| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add new DLT_OPENFLOW link-type to allow using tcpdump to debug switch(4), | 2016-11-16 | 1 | -1/+2 | |
| | | | | | | | | | eg. tcpdump -y openflow -i switch0 Includes a minor bump for libpcap. Feedback and OK rzalamena@ | ||||
| * | assign pointers to NULL rather than 0 | 2015-12-22 | 1 | -2/+2 | |
| | | |||||
| * | Remove remaining instances of the register keyword. | 2015-11-16 | 1 | -8/+8 | |
| | | | | | ok deraadt@ | ||||
| * | pcap_stat fields are unsigned, print them as such | 2015-10-28 | 1 | -3/+3 | |
| | | | | | Patch from Kevin Reay. | ||||
| * | Remove conditional compilation and #defines around signal handling | 2015-10-14 | 1 | -12/+6 | |
| | | | | | | | | Don't catch signals that were ignored on entry Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error ok millert@ | ||||
| * | Change all tame callers to namechange to pledge(2). | 2015-10-09 | 1 | -3/+3 | |
| | | |||||
| * | tcpdump is two-process privsep. | 2015-10-03 | 1 | -1/+3 | |
| | | | | | | | | | | | | | | | | the packet processor pid is initialized on a socketpair, and then only does byte analysis. it can be protected using a "stdio" tame request. an successfull attack against it will find it cannot open files nor sockets, and faces various other limitations described in the tame(2) manual page. the monitor process can be restricted to "malloc cmsg inet ioctl dns rpath". that sounds like a large subset, but notice it cannot create or write files. maybe this set can be wittled down by hoisting more initialization code upwards? with help from canacar a while back. | ||||
| * | Move the BIOCGSTATS ioctl operation done by the tcpdump process | 2015-07-14 | 1 | -2/+2 | |
| | | | | | | (at ^C time) into a services provided by the privsep monitor. ok canacar | ||||
| * | For ASCII dumps, tighten printable characters. \v and \f aren't. | 2015-07-12 | 1 | -3/+5 | |
| | | | | | ok semarie@ sthen@ | ||||
| * | Convert many atoi() calls to strtonum(), adding range checks and failure | 2015-04-18 | 1 | -7/+10 | |
| | | | | | | handling along the way. Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert | ||||
| * | opt{ind,err,arg} are already known | 2015-04-15 | 1 | -5/+1 | |
| | | |||||
| * | clean up flags++ instances around getopt() | 2015-02-09 | 1 | -16/+16 | |
| | | | | | ok florian | ||||
| * | Prefer setvbuf() to setlinebuf() for portability; ok deraadt@ | 2014-11-26 | 1 | -5/+1 | |
| | | |||||
| * | remove backwards compat layer for alpha osf1. back then compilers and | 2014-06-30 | 1 | -4/+1 | |
| | | | | | | | the parsers sucked, so byte misalignment repair was requested. These days it means the parsers should improve. ok lteo | ||||
| * | cleanup offset argument in default_print_* functions, pointed out by Mike Small | 2012-07-11 | 1 | -9/+8 | |
| | | | | | ok theo | ||||
| * | support -A to print the ascii text of captured packets. ok deraadt@ | 2012-07-10 | 1 | -3/+29 | |
| | | |||||
| * | remove support for the old pflog format, replaced in 2003 | 2010-06-26 | 1 | -2/+1 | |
| | | | | | ok ryan theo & herr reyksminister | ||||
| * | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | 2009-10-27 | 1 | -9/+1 | |
| | | | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | ||||
| * | increase the default snaplen to 116, allows capture of pflog+ipv6+tcp | 2009-02-14 | 1 | -3/+7 | |
| | | | | | without knobs. ok djm, deraadt. | ||||
| * | add filtering on direction; ok mpf@ deraadt@ feedback jmc@ | 2008-04-18 | 1 | -8/+18 | |
| | | |||||
| * | trash $Header goo which is just annoying; 5595 | 2007-10-07 | 1 | -2/+2 | |
| | | |||||
| * | add -I option for printing the interfaces; | 2007-08-28 | 1 | -5/+11 | |
| | | | | | ok hshoexer, henning, mcbridge (some time ago) | ||||
| * | No need to #include <netinet/in.h> twice. Noticed by Diego Casati. | 2007-08-13 | 1 | -3/+2 | |
| | | | | | ok stevesk@ | ||||
| * | Move a useless warning to the only case that uses it (-f) from canacar@ | 2007-06-01 | 1 | -3/+4 | |
| | | | | | ok beck@ | ||||
| * | printing these version numbers in usage is ugly and useless | 2006-06-16 | 1 | -9/+4 | |
| | | |||||
| * | Set signal handlers directly after the fork(2), so that we avoid | 2006-04-22 | 1 | -10/+15 | |
| | | | | | | | | situations, where the privileged child dies before the unprivileged parent has set a signal handler for SIGCHLD. ok deraadt@ canacar@ | ||||
| * | Remove remaining stuff from state QUIT, adjust some comments | 2006-04-22 | 1 | -3/+3 | |
| | | | | | and close a fd leak in read_infile(). ok deraadt@ | ||||
| * | Add comments to please lint. No code changes. OK deraadt | 2006-04-21 | 1 | -2/+4 | |
| | | |||||
| * | initialize program_name before we privsep, otherwise the child does not | 2006-04-17 | 1 | -14/+8 | |
| | | | | | know our name | ||||
| * | Simplify error() and warning() a bit. From Alexey Dobriyan. | 2006-03-13 | 1 | -3/+3 | |
| | | | | | ok jaredy@ otto@ | ||||
| * | Initialize snaplen also when reading a dump file. Fixes problems | 2006-02-15 | 1 | -8/+7 | |
| | | | | | | on 64bit archs when processing files with large snaplens, as seen by Alf Schlichting. ok moritz@ canacar@ | ||||
| * | use new libpcap-provided datalink_x_to_y functions instead of local copies | 2005-11-18 | 1 | -61/+4 | |
| | | | | | (with different prototypes); ok mpf@ | ||||
| * | KNF | 2005-10-07 | 1 | -3/+3 | |
| | | |||||
| * | support decapsulation of 802.11 data frames | 2005-05-28 | 1 | -3/+6 | |
| | | | | | ok canacar@ | ||||
| * | fix signal race in statistics output. ok cloder@ henning@ | 2005-05-22 | 1 | -6/+32 | |
| | | |||||
| * | output final summary to stderr instead of stdout, | 2005-03-30 | 1 | -5/+5 | |
| | | | | | | so it won't get mixed when tcpdump -w - is used. ok henning@ deraadt@ | ||||
| * | whitespace | 2005-03-25 | 1 | -3/+3 | |
| | | |||||
| * | add a printer for 802.11 and for additional radiotap headers, | 2005-03-07 | 1 | -3/+18 | |
| | | | | | | | use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver. ok canacar@ | ||||
| * | uppercase takes precedence over lower when sorting options; | 2005-03-06 | 1 | -3/+3 | |
| | | |||||
| * | add support for multiple DLTs using the -L and -y options. | 2005-03-06 | 1 | -27/+145 | |
| | | | | | ok canacar@ | ||||
| * | add -T tcp to enforce interpretation as TCP | 2004-09-16 | 1 | -2/+4 | |
| | | |||||
| * | - do not use __attribute__((volatile)) as its a synonym for __dead nowadays | 2004-06-20 | 1 | -3/+3 | |
| | | | | | | - bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@ | ||||
| * | add DLT_PPP_ETHER support plus some fixes for pppoe_if_print(). | 2004-05-21 | 1 | -2/+3 | |
| | | | | | | | ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de> | ||||
| * | Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp. | 2004-04-28 | 1 | -2/+4 | |
| | | | | | ok markus@ pb@ | ||||
| * | privilege separated tcpdump, joint work with otto@ | 2004-01-28 | 1 | -40/+46 | |
| | | | | | | tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others go for it deraadt@ | ||||
| * | - simplify macros | 2003-09-25 | 1 | -4/+4 | |
| | | | | | | | - sort options - typos and formatting improvements - sync usage() and SYNOPSIS | ||||
| * | print the operating system of TCP SYN packets with the -o option | 2003-08-21 | 1 | -3/+18 | |
| | | |||||
| * | add support for ESP decryption; ok deraadt@; feedback mickey@; | 2003-07-17 | 1 | -6/+13 | |
| | | | | | many manpage fixes from jmc@ | ||||
| * | libpcap and tcpdump now understand the new pflog datalink type. | 2003-05-14 | 1 | -2/+3 | |
| | | | | | | | old datalink type is still recognized. ok henning@ dhartmei@ frantzen@ | ||||
| * | pfsync support; deraadt@ ok | 2002-11-30 | 1 | -2/+3 | |
| | | |||||
