Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-04-03 | tweak vlan printing to properly decode the priority field. | David Gwynne | |
the vlan specs have the priority of 0 and 1 swapped on the wire, which is how the kernel handles them. eg, if you use pf to set prio 1, it will end up being 0 on the wire. this makes 0 on the wire come out as 1 in tcpdump so it is consistent with the rest of the tooling. ok henning@ | |||
2018-02-24 | make the gre flowid output always 2 chars so payloads stay lined up. | David Gwynne | |
2018-02-10 | print etherip on ipv6. | David Gwynne | |
2018-02-09 | use ether_tryprint, which looks inside the ether packet. | David Gwynne | |
ether_print just prints the ether header. | |||
2018-02-09 | it turns out the wccp header is optional | David Gwynne | |
peek inside the payload to see if the first nibble looks like ipv4. if it isnt ipv4 assume it is the wccp header. | |||
2018-02-08 | have a go at decoding cisco wccp gre packets, and let them fall into IP. | David Gwynne | |
2018-02-08 | recognise gre proto 0 as a "keep alive" packet | David Gwynne | |
2018-02-07 | shorten the output for gre keys. | David Gwynne | |
2018-02-06 | output the data part of LCP Echo-Request and Echo-Reply packets. | David Gwynne | |
2018-02-06 | rework ppp, pptp, and gre parsing. | David Gwynne | |
this started cos i was looking at pptp, which came out like this: 23:52:00.197893 call 24 seq 7: gre-ppp-payload (gre encap) 23:52:00.198930 call 1 seq 7 ack 7: gre-ppp-payload (gre encap) now it looks like this: 23:52:00.197893 20.0.0.2 > 20.0.0.1: pptp callid 24 seq 7: 17.1.1.122 > 40.0.0.2: icmp: echo request 23:52:00.198930 20.0.0.1 > 20.0.0.2: pptp callid 1 seq 7 ack 7: 40.0.0.2 > 17.1.1.122: icmp: echo reply the big improvement in ppp parsing is it stops parsing based on what the ppp headers say, rather than what bytes have been captured. this also adds parsing of EAP packets. DLT_PPP_SERIAL is now recognised and printed. gre now prints the outer addresses always, not just when it's encapsulated by ipv6 or -v is passed to tcpdump. ok sthen@ | |||
2018-02-03 | Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed | Martin Pieuchot | |
in wireshark. ok deraadt@, dlg@ | |||
2017-12-08 | Convert snprintf+write into dprintf. It is simply easier to read, and | Theo de Raadt | |
provides retry on short-write file descriptors. ok florian, previous versions seen by millert | |||
2017-10-30 | Kill <net/slip.h>. | Martin Pieuchot | |
The ioctl(2) it defines is not supported since a long time and most of its defines are already present in tcpdump(8). ok jca@ | |||
2017-09-08 | Whoops, remove extra include. | Bryan Steele | |
2017-09-08 | fork+exec model for tcpdump(8); re-exec the privileged child after fork | Bryan Steele | |
While tcpdump isn't a daemon in the traditional sense, it's not uncommon for people to have long running sessions. At least on OpenBSD, this is even safe thanks to the existing privsep design by otto@, canacar@ and pledge(2) work done by deraadt. ok deraadt@ | |||
2017-09-01 | Make 'tcpdump -v' decode RSN information elements in beacons | Stefan Sperling | |
instead of lazily dumping them in hex. ok mpi@ | |||
2017-08-30 | unsigneds cannot be < 0; ok jca@ | Otto Moerbeek | |
2017-08-29 | quarterly rescan of the tree: remove unneccessary sys/param.h, and | Theo de Raadt | |
annotate the ones which are needed. | |||
2017-07-26 | Update reference to BGP Shutdown Communication specification | job | |
ok benno@ | |||
2017-07-25 | make function match its prototype. | Marc Espie | |
okay deraadt@ | |||
2017-06-14 | Don't support loading appletalk addresses from /etc/appletalk.names. | Michal Mazurek | |
OK deraadt@ | |||
2017-06-10 | Don't describe AppleTalk's output format and bugs. | Michal Mazurek | |
OK claudio@ jmc@ doesn't object | |||
2017-05-30 | MIN->MINIMUM, even though smb is currently disabled. | Theo de Raadt | |
2017-05-30 | The capability error codes never made it into a standard and now error | Michal Mazurek | |
code 7 is for enhanced route refresh. OK claudio@ phessler@ | |||
2017-05-30 | Enable more error codes for BGP. These were commited some time ago, but | Michal Mazurek | |
never enabled. Also add error codes for FSM. With input from Job Snijders. OK phessler@ (previous version), claudio@, deraadt@ | |||
2017-05-28 | Reduce differences between the two pfctl_osfp.c files. | Michal Mazurek | |
Apply three commits from pfctl/pfctl_osfp.c OK bluhm@ | |||
2017-05-28 | Catch up with pfctl/pfctl_osfp.c, no binary change. | Michal Mazurek | |
OK deraadt@ | |||
2017-05-24 | Sync NO_PID value from kernel header to tcpdump source. It is | Alexander Bluhm | |
#ifdef _KERNEL, so it does not work automatically. This prevents some bogus uid and pid print when dumping from pflog interface. from Matthias Pitzl; OK deraadt@ | |||
2017-04-24 | Print bgp administrative shutdown messages (draft-ietf-idr-shutdown) | Sebastian Benoit | |
From Job Snijders <job -AT instituut -DOT- net>, thanks! ok canacar@, deraadt@ | |||
2017-04-19 | Switch base tools from /dev/bpf0 to /dev/bpf. Now that /dev/bpf has been | Martin Natano | |
around for two releases, it should be safe to do so. ok bluhm deraadt sthen tb yasuoka | |||
2017-03-08 | Fix etherip version parsing, ok dlg@ | Jeremie Courreges-Anglas | |
2017-03-04 | Make tcpdump show HT protection settings consistently. Previously, nothing | Stefan Sperling | |
was displayed if HT protection was disabled. Now it displays as "htprot none". ok sthen@ | |||
2017-02-27 | Print the DNSSEC OKAY flag as "DO", like in upstream tcpdump | Jeremie Courreges-Anglas | |
ok florian@ | |||
2017-01-29 | Fix tcpdump(8) display of duration values provided in 802.11 control frames. | Stefan Sperling | |
These values are in microseconds, not milliseconds. ok sthen@ | |||
2017-01-24 | do not need sys/proc.h | Theo de Raadt | |
2017-01-23 | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | Theo de Raadt | |
upon "inet". Adjust the 4 programs that care about this. | |||
2017-01-20 | Another ip_ipsp.h missing, found by krw@ | Claudio Jeker | |
2016-12-18 | Remove duplicated lines of code introduced in my previous tcpdump commit. | Stefan Sperling | |
Noticed by claudio@ | |||
2016-12-18 | Make tcpdump show "11n" for a channel which is used in 11n mode. | Stefan Sperling | |
ok mpi@ | |||
2016-12-14 | Sync extern decl of eproto_db with what's in libpcap. | Jeremie Courreges-Anglas | |
For some reason this crashes on armv7. Issue reported by Lars Nooden. | |||
2016-12-13 | teach tcpdump some more things about gre. | David Gwynne | |
gre can be encapsulated in ipv6. gre can encapsulate ipv6, mpls, and ethernet. nvgre is based on gre, so if the header could be nvgre print the vsid and flow id as well as the key. ok stsp@ | |||
2016-12-02 | Fix some spelling errors in the OpenFlow header and update the tcpdump(8) | Rafael Zalamena | |
ofp_map.c file. ok reyk@ | |||
2016-11-28 | ether_ntoa -> etheraddr_string, like elsewhere in tcpdump | Jeremie Courreges-Anglas | |
openflow part tested by rzalamena@, ok deraadt@ | |||
2016-11-25 | Fix some bad copy paste bits and simplify the ethernet printing function. | Rafael Zalamena | |
ok reyk@ | |||
2016-11-22 | Fix OFP spelling for version bitmap define in ofp header and tcpdump, also | Rafael Zalamena | |
change the truncation message in hello with the standard one. ok reyk@ | |||
2016-11-20 | Extend the DLT_OPENFLOW header to include the switch datapath id. | Reyk Floeter | |
OK rzalamena@ | |||
2016-11-19 | Make tcpdump indicate basic rates listed in beacons with an asterisk. | Stefan Sperling | |
ok tb@ | |||
2016-11-18 | Add support for printing the missing OpenFlow set-queue action. | Rafael Zalamena | |
2016-11-18 | Don't print the field 'actions' on features reply, because in the new | Rafael Zalamena | |
OpenFlow 1.3.5 it is a reserved field that is not being used. | |||
2016-11-18 | miss_send_len can also be a CONTROLLER_MAXLEN string not just a number. | Reyk Floeter | |
Requested by rzalamena@ |