qcap is currently around version 0.1.1. We are currently finding a stable
API, and bug hunting.
The project plan can be found in the CVS repository. It provides a detailed
plan of upcoming changes, and an explanation of the version number scheme.
current version is available via ViewCVS.
- The libnids modifications prevent duplicate packets from being handled
properly. Thus far, we have only been able to test traces with
multiple ACK packets, that are without payload. We're not too sure
what duplicate packets with payloads will cause.
- Grammars are currently one-sided, the parser of the server side of a
conversation is independent of the client side.
- Grammar acceptance is not handled gracefully. We have a greedy parser
that notifies its callbacks whenever a match is made, even if the
match is part of a larger production that later fails.