![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / usr.sbin / tcpdump
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.88 / (download) - annotate - [select for diffs], Tue May 21 05:00:48 2024 UTC (2 weeks, 4 days ago) by jsg
Branch: MAIN
CVS Tags: HEAD
Changes since 1.87: +2 -7 lines
Diff to previous 1.87 (colored)
remove prototypes with no matching function and externs with no var partly checked by millert@
Revision 1.87 / (download) - annotate - [select for diffs], Tue Feb 28 10:04:50 2023 UTC (15 months, 1 week ago) by claudio
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5,
OPENBSD_7_4_BASE,
OPENBSD_7_4,
OPENBSD_7_3_BASE,
OPENBSD_7_3
Changes since 1.86: +2 -3 lines
Diff to previous 1.86 (colored)
Adjust default_print() to not run over snapend. Kill default_print_unaligned() and adjust default_print() to also work with unaligned buffers. There is no need for two functions doing the same thing. Pass the right length in nsh_print to default_print(). Fixes on place that makes tcpdump crash. Reported by Peter J. Philipp (pjp at delphinusdns dot org) OK mbuhl@
Revision 1.86 / (download) - annotate - [select for diffs], Mon Aug 17 06:29:29 2020 UTC (3 years, 9 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE,
OPENBSD_7_2,
OPENBSD_7_1_BASE,
OPENBSD_7_1,
OPENBSD_7_0_BASE,
OPENBSD_7_0,
OPENBSD_6_9_BASE,
OPENBSD_6_9,
OPENBSD_6_8_BASE,
OPENBSD_6_8
Changes since 1.85: +4 -2 lines
Diff to previous 1.85 (colored)
add initial support for handling geneve packets. it's like vxlan, but different. the most interesting difference to vxlan is that the protocol adds support for adding optional metadata to packets (like nsh). this diff currently just skips that stuff and just handles the payload. for now.
Revision 1.85 / (download) - annotate - [select for diffs], Sun Jun 21 05:00:17 2020 UTC (3 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.84: +6 -2 lines
Diff to previous 1.84 (colored)
wire the wireguard packet printer into tcpdump. from Matt Dunwoodie and Jason A. Donenfeld
Revision 1.84 / (download) - annotate - [select for diffs], Wed Apr 15 20:19:25 2020 UTC (4 years, 1 month ago) by remi
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE,
OPENBSD_6_7
Changes since 1.83: +3 -2 lines
Diff to previous 1.83 (colored)
add support for printing RfC 2332 NBMA Next Hop Resolution Protocol (NHRP) ok dlg@
Revision 1.83 / (download) - annotate - [select for diffs], Tue Dec 3 01:43:33 2019 UTC (4 years, 6 months ago) by dlg
Branch: MAIN
Changes since 1.82: +3 -2 lines
Diff to previous 1.82 (colored)
add support for printing RFC 8300 Network Service Header (NSH) ok deraadt@
Revision 1.82 / (download) - annotate - [select for diffs], Mon Dec 2 22:07:20 2019 UTC (4 years, 6 months ago) by dlg
Branch: MAIN
Changes since 1.81: +3 -3 lines
Diff to previous 1.81 (colored)
rewrite dhcpv6 parsing so it follows the rfc, not an incompat draft. it looks like this code was using draft-ietf-dhc-dhcpv6-14 from 1999. there were 27 drafts, and by the time it got to draft 23 and the rfc it was significantly different. this code for draft 14 cannot handle actual dhcpv6 messages. im kind of surprised (disappointed?) that noone noticed before. i only noticed cos the code was segfaulting on sparc64, and when i tried to fix it the resulting messages looked nothing like what stock tcpdump produced. the main difference between the early drafts and what ended up in the rfc is that the base dhcpv6 messages in early drafts were large structure with a lot of fixed fields, while the rfc settled on a 4 byte header that contains a 1 byte message type and a 3 byte transaction id. the rest of the messages are built from dhcp options fields. this cuts all the old handling out, and fixes the fault in the options handling by using EXTRACT_16BITS to get at the code and length fields instead of using ntohs. dhcpv6 explicitly states that it does not align options, so this is necessary to avoid faults on strict alignment archs anyway. no options are pretty printed at the moment, you just get a numeric type, a length, and a hexdump of the value. this is still better than the garbage that the draft parsing produced. if someone is interested in making this easier to read, it would be a straightforward and well contained project to better handle option printing. ok deraadt@
Revision 1.81 / (download) - annotate - [select for diffs], Sun May 26 22:42:42 2019 UTC (5 years ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE,
OPENBSD_6_6
Changes since 1.80: +3 -2 lines
Diff to previous 1.80 (colored)
support -T erspan so arbitrary gre protocols can be seen as erspan this lets me configure a custom gre protocol on a dell s4810 or s5048 and see what's inside it when it lands on an openbsd box. ok lteo@
Revision 1.80 / (download) - annotate - [select for diffs], Fri Apr 5 00:57:59 2019 UTC (5 years, 2 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE,
OPENBSD_6_5
Changes since 1.79: +3 -4 lines
Diff to previous 1.79 (colored)
support printing cdp over gre and ppp ok deraadt@ mpi@ sthen@
Revision 1.79 / (download) - annotate - [select for diffs], Mon Oct 22 16:12:45 2018 UTC (5 years, 7 months ago) by kn
Branch: MAIN
Changes since 1.78: +2 -4 lines
Diff to previous 1.78 (colored)
Remove #ifdef INET6 There's not reason to build without IPv6 support, `-U INET6' builds were broken anyway. Fix an empty redefine for IPPROTO_IPV6 in print-ip.c while here. No object change on amd64 and sparc64 with clang, gcc compiles differently but behaviour stays the same. OK denis deraadt
Revision 1.78 / (download) - annotate - [select for diffs], Fri Jul 6 07:13:21 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE,
OPENBSD_6_4
Changes since 1.77: +4 -2 lines
Diff to previous 1.77 (colored)
add support for vxlan packets. I personally think vxlan looks suspiciously like gre, so I put the parser in print-gre.c
Revision 1.77 / (download) - annotate - [select for diffs], Fri Jul 6 06:43:19 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.76: +3 -2 lines
Diff to previous 1.76 (colored)
add "tftp" as a type to use with -T This forces UDP packets to be parsed as tftp messages, which is useful to see the DATA and ACK packets. They're usually on high ports which don't get matched by udp_print, which by default only handled tftp packets on port 69.
Revision 1.76 / (download) - annotate - [select for diffs], Fri Jul 6 06:35:46 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.75: +3 -2 lines
Diff to previous 1.75 (colored)
Add "mpls" as a type to use with -T This allows arbitrary UDP packets to be parsed as MPLS.
Revision 1.75 / (download) - annotate - [select for diffs], Fri Jul 6 06:18:03 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.74: +3 -2 lines
Diff to previous 1.74 (colored)
Add "gre" as a type to use with -T This allows arbitrary UDP packets to be parsed as GRE packets.
Revision 1.74 / (download) - annotate - [select for diffs], Fri Jul 6 05:47:22 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.73: +4 -4 lines
Diff to previous 1.73 (colored)
Rework UDP parsing, particularly around IP addresses. This originally started as trying to put a consistent space between the UDP header information and the payload parsing, but while doing that I noticed inconsistent IPv4 vs IPv6 handling. Apart from the default "srcip.srcport > dstip.dstpor" output, all the other places that IP addresses were printed assumed IPv4. It looks like it is possible that udp_print() can be called without an IP header, which made these blind IPv4 prints turn into NULL derefs. This fixes the problem above by only having a single place that prints the addresses out, and makes sure to get the difference between IPv4, IPv6 and no IP correct. This changes how the checksum is calculated. It incrementally builds the UDP checksum by feeding the IPv4 and v6 addresses in separately, then using common code for the rest of the pseudo header and actual payload. Lastly, this does make printing the space between the UDP header and its payload consistent. The UDP code is now responsible for adding a space after itself so the payload parsers don't have to. They got it wrong in some cases anyway, so this should be a lot more uniform. help and ok sthen@
Revision 1.73 / (download) - annotate - [select for diffs], Fri Jul 6 04:49:21 2018 UTC (5 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.72: +5 -3 lines
Diff to previous 1.72 (colored)
move the ip checksumming code into in_cksum.c this is part of a bigger change that refactors udp handling, but works on hosts of both endians. discussed at length with proctor@ ok sthen@
Revision 1.72 / (download) - annotate - [select for diffs], Sat Feb 10 10:00:32 2018 UTC (6 years, 3 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE,
OPENBSD_6_3
Changes since 1.71: +3 -3 lines
Diff to previous 1.71 (colored)
print etherip on ipv6.
Revision 1.71 / (download) - annotate - [select for diffs], Tue Feb 6 03:07:51 2018 UTC (6 years, 4 months ago) by dlg
Branch: MAIN
Changes since 1.70: +6 -3 lines
Diff to previous 1.70 (colored)
rework ppp, pptp, and gre parsing. this started cos i was looking at pptp, which came out like this: 23:52:00.197893 call 24 seq 7: gre-ppp-payload (gre encap) 23:52:00.198930 call 1 seq 7 ack 7: gre-ppp-payload (gre encap) now it looks like this: 23:52:00.197893 20.0.0.2 > 20.0.0.1: pptp callid 24 seq 7: 17.1.1.122 > 40.0.0.2: icmp: echo request 23:52:00.198930 20.0.0.1 > 20.0.0.2: pptp callid 1 seq 7 ack 7: 40.0.0.2 > 17.1.1.122: icmp: echo reply the big improvement in ppp parsing is it stops parsing based on what the ppp headers say, rather than what bytes have been captured. this also adds parsing of EAP packets. DLT_PPP_SERIAL is now recognised and printed. gre now prints the outer addresses always, not just when it's encapsulated by ipv6 or -v is passed to tcpdump. ok sthen@
Revision 1.70 / (download) - annotate - [select for diffs], Sat Feb 3 13:39:48 2018 UTC (6 years, 4 months ago) by mpi
Branch: MAIN
Changes since 1.69: +4 -2 lines
Diff to previous 1.69 (colored)
Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed in wireshark. ok deraadt@, dlg@
Revision 1.69 / (download) - annotate - [select for diffs], Wed Nov 16 13:47:27 2016 UTC (7 years, 6 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE,
OPENBSD_6_2,
OPENBSD_6_1_BASE,
OPENBSD_6_1
Changes since 1.68: +4 -3 lines
Diff to previous 1.68 (colored)
Add new DLT_OPENFLOW link-type to allow using tcpdump to debug switch(4), eg. tcpdump -y openflow -i switch0 Includes a minor bump for libpcap. Feedback and OK rzalamena@
Revision 1.68 / (download) - annotate - [select for diffs], Sat Oct 22 20:55:04 2016 UTC (7 years, 7 months ago) by rzalamena
Branch: MAIN
Changes since 1.67: +3 -2 lines
Diff to previous 1.67 (colored)
Teach tcpdump(8) how to read OpenFlow packets. This initial implementation supports the following message types: hello, error, echo request/reply, feature request/reply, set config, packet-in, packet-out, flow removed and flow mod. We currently only support printing this messages for OpenFlow 1.3.5, however it is possible to reuse some functions and get other versions working too. ok deraadt@
Revision 1.67 / (download) - annotate - [select for diffs], Mon Jul 11 00:27:50 2016 UTC (7 years, 11 months ago) by rzalamena
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE,
OPENBSD_6_0
Changes since 1.66: +3 -2 lines
Diff to previous 1.66 (colored)
Teach tcpdump to recognize MPLS pseudowire with control words. Added support to print encapsulated ethernet packets as well. "Looks good" deraadt@
Revision 1.66 / (download) - annotate - [select for diffs], Sun Nov 15 20:35:36 2015 UTC (8 years, 6 months ago) by mmcc
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE,
OPENBSD_5_9
Changes since 1.65: +3 -3 lines
Diff to previous 1.65 (colored)
Remove more register keywords. ok daniel@, discussed on hackers@
Revision 1.65 / (download) - annotate - [select for diffs], Sun Apr 5 17:02:57 2015 UTC (9 years, 2 months ago) by guenther
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE,
OPENBSD_5_8
Changes since 1.64: +2 -3 lines
Diff to previous 1.64 (colored)
Upstream has retired the gnuc.h header, so do so as well, killing a gcc 2.x reference. ok sthen@ jca@ deraadt@
Revision 1.64 / (download) - annotate - [select for diffs], Thu Nov 20 03:56:33 2014 UTC (9 years, 6 months ago) by jsg
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE,
OPENBSD_5_7
Changes since 1.63: +3 -3 lines
Diff to previous 1.63 (colored)
Make ip6_print() take an unsigned length matching ip_print() and others. Allows code deciding on a minimum length to memmove() to work as intended, preventing various crashes found with the afl fuzzer. Callers of ip6_print() should of course be fixed to provide sane lengths as well. ok deraadt@ djm@
Revision 1.63 / (download) - annotate - [select for diffs], Fri Jun 20 04:01:42 2014 UTC (9 years, 11 months ago) by lteo
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE,
OPENBSD_5_6
Changes since 1.62: +3 -2 lines
Diff to previous 1.62 (colored)
Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my upcoming commit which will fix and improve the display of bad checksums for the major protocols. ok henning@
Revision 1.62 / (download) - annotate - [select for diffs], Sat Jan 11 04:35:52 2014 UTC (10 years, 4 months ago) by lteo
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE,
OPENBSD_5_5
Changes since 1.61: +3 -3 lines
Diff to previous 1.61 (colored)
Make icmp_print() accept the length variable, which is the length of the
packet without the IP header. This is needed by the next commit that
will allow tcpdump to detect bad ICMP checksums.
Related functions like {tcp,udp,icmp6}_print() already accept this
length variable, so this change makes icmp_print() consistent with
them as well.
This commit makes no functional change to tcpdump itself.
OK florian@
Revision 1.61 / (download) - annotate - [select for diffs], Tue Apr 6 16:01:57 2010 UTC (14 years, 2 months ago) by jsg
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE,
OPENBSD_5_4,
OPENBSD_5_3_BASE,
OPENBSD_5_3,
OPENBSD_5_2_BASE,
OPENBSD_5_2,
OPENBSD_5_1_BASE,
OPENBSD_5_1,
OPENBSD_5_0_BASE,
OPENBSD_5_0,
OPENBSD_4_9_BASE,
OPENBSD_4_9,
OPENBSD_4_8_BASE,
OPENBSD_4_8
Changes since 1.60: +3 -3 lines
Diff to previous 1.60 (colored)
Add support for decoding MLDv2 initially from tcpdump.org via FreeBSD, cleaned up to be less gross after some suggestions from stsp. ok stsp@
Revision 1.60 / (download) - annotate - [select for diffs], Tue Jan 12 06:10:33 2010 UTC (14 years, 4 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE,
OPENBSD_4_7
Changes since 1.59: +3 -3 lines
Diff to previous 1.59 (colored)
Add TCP/UDP checksum display for v6 and clean up the checksum calculation. Mostly from tcpdump.org; ok jsing@
Revision 1.59 / (download) - annotate - [select for diffs], Wed Nov 4 09:43:11 2009 UTC (14 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.58: +2 -1 lines
Diff to previous 1.58 (colored)
Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP), used to carry GPRS data over IP for GSM and UMTS networks. The decoder understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however at this stage not all TLV fields are fully decoded. This work has been kindly sponsored by SystemNet AS (www.systemnet.no). "commit" deraadt@
Revision 1.58 / (download) - annotate - [select for diffs], Sat Feb 14 11:18:56 2009 UTC (15 years, 3 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE,
OPENBSD_4_6,
OPENBSD_4_5_BASE,
OPENBSD_4_5
Changes since 1.57: +5 -10 lines
Diff to previous 1.57 (colored)
increase the default snaplen to 116, allows capture of pflog+ipv6+tcp without knobs. ok djm, deraadt.
Revision 1.57 / (download) - annotate - [select for diffs], Thu Oct 16 12:57:01 2008 UTC (15 years, 7 months ago) by mpf
Branch: MAIN
Changes since 1.56: +3 -2 lines
Diff to previous 1.56 (colored)
Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad. Code from tcpdump.org with cleanup and shrinkage by me. Help and ideas for extra sanity checks from canacar@ OK canacar@
Revision 1.56 / (download) - annotate - [select for diffs], Sun Oct 7 16:41:05 2007 UTC (16 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE,
OPENBSD_4_4,
OPENBSD_4_3_BASE,
OPENBSD_4_3
Changes since 1.55: +2 -2 lines
Diff to previous 1.55 (colored)
trash $Header goo which is just annoying; 5595
Revision 1.55 / (download) - annotate - [select for diffs], Tue Aug 28 12:52:06 2007 UTC (16 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.54: +4 -2 lines
Diff to previous 1.54 (colored)
add -I option for printing the interfaces; ok hshoexer, henning, mcbridge (some time ago)
Revision 1.54 / (download) - annotate - [select for diffs], Thu Jun 1 17:18:38 2006 UTC (18 years ago) by moritz
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE,
OPENBSD_4_2,
OPENBSD_4_1_BASE,
OPENBSD_4_1,
OPENBSD_4_0_BASE,
OPENBSD_4_0
Changes since 1.53: +3 -3 lines
Diff to previous 1.53 (colored)
Pass the captured packet length in addition to the real packet length to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@
Revision 1.53 / (download) - annotate - [select for diffs], Tue May 23 14:20:19 2006 UTC (18 years ago) by stevesk
Branch: MAIN
Changes since 1.52: +3 -2 lines
Diff to previous 1.52 (colored)
add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@
Revision 1.52 / (download) - annotate - [select for diffs], Tue Mar 28 15:48:33 2006 UTC (18 years, 2 months ago) by reyk
Branch: MAIN
Changes since 1.51: +3 -2 lines
Diff to previous 1.51 (colored)
Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery Protocol. LLDP is used by some switch vendors as a replacement for the non-free Cizzco Discovery Protocol (CDP) due to some Cisco patentry... ok brad@
Revision 1.51 / (download) - annotate - [select for diffs], Tue Nov 22 11:36:12 2005 UTC (18 years, 6 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE,
OPENBSD_3_9
Changes since 1.50: +3 -2 lines
Diff to previous 1.50 (colored)
add printer for IAPP and hostapd(8) messages ok canacar@, tested by aanriot@ and others
Revision 1.50 / (download) - annotate - [select for diffs], Sat Oct 8 19:45:15 2005 UTC (18 years, 8 months ago) by canacar
Branch: MAIN
Changes since 1.49: +3 -2 lines
Diff to previous 1.49 (colored)
Add a best effort mpls decoder. From Jason L. Wright. Since the encapsulated protocol information is not always available in the MPLS tag stack. The decoder attempts to guess the protocol. ok brad@
Revision 1.49 / (download) - annotate - [select for diffs], Sat May 28 09:01:52 2005 UTC (19 years ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE,
OPENBSD_3_8
Changes since 1.48: +4 -3 lines
Diff to previous 1.48 (colored)
support decapsulation of 802.11 data frames ok canacar@
Revision 1.48 / (download) - annotate - [select for diffs], Mon Mar 7 16:13:38 2005 UTC (19 years, 3 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE,
OPENBSD_3_7
Changes since 1.47: +8 -2 lines
Diff to previous 1.47 (colored)
add a printer for 802.11 and for additional radiotap headers, use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver. ok canacar@
Revision 1.47 / (download) - annotate - [select for diffs], Thu Sep 16 11:29:51 2004 UTC (19 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.46: +3 -2 lines
Diff to previous 1.46 (colored)
add -T tcp to enforce interpretation as TCP
Revision 1.46 / (download) - annotate - [select for diffs], Sun Jun 20 17:51:55 2004 UTC (19 years, 11 months ago) by avsm
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE,
OPENBSD_3_6
Changes since 1.45: +5 -4 lines
Diff to previous 1.45 (colored)
- do not use __attribute__((volatile)) as its a synonym for __dead nowadays - bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@
Revision 1.45 / (download) - annotate - [select for diffs], Fri May 21 05:48:50 2004 UTC (20 years ago) by brad
Branch: MAIN
Changes since 1.44: +4 -2 lines
Diff to previous 1.44 (colored)
add DLT_PPP_ETHER support plus some fixes for pppoe_if_print(). ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de>
Revision 1.44 / (download) - annotate - [select for diffs], Wed Apr 28 02:17:03 2004 UTC (20 years, 1 month ago) by mcbride
Branch: MAIN
Changes since 1.43: +4 -2 lines
Diff to previous 1.43 (colored)
Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp. ok markus@ pb@
Revision 1.43 / (download) - annotate - [select for diffs], Wed Jan 28 19:44:55 2004 UTC (20 years, 4 months ago) by canacar
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE,
OPENBSD_3_5
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)
privilege separated tcpdump, joint work with otto@ tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others go for it deraadt@
Revision 1.42 / (download) - annotate - [select for diffs], Sun Jan 18 15:33:30 2004 UTC (20 years, 4 months ago) by otto
Branch: MAIN
Changes since 1.41: +3 -3 lines
Diff to previous 1.41 (colored)
Sync print-domain with tcpdump.org; avoids tcpdump barfing on bogus DNS traffic. ok canacar@ jakob@
Revision 1.41 / (download) - annotate - [select for diffs], Mon Dec 15 07:11:31 2003 UTC (20 years, 5 months ago) by mcbride
Branch: MAIN
Changes since 1.40: +3 -2 lines
Diff to previous 1.40 (colored)
Add initial support for pf state synchronization over the network. Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@
Revision 1.40 / (download) - annotate - [select for diffs], Thu Aug 21 19:14:23 2003 UTC (20 years, 9 months ago) by frantzen
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE,
OPENBSD_3_4
Changes since 1.39: +3 -2 lines
Diff to previous 1.39 (colored)
print the operating system of TCP SYN packets with the -o option
Revision 1.39 / (download) - annotate - [select for diffs], Thu Jun 26 21:36:39 2003 UTC (20 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.38: +3 -2 lines
Diff to previous 1.38 (colored)
ansi and protos
Revision 1.38 / (download) - annotate - [select for diffs], Wed Jun 11 20:58:45 2003 UTC (21 years ago) by markus
Branch: MAIN
Changes since 1.37: +3 -2 lines
Diff to previous 1.37 (colored)
support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@
Revision 1.37 / (download) - annotate - [select for diffs], Wed May 14 08:50:37 2003 UTC (21 years, 1 month ago) by canacar
Branch: MAIN
Changes since 1.36: +4 -2 lines
Diff to previous 1.36 (colored)
libpcap and tcpdump now understand the new pflog datalink type. old datalink type is still recognized. ok henning@ dhartmei@ frantzen@
Revision 1.36 / (download) - annotate - [select for diffs], Thu Feb 20 23:39:20 2003 UTC (21 years, 3 months ago) by jason
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE,
OPENBSD_3_3
Changes since 1.35: +3 -2 lines
Diff to previous 1.35 (colored)
add printing of ipcomp, and while in the neighborhood, make ah/esp actually check the length of the data
Revision 1.35 / (download) - annotate - [select for diffs], Sat Nov 30 13:56:23 2002 UTC (21 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.34: +4 -2 lines
Diff to previous 1.34 (colored)
pfsync support; deraadt@ ok
Revision 1.34 / (download) - annotate - [select for diffs], Sat Nov 30 00:20:46 2002 UTC (21 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.33: +0 -2 lines
Diff to previous 1.33 (colored)
stop breaking the damn tree mickey
Revision 1.33 / (download) - annotate - [select for diffs], Fri Nov 29 18:27:54 2002 UTC (21 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.32: +4 -2 lines
Diff to previous 1.32 (colored)
tcpdump support for pfsync; henning@ ok
Revision 1.31.2.1 / (download) - annotate - [select for diffs], Mon Jul 15 13:45:15 2002 UTC (21 years, 10 months ago) by jason
Branch: OPENBSD_3_1
Changes since 1.31: +12 -4 lines
Diff to previous 1.31 (colored) next main 1.32 (colored)
Pull in patch from current: Fix (pvalchev): In TTEST2(), check to make sure the "l" argument isn't so large that "snapend - l" underflows; this fixes a buffer overflow with malformed NFS packets, and may fix other buffer overflows with malformed packets. From tcpdump CVS via fenner@FreeBSD
Revision 1.28.2.1 / (download) - annotate - [select for diffs], Mon Jul 15 11:34:45 2002 UTC (21 years, 10 months ago) by miod
Branch: OPENBSD_3_0
Changes since 1.28: +12 -4 lines
Diff to previous 1.28 (colored) next main 1.29 (colored)
MFC, requested by pvalchev@: In TTEST2(), check to make sure the "l" argument isn't so large that "snapend - l" underflows; this fixes a buffer overflow with malformed NFS packets, and may fix other buffer overflows with malformed packets. From tcpdump CVS via fenner@FreeBSD
Revision 1.32 / (download) - annotate - [select for diffs], Fri Jul 12 23:18:12 2002 UTC (21 years, 11 months ago) by pvalchev
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE,
OPENBSD_3_2
Changes since 1.31: +12 -4 lines
Diff to previous 1.31 (colored)
In TTEST2(), check to make sure the "l" argument isn't so large that "snapend - l" underflows; this fixes a buffer overflow with malformed NFS packets, and may fix other buffer overflows with malformed packets. From tcpdump CVS via fenner@FreeBSD
Revision 1.31 / (download) - annotate - [select for diffs], Tue Feb 19 19:39:40 2002 UTC (22 years, 3 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE
Branch point for: OPENBSD_3_1
Changes since 1.30: +2 -8 lines
Diff to previous 1.30 (colored)
We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft.
Revision 1.30 / (download) - annotate - [select for diffs], Wed Jan 23 23:32:20 2002 UTC (22 years, 4 months ago) by mickey
Branch: MAIN
Changes since 1.29: +3 -2 lines
Diff to previous 1.29 (colored)
proper handling for DLT_NULL and DLT_LOOP (header byte swapping); pointed out and tested by Alexander Yurchenko <grange@rt.mipt.ru>
Revision 1.29 / (download) - annotate - [select for diffs], Tue Jan 22 18:33:07 2002 UTC (22 years, 4 months ago) by mickey
Branch: MAIN
Changes since 1.28: +3 -2 lines
Diff to previous 1.28 (colored)
HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org
Revision 1.28 / (download) - annotate - [select for diffs], Tue Oct 2 18:04:35 2001 UTC (22 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE
Branch point for: OPENBSD_3_0
Changes since 1.27: +4 -3 lines
Diff to previous 1.27 (colored)
change timeval to bpf_timeval; 32 bit in size, permitting much greater portability
Revision 1.27 / (download) - annotate - [select for diffs], Mon Jun 25 23:05:17 2001 UTC (22 years, 11 months ago) by provos
Branch: MAIN
Changes since 1.26: +4 -2 lines
Diff to previous 1.26 (colored)
interpret DLT_PFLOG
Revision 1.26 / (download) - annotate - [select for diffs], Mon Apr 9 21:44:40 2001 UTC (23 years, 2 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE,
OPENBSD_2_9
Changes since 1.25: +3 -3 lines
Diff to previous 1.25 (colored)
Extend IKE knowledge so we can parse the rest (normally encrypted parts) of the IKE negotiation. Useful for isakmpd's new -L and -l options. Also some cleanup. (angelos@, niklas@ ok)
Revision 1.25 / (download) - annotate - [select for diffs], Sun Apr 8 22:45:53 2001 UTC (23 years, 2 months ago) by jakob
Branch: MAIN
Changes since 1.24: +4 -2 lines
Diff to previous 1.24 (colored)
add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org
Revision 1.24 / (download) - annotate - [select for diffs], Tue Mar 6 16:42:08 2001 UTC (23 years, 3 months ago) by jakob
Branch: MAIN
Changes since 1.23: +3 -2 lines
Diff to previous 1.23 (colored)
add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@
Revision 1.23 / (download) - annotate - [select for diffs], Mon Mar 5 22:34:00 2001 UTC (23 years, 3 months ago) by jakob
Branch: MAIN
Changes since 1.22: +5 -2 lines
Diff to previous 1.22 (colored)
add relts_print, safeputs and safeputchar
Revision 1.22 / (download) - annotate - [select for diffs], Mon Feb 5 15:18:47 2001 UTC (23 years, 4 months ago) by jason
Branch: MAIN
Changes since 1.21: +4 -2 lines
Diff to previous 1.21 (colored)
etherip printing code... handles draft (v2) and current (v3)
Revision 1.21 / (download) - annotate - [select for diffs], Thu Dec 7 22:52:00 2000 UTC (23 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (colored)
timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org
Revision 1.20 / (download) - annotate - [select for diffs], Thu Dec 7 22:36:45 2000 UTC (23 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.19: +9 -2 lines
Diff to previous 1.19 (colored)
smb printing; from Andrew Tridgell; via tcpdump.org
Revision 1.19 / (download) - annotate - [select for diffs], Thu Dec 7 21:52:38 2000 UTC (23 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.18: +5 -2 lines
Diff to previous 1.18 (colored)
add vrrp printing; from tcpdump.org
Revision 1.18 / (download) - annotate - [select for diffs], Thu Oct 19 16:31:42 2000 UTC (23 years, 7 months ago) by jason
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE,
OPENBSD_2_8
Changes since 1.17: +3 -2 lines
Diff to previous 1.17 (colored)
code for printing bridge spanning tree packets also fix a bug where llc encoded frames are hex dumped twice when -x is used
Revision 1.17 / (download) - annotate - [select for diffs], Tue Oct 3 14:21:56 2000 UTC (23 years, 8 months ago) by ho
Branch: MAIN
Changes since 1.16: +7 -1 lines
Diff to previous 1.16 (colored)
Compile with -Wall. Add $OpenBSD$. (jakob@ ok)
Revision 1.16 / (download) - annotate - [select for diffs], Wed Apr 26 21:35:38 2000 UTC (24 years, 1 month ago) by jakob
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE,
OPENBSD_2_7
Changes since 1.15: +18 -1 lines
Diff to previous 1.15 (colored)
INET6 DHCP/BOOTP tcp & udp checksum detection numerous bugfixes
Revision 1.15 / (download) - annotate - [select for diffs], Sun Jan 16 11:43:57 2000 UTC (24 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.14: +2 -1 lines
Diff to previous 1.14 (colored)
BGP support (from KAME/WIDE). INET6 parts not done yet.
Revision 1.14 / (download) - annotate - [select for diffs], Sun Jan 16 11:20:14 2000 UTC (24 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.13: +2 -1 lines
Diff to previous 1.13 (colored)
Mobile IP support (from KAME/NetBSD)
Revision 1.13 / (download) - annotate - [select for diffs], Sun Jan 16 10:54:58 2000 UTC (24 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.12: +2 -1 lines
Diff to previous 1.12 (colored)
L2TP support (from KAME)
Revision 1.12 / (download) - annotate - [select for diffs], Thu Sep 16 19:59:01 1999 UTC (24 years, 8 months ago) by brad
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE,
OPENBSD_2_6
Changes since 1.11: +9 -3 lines
Diff to previous 1.11 (colored)
delcare esp_print and radius_print
Revision 1.11 / (download) - annotate - [select for diffs], Wed Jul 28 20:41:35 1999 UTC (24 years, 10 months ago) by jakob
Branch: MAIN
Changes since 1.10: +4 -4 lines
Diff to previous 1.10 (colored)
- Merge some changes from tcpdump 3.4 -a flag; attempt to convert network and broadcast addresses to names Improved signal handling Miscellaneous fixes and typos OSPF MD5 authentication support - -X flag; emacs-hexl print (including ascii) - Add ECN bits to TCP and IP headers - IKE & IPsec (ESP & AH) support OK deraadt@
Revision 1.10 / (download) - annotate - [select for diffs], Tue Sep 22 22:03:00 1998 UTC (25 years, 8 months ago) by provos
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE,
OPENBSD_2_5,
OPENBSD_2_4_BASE,
OPENBSD_2_4
Changes since 1.9: +2 -1 lines
Diff to previous 1.9 (colored)
make tcpdump aware of SACK (RFC 2018), loosely based on a patch from hari@cs.berkeley.edu.
Revision 1.9 / (download) - annotate - [select for diffs], Thu Jun 25 19:42:45 1998 UTC (25 years, 11 months ago) by mickey
Branch: MAIN
Changes since 1.8: +2 -1 lines
Diff to previous 1.8 (colored)
add cisco netflow proto printing; not tested w/ version 5, but should work anyways
Revision 1.8 / (download) - annotate - [select for diffs], Thu Jun 11 00:01:23 1998 UTC (26 years ago) by provos
Branch: MAIN
Changes since 1.7: +2 -1 lines
Diff to previous 1.7 (colored)
handle IPSec processed packets (DLT_ENC) in libpcap, display them with tcpdump + additional info (SPI + which type of transforms where passed).
Revision 1.7 / (download) - annotate - [select for diffs], Fri Jul 25 20:12:20 1997 UTC (26 years, 10 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_2_3_BASE,
OPENBSD_2_3,
OPENBSD_2_2_BASE,
OPENBSD_2_2
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)
#if __STDC__ --> #ifdef __STDC__
Revision 1.6 / (download) - annotate - [select for diffs], Wed Jul 23 02:59:01 1997 UTC (26 years, 10 months ago) by denny
Branch: MAIN
Changes since 1.5: +2 -1 lines
Diff to previous 1.5 (colored)
Better handling for AppleTalk, and netatalk in particular. Handle native Ethertalk phase 1 & 2 as well as the localtalk encapsulation a la Kinetics FastPath previously handled.
Revision 1.5 / (download) - annotate - [select for diffs], Thu Dec 12 16:22:53 1996 UTC (27 years, 6 months ago) by bitblt
Branch: MAIN
CVS Tags: OPENBSD_2_1_BASE,
OPENBSD_2_1
Changes since 1.4: +99 -96 lines
Diff to previous 1.4 (colored)
*** empty log message ***
Revision 1.4 / (download) - annotate - [select for diffs], Sat Jul 13 11:01:10 1996 UTC (27 years, 11 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_2_0_BASE,
OPENBSD_2_0
Changes since 1.3: +77 -30 lines
Diff to previous 1.3 (colored)
it is 3.2 now.
Revision 1.3 / (download) - annotate - [select for diffs], Mon Jun 10 07:47:18 1996 UTC (28 years ago) by deraadt
Branch: MAIN
Changes since 1.2: +1 -6 lines
Diff to previous 1.2 (colored)
sync to latest
Revision 1.2 / (download) - annotate - [select for diffs], Mon Mar 4 15:59:04 1996 UTC (28 years, 3 months ago) by mickey
Branch: MAIN
Changes since 1.1: +6 -0 lines
Diff to previous 1.1 (colored)
Updating to the latest LBL release. Sun's SKIP support added.
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Wed Oct 18 08:48:23 1995 UTC (28 years, 7 months ago) by deraadt
CVS Tags: netbsd_1_1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)
initial import of NetBSD tree
Revision 1.1 / (download) - annotate - [select for diffs], Wed Oct 18 08:48:23 1995 UTC (28 years, 7 months ago) by deraadt
Branch: MAIN
Initial revision