summaryrefslogtreecommitdiffstats
path: root/lib/libpcap/gencode.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* add "sample NUM" so you can ask to capture 1/NUM packets from a filter.dlg2020-08-031-1/+2
| | | | | | | | | | | | | | | the use of the sample keyword matches similar config in other products. NUM can be a number between 2 and 1048576, and is used to divide 0x100000000 into a threshold that is then compared against a randomly generated number produced by a load of BPF_RND. having sampling as part of the grammar means you can write things like "icmp or sample 128". this lets you capture all icmp traffic and a sample of the rest of the traffic. ok jmatthew@ kn@ tb@
* add support for handling loads from BPF_RND.dlg2020-08-031-1/+2
| | | | | | | | | | this adds "rnd" and "random" as keywords in the grammar, and handles them as an arithmetic operator. the decoder recognises the load, so tcpdump can print it as 'ld #random'. most of the handling is copied from the "len"/"length" keywoard handling that generates and decodes a load of the actual wire length of the packet. ok jmatthew@ tb@ kn@
* add basic MPLS filtering supportdenis2018-12-091-1/+2
| | | | OK claudio@ jca@
* Change some libpcap functions which use pointers as arguments andsthen2018-06-031-2/+2
| | | | | | | | | | | | returns to const pointers: - the prefix argument to pcap_perror(); - the return value of pcap_strerror(); - the filter expression argument to pcap_compile() and pcap_compile_nopcap(); - the BPF filter program argument to bpf_image(). Matches changes made earlier in tcpdump.org's version of libpcap. From Guy Harris, ok tb@, been through a bulk ports build.
* Remove the "volatile" attribute from bpf_error(). The "volatile"millert2017-04-271-2/+2
| | | | | | attribute is an obsolete way of saying "noreturn". clang doesn't recognize it and the function is already marked __dead so it is superfluous anyway.
* Zap CVS $Header tags, reduces diff with upstream's repolteo2014-04-111-3/+1
| | | | ok deraadt@
* Import vlan support from upstream libpcap. This allows, eg, "tcpdump vla 3"dtucker2008-06-111-2/+4
| | | | to work on a vlan parent interface. ok mcbride@, "commit it" deraadt@
* define bpf filters to match address and header fields in IEEE 802.11reyk2007-01-021-2/+9
| | | | | | | | wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@
* get rid of arc network support. we have no users of it so this is deaddlg2006-07-181-3/+2
| | | | | | | code. however, it is still cluttering up the kernel namespace a bit. it is better gone. ok claudio@
* Add Spanning Tree Protocol support.mpf2005-10-071-2/+3
| | | | | Bump version to 3.1. OK brad@
* libpcap and tcpdump now understand the new pflog datalink type.canacar2003-05-141-2/+4
| | | | | | old datalink type is still recognized. ok henning@ dhartmei@ frantzen@
* language extensions for PF logs. can specify direction, interface, rulefrantzen2002-03-231-2/+8
| | | | number, reason and action. fix the ipv4/ipv6 distinction while I'm here.
* We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft.millert2002-02-191-4/+2
|
* use __x__ formats for __attribute__ arguments; guenther@gac.eduderaadt2000-12-061-3/+3
|
* sync with libpcap v0.5jakob2000-04-261-2/+21
| | | | add support for INET6 (kame)
* changes brought in from v0.4; started by brad, more by me, being tested by mtsderaadt1999-07-201-10/+15
|
* #if __STDC__ --> #ifdef __STDC__mickey1997-07-251-2/+2
|
* bring it to the latest 0.2 LBL release.mickey1996-07-121-25/+22
|
* merge to latest libpcapderaadt1996-06-101-8/+8
|
* Update to the latest LBL release.mickey1996-03-041-0/+1
|
* initial import of NetBSD treederaadt1995-10-181-0/+175