v4.5.1

[fklassen]

Announcing v4.5.1

This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do Tcpreplay maintenance in my spare time.

There are many bug fixes and new features. Most notable features:

• AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
• -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
• --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
• --fixhdrlen tcpreplay option - added to control action on packet length changes
• -W tcpreplay option - suppress warnings when replaying
• SLL2( Linux "cooked" capture encapsulation v2)
• Haiku support

What's Changed

• Add support for LINUX_SLL2 by @btriller in Add support for LINUX_SLL2 #728
• Feature [Feature] Add support for DLT_LINUX_SLL2 #727 - Linux SLL v2 by @fklassen in Feature #727 - Linux SLL v2 #820
• Bug [Bug] tcpreplay goes full speed after some time #779 - honour overflow for all PPS values by @fklassen in Bug #779 - honour overflow for all PPS values #821
• AF_XDP socket extension using libxdp api by @plangarbalint in AF_XDP socket extension using libxdp api #797
• Feature [Feature] implement AF_XDF socket extension #822 - AF_XDP socket extension by @fklassen in Feature #822 - AF_XDP socket extension #823
• Nanosec accurate packet processing by @plangarbalint in Nanosec accurate packet processing #796
• Handle IPv6 fragment extension header by @ChuckCottrill in Handle IPv6 fragment extension header #832
• Bug [Bug] Heap overflow in csum_replace4() (reopen) #837 - handle IPv6 fragment extension header by @fklassen in Bug #837 - handle IPv6 fragment extension header #838
• Feature Nanosec accurate packet processing #796 - nanosecond packet processing by @fklassen in Feature #796 - nanosecond packet processing #836
• configure.ac: unify search dirs for pcap and add lib32 by @shr-project in configure.ac: unify search dirs for pcap and add lib32 #819
• Feature [Feature] GitHub Template for pull requests #839 - add pull request template by @fklassen in Feature #839 - add pull request template #840
• ipv6 - add check for extension header length by @GabrielGanne in ipv6 - add check for extension header length #842
• Bug [Bug] Infinite loop in tcprewrite at get.c:569 #827 PR ipv6 - add check for extension header length #842 IPv6 extension header - staging by @fklassen in Bug #827 PR #842 IPv6 extension header - staging #859
• add check for empty cidr by @GabrielGanne in add check for empty cidr #843
• Bug [Bug] NULL Pointer Dereference in mask_cidr6 at cidr.c:228 #824 and PR add check for empty cidr #843: check for empty CIDR by @fklassen in Bug #824 and PR #843: check for empty CIDR #860
• Add option to turn on/off fix packet header length by @ChuckCottrill in Add option to turn on/off fix packet header length #846
• Bug Heap-buffer-overflow in tcpreplay #703 [Bug] tcprewrite provides incorrect checksum for certain ipv4 packets #844 PR Add option to turn on/off fix packet header length #846: optionally fix packet header length --fixhdrlen by @fklassen in Bug #703 #844 PR #846: optionally fix packet header length --fixhdrlen #861
• Bug 863: fix nansecond timestamp regression by @fklassen in Bug 863: fix nansecond timestamp regression #865
• autotools - AC_HELP_STRING is obsolete in 2.70 by @GabrielGanne in autotools - AC_HELP_STRING is obsolete in 2.70 #856
• some Haiku support by @infrastation in some Haiku support #847
• configure.ac: do not run conftest in case of cross compilation by @ChenQi1989 in configure.ac: do not run conftest in case of cross compilation #849
• dlt_jnpr_ether_cleanup: check config before cleanup by @Marsman1996 in dlt_jnpr_ether_cleanup: check config before cleanup #851
• Fix recursive tcpedit cleanup by @GabrielGanne in Fix recursive tcpedit cleanup #855
• Bug [Bug] Double free in tcpedit_dlt_cleanup in tcprewrite #813: back out PR Fix recursive tcpedit cleanup #855 by @fklassen in Bug #813: back out PR #855 #866
• Bug [Bug] tcpprep memory leak when using Regex #867 - run regfree() on close by @fklassen in Bug #867 - run regfree() on close #868
• Bug [Bug] memory leak in tcpprep with using include/exclude #869 tcpprep memory leak include exclude by @fklassen in Bug #869 tcpprep memory leak include exclude #870
• Bug [Bug] tcprewrite SEGV in src/tcpedit/plugins/dlt_utils.c:58 function tcpedit_dlt_getplugin #811 - add check for invalid jnpr header length by @fklassen in Bug #811 - add check for invalid jnpr header length #872
• Bug [Bug] tcprewrite on Linux Cooked Capture hits fatal error in edit_packet.c:fix_ipv4_checksums() #792 avoid assertion and other fixes by @fklassen in Bug #792 avoid assertion and other fixes #873
• Bug [Bug] tcprewrite provides incorrect checksum for certain ipv4 packets #844 tap: ignore TUNSETIFF EBUSY errors by @fklassen in Bug #844 tap: ignore TUNSETIFF EBUSY errors #874
• Bug [Bug] AF_XDP compile failures #876 - add missing free_umem_and_xsk function by @fklassen in Bug #876 - add missing free_umem_and_xsk function #877
• Feature [Feature] add -w (--suppress-warnings) option to suppress warning messages #878 - add -w / --suppress-warning option by @fklassen in Feature #878 - add -w / --suppress-warning option #879
• Bug Warning: Unable to process unsupported DLT type: Ethernet (0x1) #835 false unsupported dlt warnings on 802.3 (Ethernet I) and LLC by @fklassen in Bug #835 false unsupported dlt warnings on 802.3 (Ethernet I) and LLC #880
• Feature [Feature] tcpreplay --include / --exclude options #884 include exclude options by @fklassen in Feature #884 include exclude options #885
• Feature add -w output.pcap command line option to direct the output to a pcap #853 direct traffic to pcap by @fklassen in Feature #853 direct traffic to pcap #871
• Feature add -w output.pcap command line option to direct the output to a pcap #853 restore missing -P command by @fklassen in Feature #853 restore missing -P command #887
• Bug [Bug] NULL Pointer Dereference in parse_endpoints at cidr.c:338 #888: check for map == NULL in cidr.c by @fklassen in Bug #888: check for map == NULL in cidr.c #889

New Contributors

• @btriller made their first contribution in Add support for LINUX_SLL2 #728
• @plangarbalint made their first contribution in AF_XDP socket extension using libxdp api #797
• @ChuckCottrill made their first contribution in Handle IPv6 fragment extension header #832
• @shr-project made their first contribution in configure.ac: unify search dirs for pcap and add lib32 #819
• @infrastation made their first contribution in some Haiku support #847
• @ChenQi1989 made their first contribution in configure.ac: do not run conftest in case of cross compilation #849

Full Changelog: v4.4.4...v4.5.1

---

This discussion was created from the release v4.5.1.

[bsmojver]

Hi @fklassen,

Has CVE-2024-3024 been fixed in this release?

[fklassen]

I've never seen that one. I only see CVE's if they are added to this repo's Issues. It looks like a dupe and is probably fixed, but it needs verification. I'm back to my regular job, so it will be a bit before I have time to verify.

[bsmojver]

I created a binary file from hex dump in the CVE report and ran tcpreplay against it (both the patched 4.4.4 version in Fedora and 4.5.1) and I got this:

$ tcpprep --port --pcap=poc --cachefile=/dev/null

Fatal Error: Error opening libpcap: unknown file format

So, it appears to be fixed, just like you said.

[fklassen]

Thanks for doing the leg work for me.