Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-08-04 | Print the MTU in OSPF dd packets. Borrowed from the ospf6 printer. | Stuart Henderson | |
ok claudio@ deraadt@ | |||
2010-08-03 | Fix a usage of logical and where binary and was intended. | Jonathan Gray | |
Spotted by Mike Belopuhov. ok jsing@ deraadt@ | |||
2010-06-30 | Print MPLS label as decimal and not hex. All other places we print MPLS | Claudio Jeker | |
labels we use decimal. OK jsg@ deraadt@ | |||
2010-06-26 | remove support for the old pflog format, replaced in 2003 | Henning Brauer | |
ok ryan theo & herr reyksminister | |||
2010-06-07 | minimal decode support for IKEv2 exchange types and payloads. | Jonathan Gray | |
ok deraadt@ sthen@ | |||
2010-04-06 | Add support for decoding MLDv2 initially from tcpdump.org via FreeBSD, | Jonathan Gray | |
cleaned up to be less gross after some suggestions from stsp. ok stsp@ | |||
2010-01-20 | Print RFC3947 NAT Original Address (NAT-OA) payloads, they're a subset | Stuart Henderson | |
of the id payload, so using the existing id printer. ok dlg@ | |||
2010-01-17 | add a printer for IPV6CP (IPv6 Control Protocol); ok sthen@ | Christian Weisgerber | |
2010-01-17 | * remove a nonsensical print statement left over since antiquity | Christian Weisgerber | |
ok yasuoka@ * add many missing truncation checks and don't output control characters to the terminal ok sthen@ | |||
2010-01-14 | Include the link-level header in the hex output if both the -x and -e | Joel Sing | |
options are specified. ok claudio@ sthen@ deraadt@ jmc@ | |||
2010-01-13 | revert previous and allow reading the last element of the array; ok deraadt@ | Christian Weisgerber | |
2010-01-12 | Add TCP/UDP checksum display for v6 and clean up the checksum | Christian Weisgerber | |
calculation. Mostly from tcpdump.org; ok jsing@ | |||
2010-01-03 | blank lines not allowed outside literal context; | Ingo Schwarze | |
syntax errors found by mandoc(1), also required to fix the mandoc build; ok jmc@ | |||
2009-12-03 | Adjust pflog BPF descriptions, problem pointed out by jmc@ | Stuart Henderson | |
- sync actions with PF changes (pass/block/match not just pass/block, and remove some binat/nat/rdr entries) - list all reason codes in tcpdump(8) ok henning jmc | |||
2009-11-27 | Print outer ipv6 addresses for encapsulated packets only if tcpdump | Alexander Bluhm | |
is run with -v. This behavior is analog to ipv4. ok mpf@ todd@ | |||
2009-11-12 | for packets with unknown payloads (outside the range of our knowledge) simply | Theo de Raadt | |
treat them the same as truncated packets ok sthen | |||
2009-11-12 | fix read-one-beyond-of-array errors; ok sthen jsg | Theo de Raadt | |
2009-11-11 | Don't leak memory in error case. | Jonathan Gray | |
Found by parfait. | |||
2009-11-09 | the new protocol moved insert and update. | David Gwynne | |
2009-11-04 | Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP), | Joel Sing | |
used to carry GPRS data over IP for GSM and UMTS networks. The decoder understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however at this stage not all TLV fields are fully decoded. This work has been kindly sponsored by SystemNet AS (www.systemnet.no). "commit" deraadt@ | |||
2009-11-04 | Sort port numbers and fix indentation. | Joel Sing | |
2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker | |
tables on top of a rdomain) but until now our code was a crazy mix so that it was impossible to correctly use rtables in that case. Additionally pf(4) only knows about rtables and not about rdomains. This is especially bad when tracking (possibly conflicting) states in various domains. This diff fixes all or most of these issues. It adds a lookup function to get the rdomain id based on a rtable id. Makes pf understand rdomains and allows pf to move packets between rdomains (it is similar to NAT). Because pf states now track the rdomain id as well it is necessary to modify the pfsync wire format. So old and new systems will not sync up. A lot of help by dlg@, tested by sthen@, jsg@ and probably more OK dlg@, mpf@, deraadt@ | |||
2009-10-28 | a few leftovers from yesterday's SCCS/RCS-ID removal; | Ingo Schwarze | |
survived a full make build on i386; "sure" deraadt@ | |||
2009-10-28 | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | Theo de Raadt | |
unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | |||
2009-09-08 | Make the BGP OPEN capability parser RFC 5492 compliant. While there add | Claudio Jeker | |
additional checks to make sure the known capabilities are correctly encoded and not truncated. Help and OK sthen@ | |||
2009-09-07 | Teach the printer about capabilities, new cease codes, end-of-rib marker, | Stuart Henderson | |
and handle 32-bit ASN. ok claudio@ | |||
2009-08-25 | djm accidentally changed the type of dirfilt in the prototypes | Jonathan Gray | |
of pcap_live and priv_pcap_live in rev 1.6 to differ from the implementations, change the type back to what it was. ok djm@ | |||
2009-07-30 | add missing " when printing an error string. ok henning@ | Stuart Henderson | |
2009-07-12 | don't cast lvalue, no binary change. | Jonathan Gray | |
2009-05-25 | add a missing check for truncated dport in the returned UDP header for | Stuart Henderson | |
ICMP_UNREACH_PORT. from Peter J. Philipp, ok jsing@. Closes system/6149. | |||
2009-04-17 | correcto in comment; from Amarendra Godbole | Jason McIntyre | |
2009-04-06 | teach tcpdump about match rules | Henning Brauer | |
2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne | |
with deraadt@, mcbride@, and mpf@ it is obvious that a hmac doesnt make sense for pfsync. this also firms up some of the input parsing so it handles short frames a bit better. | |||
2009-03-04 | print alarm condition from leap indicator; ok henning@ otto@ | Kevin Steves | |
2009-02-23 | better detect short frames. always print the version and length of the | David Gwynne | |
frame according to the pfsync header. dont try to parse an unsupported version of the protocol. | |||
2009-02-18 | Print spi in lowercase hex for consistency with print-enc.c and ipsecctl. | Ryan Thomas McBride | |
ok hshoexer msf | |||
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne | |
WARNING: THIS BREAKS COMPATIBILITY WITH THE PREVIOUS VERSION OF PFSYNC this is a new variant of the protocol and a large reworking of the pfsync code to address some performance issues. the single largest benefit comes from having multiple pfsync messages of different types handled in a single packet. pfsyncs handling of pf states is highly optimised now, along with packet parsing and construction. huggz for beck@ for testing. huge thanks to mcbride@ for his help during development and for finding all the bugs during the initial tests. thanks to peter sutton for letting me get credit for this work. ok beck@ mcbride@ "good." deraadt@ | |||
2009-02-14 | document increased default snaplen; pointed out by dhill | Stuart Henderson | |
2009-02-14 | increase the default snaplen to 116, allows capture of pflog+ipv6+tcp | Stuart Henderson | |
without knobs. ok djm, deraadt. | |||
2009-01-29 | In tcpdump some printf() had an additional \n at the end. Removing | Alexander Bluhm | |
that new line restores the one-line -> one-packet semantics. ok hshoexer@, henning@, markus@ | |||
2008-12-29 | Recognize MPLS packets over loopback interfaces. | Michele Marchetto | |
OK canacar@ | |||
2008-12-18 | Instead of directly applying ntoh*() to fields of the captured | Hans-Joerg Hoexer | |
packet and thus modifying it use local varialbes instead. Otherwise, hexdumping packets shows corrupted data. ok markus@ some time ago | |||
2008-12-05 | add ethertype and tcpdump support for VLAN stacking (QinQ) with | Stuart Henderson | |
type number 0x88a8 specified by 802.1ad. from reyk on misc@. "ok, go for it" dlg | |||
2008-11-29 | revert my last change - | Reyk Floeter | |
the xauth vendor id is a hash of "draft-ietf-ipsra-isakmp-xauth-06.txt" and defined in the document "draft-ietf-ipsec-isakmp-xauth-06.txt". | |||
2008-11-29 | fix typo in 'draft-ietf-ipsec-isakmp-xauth-06.txt' | Reyk Floeter | |
ok hshoexer@ | |||
2008-10-22 | fix format of AS number output | Joerg Goltermann | |
ok henning@ | |||
2008-10-16 | Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad. | Marco Pfatschbacher | |
Code from tcpdump.org with cleanup and shrinkage by me. Help and ideas for extra sanity checks from canacar@ OK canacar@ | |||
2008-10-10 | Fix -X output of ppp packets. Inspired by PR4624 and especially the patch | Claudio Jeker | |
provided by canacar@. I just modified it a bit to skip the data link proto number as well. OK deraadt@ | |||
2008-09-19 | Merge printb() fix from ifconfig.c -r 1.157: | Marco Pfatschbacher | |
Don't increment a pointer *before* testing it for NULL. OK canacar@ | |||
2008-06-27 | More removal of clauses 3 and 4 from NetBSD licenses. | Ray Lai | |
OK deraadt@ and millert@ |