| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the use of the sample keyword matches similar config in other
products.
NUM can be a number between 2 and 1048576, and is used to divide
0x100000000 into a threshold that is then compared against a randomly
generated number produced by a load of BPF_RND.
having sampling as part of the grammar means you can write things
like "icmp or sample 128". this lets you capture all icmp traffic
and a sample of the rest of the traffic.
ok jmatthew@ kn@ tb@
|
|
|
|
|
|
|
|
|
|
| |
this adds "rnd" and "random" as keywords in the grammar, and handles
them as an arithmetic operator. the decoder recognises the load,
so tcpdump can print it as 'ld #random'. most of the handling is
copied from the "len"/"length" keywoard handling that generates and
decodes a load of the actual wire length of the packet.
ok jmatthew@ tb@ kn@
|
|
|
|
| |
OK claudio@ jca@
|
|
|
|
|
|
|
|
|
|
|
|
| |
returns to const pointers:
- the prefix argument to pcap_perror();
- the return value of pcap_strerror();
- the filter expression argument to pcap_compile() and pcap_compile_nopcap();
- the BPF filter program argument to bpf_image().
Matches changes made earlier in tcpdump.org's version of libpcap.
From Guy Harris, ok tb@, been through a bulk ports build.
|
|
|
|
|
|
| |
attribute is an obsolete way of saying "noreturn". clang doesn't
recognize it and the function is already marked __dead so it is
superfluous anyway.
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
to work on a vlan parent interface. ok mcbride@, "commit it" deraadt@
|
|
|
|
|
|
|
|
| |
wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see
tcpdump(8) for details.
"Works for me" claudio@
ok jmc@ deraadt@
|
|
|
|
|
|
|
| |
code. however, it is still cluttering up the kernel namespace a bit. it is
better gone.
ok claudio@
|
|
|
|
|
| |
Bump version to 3.1.
OK brad@
|
|
|
|
|
|
| |
old datalink type is still recognized.
ok henning@ dhartmei@ frantzen@
|
|
|
|
| |
number, reason and action. fix the ipv4/ipv6 distinction while I'm here.
|
| |
|
| |
|
|
|
|
| |
add support for INET6 (kame)
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|