summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-07-19remove unused compat files, ok florian@Stuart Henderson
b64_{ntop,pton} remain for now, they are in libc as __b64_{ntop,pton} but to use this we either need to pull in resolv.h (which does "#define b64_ntop __b64_ntop") or access the __ versions directly (as done in ssh).
2010-04-15NSD v3.2.5Jakob Schlyter
2010-01-15NSD v3.2.4Jakob Schlyter
2015-07-19handle error returns from bufferevent_write()Bret Lambert
ok florian@
2015-07-19knock out "Ns Li" before colons - the Li was being ignored anyway, and iJason McIntyre
don;t think the colon needs marked up.
2015-07-19Match change to fatal()'s prototype in bgpdPhilip Guenther
ok benno@
2015-07-19For the completeness of HSTS, add the non-standard preload option.Reyk Floeter
OK florian@
2015-07-19clarify how inet|inet6 work in filtersSebastian Benoit
mofified version by jmc@, ok phessler@ and claudio@ is fine with it (but notes that the details are more complicated)
2015-07-19In tcpdump, show 11n HTOP primary and secondary channel numbers for 40MHz BSS,Stefan Sperling
instead of showing just the primary one and "above" or "below" for secondary. ok sthen
2015-07-19revert previousSebastian Benoit
Properly handle carp(4) interfaces in "backup" mode on start-up. Problem analyzed and fix provided by Johan Ymerson, thanks! ok claudio@, benno@ it breaks on systems without carp because iev_ospfe is not initiallized at the time kif_init() is called in main.
2015-07-19don't return failure for agentx messages with 0-length payloadsBret Lambert
allows snmpd to properly handle ping messages from agentx subagents ok reyk@
2015-07-18Make tcpdump show HTOP elements in 11n management frames; ok sthen@Stefan Sperling
2015-07-18give bgpd's fatal() varargs and use it to instrument bgpd fatal()Sebastian Benoit
calls to aid in debugging henning@ "makes sense to me", sthen@ "yes please", ok phessler@
2015-07-18remove XXX and handle error return from evbuffer_add()Bret Lambert
ok florian@
2015-07-18As libtls previously did not set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER,Alexander Bluhm
syslogd had to drop messages after tls_write() returned TLS_{READ,WRITE}_AGAIN. Now after libtls has been fixed, remove the workaround. Messages are stored in the libevent write buffer as we can safely do a realloc(3) now. OK reyk@
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER by default. This gives tls_write() a similar short write semantics as write(2) and a workaround in httpd to cope with the previous differences can be removed. Specifically, httpd can stop copying data into a local buffer that was used to keep it around for repeated writes. OK bluhm@
2015-07-18Handle short writes and TLS_{READ,WRITE}_AGAIN around tls_write().Alexander Bluhm
input doug@; OK beck@
2015-07-18prevent the tls constraint state machine from getting hung on STATE_INVALIDBrent Cook
patch from Mikolaj Kucharski ok deraadt@
2015-07-18Add groups before users.Antoine Jacoutot
2015-07-18Add an example about showing wireless frames with tcpdump(8).Stefan Sperling
Apparently sniffing wifi frames isn't a very popular addiction?!? Requested by David Hill. ok aja phessler mpi
2015-07-18Fix malformed packets when returning 'no such object/entry' errorsBret Lambert
for snmp requests ok reyk@
2015-07-18treat asprintf failure in REQUEST_URI case as a fatal errorBret Lambert
ok florian@
2015-07-18Use better names as examples for snmpv3 users. As explained to blambert@Reyk Floeter
2015-07-18Tag dynamic routes with a D so I do not get confused when seeing dynamicClaudio Jeker
routes because of PMTU in the show fib output.
2015-07-18Fix unbounded buffer growth. In the case of a slow client reading large files,Sebastian Benoit
we would consume large ammounts of memory. Found by Matthew Martin <matt DOT a DOT martin AT gmail DOT com> in httpd, fixed in httpd by florian@ feedback from florian, reyk and bluhm, ok bluhm, reyk
2015-07-18Properly handle carp(4) interfaces in "backup" mode on start-up.Martin Pieuchot
Problem analyzed and fix provided by Johan Ymerson, thanks! ok claudio@, benno@
2015-07-18Fix check against NULL which was reverted by accident in r1.56.Matthias Kilian
ok reyk@
2015-07-18tweak previous;Jason McIntyre
2015-07-18Allow to change the default media type globally or per-location,Reyk Floeter
eg. default type text/html. OK florian@
2015-07-18Implement HTTP Strict Transport Security (HSTS).Florian Obser
Input & OK reyk
2015-07-18Have tftpd provide a block of random data when clients request the fileRyan Thomas McBride
/etc/random.seed. This allows netbooted systems to inject entropy early in the kernel start. pxeboot requests it already, so no configuration or change is needed on the client side. ok deraadt@ beck@
2015-07-18replace _PATH_DEVNULL with "/dev/null", assume it will not moveBrent Cook
ok deraadt@ phessler@ claudio@
2015-07-18replace bzero with memsetBrent Cook
ok phessler@ deraadt@
2015-07-18Better track connected routes similar to bgpd/ospfd.Claudio Jeker
According to sthen@ this makes snmpd report routes more correct
2015-07-17Adjust server_file_modified_since() to our style. Please keep httpd clean.Reyk Floeter
2015-07-17Filter routes based on RTF_LLINFO and RTF_BROADCAST flags and use RTF_CONNECTEDClaudio Jeker
to properly track connected routes on -current.
2015-07-17According to RFC 3875 PATH_INFO should either contain a full path orReyk Floeter
be empty (""). It was not set at all when there is nothing to set which caused problems with some FastCGI applications (like Flask/Python through uWSGI). From hrkfdn via github
2015-07-17Like bgpd and ospfd filter routes by RTF_LLINFO and RTF_BROADCAST and useClaudio Jeker
the RTF_CONNECTED to know if a route is connected or not.
2015-07-17Similar to bgpd and ospfd skip broadcast (should not happen) and llinfoClaudio Jeker
routes also adjust the tracking of connected routes to the new way.
2015-07-17Do similar handling of connected routes and filtering of llinfo and broadcast.Claudio Jeker
With this the ospfd fib and the kernel routing table are better in sync.
2015-07-17Only filter RTF_LLINFO or RTF_BROADCAST routes out but not RTF_LOCAL onesClaudio Jeker
since we need those for loopback and point-to-point interfaces. OK mpi@
2015-07-17Make tcpdump decode the country element in 802.11 mgmt frames.Stefan Sperling
much help and ok zhuk@, ok sthen@ for an earlier version
2015-07-17return 0 when using "getall"Antoine Jacoutot
spotted by jasper@
2015-07-17Make tcpdump display BSS load information contained in 802.11 mgmt frames.Stefan Sperling
ok phessler sthen
2015-07-17merge conflictsStuart Henderson
2015-07-17update to NSD 4.1.3, ok florian@, also tested by bradStuart Henderson
2015-07-16add missing ELEM_CHECK for csa printing, spotted by / ok stsp@Stuart Henderson
2015-07-16When incrementing msg, decrement msglen. Otherwise too much dataAlexander Bluhm
could be written into the log file. OK benno@
2015-07-16ConsistencyAntoine Jacoutot
2015-07-16The return type of memset(3) is void. No need for a cast.Florian Obser
No object change.