summaryrefslogtreecommitdiffstats
path: root/usr.sbin/tcpdump (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* typo: print hexdump of packet, instead of pcap header; ok canacar, henningmarkus2007-09-211-3/+3
|
* add -I option for printing the interfaces;markus2007-08-284-12/+24
| | | | ok hshoexer, henning, mcbridge (some time ago)
* Fix Segmentation fault for tcpdump when used in combination withmglocker2007-08-141-5/+5
| | | | | | | | | | ``-v -y IEEE802_11'', and ``-v -y IEEE802_11_RADIO''. The snaplen was passed instead of the real packet size at some point, which caused tcpdump todo tcp checksum verifications on packets where it shouldn't. Diff from canacar@ and me, tested by canacar@, reyk@, and me. OK canacar@ reyk@
* No need to #include <netinet/in.h> twice. Noticed by Diego Casati.krw2007-08-131-3/+2
| | | | ok stevesk@
* s/ETHERTYPE_EAPOL/ETHERTYPE_PAE/ to be in line with src/sys/net/ethertypes.hdamien2007-07-211-4/+4
| | | | | | also, ETHERTYPE_PAE is the name used in the 802.1X standard. pointed out by jsg@
* Handle IPv6 on PPP printer, from Stuart Hendersoncanacar2007-07-091-2/+13
|
* Display payload for DS to DS and NO DS traffic.canacar2007-07-021-2/+10
| | | | ok reyk@, looks ok damien@
* make it easy to spot wich nfs version the traffic is.thib2007-06-292-6/+20
| | | | input & OK canacar@
* When aligning buffers correctly handle the case where thecanacar2007-06-273-11/+20
| | | | | | buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@
* Print leading zeros in MAC addresses. Initial diff from Stanislavray2007-06-211-17/+6
| | | | | | Kruchinin, idea to use ether_ntoa from Claudio Jeker. OK canacar, idea OK henning, jasper, and tedu.
* Print communities in a nicer format and include a missing well-known one.claudio2007-06-141-2/+6
| | | | This is mostly from Stuart Henderson. OK canacar@
* The External Route Tag for AS-External-LSAs can be an arbitrary 32bitreyk2007-06-142-7/+7
| | | | | | | value and doesn't need to be an IPv4 address. It is more like a vendor-specific field. as discussed with claudio after looking into rfc2328
* do not inlcude ipx headershenning2007-06-042-9/+3
|
* unbreak 802.11 element parsing by using the TCHECK2 macro correctlyreyk2007-06-031-4/+4
| | | | ok claudio@
* Move a useless warning to the only case that uses it (-f) from canacar@todd2007-06-011-3/+4
| | | | ok beck@
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* pf_state is no longer the same; modify pf_print_state.c to acceptmcbride2007-05-312-52/+36
| | | | | | pfsync_state (as in pfctl, but in network byte order). ok henning@ toby@ pyr@
* Do not change snaplen when parsing a netflow packetcanacar2007-05-291-5/+2
|
* Additional truncation checks, mostly from tcpdump.org,canacar2007-05-271-21/+68
| | | | | and remove some unused hlen assignments found by lint from Stuart Henderson, reviewed by me, ok henning@ claudio@
* Don't fail hard on non RH0 routing headers. The calculation of the lengthclaudio2007-05-061-11/+9
| | | | | | of RH headers is always the same. Now tcpdump just prints the type, length and segleft headers for unknown headers. OK henning@ mcbride@
* Fix the out of bounds check when parsing IPv6 headers. Fixes a SIGSEGVclaudio2007-05-061-2/+2
| | | | | when parsing IPv6 headers with unknown or corrupted header options. OK henning@ mcbride@
* Fix aligenment issues by using bcopy() and a local variable instead of theclaudio2007-03-271-25/+41
| | | | | problematic *(u_intXX_t*)t casts. This fixes the bus errors I got on sparc64 while doing IEEE802_11_RADIO dumps. OK reyk@ mglocker@
* Print the reason code of deauth and disassociation packets if in verbose mode.claudio2007-03-261-1/+58
| | | | | This helps debugging issues with stations that fail to join a network. OK mglocker@, reyk@, jsg@
* Recognise more vendor payloads (taken from IKE Scan)tom2007-03-161-1/+65
|
* register is so 1980, plus knfderaadt2007-02-231-10/+8
|
* c should be u_char for printing option numbers. fix parameter requeststevesk2007-01-081-3/+3
| | | | list option numbers >127 being negative. ok krw@
* define bpf filters to match address and header fields in IEEE 802.11reyk2007-01-021-4/+69
| | | | | | | | wlan frames (DLT_IEEE802_11 and DLT_IEEE802_11_RADIO linktypes). see tcpdump(8) for details. "Works for me" claudio@ ok jmc@ deraadt@
* Fix truncation check by directly comparing both values and don'tmoritz2006-12-261-3/+3
| | | | | | compare the unsigned value of the subtraction against <= 0. ok krw@ ray@
* print icmpv6 inside security header (ah/esp).itojun2006-12-261-2/+9
|
* IPv6 passive OS fingerprinting.itojun2006-12-132-15/+30
| | | | | reuses IPv4 signature file (assuming that TCP code is shared among IPv4/v6). mcbride ok.
* switch IPv6 advanced API from RFC2292 to RFC3542 (2292 is superseded by 3542).itojun2006-12-091-2/+2
| | | | | | | | | | the kernel still handles RFC2292 set/getsockopts, so that compiled binary has no trouble running. userland sees RFC3542 symbols only on header file so new code has to use RFC3542 API. bump libc shlib minor for function additions. tested on i386/amd64 by jmc, i386 by brad. checked by deraadt.
* try udpencap before ike; ok hshoexermarkus2006-11-211-4/+4
|
* in octal, eight looks like 10... fix the STP_FLAGS_BITS definitionreyk2006-11-211-2/+2
| | | | introduced with my previous commit.
* add support for displaying Rapid Spanning Tree Protocol frames,reyk2006-11-191-20/+79
| | | | | | as specified in IEEE 802.1d-2004/802.1w. ok mcbride@
* enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6)naddy2006-09-192-11/+46
|
* recognize xauth vendor payloadhshoexer2006-08-242-4/+19
| | | | ok ho markus
* 0x00000c05 type specifies an Ethernet frame. Print the src MACstevesk2006-08-241-10/+16
| | | | with -v or the frame in hex with -vv.
* replace magic numbers, no binary change; prompted by deraadt@stevesk2006-08-201-4/+6
|
* correct order of include filesderaadt2006-08-201-2/+2
|
* need to print leading space nowstevesk2006-08-151-2/+2
|
* stupid error: increment not decrement here.stevesk2006-08-151-2/+2
|
* Recognise OpenBSD vendor IDhshoexer2006-07-021-3/+9
|
* set the RSSI Max value in ath(4) and use the new RSSI radiotap headerreyk2006-06-231-1/+13
| | | | | | | instead of the old db signal header. also allow tcpdump and hostapd to print the new RSSI radiotap header values current/max rssi. ok damien@ jsg@
* printing these version numbers in usage is ugly and uselessderaadt2006-06-161-9/+4
|
* Print the demotion indicator in the carp packet.mcbride2006-06-021-3/+4
| | | | ok mpf@
* grok AESCTRhshoexer2006-06-021-2/+3
|
* Pass the captured packet length in addition to the real packet lengthmoritz2006-06-014-22/+39
| | | | | | | to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@
* remove extra space in output; ok markus@ moritz@stevesk2006-05-311-5/+5
|
* No need for return; at end of functions returning void.moritz2006-05-291-3/+2
|
* Be more careful to not touch memory outside themoritz2006-05-291-18/+26
| | | | | | captured packet. Fixes some more crashes. ok canacar@ deraadt@