]> git.ipfire.org Git - thirdparty/lldpd.git/blob - NEWS
daemon: don't invoke lldpcli after dropping privileges
[thirdparty/lldpd.git] / NEWS
1 lldpd (0.9.5)
2 * Change:
3 + More Ethernet media supported. However, RFC4836 is quite
4 out-of-date with respected to 10G+ speeds, bringing some
5 inaccuracies.
6 + Directly get media information for an interface without using
7 the privileged process.
8 + LLDP-MED capability TLV is not sent when LLDP-MED is not enabled,
9 even if other LLDP-MED TLV are present.
10 * Fix:
11 + Compilation fix with older versions of GCC.
12 + Don't use ethtool at all to get real MAC address for enslaved
13 devices (always use /proc).
14
15 lldpd (0.9.4)
16 * Change:
17 + Make lldpd accepts a `-p` option to specify the PID file.
18 + Ability to change multicast MAC address to two additional values
19 to reach customer bridges.
20 + lldpcli will now display chassis TTL when detailed view is enabled.
21 * Fix:
22 + Fix setting of local value for port ID.
23 + Fix compilation with BSD make.
24 + Ensure lldpcli returns an error code on invalid commands.
25
26 lldpd (0.9.3)
27 * Change:
28 + Do not rely on support of constructors for liblldpctl.
29 + Always log to stderr (even in addition to syslog).
30 + `lldpcli watch` accepts a limit on the number of received events.
31 * Fix:
32 + `lldpcli -f {xml,json} watch` should work now.
33 + Consider `veth` interfaces as physical interfaces.
34
35 lldpd (0.9.2)
36 * Change:
37 + Ability to add/remove/replace custom TLV from lldpcli.
38 + LLDP-MED capabilities are displayed differently in lldpcli.
39 + Limit the maximum depth (5) when trying to apply a VLAN.
40 + Change JSON output format when using json-c to match Jansson
41 output.
42 + Integration tests for the major parts of lldpd, including use of
43 address and leak sanitizer.
44 * Fix:
45 + LLDP-MED POE TLV are now displayed in lldpcli.
46 + Ignore lower link when it is in another namespace.
47 + Fix various problems with interfaces being enslaved.
48 + Fix a memory leak when modifying port-related settings.
49
50 lldpd (0.9.1)
51 * Change:
52 + Rework packaging for OS X to make it work with El Capitan. To
53 simplify a bit, it is not possible anymore to build fat
54 binaries. Latest version of OS X supporting 32bit was 10.6.
55 * Fix:
56 + By default, when using port alias as description, use port name
57 as port ID.
58 + Miscellaneous fixes with netlink cache.
59 + Ensure large netlink messages can be received.
60
61 lldpd (0.9.0)
62 * Change:
63 + Don't rely on libnl3 for netlink. Reuse the previous code and
64 implement a lighweight cache.
65
66 lldpd (0.8.0, never released)
67 * Fix:
68 + Fix a buffer overflow when receiving a too large management
69 address TLV. Unless hardening has been disabled, this overflow
70 cannot be used for arbitrary code execution.
71 + Update LLDP-MED policy L2 priority values to match
72 802.1Q-2005. This may be a breaking change.
73 * Change:
74 + PIE is now disabled by default. It's too difficult to reliably
75 detect if it works. Use --enable-pie to enable it.
76 + Retrieve the permanent MAC address of an interface through
77 ethtool for Linux if /proc/net/bonding is not available.
78 + Running lldpd with "-d" will keep the process in foreground but
79 logs will still go to syslog. To log to the console, add at
80 least one "-d".
81 + Fix minimal kernel version to 2.6.39. Add a runtime warning when
82 this is not the case.
83 + Remove old bridge code (the one using ioctl).
84 + Don't discard down interfaces. Notably, this enables us to keep
85 their specific configuration if any.
86 + For Linux, switch to libnl3. Be aware of the licensing issues in
87 case of static linking.
88 + Introduce the notion of default local port. New interfaces will
89 use it as a base. This allows setting various MED stuff.
90 + Provide an apparmor profile (untested).
91
92 lldpd (0.7.17)
93 * Fix:
94 + Fix an infinite loop when using veth on Linux 4.1+ kernels.
95 + Make CDP advertise the appropriate kernel name as platform,
96 not just "Linux".
97 * Change:
98 + Fix the way libevent configure is called.
99
100 lldpd (0.7.16)
101 * Change:
102 + For Linux, 2.6.32 is now the minimal required kernel. When using
103 an older kernel, use `--enable-oldies`.
104 + For Linux, use netlink to retrieve information about bridges,
105 VLAN and bonds. The code was contributed by Cumulus Networks.
106 * Features:
107 + Use symbol versioning for liblldpctl.so.
108 + Ability to get local chassis information with "show
109 chassis".
110 + The library also has the same ability with the
111 `lldpctl_get_local_chassis()` function. It is also possible to
112 get a chassis atom from a port with `lldpctl_k_port_chassis`
113 key. This is now the preferred way to retrieve chassis related
114 information.
115 * Fix:
116 + Fix build on OS X.
117 + Accept "language" when configuring MED location as a civic address.
118
119 lldpd (0.7.15)
120 * Features:
121 + Optional features can be configured with "auto" to autodetect if
122 they are usable. This is the default value for JSON and XML support.
123 + Ability to send and decode custom/unknown TLV. Thanks to Alexandru
124 Ardelean.
125 * Change:
126 + Modify checksum function. While this should be strictly
127 equivalent, if you notice CDP packets not accepted anymore, this
128 change is the first culprit.
129
130 lldpd (0.7.14)
131 * Features:
132 + Shutdown LLPDU are sent on MSAP change and when lldpd exits.
133 + When an exact IP is provided as a management pattern, use it
134 unconditionally.
135 + Ability to set port ID and description to an arbitrary value,
136 thanks to Alexandru Ardelean.
137 * Fix:
138 + Incorrect boundary check when decoding management address and
139 protocol identity may lead to lldpd crash when processing
140 malformed LLDPDU.
141 + Many edge cases where lldpd was leaving hanging processes after
142 crashing.
143
144 lldpd (0.7.13)
145 * Fix:
146 + Unbreak customization of Unix socket path from command line.
147
148 lldpd (0.7.12)
149 * Features:
150 + Interface pattern, management pattern, system description,
151 system platform and system hostname can be unconfigured to their
152 default values.
153 * Fix:
154 + Don't complain when parsing a commented line.
155 + Correctly persist configuration changes for "system interface
156 promiscuous", "system interface description" "med fast-start
157 enable", "pause" and "resume".
158 + Fix listening on bond devices for old kernels (< 2.6.27).
159
160 lldpd (0.7.11)
161 * Features:
162 + Ship bash and zsh completion.
163 + Abort when some command-line options are repeated.
164 * Fix:
165 + Handle correctly read failures in liblldpctl.
166
167 lldpd (0.7.10)
168 * Features:
169 + Ability to set promiscuous mode to work around bugs of some
170 switches encapsulating LLDP frames inside 802.1Q frames.
171 + JSON support for lldpcli can use json-c instead of jansson,
172 thanks to Michel Stam.
173 * Fix:
174 + Fix checksum computation for Cisco CDP.
175 + Fix ability to disable LLDP.
176 + Fix seccomp sandbox, thanks to Patrick McLean.
177
178 lldpd (0.7.9)
179 * Changes:
180 + Default location for chroot, socket and PID are now configurable
181 in `./configure`. The default location is based on the value of
182 `runstatedir` which in turn may be based on the value of
183 `localstatedir` which defaults to `/usr/local/var`. Therefore,
184 to get the previous locations, lldpd should be configured with
185 `./configure --localstatedir=/var`.
186 * Fixes:
187 + Fix `configure system bond-slave-src-mac-type local`. Also use
188 it as default.
189 * Features:
190 + Add support for shutdown LLDPU.
191 + Ability to configure IP management pattern from lldpcli.
192 + Ability to choose what port ID should be (MAC or interface name).
193
194 lldpd (0.7.8)
195 * Fixes:
196 + Don't hard-code default values for system name, system
197 description and port description. When the field is not present,
198 just don't display it.
199 + Fix lldpcli behaviour when suid.
200 + On OSX, don't use p2p0 interfaces: it would break WLAN.
201 + Fix SNMP support on RHEL.
202 * Features:
203 + Android support
204 + Add the possibility to disable privilege separation (lower
205 memory consumption, lower security, don't do it).
206 + Interfaces can now be whitelisted. For example, *,!eth*,!!eth1
207 is a valid pattern for all interfaces except eth ones, except
208 eth1. Moreover, on exact match, an matching interface
209 circumvents most sanity checks (like VLAN handling).
210 + Ability to override the hostname.
211
212 lldpd (0.7.7)
213 * Features:
214 + Use a locally administered MAC address or an arbitrary one
215 instead of null MAC address for bond devices on Linux. This is
216 configurable through `lldpcli`.
217 + Add support for "team" driver (alternative to bond devices).
218 + Preliminary support for DTrace/systemtap.
219 + Preliminary support for seccomp (for monitor process).
220 + Setup chroot inside lldpd instead of relying on init script.
221 * Fixes:
222 + Various bugs related to fixed point number handling (for
223 coordinates in LLDP-MED)
224 + Fix a regression in how MAC address of an enslaved device is
225 retrieved.
226
227 lldpd (0.7.6)
228 * Features:
229 + Provide a way to build packages for OSX.
230 + Add an option to update interface description with neighbor name.
231 * Fixes:
232 + Compilation fix for OSX 10.6.
233
234 lldpd (0.7.5)
235 * Fixes:
236 + Segfault while tokenizing in lldpcli.
237
238 lldpd (0.7.4)
239 * Fixes:
240 + Segfault in lldpcli.
241 + Memory leak in liblldpctl when using a custom log handler.
242 + Fix some unaligned memory accesses.
243 + Fix frame reception on OpenBSD.
244 * Features:
245 + Allow to configure hold value from lldpcli (and hence the TTL).
246 + Allow to configure pattern for valid interfaces from lldpcli.
247 + Allow to override system description from lldpcli.
248 + Display the neighbor connected as the process title (or the
249 number of connected neighbors).
250
251 lldpd (0.7.3)
252 * Features:
253 + DragonFly BSD support.
254 + Solaris support (incomplete).
255 + LLDP-MED fast start support (thanks to Roopa Prabhu).
256 + Provide global statistics through "show statistics summary"
257 command (thanks to Roopa Prabhu).
258 * Fixes:
259 + Fix IPv4/IPv6 address discovery in Linux.
260
261 lldpd (0.7.2)
262 * Features
263 + lldpd can be configured through /etc/lldpd.conf and
264 /etc/lldpd.d. All commands accepted by lldpcli are accepted.
265 + Lock BPF interfaces before handing them to chrooted process on
266 BSD.
267 + Limit the number of neighbors for each port to 4 (per protocol).
268 + Force CDPv2 protocol with argument `-ccc`.
269 + Provide port statistics through "show statistics" command
270 (thanks to Roopa Prabhu).
271 * Fixes:
272 + Driver whitelisting is done before checking if an interface has
273 a lower interface in Linux.
274 + Expire remote ports and chassis in a timely manner.
275
276 lldpd (0.7.1)
277 * Features
278 + Mac OS X support, sponsored by Xcloud, Mac cloud server hosting
279 provider. http://xcloud.me/
280 + Upstart and systemd support.
281 + Remove Unix socket when there is no process listening.
282
283 lldpd (0.7.0)
284 * Global changes:
285 + FreeBSD support.
286 + OpenBSD support.
287 + NetBSD support.
288 + Detect interface changes.
289 + CLI for lldpctl: lldpcli.
290 * Other features:
291 + Allow to disable LLDP protocol (with `-ll`). In this case, the
292 first enabled protocol will be used when no neighbor is detected.
293 + Allow to filter debug logs using tokens. Add more debug logs.
294 + lldpctl can now output JSON.
295 + Use netlink to gather interface information on Linux.
296 + Don't use ioctl for bridges anymore on Linux. The configure
297 option `--enable-oldies` allow to reenable their uses for
298 systems not supporting sysfs.
299
300 lldpd (0.6.1)
301 * Features:
302 + Provide liblldpctl.so, a library to interface with lldpd. The
303 documentation is provided through Doxygen. See src/lib/lldpctl.h
304 which contains all the exported functions.
305 + Make lldpctl uses liblldpctl.so.
306 + Add a "watch" option to lldpctl to monitor neighbor changes.
307 + Add the possibility to display the current configuration of
308 lldpd with lldpctl. Also add the possibility to reset the
309 current transmit delay.
310
311 lldpd (0.6)
312 * Features:
313 + Allow lldpctl to display hidden ports.
314 + Add a switch to specify interfaces to use to get chassis ID.
315 + Support for multiple management addresses and IPv6 management
316 addresses. Contributed by João Valverde.
317 * Global changes:
318 + Switch to libevent. See README.md for details.
319 + Partial rewrite of the SNMP part. Less code.
320 + Unit tests for SNMP.
321 + Major rewrite of the protocol between lldpd and lldpctl. Less
322 code.
323 * Fixes:
324 + Several small SNMP fixes (discovered by unit tests).
325
326 lldpd (0.5.7)
327 * Fixes:
328 + Configure issue with NetSNMP and some linkers
329 + Fix infinite loop for the receive part: on certain conditions,
330 lldpd will stop sending packets and stop updating local data.
331
332 lldpd (0.5.6)
333 * Features:
334 + Send and receive native VLAN TLV with CDP
335 + Add a whitelist for some drivers (currently: dsa and veth)
336 * Fixes:
337 + Compilation issues with NetSNMP 5.7 (and with earlier versions too)
338 + Small optimization of BPF filter
339
340 lldpd (0.5.5)
341 * Features:
342 + Support for PPVID and PI Dot1 TLV, thanks to Shuah Khan.
343 + Extend whitelist with possibility to blacklist.
344 * Fixes:
345 + Key/value output was incorrect when a dot was present in
346 interface names. This is fixed but it is preferable to use XML
347 output since the parsing is more difficult in this case.
348 + Only grab DMI information once. Only uses DMI for x86 platform.
349 + Padding issues with socket protocol. This introduces a change in
350 the socket protocol!
351 + Fix a segfault when neither /etc/os-release nor lsb_release
352 are available.
353
354 lldpd (0.5.4)
355 * Features:
356 + Get OS information from /etc/os-release if available. Patch from
357 Michael Tremer.
358 + Add a flag to specify which interfaces lldpd should listen to.
359
360 lldpd (0.5.3)
361 * Fixes:
362 + Allow root to change configuration of lldpd when lldpctl has suid set.
363 * Features:
364 + Handle Dot3 POE-MDI TLV (802.3af and 802.3at).
365 + Allow to set Dot3 POE-MDI from lldpctl.
366
367 lldpd (0.5.2)
368 * Features:
369 + More flexible smart mode and new default. Manual page has been updated.
370 + Add a "receive-only" mode with "-r" switch.
371
372 lldpd (0.5.1)
373 * Features:
374 + Allow to force a protocol even when no peer for this protocol is
375 detected.
376 + Add a smart mode that allows to discard bogus port information,
377 for example CDP packets that are flooded through a switch that
378 does not support CDP.
379 + Allow to set LLDP-MED network policy from lldpctl, thanks to a patch from
380 Philipp Kempgen.
381 + Allow to set LLDP-MED POE-MDI from lldpctl.
382 + Add a summary of available options in "lldpd -h" and "lldpctl -h",
383 thanks to a patch from Jorge Boncompte.
384 + Add a new output (keyvalue) for lldpctl.
385 + Listen on VLAN using an appropriate BPF filter, VLAN
386 decapsulation. Older "listen on vlan" feature is discarded. See
387 README for more information on the new feature.
388 + Use output of lsb_release if available for system description.
389
390 * Fixes:
391 + Ignore interface with no queue. It should filter out interfaces
392 like "vnet0" that would fail if we try to send something on them.
393 + Don't check CDP checksums (not really a fix but it appears that
394 Cisco checksum have some difficult corner cases).
395
396 lldpd (0.5.0)
397
398 * Features:
399 + lldpd can now handle several systems on the same port. This
400 modification also allows to speak to a switch using CDP and LLDP
401 for example.
402 + The way that lldpd gathers information for each port has been
403 abstracted. This should allow to support more systems (BSD for
404 examples) or switch cores in the future. Sending/receive support
405 is also abstracted.
406 + Add "-k" switch to avoid to emit too much information on running
407 kernel.
408 + Support of ifAlias with kernel >= 2.6.28
409 + Lot of portability stuff. lldpd can now be compiled on RHEL
410 2.1. Still Linux-only though.
411 + Add an option to specify AgentX socket (-X).
412 + Add some unit tests
413 + lldpctl has been reworked; it is now able to output data in XML
414 format for easier parsing. Patches were provided by Andreas
415 Hofmeister.
416
417 * Bug fixes:
418 + Fix EDP VLAN handling
419 + Silent warnings about bridge stuff.
420 + Copy /etc/localtime into chroot before starting lldpd daemon to
421 ensure correct timestamps for logs.
422
423 lldpd (0.4.1)
424
425 * Fix EDP handling when there is no VLAN
426 * Fix CDP version to not always be 1
427 * Misc fix:
428 + incorrect number of arguments for a LLOG_INFO call
429 + fix SNMP last change in case this change occurs before start time
430
431 lldpd (0.4)
432
433 * Rewrite of packet builder and parser to be able to cope with
434 architecture that cannot do unaligned read. For decoder, we don't
435 cast structures any more since they can be unaligned. For encoder,
436 we use memcpy through the use of macro that build packets step by
437 step.
438
439 lldpd (0.3.2)
440
441 * Fix LLDP-MED support
442
443 lldpd (0.3.1)
444
445 * Misc fixes, including memory leaks
446
447 lldpd (0.3)
448
449 * Initial support of LLDP-MED
450 * Fix for bridge detection (don't send bridge ioctl on random interfaces)
451 * For bonded devices, get the real hardware address. For inactive
452 slaves, transmit using a random MAC address.
453
454 lldpd (0.2.1)
455
456 * Fix a syntax error in manual page
457 * Fix open() calls
458
459 lldpd (0.2)
460
461 * Add privilege separation
462 * Add FDP support
463 * Support CDP encapsulated into native VLAN
464 * Various fixes
465
466 lldpd (0.1)
467
468 * Initial release