NEWS

   1 lldpd (1.0.5)
   2   * Changes:
   3     + Interface names are also matched for management addresses.
   4     + On Linux, only register protocol handler for LLDP when only LLDP
   5       is enabled.
   6     + Stricter on LLDP incoming frames validation.
   7     + Add support for VLAN-aware bridges for Linux (no range support).
   8     + Add support for 802.3BT (no SNMP support).
   9     + Add support for millisecond-grained tx-interval (Jean-Pierre Tosoni).
  10     + Use generic names for VLAN names, instead of interface names (eg
  11       vlan100 instead of eth1.100).
  12   * Fix:
  13     + Don't clear chassis TLV on shutdown LLDPDU.
  14     + Don't require/display powerpairs for Dot3 power when device type
  15       is PD.
  16
  17 lldpd (1.0.4)
  18   * Changes:
  19     + Add "configure system max-neighbors XX" command to modify maximum
  20       of neighbors accepted per port.
  21     + Implement lldpRemOrgDefInfoTable table for custom TLVs.
  22   * Fix:
  23     + Better compliance for statsTLVsUnrecognizedTotal and
  24       statsAgeoutsTotal counters.
  25     + On Linux, handle rare blocking case in Netlink code.
  26
  27 lldpd (1.0.3)
  28   * Fix:
  29     + Fix creation of chroot directory.
  30
  31 lldpd (1.0.2)
  32   * Changes:
  33     + On Linux, the monitor process will now drop its privileges
  34       instead of running as root. It will keep CAP_NET_RAW,
  35       CAP_NET_ADMIN and CAP_DAC_OVERRIDE capabilities.
  36     + Support for CDP PD PoE (with negotiation). Thanks to Gustav
  37       Wiklander.
  38     + Move support for bonded devices on Linux < 2.6.27 into the
  39       `--enable-oldies` option. This avoids duplicate packets
  40       starting from Linux 4.19.
  41
  42 lldpd (1.0.1)
  43   * Fix:
  44     + Use "mkdir -p" instead of "mkdir" in systemd unit.
  45
  46 lldpd (1.0.0)
  47   * Changes:
  48     + Chassis ID can be set to an arbitrary value with "configure system
  49       chassisid".
  50     + Port description can be overriden directly with "configure lldp
  51       portdescription".
  52     + Command "configure system interface permanent" enables one to
  53       specify a pattern for interfaces to be kept in memory even when
  54       they are removed from the system.
  55   * Fix:
  56     + Ensure chassis-related changes are propagated immediately.
  57     + Ensure management address change is correctly detected.
  58
  59 lldpd (0.9.9)
  60   * Changes:
  61     + lldpcli can now display local interfaces with LLDP data sent on
  62       each of them ("show interfaces").
  63     + As Dot3 PD device, echo back allocated value from PSE device.
  64   * Fix:
  65     + Don't remove interfaces when they are released from a bridge.
  66     + Don't use "expect stop" with Upstart. It's buggy.
  67
  68 lldpd (0.9.8)
  69   * Changes:
  70     + "Station" capability is only set if no other bit is set.
  71     + Use ethtool to get permanent address for bonds and teams. This
  72       might provide different results than the previous method. Some
  73       devices may still use the previous method.
  74     + Don't run ethtool as root. Kernels older than 2.6.19 won't get
  75       link information anymore.
  76     + Add "configure system hostname ." option to not use a FQDN
  77       for system name.
  78     + Add "-f json0" to provide a more regular/machine-parsable output
  79       to JSON output, even when not compiled with --enable-json0.
  80   * Fixes:
  81     + Handle team interfaces like a bond. Real MAC address cannot be
  82       retrieved yet.
  83
  84 lldpd (0.9.7)
  85   * Changes:
  86     + Attach remote TTL to port instead of chassis.
  87     + JSON support is now built-in and unconditionally enabled. Use
  88       --enable-json0 to keep the pre-0.9.2 json-c format.
  89     + When logging to syslog and daemonizing, don't log to stderr.
  90     + vxlan interfaces are now ignored as they are multi-point interfaces.
  91     + Maximum number of neighbors for an interface is increased from 4 to 32.
  92
  93 lldpd (0.9.6)
  94   * Changes:
  95     + Add a compile-time option to restore pre-0.9.2 JSON format (when
  96       using json-c). Use `--enable-json0` to enable this option.
  97     + Support for newer ethtool interface on Linux
  98       (ETHTOOL_GLINKSETTINGS) and additional speed settings.
  99     + Current MAU type is displayed even when autoneg is off.
 100     + Increase netlink receive buffer by default. Can be changed at
 101       compile-time through ./configure.
 102   * Fixes:
 103     + Correctly parse LLDP-MED civic address when the length of the
 104       TLV exceeds the length of the address.
 105     + Fix 100% CPU on some rare error condition.
 106     + Fix lost timer when an interface is enslaved on Linux.
 107
 108 lldpd (0.9.5)
 109   * Changes:
 110     + More Ethernet media supported. However, RFC4836 is quite
 111       out-of-date with respected to 10G+ speeds, bringing some
 112       inaccuracies.
 113     + Directly get media information for an interface without using
 114       the privileged process.
 115     + LLDP-MED capability TLV is not sent when LLDP-MED is not enabled,
 116       even if other LLDP-MED TLV are present.
 117   * Fixes:
 118     + Compilation fix with older versions of GCC.
 119     + Don't use ethtool at all to get real MAC address for enslaved
 120       devices (always use /proc).
 121
 122 lldpd (0.9.4)
 123   * Changes:
 124     + Make lldpd accepts a `-p` option to specify the PID file.
 125     + Ability to change multicast MAC address to two additional values
 126       to reach customer bridges.
 127     + lldpcli will now display chassis TTL when detailed view is enabled.
 128   * Fixes:
 129     + Fix setting of local value for port ID.
 130     + Fix compilation with BSD make.
 131     + Ensure lldpcli returns an error code on invalid commands.
 132
 133 lldpd (0.9.3)
 134   * Changes:
 135     + Do not rely on support of constructors for liblldpctl.
 136     + Always log to stderr (even in addition to syslog).
 137     + `lldpcli watch` accepts a limit on the number of received events.
 138   * Fixes:
 139     + `lldpcli -f {xml,json} watch` should work now.
 140     + Consider `veth` interfaces as physical interfaces.
 141
 142 lldpd (0.9.2)
 143   * Changes:
 144     + Ability to add/remove/replace custom TLV from lldpcli.
 145     + LLDP-MED capabilities are displayed differently in lldpcli.
 146     + Limit the maximum depth (5) when trying to apply a VLAN.
 147     + Change JSON output format when using json-c to match Jansson
 148       output.
 149     + Integration tests for the major parts of lldpd, including use of
 150       address and leak sanitizer.
 151   * Fixes:
 152     + LLDP-MED POE TLV are now displayed in lldpcli.
 153     + Ignore lower link when it is in another namespace.
 154     + Fix various problems with interfaces being enslaved.
 155     + Fix a memory leak when modifying port-related settings.
 156
 157 lldpd (0.9.1)
 158   * Changes:
 159     + Rework packaging for OS X to make it work with El Capitan. To
 160       simplify a bit, it is not possible anymore to build fat
 161       binaries. Latest version of OS X supporting 32bit was 10.6.
 162   * Fixes:
 163     + By default, when using port alias as description, use port name
 164       as port ID.
 165     + Miscellaneous fixes with netlink cache.
 166     + Ensure large netlink messages can be received.
 167
 168 lldpd (0.9.0)
 169   * Changes:
 170     + Don't rely on libnl3 for netlink. Reuse the previous code and
 171       implement a lighweight cache.
 172
 173 lldpd (0.8.0, never released)
 174   * Changes:
 175     + PIE is now disabled by default. It's too difficult to reliably
 176       detect if it works. Use --enable-pie to enable it.
 177     + Retrieve the permanent MAC address of an interface through
 178       ethtool for Linux if /proc/net/bonding is not available.
 179     + Running lldpd with "-d" will keep the process in foreground but
 180       logs will still go to syslog. To log to the console, add at
 181       least one "-d".
 182     + Fix minimal kernel version to 2.6.39. Add a runtime warning when
 183       this is not the case.
 184     + Remove old bridge code (the one using ioctl).
 185     + Don't discard down interfaces. Notably, this enables us to keep
 186       their specific configuration if any.
 187     + For Linux, switch to libnl3. Be aware of the licensing issues in
 188       case of static linking.
 189     + Introduce the notion of default local port. New interfaces will
 190       use it as a base. This allows setting various MED stuff.
 191     + Provide an apparmor profile (untested).
 192   * Fixes:
 193     + Fix a buffer overflow when receiving a too large management
 194       address TLV. Unless hardening has been disabled, this overflow
 195       cannot be used for arbitrary code execution.
 196     + Update LLDP-MED policy L2 priority values to match
 197       802.1Q-2005. This may be a breaking change.
 198
 199 lldpd (0.7.17)
 200   * Fixes:
 201     + Fix the way libevent configure is called.
 202     + Fix an infinite loop when using veth on Linux 4.1+ kernels.
 203     + Make CDP advertise the appropriate kernel name as platform,
 204       not just "Linux".
 205
 206 lldpd (0.7.16)
 207   * Changes:
 208     + For Linux, 2.6.32 is now the minimal required kernel. When using
 209       an older kernel, use `--enable-oldies`.
 210     + For Linux, use netlink to retrieve information about bridges,
 211       VLAN and bonds. The code was contributed by Cumulus Networks.
 212     + Use symbol versioning for liblldpctl.so.
 213     + Ability to get local chassis information with "show
 214       chassis".
 215     + The library also has the same ability with the
 216       `lldpctl_get_local_chassis()` function. It is also possible to
 217       get a chassis atom from a port with `lldpctl_k_port_chassis`
 218       key. This is now the preferred way to retrieve chassis related
 219       information.
 220   * Fixes:
 221     + Fix build on OS X.
 222     + Accept "language" when configuring MED location as a civic address.
 223
 224 lldpd (0.7.15)
 225   * Changes:
 226     + Optional features can be configured with "auto" to autodetect if
 227       they are usable. This is the default value for JSON and XML support.
 228     + Ability to send and decode custom/unknown TLV. Thanks to Alexandru
 229       Ardelean.
 230     + Modify checksum function. While this should be strictly
 231       equivalent, if you notice CDP packets not accepted anymore, this
 232       change is the first culprit.
 233
 234 lldpd (0.7.14)
 235   * Changes:
 236     + Shutdown LLPDU are sent on MSAP change and when lldpd exits.
 237     + When an exact IP is provided as a management pattern, use it
 238       unconditionally.
 239     + Ability to set port ID and description to an arbitrary value,
 240       thanks to Alexandru Ardelean.
 241   * Fixes:
 242     + Incorrect boundary check when decoding management address and
 243       protocol identity may lead to lldpd crash when processing
 244       malformed LLDPDU.
 245     + Many edge cases where lldpd was leaving hanging processes after
 246       crashing.
 247
 248 lldpd (0.7.13)
 249   * Fixes:
 250     + Unbreak customization of Unix socket path from command line.
 251
 252 lldpd (0.7.12)
 253   * Changes:
 254     + Interface pattern, management pattern, system description,
 255       system platform and system hostname can be unconfigured to their
 256       default values.
 257   * Fixes:
 258     + Don't complain when parsing a commented line.
 259     + Correctly persist configuration changes for "system interface
 260       promiscuous", "system interface description" "med fast-start
 261       enable", "pause" and "resume".
 262     + Fix listening on bond devices for old kernels (< 2.6.27).
 263
 264 lldpd (0.7.11)
 265   * Changes:
 266     + Ship bash and zsh completion.
 267     + Abort when some command-line options are repeated.
 268   * Fixes:
 269     + Handle correctly read failures in liblldpctl.
 270
 271 lldpd (0.7.10)
 272   * Changes:
 273     + Ability to set promiscuous mode to work around bugs of some
 274       switches encapsulating LLDP frames inside 802.1Q frames.
 275     + JSON support for lldpcli can use json-c instead of jansson,
 276       thanks to Michel Stam.
 277   * Fixes:
 278     + Fix checksum computation for Cisco CDP.
 279     + Fix ability to disable LLDP.
 280     + Fix seccomp sandbox, thanks to Patrick McLean.
 281
 282 lldpd (0.7.9)
 283   * Changes:
 284     + Default location for chroot, socket and PID are now configurable
 285       in `./configure`. The default location is based on the value of
 286       `runstatedir` which in turn may be based on the value of
 287       `localstatedir` which defaults to `/usr/local/var`. Therefore,
 288       to get the previous locations, lldpd should be configured with
 289       `./configure --localstatedir=/var`.
 290     + Add support for shutdown LLDPU.
 291     + Ability to configure IP management pattern from lldpcli.
 292     + Ability to choose what port ID should be (MAC or interface name).
 293   * Fixes:
 294     + Fix `configure system bond-slave-src-mac-type local`. Also use
 295       it as default.
 296
 297 lldpd (0.7.8)
 298   * Changes:
 299     + Android support
 300     + Add the possibility to disable privilege separation (lower
 301       memory consumption, lower security, don't do it).
 302     + Interfaces can now be whitelisted. For example, *,!eth*,!!eth1
 303       is a valid pattern for all interfaces except eth ones, except
 304       eth1. Moreover, on exact match, an matching interface
 305       circumvents most sanity checks (like VLAN handling).
 306     + Ability to override the hostname.
 307   * Fixes:
 308     + Don't hard-code default values for system name, system
 309       description and port description. When the field is not present,
 310       just don't display it.
 311     + Fix lldpcli behaviour when suid.
 312     + On OSX, don't use p2p0 interfaces: it would break WLAN.
 313     + Fix SNMP support on RHEL.
 314
 315 lldpd (0.7.7)
 316   * Changes:
 317     + Use a locally administered MAC address or an arbitrary one
 318       instead of null MAC address for bond devices on Linux. This is
 319       configurable through `lldpcli`.
 320     + Add support for "team" driver (alternative to bond devices).
 321     + Preliminary support for DTrace/systemtap.
 322     + Preliminary support for seccomp (for monitor process).
 323     + Setup chroot inside lldpd instead of relying on init script.
 324   * Fixes:
 325     + Various bugs related to fixed point number handling (for
 326       coordinates in LLDP-MED)
 327     + Fix a regression in how MAC address of an enslaved device is
 328       retrieved.
 329
 330 lldpd (0.7.6)
 331   * Changes:
 332     + Provide a way to build packages for OSX.
 333     + Add an option to update interface description with neighbor name.
 334   * Fixes:
 335     + Compilation fix for OSX 10.6.
 336
 337 lldpd (0.7.5)
 338   * Fixes:
 339     + Segfault while tokenizing in lldpcli.
 340
 341 lldpd (0.7.4)
 342   * Fixes:
 343     + Segfault in lldpcli.
 344     + Memory leak in liblldpctl when using a custom log handler.
 345     + Fix some unaligned memory accesses.
 346     + Fix frame reception on OpenBSD.
 347   * Changes:
 348     + Allow to configure hold value from lldpcli (and hence the TTL).
 349     + Allow to configure pattern for valid interfaces from lldpcli.
 350     + Allow to override system description from lldpcli.
 351     + Display the neighbor connected as the process title (or the
 352       number of connected neighbors).
 353
 354 lldpd (0.7.3)
 355   * Changes:
 356     + DragonFly BSD support.
 357     + Solaris support (incomplete).
 358     + LLDP-MED fast start support (thanks to Roopa Prabhu).
 359     + Provide global statistics through "show statistics summary"
 360       command (thanks to Roopa Prabhu).
 361   * Fixes:
 362     + Fix IPv4/IPv6 address discovery in Linux.
 363
 364 lldpd (0.7.2)
 365   * Changes:
 366     + lldpd can be configured through /etc/lldpd.conf and
 367       /etc/lldpd.d. All commands accepted by lldpcli are accepted.
 368     + Lock BPF interfaces before handing them to chrooted process on
 369       BSD.
 370     + Limit the number of neighbors for each port to 4 (per protocol).
 371     + Force CDPv2 protocol with argument `-ccc`.
 372     + Provide port statistics through "show statistics" command
 373       (thanks to Roopa Prabhu).
 374   * Fixes:
 375     + Driver whitelisting is done before checking if an interface has
 376       a lower interface in Linux.
 377     + Expire remote ports and chassis in a timely manner.
 378
 379 lldpd (0.7.1)
 380   * Changes:
 381     + Mac OS X support, sponsored by Xcloud, Mac cloud server hosting
 382       provider. http://xcloud.me/
 383     + Upstart and systemd support.
 384     + Remove Unix socket when there is no process listening.
 385
 386 lldpd (0.7.0)
 387   * Changes:
 388     + FreeBSD support.
 389     + OpenBSD support.
 390     + NetBSD support.
 391     + Detect interface changes.
 392     + CLI for lldpctl: lldpcli.
 393     + Allow to disable LLDP protocol (with `-ll`). In this case, the
 394       first enabled protocol will be used when no neighbor is detected.
 395     + Allow to filter debug logs using tokens. Add more debug logs.
 396     + lldpctl can now output JSON.
 397     + Use netlink to gather interface information on Linux.
 398     + Don't use ioctl for bridges anymore on Linux. The configure
 399       option `--enable-oldies` allow to reenable their uses for
 400       systems not supporting sysfs.
 401
 402 lldpd (0.6.1)
 403   * Changes:
 404     + Provide liblldpctl.so, a library to interface with lldpd. The
 405       documentation is provided through Doxygen. See src/lib/lldpctl.h
 406       which contains all the exported functions.
 407     + Make lldpctl uses liblldpctl.so.
 408     + Add a "watch" option to lldpctl to monitor neighbor changes.
 409     + Add the possibility to display the current configuration of
 410       lldpd with lldpctl. Also add the possibility to reset the
 411       current transmit delay.
 412
 413 lldpd (0.6)
 414   * Changes:
 415     + Allow lldpctl to display hidden ports.
 416     + Add a switch to specify interfaces to use to get chassis ID.
 417     + Support for multiple management addresses and IPv6 management
 418       addresses. Contributed by João Valverde.
 419     + Switch to libevent. See README.md for details.
 420     + Partial rewrite of the SNMP part. Less code.
 421     + Unit tests for SNMP.
 422     + Major rewrite of the protocol between lldpd and lldpctl. Less
 423       code.
 424   * Fixes:
 425     + Several small SNMP fixes (discovered by unit tests).
 426
 427 lldpd (0.5.7)
 428  * Fixes:
 429     + Configure issue with NetSNMP and some linkers
 430     + Fix infinite loop for the receive part: on certain conditions,
 431       lldpd will stop sending packets and stop updating local data.
 432
 433 lldpd (0.5.6)
 434   * Changes:
 435     + Send and receive native VLAN TLV with CDP
 436     + Add a whitelist for some drivers (currently: dsa and veth)
 437   * Fixes:
 438     + Compilation issues with NetSNMP 5.7 (and with earlier versions too)
 439     + Small optimization of BPF filter
 440
 441 lldpd (0.5.5)
 442   * Changes:
 443     + Support for PPVID and PI Dot1 TLV, thanks to Shuah Khan.
 444     + Extend whitelist with possibility to blacklist.
 445   * Fixes:
 446     + Key/value output was incorrect when a dot was present in
 447       interface names. This is fixed but it is preferable to use XML
 448       output since the parsing is more difficult in this case.
 449     + Only grab DMI information once. Only uses DMI for x86 platform.
 450     + Padding issues with socket protocol. This introduces a change in
 451       the socket protocol!
 452     + Fix a segfault when neither /etc/os-release nor lsb_release
 453       are available.
 454
 455 lldpd (0.5.4)
 456   * Changes:
 457     + Get OS information from /etc/os-release if available. Patch from
 458       Michael Tremer.
 459     + Add a flag to specify which interfaces lldpd should listen to.
 460
 461 lldpd (0.5.3)
 462   * Changes:
 463     + Handle Dot3 POE-MDI TLV (802.3af and 802.3at).
 464     + Allow to set Dot3 POE-MDI from lldpctl.
 465   * Fixes:
 466     + Allow root to change configuration of lldpd when lldpctl has suid set.
 467
 468 lldpd (0.5.2)
 469   * Changes:
 470     + More flexible smart mode and new default. Manual page has been updated.
 471     + Add a "receive-only" mode with "-r" switch.
 472
 473 lldpd (0.5.1)
 474   * Changes:
 475     + Allow to force a protocol even when no peer for this protocol is
 476       detected.
 477     + Add a smart mode that allows to discard bogus port information,
 478       for example CDP packets that are flooded through a switch that
 479       does not support CDP.
 480     + Allow to set LLDP-MED network policy from lldpctl, thanks to a patch from
 481       Philipp Kempgen.
 482     + Allow to set LLDP-MED POE-MDI from lldpctl.
 483     + Add a summary of available options in "lldpd -h" and "lldpctl -h",
 484       thanks to a patch from Jorge Boncompte.
 485     + Add a new output (keyvalue) for lldpctl.
 486     + Listen on VLAN using an appropriate BPF filter, VLAN
 487       decapsulation. Older "listen on vlan" feature is discarded. See
 488       README for more information on the new feature.
 489     + Use output of lsb_release if available for system description.
 490   * Fixes:
 491     + Ignore interface with no queue. It should filter out interfaces
 492       like "vnet0" that would fail if we try to send something on them.
 493     + Don't check CDP checksums (not really a fix but it appears that
 494       Cisco checksum have some difficult corner cases).
 495
 496 lldpd (0.5.0)
 497   * Changes:
 498     + lldpd can now handle several systems on the same port. This
 499       modification also allows to speak to a switch using CDP and LLDP
 500       for example.
 501     + The way that lldpd gathers information for each port has been
 502       abstracted. This should allow to support more systems (BSD for
 503       examples) or switch cores in the future. Sending/receive support
 504       is also abstracted.
 505     + Add "-k" switch to avoid to emit too much information on running
 506       kernel.
 507     + Support of ifAlias with kernel >= 2.6.28
 508     + Lot of portability stuff. lldpd can now be compiled on RHEL
 509       2.1. Still Linux-only though.
 510     + Add an option to specify AgentX socket (-X).
 511     + Add some unit tests
 512     + lldpctl has been reworked; it is now able to output data in XML
 513       format for easier parsing. Patches were provided by Andreas
 514       Hofmeister.
 515   * Fixes:
 516     + Fix EDP VLAN handling
 517     + Silent warnings about bridge stuff.
 518     + Copy /etc/localtime into chroot before starting lldpd daemon to
 519       ensure correct timestamps for logs.
 520
 521 lldpd (0.4.1)
 522   * Fix EDP handling when there is no VLAN
 523   * Fix CDP version to not always be 1
 524   * Misc fix:
 525      + incorrect number of arguments for a LLOG_INFO call
 526      + fix SNMP last change in case this change occurs before start time
 527
 528 lldpd (0.4)
 529   * Rewrite of packet builder and parser to be able to cope with
 530     architecture that cannot do unaligned read. For decoder, we don't
 531     cast structures any more since they can be unaligned. For encoder,
 532     we use memcpy through the use of macro that build packets step by
 533     step.
 534
 535 lldpd (0.3.2)
 536   * Fix LLDP-MED support
 537
 538 lldpd (0.3.1)
 539   * Misc fixes, including memory leaks
 540
 541 lldpd (0.3)
 542   * Initial support of LLDP-MED
 543   * Fix for bridge detection (don't send bridge ioctl on random interfaces)
 544   * For bonded devices, get the real hardware address. For inactive
 545     slaves, transmit using a random MAC address.
 546
 547 lldpd (0.2.1)
 548   * Fix a syntax error in manual page
 549   * Fix open() calls
 550
 551 lldpd (0.2)
 552   * Add privilege separation
 553   * Add FDP support
 554   * Support CDP encapsulated into native VLAN
 555   * Various fixes
 556
 557 lldpd (0.1)
 558   * Initial release