OpenBSD CVS

CVS log for src/usr.sbin/tcpdump/tcpdump.c


[BACK] Up to [local] / src / usr.sbin / tcpdump

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.99 / (download) - annotate - [select for diffs], Fri Mar 3 13:03:29 2023 UTC (15 months ago) by claudio
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, HEAD
Changes since 1.98: +4 -3 lines
Diff to previous 1.98 (colored)

Use EXTRACT_16BITS() in default_print() instead of handrolling it.
OK bluhm@

Revision 1.98 / (download) - annotate - [select for diffs], Tue Feb 28 10:04:50 2023 UTC (15 months ago) by claudio
Branch: MAIN
Changes since 1.97: +11 -40 lines
Diff to previous 1.97 (colored)

Adjust default_print() to not run over snapend.

Kill default_print_unaligned() and adjust default_print() to also work
with unaligned buffers. There is no need for two functions doing the
same thing.

Pass the right length in nsh_print to default_print(). Fixes on place
that makes tcpdump crash.
Reported by Peter J. Philipp (pjp at delphinusdns dot org)
OK mbuhl@

Revision 1.97 / (download) - annotate - [select for diffs], Sat Jul 9 23:24:44 2022 UTC (22 months, 3 weeks ago) by halex
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.96: +2 -2 lines
Diff to previous 1.96 (colored)

Explicitly set the default value for Bflag to BPF_FILDROP_PASS

Technically a nop since the value of the initial constant is 0 anyway
but we should not rely on that.

Revision 1.96 / (download) - annotate - [select for diffs], Mon Jan 31 19:08:29 2022 UTC (2 years, 4 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.95: +2 -3 lines
Diff to previous 1.95 (colored)

tcpdump: fix -Wunused-but-set-variable warning

All "infile" handling was moved into priv_exec() when tcpdump was
privilege separated.  The options are scanned both in priv_exec()
and in main(), so the empty case needs to remain in the latter.

ok deraadt@

Revision 1.95 / (download) - annotate - [select for diffs], Fri Dec 4 11:36:13 2020 UTC (3 years, 5 months ago) by mvs
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.94: +3 -11 lines
Diff to previous 1.94 (colored)

Don't link tcpdump(8) with libl and remove reference to `yydebug'.

From Martin Vahlensieck.

Revision 1.94 / (download) - annotate - [select for diffs], Mon Aug 17 06:29:29 2020 UTC (3 years, 9 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.93: +3 -1 lines
Diff to previous 1.93 (colored)

add initial support for handling geneve packets.

it's like vxlan, but different. the most interesting difference to
vxlan is that the protocol adds support for adding optional metadata
to packets (like nsh). this diff currently just skips that stuff
and just handles the payload. for now.

Revision 1.93 / (download) - annotate - [select for diffs], Sun Jun 21 05:00:18 2020 UTC (3 years, 11 months ago) by dlg
Branch: MAIN
Changes since 1.92: +3 -1 lines
Diff to previous 1.92 (colored)

wire the wireguard packet printer into tcpdump.

from Matt Dunwoodie and Jason A. Donenfeld

Revision 1.92 / (download) - annotate - [select for diffs], Fri Jan 24 22:46:37 2020 UTC (4 years, 4 months ago) by procter
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.91: +9 -9 lines
Diff to previous 1.91 (colored)

- (void)printf() -> printf(); the cast adds clutter for little value.
- fprintf(stdout, ...) -> printf()
- fputs(x, stdout) -> printf(); for consistency.
fputs is twice as fast on atom x5-Z8300@1.44GHz but Amdahl sees a pure printf
tcpdump only 2% slower than a pure fputs (for constant strings) tcpdump
to /dev/null across a 20MB/~170k packet pcap file.

ok dlg@ for fputs and ok tedu@ krw@ deraadt@ a2k19 for the rest

Revision 1.91 / (download) - annotate - [select for diffs], Fri Jun 28 13:32:51 2019 UTC (4 years, 11 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.90: +2 -2 lines
Diff to previous 1.90 (colored)

When system calls indicate an error they return -1, not some arbitrary
value < 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

Revision 1.90 / (download) - annotate - [select for diffs], Sun May 26 22:42:42 2019 UTC (5 years ago) by dlg
Branch: MAIN
Changes since 1.89: +3 -1 lines
Diff to previous 1.89 (colored)

support -T erspan so arbitrary gre protocols can be seen as erspan

this lets me configure a custom gre protocol on a dell s4810 or
s5048 and see what's inside it when it lands on an openbsd box.

ok lteo@

Revision 1.89 / (download) - annotate - [select for diffs], Mon Mar 18 00:09:22 2019 UTC (5 years, 2 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.88: +18 -4 lines
Diff to previous 1.88 (colored)

support configuring BIOCSFILDROP with tcpdump.

this allows tcpdump to be used a quick and dirty firewall. it also
looks like an amazing foot-gun, so be careful.

for example `tcpdump -B drop -i ix1 udp and port 7` lets you
completely drop discard packets in the hardware interrupt handler.

ok sthen@ mikeb@ claudio@ visa@

Revision 1.88 / (download) - annotate - [select for diffs], Thu Nov 8 14:06:09 2018 UTC (5 years, 6 months ago) by brynet
Branch: MAIN
Changes since 1.87: +3 -3 lines
Diff to previous 1.87 (colored)

Hoist opening pf.os(5) fingerprints '-o' earlier so that it doesn't
need to be unveiled at runtime in the monitor process.

Cleanup the unused internal privsep "getlines" code, we now explictly
fdpass the OS fingerprints file instead.

ok mestre@ kn@

Revision 1.87 / (download) - annotate - [select for diffs], Fri Jul 6 07:13:21 2018 UTC (5 years, 10 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.86: +3 -1 lines
Diff to previous 1.86 (colored)

add support for vxlan packets.

I personally think vxlan looks suspiciously like gre, so I put the
parser in print-gre.c

Revision 1.86 / (download) - annotate - [select for diffs], Fri Jul 6 06:43:19 2018 UTC (5 years, 10 months ago) by dlg
Branch: MAIN
Changes since 1.85: +3 -1 lines
Diff to previous 1.85 (colored)

add "tftp" as a type to use with -T

This forces UDP packets to be parsed as tftp messages, which is useful
to see the DATA and ACK packets. They're usually on high ports which don't
get matched by udp_print, which by default only handled tftp packets on
port 69.

Revision 1.85 / (download) - annotate - [select for diffs], Fri Jul 6 06:35:46 2018 UTC (5 years, 10 months ago) by dlg
Branch: MAIN
Changes since 1.84: +3 -1 lines
Diff to previous 1.84 (colored)

Add "mpls" as a type to use with -T

This allows arbitrary UDP packets to be parsed as MPLS.

Revision 1.84 / (download) - annotate - [select for diffs], Fri Jul 6 06:18:03 2018 UTC (5 years, 10 months ago) by dlg
Branch: MAIN
Changes since 1.83: +3 -1 lines
Diff to previous 1.83 (colored)

Add "gre" as a type to use with -T

This allows arbitrary UDP packets to be parsed as GRE packets.

Revision 1.83 / (download) - annotate - [select for diffs], Tue Feb 6 03:07:51 2018 UTC (6 years, 3 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.82: +2 -1 lines
Diff to previous 1.82 (colored)

rework ppp, pptp, and gre parsing.

this started cos i was looking at pptp, which came out like this:

23:52:00.197893  call 24 seq 7: gre-ppp-payload (gre encap)
23:52:00.198930  call 1 seq 7 ack 7: gre-ppp-payload (gre encap)

now it looks like this:

23:52:00.197893 20.0.0.2 > 20.0.0.1: pptp callid 24 seq 7: 17.1.1.122 > 40.0.0.2: icmp: echo request
23:52:00.198930 20.0.0.1 > 20.0.0.2: pptp callid 1 seq 7 ack 7: 40.0.0.2 > 17.1.1.122: icmp: echo reply

the big improvement in ppp parsing is it stops parsing based on
what the ppp headers say, rather than what bytes have been captured.
this also adds parsing of EAP packets.

DLT_PPP_SERIAL is now recognised and printed. gre now prints the
outer addresses always, not just when it's encapsulated by ipv6 or
-v is passed to tcpdump.

ok sthen@

Revision 1.82 / (download) - annotate - [select for diffs], Sat Feb 3 13:39:48 2018 UTC (6 years, 3 months ago) by mpi
Branch: MAIN
Changes since 1.81: +2 -1 lines
Diff to previous 1.81 (colored)

Simple USBPcap parser for tcpdump(8).  Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Revision 1.81 / (download) - annotate - [select for diffs], Fri Dec 8 17:04:15 2017 UTC (6 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.80: +5 -9 lines
Diff to previous 1.80 (colored)

Convert snprintf+write into dprintf.  It is simply easier to read, and
provides retry on short-write file descriptors.
ok florian, previous versions seen by millert

Revision 1.80 / (download) - annotate - [select for diffs], Fri Sep 8 19:10:57 2017 UTC (6 years, 8 months ago) by brynet
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.79: +5 -1 lines
Diff to previous 1.79 (colored)

fork+exec model for tcpdump(8); re-exec the privileged child after fork

While tcpdump isn't a daemon in the traditional sense, it's not uncommon
for people to have long running sessions.  At least on OpenBSD, this is
even safe thanks to the existing privsep design by otto@, canacar@ and
pledge(2) work done by deraadt.

ok deraadt@

Revision 1.79 / (download) - annotate - [select for diffs], Wed Nov 16 13:47:27 2016 UTC (7 years, 6 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.78: +2 -1 lines
Diff to previous 1.78 (colored)

Add new DLT_OPENFLOW link-type to allow using tcpdump to debug switch(4),
eg. tcpdump -y openflow -i switch0

Includes a minor bump for libpcap.

Feedback and OK rzalamena@

Revision 1.78 / (download) - annotate - [select for diffs], Tue Dec 22 21:01:07 2015 UTC (8 years, 5 months ago) by mmcc
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.77: +2 -2 lines
Diff to previous 1.77 (colored)

assign pointers to NULL rather than 0

Revision 1.77 / (download) - annotate - [select for diffs], Mon Nov 16 00:16:39 2015 UTC (8 years, 6 months ago) by mmcc
Branch: MAIN
Changes since 1.76: +8 -8 lines
Diff to previous 1.76 (colored)

Remove remaining instances of the register keyword.

ok deraadt@

Revision 1.76 / (download) - annotate - [select for diffs], Wed Oct 28 12:28:14 2015 UTC (8 years, 7 months ago) by jca
Branch: MAIN
Changes since 1.75: +3 -3 lines
Diff to previous 1.75 (colored)

pcap_stat fields are unsigned, print them as such

Patch from Kevin Reay.

Revision 1.75 / (download) - annotate - [select for diffs], Wed Oct 14 04:55:17 2015 UTC (8 years, 7 months ago) by guenther
Branch: MAIN
Changes since 1.74: +6 -12 lines
Diff to previous 1.74 (colored)

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Revision 1.74 / (download) - annotate - [select for diffs], Fri Oct 9 01:37:09 2015 UTC (8 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.73: +3 -3 lines
Diff to previous 1.73 (colored)

Change all tame callers to namechange to pledge(2).

Revision 1.73 / (download) - annotate - [select for diffs], Sat Oct 3 00:51:08 2015 UTC (8 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.72: +3 -1 lines
Diff to previous 1.72 (colored)

tcpdump is two-process privsep.

the packet processor pid is initialized on a socketpair, and then only
does byte analysis. it can be protected using a "stdio" tame request.
an successfull attack against it will find it cannot open files nor
sockets, and faces various other limitations described in the tame(2)
manual page.

the monitor process can be restricted to "malloc cmsg inet ioctl dns rpath".
that sounds like a large subset, but notice it cannot create or write files.
maybe this set can be wittled down by hoisting more initialization code
upwards?

with help from canacar a while back.

Revision 1.72 / (download) - annotate - [select for diffs], Tue Jul 14 20:23:40 2015 UTC (8 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored)

Move the BIOCGSTATS ioctl operation done by the tcpdump process
(at ^C time) into a services provided by the privsep monitor.
ok canacar

Revision 1.71 / (download) - annotate - [select for diffs], Sun Jul 12 19:58:00 2015 UTC (8 years, 10 months ago) by naddy
Branch: MAIN
Changes since 1.70: +5 -3 lines
Diff to previous 1.70 (colored)

For ASCII dumps, tighten printable characters.  \v and \f aren't.
ok semarie@ sthen@

Revision 1.70 / (download) - annotate - [select for diffs], Sat Apr 18 18:28:38 2015 UTC (9 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.69: +10 -7 lines
Diff to previous 1.69 (colored)

Convert many atoi() calls to strtonum(), adding range checks and failure
handling along the way.
Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert

Revision 1.69 / (download) - annotate - [select for diffs], Wed Apr 15 02:32:28 2015 UTC (9 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.68: +1 -5 lines
Diff to previous 1.68 (colored)

opt{ind,err,arg} are already known

Revision 1.68 / (download) - annotate - [select for diffs], Mon Feb 9 23:00:14 2015 UTC (9 years, 3 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.67: +16 -16 lines
Diff to previous 1.67 (colored)

clean up flags++ instances around getopt()
ok florian

Revision 1.67 / (download) - annotate - [select for diffs], Wed Nov 26 18:34:52 2014 UTC (9 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.66: +1 -5 lines
Diff to previous 1.66 (colored)

Prefer setvbuf() to setlinebuf() for portability; ok deraadt@

Revision 1.66 / (download) - annotate - [select for diffs], Mon Jun 30 04:25:11 2014 UTC (9 years, 11 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.65: +1 -4 lines
Diff to previous 1.65 (colored)

remove backwards compat layer for alpha osf1.  back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Revision 1.65 / (download) - annotate - [select for diffs], Wed Jul 11 10:37:38 2012 UTC (11 years, 10 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.64: +8 -9 lines
Diff to previous 1.64 (colored)

cleanup offset argument in default_print_* functions, pointed out by Mike Small
ok theo

Revision 1.64 / (download) - annotate - [select for diffs], Tue Jul 10 18:07:37 2012 UTC (11 years, 10 months ago) by sthen
Branch: MAIN
Changes since 1.63: +29 -3 lines
Diff to previous 1.63 (colored)

support -A to print the ascii text of captured packets.  ok deraadt@

Revision 1.63 / (download) - annotate - [select for diffs], Sat Jun 26 16:47:07 2010 UTC (13 years, 11 months ago) by henning
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.62: +1 -2 lines
Diff to previous 1.62 (colored)

remove support for the old pflog format, replaced in 2003
ok ryan theo & herr reyksminister

Revision 1.62 / (download) - annotate - [select for diffs], Tue Oct 27 23:59:57 2009 UTC (14 years, 7 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.61: +1 -9 lines
Diff to previous 1.61 (colored)

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable).  these days, people use source.  these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

Revision 1.61 / (download) - annotate - [select for diffs], Sat Feb 14 11:18:56 2009 UTC (15 years, 3 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.60: +7 -3 lines
Diff to previous 1.60 (colored)

increase the default snaplen to 116, allows capture of pflog+ipv6+tcp
without knobs.  ok djm, deraadt.

Revision 1.60 / (download) - annotate - [select for diffs], Fri Apr 18 21:35:11 2008 UTC (16 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.59: +18 -8 lines
Diff to previous 1.59 (colored)

add filtering on direction; ok mpf@ deraadt@ feedback jmc@

Revision 1.59 / (download) - annotate - [select for diffs], Sun Oct 7 16:41:05 2007 UTC (16 years, 7 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

trash $Header goo which is just annoying; 5595

Revision 1.58 / (download) - annotate - [select for diffs], Tue Aug 28 12:52:06 2007 UTC (16 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.57: +11 -5 lines
Diff to previous 1.57 (colored)

add -I option for printing the interfaces;
ok hshoexer, henning, mcbridge (some time ago)

Revision 1.57 / (download) - annotate - [select for diffs], Mon Aug 13 20:27:13 2007 UTC (16 years, 9 months ago) by krw
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.56: +2 -3 lines
Diff to previous 1.56 (colored)

No need to #include <netinet/in.h> twice. Noticed by Diego Casati.

ok stevesk@

Revision 1.56 / (download) - annotate - [select for diffs], Fri Jun 1 18:19:40 2007 UTC (17 years ago) by todd
Branch: MAIN
Changes since 1.55: +4 -3 lines
Diff to previous 1.55 (colored)

Move a useless warning to the only case that uses it (-f) from canacar@
ok beck@

Revision 1.55 / (download) - annotate - [select for diffs], Fri Jun 16 16:55:46 2006 UTC (17 years, 11 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.54: +4 -9 lines
Diff to previous 1.54 (colored)

printing these version numbers in usage is ugly and useless

Revision 1.54 / (download) - annotate - [select for diffs], Sat Apr 22 19:26:05 2006 UTC (18 years, 1 month ago) by moritz
Branch: MAIN
Changes since 1.53: +15 -10 lines
Diff to previous 1.53 (colored)

Set signal handlers directly after the fork(2), so that we avoid
situations, where the privileged child dies before the unprivileged
parent has set a signal handler for SIGCHLD.

ok deraadt@ canacar@

Revision 1.53 / (download) - annotate - [select for diffs], Sat Apr 22 17:24:33 2006 UTC (18 years, 1 month ago) by moritz
Branch: MAIN
Changes since 1.52: +3 -3 lines
Diff to previous 1.52 (colored)

Remove remaining stuff from state QUIT, adjust some comments
and close a fd leak in read_infile(). ok deraadt@

Revision 1.52 / (download) - annotate - [select for diffs], Fri Apr 21 23:09:34 2006 UTC (18 years, 1 month ago) by cloder
Branch: MAIN
Changes since 1.51: +4 -2 lines
Diff to previous 1.51 (colored)

Add comments to please lint. No code changes. OK deraadt

Revision 1.51 / (download) - annotate - [select for diffs], Mon Apr 17 23:49:59 2006 UTC (18 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.50: +8 -14 lines
Diff to previous 1.50 (colored)

initialize program_name before we privsep, otherwise the child does not
know our name

Revision 1.50 / (download) - annotate - [select for diffs], Mon Mar 13 19:05:56 2006 UTC (18 years, 2 months ago) by moritz
Branch: MAIN
Changes since 1.49: +3 -3 lines
Diff to previous 1.49 (colored)

Simplify error() and warning() a bit. From Alexey Dobriyan.
ok jaredy@ otto@

Revision 1.49 / (download) - annotate - [select for diffs], Wed Feb 15 20:34:23 2006 UTC (18 years, 3 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_9
Changes since 1.48: +7 -8 lines
Diff to previous 1.48 (colored)

Initialize snaplen also when reading a dump file. Fixes problems
on 64bit archs when processing files with large snaplens, as seen
by Alf Schlichting.  ok moritz@ canacar@

Revision 1.48 / (download) - annotate - [select for diffs], Fri Nov 18 11:06:51 2005 UTC (18 years, 6 months ago) by djm
Branch: MAIN
Changes since 1.47: +4 -61 lines
Diff to previous 1.47 (colored)

use new libpcap-provided datalink_x_to_y functions instead of local copies
(with different prototypes); ok mpf@

Revision 1.47 / (download) - annotate - [select for diffs], Fri Oct 7 19:45:26 2005 UTC (18 years, 7 months ago) by mpf
Branch: MAIN
Changes since 1.46: +3 -3 lines
Diff to previous 1.46 (colored)

KNF

Revision 1.46 / (download) - annotate - [select for diffs], Sat May 28 09:01:52 2005 UTC (19 years ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.45: +6 -3 lines
Diff to previous 1.45 (colored)

support decapsulation of 802.11 data frames

ok canacar@

Revision 1.45 / (download) - annotate - [select for diffs], Sun May 22 18:41:34 2005 UTC (19 years ago) by moritz
Branch: MAIN
Changes since 1.44: +32 -6 lines
Diff to previous 1.44 (colored)

fix signal race in statistics output. ok cloder@ henning@

Revision 1.44 / (download) - annotate - [select for diffs], Wed Mar 30 22:13:54 2005 UTC (19 years, 2 months ago) by moritz
Branch: MAIN
Changes since 1.43: +5 -5 lines
Diff to previous 1.43 (colored)

output final summary to stderr instead of stdout,
so it won't get mixed when tcpdump -w - is used.
ok henning@ deraadt@

Revision 1.43 / (download) - annotate - [select for diffs], Fri Mar 25 13:45:30 2005 UTC (19 years, 2 months ago) by moritz
Branch: MAIN
Changes since 1.42: +3 -3 lines
Diff to previous 1.42 (colored)

whitespace

Revision 1.42 / (download) - annotate - [select for diffs], Mon Mar 7 16:13:38 2005 UTC (19 years, 2 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7
Changes since 1.41: +18 -3 lines
Diff to previous 1.41 (colored)

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Revision 1.41 / (download) - annotate - [select for diffs], Sun Mar 6 21:05:49 2005 UTC (19 years, 3 months ago) by jmc
Branch: MAIN
Changes since 1.40: +3 -3 lines
Diff to previous 1.40 (colored)

uppercase takes precedence over lower when sorting options;

Revision 1.40 / (download) - annotate - [select for diffs], Sun Mar 6 18:44:50 2005 UTC (19 years, 3 months ago) by reyk
Branch: MAIN
Changes since 1.39: +145 -27 lines
Diff to previous 1.39 (colored)

add support for multiple DLTs using the -L and -y options.

ok canacar@

Revision 1.39 / (download) - annotate - [select for diffs], Thu Sep 16 11:29:51 2004 UTC (19 years, 8 months ago) by markus
Branch: MAIN
Changes since 1.38: +4 -2 lines
Diff to previous 1.38 (colored)

add -T tcp to enforce interpretation as TCP

Revision 1.38 / (download) - annotate - [select for diffs], Sun Jun 20 17:51:55 2004 UTC (19 years, 11 months ago) by avsm
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.37: +3 -3 lines
Diff to previous 1.37 (colored)

- do not use __attribute__((volatile)) as its a synonym for __dead nowadays
- bad format string "\%s" -> "%s" in print-ike.c
fixes parsing using CIL, discussed with millert@ niklas@

Revision 1.37 / (download) - annotate - [select for diffs], Fri May 21 05:48:50 2004 UTC (20 years ago) by brad
Branch: MAIN
Changes since 1.36: +3 -2 lines
Diff to previous 1.36 (colored)

add DLT_PPP_ETHER support plus some fixes for pppoe_if_print().

ok canacar@

From: Marc Huber <pppoe at pro-bono-publico dot de>

Revision 1.36 / (download) - annotate - [select for diffs], Wed Apr 28 02:17:03 2004 UTC (20 years, 1 month ago) by mcbride
Branch: MAIN
Changes since 1.35: +4 -2 lines
Diff to previous 1.35 (colored)

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Revision 1.35 / (download) - annotate - [select for diffs], Wed Jan 28 19:44:55 2004 UTC (20 years, 4 months ago) by canacar
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.34: +46 -40 lines
Diff to previous 1.34 (colored)

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

Revision 1.34 / (download) - annotate - [select for diffs], Thu Sep 25 13:32:58 2003 UTC (20 years, 8 months ago) by jmc
Branch: MAIN
Changes since 1.33: +4 -4 lines
Diff to previous 1.33 (colored)

- simplify macros
- sort options
- typos and formatting improvements
- sync usage() and SYNOPSIS

Revision 1.33 / (download) - annotate - [select for diffs], Thu Aug 21 19:14:23 2003 UTC (20 years, 9 months ago) by frantzen
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE, OPENBSD_3_4
Changes since 1.32: +18 -3 lines
Diff to previous 1.32 (colored)

print the operating system of TCP SYN packets with the -o option

Revision 1.32 / (download) - annotate - [select for diffs], Thu Jul 17 08:45:37 2003 UTC (20 years, 10 months ago) by markus
Branch: MAIN
Changes since 1.31: +13 -6 lines
Diff to previous 1.31 (colored)

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

Revision 1.31 / (download) - annotate - [select for diffs], Wed May 14 08:50:37 2003 UTC (21 years ago) by canacar
Branch: MAIN
Changes since 1.30: +3 -2 lines
Diff to previous 1.30 (colored)

libpcap and tcpdump now understand the new pflog datalink type.
old datalink type is still recognized.

ok henning@ dhartmei@ frantzen@

Revision 1.30 / (download) - annotate - [select for diffs], Sat Nov 30 13:56:23 2002 UTC (21 years, 6 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_3
Changes since 1.29: +3 -2 lines
Diff to previous 1.29 (colored)

pfsync support; deraadt@ ok

Revision 1.29 / (download) - annotate - [select for diffs], Sat Nov 30 00:20:46 2002 UTC (21 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.28: +2 -3 lines
Diff to previous 1.28 (colored)

stop breaking the damn tree mickey

Revision 1.28 / (download) - annotate - [select for diffs], Fri Nov 29 18:27:54 2002 UTC (21 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.27: +5 -4 lines
Diff to previous 1.27 (colored)

tcpdump support for pfsync; henning@ ok

Revision 1.27 / (download) - annotate - [select for diffs], Wed Jan 23 23:32:20 2002 UTC (22 years, 4 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE, OPENBSD_3_2, OPENBSD_3_1_BASE, OPENBSD_3_1
Changes since 1.26: +3 -3 lines
Diff to previous 1.26 (colored)

proper handling for DLT_NULL and DLT_LOOP (header byte swapping); pointed out and tested by Alexander Yurchenko <grange@rt.mipt.ru>

Revision 1.26 / (download) - annotate - [select for diffs], Fri Dec 7 22:34:28 2001 UTC (22 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.25: +10 -3 lines
Diff to previous 1.25 (colored)

OK, this is horrible.  stdio safety in a signal handler, requires that we
make the regular data stream non-buffered.  This drastically reduces tcpdump
performance.  Let us commit this, and see how people react.  But
realistically, without this, we cannot gaurantee that the tail of a file is
correct on signal.

Revision 1.25 / (download) - annotate - [select for diffs], Wed Nov 7 18:48:00 2001 UTC (22 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.24: +17 -22 lines
Diff to previous 1.24 (colored)

avoid buffer overflows.  when will people learn to use snprintf correctly

Revision 1.24 / (download) - annotate - [select for diffs], Wed Nov 7 07:41:21 2001 UTC (22 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.23: +4 -2 lines
Diff to previous 1.23 (colored)

skip the unsafe bit in the signal handler

Revision 1.23 / (download) - annotate - [select for diffs], Fri Nov 2 16:19:27 2001 UTC (22 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.22: +17 -14 lines
Diff to previous 1.22 (colored)

avoid stdio in signal handler (not complete yet)

Revision 1.22 / (download) - annotate - [select for diffs], Mon Jun 25 23:05:17 2001 UTC (22 years, 11 months ago) by provos
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_3_0
Changes since 1.21: +3 -2 lines
Diff to previous 1.21 (colored)

interpret DLT_PFLOG

Revision 1.21 / (download) - annotate - [select for diffs], Fri Jan 19 17:53:19 2001 UTC (23 years, 4 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9
Changes since 1.20: +3 -2 lines
Diff to previous 1.20 (colored)

mark remaining signal races which are difficult to fix

Revision 1.20 / (download) - annotate - [select for diffs], Sun Dec 10 19:05:21 2000 UTC (23 years, 5 months ago) by provos
Branch: MAIN
Changes since 1.19: +4 -2 lines
Diff to previous 1.19 (colored)

for correctness, do seteuid, too. okay deraadt@

Revision 1.19 / (download) - annotate - [select for diffs], Tue Oct 3 14:21:57 2000 UTC (23 years, 8 months ago) by ho
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE, OPENBSD_2_8
Changes since 1.18: +4 -1 lines
Diff to previous 1.18 (colored)

Compile with -Wall. Add $OpenBSD$. (jakob@ ok)

Revision 1.18 / (download) - annotate - [select for diffs], Sun Apr 30 05:23:28 2000 UTC (24 years, 1 month ago) by ericj
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

be more careful with strcpy/sprintf. From tcpdump.org. millert@ ok

Revision 1.17 / (download) - annotate - [select for diffs], Wed Apr 26 21:35:44 2000 UTC (24 years, 1 month ago) by jakob
Branch: MAIN
Changes since 1.16: +4 -1 lines
Diff to previous 1.16 (colored)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

Revision 1.16 / (download) - annotate - [select for diffs], Sun Mar 26 05:24:25 2000 UTC (24 years, 2 months ago) by ericj
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

correct usage() return value

Revision 1.15 / (download) - annotate - [select for diffs], Sun Jan 16 13:36:36 2000 UTC (24 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.14: +4 -2 lines
Diff to previous 1.14 (colored)

print pcap_version in usage()

Revision 1.14 / (download) - annotate - [select for diffs], Thu Sep 16 20:58:48 1999 UTC (24 years, 8 months ago) by brad
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.13: +6 -3 lines
Diff to previous 1.13 (colored)

bring more inline with tcpdump 3.4

Revision 1.13 / (download) - annotate - [select for diffs], Wed Jul 28 20:41:37 1999 UTC (24 years, 10 months ago) by jakob
Branch: MAIN
Changes since 1.12: +120 -43 lines
Diff to previous 1.12 (colored)

-  Merge some changes from tcpdump 3.4
   -a flag; attempt to convert network and broadcast addresses to names
   Improved signal handling
   Miscellaneous fixes and typos
   OSPF MD5 authentication support

-  -X flag; emacs-hexl print (including ascii)

-  Add ECN bits to TCP and IP headers

-  IKE & IPsec (ESP & AH) support

OK deraadt@

Revision 1.12 / (download) - annotate - [select for diffs], Tue Jun 29 20:33:29 1999 UTC (24 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.11: +7 -3 lines
Diff to previous 1.11 (colored)

permit attach to address-less interfaces

Revision 1.11 / (download) - annotate - [select for diffs], Tue Sep 22 22:03:02 1998 UTC (25 years, 8 months ago) by provos
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE, OPENBSD_2_5, OPENBSD_2_4_BASE, OPENBSD_2_4
Changes since 1.10: +3 -1 lines
Diff to previous 1.10 (colored)

make tcpdump aware of SACK (RFC 2018), loosely based on a patch from
hari@cs.berkeley.edu.

Revision 1.10 / (download) - annotate - [select for diffs], Thu Jun 25 19:42:48 1998 UTC (25 years, 11 months ago) by mickey
Branch: MAIN
Changes since 1.9: +3 -1 lines
Diff to previous 1.9 (colored)

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

Revision 1.9 / (download) - annotate - [select for diffs], Thu Jun 11 00:01:24 1998 UTC (25 years, 11 months ago) by provos
Branch: MAIN
Changes since 1.8: +3 -1 lines
Diff to previous 1.8 (colored)

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Revision 1.8 / (download) - annotate - [select for diffs], Thu Jun 4 23:11:42 1998 UTC (26 years ago) by deraadt
Branch: MAIN
Changes since 1.7: +2 -1 lines
Diff to previous 1.7 (colored)

add DLT_LOOP support; 4-byte header indicates proto; cstone@pobox.com

Revision 1.7 / (download) - annotate - [select for diffs], Wed Jan 15 23:44:25 1997 UTC (27 years, 4 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_2_3_BASE, OPENBSD_2_3, OPENBSD_2_2_BASE, OPENBSD_2_2, OPENBSD_2_1_BASE, OPENBSD_2_1
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

getopt(3) returns -1 when out of args, not EOF, whee!

Revision 1.6 / (download) - annotate - [select for diffs], Thu Dec 12 16:22:21 1996 UTC (27 years, 5 months ago) by bitblt
Branch: MAIN
Changes since 1.5: +31 -50 lines
Diff to previous 1.5 (colored)

*** empty log message ***

Revision 1.5 / (download) - annotate - [select for diffs], Tue Nov 12 08:52:38 1996 UTC (27 years, 6 months ago) by mickey
Branch: MAIN
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored)

initialize:
int thiszone=0;

Revision 1.4 / (download) - annotate - [select for diffs], Sat Jul 13 11:01:34 1996 UTC (27 years, 10 months ago) by mickey
Branch: MAIN
CVS Tags: OPENBSD_2_0_BASE, OPENBSD_2_0
Changes since 1.3: +67 -38 lines
Diff to previous 1.3 (colored)

it is 3.2 now.

Revision 1.3 / (download) - annotate - [select for diffs], Mon Jun 10 07:47:58 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +6 -35 lines
Diff to previous 1.2 (colored)

sync to latest

Revision 1.2 / (download) - annotate - [select for diffs], Mon Mar 4 15:59:46 1996 UTC (28 years, 3 months ago) by mickey
Branch: MAIN
Changes since 1.1: +37 -3 lines
Diff to previous 1.1 (colored)

Updating to the latest LBL release.
Sun's SKIP support added.

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Wed Oct 18 08:48:26 1995 UTC (28 years, 7 months ago) by deraadt
CVS Tags: netbsd_1_1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

initial import of NetBSD tree

Revision 1.1 / (download) - annotate - [select for diffs], Wed Oct 18 08:48:26 1995 UTC (28 years, 7 months ago) by deraadt
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.