Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-06-29 | make it easy to spot wich nfs version the traffic is. | Thordur I. Bjornsson | |
input & OK canacar@ | |||
2007-06-27 | When aligning buffers correctly handle the case where the | Can Erkin Acar | |
buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@ | |||
2007-06-21 | Print leading zeros in MAC addresses. Initial diff from Stanislav | Ray Lai | |
Kruchinin, idea to use ether_ntoa from Claudio Jeker. OK canacar, idea OK henning, jasper, and tedu. | |||
2007-06-14 | Print communities in a nicer format and include a missing well-known one. | Claudio Jeker | |
This is mostly from Stuart Henderson. OK canacar@ | |||
2007-06-14 | The External Route Tag for AS-External-LSAs can be an arbitrary 32bit | Reyk Floeter | |
value and doesn't need to be an IPv4 address. It is more like a vendor-specific field. as discussed with claudio after looking into rfc2328 | |||
2007-06-04 | do not inlcude ipx headers | Henning Brauer | |
2007-06-03 | unbreak 802.11 element parsing by using the TCHECK2 macro correctly | Reyk Floeter | |
ok claudio@ | |||
2007-06-01 | Move a useless warning to the only case that uses it (-f) from canacar@ | Todd T. Fries | |
ok beck@ | |||
2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
2007-05-31 | pf_state is no longer the same; modify pf_print_state.c to accept | Ryan Thomas McBride | |
pfsync_state (as in pfctl, but in network byte order). ok henning@ toby@ pyr@ | |||
2007-05-29 | Do not change snaplen when parsing a netflow packet | Can Erkin Acar | |
2007-05-27 | Additional truncation checks, mostly from tcpdump.org, | Can Erkin Acar | |
and remove some unused hlen assignments found by lint from Stuart Henderson, reviewed by me, ok henning@ claudio@ | |||
2007-05-06 | Don't fail hard on non RH0 routing headers. The calculation of the length | Claudio Jeker | |
of RH headers is always the same. Now tcpdump just prints the type, length and segleft headers for unknown headers. OK henning@ mcbride@ | |||
2007-05-06 | Fix the out of bounds check when parsing IPv6 headers. Fixes a SIGSEGV | Claudio Jeker | |
when parsing IPv6 headers with unknown or corrupted header options. OK henning@ mcbride@ | |||
2007-03-27 | Fix aligenment issues by using bcopy() and a local variable instead of the | Claudio Jeker | |
problematic *(u_intXX_t*)t casts. This fixes the bus errors I got on sparc64 while doing IEEE802_11_RADIO dumps. OK reyk@ mglocker@ | |||
2007-03-26 | Print the reason code of deauth and disassociation packets if in verbose mode. | Claudio Jeker | |
This helps debugging issues with stations that fail to join a network. OK mglocker@, reyk@, jsg@ | |||
2007-03-16 | Recognise more vendor payloads (taken from IKE Scan) | Tom Cosgrove | |
2007-02-23 | register is so 1980, plus knf | Theo de Raadt | |
2007-01-08 | c should be u_char for printing option numbers. fix parameter request | Kevin Steves | |
list option numbers >127 being negative. ok krw@ | |||
2007-01-02 | define bpf filters to match address and header fields in IEEE 802.11 | Reyk Floeter | |
wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@ | |||
2006-12-26 | Fix truncation check by directly comparing both values and don't | Moritz Jodeit | |
compare the unsigned value of the subtraction against <= 0. ok krw@ ray@ | |||
2006-12-26 | print icmpv6 inside security header (ah/esp). | Jun-ichiro itojun Hagino | |
2006-12-13 | IPv6 passive OS fingerprinting. | Jun-ichiro itojun Hagino | |
reuses IPv4 signature file (assuming that TCP code is shared among IPv4/v6). mcbride ok. | |||
2006-12-09 | switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542). | Jun-ichiro itojun Hagino | |
the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt. | |||
2006-11-21 | try udpencap before ike; ok hshoexer | Markus Friedl | |
2006-11-21 | in octal, eight looks like 10... fix the STP_FLAGS_BITS definition | Reyk Floeter | |
introduced with my previous commit. | |||
2006-11-19 | add support for displaying Rapid Spanning Tree Protocol frames, | Reyk Floeter | |
as specified in IEEE 802.1d-2004/802.1w. ok mcbride@ | |||
2006-09-19 | enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6) | Christian Weisgerber | |
2006-08-24 | recognize xauth vendor payload | Hans-Joerg Hoexer | |
ok ho markus | |||
2006-08-24 | 0x00000c05 type specifies an Ethernet frame. Print the src MAC | Kevin Steves | |
with -v or the frame in hex with -vv. | |||
2006-08-20 | replace magic numbers, no binary change; prompted by deraadt@ | Kevin Steves | |
2006-08-20 | correct order of include files | Theo de Raadt | |
2006-08-15 | need to print leading space now | Kevin Steves | |
2006-08-15 | stupid error: increment not decrement here. | Kevin Steves | |
2006-07-02 | Recognise OpenBSD vendor ID | Hans-Joerg Hoexer | |
2006-06-23 | set the RSSI Max value in ath(4) and use the new RSSI radiotap header | Reyk Floeter | |
instead of the old db signal header. also allow tcpdump and hostapd to print the new RSSI radiotap header values current/max rssi. ok damien@ jsg@ | |||
2006-06-16 | printing these version numbers in usage is ugly and useless | Theo de Raadt | |
2006-06-02 | Print the demotion indicator in the carp packet. | Ryan Thomas McBride | |
ok mpf@ | |||
2006-06-02 | grok AESCTR | Hans-Joerg Hoexer | |
2006-06-01 | Pass the captured packet length in addition to the real packet length | Moritz Jodeit | |
to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@ | |||
2006-05-31 | remove extra space in output; ok markus@ moritz@ | Kevin Steves | |
2006-05-29 | No need for return; at end of functions returning void. | Moritz Jodeit | |
2006-05-29 | Be more careful to not touch memory outside the | Moritz Jodeit | |
captured packet. Fixes some more crashes. ok canacar@ deraadt@ | |||
2006-05-29 | ANSI and whitespace. No binary change. | Moritz Jodeit | |
2006-05-29 | Check that struct p8022Hdr was completely captured, | Moritz Jodeit | |
before accessing it. With some cleanup from canacar@ ok canacar@ | |||
2006-05-29 | The end pointer to fn_print() could possibly point behind the captured | Moritz Jodeit | |
packet. So make sure, it uses "snapend" in that case. ok canacar@ | |||
2006-05-29 | Add proper bounds checks for the CDP and SSDP protocols by | Moritz Jodeit | |
grouping all LLCSAP_SNAP handling in one block. Also make sure, that enough of "struct llc" was captured, before accessing it. ok canacar@ | |||
2006-05-28 | Correct more bounds checks which can lead to crashes. | Moritz Jodeit | |
ok canacar@ deraadt@ | |||
2006-05-28 | Check that a complete struct llc was captured (not only 3 bytes), | Moritz Jodeit | |
because it is accessed later on. ok deraadt@ | |||
2006-05-27 | fix potential crash when using -v. ok canacar@ | Moritz Jodeit | |