summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2005-12-18Update my e-mail address in the copyright statement, no binary changes.Reyk Floeter
2005-12-17remove extra space in output of router LSA; ok claudio@Kevin Steves
2005-12-07Do not use strlcpy if the source string is not NUL terminated andOtto Moerbeek
avoid printing funny chars. Problem spotted by naddy@ whil tcpdumping enc0 with malloc.conf AJ; ok canacar@ on an earlier version.
2005-11-23Replace a C++ comment with a C comment. No code changes.Chad Loder
2005-11-22add printer for IAPP and hostapd(8) messagesReyk Floeter
ok canacar@, tested by aanriot@ and others
2005-11-18use new libpcap-provided datalink_x_to_y functions instead of local copiesDamien Miller
(with different prototypes); ok mpf@
2005-11-17fix byteorder for "s" and "l" formats; ok henning@ krw@Kevin Steves
2005-11-13Do not clobber errno, from Andrey Matveev. ok canacar@Otto Moerbeek
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
we're breaking pfsync compatibility this cycle anyways. Requested by djm@, ok henning@, 'wheee!' deraadt@
2005-10-20talk about choices when describing -y; from chris.kuethe@gmail.com ok fgschTheo de Raadt
2005-10-16Simplify some error paths. From Andrey Matveev. ok canacar@Otto Moerbeek
2005-10-08Add a best effort mpls decoder. From Jason L. Wright.Can Erkin Acar
Since the encapsulated protocol information is not always available in the MPLS tag stack. The decoder attempts to guess the protocol. ok brad@
2005-10-08Check IP version when decoding v4 and v6 packets.Can Erkin Acar
From Jason Wright via PR-4531.
2005-10-07KNFMarco Pfatschbacher
2005-10-07Add stp as supported protocol.Marco Pfatschbacher
While there remove reference to /etc/protocols for ether proto. Instead enumerate all supported ethernet protocols. OK jmc@ a while ago.
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-29Change DLT earlier. Fixes the loss of promisc mode when a non-defaultCan Erkin Acar
DLT is specified. looks sane deraadt@
2005-09-27Fix another case of inconstitent error handling that was missed in theOtto Moerbeek
previous commit. ok moritz@
2005-09-26If setting the filter fails, pass the error back;Otto Moerbeek
ok deraadt@
2005-09-23Only allow root to run tcpdump. It's needed for the chroot security.Otto Moerbeek
ok moritz@ deraadt@
2005-08-28Fix a reliability issue where an over-read of 4 bytes could result in theChad Loder
tcpdump process being terminated when tcpdump running with -vv tries to print a a short IKE SA payload. Specifically OK'd for 3.8 release by deraadt@. OK canacar@, hshoexer@.
2005-07-12recognize both versions of the nat-t-draft v2 vendor IDsHans-Joerg Hoexer
ok ho@
2005-07-08proto is `ip6', not `ipv6';Jason McIntyre
initial report from robert hansen; confirmed by otto@
2005-06-28some more ike payload typesHans-Joerg Hoexer
ok ho@
2005-06-14add missing error check for decode_prefix4. ok deraadt@Moritz Jodeit
2005-06-06add ike encap types UDP_ENCAP_TUNNEL and UDP_ENCAP_TRANSPORTHans-Joerg Hoexer
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
failover gateways. ok mcbride@, "looks good" hshoexer@
2005-05-28support decapsulation of 802.11 data framesReyk Floeter
ok canacar@
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
inserted the rule which causes the logging. secondly, the uid/pid of the process in case the logged packet is delivered to/from a local socket. a lookup of the local socket can be forced for logged packets with a new option, 'log (user)'. make tcpdump print the additional information when -e and -v is used. note: this changes the pflog header struct, rebuild all dependancies. ok bob@, henning@.
2005-05-24more missing bounds checks. ok marius@ deraadt@Moritz Jodeit
2005-05-23add some missing bounds checks. ok marius@Moritz Jodeit
2005-05-23Call endpwent() _after_ we're done with the struct passwd fields.Otto Moerbeek
ok canacar@
2005-05-22correct comments and function namens to reflect new parent/childMoritz Jodeit
situation. suggested by and ok otto@
2005-05-22fix signal race in statistics output. ok cloder@ henning@Moritz Jodeit
2005-05-18recognize more ike payload typesHans-Joerg Hoexer
ok cloder ho
2005-05-03more setres[ug]id; ok deraadt@Damien Miller
2005-04-27Fix a potential infinite loop that could be triggered by an invalid BGPChad Loder
packet. Partially from tcpdump.org, with additional paranoia added so that the problem is actually fixed. OK deraadt, otto
2005-04-24sync up, add some missing typesBrad Smith
2005-04-20fix signal race by removing STATE_QUIT completely.Moritz Jodeit
help and ok otto@ canacar@
2005-04-11tcpdump developers are uncautious retards, plain and simple; ok ottoTheo de Raadt
2005-04-10do not forget to call endpwent(). ok moritz@Otto Moerbeek
2005-04-10reduce the set of allowed actions in the privileged partMoritz Jodeit
depending on the arguments supplied to tcpdump. ok otto@, canacar@
2005-03-30remove trailing \n in errx().Moritz Jodeit
ok deraadt@
2005-03-30output final summary to stderr instead of stdout,Moritz Jodeit
so it won't get mixed when tcpdump -w - is used. ok henning@ deraadt@
2005-03-26simplify state engine, the old one was very confusing and wrong too.Otto Moerbeek
ok moritz@ "just get this in" deraadt@
2005-03-25whitespaceMoritz Jodeit
2005-03-25whitespaceOtto Moerbeek
2005-03-11clean up printing of rule numbers. omit ruleset name and sub-rule numberDaniel Hartmeier
when irrelevant. print 'def' for default rule. omit numerical reason if description is printed. ok henning@, deraadt@
2005-03-09simplification; ok reykTheo de Raadt
2005-03-08make this compile on strict-alignment architectures. someone sendTheo de Raadt
reyk a sparc64 please!