summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2009-07-12don't cast lvalue, no binary change.Jonathan Gray
2009-05-25add a missing check for truncated dport in the returned UDP header forStuart Henderson
ICMP_UNREACH_PORT. from Peter J. Philipp, ok jsing@. Closes system/6149.
2009-04-17correcto in comment; from Amarendra GodboleJason McIntyre
2009-04-06teach tcpdump about match rulesHenning Brauer
2009-03-31do not include space in the end of the from for a hmac. after discussionDavid Gwynne
with deraadt@, mcbride@, and mpf@ it is obvious that a hmac doesnt make sense for pfsync. this also firms up some of the input parsing so it handles short frames a bit better.
2009-03-04print alarm condition from leap indicator; ok henning@ otto@Kevin Steves
2009-02-23better detect short frames. always print the version and length of theDavid Gwynne
frame according to the pfsync header. dont try to parse an unsupported version of the protocol.
2009-02-18Print spi in lowercase hex for consistency with print-enc.c and ipsecctl.Ryan Thomas McBride
ok hshoexer msf
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
WARNING: THIS BREAKS COMPATIBILITY WITH THE PREVIOUS VERSION OF PFSYNC this is a new variant of the protocol and a large reworking of the pfsync code to address some performance issues. the single largest benefit comes from having multiple pfsync messages of different types handled in a single packet. pfsyncs handling of pf states is highly optimised now, along with packet parsing and construction. huggz for beck@ for testing. huge thanks to mcbride@ for his help during development and for finding all the bugs during the initial tests. thanks to peter sutton for letting me get credit for this work. ok beck@ mcbride@ "good." deraadt@
2009-02-14document increased default snaplen; pointed out by dhillStuart Henderson
2009-02-14increase the default snaplen to 116, allows capture of pflog+ipv6+tcpStuart Henderson
without knobs. ok djm, deraadt.
2009-01-29In tcpdump some printf() had an additional \n at the end. RemovingAlexander Bluhm
that new line restores the one-line -> one-packet semantics. ok hshoexer@, henning@, markus@
2008-12-29Recognize MPLS packets over loopback interfaces.Michele Marchetto
OK canacar@
2008-12-18Instead of directly applying ntoh*() to fields of the capturedHans-Joerg Hoexer
packet and thus modifying it use local varialbes instead. Otherwise, hexdumping packets shows corrupted data. ok markus@ some time ago
2008-12-05add ethertype and tcpdump support for VLAN stacking (QinQ) withStuart Henderson
type number 0x88a8 specified by 802.1ad. from reyk on misc@. "ok, go for it" dlg
2008-11-29revert my last change -Reyk Floeter
the xauth vendor id is a hash of "draft-ietf-ipsra-isakmp-xauth-06.txt" and defined in the document "draft-ietf-ipsec-isakmp-xauth-06.txt".
2008-11-29fix typo in 'draft-ietf-ipsec-isakmp-xauth-06.txt'Reyk Floeter
ok hshoexer@
2008-10-22fix format of AS number outputJoerg Goltermann
ok henning@
2008-10-16Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.Marco Pfatschbacher
Code from tcpdump.org with cleanup and shrinkage by me. Help and ideas for extra sanity checks from canacar@ OK canacar@
2008-10-10Fix -X output of ppp packets. Inspired by PR4624 and especially the patchClaudio Jeker
provided by canacar@. I just modified it a bit to skip the data link proto number as well. OK deraadt@
2008-09-19Merge printb() fix from ifconfig.c -r 1.157:Marco Pfatschbacher
Don't increment a pointer *before* testing it for NULL. OK canacar@
2008-06-27More removal of clauses 3 and 4 from NetBSD licenses.Ray Lai
OK deraadt@ and millert@
2008-06-16use correct struct when checking DF or INET6, ok frantzen@ months agoDavid Krause
forgotten in one of my trees
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
- Mechanical change: Use arrays for state key pointers in pf_state, and addr/port in pf_state_key, to allow the use of indexes. - Fix NAT, pfsync, pfctl, and tcpdump to handle the new state structures. In struct pfsync_state, both state keys are included even when identical. - Also fix some bugs discovered in the existing code during testing. (in particular, "block return" for TCP packets was not returning an RST) ok henning beck deraadt tested by otto dlg beck laurent Special thanks to users Manuel Pata and Emilio Perea who did enough testing to actually find some bugs.
2008-05-09Don't just ntohl() the hours, but everything of the stateMarco Pfatschbacher
creation time. OK mcbride@, henning@.
2008-04-21add a short section on checksum offloading, based on a diffJason McIntyre
from Alf Schlichting; help/ok henning
2008-04-18add filtering on direction; ok mpf@ deraadt@ feedback jmc@Damien Miller
2008-03-24msg_controllen has to be CMSG_SPACE so that the kernel can account forTheo de Raadt
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
2008-03-15Repair the simple cases for msg_controllen where it should just beTheo de Raadt
CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
2008-03-13Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due toTheo de Raadt
an extensive discussion with otto, kettenis, millert, and hshoexer
2008-01-17add basic snmpv2 support (snmpv2, trapv2, getbulk)Reyk Floeter
ok canacar@
2007-11-27typos; ok jmc@Martynas Venckus
sys/dev/pci/pciide.c from naddy@
2007-11-26typos; ok jmc@Martynas Venckus
sys/netinet/in_pcb.c and sys/net/bridgestp.c ok henning@ sys/dev/pci/bktr/* ok jakemsr@
2007-10-30fix printing of enterprise-specific SNMP traps.Reyk Floeter
ok claudio@ mglocker@
2007-10-26Fix alignment issues on sparc64. Fixes pr 5608.Moritz Jodeit
ok canacar@
2007-10-07trash $Header goo which is just annoying; 5595Theo de Raadt
2007-10-04Handle CARP for IPv6. Reported and tested by todd@Can Erkin Acar
ok todd@, henning@
2007-09-21typo: print hexdump of packet, instead of pcap header; ok canacar, henningMarkus Friedl
2007-08-28add -I option for printing the interfaces;Markus Friedl
ok hshoexer, henning, mcbridge (some time ago)
2007-08-14Fix Segmentation fault for tcpdump when used in combination withMarcus Glocker
``-v -y IEEE802_11'', and ``-v -y IEEE802_11_RADIO''. The snaplen was passed instead of the real packet size at some point, which caused tcpdump todo tcp checksum verifications on packets where it shouldn't. Diff from canacar@ and me, tested by canacar@, reyk@, and me. OK canacar@ reyk@
2007-08-13No need to #include <netinet/in.h> twice. Noticed by Diego Casati.Kenneth R Westerback
ok stevesk@
2007-07-21s/ETHERTYPE_EAPOL/ETHERTYPE_PAE/ to be in line with src/sys/net/ethertypes.hDamien Bergamini
also, ETHERTYPE_PAE is the name used in the 802.1X standard. pointed out by jsg@
2007-07-09Handle IPv6 on PPP printer, from Stuart HendersonCan Erkin Acar
2007-07-02Display payload for DS to DS and NO DS traffic.Can Erkin Acar
ok reyk@, looks ok damien@
2007-06-29make it easy to spot wich nfs version the traffic is.Thordur I. Bjornsson
input & OK canacar@
2007-06-27When aligning buffers correctly handle the case where theCan Erkin Acar
buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@
2007-06-21Print leading zeros in MAC addresses. Initial diff from StanislavRay Lai
Kruchinin, idea to use ether_ntoa from Claudio Jeker. OK canacar, idea OK henning, jasper, and tedu.
2007-06-14Print communities in a nicer format and include a missing well-known one.Claudio Jeker
This is mostly from Stuart Henderson. OK canacar@
2007-06-14The External Route Tag for AS-External-LSAs can be an arbitrary 32bitReyk Floeter
value and doesn't need to be an IPv4 address. It is more like a vendor-specific field. as discussed with claudio after looking into rfc2328
2007-06-04do not inlcude ipx headersHenning Brauer