| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Only allow root to run tcpdump. It's needed for the chroot security. |   otto | 2005-09-23 | 1 | -30/+24 | |
| | | | | | ok moritz@ deraadt@ | |||||
| * | Fix a reliability issue where an over-read of 4 bytes could result in the |   cloder | 2005-08-28 | 1 | -5/+12 | |
| | | | | | | | | tcpdump process being terminated when tcpdump running with -vv tries to print a a short IKE SA payload. Specifically OK'd for 3.8 release by deraadt@. OK canacar@, hshoexer@. | |||||
| * | recognize both versions of the nat-t-draft v2 vendor IDs |   hshoexer | 2005-07-12 | 1 | -1/+8 | |
| | | | | | ok ho@ | |||||
| * | proto is `ip6', not `ipv6'; |   jmc | 2005-07-08 | 1 | -3/+3 | |
| | | | | | | initial report from robert hansen; confirmed by otto@ | |||||
| * | some more ike payload types | hshoexer | 2005-06-28 | 2 | -6/+20 | |
| | | | | | ok ho@ | |||||
| * | add missing error check for decode_prefix4. ok deraadt@ |   moritz | 2005-06-14 | 1 | -2/+8 | |
| | | ||||||
| * | add ike encap types UDP_ENCAP_TUNNEL and UDP_ENCAP_TRANSPORT | hshoexer | 2005-06-06 | 1 | -2/+3 | |
| | | ||||||
| * | Add SA replay counter synchronization to pfsync(4). Required for IPsec |   ho | 2005-05-28 | 1 | -2/+11 | |
| | | | | | failover gateways. ok mcbride@, "looks good" hshoexer@ | |||||
| * | support decapsulation of 802.11 data frames |   reyk | 2005-05-28 | 3 | -8/+43 | |
| | | | | | ok canacar@ | |||||
| * | log two pairs of uid/pid through pflog: the uid/pid of the process that |   dhartmei | 2005-05-27 | 1 | -2/+13 | |
| | | | | | | | | | | inserted the rule which causes the logging. secondly, the uid/pid of the process in case the logged packet is delivered to/from a local socket. a lookup of the local socket can be forced for logged packets with a new option, 'log (user)'. make tcpdump print the additional information when -e and -v is used. note: this changes the pflog header struct, rebuild all dependancies. ok bob@, henning@. | |||||
| * | more missing bounds checks. ok marius@ deraadt@ | moritz | 2005-05-24 | 1 | -2/+13 | |
| | | ||||||
| * | add some missing bounds checks. ok marius@ | moritz | 2005-05-23 | 1 | -2/+5 | |
| | | ||||||
| * | Call endpwent() _after_ we're done with the struct passwd fields. | otto | 2005-05-23 | 1 | -2/+2 | |
| | | | | | ok canacar@ | |||||
| * | correct comments and function namens to reflect new parent/child | moritz | 2005-05-22 | 2 | -49/+49 | |
| | | | | | situation. suggested by and ok otto@ | |||||
| * | fix signal race in statistics output. ok cloder@ henning@ | moritz | 2005-05-22 | 3 | -51/+37 | |
| | | ||||||
| * | recognize more ike payload types | hshoexer | 2005-05-18 | 1 | -13/+11 | |
| | | | | | ok cloder ho | |||||
| * | more setres[ug]id; ok deraadt@ |   djm | 2005-05-03 | 1 | -25/+13 | |
| | | ||||||
| * | Fix a potential infinite loop that could be triggered by an invalid BGP | cloder | 2005-04-27 | 1 | -8/+21 | |
| | | | | | | packet. Partially from tcpdump.org, with additional paranoia added so that the problem is actually fixed. OK deraadt, otto | |||||
| * | sync up, add some missing types |   brad | 2005-04-24 | 1 | -28/+90 | |
| | | ||||||
| * | fix signal race by removing STATE_QUIT completely. | moritz | 2005-04-20 | 1 | -7/+8 | |
| | | | | | help and ok otto@ canacar@ | |||||
| * | tcpdump developers are uncautious retards, plain and simple; ok otto |   deraadt | 2005-04-11 | 1 | -5/+5 | |
| | | ||||||
| * | do not forget to call endpwent(). ok moritz@ | otto | 2005-04-10 | 1 | -1/+2 | |
| | | ||||||
| * | reduce the set of allowed actions in the privileged part | moritz | 2005-04-10 | 1 | -4/+44 | |
| | | | | | | | depending on the arguments supplied to tcpdump. ok otto@, canacar@ | |||||
| * | remove trailing \n in errx(). | moritz | 2005-03-30 | 1 | -2/+2 | |
| | | | | | ok deraadt@ | |||||
| * | output final summary to stderr instead of stdout, | moritz | 2005-03-30 | 1 | -5/+5 | |
| | | | | | | so it won't get mixed when tcpdump -w - is used. ok henning@ deraadt@ | |||||
| * | simplify state engine, the old one was very confusing and wrong too. | otto | 2005-03-26 | 1 | -22/+42 | |
| | | | | | ok moritz@ "just get this in" deraadt@ | |||||
| * | whitespace | moritz | 2005-03-25 | 2 | -8/+8 | |
| | | ||||||
| * | whitespace | otto | 2005-03-25 | 1 | -1/+1 | |
| | | ||||||
| * | clean up printing of rule numbers. omit ruleset name and sub-rule number | dhartmei | 2005-03-11 | 1 | -14/+18 | |
| | | | | | | when irrelevant. print 'def' for default rule. omit numerical reason if description is printed. ok henning@, deraadt@ | |||||
| * | simplification; ok reyk | deraadt | 2005-03-09 | 1 | -14/+6 | |
| | | ||||||
| * | make this compile on strict-alignment architectures. someone send | deraadt | 2005-03-08 | 1 | -2/+3 | |
| | | | | | reyk a sparc64 please! | |||||
| * | add a printer for 802.11 and for additional radiotap headers, | reyk | 2005-03-07 | 5 | -8/+689 | |
| | | | | | | | use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver. ok canacar@ | |||||
| * | - do not mark up punctuation | jmc | 2005-03-06 | 1 | -12/+13 | |
| | | | | | | - use full "For example:" instead of "e.g.," where the latter looks too awful - no need to use Ns before `.' | |||||
| * | uppercase takes precedence over lower when sorting options; | jmc | 2005-03-06 | 2 | -37/+37 | |
| | | ||||||
| * | add support for multiple DLTs using the -L and -y options. | reyk | 2005-03-06 | 5 | -37/+168 | |
| | | | | | ok canacar@ | |||||
| * | decode ike modp_2048 payload | hshoexer | 2005-03-03 | 1 | -2/+3 | |
| | | | | | ok cloder ho | |||||
| * | Fix indentation as to not mislead the code reader. No functional change. |   aaron | 2005-02-17 | 1 | -4/+3 | |
| | | ||||||
| * | Recognize RFC 3947 NAT-T VID. hshoexer@ ok | ho | 2005-02-15 | 1 | -1/+8 | |
| | | ||||||
| * | update `dst port', `ip proto', `ether proto', and SEE ALSO; | jmc | 2005-02-04 | 1 | -13/+41 | |
| | | | | | ok mcbride@ | |||||
| * | although arguments to `ip proto' and `ether proto' are keywords, and do | jmc | 2005-01-22 | 1 | -9/+7 | |
| | | | | | | | | | | need to be escaped, they are not shell keywords; this wording seems to have been introduced when the page was mdoc'd; it now matches (more or less) how it was, and {F,N}BSD pages; found by naddy@ | |||||
| * | "bad-timestamp" is a valid logging reason; | jmc | 2005-01-02 | 1 | -2/+2 | |
| | | | | | from joel knight; | |||||
| * | Add support for displaying Shared Spanning Tree Protocol frames, a minor |   pascoe | 2004-12-20 | 2 | -8/+36 | |
| | | | | | | | variation on 802.1d/STP. ok otto@ mcbride@ | |||||
| * | use strchr instead of index | deraadt | 2004-12-19 | 1 | -4/+4 | |
| | | ||||||
| * | permit protocol name longer than 3 letters. canacar ok |   itojun | 2004-12-13 | 1 | -3/+3 | |
| | | ||||||
| * | print ipv6 on enc0, too; ok otto, tests by fries |   markus | 2004-11-17 | 1 | -6/+14 | |
| | | ||||||
| * | implement -q for icmp, deregister, print usigned values using an unsigned | otto | 2004-10-17 | 1 | -26/+29 | |
| | | | | | format. ok markus@ | |||||
| * | print ip_len for -v; ok otto, hshoexer, henning | markus | 2004-10-15 | 1 | -2/+4 | |
| | | ||||||
| * | When printing attributes do not cast unsigned value to signed. | hshoexer | 2004-10-07 | 1 | -3/+3 | |
| | | | | | | ok & help otto ok deraadt henning markus | |||||
| * | print th_seq from truncated tcp headers (e.g. in icmp need-frag) | markus | 2004-09-16 | 1 | -2/+5 | |
| | | ||||||
| * | add -T tcp to enforce interpretation as TCP | markus | 2004-09-16 | 4 | -8/+14 | |
| | | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |