summaryrefslogtreecommitdiff
path: root/usr.sbin/tcpdump
AgeCommit message (Collapse)Author
2004-07-28print th_seq for -vv; ok hshoexer, henningMarkus Friedl
2004-07-28add -ttttt (timestamp difference since the first packet); ok thierryMarkus Friedl
2004-07-14no \n in errx(3)Henning Brauer
From: Andrey Matveev <andrushock@korovino.net>
2004-07-07Include protocol name in printout.Ryan Thomas McBride
2004-06-23-tttt prints time between packets; ok deraadtMarkus Friedl
2004-06-23pretty print; ok ho@Markus Friedl
2004-06-22it is meaningless to try decoding non-first fragment.Jun-ichiro itojun Hagino
2004-06-22In draft-ietf-ipsec-nat-t-ike-01,02,03, NAT-D is payload 130. Rewrite a bitHakan Olsson
to understand payloads in the private range. Also match a few "well-known" vendor-IDs. markus@ "looks ok".
2004-06-22Recognize NAT-T Keepalive packets. markus@ ok.Hakan Olsson
2004-06-20- do not use __attribute__((volatile)) as its a synonym for __dead nowadaysAnil Madhavapeddy
- bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@
2004-06-18simplify license, ok niels matthieuHenning Brauer
2004-06-14Fix tcpslice ftp URL. From f5813 at sbcglobal dot net.Otto Moerbeek
2004-06-09Take better care of people down under living in X and a half hourOtto Moerbeek
timezones. ok canacar@
2004-05-21add DLT_PPP_ETHER support plus some fixes for pppoe_if_print().Brad Smith
ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de>
2004-05-15Naming consistency. From Alexander Guy. ok canacar@Otto Moerbeek
2004-05-13Unswap the vhid and advskew values.Ryan Thomas McBride
2004-05-08Pass the length of what was captured to pfsync_print, not the lengthRyan Thomas McBride
of the original packet. ok beck@
2004-05-06whitespace;Jason McIntyre
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
sequence numbers by taking advantage of the maximum 1KHz clock as an upperbound on the timestamp. Typically gains 10 to 18 bits of additional security against blind data insertion attacks. More if the TS Echo wasn't optional :-( Enabled with: scrub on !lo0 all reassemble tcp ok dhartmei@. documentation help from jmc@
2004-04-29a slight polishing...Theo de Raadt
2004-04-29unused variables; ok mcbrideTheo de Raadt
2004-04-28Fix fd leaks.Can Erkin Acar
Found by and ok deraadt@
2004-04-28Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.Ryan Thomas McBride
ok markus@ pb@
2004-04-23Silence getopt() in the priv process. ok canacar@ henning@Otto Moerbeek
2004-04-14Don't forget to move to STATE_RUN if the -w output file is stdout.Otto Moerbeek
ok canacar@
2004-04-13Cleanup and more careful payload parsing.Hans-Joerg Hoexer
ok ho@
2004-04-08only close fd if its valid, from Moritz Jodeit <moritz at jodeit.org>Anil Madhavapeddy
canacar@ ok
2004-04-08In error message, use saved errno, not current errno.Anil Madhavapeddy
From Moritz Jodeit <moritz at jodeit.org>
2004-04-07Fix bounds check for printing of ip6 options. Similar fix in tcpdumpOtto Moerbeek
3.8.1. From Greg Taleck <taleck at oz dot net>, with twist from me to keep diffablility.
2004-04-06Print DELETE payload contents. ok markus@.Hakan Olsson
2004-04-03- dont send junk err in parent_open_dump() if filename is NULLAnil Madhavapeddy
- dont close an invalid fd canacar@ ok
2004-03-22Add support for PFSYNC_ACT_BUS. (Bulk Update Status)Ryan Thomas McBride
ok deraadt@
2004-03-19Remove errant ';' from end of for() statement. deraadt@ okAaron Campbell
2004-03-15if (foo); ok aaron@Damien Miller
2004-03-14Check return code of chdir() after chroot(); noted by Joris Vink, slight modOtto Moerbeek
from avsm@. ok avsm@ hshoexer@ henning@
2004-03-12Check payload size more carefully when printing ike messages. Identified byHans-Joerg Hoexer
cloder@. ok ho@ otto@ cloder@
2004-02-20Print ifname in PFSYNC_ACT_CLR message if present.Ryan Thomas McBride
2004-02-15string.h for memsetJolan Luff
2004-02-14KNFHakan Olsson
2004-02-14Fix DOI select logic, which was broken for IKE vendors that sends non-zeroHakan Olsson
spi_size in their phase 1 proposals, such as some DLink VPN routers. Also replace u_char with u_int8_t. markus@, hshoexer@ ok.
2004-02-13Print protocol and service numbers correctly when -n switch is specified.Can Erkin Acar
reported by mcbride@ ok otto@ mcbride@
2004-02-10Make pfsync printing consistent with rest of tcpdump regarding newlines,Ryan Thomas McBride
pass -vv in to pf_print_state(), and print update count where appropriate.
2004-02-10Make pfsync work correctly with IP options on 64-bit alignmentRyan Thomas McBride
sensitive CPUs. Pointed out by deraadt@.
2004-02-05Don't print two confusing error messages, print a single clear one.Otto Moerbeek
ok deraadt@ hshoexer@ avsm@
2004-02-04Better error message when bpf device open fails.Otto Moerbeek
ok dhartmei@ brad@
2004-02-04Some more non-alignment problems resolved.Otto Moerbeek
ok deraadt@
2004-02-02Do away with non-aligned memory accesses.Otto Moerbeek
ok deraadt@ hshoexer@
2004-01-31general cleanup and better SIGCHLD handling from millert@Otto Moerbeek
ok canacar@
2004-01-28privilege separated tcpdump, joint work with otto@Can Erkin Acar
tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others go for it deraadt@
2004-01-22802.3X pretty printer (dead simple)Jason Wright
jakob@: "seems reasonable"