summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2013-12-22ctype cleanups, now that the kernel has u_char strings (that is theTheo de Raadt
easy road, otherwise this would be a righteous mess) ok florian
2013-12-03no need for timeb.hTheo de Raadt
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
pointer or non-const array, as that minimizes the symbols, maximizes the placement into read-only memory, and avoids warnings from gcc -Wformat=2 when they're used as format strings. ok deraadt@
2013-10-24These two programs got fooled by the KAME/NRL split and need type repair.Theo de Raadt
They do not indicate a problem with the reduction of namespace export, but got suckered into the 1999 plan. ok benno
2013-07-16use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@Ingo Schwarze
2013-07-10In the EXAMPLES section, it is not very obvious that "localnet" is not aLawrence Teo
literal argument name due to lack of formatting, so replace it with an example network to make it clearer (discussed with and suggested by jmc@). While here, fix some style nits in a sentence to make it consistent with the other examples. ok jmc
2013-06-19Do not install pcap-int.h to /usr/include as it is an internal libraryLawrence Teo
header (pointed out by matthew@). Let only pflogd and tcpdump include pcap-int.h directly since they need it for privilege separation. "looks good" sthen feedback/ok deraadt matthew millert
2013-04-16fix glitches in unused source file; ok millertTheo de Raadt
2013-01-17Dump some more flags and subtypes in tcpdump. Especially flags used inClaudio Jeker
power saving mode. OK giovanni@
2012-11-14In the unlikely event that a NULL device is passed to priv_pcap_live(),Lawrence Teo
ensure that the function will stop and return NULL instead of continuing (which could lead to a segfault). ok benno deraadt otto
2012-09-26last stage of rfc changes, using consistent Rs/Re blocks, and moving theJason McIntyre
references into a STANDARDS section;
2012-09-19replay counter was bumped a while ago, update byte order conversion;Mike Belopuhov
while here, improve the way information is printed out a bit. with input and ok camield, mpf
2012-08-29- rfc 4835 obsoletes rfc 2406Jason McIntyre
- flesh out SEE ALSO ok sthen
2012-08-24We maintain our own tcpdump, so remove the sentence in the BUGS sectionLawrence Teo
that asks users to send bug reports to mainline tcpdump. While here, fix two mandoc -Tlint warnings by removing unnecessary .Pp instances. ok deraadt jmc naddy
2012-07-13Recognize additional DH groups; ok sthen naddyMike Belopuhov
2012-07-11cleanup offset argument in default_print_* functions, pointed out by Mike SmallStuart Henderson
ok theo
2012-07-10support -A to print the ascii text of captured packets. ok deraadt@Stuart Henderson
2012-07-08New attempt to make the -P flag work with -ss, so that states can beLawrence Teo
printed with port names if desired. tcpdump's pf_print_state.c has diverged significantly from pfctl's, so the change to tcpdump's pf_print_state.c is not exactly the same as pfctl's. ok henning sthen
2012-05-03esp/ah sequence number is unsigned and should be printed as such;Mike Belopuhov
ok haesbaert, sthen, yasuoka, mpf
2012-04-04Return an error much earlier if recvmsg failsTheo de Raadt
2012-02-19Fix a classical bug (= vs ==). OK stsp@ miod@Claudio Jeker
2012-01-28Use safeputs() for radius, some decodes are likely to have unprintableStuart Henderson
characters. ok mikeb@
2012-01-28Print names rather than numbers for the old draft nat-t attributes,Stuart Henderson
cisco use these at least as recently as ASAs running 8.4(1)
2011-12-28Print PPP-Max-Payload headers (for RFC 4638 PPPoe), part of a larger diffStuart Henderson
from Matt Dainty. ok haesbaert@
2011-10-13Teach some userland tools about NAT64. I think this is mostly from mikeb@Claudio Jeker
OK mcbride@
2011-09-22Let tcpdump use the same format for printing IPv6 fragments as forAlexander Bluhm
IPv4. Now it is id:len@off+more for both. ok jsing
2011-09-22Revert r1.29. Now that the "C" locale is ASCII-only, this workaroundStefan Sperling
is no longer needed. ok naddy
2011-09-18extract 8 octets (as per RFC 2661) rather than a long; with jsing@Christian Weisgerber
2011-09-18Fix whitespace.Joel Sing
2011-09-18Avoid potential 64-bit unaligned access on strict alignment architectures.Joel Sing
Spotted by and ok naddy@
2011-09-17Make tcpdump -v print the id and seq of icmp6 echo packets.Alexander Bluhm
ok claudio naddy
2011-09-17update pointer variable after copying misaligned packet; ok claudio@Christian Weisgerber
2011-09-17access a 32-bit field as u_int32_t, not as u_long; ok bluhm@Christian Weisgerber
2011-07-25Be more careful when looking at l2tp traffic. Do more length checks andClaudio Jeker
make sure that no unaligned access to uint16_t values happen. Tested and feedback by yasuoka@
2011-06-27fix an off by one which resulted in 'no next header' packets not beingDavid Hill
displayed. help from bluhm@ OK claudio@
2011-04-03Call setlocale() to avoid display glitches in UTF-8 locales.Stefan Sperling
ok phessler nicm mikeb
2011-03-28tweak previous;Jason McIntyre
2011-03-28Add a couple of examples on tcpflags and icmptype filtersgiovanni
ok claudio@
2011-03-22Don't be to strict when checking the length of an ospf packet.Claudio Jeker
Allow for padding bytes in the IP packet (length > ntohs(op->ospf_len)) but report both length in that case. OK sthen@, deraadt@
2011-02-07Between groff-1.15 and groff-1.20.1, the .Ns macro was changed to noIngo Schwarze
longer suppress spacing when used at the beginning of an input line, and mandoc now follows the same behaviour as new groff. Thus, sweep the tree and remove useless .Ns. Most places found by jmc@; ok jmc@ kristaps@.
2010-11-12The ioctl to show states returns a pfsync_state which is in network byteClaudio Jeker
order and therefore a ntohs is needed to show the rdomain correctly. OK henning@ dlg@
2010-11-04Sync with tcpdump.org to fix multicast DNS support, and get someCan Erkin Acar
other updates in the process. Initial report/patch from Christiano F. Haesbaert. Ok matthew@
2010-10-18Revert non-compatible and undocumented bullshit commited by 3 developersTheo de Raadt
who decided to just do it on their own. henning, mcbride, jsing -- shame on you -- if you had shown this diff to just 1 other network developer, the astounding mistake in it would have been noticed. Start practicing inclusionary development instead of going alone. ok claudio
2010-10-17Add quirks support to operating system fingerprinting. tcpdump partJoel Sing
by mcbride@. ok mcbride@ henning@
2010-10-09Do not use BPF_WORDALIGN when computing pflog header length as it alignsCan Erkin Acar
to 8-byte boundary on 64-bit architectures. Instead explicitly round up to a 4-byte boundary. Reported and tested by sthen@
2010-09-21when a packet has had addresses and/or ports rewritten, show the originalHenning Brauer
addresses/ports too. ok ryan dlg
2010-09-21temporary hack to raise snaplen for pflog so that pflog header, ip headerHenning Brauer
and protocol header actually fit in the common cases. stays until canacar tells us how to do it right ;) ok dlg ryan
2010-09-07fix a formatting issue for -E;Jason McIntyre
2010-08-19Correctly decode and print access point names.Joel Sing
2010-08-04Print the MTU in OSPF dd packets. Borrowed from the ospf6 printer.Stuart Henderson
ok claudio@ deraadt@