summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump/interface.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add new DLT_OPENFLOW link-type to allow using tcpdump to debug switch(4),reyk2016-11-161-3/+4
| | | | | | | | eg. tcpdump -y openflow -i switch0 Includes a minor bump for libpcap. Feedback and OK rzalamena@
* Teach tcpdump(8) how to read OpenFlow packets. This initial implementationrzalamena2016-10-221-2/+3
| | | | | | | | | | | supports the following message types: hello, error, echo request/reply, feature request/reply, set config, packet-in, packet-out, flow removed and flow mod. We currently only support printing this messages for OpenFlow 1.3.5, however it is possible to reuse some functions and get other versions working too. ok deraadt@
* Teach tcpdump to recognize MPLS pseudowire with control words. Addedrzalamena2016-07-111-2/+3
| | | | | | support to print encapsulated ethernet packets as well. "Looks good" deraadt@
* Remove more register keywords.mmcc2015-11-151-3/+3
| | | | ok daniel@, discussed on hackers@
* Upstream has retired the gnuc.h header, so do so as well, killing a gcc 2.xguenther2015-04-051-3/+2
| | | | | | reference. ok sthen@ jca@ deraadt@
* Make ip6_print() take an unsigned length matchingjsg2014-11-201-3/+3
| | | | | | | | | | | ip_print() and others. Allows code deciding on a minimum length to memmove() to work as intended, preventing various crashes found with the afl fuzzer. Callers of ip6_print() should of course be fixed to provide sane lengths as well. ok deraadt@ djm@
* Import in_cksum_shouldbe() from mainline tcpdump; this is needed by mylteo2014-06-201-2/+3
| | | | | | | upcoming commit which will fix and improve the display of bad checksums for the major protocols. ok henning@
* Make icmp_print() accept the length variable, which is the length of thelteo2014-01-111-3/+3
| | | | | | | | | | | | | packet without the IP header. This is needed by the next commit that will allow tcpdump to detect bad ICMP checksums. Related functions like {tcp,udp,icmp6}_print() already accept this length variable, so this change makes icmp_print() consistent with them as well. This commit makes no functional change to tcpdump itself. OK florian@
* Add support for decoding MLDv2 initially from tcpdump.org via FreeBSD,jsg2010-04-061-3/+3
| | | | | | cleaned up to be less gross after some suggestions from stsp. ok stsp@
* Add TCP/UDP checksum display for v6 and clean up the checksumnaddy2010-01-121-3/+3
| | | | calculation. Mostly from tcpdump.org; ok jsing@
* Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),jsing2009-11-041-2/+3
| | | | | | | | | | used to carry GPRS data over IP for GSM and UMTS networks. The decoder understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however at this stage not all TLV fields are fully decoded. This work has been kindly sponsored by SystemNet AS (www.systemnet.no). "commit" deraadt@
* increase the default snaplen to 116, allows capture of pflog+ipv6+tcpsthen2009-02-141-10/+5
| | | | without knobs. ok djm, deraadt.
* Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.mpf2008-10-161-2/+3
| | | | | | Code from tcpdump.org with cleanup and shrinkage by me. Help and ideas for extra sanity checks from canacar@ OK canacar@
* trash $Header goo which is just annoying; 5595deraadt2007-10-071-2/+2
|
* add -I option for printing the interfaces;markus2007-08-281-2/+4
| | | | ok hshoexer, henning, mcbridge (some time ago)
* Pass the captured packet length in addition to the real packet lengthmoritz2006-06-011-3/+3
| | | | | | | to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@
* add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@stevesk2006-05-231-2/+3
|
* Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discoveryreyk2006-03-281-2/+3
| | | | | | | | | Protocol. LLDP is used by some switch vendors as a replacement for the non-free Cizzco Discovery Protocol (CDP) due to some Cisco patentry... ok brad@
* add printer for IAPP and hostapd(8) messagesreyk2005-11-221-2/+3
| | | | ok canacar@, tested by aanriot@ and others
* Add a best effort mpls decoder. From Jason L. Wright.canacar2005-10-081-2/+3
| | | | | | | Since the encapsulated protocol information is not always available in the MPLS tag stack. The decoder attempts to guess the protocol. ok brad@
* support decapsulation of 802.11 data framesreyk2005-05-281-3/+4
| | | | ok canacar@
* add a printer for 802.11 and for additional radiotap headers,reyk2005-03-071-2/+8
| | | | | | use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver. ok canacar@
* add -T tcp to enforce interpretation as TCPmarkus2004-09-161-2/+3
|
* - do not use __attribute__((volatile)) as its a synonym for __dead nowadaysavsm2004-06-201-4/+5
| | | | | - bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@
* add DLT_PPP_ETHER support plus some fixes for pppoe_if_print().brad2004-05-211-2/+4
| | | | | | ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de>
* Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.mcbride2004-04-281-2/+4
| | | | ok markus@ pb@
* privilege separated tcpdump, joint work with otto@canacar2004-01-281-3/+3
| | | | | tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others go for it deraadt@
* Sync print-domain with tcpdump.org; avoids tcpdump barfing on bogusotto2004-01-181-3/+3
| | | | | | DNS traffic. ok canacar@ jakob@
* Add initial support for pf state synchronization over the network.mcbride2003-12-151-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@
* print the operating system of TCP SYN packets with the -o optionfrantzen2003-08-211-2/+3
|
* ansi and protosderaadt2003-06-261-2/+3
|
* support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@markus2003-06-111-2/+3
|
* libpcap and tcpdump now understand the new pflog datalink type.canacar2003-05-141-2/+4
| | | | | | old datalink type is still recognized. ok henning@ dhartmei@ frantzen@
* add printing of ipcomp, and while in the neighborhood, make ah/esp actuallyjason2003-02-201-2/+3
| | | | check the length of the data
* pfsync support; deraadt@ okmickey2002-11-301-2/+4
|
* stop breaking the damn tree mickeyderaadt2002-11-301-4/+2
|
* tcpdump support for pfsync; henning@ okmickey2002-11-291-2/+4
|
* In TTEST2(), check to make sure the "l" argument isn't so large thatpvalchev2002-07-121-4/+12
| | | | | | "snapend - l" underflows; this fixes a buffer overflow with malformed NFS packets, and may fix other buffer overflows with malformed packets. From tcpdump CVS via fenner@FreeBSD
* We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft.millert2002-02-191-8/+2
|
* proper handling for DLT_NULL and DLT_LOOP (header byte swapping); pointed out and tested by Alexander Yurchenko <grange@rt.mipt.ru>mickey2002-01-231-2/+3
|
* HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.orgmickey2002-01-221-2/+3
|
* change timeval to bpf_timeval; 32 bit in size, permitting much greater portabilityderaadt2001-10-021-3/+4
|
* interpret DLT_PFLOGprovos2001-06-251-2/+4
|
* Extend IKE knowledge so we can parse the rest (normally encrypted parts)ho2001-04-091-3/+3
| | | | | of the IKE negotiation. Useful for isakmpd's new -L and -l options. Also some cleanup. (angelos@, niklas@ ok)
* add support for printing cdp (Cisco Discovery Protocol), from tcpdump.orgjakob2001-04-081-2/+4
|
* add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@jakob2001-03-061-2/+3
|
* add relts_print, safeputs and safeputcharjakob2001-03-051-2/+5
|
* etherip printing code... handles draft (v2) and current (v3)jason2001-02-051-2/+4
|
* timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.orgmickey2000-12-071-2/+3
|
* smb printing; from Andrew Tridgell; via tcpdump.orgmickey2000-12-071-2/+9
|