summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2007-10-07trash $Header goo which is just annoying; 5595Theo de Raadt
2007-10-04Handle CARP for IPv6. Reported and tested by todd@Can Erkin Acar
ok todd@, henning@
2007-09-21typo: print hexdump of packet, instead of pcap header; ok canacar, henningMarkus Friedl
2007-08-28add -I option for printing the interfaces;Markus Friedl
ok hshoexer, henning, mcbridge (some time ago)
2007-08-14Fix Segmentation fault for tcpdump when used in combination withMarcus Glocker
``-v -y IEEE802_11'', and ``-v -y IEEE802_11_RADIO''. The snaplen was passed instead of the real packet size at some point, which caused tcpdump todo tcp checksum verifications on packets where it shouldn't. Diff from canacar@ and me, tested by canacar@, reyk@, and me. OK canacar@ reyk@
2007-08-13No need to #include <netinet/in.h> twice. Noticed by Diego Casati.Kenneth R Westerback
ok stevesk@
2007-07-21s/ETHERTYPE_EAPOL/ETHERTYPE_PAE/ to be in line with src/sys/net/ethertypes.hDamien Bergamini
also, ETHERTYPE_PAE is the name used in the 802.1X standard. pointed out by jsg@
2007-07-09Handle IPv6 on PPP printer, from Stuart HendersonCan Erkin Acar
2007-07-02Display payload for DS to DS and NO DS traffic.Can Erkin Acar
ok reyk@, looks ok damien@
2007-06-29make it easy to spot wich nfs version the traffic is.Thordur I. Bjornsson
input & OK canacar@
2007-06-27When aligning buffers correctly handle the case where theCan Erkin Acar
buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@
2007-06-21Print leading zeros in MAC addresses. Initial diff from StanislavRay Lai
Kruchinin, idea to use ether_ntoa from Claudio Jeker. OK canacar, idea OK henning, jasper, and tedu.
2007-06-14Print communities in a nicer format and include a missing well-known one.Claudio Jeker
This is mostly from Stuart Henderson. OK canacar@
2007-06-14The External Route Tag for AS-External-LSAs can be an arbitrary 32bitReyk Floeter
value and doesn't need to be an IPv4 address. It is more like a vendor-specific field. as discussed with claudio after looking into rfc2328
2007-06-04do not inlcude ipx headersHenning Brauer
2007-06-03unbreak 802.11 element parsing by using the TCHECK2 macro correctlyReyk Floeter
ok claudio@
2007-06-01Move a useless warning to the only case that uses it (-f) from canacar@Todd T. Fries
ok beck@
2007-05-31convert to new .Dd format;Jason McIntyre
2007-05-31pf_state is no longer the same; modify pf_print_state.c to acceptRyan Thomas McBride
pfsync_state (as in pfctl, but in network byte order). ok henning@ toby@ pyr@
2007-05-29Do not change snaplen when parsing a netflow packetCan Erkin Acar
2007-05-27Additional truncation checks, mostly from tcpdump.org,Can Erkin Acar
and remove some unused hlen assignments found by lint from Stuart Henderson, reviewed by me, ok henning@ claudio@
2007-05-06Don't fail hard on non RH0 routing headers. The calculation of the lengthClaudio Jeker
of RH headers is always the same. Now tcpdump just prints the type, length and segleft headers for unknown headers. OK henning@ mcbride@
2007-05-06Fix the out of bounds check when parsing IPv6 headers. Fixes a SIGSEGVClaudio Jeker
when parsing IPv6 headers with unknown or corrupted header options. OK henning@ mcbride@
2007-03-27Fix aligenment issues by using bcopy() and a local variable instead of theClaudio Jeker
problematic *(u_intXX_t*)t casts. This fixes the bus errors I got on sparc64 while doing IEEE802_11_RADIO dumps. OK reyk@ mglocker@
2007-03-26Print the reason code of deauth and disassociation packets if in verbose mode.Claudio Jeker
This helps debugging issues with stations that fail to join a network. OK mglocker@, reyk@, jsg@
2007-03-16Recognise more vendor payloads (taken from IKE Scan)Tom Cosgrove
2007-02-23register is so 1980, plus knfTheo de Raadt
2007-01-08c should be u_char for printing option numbers. fix parameter requestKevin Steves
list option numbers >127 being negative. ok krw@
2007-01-02define bpf filters to match address and header fields in IEEE 802.11Reyk Floeter
wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@
2006-12-26Fix truncation check by directly comparing both values and don'tMoritz Jodeit
compare the unsigned value of the subtraction against <= 0. ok krw@ ray@
2006-12-26print icmpv6 inside security header (ah/esp).Jun-ichiro itojun Hagino
2006-12-13IPv6 passive OS fingerprinting.Jun-ichiro itojun Hagino
reuses IPv4 signature file (assuming that TCP code is shared among IPv4/v6). mcbride ok.
2006-12-09switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542).Jun-ichiro itojun Hagino
the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt.
2006-11-21try udpencap before ike; ok hshoexerMarkus Friedl
2006-11-21in octal, eight looks like 10... fix the STP_FLAGS_BITS definitionReyk Floeter
introduced with my previous commit.
2006-11-19add support for displaying Rapid Spanning Tree Protocol frames,Reyk Floeter
as specified in IEEE 802.1d-2004/802.1w. ok mcbride@
2006-09-19enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6)Christian Weisgerber
2006-08-24recognize xauth vendor payloadHans-Joerg Hoexer
ok ho markus
2006-08-240x00000c05 type specifies an Ethernet frame. Print the src MACKevin Steves
with -v or the frame in hex with -vv.
2006-08-20replace magic numbers, no binary change; prompted by deraadt@Kevin Steves
2006-08-20correct order of include filesTheo de Raadt
2006-08-15need to print leading space nowKevin Steves
2006-08-15stupid error: increment not decrement here.Kevin Steves
2006-07-02Recognise OpenBSD vendor IDHans-Joerg Hoexer
2006-06-23set the RSSI Max value in ath(4) and use the new RSSI radiotap headerReyk Floeter
instead of the old db signal header. also allow tcpdump and hostapd to print the new RSSI radiotap header values current/max rssi. ok damien@ jsg@
2006-06-16printing these version numbers in usage is ugly and uselessTheo de Raadt
2006-06-02Print the demotion indicator in the carp packet.Ryan Thomas McBride
ok mpf@
2006-06-02grok AESCTRHans-Joerg Hoexer
2006-06-01Pass the captured packet length in addition to the real packet lengthMoritz Jodeit
to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@
2006-05-31remove extra space in output; ok markus@ moritz@Kevin Steves