summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2005-09-29Change DLT earlier. Fixes the loss of promisc mode when a non-defaultCan Erkin Acar
DLT is specified. looks sane deraadt@
2005-09-27Fix another case of inconstitent error handling that was missed in theOtto Moerbeek
previous commit. ok moritz@
2005-09-26If setting the filter fails, pass the error back;Otto Moerbeek
ok deraadt@
2005-09-23Only allow root to run tcpdump. It's needed for the chroot security.Otto Moerbeek
ok moritz@ deraadt@
2005-08-28Fix a reliability issue where an over-read of 4 bytes could result in theChad Loder
tcpdump process being terminated when tcpdump running with -vv tries to print a a short IKE SA payload. Specifically OK'd for 3.8 release by deraadt@. OK canacar@, hshoexer@.
2005-07-12recognize both versions of the nat-t-draft v2 vendor IDsHans-Joerg Hoexer
ok ho@
2005-07-08proto is `ip6', not `ipv6';Jason McIntyre
initial report from robert hansen; confirmed by otto@
2005-06-28some more ike payload typesHans-Joerg Hoexer
ok ho@
2005-06-14add missing error check for decode_prefix4. ok deraadt@Moritz Jodeit
2005-06-06add ike encap types UDP_ENCAP_TUNNEL and UDP_ENCAP_TRANSPORTHans-Joerg Hoexer
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
failover gateways. ok mcbride@, "looks good" hshoexer@
2005-05-28support decapsulation of 802.11 data framesReyk Floeter
ok canacar@
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
inserted the rule which causes the logging. secondly, the uid/pid of the process in case the logged packet is delivered to/from a local socket. a lookup of the local socket can be forced for logged packets with a new option, 'log (user)'. make tcpdump print the additional information when -e and -v is used. note: this changes the pflog header struct, rebuild all dependancies. ok bob@, henning@.
2005-05-24more missing bounds checks. ok marius@ deraadt@Moritz Jodeit
2005-05-23add some missing bounds checks. ok marius@Moritz Jodeit
2005-05-23Call endpwent() _after_ we're done with the struct passwd fields.Otto Moerbeek
ok canacar@
2005-05-22correct comments and function namens to reflect new parent/childMoritz Jodeit
situation. suggested by and ok otto@
2005-05-22fix signal race in statistics output. ok cloder@ henning@Moritz Jodeit
2005-05-18recognize more ike payload typesHans-Joerg Hoexer
ok cloder ho
2005-05-03more setres[ug]id; ok deraadt@Damien Miller
2005-04-27Fix a potential infinite loop that could be triggered by an invalid BGPChad Loder
packet. Partially from tcpdump.org, with additional paranoia added so that the problem is actually fixed. OK deraadt, otto
2005-04-24sync up, add some missing typesBrad Smith
2005-04-20fix signal race by removing STATE_QUIT completely.Moritz Jodeit
help and ok otto@ canacar@
2005-04-11tcpdump developers are uncautious retards, plain and simple; ok ottoTheo de Raadt
2005-04-10do not forget to call endpwent(). ok moritz@Otto Moerbeek
2005-04-10reduce the set of allowed actions in the privileged partMoritz Jodeit
depending on the arguments supplied to tcpdump. ok otto@, canacar@
2005-03-30remove trailing \n in errx().Moritz Jodeit
ok deraadt@
2005-03-30output final summary to stderr instead of stdout,Moritz Jodeit
so it won't get mixed when tcpdump -w - is used. ok henning@ deraadt@
2005-03-26simplify state engine, the old one was very confusing and wrong too.Otto Moerbeek
ok moritz@ "just get this in" deraadt@
2005-03-25whitespaceMoritz Jodeit
2005-03-25whitespaceOtto Moerbeek
2005-03-11clean up printing of rule numbers. omit ruleset name and sub-rule numberDaniel Hartmeier
when irrelevant. print 'def' for default rule. omit numerical reason if description is printed. ok henning@, deraadt@
2005-03-09simplification; ok reykTheo de Raadt
2005-03-08make this compile on strict-alignment architectures. someone sendTheo de Raadt
reyk a sparc64 please!
2005-03-07add a printer for 802.11 and for additional radiotap headers,Reyk Floeter
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver. ok canacar@
2005-03-06- do not mark up punctuationJason McIntyre
- use full "For example:" instead of "e.g.," where the latter looks too awful - no need to use Ns before `.'
2005-03-06uppercase takes precedence over lower when sorting options;Jason McIntyre
2005-03-06add support for multiple DLTs using the -L and -y options.Reyk Floeter
ok canacar@
2005-03-03decode ike modp_2048 payloadHans-Joerg Hoexer
ok cloder ho
2005-02-17Fix indentation as to not mislead the code reader. No functional change.Aaron Campbell
2005-02-15Recognize RFC 3947 NAT-T VID. hshoexer@ okHakan Olsson
2005-02-04update `dst port', `ip proto', `ether proto', and SEE ALSO;Jason McIntyre
ok mcbride@
2005-01-22although arguments to `ip proto' and `ether proto' are keywords, and doJason McIntyre
need to be escaped, they are not shell keywords; this wording seems to have been introduced when the page was mdoc'd; it now matches (more or less) how it was, and {F,N}BSD pages; found by naddy@
2005-01-02"bad-timestamp" is a valid logging reason;Jason McIntyre
from joel knight;
2004-12-20Add support for displaying Shared Spanning Tree Protocol frames, a minorChristopher Pascoe
variation on 802.1d/STP. ok otto@ mcbride@
2004-12-19use strchr instead of indexTheo de Raadt
2004-12-13permit protocol name longer than 3 letters. canacar okJun-ichiro itojun Hagino
2004-11-17print ipv6 on enc0, too; ok otto, tests by friesMarkus Friedl
2004-10-17implement -q for icmp, deregister, print usigned values using an unsignedOtto Moerbeek
format. ok markus@
2004-10-15print ip_len for -v; ok otto, hshoexer, henningMarkus Friedl