Fri Jun 18 16:36:22 EDT 2004  Irwin Tillman (irwin at princeton dot edu)

	* etdc: add support for output format change in tcpdump 3.8.3:
	addition of address offsets to left of hex dump.  Ignore ASCII dump
	erroneously added due to new bug in tcpdump 3.8.3 whenever only a 
	hex dump is requested.

	* Released version 2.0.1.

Fri Apr 25 10:59:26 EDT 2003  Irwin Tillman (irwin at princeton dot edu)

	* README, COPYING, Changelog, etdc: replace email addresses with human-parseable 
	versions, to reduce spam from simple Web-based address harvesters.

Wed Aug  1 14:16:59 EDT 2001  Irwin Tillman (irwin at princeton dot edu)

	* README etdc.1: software home has moved from wwwnet.princeton.edu
	to www.net.princeton.edu

Tue Apr  3 18:15:41 EDT 2001  Irwin Tillman (irwin at princeton dot edu)

	* etdc.1: add sample output

	* Initial public release.  Version 2.0.0.

Sat Mar 31 17:33:39 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* before printing tcpdump header line, remove everything starting with the packet 
	size; recent versions of tcpdump perform some AppleTalk decoding that duplicates
	what we do.

	* enough_bytes_remain(): new function. 

	* nbp decode: tupleCnt wasn't being converted from hex to decimal.

	* fine-tune output format.

Mon Mar 26 15:28:38 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* when decoding AEP, RTMP RDR, ZIP, or ADSP,  never try to decode more bytes 
	than have been captured.

Sun Mar 25 18:44:20 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* when decoding ATP, never try to decode more bytes than have been captured.

Tue Feb 27 16:49:58 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* when decoding NBP, never try to decode more bytes than have been captured.

Sun Feb 25 14:37:24 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* stop unbuffering STDOUT, instead use the flush() method from IO::File.

Fri Feb 23 15:22:49 EST 2001   Irwin Tillman (irwin at princeton dot edu)

	* when decoding DDP header, never try to decode more bytes than have been
	captured.

	* when decoding RTMP, never try to decode more bytes than have been captured.
	Respect the value of the 'ID length' field, instead of assuming it is 8.

Thu Feb 22 14:40:18 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* rewrote manual page. 

	* don't print tcpdump packet header nor trailing blank lines if we decide to not 
	print the packet based upon include/exclude filters.

	* when decoding AARP, never try to decode more bytes than have been captured.
	Respect the hardware length and protocol length fields.   Print the
	values of the hardware type, protocol type, hardware address length, and protocol
	address length fields.  Support printing hardware addresses of arbitrary lengths.
	Modify AARP packet output format to take into account these changes.

Tue Feb 20 15:32:08 EST 2001  Irwin Tillman (irwin at princeton dot edu)

	* remove -f option to specify an input file; let perl <> handle it.

	* add -v option to print version number.

	* stop reporting options at startup: we no longer report how ATP will be decoded,
	the value of AppleTalk address filters, and the value of include or exclude filters.

	* restructure packet reading loop to be clearer

	* general code cleanup: removal of some unecessary temporary values, convert
	some vars from global or dynamic scope to lexical scope.

	* use strict, perl -w.

	* before trying to decode the 802.2 and SNAP headers, make sure packet is
	long enough to contain them.

	* require perl 5.6.0, for warnings.

	* COPYING, README, ChangeLog, TODO, NEWS: files added in preparation for
	public release.

Feb 13 2001 20:34:01  Irwin Tillman (irwin at princeton dot edu)

	* in addition to recognizing that a tcpdump packet header line indicates
	that the previous packet has ended, also accept a short hexdump line
	as an earlier indication that the current packet has ended and can be 
	decoded.  This allows us to print most packets when we see then, rather 
	than when the next packet arrives.

	* stop losing the last packet we read.

	* add -h option to print usage summary.

Sep 8 1999 21:19:09  Irwin Tillman (irwin at princeton dot edu)

	* stop relying on perl4 libs.

Aug 10 1998 20:02:24  Irwin Tillman (irwin at princeton dot edu)

	* add support for perl5: escape '@' in unpack strings, make perl -w happy.
	
Jan 12 1996 21:24:49  Irwin Tillman (irwin at princeton dot edu)

	* add notation that DDP type 44 is probably MovieTalk.

Jan 9 1995 22:01:48  Irwin Tillman (irwin at princeton dot edu)

	* in ATP TResp PAP data, we were not decoding the EOF flag properly, so we 
	never printed EOF, even when it was set.

Oct 10 1994 18:46:20  Irwin Tillman (irwin at princeton dot edu)

	* for ATP TRel, don't attempt further decode of user bytes; they are 
	meaningless.

	* for ATP PAP OpenConnReply, fix typos in parsing and hex conversion of
	ATP responding socket number, flow quantum, and result.

	* for ATP PAP SendStatus and Status, do not print a ConnID in PAP header.

	* for ATP PAP Status and ATP PAP OpenConnReply, parse the statuslength
	field and use it to determine the amount of text to print.  (No longer
	prints the statuslength field as garage ASCII character at start of status
	string.)

Jul 7 1994 22:17:43  Irwin Tillman (irwin at princeton dot edu)

	* for DDP packets, print the AppleTalk src address *then* the dst address,
	to match the link header printed by tcpdump

	* add -x and -y options, to specify AppleTalk src and dst address filtes

May 25 1994 15:28:58  Irwin Tillman (irwin at princeton dot edu)

	* initial version from Bill Sproule and Chris Tengi