Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-07-12 | don't cast lvalue, no binary change. | Jonathan Gray | |
2009-05-25 | add a missing check for truncated dport in the returned UDP header for | Stuart Henderson | |
ICMP_UNREACH_PORT. from Peter J. Philipp, ok jsing@. Closes system/6149. | |||
2009-04-17 | correcto in comment; from Amarendra Godbole | Jason McIntyre | |
2009-04-06 | teach tcpdump about match rules | Henning Brauer | |
2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne | |
with deraadt@, mcbride@, and mpf@ it is obvious that a hmac doesnt make sense for pfsync. this also firms up some of the input parsing so it handles short frames a bit better. | |||
2009-03-04 | print alarm condition from leap indicator; ok henning@ otto@ | Kevin Steves | |
2009-02-23 | better detect short frames. always print the version and length of the | David Gwynne | |
frame according to the pfsync header. dont try to parse an unsupported version of the protocol. | |||
2009-02-18 | Print spi in lowercase hex for consistency with print-enc.c and ipsecctl. | Ryan Thomas McBride | |
ok hshoexer msf | |||
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne | |
WARNING: THIS BREAKS COMPATIBILITY WITH THE PREVIOUS VERSION OF PFSYNC this is a new variant of the protocol and a large reworking of the pfsync code to address some performance issues. the single largest benefit comes from having multiple pfsync messages of different types handled in a single packet. pfsyncs handling of pf states is highly optimised now, along with packet parsing and construction. huggz for beck@ for testing. huge thanks to mcbride@ for his help during development and for finding all the bugs during the initial tests. thanks to peter sutton for letting me get credit for this work. ok beck@ mcbride@ "good." deraadt@ | |||
2009-02-14 | document increased default snaplen; pointed out by dhill | Stuart Henderson | |
2009-02-14 | increase the default snaplen to 116, allows capture of pflog+ipv6+tcp | Stuart Henderson | |
without knobs. ok djm, deraadt. | |||
2009-01-29 | In tcpdump some printf() had an additional \n at the end. Removing | Alexander Bluhm | |
that new line restores the one-line -> one-packet semantics. ok hshoexer@, henning@, markus@ | |||
2008-12-29 | Recognize MPLS packets over loopback interfaces. | Michele Marchetto | |
OK canacar@ | |||
2008-12-18 | Instead of directly applying ntoh*() to fields of the captured | Hans-Joerg Hoexer | |
packet and thus modifying it use local varialbes instead. Otherwise, hexdumping packets shows corrupted data. ok markus@ some time ago | |||
2008-12-05 | add ethertype and tcpdump support for VLAN stacking (QinQ) with | Stuart Henderson | |
type number 0x88a8 specified by 802.1ad. from reyk on misc@. "ok, go for it" dlg | |||
2008-11-29 | revert my last change - | Reyk Floeter | |
the xauth vendor id is a hash of "draft-ietf-ipsra-isakmp-xauth-06.txt" and defined in the document "draft-ietf-ipsec-isakmp-xauth-06.txt". | |||
2008-11-29 | fix typo in 'draft-ietf-ipsec-isakmp-xauth-06.txt' | Reyk Floeter | |
ok hshoexer@ | |||
2008-10-22 | fix format of AS number output | Joerg Goltermann | |
ok henning@ | |||
2008-10-16 | Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad. | Marco Pfatschbacher | |
Code from tcpdump.org with cleanup and shrinkage by me. Help and ideas for extra sanity checks from canacar@ OK canacar@ | |||
2008-10-10 | Fix -X output of ppp packets. Inspired by PR4624 and especially the patch | Claudio Jeker | |
provided by canacar@. I just modified it a bit to skip the data link proto number as well. OK deraadt@ | |||
2008-09-19 | Merge printb() fix from ifconfig.c -r 1.157: | Marco Pfatschbacher | |
Don't increment a pointer *before* testing it for NULL. OK canacar@ | |||
2008-06-27 | More removal of clauses 3 and 4 from NetBSD licenses. | Ray Lai | |
OK deraadt@ and millert@ | |||
2008-06-16 | use correct struct when checking DF or INET6, ok frantzen@ months ago | David Krause | |
forgotten in one of my trees | |||
2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride | |
- Mechanical change: Use arrays for state key pointers in pf_state, and addr/port in pf_state_key, to allow the use of indexes. - Fix NAT, pfsync, pfctl, and tcpdump to handle the new state structures. In struct pfsync_state, both state keys are included even when identical. - Also fix some bugs discovered in the existing code during testing. (in particular, "block return" for TCP packets was not returning an RST) ok henning beck deraadt tested by otto dlg beck laurent Special thanks to users Manuel Pata and Emilio Perea who did enough testing to actually find some bugs. | |||
2008-05-09 | Don't just ntohl() the hours, but everything of the state | Marco Pfatschbacher | |
creation time. OK mcbride@, henning@. | |||
2008-04-21 | add a short section on checksum offloading, based on a diff | Jason McIntyre | |
from Alf Schlichting; help/ok henning | |||
2008-04-18 | add filtering on direction; ok mpf@ deraadt@ feedback jmc@ | Damien Miller | |
2008-03-24 | msg_controllen has to be CMSG_SPACE so that the kernel can account for | Theo de Raadt | |
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis | |||
2008-03-15 | Repair the simple cases for msg_controllen where it should just be | Theo de Raadt | |
CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer | |||
2008-03-13 | Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due to | Theo de Raadt | |
an extensive discussion with otto, kettenis, millert, and hshoexer | |||
2008-01-17 | add basic snmpv2 support (snmpv2, trapv2, getbulk) | Reyk Floeter | |
ok canacar@ | |||
2007-11-27 | typos; ok jmc@ | Martynas Venckus | |
sys/dev/pci/pciide.c from naddy@ | |||
2007-11-26 | typos; ok jmc@ | Martynas Venckus | |
sys/netinet/in_pcb.c and sys/net/bridgestp.c ok henning@ sys/dev/pci/bktr/* ok jakemsr@ | |||
2007-10-30 | fix printing of enterprise-specific SNMP traps. | Reyk Floeter | |
ok claudio@ mglocker@ | |||
2007-10-26 | Fix alignment issues on sparc64. Fixes pr 5608. | Moritz Jodeit | |
ok canacar@ | |||
2007-10-07 | trash $Header goo which is just annoying; 5595 | Theo de Raadt | |
2007-10-04 | Handle CARP for IPv6. Reported and tested by todd@ | Can Erkin Acar | |
ok todd@, henning@ | |||
2007-09-21 | typo: print hexdump of packet, instead of pcap header; ok canacar, henning | Markus Friedl | |
2007-08-28 | add -I option for printing the interfaces; | Markus Friedl | |
ok hshoexer, henning, mcbridge (some time ago) | |||
2007-08-14 | Fix Segmentation fault for tcpdump when used in combination with | Marcus Glocker | |
``-v -y IEEE802_11'', and ``-v -y IEEE802_11_RADIO''. The snaplen was passed instead of the real packet size at some point, which caused tcpdump todo tcp checksum verifications on packets where it shouldn't. Diff from canacar@ and me, tested by canacar@, reyk@, and me. OK canacar@ reyk@ | |||
2007-08-13 | No need to #include <netinet/in.h> twice. Noticed by Diego Casati. | Kenneth R Westerback | |
ok stevesk@ | |||
2007-07-21 | s/ETHERTYPE_EAPOL/ETHERTYPE_PAE/ to be in line with src/sys/net/ethertypes.h | Damien Bergamini | |
also, ETHERTYPE_PAE is the name used in the 802.1X standard. pointed out by jsg@ | |||
2007-07-09 | Handle IPv6 on PPP printer, from Stuart Henderson | Can Erkin Acar | |
2007-07-02 | Display payload for DS to DS and NO DS traffic. | Can Erkin Acar | |
ok reyk@, looks ok damien@ | |||
2007-06-29 | make it easy to spot wich nfs version the traffic is. | Thordur I. Bjornsson | |
input & OK canacar@ | |||
2007-06-27 | When aligning buffers correctly handle the case where the | Can Erkin Acar | |
buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@ | |||
2007-06-21 | Print leading zeros in MAC addresses. Initial diff from Stanislav | Ray Lai | |
Kruchinin, idea to use ether_ntoa from Claudio Jeker. OK canacar, idea OK henning, jasper, and tedu. | |||
2007-06-14 | Print communities in a nicer format and include a missing well-known one. | Claudio Jeker | |
This is mostly from Stuart Henderson. OK canacar@ | |||
2007-06-14 | The External Route Tag for AS-External-LSAs can be an arbitrary 32bit | Reyk Floeter | |
value and doesn't need to be an IPv4 address. It is more like a vendor-specific field. as discussed with claudio after looking into rfc2328 | |||
2007-06-04 | do not inlcude ipx headers | Henning Brauer | |