summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump/print-ike.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt2015-01-161-2/+1
| | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
* Print names rather than numbers for the old draft nat-t attributes,sthen2012-01-281-4/+5
| | | | cisco use these at least as recently as ASAs running 8.4(1)
* minimal decode support for IKEv2 exchange types and payloads.jsg2010-06-071-3/+7
| | | | ok deraadt@ sthen@
* Print RFC3947 NAT Original Address (NAT-OA) payloads, they're a subsetsthen2010-01-201-1/+10
| | | | of the id payload, so using the existing id printer. ok dlg@
* for packets with unknown payloads (outside the range of our knowledge) simplyderaadt2009-11-121-2/+4
| | | | | treat them the same as truncated packets ok sthen
* rcsid[] and sccsid[] and copyright[] are essentially unmaintained (andderaadt2009-10-271-6/+1
| | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms
* Instead of directly applying ntoh*() to fields of the capturedhshoexer2008-12-181-23/+26
| | | | | | | packet and thus modifying it use local varialbes instead. Otherwise, hexdumping packets shows corrupted data. ok markus@ some time ago
* trash $Header goo which is just annoying; 5595deraadt2007-10-071-2/+2
|
* recognize xauth vendor payloadhshoexer2006-08-241-3/+3
| | | | ok ho markus
* Fix a reliability issue where an over-read of 4 bytes could result in thecloder2005-08-281-5/+12
| | | | | | | tcpdump process being terminated when tcpdump running with -vv tries to print a a short IKE SA payload. Specifically OK'd for 3.8 release by deraadt@. OK canacar@, hshoexer@.
* some more ike payload typeshshoexer2005-06-281-2/+9
| | | | ok ho@
* When printing attributes do not cast unsigned value to signed.hshoexer2004-10-071-3/+3
| | | | | ok & help otto ok deraadt henning markus
* Report DPD notifications. Cleanup. markus@ ok.ho2004-07-291-4/+19
|
* In draft-ietf-ipsec-nat-t-ike-01,02,03, NAT-D is payload 130. Rewrite a bitho2004-06-221-7/+26
| | | | | to understand payloads in the private range. Also match a few "well-known" vendor-IDs. markus@ "looks ok".
* - do not use __attribute__((volatile)) as its a synonym for __dead nowadaysavsm2004-06-201-3/+3
| | | | | - bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@
* Cleanup and more careful payload parsing.hshoexer2004-04-131-75/+204
| | | | ok ho@
* Print DELETE payload contents. ok markus@.ho2004-04-061-7/+62
|
* Check payload size more carefully when printing ike messages. Identified byhshoexer2004-03-121-5/+9
| | | | | | cloder@. ok ho@ otto@ cloder@
* KNFho2004-02-141-4/+4
|
* Fix DOI select logic, which was broken for IKE vendors that sends non-zeroho2004-02-141-52/+55
| | | | | spi_size in their phase 1 proposals, such as some DLink VPN routers. Also replace u_char with u_int8_t. markus@, hshoexer@ ok.
* Input should be atleast an isakmp_header long. otto@, markus@ ok.ho2004-01-151-5/+4
|
* Recognize NAT-D and NAT-OA payloads. markus@ ok.ho2003-12-181-2/+6
|
* Add missing includes, breaks and semicolons to appease gcc3; David Krausemillert2002-09-231-2/+3
| | | | deraadt@ OK
* print FQDN strings using correct length; ok ho@ jakob@stevesk2002-07-111-3/+3
|
* For IPCOMP print CPI instead of SPI. Style.ho2002-06-111-7/+10
|
* Don't assume 32bit SPI/CPI numbers.ho2002-06-111-8/+10
|
* Decode IPCOMP transform IDs.ho2002-06-111-2/+9
|
* We live in an ANSI C world. Remove lots of gratuitous #ifdef __STDC__ cruft.millert2002-02-191-5/+2
|
* care and KNFderaadt2001-11-121-168/+162
|
* (c)-2001.ho2001-10-261-5/+3
|
* Correct IKE mode config printouts, ok ho@niklas2001-04-181-22/+18
|
* Add IKE mode-config (as described in draft-dukes-ike-mode-cfg-01.txt)ho2001-04-101-45/+173
| | | | decoding. Also some cleanup of attribute handling plus length checks.
* Extend IKE knowledge so we can parse the rest (normally encrypted parts)ho2001-04-091-65/+231
| | | | | of the IKE negotiation. Useful for isakmpd's new -L and -l options. Also some cleanup. (angelos@, niklas@ ok)
* Print IKE notifications (with -v). Style. (jakob@ ok)ho2000-10-031-193/+68
|
* Improve tcpdump's IKE/ISAKMP knowledge. (jakob@, hugh@ ok)ho1999-09-301-54/+332
|
* - #if __STDC__ --> #ifdef __STDC__brad1999-09-161-3/+2
| | | | - remove unused variables
* - Merge some changes from tcpdump 3.4jakob1999-07-281-0/+260
-a flag; attempt to convert network and broadcast addresses to names Improved signal handling Miscellaneous fixes and typos OSPF MD5 authentication support - -X flag; emacs-hexl print (including ascii) - Add ECN bits to TCP and IP headers - IKE & IPsec (ESP & AH) support OK deraadt@
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.