summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump/tcpdump.8 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Use /dev/bpf0 instead of /dev/bpf (without loop though), as suggested bynatano2016-05-081-3/+3
| | | | | | sthen@. to make remote upgrades without media less painful. ok tb@
* Move to /dev/bpf; ok lteonatano2016-05-031-3/+3
|
* Don't use .Aq for syntax elements that require ASCII "<>".schwarze2016-03-311-4/+4
| | | | | Patch from Christian Heckendorf <mbie at ulmus dot me>. OK jmc@ bentley@
* spelling; from tjjmc2015-11-051-3/+3
|
* avoid trailing .Ns, reduce .Xo and .Sm, drop redundant .Bkschwarze2015-09-251-13/+4
|
* Avoid .Ns right after .Pf, it's pointless.schwarze2015-09-141-3/+3
| | | | In some cases, do additional cleanup in the immediate vicinity.
* Add an example about showing wireless frames with tcpdump(8).stsp2015-07-181-2/+5
| | | | | | Apparently sniffing wifi frames isn't a very popular addiction?!? Requested by David Hill. ok aja phessler mpi
* Reduce usage of predefined strings in manpages.bentley2015-02-281-4/+4
| | | | | | | | | | | Predefined strings are not very portable across troff implementations, and they make the source much harder to read. Usually the intended character can be written directly. No output changes, except for two instances where the incorrect escape was used in the first place. tweaks + ok schwarze@
* Expand the IP checksum offload subsection to mention the same issue withlteo2014-06-031-4/+4
| | | | | | | protocol checksum offload, where tcpdump might see bad checksums on valid packets. ok henning@ jmc@
* Add pcap-filter(3) to the SEE ALSO section.lteo2014-02-191-2/+3
| | | | ok jmc@
* use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@schwarze2013-07-161-5/+5
|
* In the EXAMPLES section, it is not very obvious that "localnet" is not alteo2013-07-101-9/+10
| | | | | | | | | | literal argument name due to lack of formatting, so replace it with an example network to make it clearer (discussed with and suggested by jmc@). While here, fix some style nits in a sentence to make it consistent with the other examples. ok jmc
* last stage of rfc changes, using consistent Rs/Re blocks, and moving thejmc2012-09-261-2/+9
| | | | references into a STANDARDS section;
* - rfc 4835 obsoletes rfc 2406jmc2012-08-291-15/+23
| | | | | | - flesh out SEE ALSO ok sthen
* We maintain our own tcpdump, so remove the sentence in the BUGS sectionlteo2012-08-241-9/+2
| | | | | | | | | that asks users to send bug reports to mainline tcpdump. While here, fix two mandoc -Tlint warnings by removing unnecessary .Pp instances. ok deraadt jmc naddy
* support -A to print the ascii text of captured packets. ok deraadt@sthen2012-07-101-3/+11
|
* tweak previous;jmc2011-03-281-2/+2
|
* Add a couple of examples on tcpflags and icmptype filtersgiovanni2011-03-281-2/+10
| | | | ok claudio@
* Between groff-1.15 and groff-1.20.1, the .Ns macro was changed to noschwarze2011-02-071-11/+9
| | | | | | | longer suppress spacing when used at the beginning of an input line, and mandoc now follows the same behaviour as new groff. Thus, sweep the tree and remove useless .Ns. Most places found by jmc@; ok jmc@ kristaps@.
* fix a formatting issue for -E;jmc2010-09-071-3/+7
|
* Include the link-level header in the hex output if both the -x and -ejsing2010-01-141-8/+10
| | | | | | options are specified. ok claudio@ sthen@ deraadt@ jmc@
* blank lines not allowed outside literal context;schwarze2010-01-031-5/+5
| | | | | syntax errors found by mandoc(1), also required to fix the mandoc build; ok jmc@
* Adjust pflog BPF descriptions, problem pointed out by jmc@sthen2009-12-031-8/+13
| | | | | | | | | - sync actions with PF changes (pass/block/match not just pass/block, and remove some binat/nat/rdr entries) - list all reason codes in tcpdump(8) ok henning jmc
* document increased default snaplen; pointed out by dhillsthen2009-02-141-4/+4
|
* add a short section on checksum offloading, based on a diffjmc2008-04-211-2/+8
| | | | | | from Alf Schlichting; help/ok henning
* add filtering on direction; ok mpf@ deraadt@ feedback jmc@djm2008-04-181-2/+11
|
* add -I option for printing the interfaces;markus2007-08-281-3/+5
| | | | ok hshoexer, henning, mcbridge (some time ago)
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* define bpf filters to match address and header fields in IEEE 802.11reyk2007-01-021-4/+69
| | | | | | | | wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@
* add a little bit more to -X;jmc2006-05-151-1/+4
|
* better description for -X;jmc2006-05-151-4/+4
| | | | | based on a diff from jean raby; ok deraadt
* nat, rdr, binat and scrub are valid pf actions to filter oncamield2006-03-261-3/+7
| | | | ok dhartmei
* talk about choices when describing -y; from chris.kuethe@gmail.com ok fgschderaadt2005-10-201-1/+8
|
* Add stp as supported protocol.mpf2005-10-071-5/+21
| | | | | | | | While there remove reference to /etc/protocols for ether proto. Instead enumerate all supported ethernet protocols. OK jmc@ a while ago.
* deploy .An -nosplit; ok jmcjaredy2005-09-301-1/+2
|
* proto is `ip6', not `ipv6';jmc2005-07-081-3/+3
| | | | | initial report from robert hansen; confirmed by otto@
* - do not mark up punctuationjmc2005-03-061-12/+13
| | | | | - use full "For example:" instead of "e.g.," where the latter looks too awful - no need to use Ns before `.'
* uppercase takes precedence over lower when sorting options;jmc2005-03-061-34/+34
|
* add support for multiple DLTs using the -L and -y options.reyk2005-03-061-2/+8
| | | | ok canacar@
* update `dst port', `ip proto', `ether proto', and SEE ALSO;jmc2005-02-041-13/+41
| | | | ok mcbride@
* although arguments to `ip proto' and `ether proto' are keywords, and dojmc2005-01-221-9/+7
| | | | | | | | | need to be escaped, they are not shell keywords; this wording seems to have been introduced when the page was mdoc'd; it now matches (more or less) how it was, and {F,N}BSD pages; found by naddy@
* "bad-timestamp" is a valid logging reason;jmc2005-01-021-2/+2
| | | | from joel knight;
* add -T tcp to enforce interpretation as TCPmarkus2004-09-161-1/+3
|
* add -ttttt (timestamp difference since the first packet); ok thierrymarkus2004-07-281-1/+3
|
* -tttt prints time between packets; ok deraadtmarkus2004-06-231-1/+3
|
* whitespace;jmc2004-05-061-2/+2
|
* Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPfrantzen2004-05-051-1/+2
| | | | | | | | sequence numbers by taking advantage of the maximum 1KHz clock as an upperbound on the timestamp. Typically gains 10 to 18 bits of additional security against blind data insertion attacks. More if the TS Echo wasn't optional :-( Enabled with: scrub on !lo0 all reassemble tcp ok dhartmei@. documentation help from jmc@
* Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.mcbride2004-04-281-1/+3
| | | | ok markus@ pb@
* Default snaplen is 96 not 68, from Pyun YongHyeon, ok deraadt@dhartmei2003-10-121-4/+4
|
* - simplify macrosjmc2003-09-251-735/+473
| | | | | | - sort options - typos and formatting improvements - sync usage() and SYNOPSIS
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.