summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump/print-ipsec.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* - (void)printf() -> printf(); the cast adds clutter for little value.procter2020-01-241-7/+8
| | | | | | | | | | - fprintf(stdout, ...) -> printf() - fputs(x, stdout) -> printf(); for consistency. fputs is twice as fast on atom x5-Z8300@1.44GHz but Amdahl sees a pure printf tcpdump only 2% slower than a pure fputs (for constant strings) tcpdump to /dev/null across a 20MB/~170k packet pcap file. ok dlg@ for fputs and ok tedu@ krw@ deraadt@ a2k19 for the rest
* Remove #ifdef INET6kn2018-10-221-11/+2
| | | | | | | | | | | | There's not reason to build without IPv6 support, `-U INET6' builds were broken anyway. Fix an empty redefine for IPPROTO_IPV6 in print-ip.c while here. No object change on amd64 and sparc64 with clang, gcc compiles differently but behaviour stays the same. OK denis deraadt
* Rework UDP parsing, particularly around IP addresses.dlg2018-07-061-21/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This originally started as trying to put a consistent space between the UDP header information and the payload parsing, but while doing that I noticed inconsistent IPv4 vs IPv6 handling. Apart from the default "srcip.srcport > dstip.dstpor" output, all the other places that IP addresses were printed assumed IPv4. It looks like it is possible that udp_print() can be called without an IP header, which made these blind IPv4 prints turn into NULL derefs. This fixes the problem above by only having a single place that prints the addresses out, and makes sure to get the difference between IPv4, IPv6 and no IP correct. This changes how the checksum is calculated. It incrementally builds the UDP checksum by feeding the IPv4 and v6 addresses in separately, then using common code for the rest of the pseudo header and actual payload. Lastly, this does make printing the space between the UDP header and its payload consistent. The UDP code is now responsible for adding a space after itself so the payload parsers don't have to. They got it wrong in some cases anyway, so this should be a lot more uniform. help and ok sthen@
* Remove remaining instances of the register keyword.mmcc2015-11-161-7/+4
| | | | ok deraadt@
* The <ctype.h> is*() interfaces expect EOF or an unsigned char; cast toguenther2015-10-111-2/+3
| | | | | | (unsigned char) as required found by Michael McConville (mmcconv1 (at) sccs.swarthmore.edu) w/Coccinelle
* Most packets generate one line in tcpdump. For AH and RIP therebluhm2015-03-291-2/+2
| | | | | | was an extra line without benefit. Remove the new-line in printf to make parsing easier. OK lteo@ mikeb@
* Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt2015-01-161-2/+1
| | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
* No use for <netinet/in_systm.h> nor <netinet/tcpip.h>.mpi2014-08-141-3/+1
|
* Make icmp_print() accept the length variable, which is the length of thelteo2014-01-111-3/+4
| | | | | | | | | | | | | packet without the IP header. This is needed by the next commit that will allow tcpdump to detect bad ICMP checksums. Related functions like {tcp,udp,icmp6}_print() already accept this length variable, so this change makes icmp_print() consistent with them as well. This commit makes no functional change to tcpdump itself. OK florian@
* esp/ah sequence number is unsigned and should be printed as such;mikeb2012-05-031-3/+3
| | | | ok haesbaert, sthen, yasuoka, mpf
* Add support for decoding MLDv2 initially from tcpdump.org via FreeBSD,jsg2010-04-061-3/+4
| | | | | | cleaned up to be less gross after some suggestions from stsp. ok stsp@
* Don't leak memory in error case.jsg2009-11-111-2/+4
| | | | Found by parfait.
* rcsid[] and sccsid[] and copyright[] are essentially unmaintained (andderaadt2009-10-271-6/+1
| | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms
* Print spi in lowercase hex for consistency with print-enc.c and ipsecctl.mcbride2009-02-181-3/+3
| | | | ok hshoexer msf
* trash $Header goo which is just annoying; 5595deraadt2007-10-071-2/+2
|
* Fix truncation check by directly comparing both values and don'tmoritz2006-12-261-3/+3
| | | | | | compare the unsigned value of the subtraction against <= 0. ok krw@ ray@
* print icmpv6 inside security header (ah/esp).itojun2006-12-261-2/+9
|
* enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6)naddy2006-09-191-8/+34
|
* add support for ESP decryption; ok deraadt@; feedback mickey@;markus2003-07-171-3/+141
| | | | many manpage fixes from jmc@
* add printing of ipcomp, and while in the neighborhood, make ah/esp actuallyjason2003-02-201-13/+54
| | | | check the length of the data
* "IPSec" -> "IPsec" (jsyn@nthought.com)angelos2001-06-271-5/+5
|
* Compile with -Wall. Add $OpenBSD$. (jakob@ ok)ho2000-10-031-5/+9
|
* INET6jakob2000-04-261-4/+1
| | | | | | DHCP/BOOTP tcp & udp checksum detection numerous bugfixes
* Print AH payload data (with -v). jakob@ ok.ho1999-10-291-4/+55
|
* print ESP/AH packet length; <ho@openbsd.org>jakob1999-09-211-5/+5
|
* - Merge some changes from tcpdump 3.4jakob1999-07-281-0/+104
-a flag; attempt to convert network and broadcast addresses to names Improved signal handling Miscellaneous fixes and typos OSPF MD5 authentication support - -X flag; emacs-hexl print (including ascii) - Add ECN bits to TCP and IP headers - IKE & IPsec (ESP & AH) support OK deraadt@
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.