Re: [tcpdump-workers] Research on tcpdump

2013-03-19 Thread Raymond Borges
I just needed the versions before 3.x to compare with. The fact that there has been no CVE since 2007 is good. I'll give you an update if we are able to publish something involving tcpdump Thanks again. Cellular (304) 276-8628 Raymond Borges MSCS/BSCpE SREB Fellow CS Ph.D. Student Lane Departmen

Re: [tcpdump-workers] Research on tcpdump

2013-03-19 Thread Raymond Borges
Specifically we are studying how versions fixed vulnerabilities by diffing the code functions where the CVE states the vulnerability was. We're also wondering why there are no listed CVEs after 2007 for tcpdump. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=tcpdump Cellular (304) 276-8628 Raym

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Michael Richardson
> "Guy" == Guy Harris writes: Guy> (Michael, have you gotten Coverity Scan set up to do either Guy> nightly or post-commit runs on libpcap and tcpdump? Guy> http://scan.coverity.com Guy> That's one way of getting the code checked. I also did a Clang Guy> Static Humilia

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Guy Harris
On Mar 18, 2013, at 11:13 AM, Michael Richardson wrote: > >> "Raymond" == Raymond Borges writes: >Raymond> Specifically we are studying how versions fixed >Raymond> vulnerabilities by diffing the code functions where the CVE >Raymond> states the vulnerability was. We're also wo

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Michael Richardson
> "Raymond" == Raymond Borges writes: Raymond> Specifically we are studying how versions fixed Raymond> vulnerabilities by diffing the code functions where the CVE Raymond> states the vulnerability was. We're also wondering why Raymond> there are no listed CVEs after 2007 for

Re: [tcpdump-workers] Research on tcpdump

2013-03-15 Thread Guy Harris
On Mar 15, 2013, at 5:45 AM, Michael Richardson wrote: > Prior to that it would have been done by the LBL folks... the 3.4 > release was probably 3-4 years earlier.We have the CVS tree back to > the beginning, and it was imported into git, so there maybe some > evidence of what it looked lik

Re: [tcpdump-workers] Research on tcpdump

2013-03-15 Thread Michael Richardson
> "Raymond" == Raymond Borges writes: Raymond> I'm doing research on tcpdump and I've been trying to Raymond> locate the source code for versions previous to 3.5.0 but Raymond> haven't had much luck. Do you know where I might find Raymond> these? Thank you. hi, 3.5 was releas