Age | Commit message (Collapse) | Author |
|
|
|
returns to const pointers:
- the prefix argument to pcap_perror();
- the return value of pcap_strerror();
- the filter expression argument to pcap_compile() and pcap_compile_nopcap();
- the BPF filter program argument to bpf_image().
Matches changes made earlier in tcpdump.org's version of libpcap.
From Guy Harris, ok tb@, been through a bulk ports build.
|
|
ok tb@ millert@ krw@
|
|
libpcap-based program to process packets as soon as they arrive.
feedback from jasper@
ok jca@
(a long time ago)
|
|
shlib version doesnt need a bump before no new symbols were added
or removed.
part of a larger diff that was ok sthen@
|
|
in wireshark.
ok deraadt@, dlg@
|
|
OK jca@ kettenis@ job@
|
|
okay millert@
(forgot the obvious scanner.l tweak in my diff)
|
|
attribute is an obsolete way of saying "noreturn". clang doesn't
recognize it and the function is already marked __dead so it is
superfluous anyway.
|
|
around for two releases, it should be safe to do so.
ok bluhm deraadt sthen tb yasuoka
|
|
this lets me go "tcpdump ether proto lldp" to easily read lldp packets
off the wire without other noise getting in the way.
ok deraadt@ jca@ sthen@
|
|
tcpdump directly uses eproto_db even though it is not part of the
libpcap API. This means that we can't freely add members to this array,
else ld.so complains about size mismatches. Keep the data in a static
array instead and make it usable by tcpdump through a pointer whose size
won't change in the future. A minor bump is enough here for ld.so to
stop complaining.
While here, mark _eproto_db and llc_db as const, as they are meant to
be.
Suggested by and ok deraadt@
|
|
OK rzalamena@
|
|
eg. tcpdump -y openflow -i switch0
Includes a minor bump for libpcap.
Feedback and OK rzalamena@
|
|
|
|
sthen@. to make remote upgrades without media less painful.
ok tb@
|
|
|
|
|
|
ok lteo@ "go for it" dlg@
|
|
No functional change.
ok guenther@
|
|
the code was confusing around how it dealt with packets in mbufs
vs plain memory buffers with a lenght.
this renames bpf_filter to _bpf_filter, and changes it so the packet
memory is referred to by an opaque pointer, and callers have to
provide a set of operations to extra values from that opaque pointer.
bpf_filter is now provided as a wrapper around _bpf_filter. it
provides a set of operators that work on a straight buffer with a
lenght.
this also adds a bpf_mfilter function which takes an mbuf instead
of a buffer, and it provides explicit operations for extracting
values from mbufs.
if we want to use bpf filters against other data structures (usb
or scsi packets maybe?) we are able to provide functions for
extracting payloads from them and use _bpf_filter as is.
ok canacar@
|
|
correctly - logically complete that now by removing MLINKS from base;
authors need only to ensure there is an entry in NAME for any function/
util being added. MLINKS will still work, and remain for perl to ease
upgrades;
ok nicm (curses) bcook (ssl)
ok schwarze, who provided a lot of feedback and assistance
ok tb natano jung
|
|
ok tb@ millert@
|
|
|
|
ok deraadt@
|
|
ok deraadt@
|
|
|
|
ok guenther@
|
|
ok guenther@
|
|
|
|
(others require more care)
|
|
|
|
From Jan Stary.
|
|
changed from EINVAL to ENOTTY in sys/net/if_media.c r1.19; it should just
indicate that monitor mode is not available, rather than return a general
error. ok dcoppa jca
|
|
review by millert, binary checking process with doug, concept with guenther
|
|
errbuf needs to hold at least PCAP_ERRBUF_SIZE chars.
|
|
public pcap_* functions that use errbuf. Mainline libpcap also uses
"errbuf" for pcap_create().
No object file change.
|
|
|
|
file change.
|
|
pcap_cleanup_bpf() to disable monitor mode on 802.11 devices.
feedback blambert@
ok deraadt@ mikeb@ millert@
|
|
|
|
the ones used in the code.
pointed out by schwarze@
|
|
from Kaspars at Bankovskis dot net
|
|
ok tedu@
|
|
ok deraadt@ tedu@
|
|
|
|
originally malloc(n * m) calls (without memset/bzero) in the past.
ok deraadt@ tedu@
|
|
ok deraadt@
|
|
local addition that has never been part of upstream. No binary change.
feedback from guenther@
|
|
XXX noted by lteo, change proofed & tested as well
|