group functions. The code has been
      rewritten to work as the DNS code does and ICMP tests have been
      added.
    - Historically PacketQ parses all resource records but only saves
      the first and last record, this would overwrite EDNS information
      if it was not the first or last record. This has been fixed by
      saving the EDNS information as it is found.
  * Thanks to Anand Buddhdev (RIPE NCC) and Daniel Stirnimann (SWITCH)
    for providing PCAPs to help resolve the bugs.
  * Commits:
    9c2627f Fix CID 1439421
    5423c1d Fix #17: Save EDNS information when it's found
    ecb166e Fix #48: ICMP parsing and a little better memory handling
    0052024 Fix #45: Add packaging files</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1499774400">- Release 1.4.0
  * This release adds new fields for IP version and EDNS0 Client Subnet along
    with documentation updates, new usage (`--help`) and a buffer overflow
    check. Rework of the way OPT records are parsed has been done to make it
    easier to add support for other EDNS options in the future.
  * New fields:
    - `ip_version`: The IP version as an int (4/6)
    - `edns0_ecs`: A bool that is true if Client Subnet (RFC7871) was found
    - `edns0_ecs_family`: An int with the address family
    - `edns0_ecs_source`: An int with the source prefix length
    - `edns0_ecs_scope`: An int with the scope prefix length
    - `edns0_ecs_address`: A textual representation of the address
  * Bugfix:
    - `get_ushort()` in DNS parsing was not checking length of buffer before
      accessing it.
  * Commits:
    0e7c34a Rewrote usage, add option descriptions, tables and fields
    3943dda Update documentation and tests
    f4b9464 Add IP_Version
    0b309e6 ECS addresses and OPT RR parsing
    875fd60 Correct type in documentation also
    b5a91b7 Damn the common keyboard sequences...
    358b9af Buf overflow check, move OPT RR parsing, rework EDNS0 ECS
    d38fffc Add EDNS option codes and EDNS Client Subnet (ECS) support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1510228800">- Release 1.4.1
  * Fixed an issue with the in-memory representation of DNS records which
    was not initialized correctly and could cause the reuse of old data,
    especially if the record was incomplete (such as FormErr).
  * Commits:
    6a790e6 Fix #61: Make sure variables are initialized
    ed37b88 Update Murmur location
    5afb576 Update code format and move Murmur into it's own dir</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1583150400">- Release 1.4.2
  * Updated list of DNS resource types and work on CI and packaging.
  * Commits:
    4bdb9e3 Add missing rr types
    7c529ed README
    d610061 COPR, spec
    96763d8 Package
    5aa5984 Funding
    377be2d spec
    a0b5fb7 Travis-CI</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.3-1" date="1603454400">- Release 1.4.3
  * This release updates the DNS resource record types list with the new
    types SVCB and HTTPS. It also fixes a lot of issues reported by code
    analysis and adds code coverage tests.
  * Commits:
    0ddbc42 Info, Travis, configure
    37a8136 Add SVCB, HTTPS rrtypes
    6188935 m4
    c159904 Coverage
    7907eb4 Documentation, sonar
    2fe937a Badges
    90a5e55 LGTM
    fae992a COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1636113600">- Release 1.5.0
  * This release fixes issues with CSV and JSON w.r.t. quoted strings. CSV
    output now conforms to RFC4180 and JSON output conforms to RFC8259.
    Also added a new option (`--rfc1035`) to output and quote domain names
    as described in RFC1035.
  * Other changes:
    - Update debian control files
    - Fix typo in `--help` text
    - Fix OpenBSD clang++ compiler warnings
    - `Output::add_int()`: Fix potential memory overwrite
  * Commits:
    8206e0f OpenBSD clang warnings
    6c1247f Code format
    d6c82d4 New option to escape DNS names
    2bf6f26 Fix typo in --help around --xml parameter
    9c95d15 Conform to CSV/JSON RFCs
    feb0596 debhelper
    be37ad0 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.6.0-1" date="1646913600">- Release 1.6.0
  * This release adds a new SQL function for masking addresses and adds
    support for Pcap's LINUX_SLL link layer.
  * The new `netmask()` function (added by Ken Renard @kdrenard) is used
    as follows: `NETMASK(address [, v4_mask_length [, v6_mask_length]])`
  * Other fixes:
    - `packet_handler`: Clean up header parsing, size checks etc
    - Remove own defines of ether/proto types and don't overlap `struct in6_addr`
  * Commits:
    ae211e6 LINUX_SLL, netmask(), ether types
    d847c97 Adding Netmask description to FUNCTIONS.md
    4be804d Adding Netmask function.  Usage "netmask (&lt;address_field&gt;[, &lt;IPv4-mask-length&gt;[, &lt;IPv6-mask-length&gt;]])"</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.0-1" date="1649851200">- Release 1.7.0
  * This release adds two new columns for the number of labels in the
    query and in the first answer, and two new functions for looking up
    country code and autonomous system number (ASN) of addresses using
    MaxMind databases (see `FUNCTIONS.md` on how to specify database
    to use).
    - New column `qlabels`, number of labels in `qname`
    - New column `alabels`, number of labels in `aname`
    - New function `CC(address)`, the 2-letter ISO country code associated with the address
    - New function `ASN(address)`, the ASN associated with the address
  * Commits:
    64d1d72 Couting labels
    b3b970d Adding field qlabel_count as the count of the number of labels in the query
    0866f45 auto
    53c27ca SonarCloud, LGTM, packages
    1e5f986 MaxMind DB
    3967c31 Adding country-code and ASN lookup from MaxMind DB as functions on address strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.1-1" date="1654171200">- Release 1.7.1
  * This patch release fixes a bug in the domain name parsing that cuts
    off very long names.
  * Commits:
    4ec95e7 FQDN parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.2-1" date="1724932800">- Release 1.7.2
  * This patch release fixes various issues reported by CI/code analysis
    tools.
  * Fixes:
    - `RefCountString`: Use anonymous array for `data`
    - `sql`: Fix heap overflow [[sonarcloud](https://sonarcloud.io/project/issues?open=AZF-b0jIXv-Y5-GmvUlN&amp;id=dns-oarc%3APacketQ)]
    - Fix CodeQL issues:
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/35
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/37
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/38
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/39
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/40
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/5
  * Commits:
    68b5385 Cleanup
    1dfd47b CodeQL, code format
    6224234 CodeQL fixes
    6771f3a Copyright
    3283c43 Heap overflow
    1ff69df Badges
    d4e93ec Workflow
    75283cc Doc
    25adefa Add CodeQL workflow for GitHub code scanning
    bb7be53 Fix COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.3-1" date="1725451200">- Release 1.7.3
  * This patch release fixes memory alignment issues and the handling of
    TCP segments. Many thanks to Ray Bellis (ISC) for reporting this and
    helping greatly with fixing it!
  * Commits:
    d8a06a3 C++11
    8c99466 Memory align, TCP assemble</changelog>
</package>
<package pkgid="73eb7694f8652f6d4d5dc7487f6b4bbddfb24bd951ba1852397f14878da4bda4" name="packetq" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="150600.7.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.0-1" date="1496145600">- Release 1.3.0
  * First release under DNS-OARC management with license changed to GPL v3.0,
    minor version jump to not conflict with forked repositories that
    increased the version themselves.
  * Software now using Travis-CI and Jenkins to compile and test under Debian,
    Ubuntu, CentOS, FreeBSD and OpenBSD. Coverity Scan used for code analysis
    and 30 defects have been solved.
  * Bug fixes / enhancements:
    - Big endian supported correctly
    - Check data length when processing TCP/UDP packets
    - Support VLAN-tagged packets
    - Support for older compilers (CentOS 6)
    - Prevent "time of check, time of use"
    - Use `snprintf()` instead of `sprinf()`
  * Commits:
    6782f1f libpcap is not needed
    23a1ca0 Add more 'order by' in tests to ahve concurrent results
    f14ab5d Run tests in Travis also
    1a0c98a Add test for bigendian PCAP
    64ee5a8 - fixed reading of big-endian pcap files (including gzipped pcap)
            - added sample-bigendian.pcap.gz
    dd6ab57 Add test based on the extended regression tests
    27518c5 More regression tests
    d889228 Updated regression-test.sh to make the ordering of test query
            results more consistent, to avoid false positives.
    d157fef Expanded the regression tests.
    b3df6c2 Added checks for bad TCP and UDP packet lengths (which could
            cause malloc requests for humongous amounts of memory...)
    2e46729 Added support for VLAN-tagged ethertypes.
    10ae2d6 Fix #20: Support CentOS 6 compiler (and hopefully RHEL6 also)
    e7a8163 Format code using `clang-format`
    a9ae0fe Change namespace to `packetq` and uniform header defines
    6ab0fde Add Coverity badge
    63b480b Use `open()`, `fstat()` and `fdopen()` to prevent "time of check,
            time of use" problem
    446a5bf Fix CIDs
    01be348 Fix CIDs
    d11a61f Use `snprintf()`
    0bc8e57 Add regression test (from example) for all output formats
    09b9037 Move wiki documentation into the repository
    5e41dbb Update README.md
    6b2263f Add dependencies
    9cd6e5a Add Travis-CI badge
    cf582f8 Add Travis-CI
    d7eaa55 Cleanup and license change</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.3.1-1" date="1496404800">- Release 1.3.1
  * This release add packaging files for DEB and RPM distributions and
    fixes a couple of bugs:
    - ICMP code to fill the tables was wrong and created segfault using
      normal select, aggregation or group functions. The code has been
      rewritten to work as the DNS code does and ICMP tests have been
      added.
    - Historically PacketQ parses all resource records but only saves
      the first and last record, this would overwrite EDNS information
      if it was not the first or last record. This has been fixed by
      saving the EDNS information as it is found.
  * Thanks to Anand Buddhdev (RIPE NCC) and Daniel Stirnimann (SWITCH)
    for providing PCAPs to help resolve the bugs.
  * Commits:
    9c2627f Fix CID 1439421
    5423c1d Fix #17: Save EDNS information when it's found
    ecb166e Fix #48: ICMP parsing and a little better memory handling
    0052024 Fix #45: Add packaging files</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.0-1" date="1499774400">- Release 1.4.0
  * This release adds new fields for IP version and EDNS0 Client Subnet along
    with documentation updates, new usage (`--help`) and a buffer overflow
    check. Rework of the way OPT records are parsed has been done to make it
    easier to add support for other EDNS options in the future.
  * New fields:
    - `ip_version`: The IP version as an int (4/6)
    - `edns0_ecs`: A bool that is true if Client Subnet (RFC7871) was found
    - `edns0_ecs_family`: An int with the address family
    - `edns0_ecs_source`: An int with the source prefix length
    - `edns0_ecs_scope`: An int with the scope prefix length
    - `edns0_ecs_address`: A textual representation of the address
  * Bugfix:
    - `get_ushort()` in DNS parsing was not checking length of buffer before
      accessing it.
  * Commits:
    0e7c34a Rewrote usage, add option descriptions, tables and fields
    3943dda Update documentation and tests
    f4b9464 Add IP_Version
    0b309e6 ECS addresses and OPT RR parsing
    875fd60 Correct type in documentation also
    b5a91b7 Damn the common keyboard sequences...
    358b9af Buf overflow check, move OPT RR parsing, rework EDNS0 ECS
    d38fffc Add EDNS option codes and EDNS Client Subnet (ECS) support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.1-1" date="1510228800">- Release 1.4.1
  * Fixed an issue with the in-memory representation of DNS records which
    was not initialized correctly and could cause the reuse of old data,
    especially if the record was incomplete (such as FormErr).
  * Commits:
    6a790e6 Fix #61: Make sure variables are initialized
    ed37b88 Update Murmur location
    5afb576 Update code format and move Murmur into it's own dir</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.2-1" date="1583150400">- Release 1.4.2
  * Updated list of DNS resource types and work on CI and packaging.
  * Commits:
    4bdb9e3 Add missing rr types
    7c529ed README
    d610061 COPR, spec
    96763d8 Package
    5aa5984 Funding
    377be2d spec
    a0b5fb7 Travis-CI</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.4.3-1" date="1603454400">- Release 1.4.3
  * This release updates the DNS resource record types list with the new
    types SVCB and HTTPS. It also fixes a lot of issues reported by code
    analysis and adds code coverage tests.
  * Commits:
    0ddbc42 Info, Travis, configure
    37a8136 Add SVCB, HTTPS rrtypes
    6188935 m4
    c159904 Coverage
    7907eb4 Documentation, sonar
    2fe937a Badges
    90a5e55 LGTM
    fae992a COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.5.0-1" date="1636113600">- Release 1.5.0
  * This release fixes issues with CSV and JSON w.r.t. quoted strings. CSV
    output now conforms to RFC4180 and JSON output conforms to RFC8259.
    Also added a new option (`--rfc1035`) to output and quote domain names
    as described in RFC1035.
  * Other changes:
    - Update debian control files
    - Fix typo in `--help` text
    - Fix OpenBSD clang++ compiler warnings
    - `Output::add_int()`: Fix potential memory overwrite
  * Commits:
    8206e0f OpenBSD clang warnings
    6c1247f Code format
    d6c82d4 New option to escape DNS names
    2bf6f26 Fix typo in --help around --xml parameter
    9c95d15 Conform to CSV/JSON RFCs
    feb0596 debhelper
    be37ad0 Bye Travis</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.6.0-1" date="1646913600">- Release 1.6.0
  * This release adds a new SQL function for masking addresses and adds
    support for Pcap's LINUX_SLL link layer.
  * The new `netmask()` function (added by Ken Renard @kdrenard) is used
    as follows: `NETMASK(address [, v4_mask_length [, v6_mask_length]])`
  * Other fixes:
    - `packet_handler`: Clean up header parsing, size checks etc
    - Remove own defines of ether/proto types and don't overlap `struct in6_addr`
  * Commits:
    ae211e6 LINUX_SLL, netmask(), ether types
    d847c97 Adding Netmask description to FUNCTIONS.md
    4be804d Adding Netmask function.  Usage "netmask (&lt;address_field&gt;[, &lt;IPv4-mask-length&gt;[, &lt;IPv6-mask-length&gt;]])"</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.0-1" date="1649851200">- Release 1.7.0
  * This release adds two new columns for the number of labels in the
    query and in the first answer, and two new functions for looking up
    country code and autonomous system number (ASN) of addresses using
    MaxMind databases (see `FUNCTIONS.md` on how to specify database
    to use).
    - New column `qlabels`, number of labels in `qname`
    - New column `alabels`, number of labels in `aname`
    - New function `CC(address)`, the 2-letter ISO country code associated with the address
    - New function `ASN(address)`, the ASN associated with the address
  * Commits:
    64d1d72 Couting labels
    b3b970d Adding field qlabel_count as the count of the number of labels in the query
    0866f45 auto
    53c27ca SonarCloud, LGTM, packages
    1e5f986 MaxMind DB
    3967c31 Adding country-code and ASN lookup from MaxMind DB as functions on address strings</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.1-1" date="1654171200">- Release 1.7.1
  * This patch release fixes a bug in the domain name parsing that cuts
    off very long names.
  * Commits:
    4ec95e7 FQDN parsing</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.2-1" date="1724932800">- Release 1.7.2
  * This patch release fixes various issues reported by CI/code analysis
    tools.
  * Fixes:
    - `RefCountString`: Use anonymous array for `data`
    - `sql`: Fix heap overflow [[sonarcloud](https://sonarcloud.io/project/issues?open=AZF-b0jIXv-Y5-GmvUlN&amp;id=dns-oarc%3APacketQ)]
    - Fix CodeQL issues:
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/35
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/37
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/38
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/39
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/40
      - https://github.com/DNS-OARC/PacketQ/security/code-scanning/5
  * Commits:
    68b5385 Cleanup
    1dfd47b CodeQL, code format
    6224234 CodeQL fixes
    6771f3a Copyright
    3283c43 Heap overflow
    1ff69df Badges
    d4e93ec Workflow
    75283cc Doc
    25adefa Add CodeQL workflow for GitHub code scanning
    bb7be53 Fix COPR</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 1.7.3-1" date="1725451200">- Release 1.7.3
  * This patch release fixes memory alignment issues and the handling of
    TCP segments. Many thanks to Ray Bellis (ISC) for reporting this and
    helping greatly with fixing it!
  * Commits:
    d8a06a3 C++11
    8c99466 Memory align, TCP assemble</changelog>
</package>
<package pkgid="fad5d6f7abb6bbeecbec7c7aed421a2abd6e4df2406b3f63ea523c6750b077f2" name="resperf" arch="aarch64">
  <version epoch="0" ver="2.16.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.2-1" date="1614081600">- Release 2.4.2
  * This release fixes a few issues with reading of the datafile which
    could lead to "ran out of data" errors.
  * The problem was that reading from the datafile was done before finding
    a socket to send it on, or socket readyness, and that lead to progressing
    the queries without really doing anything.
    Another issues that's been fixed was that if the read lines perfectly
    aligned with the buffer, it would be treated like EOF and caused an exit.
  * Commits:
    9937287 resperf TLS
    6736956 datafile
    55faec6 ran out of data</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1615550400">- Release 2.5.0
  * This release adds re-connection support for TCP and DoT protocol,
    new options to `resperf` and fixes a few bugs.
  * `dnsperf` and `resperf` will now try to re-connect when they lose a TCP
    or DoT connection, and with that comes a few new statistics metrics.
    For `dnsperf`, if a connection oriented protocol is used, it will now
    show the total number of re-connections made and the connection latency.
    For `resperf` it also shows the total number of re-connections made and
    the gnuplot data now contains the total number of connections made and
    the connection latency for each interval.
    Beside re-connection support, improvements have been made when it comes
    to tracking socket readiness while connections are established which
    should generate less warnings about "socket not ready".
  * New `resperf` options:
    - `-R`: Reopen the datafile if it runs out of data before the testing
      is completed. This allows for long running tests on very small and
      simple query datafile.
    - `-F &lt;fall_behind&gt;`: Sets the maximum number of queries that can fall
      behind being sent. `resperf` will stop when this many queries should
      have been sent and it can be relative easy to hit if `-m &lt;max_qps&gt;`
      is set too high.
      The default is 1000 and setting it to zero (0) disables the check.
  * Bugfixes:
    - Fixed port handling for host/network format when setting client side
      port with `-x`
    - Fix support for quoted characters, `\000` and `\.`, in domain names,
      this was lost when removing BIND's internal development libraries
    - Fix issue in `dnsperf`, it would loop forever if no connection could
      be established
    - Fix potential buffer overrun in `resperf` when using response id
      for `queries[]`
    - DoT: Fix bug when sending from buffer
  * Other changes:
    - Always use `IPV6_V6ONLY` socket option for IPv6
    - Add man-page on `-W` option added in v2.4.0
    - Reformat man-pages
    - `resperf`:
      - Try and process more request each run to hopefully not hit max
        outstanding so easy when high QPS
      - Add default value to `-C` so it shows in help
  * Commits:
    9308361 man-page format
    0e52fb4 man-page, opts, tuneups
    e36211d stats
    d9b9ba3 Response qid to index
    2b2c37e fixes, reconnection
    acd31e5 dname quote
    de8f049 net</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1616414400">- Release 2.5.1
  * This release re-adds support for TYPEnnn and ANY in the datafile, this
    was missed during the removal of the dependency on BINDs development
    libraries in v2.4.0.
  * Also note that with v2.5.0, this software now depends on Concurrency
    Kit (ck) for atomic operations.
  * Commits:
    924e6ea ANY
    0a444c0 TYPEnnn</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1616673600">- Release 2.5.2
  * This release tweaks the reconnect code for TCP and DoT.
  * For TCP, atomic operations are used to signal the need to reconnect
    from the receiving thread to the sending, as the sending is the one in
    charge of reconnecting.
    This speeds up detection of connection lost which reduces the amount of
    lost queries on a disconnect.
  * This change does not affect DoT as much, as the SSL context shared
    between the threads are protected by a mutex.
    But a bug was found in `sendto()` for DoT that could drop a query if
    the socket was busy sending.
  * The connect and reconnect socket events has been split into connecting,
    connected and reconnecting, reconnected. This is to report more correct
    reconnect events when it comes to DoT, because the connection can be
    lost while negotiating TLS.
  * Lastly, additional tests has been added for the network code.
  * Commits:
    d9e5663 net test
    22f49df network tests
    8e5b56e reconnect</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.6.0-1" date="1622462400">- Release 2.6.0
  * This release adds EDNS options parameter `-E` to `resperf` and a script
    for generating EDNS Client Subnet options (see `contrib/ecs-gen`).
  * Commits:
    d29d880 ECS opt
    877f31e edns option</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1628510400">- Release 2.7.0
  * This release adds DNS-over-HTTPS support!
  * DNS-over-HTTPS can be used by specifying transport mode `doh` and you
    should also look at the dnsperf(1) man-page (or `-H`) for the extended
    options `doh-uri` and `doh-method`, which controls aspects of DoH/HTTP/2
    that you might want to set.
  * Other fixes:
    - Add check when constructing DNS packet so that total length of labels
      does not exceed 255 bytes
    - Fix connection/reconnection state handling for DoT transport
    - Fix event handling by initializing them directly when opening the
      sockets, otherwise events could have been missed which would give
      incorrect statistics
  * Commits:
    61b5eac Tests with dumdumd
    d71071c Tests with dumdumd
    b42f92e DoH sending
    2fa40bb Net stats
    f7f8692 DoH fixes
    ea62b49 DoH concurrent streams
    91929f1 DoH reconnect
    17660e6 DoH fixes
    5276aa6 resperf buckets
    585860e Packages
    3ffc601 Fixes
    1570609 Man-page
    6bcadc7 README
    f81adf1 Fixes
    1acd71f Code structure
    6c47876 Fixes
    2d379f4 Fixes
    4d5384b Fixes
    cee93b3 Initial DNS-over-HTTPS support implementation
    4ff3ebc Events
    8b24bbf DoT state
    6a5b5ef Fix too long name
    71fa09f long opts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.1-1" date="1631880000">- Release 2.7.1
  * This release fixes issues with constructing wire-format DNS when the
    domain names includes escaped characters such as `\123` or `\.`.
  * Other changes:
    - Bump Debian package compat level to 10
  * Commits:
    4873f02 DNS encoding
    c4eccc0 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1635854400">- Release 2.8.0
  * This release fixes response handling for DNS-over-HTTPS when multiple
    responses are received within the same receive cycle, and adds a new
    option to suppress some of the normal and verbose output.
  * The network model within dnsperf and resperf can not process more then
    one response at a time from a protocol module, so a buffer has been added
    to the DNS-over-HTTPS module to handle this situation (this already exists
    in all other modules).
  * The new option `-O suppress=&lt;message,...&gt;` can selectively suppress parts
    of the normal and verbose output. Some of these messages might be
    excessively displayed due to the network model and depending on what
    protocol you use which makes usage harder then necessary. For example
    during TCP connection stage, if you end-point is slow to establish
    connection you will get a lot of output saying that the socket isn't ready
    yet.
  * Commits:
    6a452b0 DoH response handling
    e2828e7 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1638964800">- Release 2.9.0
  * This release brings a new message suppression option and a way to control
    how many queries are sent over a connection.
  * You can now suppress the message about receiving unexpected DNS message
    IDs by using `-O suppress=unexpected`.
  * With `-O num-queries-per-conn=&lt;num&gt;` you can now limit the number of
    queries sent over a connection before triggering a re-connection, see
    the `dnsperf(3)` man-page for more information how this works.
  * Commits:
    cd9df40 Tests
    864a968 Queries per connection
    7c5d6ab Suppress unexpected
    8e9f4a2 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1668168000">- Release 2.10.0
  * This release adds a binary datafile (DNS wire) format to `dnsperf`
    thanks to a contribution from Petr Špaček @pspacek (ISC).
  * The new binary format greatly improves performance in some cases, for
    Petr's case it was testing dynamic updates. Switching to this
    pre-compiled DNS wire format increased QPS from 4k to 600k, an increase
    of 150 times throughput from `dnsperf`!
  * See man-page for `-B` for more information and examples how to use.
  * Commits:
    5971cb9 Doc
    a241068 CodeQL
    2a7d10a Fix CodeQL workflow
    0ce15f6 Fix COPR
    0ae4a54 CodeQL
    f52e4b1 wire format input
    c423aa9 wire format input
    2b0693d Input binary format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1675857600">- Release 2.11.0
  * A couple of new features this release courtesy of Petr Špaček
    @pspacek (ISC) and a bunch of bugfixes.
  * First off `dnsperf` can now do verbose statistics during each interval
    when using `-S`, see long option `verbose-interval-stats`.
  * Next is a new latency histogram output using data structures (hg64)
    created by Tony Finch @fanf2 (ISC), see long option
    `latency-histogram`. These will also be shown during `-S` when used
    together with `verbose-interval-stats`.
  * Lastly a small change to boolean long options, they no longer require
    a value (`=yes`) to be enabled.
  * Bugfixes:
    - Make sure the number of outstanding queries don't go negative,
      happens if queries are timed out before being sent
    - Fixed #208:
      - `recv_one()`: Fix handling errno, only store EAGAIN if no other
        error has been received
      - `do_recv()`: Don't break on error as it will count it as a received
        message
      - Treat `EBADF` as `EAGAIN` for stateful connections, receive thread
        might read from a closed socket if send thread is reconnecting
    - `dnsperf`: warn if -c, -T, -q, -Q values are auto-adjusted
    - Fixed #222: don't process unexpected message if the message is
      suppressed
  * Commits:
    14db835 Opt arg
    fb81481 Suppress unexpected
    64b8c6d stats_t initialization
    8290775 Fix first call to diff_stats
    4f8bd24 Compile support histograms
    a9b4f04 External code, latency histograms
    d1f4b65 add detailed latency histograms
    044e3a2 data structures for detailed latency histograms
    ad3fb03 Opt, verbose statistics
    38bc936 Command usage warnings
    9f31595 Bad file descriptor
    d3650eb Receive socket error handling
    84c8e72 Negative outstanding
    e7df5e1 Clarify meaning of dnsperf -S output in the man page
    830eb43 verbose interval stats for dnsperf</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1678449600">- Release 2.11.1
  * Fixed long option argument handling that broke in v2.11.0 and enhanced
    long option help text, now includes argument type.
  * Commits:
    034e893 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1678968000">- Release 2.11.2
  * Fixed long option argument handling (again), wasn't completely fixed
    in v2.11.1.
  * Commits:
    e6dbd78 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1684670400">- Release 2.12.0
  * This release fixes a segfault when doing DNS-over-HTTPS and changes the
    way maximum queries per second are handled.
  * The DNS-over-HTTPS module handled reconnecting incorrectly and destroyed
    the nghttp2 context during callbacks. Thanks to the help from
    @kgillis2000 it was quickly found and fixed.
  * The way maximum QPS is handled has been changed by Petr Špaček @pspacek
    (ISC). The new way solves an over-shoot problem that happened due to
    max QPS being counted for the whole runtime and based on completed
    queries, not just sent.
  * A new option `qps_threshold_wait` has also been added. This controls
    the threshold for using `nanosleep()` between sending packet and the
    default is measured on start-up. If the time between packets, based on
    max QPS `-Q`, is smaller then no sleep will be performed. This improves
    performance when doing high max QPS limiting.
  * Other changes:
    - `dnsperf`: Statistics output
      - Fixed missing connection statistics if only reconnections happened
      - Flush output to allow pipe/grep processing
      - Add percentage on reconnections based on total connections
    - Support OpenSSL 3.0+
  * Commits:
    9aca046 OpenSSL 3.0
    6d3d6b4 Stats, DoH
    316f901 qps_threshold_wait
    ed52770 WIP: use busy wait only if necessary
    32229b6 WIP: import nanosleep benchmark
    1842b88 Fix dnsperf -Q to not overshot target value</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1686830400">- Release 2.13.0
  * This release adds a new option `-O tls-sni=...` to set the Server Name
    Indication when using TLS transport, currently for DNS-over-TLS and
    DNS-over-HTTPS.
  * Commits:
    dbe84f6 TLS SNI
    5fb2282 Add TLS Server Name Indication extension support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1692792000">- Release 2.13.1
  * This release fixes a few issues with in-progress queries and the TCP
    transport module.
  * When using stateful connections, such as TCP, if the full query couldn't
    be sent in one go then the query and connection could get stuck as
    "in-progress".
    This could easily happen if you limited the in-flight queries to 1 and
    sent very large DNS messages using the stream binary format.
    Additional socket ready checks has been added to flush in-progress
    queries as quickly as possible.
  * The TCP module's handling of errors when continuing in-progress queries
    has been fixed. Previously it would interpret EAGAIN as an unrecoverable
    error and trigger a reconnect, dropping the quer-y/ies in-progress for
    that connection.
  * Other changes:
    - Fix input data buffer to allow for maximum binary blob wire format, 2 byte size + max DNS message
    - Mention PowerTools repository for building on CentOS etc
  * Commits:
    56e180c In-progress, bitmaps, clang-format
    bbc48db In-progress
    059619d In-progress
    752575a TCP EAGAIN
    d51a453 Max input
    76764d7 64k TCP/DoT payload support
    8201f50 Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1705579200">- Release 2.14.0
  * This release rewords connection statistics, adds names to threads and
    fixes a bug with using TSIG in more than one thread.
  * In "Connection Statistics", reconnections has been renamed to
    connection attempts and now includes both the initial connection
    attempt and following reconnections.
  * If supported, threads will now be named after what they do, such as
    "perf-send-&lt;num&gt;" and "perf-recv-&lt;num&gt;".
  * The TSIG context was shared between all threads and would case a crash
    if more than one sending thread was used. This has been fixed and TSIG
    contexts are now per thread.
  * Commits:
    81dc36b TSIG context per thread
    55011c6 Thread names
    8bdd480 thread names
    17c680d Set thread names for dnsperf
    54e641d Add library function to set thread names
    fb19440 Dockerfile
    a80de21 Reword connection statistics
    688a4fd Reword connection statistics</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1768824000">- Release 2.15.0
  * This release brings several new features and a few bug fixes.
  * Both `dnsperf` and `resperf` will now report statistics on receiving
    unexpected DNS message IDs in responses.
  * Datafiles now support `\DDD` encoding in domain names as specified in
    RFC1035 "5.1. Format".
  * Thanks to funding from Internet Systems Consortium (isc.org) statistics
    in `dnsperf` can now be outputted as a stream of JSON objects using
    the new option `-j`, see man-page for more details.
  * Bugfixes:
    - Output correct histogram for connection latency, it was showing the histogram for response latency
    - Fixed double new-line in some perf_log_* calls
  * Other changes:
    - `dnsperf`: Fixed order of options in man-page
    - `test`: Use valid DNS queries as largest UDP and TCP test payloads
    - Fixed/modernize spec file
    - Fix for gcov, was not removing old profile data from subdirectories
    - `resperf`: Fixed scan-build inability to know fatal ends the program
    - Fixed test 5, wait for background process instead of sleeping
    - `test5`: Use a different port for DoH, `dumdumd` and `dumdohd` seems to interfere with each other
    - `Dockerfile`: Track the latest LTS version of Ubuntu
    - Migrate to Codeberg
  * Commits:
    40adb3e Copyright
    9ce0a3f openSUSE/SLE packages
    3cef733 json-c
    09d9e5d quoting
    ab4632d json statistics
    f3e95e6 json statistics
    4952b6c domain name quoting
    4145323 Conn Latency histogram
    b3cd9c6 Track the latest LTS version of Ubuntu in the Dockerfile
    0b02010 fix scan-build
    d9f2df9 CI updates
    bd1fdf3 CI
    0bf22cd bsd builds, debian build
    6d67d0d builds
    12d6789 Migrate to Codeberg
    0585df1 unexpected
    5748811 Add stats for unexpected message IDs
    c4a3515 test 5
    acfe3bc test5
    fcb556e fix gcov
    15057bc SPEC
    3c131a7 Badges
    1ef5b41 largest blobs
    ef41ffa Use valid DNS queries as largest UDP and TCP test payloads
    32d2a7e Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1776254400">- Release 2.15.1
  * This release fixes issues receiving DNS-over-HTTPS responses, previously
    responses could be dropped due to incorrect handling in callbacks from
    libnghttp2.
  * Other changes;
    - Updated internal known QTYPE table
    - Updates to CI
  * Commits:
    53c06f2 DoH
    ad8c352 DOH
    16a2975 actions
    ed0a553 QTYPEs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1785931200">- Release 2.16.0
  * This release adds TLS session resumption and `SSLKEYLOGFILE` support
    for DNS-over-TLS and DNS-over-HTTPS, work contributed by
    Ranya Sharma (PCH) and Sara Dickinson (Sinodun IT).
  * Commits:
    2b91cd0 format, fixes, doc, tests
    3c3f521 Implement session resumption for DoT and DoH</changelog>
</package>
<package pkgid="eaf0605642f2176676c7f077fe4a7c92622913276bf8b62ddf40d273477de7bf" name="resperf" arch="x86_64">
  <version epoch="0" ver="2.16.0" rel="150600.1.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.4.2-1" date="1614081600">- Release 2.4.2
  * This release fixes a few issues with reading of the datafile which
    could lead to "ran out of data" errors.
  * The problem was that reading from the datafile was done before finding
    a socket to send it on, or socket readyness, and that lead to progressing
    the queries without really doing anything.
    Another issues that's been fixed was that if the read lines perfectly
    aligned with the buffer, it would be treated like EOF and caused an exit.
  * Commits:
    9937287 resperf TLS
    6736956 datafile
    55faec6 ran out of data</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.0-1" date="1615550400">- Release 2.5.0
  * This release adds re-connection support for TCP and DoT protocol,
    new options to `resperf` and fixes a few bugs.
  * `dnsperf` and `resperf` will now try to re-connect when they lose a TCP
    or DoT connection, and with that comes a few new statistics metrics.
    For `dnsperf`, if a connection oriented protocol is used, it will now
    show the total number of re-connections made and the connection latency.
    For `resperf` it also shows the total number of re-connections made and
    the gnuplot data now contains the total number of connections made and
    the connection latency for each interval.
    Beside re-connection support, improvements have been made when it comes
    to tracking socket readiness while connections are established which
    should generate less warnings about "socket not ready".
  * New `resperf` options:
    - `-R`: Reopen the datafile if it runs out of data before the testing
      is completed. This allows for long running tests on very small and
      simple query datafile.
    - `-F &lt;fall_behind&gt;`: Sets the maximum number of queries that can fall
      behind being sent. `resperf` will stop when this many queries should
      have been sent and it can be relative easy to hit if `-m &lt;max_qps&gt;`
      is set too high.
      The default is 1000 and setting it to zero (0) disables the check.
  * Bugfixes:
    - Fixed port handling for host/network format when setting client side
      port with `-x`
    - Fix support for quoted characters, `\000` and `\.`, in domain names,
      this was lost when removing BIND's internal development libraries
    - Fix issue in `dnsperf`, it would loop forever if no connection could
      be established
    - Fix potential buffer overrun in `resperf` when using response id
      for `queries[]`
    - DoT: Fix bug when sending from buffer
  * Other changes:
    - Always use `IPV6_V6ONLY` socket option for IPv6
    - Add man-page on `-W` option added in v2.4.0
    - Reformat man-pages
    - `resperf`:
      - Try and process more request each run to hopefully not hit max
        outstanding so easy when high QPS
      - Add default value to `-C` so it shows in help
  * Commits:
    9308361 man-page format
    0e52fb4 man-page, opts, tuneups
    e36211d stats
    d9b9ba3 Response qid to index
    2b2c37e fixes, reconnection
    acd31e5 dname quote
    de8f049 net</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.1-1" date="1616414400">- Release 2.5.1
  * This release re-adds support for TYPEnnn and ANY in the datafile, this
    was missed during the removal of the dependency on BINDs development
    libraries in v2.4.0.
  * Also note that with v2.5.0, this software now depends on Concurrency
    Kit (ck) for atomic operations.
  * Commits:
    924e6ea ANY
    0a444c0 TYPEnnn</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.5.2-1" date="1616673600">- Release 2.5.2
  * This release tweaks the reconnect code for TCP and DoT.
  * For TCP, atomic operations are used to signal the need to reconnect
    from the receiving thread to the sending, as the sending is the one in
    charge of reconnecting.
    This speeds up detection of connection lost which reduces the amount of
    lost queries on a disconnect.
  * This change does not affect DoT as much, as the SSL context shared
    between the threads are protected by a mutex.
    But a bug was found in `sendto()` for DoT that could drop a query if
    the socket was busy sending.
  * The connect and reconnect socket events has been split into connecting,
    connected and reconnecting, reconnected. This is to report more correct
    reconnect events when it comes to DoT, because the connection can be
    lost while negotiating TLS.
  * Lastly, additional tests has been added for the network code.
  * Commits:
    d9e5663 net test
    22f49df network tests
    8e5b56e reconnect</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.6.0-1" date="1622462400">- Release 2.6.0
  * This release adds EDNS options parameter `-E` to `resperf` and a script
    for generating EDNS Client Subnet options (see `contrib/ecs-gen`).
  * Commits:
    d29d880 ECS opt
    877f31e edns option</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.0-1" date="1628510400">- Release 2.7.0
  * This release adds DNS-over-HTTPS support!
  * DNS-over-HTTPS can be used by specifying transport mode `doh` and you
    should also look at the dnsperf(1) man-page (or `-H`) for the extended
    options `doh-uri` and `doh-method`, which controls aspects of DoH/HTTP/2
    that you might want to set.
  * Other fixes:
    - Add check when constructing DNS packet so that total length of labels
      does not exceed 255 bytes
    - Fix connection/reconnection state handling for DoT transport
    - Fix event handling by initializing them directly when opening the
      sockets, otherwise events could have been missed which would give
      incorrect statistics
  * Commits:
    61b5eac Tests with dumdumd
    d71071c Tests with dumdumd
    b42f92e DoH sending
    2fa40bb Net stats
    f7f8692 DoH fixes
    ea62b49 DoH concurrent streams
    91929f1 DoH reconnect
    17660e6 DoH fixes
    5276aa6 resperf buckets
    585860e Packages
    3ffc601 Fixes
    1570609 Man-page
    6bcadc7 README
    f81adf1 Fixes
    1acd71f Code structure
    6c47876 Fixes
    2d379f4 Fixes
    4d5384b Fixes
    cee93b3 Initial DNS-over-HTTPS support implementation
    4ff3ebc Events
    8b24bbf DoT state
    6a5b5ef Fix too long name
    71fa09f long opts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.7.1-1" date="1631880000">- Release 2.7.1
  * This release fixes issues with constructing wire-format DNS when the
    domain names includes escaped characters such as `\123` or `\.`.
  * Other changes:
    - Bump Debian package compat level to 10
  * Commits:
    4873f02 DNS encoding
    c4eccc0 debhelper</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.8.0-1" date="1635854400">- Release 2.8.0
  * This release fixes response handling for DNS-over-HTTPS when multiple
    responses are received within the same receive cycle, and adds a new
    option to suppress some of the normal and verbose output.
  * The network model within dnsperf and resperf can not process more then
    one response at a time from a protocol module, so a buffer has been added
    to the DNS-over-HTTPS module to handle this situation (this already exists
    in all other modules).
  * The new option `-O suppress=&lt;message,...&gt;` can selectively suppress parts
    of the normal and verbose output. Some of these messages might be
    excessively displayed due to the network model and depending on what
    protocol you use which makes usage harder then necessary. For example
    during TCP connection stage, if you end-point is slow to establish
    connection you will get a lot of output saying that the socket isn't ready
    yet.
  * Commits:
    6a452b0 DoH response handling
    e2828e7 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.9.0-1" date="1638964800">- Release 2.9.0
  * This release brings a new message suppression option and a way to control
    how many queries are sent over a connection.
  * You can now suppress the message about receiving unexpected DNS message
    IDs by using `-O suppress=unexpected`.
  * With `-O num-queries-per-conn=&lt;num&gt;` you can now limit the number of
    queries sent over a connection before triggering a re-connection, see
    the `dnsperf(3)` man-page for more information how this works.
  * Commits:
    cd9df40 Tests
    864a968 Queries per connection
    7c5d6ab Suppress unexpected
    8e9f4a2 Suppress</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.10.0-1" date="1668168000">- Release 2.10.0
  * This release adds a binary datafile (DNS wire) format to `dnsperf`
    thanks to a contribution from Petr Špaček @pspacek (ISC).
  * The new binary format greatly improves performance in some cases, for
    Petr's case it was testing dynamic updates. Switching to this
    pre-compiled DNS wire format increased QPS from 4k to 600k, an increase
    of 150 times throughput from `dnsperf`!
  * See man-page for `-B` for more information and examples how to use.
  * Commits:
    5971cb9 Doc
    a241068 CodeQL
    2a7d10a Fix CodeQL workflow
    0ce15f6 Fix COPR
    0ae4a54 CodeQL
    f52e4b1 wire format input
    c423aa9 wire format input
    2b0693d Input binary format</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.0-1" date="1675857600">- Release 2.11.0
  * A couple of new features this release courtesy of Petr Špaček
    @pspacek (ISC) and a bunch of bugfixes.
  * First off `dnsperf` can now do verbose statistics during each interval
    when using `-S`, see long option `verbose-interval-stats`.
  * Next is a new latency histogram output using data structures (hg64)
    created by Tony Finch @fanf2 (ISC), see long option
    `latency-histogram`. These will also be shown during `-S` when used
    together with `verbose-interval-stats`.
  * Lastly a small change to boolean long options, they no longer require
    a value (`=yes`) to be enabled.
  * Bugfixes:
    - Make sure the number of outstanding queries don't go negative,
      happens if queries are timed out before being sent
    - Fixed #208:
      - `recv_one()`: Fix handling errno, only store EAGAIN if no other
        error has been received
      - `do_recv()`: Don't break on error as it will count it as a received
        message
      - Treat `EBADF` as `EAGAIN` for stateful connections, receive thread
        might read from a closed socket if send thread is reconnecting
    - `dnsperf`: warn if -c, -T, -q, -Q values are auto-adjusted
    - Fixed #222: don't process unexpected message if the message is
      suppressed
  * Commits:
    14db835 Opt arg
    fb81481 Suppress unexpected
    64b8c6d stats_t initialization
    8290775 Fix first call to diff_stats
    4f8bd24 Compile support histograms
    a9b4f04 External code, latency histograms
    d1f4b65 add detailed latency histograms
    044e3a2 data structures for detailed latency histograms
    ad3fb03 Opt, verbose statistics
    38bc936 Command usage warnings
    9f31595 Bad file descriptor
    d3650eb Receive socket error handling
    84c8e72 Negative outstanding
    e7df5e1 Clarify meaning of dnsperf -S output in the man page
    830eb43 verbose interval stats for dnsperf</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.1-1" date="1678449600">- Release 2.11.1
  * Fixed long option argument handling that broke in v2.11.0 and enhanced
    long option help text, now includes argument type.
  * Commits:
    034e893 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.11.2-1" date="1678968000">- Release 2.11.2
  * Fixed long option argument handling (again), wasn't completely fixed
    in v2.11.1.
  * Commits:
    e6dbd78 Long opt</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.12.0-1" date="1684670400">- Release 2.12.0
  * This release fixes a segfault when doing DNS-over-HTTPS and changes the
    way maximum queries per second are handled.
  * The DNS-over-HTTPS module handled reconnecting incorrectly and destroyed
    the nghttp2 context during callbacks. Thanks to the help from
    @kgillis2000 it was quickly found and fixed.
  * The way maximum QPS is handled has been changed by Petr Špaček @pspacek
    (ISC). The new way solves an over-shoot problem that happened due to
    max QPS being counted for the whole runtime and based on completed
    queries, not just sent.
  * A new option `qps_threshold_wait` has also been added. This controls
    the threshold for using `nanosleep()` between sending packet and the
    default is measured on start-up. If the time between packets, based on
    max QPS `-Q`, is smaller then no sleep will be performed. This improves
    performance when doing high max QPS limiting.
  * Other changes:
    - `dnsperf`: Statistics output
      - Fixed missing connection statistics if only reconnections happened
      - Flush output to allow pipe/grep processing
      - Add percentage on reconnections based on total connections
    - Support OpenSSL 3.0+
  * Commits:
    9aca046 OpenSSL 3.0
    6d3d6b4 Stats, DoH
    316f901 qps_threshold_wait
    ed52770 WIP: use busy wait only if necessary
    32229b6 WIP: import nanosleep benchmark
    1842b88 Fix dnsperf -Q to not overshot target value</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.0-1" date="1686830400">- Release 2.13.0
  * This release adds a new option `-O tls-sni=...` to set the Server Name
    Indication when using TLS transport, currently for DNS-over-TLS and
    DNS-over-HTTPS.
  * Commits:
    dbe84f6 TLS SNI
    5fb2282 Add TLS Server Name Indication extension support</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.13.1-1" date="1692792000">- Release 2.13.1
  * This release fixes a few issues with in-progress queries and the TCP
    transport module.
  * When using stateful connections, such as TCP, if the full query couldn't
    be sent in one go then the query and connection could get stuck as
    "in-progress".
    This could easily happen if you limited the in-flight queries to 1 and
    sent very large DNS messages using the stream binary format.
    Additional socket ready checks has been added to flush in-progress
    queries as quickly as possible.
  * The TCP module's handling of errors when continuing in-progress queries
    has been fixed. Previously it would interpret EAGAIN as an unrecoverable
    error and trigger a reconnect, dropping the quer-y/ies in-progress for
    that connection.
  * Other changes:
    - Fix input data buffer to allow for maximum binary blob wire format, 2 byte size + max DNS message
    - Mention PowerTools repository for building on CentOS etc
  * Commits:
    56e180c In-progress, bitmaps, clang-format
    bbc48db In-progress
    059619d In-progress
    752575a TCP EAGAIN
    d51a453 Max input
    76764d7 64k TCP/DoT payload support
    8201f50 Doc</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.14.0-1" date="1705579200">- Release 2.14.0
  * This release rewords connection statistics, adds names to threads and
    fixes a bug with using TSIG in more than one thread.
  * In "Connection Statistics", reconnections has been renamed to
    connection attempts and now includes both the initial connection
    attempt and following reconnections.
  * If supported, threads will now be named after what they do, such as
    "perf-send-&lt;num&gt;" and "perf-recv-&lt;num&gt;".
  * The TSIG context was shared between all threads and would case a crash
    if more than one sending thread was used. This has been fixed and TSIG
    contexts are now per thread.
  * Commits:
    81dc36b TSIG context per thread
    55011c6 Thread names
    8bdd480 thread names
    17c680d Set thread names for dnsperf
    54e641d Add library function to set thread names
    fb19440 Dockerfile
    a80de21 Reword connection statistics
    688a4fd Reword connection statistics</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.0-1" date="1768824000">- Release 2.15.0
  * This release brings several new features and a few bug fixes.
  * Both `dnsperf` and `resperf` will now report statistics on receiving
    unexpected DNS message IDs in responses.
  * Datafiles now support `\DDD` encoding in domain names as specified in
    RFC1035 "5.1. Format".
  * Thanks to funding from Internet Systems Consortium (isc.org) statistics
    in `dnsperf` can now be outputted as a stream of JSON objects using
    the new option `-j`, see man-page for more details.
  * Bugfixes:
    - Output correct histogram for connection latency, it was showing the histogram for response latency
    - Fixed double new-line in some perf_log_* calls
  * Other changes:
    - `dnsperf`: Fixed order of options in man-page
    - `test`: Use valid DNS queries as largest UDP and TCP test payloads
    - Fixed/modernize spec file
    - Fix for gcov, was not removing old profile data from subdirectories
    - `resperf`: Fixed scan-build inability to know fatal ends the program
    - Fixed test 5, wait for background process instead of sleeping
    - `test5`: Use a different port for DoH, `dumdumd` and `dumdohd` seems to interfere with each other
    - `Dockerfile`: Track the latest LTS version of Ubuntu
    - Migrate to Codeberg
  * Commits:
    40adb3e Copyright
    9ce0a3f openSUSE/SLE packages
    3cef733 json-c
    09d9e5d quoting
    ab4632d json statistics
    f3e95e6 json statistics
    4952b6c domain name quoting
    4145323 Conn Latency histogram
    b3cd9c6 Track the latest LTS version of Ubuntu in the Dockerfile
    0b02010 fix scan-build
    d9f2df9 CI updates
    bd1fdf3 CI
    0bf22cd bsd builds, debian build
    6d67d0d builds
    12d6789 Migrate to Codeberg
    0585df1 unexpected
    5748811 Add stats for unexpected message IDs
    c4a3515 test 5
    acfe3bc test5
    fcb556e fix gcov
    15057bc SPEC
    3c131a7 Badges
    1ef5b41 largest blobs
    ef41ffa Use valid DNS queries as largest UDP and TCP test payloads
    32d2a7e Workflow</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.15.1-1" date="1776254400">- Release 2.15.1
  * This release fixes issues receiving DNS-over-HTTPS responses, previously
    responses could be dropped due to incorrect handling in callbacks from
    libnghttp2.
  * Other changes;
    - Updated internal known QTYPE table
    - Updates to CI
  * Commits:
    53c06f2 DoH
    ad8c352 DOH
    16a2975 actions
    ed0a553 QTYPEs</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 2.16.0-1" date="1785931200">- Release 2.16.0
  * This release adds TLS session resumption and `SSLKEYLOGFILE` support
    for DNS-over-TLS and DNS-over-HTTPS, work contributed by
    Ranya Sharma (PCH) and Sara Dickinson (Sinodun IT).
  * Commits:
    2b91cd0 format, fixes, doc, tests
    3c3f521 Implement session resumption for DoT and DoH</changelog>
</package>
<package pkgid="50086b4f3c82daad725580d000b9482959803aded72d872569905c4e7d1c418f" name="tinyframe" arch="src">
  <version epoch="0" ver="0.1.1" rel="150600.8.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1603368000">- Release 0.1.1
  * This release adds a few assert check on augments to some of the function
    calls, fixes a type in configure and adds coverage tests.
    - `tinyframe_write_control()`:
      - assert arguments and content fields data
      - check for valid content field types
    - `tinyframe_write_control_start()`: assert arguments
    - `tinyframe_write_frame()`: assert arguments
    - `tinyframe_write_control_stop()`: assert arguments
    - `tinyframe_set_header()`: assert arguments
    - Remove `sprintf()` usage from tracing
  * Commits:
    c6fbfea Travis, configure
    ba616b0 Coverage
    97dfeb7 Coverage
    f69665b Badges
    907a894 COPR
    f07d4e8 Funding
    242b1b2 Trace
    8d36cf7 LGTM</changelog>
</package>
<package pkgid="8a3c4e4269b8e298aa3f2243ffa016263e0da7b0fef7adfd40e4c0661cd54885" name="tinyframe-devel" arch="aarch64">
  <version epoch="0" ver="0.1.1" rel="150600.8.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1603368000">- Release 0.1.1
  * This release adds a few assert check on augments to some of the function
    calls, fixes a type in configure and adds coverage tests.
    - `tinyframe_write_control()`:
      - assert arguments and content fields data
      - check for valid content field types
    - `tinyframe_write_control_start()`: assert arguments
    - `tinyframe_write_frame()`: assert arguments
    - `tinyframe_write_control_stop()`: assert arguments
    - `tinyframe_set_header()`: assert arguments
    - Remove `sprintf()` usage from tracing
  * Commits:
    c6fbfea Travis, configure
    ba616b0 Coverage
    97dfeb7 Coverage
    f69665b Badges
    907a894 COPR
    f07d4e8 Funding
    242b1b2 Trace
    8d36cf7 LGTM</changelog>
</package>
<package pkgid="73d007a49a248c02aca77e30ecf38a4d82c2698bd3f87c91747d8704f13b2fd4" name="tinyframe-devel" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="150600.8.1"/>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.0-1" date="1584619200">- Release 0.1.0</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.1.1-1" date="1603368000">- Release 0.1.1
  * This release adds a few assert check on augments to some of the function
    calls, fixes a type in configure and adds coverage tests.
    - `tinyframe_write_control()`:
      - assert arguments and content fields data
      - check for valid content field types
    - `tinyframe_write_control_start()`: assert arguments
    - `tinyframe_write_frame()`: assert arguments
    - `tinyframe_write_control_stop()`: assert arguments
    - `tinyframe_set_header()`: assert arguments
    - Remove `sprintf()` usage from tracing
  * Commits:
    c6fbfea Travis, configure
    ba616b0 Coverage
    97dfeb7 Coverage
    f69665b Badges
    907a894 COPR
    f07d4e8 Funding
    242b1b2 Trace
    8d36cf7 LGTM</changelog>
</package>
<package pkgid="4fafefb655ee88c14e720208e27101a0994f73895a6a23b5f17ef80c4eb72a5c" name="validns" arch="aarch64">
  <version epoch="0" ver="0.11.0" rel="150600.1.1"/>
  <changelog author="Anton Berezin &lt;tobez@tobez.org&gt; 0.8.0-1" date="1392120000">- Release 0.8.0
  * Added:
    - Support ECDSA and SHA-256 in SSHFP
    - Support for SHA-384 digests in DS (RFC 6605)
    - Support multiple -t options
  * Fixed:
    - Miscellaneous bug fixes
    - Miscellaneous portability fixes</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1769774400">- Release 0.9.0
  * Added:
    - Support for WALLET RR type 262
    - Internal txtlike infrastructure for TXT-like RR types, removing 20-segment limit for SPF
    - Full hex data display in generic record verbose output
    - Support for ZoneMD (RFC 8976)
    - Quiet mode for test programs (-v for verbose output)
    - Changie for changelog management
    - -V option to print version
  * Changed:
    - License updated
    - CI infrastructure updates
    - Migration to Codeberg
    - Build system migrated to autotools
  * Fixed:
    - Root zone membership check now correctly allows TLDs
    - Include txtlike.h in distribution tarball
    - Memory management issues (file_info initialization, generate template cleanup)
    - Coredump in NSEC3 handling when zone apex is NULL
    - Coredump when zone has DNSSEC records but no valid SOA
    - Scan-build warnings
    - Prevent crash in KSK policy check when zone has no DNSKEY records
    - Resolve clang scan-build warnings (dead stores, missing noreturn attributes)
    - Prevent crash in NSEC3PARAM policy check when record storage fails
    - Detect and report when DNSSEC signature algorithms are disabled by system crypto policy (RHEL 9/CentOS 9)</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.10.0-1" date="1779105600">- Release 0.10.0
  * Added:
    - Validate zones signed with Ed25519 and Ed448 (RFC 8080)
    - Validate SVCB (TYPE 64) and HTTPS (TYPE 65) records per RFC 9460, including all nine IANA-registered SvcParam keys.
    - CAA tag-value validation and RFC 8657 contact tags.
    - Support the optional $INCLUDE &lt;domain-name&gt; argument: overrides $ORIGIN for the included file only.
  * Fixed:
    - ksk-exists policy now recognizes Combined Signing Key (CSK) configurations
    - do not flag a typemap mismatch when an owner name shares its label with an NSEC3 chain owner
    - Suppress cascading errors when DS/CDS/DLV references an unrecognized or policy-disabled algorithm.
    - Accept RRSIG inception/expiration timestamps past 2038-01-19 03:14:07 UTC and compute them in UTC per RFC 4034.
    - Signature count in -s summary no longer inflated when multiple DNSKEYs share a key tag.
    - PTR records report "PTR domain name" in error messages instead of the misleading "name server domain name".
    - Zone names containing unescaped commas, raw 8-bit bytes, or quoted-string (`"..."`) form now parse, matching BIND and ldns.
    - RRSIG validity checks (-t) accept post-2038 epochs on 32-bit hosts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.11.0-1" date="1784116800">- Release 0.11.0
  * Added:
    - Detect NSEC3 records with flags, iterations, or salt inconsistent with NSEC3PARAM.
    - Support for EUI48 and EUI64 records (RFC 7043)
    - Verbose output (-v) shows complete RRSIG record data
    - Render full rdata for HINFO, TXT, SPF, WALLET, ISDN, X25 and NAPTR in verbose output
    - Render full rdata for LOC records in verbose output
    - New -L flag lists all record types validns can render.
    - Report unsigned RR sets in signed zones; new all-algorithms-signed policy check
    - New occluded-records policy check reports records hidden below delegations
    - New missing-glue policy check reports delegations lacking mandatory glue
  * Fixed:
    - Parse \DDD string escapes per RFC 1035, fixing false signature errors on BIND-signed zones
    - Verbose output now renders complete NSEC3 records
    - Verbose output now renders DNSKEY, CERT, DHCID, and IPSECKEY rdata in full
    - LOC records omitting size/precision fields no longer emit uninitialized data
    - L64 and NID now handle the full 64-bit locator/node identifier
    - verbose output renders full NSAP, TLSA, SMIMEA, RP, L64 and NID rdata
    - L32 records are now rendered and validated correctly on little-endian systems.
    - Fix crash when reporting results for a signer key that failed to build
    - Fix data race in multi-threaded signature verification
    - Fix memory leaks in DNSSEC key building and RRSIG parsing
  * Security:
    - Fix a buffer overflow when parsing overlong quoted strings
    - Fix buffer overflows when rendering RRSIG, IPSECKEY and NSEC/NSEC3 records in verbose (-v) output</changelog>
</package>
<package pkgid="3daf255bf70e11ced903f0660cc4296b2affae172cdf4ba9ab90260baaf4d099" name="validns" arch="src">
  <version epoch="0" ver="0.11.0" rel="150600.1.1"/>
  <changelog author="Anton Berezin &lt;tobez@tobez.org&gt; 0.8.0-1" date="1392120000">- Release 0.8.0
  * Added:
    - Support ECDSA and SHA-256 in SSHFP
    - Support for SHA-384 digests in DS (RFC 6605)
    - Support multiple -t options
  * Fixed:
    - Miscellaneous bug fixes
    - Miscellaneous portability fixes</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1769774400">- Release 0.9.0
  * Added:
    - Support for WALLET RR type 262
    - Internal txtlike infrastructure for TXT-like RR types, removing 20-segment limit for SPF
    - Full hex data display in generic record verbose output
    - Support for ZoneMD (RFC 8976)
    - Quiet mode for test programs (-v for verbose output)
    - Changie for changelog management
    - -V option to print version
  * Changed:
    - License updated
    - CI infrastructure updates
    - Migration to Codeberg
    - Build system migrated to autotools
  * Fixed:
    - Root zone membership check now correctly allows TLDs
    - Include txtlike.h in distribution tarball
    - Memory management issues (file_info initialization, generate template cleanup)
    - Coredump in NSEC3 handling when zone apex is NULL
    - Coredump when zone has DNSSEC records but no valid SOA
    - Scan-build warnings
    - Prevent crash in KSK policy check when zone has no DNSKEY records
    - Resolve clang scan-build warnings (dead stores, missing noreturn attributes)
    - Prevent crash in NSEC3PARAM policy check when record storage fails
    - Detect and report when DNSSEC signature algorithms are disabled by system crypto policy (RHEL 9/CentOS 9)</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.10.0-1" date="1779105600">- Release 0.10.0
  * Added:
    - Validate zones signed with Ed25519 and Ed448 (RFC 8080)
    - Validate SVCB (TYPE 64) and HTTPS (TYPE 65) records per RFC 9460, including all nine IANA-registered SvcParam keys.
    - CAA tag-value validation and RFC 8657 contact tags.
    - Support the optional $INCLUDE &lt;domain-name&gt; argument: overrides $ORIGIN for the included file only.
  * Fixed:
    - ksk-exists policy now recognizes Combined Signing Key (CSK) configurations
    - do not flag a typemap mismatch when an owner name shares its label with an NSEC3 chain owner
    - Suppress cascading errors when DS/CDS/DLV references an unrecognized or policy-disabled algorithm.
    - Accept RRSIG inception/expiration timestamps past 2038-01-19 03:14:07 UTC and compute them in UTC per RFC 4034.
    - Signature count in -s summary no longer inflated when multiple DNSKEYs share a key tag.
    - PTR records report "PTR domain name" in error messages instead of the misleading "name server domain name".
    - Zone names containing unescaped commas, raw 8-bit bytes, or quoted-string (`"..."`) form now parse, matching BIND and ldns.
    - RRSIG validity checks (-t) accept post-2038 epochs on 32-bit hosts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.11.0-1" date="1784116800">- Release 0.11.0
  * Added:
    - Detect NSEC3 records with flags, iterations, or salt inconsistent with NSEC3PARAM.
    - Support for EUI48 and EUI64 records (RFC 7043)
    - Verbose output (-v) shows complete RRSIG record data
    - Render full rdata for HINFO, TXT, SPF, WALLET, ISDN, X25 and NAPTR in verbose output
    - Render full rdata for LOC records in verbose output
    - New -L flag lists all record types validns can render.
    - Report unsigned RR sets in signed zones; new all-algorithms-signed policy check
    - New occluded-records policy check reports records hidden below delegations
    - New missing-glue policy check reports delegations lacking mandatory glue
  * Fixed:
    - Parse \DDD string escapes per RFC 1035, fixing false signature errors on BIND-signed zones
    - Verbose output now renders complete NSEC3 records
    - Verbose output now renders DNSKEY, CERT, DHCID, and IPSECKEY rdata in full
    - LOC records omitting size/precision fields no longer emit uninitialized data
    - L64 and NID now handle the full 64-bit locator/node identifier
    - verbose output renders full NSAP, TLSA, SMIMEA, RP, L64 and NID rdata
    - L32 records are now rendered and validated correctly on little-endian systems.
    - Fix crash when reporting results for a signer key that failed to build
    - Fix data race in multi-threaded signature verification
    - Fix memory leaks in DNSSEC key building and RRSIG parsing
  * Security:
    - Fix a buffer overflow when parsing overlong quoted strings
    - Fix buffer overflows when rendering RRSIG, IPSECKEY and NSEC/NSEC3 records in verbose (-v) output</changelog>
</package>
<package pkgid="bcf0c626a00309c4715f1c835775f02d0c735facd4714491dbd639cfa76a1cfb" name="validns" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="150600.1.1"/>
  <changelog author="Anton Berezin &lt;tobez@tobez.org&gt; 0.8.0-1" date="1392120000">- Release 0.8.0
  * Added:
    - Support ECDSA and SHA-256 in SSHFP
    - Support for SHA-384 digests in DS (RFC 6605)
    - Support multiple -t options
  * Fixed:
    - Miscellaneous bug fixes
    - Miscellaneous portability fixes</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.9.0-1" date="1769774400">- Release 0.9.0
  * Added:
    - Support for WALLET RR type 262
    - Internal txtlike infrastructure for TXT-like RR types, removing 20-segment limit for SPF
    - Full hex data display in generic record verbose output
    - Support for ZoneMD (RFC 8976)
    - Quiet mode for test programs (-v for verbose output)
    - Changie for changelog management
    - -V option to print version
  * Changed:
    - License updated
    - CI infrastructure updates
    - Migration to Codeberg
    - Build system migrated to autotools
  * Fixed:
    - Root zone membership check now correctly allows TLDs
    - Include txtlike.h in distribution tarball
    - Memory management issues (file_info initialization, generate template cleanup)
    - Coredump in NSEC3 handling when zone apex is NULL
    - Coredump when zone has DNSSEC records but no valid SOA
    - Scan-build warnings
    - Prevent crash in KSK policy check when zone has no DNSKEY records
    - Resolve clang scan-build warnings (dead stores, missing noreturn attributes)
    - Prevent crash in NSEC3PARAM policy check when record storage fails
    - Detect and report when DNSSEC signature algorithms are disabled by system crypto policy (RHEL 9/CentOS 9)</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.10.0-1" date="1779105600">- Release 0.10.0
  * Added:
    - Validate zones signed with Ed25519 and Ed448 (RFC 8080)
    - Validate SVCB (TYPE 64) and HTTPS (TYPE 65) records per RFC 9460, including all nine IANA-registered SvcParam keys.
    - CAA tag-value validation and RFC 8657 contact tags.
    - Support the optional $INCLUDE &lt;domain-name&gt; argument: overrides $ORIGIN for the included file only.
  * Fixed:
    - ksk-exists policy now recognizes Combined Signing Key (CSK) configurations
    - do not flag a typemap mismatch when an owner name shares its label with an NSEC3 chain owner
    - Suppress cascading errors when DS/CDS/DLV references an unrecognized or policy-disabled algorithm.
    - Accept RRSIG inception/expiration timestamps past 2038-01-19 03:14:07 UTC and compute them in UTC per RFC 4034.
    - Signature count in -s summary no longer inflated when multiple DNSKEYs share a key tag.
    - PTR records report "PTR domain name" in error messages instead of the misleading "name server domain name".
    - Zone names containing unescaped commas, raw 8-bit bytes, or quoted-string (`"..."`) form now parse, matching BIND and ldns.
    - RRSIG validity checks (-t) accept post-2038 epochs on 32-bit hosts</changelog>
  <changelog author="Jerry Lundstr&#xF6;m &lt;lundstrom.jerry@gmail.com&gt; 0.11.0-1" date="1784116800">- Release 0.11.0
  * Added:
    - Detect NSEC3 records with flags, iterations, or salt inconsistent with NSEC3PARAM.
    - Support for EUI48 and EUI64 records (RFC 7043)
    - Verbose output (-v) shows complete RRSIG record data
    - Render full rdata for HINFO, TXT, SPF, WALLET, ISDN, X25 and NAPTR in verbose output
    - Render full rdata for LOC records in verbose output
    - New -L flag lists all record types validns can render.
    - Report unsigned RR sets in signed zones; new all-algorithms-signed policy check
    - New occluded-records policy check reports records hidden below delegations
    - New missing-glue policy check reports delegations lacking mandatory glue
  * Fixed:
    - Parse \DDD string escapes per RFC 1035, fixing false signature errors on BIND-signed zones
    - Verbose output now renders complete NSEC3 records
    - Verbose output now renders DNSKEY, CERT, DHCID, and IPSECKEY rdata in full
    - LOC records omitting size/precision fields no longer emit uninitialized data
    - L64 and NID now handle the full 64-bit locator/node identifier
    - verbose output renders full NSAP, TLSA, SMIMEA, RP, L64 and NID rdata
    - L32 records are now rendered and validated correctly on little-endian systems.
    - Fix crash when reporting results for a signer key that failed to build
    - Fix data race in multi-threaded signature verification
    - Fix memory leaks in DNSSEC key building and RRSIG parsing
  * Security:
    - Fix a buffer overflow when parsing overlong quoted strings
    - Fix buffer overflows when rendering RRSIG, IPSECKEY and NSEC/NSEC3 records in verbose (-v) output</changelog>
</package>
</otherdata>