summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump/tcpdump.8 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* add initial support for handling geneve packets.dlg2020-08-171-2/+4
| | | | | | | it's like vxlan, but different. the most interesting difference to vxlan is that the protocol adds support for adding optional metadata to packets (like nsh). this diff currently just skips that stuff and just handles the payload. for now.
* wire the wireguard packet printer into tcpdump.dlg2020-06-211-2/+4
| | | | from Matt Dunwoodie and Jason A. Donenfeld
* mention in tcpdump(8) description of -i that one can use either a networksthen2019-11-061-2/+5
| | | | or a USB device. ok mpi
* fix inconsistency; from tim kuijstenjmc2019-10-311-3/+3
| | | | agreed by deraadt
* pcap-filter now section 5: adjust Xrjmc2019-09-251-4/+4
|
* pcap-filter is now section 7;jmc2019-09-031-4/+4
|
* one more ethers.3 -> ether_aton.3;jmc2019-08-301-2/+2
|
* catch up to ethers(3)->ether_aton(3) renamingderaadt2019-08-301-2/+2
|
* mop up for the pcap.3 rename;jmc2019-08-301-3/+3
| | | | help/ok deraadt
* support -T erspan so arbitrary gre protocols can be seen as erspandlg2019-05-261-3/+5
| | | | | | | this lets me configure a custom gre protocol on a dell s4810 or s5048 and see what's inside it when it lands on an openbsd box. ok lteo@
* tweak previous;jmc2019-03-181-4/+4
|
* support configuring BIOCSFILDROP with tcpdump.dlg2019-03-181-2/+20
| | | | | | | | | | this allows tcpdump to be used a quick and dirty firewall. it also looks like an amazing foot-gun, so be careful. for example `tcpdump -B drop -i ix1 udp and port 7` lets you completely drop discard packets in the hardware interrupt handler. ok sthen@ mikeb@ claudio@ visa@
* use a list for the -T types, now that there are many; ok dlgjmc2018-07-061-29/+31
|
* add support for vxlan packets.dlg2018-07-061-1/+3
| | | | | I personally think vxlan looks suspiciously like gre, so I put the parser in print-gre.c
* add "tftp" as a type to use with -Tdlg2018-07-061-1/+3
| | | | | | | This forces UDP packets to be parsed as tftp messages, which is useful to see the DATA and ACK packets. They're usually on high ports which don't get matched by udp_print, which by default only handled tftp packets on port 69.
* Add "mpls" as a type to use with -Tdlg2018-07-061-3/+5
| | | | This allows arbitrary UDP packets to be parsed as MPLS.
* Add "gre" as a type to use with -Tdlg2018-07-061-4/+6
| | | | This allows arbitrary UDP packets to be parsed as GRE packets.
* Reference hosts(5) instead of the obsolete networks(5).schwarze2018-04-281-31/+20
| | | | While here, also delete the obsolete .Tn macros.
* Don't describe AppleTalk's output format and bugs.akfaew2017-06-101-144/+2
| | | | | OK claudio@ jmc@ doesn't object
* Switch base tools from /dev/bpf0 to /dev/bpf. Now that /dev/bpf has beennatano2017-04-191-3/+3
| | | | | | around for two releases, it should be safe to do so. ok bluhm deraadt sthen tb yasuoka
* Use /dev/bpf0 instead of /dev/bpf (without loop though), as suggested bynatano2016-05-081-3/+3
| | | | | | sthen@. to make remote upgrades without media less painful. ok tb@
* Move to /dev/bpf; ok lteonatano2016-05-031-3/+3
|
* Don't use .Aq for syntax elements that require ASCII "<>".schwarze2016-03-311-4/+4
| | | | | Patch from Christian Heckendorf <mbie at ulmus dot me>. OK jmc@ bentley@
* spelling; from tjjmc2015-11-051-3/+3
|
* avoid trailing .Ns, reduce .Xo and .Sm, drop redundant .Bkschwarze2015-09-251-13/+4
|
* Avoid .Ns right after .Pf, it's pointless.schwarze2015-09-141-3/+3
| | | | In some cases, do additional cleanup in the immediate vicinity.
* Add an example about showing wireless frames with tcpdump(8).stsp2015-07-181-2/+5
| | | | | | Apparently sniffing wifi frames isn't a very popular addiction?!? Requested by David Hill. ok aja phessler mpi
* Reduce usage of predefined strings in manpages.bentley2015-02-281-4/+4
| | | | | | | | | | | Predefined strings are not very portable across troff implementations, and they make the source much harder to read. Usually the intended character can be written directly. No output changes, except for two instances where the incorrect escape was used in the first place. tweaks + ok schwarze@
* Expand the IP checksum offload subsection to mention the same issue withlteo2014-06-031-4/+4
| | | | | | | protocol checksum offload, where tcpdump might see bad checksums on valid packets. ok henning@ jmc@
* Add pcap-filter(3) to the SEE ALSO section.lteo2014-02-191-2/+3
| | | | ok jmc@
* use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@schwarze2013-07-161-5/+5
|
* In the EXAMPLES section, it is not very obvious that "localnet" is not alteo2013-07-101-9/+10
| | | | | | | | | | literal argument name due to lack of formatting, so replace it with an example network to make it clearer (discussed with and suggested by jmc@). While here, fix some style nits in a sentence to make it consistent with the other examples. ok jmc
* last stage of rfc changes, using consistent Rs/Re blocks, and moving thejmc2012-09-261-2/+9
| | | | references into a STANDARDS section;
* - rfc 4835 obsoletes rfc 2406jmc2012-08-291-15/+23
| | | | | | - flesh out SEE ALSO ok sthen
* We maintain our own tcpdump, so remove the sentence in the BUGS sectionlteo2012-08-241-9/+2
| | | | | | | | | that asks users to send bug reports to mainline tcpdump. While here, fix two mandoc -Tlint warnings by removing unnecessary .Pp instances. ok deraadt jmc naddy
* support -A to print the ascii text of captured packets. ok deraadt@sthen2012-07-101-3/+11
|
* tweak previous;jmc2011-03-281-2/+2
|
* Add a couple of examples on tcpflags and icmptype filtersgiovanni2011-03-281-2/+10
| | | | ok claudio@
* Between groff-1.15 and groff-1.20.1, the .Ns macro was changed to noschwarze2011-02-071-11/+9
| | | | | | | longer suppress spacing when used at the beginning of an input line, and mandoc now follows the same behaviour as new groff. Thus, sweep the tree and remove useless .Ns. Most places found by jmc@; ok jmc@ kristaps@.
* fix a formatting issue for -E;jmc2010-09-071-3/+7
|
* Include the link-level header in the hex output if both the -x and -ejsing2010-01-141-8/+10
| | | | | | options are specified. ok claudio@ sthen@ deraadt@ jmc@
* blank lines not allowed outside literal context;schwarze2010-01-031-5/+5
| | | | | syntax errors found by mandoc(1), also required to fix the mandoc build; ok jmc@
* Adjust pflog BPF descriptions, problem pointed out by jmc@sthen2009-12-031-8/+13
| | | | | | | | | - sync actions with PF changes (pass/block/match not just pass/block, and remove some binat/nat/rdr entries) - list all reason codes in tcpdump(8) ok henning jmc
* document increased default snaplen; pointed out by dhillsthen2009-02-141-4/+4
|
* add a short section on checksum offloading, based on a diffjmc2008-04-211-2/+8
| | | | | | from Alf Schlichting; help/ok henning
* add filtering on direction; ok mpf@ deraadt@ feedback jmc@djm2008-04-181-2/+11
|
* add -I option for printing the interfaces;markus2007-08-281-3/+5
| | | | ok hshoexer, henning, mcbridge (some time ago)
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* define bpf filters to match address and header fields in IEEE 802.11reyk2007-01-021-4/+69
| | | | | | | | wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@
* add a little bit more to -X;jmc2006-05-151-1/+4
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.