Lines Matching +full:route +full:- +full:ptp
5 BGP: Fix an undefined behavior when it tries to parse a too-short packet.
7 CDP: only hex-dump unknown TLVs in verbose mode.
9 DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
10 boot file URL, and SZTP redirect options; add DUID-UUID printing
12 DNS: Detect and correctly handle too-short URI RRs.
25 IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
37 NFS: Avoid printing non-ASCII characters.
39 OSPF: Update LS-Ack printing not to run off the end of the packet.
44 Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
46 PTP: Fix spelling of type SIGNALING, Parse major and minor version
49 RPKI-Router: Refine length and bounds checks.
50 RX: Use the "%Y-%m-%d" date format.
51 smbutil.c: Use the "%Y-%m-%d" date format.
54 ZEP: Use the "%Y-%m-%d" date format.
57 Print the supported time stamp types (-J) to stdout instead of stderr.
58 Print the list of data link types (-L) to stdout instead of stderr.
60 Update --version option to print 32/64-bit build and time_t size.
62 with -i.
73 Skip privilege dropping when using -Z root on --with-user builds.
81 Fix warnings when building for 32-bit and defining _TIME_BITS=64.
85 Add a configure option to help debugging (--enable-instrument-functions).
89 Autoconf: Get --with-user and --with-chroot right.
90 Autoconf: Fix --static-pcap-only test on Solaris 10.
92 Autoconf: Update config.{guess,sub}, timestamps 2024-01-01.
95 Autoconf: Update the install-sh script to the 2020-11-14.01 version.
99 tests: Use the -tttt option, by default, for the tests.
103 mkdep: Exit with a non-zero status if a command fails.
105 Autoconf: don't put anything before -I and -L flags for local libpcap.
107 Autoconf, CMake: use pkg-config and Homebrew when looking for
119 Make illumos build warning-free.
132 CVE-2023-1801: Fix an out-of-bounds write in the SMB printer.
139 Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21.
146 PTP: Use the proper values for the control field and print un-allocated
154 Makefile.in: Add "make -s install" in the releasecheck target.
158 Address all shellcheck warnings in update-test.sh.
171 BGP: decode BGP link-bandwidth extended community properly.
194 Zephyr: Avoid printing non-ASCII characters.
198 IPv6: Remove an obsolete code in an always-false #if wrapper.
216 IPv6: Add some checks for the Hop-by-Hop Options header
217 IPv6: Add a check for the Jumbo Payload Hop-by-Hop option.
219 PTP: fix printing of the correction fields
220 PTP: Use ND_LCHECK_U for checking invalid length.
223 ESP: Add a workaround to a "use-of-uninitialized-value".
224 PPP: Add tests to avoid incorrectly re-entering ppp_hdlc().
225 PPP: Don't process further if protocol is unknown (-e option).
233 Fix an error when cross-compiling.
238 Fix auto-enabling of Capsicum on FreeBSD with Autoconf.
247 CI: Add back running tcpdump -J/-L and capture, now with Cirrus VMs.
249 On Solaris, for 64-bit builds, use the 64-bit pcap-config.
251 CMake: Add a way to request -Werror and equivalents.
252 configure: Special-case macOS /usr/bin/pcap-config as we do in CMake.
253 configure: Use pcap-config --static-pcap-only if available.
259 Fix some snapend-changing routines to protect against pointer
266 Assign ndo->ndo_packetp in pretty_print_packet().
269 netdissect.h: Keep the link-layer dissectors names sorted.
270 setsignal(): Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP)
279 Update AIX and Solaris-related specifics.
300 ForCES: Refine SPARSEDATA-TLV length check.
309 Fix "make clean" for out-of-tree autotools builds
319 CVE-2018-16301: For the -F option handle large input files safely.
321 Print unsupported link-layer protocol packets in hex.
323 Broadcom LI and Ethernet switches tag, IEEE 802.15.9, IP-over-InfiniBand
325 Architecture, OpenFlow 1.3, Precision Time Protocol (PTP), SSH, WHOIS,
327 Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16, HNCP,
328 ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP ping, MPTCP, NFS,
330 VXLAN-GPE.
332 Make SLL2 the default for Linux "any" pseudo-device.
333 Add --micro and --nano shorthands.
334 Add --count to print a counter only instead of decoding.
335 Add --print, to cause packet printing even with -w.
341 Allow -C arguments > 2^31-1 GB if they can fit into a long.
342 Handle very large -f files by rejecting them.
345 With no -s, or with -s 0, don't specify the snapshot length with newer
350 autoconf: replace --with-system-libpcap with --disable-local-libpcap.
354 Make out-of-tree builds more reliable.
355 Use pkg-config to detect libpcap if available.
358 Test both with "normal" and "x87" floating-point.
379 Handle DLT_ENC files *not* written on the same OS and byte-order host.
380 Add, and use, macros to do locale-independent case mapping.
388 A huge thank you to Denis, Francois-Xavier and Guy who did much of the heavy lifting.
391 CVE-2017-16808 (AoE)
392 CVE-2018-14468 (FrameRelay)
393 CVE-2018-14469 (IKEv1)
394 CVE-2018-14470 (BABEL)
395 CVE-2018-14466 (AFS/RX)
396 CVE-2018-14461 (LDP)
397 CVE-2018-14462 (ICMP)
398 CVE-2018-14465 (RSVP)
399 CVE-2018-14881 (BGP)
400 CVE-2018-14464 (LMP)
401 CVE-2018-14463 (VRRP)
402 CVE-2018-14467 (BGP)
403 CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
404 CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
405 CVE-2018-14880 (OSPF6)
406 CVE-2018-16451 (SMB)
407 CVE-2018-14882 (RPL)
408 CVE-2018-16227 (802.11)
409 CVE-2018-16229 (DCCP)
410 CVE-2018-16230 (BGP)
411 CVE-2018-16452 (SMB)
412 CVE-2018-16300 (BGP)
413 CVE-2018-16228 (HNCP)
414 CVE-2019-15166 (LMP)
415 CVE-2019-15167 (VRRP)
417 CVE-2018-14879 (tcpdump -V)
422 any protocol name resolution if -n is specified.
425 Clean up IS-IS printing.
427 CVE-2017-11543 (SLIP)
428 CVE-2017-13011 (bittok2str_internal)
430 CVE-2017-12989 (RESP)
431 CVE-2017-12990 (ISAKMP)
432 CVE-2017-12995 (DNS)
433 CVE-2017-12997 (LLDP)
434 Fix buffer over-read vulnerabilities:
435 CVE-2017-11541 (safeputs)
436 CVE-2017-11542 (PIMv1)
437 CVE-2017-12893 (SMB/CIFS)
438 CVE-2017-12894 (lookup_bytestring)
439 CVE-2017-12895 (ICMP)
440 CVE-2017-12896 (ISAKMP)
441 CVE-2017-12897 (ISO CLNS)
442 CVE-2017-12898 (NFS)
443 CVE-2017-12899 (DECnet)
444 CVE-2017-12900 (tok2strbuf)
445 CVE-2017-12901 (EIGRP)
446 CVE-2017-12902 (Zephyr)
447 CVE-2017-12985 (IPv6)
448 CVE-2017-12986 (IPv6 routing headers)
449 CVE-2017-12987 (IEEE 802.11)
450 CVE-2017-12988 (telnet)
451 CVE-2017-12991 (BGP)
452 CVE-2017-12992 (RIPng)
453 CVE-2017-12993 (Juniper)
454 CVE-2017-12994 (BGP)
455 CVE-2017-12996 (PIMv2)
456 CVE-2017-12998 (ISO IS-IS)
457 CVE-2017-12999 (ISO IS-IS)
458 CVE-2017-13000 (IEEE 802.15.4)
459 CVE-2017-13001 (NFS)
460 CVE-2017-13002 (AODV)
461 CVE-2017-13003 (LMP)
462 CVE-2017-13004 (Juniper)
463 CVE-2017-13005 (NFS)
464 CVE-2017-13006 (L2TP)
465 CVE-2017-13007 (Apple PKTAP)
466 CVE-2017-13008 (IEEE 802.11)
467 CVE-2017-13009 (IPv6 mobility)
468 CVE-2017-13010 (BEEP)
469 CVE-2017-13012 (ICMP)
470 CVE-2017-13013 (ARP)
471 CVE-2017-13014 (White Board)
472 CVE-2017-13015 (EAP)
473 CVE-2017-11543 (SLIP)
474 CVE-2017-13016 (ISO ES-IS)
475 CVE-2017-13017 (DHCPv6)
476 CVE-2017-13018 (PGM)
477 CVE-2017-13019 (PGM)
478 CVE-2017-13020 (VTP)
479 CVE-2017-13021 (ICMPv6)
480 CVE-2017-13022 (IP)
481 CVE-2017-13023 (IPv6 mobility)
482 CVE-2017-13024 (IPv6 mobility)
483 CVE-2017-13025 (IPv6 mobility)
484 CVE-2017-13026 (ISO IS-IS)
485 CVE-2017-13027 (LLDP)
486 CVE-2017-13028 (BOOTP)
487 CVE-2017-13029 (PPP)
488 CVE-2017-13030 (PIM)
489 CVE-2017-13031 (IPv6 fragmentation header)
490 CVE-2017-13032 (RADIUS)
491 CVE-2017-13033 (VTP)
492 CVE-2017-13034 (PGM)
493 CVE-2017-13035 (ISO IS-IS)
494 CVE-2017-13036 (OSPFv3)
495 CVE-2017-13037 (IP)
496 CVE-2017-13038 (PPP)
497 CVE-2017-13039 (ISAKMP)
498 CVE-2017-13040 (MPTCP)
499 CVE-2017-13041 (ICMPv6)
500 CVE-2017-13042 (HNCP)
501 CVE-2017-13043 (BGP)
502 CVE-2017-13044 (HNCP)
503 CVE-2017-13045 (VQP)
504 CVE-2017-13046 (BGP)
505 CVE-2017-13047 (ISO ES-IS)
506 CVE-2017-13048 (RSVP)
507 CVE-2017-13049 (Rx)
508 CVE-2017-13050 (RPKI-Router)
509 CVE-2017-13051 (RSVP)
510 CVE-2017-13052 (CFM)
511 CVE-2017-13053 (BGP)
512 CVE-2017-13054 (LLDP)
513 CVE-2017-13055 (ISO IS-IS)
514 CVE-2017-13687 (Cisco HDLC)
515 CVE-2017-13688 (OLSR)
516 CVE-2017-13689 (IKEv1)
517 CVE-2017-13690 (IKEv2)
518 CVE-2017-13725 (IPv6 routing headers)
522 CVE-2017-11108/Fix bounds checking for STP.
524 Fixup -C for file size >2GB (GH #488).
528 On Linux fix a use-after-free when the requested interface does not exist.
534 (More information in the log with CVE-2016-* and CVE-2017-*)
535 Change the way protocols print link-layer addresses (Fix heap overflows
536 in CALM-FAST and GeoNetworking printers)
546 Compile with more warning options in devel mode if supported (-Wcast-qual, ...)
548 Fix a bunch of de-constifications
550 Update Coverity and Travis-CI setup
555 Try opening interfaces by name first, then by name-as-index
557 Fix a segmentation fault with 'tcpdump -J'
561 Fixes issue where statistics not reported when -G and -W options used
585 Babel: Add decoder for source-specific extension
586 CDP: Filter out non-printable characters
599 FDDI: Fix -e output for FDDI
600 FR: Add some packet-length checks and improve Q.933 printing (Fix heap overflows)
604 ICMP6: Fetch a 32-bit big-endian quantity with EXTRACT_32BITS()
611 IPoFC: Fix -e output (IP-over-Fibre Channel)
616 ISOCLNS/IS-IS: Add support for Purge Originator Identifier (RFC6232) and test cases
617 ISOCLNS/IS-IS: Don't overwrite packet data when checking the signature
618 ISOCLNS/IS-IS: Filter out non-printable characters
619 ISOCLNS/IS-IS: Fix segmentation faults
620 ISOCLNS/IS-IS: Have signature_verify() do the copying and clearing
623 LLC/SNAP: With -e, print the LLC header before the SNAP header; without it, cut the SNAP header
626 LLC: Fix the printing of RFC 948-style IP packets
627 LLC: Skip the LLC and SNAP headers with -x for 802.11 and some other protocols
637 OLSR: Fix printing of smart-gateway HNAs in IPv4
649 RADIUS: Add Value 13 "VLAN" to Tunnel-Type attribute
650 RADIUS: Filter out non-printable characters
653 RPKI-RTR: Add a return value check for "fn_printn" call
654 RPKI-RTR: Remove printing when truncated condition already detected
674 STP: Filter out non-printable characters
676 TCP: Correct TCP option Kind value for TCP Auth and add SCPS-TP
679 TCP: Put TCP-AO option decoding right
682 TokenRing: Fix -e output
688 VTP: Add bounds checks and filter out non-printable characters
694 Fix "-x" for Apple PKTAP and PPI packets
696 Fix display of timestamps with -tt, -ttt and -ttttt options
698 Use PRIx64 to print a 64-bit number in hex.
700 … dagid is always an IPv6 address, not an opaque 128-bit string, and other fixes to RPL printer.
706 draft-ietf-nvo3-vxlan-gpe-01
707 Network Service Header: draft-ietf-sfc-nsh-01
709 Pass an adjusted struct pcap_pkthdr to the sub-printer.
711 CVE-2014-8767: OLSR
712 CVE-2014-8768: Geonet
713 CVE-2014-8769: AODV
714 Don't do the DDP-over-UDP heuristic first: GitHub issue #499.
724 BGP: add decoding of ADD-PATH capability
725 fixes to LLC header printing, and RFC948-style IP packets
740 fixes for CVE-2015-0261: IPv6 mobility header check issue
741 fixes for CVE-2015-2153, 2154, 2155: kday packets
749 improvements to telnet printer, even if not -v
750 omit length for bcp, print-tcp uses it
755 CVE-2014-9140 PPP dissector fixed.
759 fix out-of-source-tree builds: find libpcap that is out of source
765 add a short option '#', same as long option '--number'
777 -A flag does not consider CR to be printable anymore
794 fix printing of unknown TCP options, and tcp fast-open
796 some gcc-version-specific flag tuning
804 Point users to the the-tcpdump-group repository on GitHub rather
809 Add support for VXLAN (draft-mahalingam-dutt-dcops-vxlan-03),
810 and add "vxlan" as an option for -T.
811 Add support for OTV (draft-hasmit-otv-04).
817 RPKI-RTR (RFC6810) is now official (TCP Port 323)
820 Add "radius" as an option for -T.
823 Decode DHCPv6 AFTR-Name option (RFC6334).
827 Address sub-TLV in ISIS.
830 On Linux systems with cap-ng.h, drop root privileges
841 Document "-T carp"
844 Document that "-e" is used to get MAC addresses
849 Don't treat 192_1_2, when passed to -i, as an interface number
855 updates to documentation on -l, -U and -w flags.
862 permit -n flag to affect print-ip for protocol numbers
874 Don't assume we have <rpc/rpc.h> - check for it.
875 Support "-T carp" as a way of dissecting IP protocol 112 as CARP
877 Support Hilscher NetAnalyzer link-layer header format.
879 Get rid of never-true test.
880 Fix an unintended fall-through in a case statement in the ARP
884 Make stricter sanity checks in the ES-IS printer.
892 merged 802.15.4 decoder from Dmitry Eremin-Solenikov <dbaryshkov
895 Use "-H", not "-h", for the 802.11s option. (-h always help)
897 add support for the RPKI/Router Protocol, per -ietf-sidr-rpki-rtr-12
899 sFlow changes for 64-bit counters.
905 updated RPL type code to RPL-17 draft
917 If -U is specified, flush the file after creating it, so it's
918 not zero-length
921 Add a -h flag, and only attempt to recognize 802.11s mesh
923 When printing the link-layer type list, send *all* output to
931 Don't blow up if a zero-length link-layer address is passed to
940 Add a -b flag to print the AS number in BGP packets in ASDOT
944 Handle the new DLT_ for memory-mapped USB captures on Linux
945 Make the default snapshot (-s) the maximum
946 Print name of device (when -L is used)
951 Add support for non-standard Ethertypes used by 3com PPPoE gear
956 Add basic IPv6 support to print-olsr
963 Don't include -L/usr/lib in LDFLAGS
968 Fix compiling with/out smi (--with{,out}-smi)
969 Fix compiling without IPv6 support (--disable-ipv6)
977 Add support for compiling on case-insensitive file systems
981 Use newer libpcap API's (allows -B option on all platforms)
982 Add -I to turn on monitor mode
989 Add support for Frame-Relay ARP
990 Decode DHCP Option 121 (RFC 3442 Classless Static Route)
991 Decode DHCP Option 249 (MS Classless Static Route) the same as Option 121
993 Print EGP header in new-world-order style
994 Converted print-isakmp.c to NETDISSECT
997 Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted
1005 BGP: fixes for IPv6-less builds.
1008 802.11: print QoS data, avoid dissect of no-data frame, ignore padding.
1013 BGP: don't print TLV values that didn't fit, from www.digit-labs.org.
1027 Add support for the Message-id NACK c-type.
1029 Add support for Multiple-STP as per 802.1s
1030 Add support for rapid-SPT as per 802.1w
1031 Add support for CFM Link-trace msg, Link-trace-Reply msg,
1032 Sender-ID tlv, private tlv, port, interface status
1034 https://tools.ietf.org/id/draft-foschiano-udld-02.txt
1037 Add support for variable-length checksum in DCCP, as per section 9 of
1039 Add support for per-VLAN spanning tree and per-VLAN rapid spanning tree
1040 Add support for Multiple-STP as per 802.1s
1051 Add support for Frame-Relay ARP
1054 Add support for FRF.16 Multilink Frame-Relay (DLT_MFR)
1061 Add support for PPP over Frame-Relay
1065 Add support for Address-Withdraw and Label-Withdraw Msgs
1076 Decoder support for more Juniper link-layer types
1082 Add support for RSVP integrity objects, update fast-reroute
1087 Update diffserver-TE codepoints as per RFC 4124.
1089 Don't require any fields other than flags to be present in IS-IS
1108 ML-FR, ML-PIC, ML-PPP, PL-PPP, LS-PIC
1112 TCP-MD5 (RFC 2385)
1113 ESP-in-UDP (RFC 3948)
1123 LSP-PING
1125 EIGRP-IP, EIGRP-IPX
1127 Radio - via radiotap
1138 Fixes for print-isakmp.c CVE: CAN-2004-0183, CAN-2004-0184
1139 https://web.archive.org/web/20160328035955/https://www.rapid7.com/resources/advisories/R7-0017.jsp
1140 IP-over-IEEE1394 printing.
1143 fixes for print-aodv.c - check for too short packets
1144 formatting changes to print-ascii for hex output.
1145 check for too short packets: print-bgp.c, print-bootp.c, print-cdp.c,
1146 print-chdlc.c, print-domain.c, print-icmp.c, print-icmp6.c,
1147 print-ip.c, print-lwres.c, print-ospf.c, print-pim.c,
1148 print-ppp.c,print-pppoe.c, print-rsvp.c, print-wb.c
1149 print-ether.c - better handling of unknown types.
1150 print-isoclns.c - additional decoding of types.
1151 print-llc.c - strings for LLC names added.
1152 print-pfloc.c - various enhancements
1153 print-radius.c - better decoding to strings.
1157 changed syntax of -E argument so that multiple SAs can be decrypted
1173 Fixes to Frame-Relay decoder for Q.933/922 frames.
1174 Clarified when Solaris can do captures as non-root.
1176 New -U flag. -flush stdout after every packet
1177 New -A flag -print ascii only
1178 support for decoding IS-IS inside Cisco HDLC Frames
1184 UDP/TCP pseudo-checksum properly for source-route options.
1186 Add support for RFC 2625 IP-over-Fibre Channel.
1197 Pretty-print unprintable network names in 802.11 printer.
1199 Updated DHCPv6 printer to match draft-ietf-dhc-dhcpv6-22.txt
1206 Handle "old" DR-Priority and Bidir-Capable PIM HELLO options.
1215 LLC SAP support for FDDI/token ring/RFC-1483 style ATM
1220 Fix a memory leak found by Miklos Szeredi - pcap_ether_aton().
1225 OUI 0x0000f8 decoded as encapsulated ethernet for Cisco-custom bridging
1227 Solaris - devices with digits in them. Stefan Hudson <hudson@mbay.net>
1233 IPv6 ND improvements, MobileIP dissector, 2292bis-02 for RA option.
1235 Handle IPX socket 0x553 -> NetBIOS-over-IPX socket, "nwlink-dgm"
1238 MIPS and SPARC get strict alignment macros (affects print-bgp.c)
1241 DHCP6 updated to draft-22.txt spec.
1245 now we are -Wstrict-prototype clean.
1250 cjclark@alum.mit.edu: print the IP proto for non-initial fragments.
1254 Token Ring support on DLPI - Onno van der Linden <onno@simplex.nl>
1257 Handle (GRE-encapsulated) PPTP
1258 added -C option to rotate save file every optarg * 1,000,000 bytes.
1259 support for "vrrp" name - NetBSD, by Klaus Klein <kleink@netbsd.org>.
1261 IS-IS over PPP support, from Hannes Gredler <hannes@juniper.net>.
1264 HP-UX can now handle large number of PPAs.
1285 IPv6 improvements: dhcp (draft-15), mobile-ip6, ppp, ospf6,
1288 timed, vrrp, radius, chdlc, cnfp, cdp, IEEE802.1d, raw-AppleTalk
1292 Improvements to: print-telnet, IPTalk, bootp/dhcp, ECN, PPP,
1295 HP-UX 11.0 -- find the right dlpi device.
1296 Solaris 8 - IPv6 works
1297 Linux - Added support for an "any" device to capture on all interfaces
1307 - switch to config.h for autoconf
1308 - unify RCSID strings
1309 - Updated PIMv1, PIMv2, DVMRP, IGMP parsers, add Cisco Auto-RP parser
1310 - Really fix the RIP printer
1311 - Fix MAC address -> name translation.
1312 - some -Wall -Wformat fixes
1313 - update makemib to parse much of SMIv2
1314 - Print TCP sequence # with -vv even if you normally wouldn't
1315 - Print as much of IP/TCP/UDP headers as possible even if truncated.
1318 - -X will make a ascii dump. from netbsd.
1319 - telnet command sequence decoder (ff xx xx). from netbsd.
1320 - print-bgp.c: improve options printing. ugly code exists for
1322 - const poisoning in SMB decoder.
1323 - -Wall -Werror clean checks.
1324 - bring in KAME IPv6/IPsec decoding code.
1327 - SNMPv2 and SNMPv3 printer
1328 - If compiled with libsmi, tcpdump can load MIBs on the fly to decode
1330 - Incorporate NFS parsing code from NetBSD. Adds support for nfsv3.
1331 - portability fixes
1332 - permit building in different directories.
1335 - bring in code at
1336 /afs/transarc.com/public/afs-contrib/tools/tcpdump for parsing
1340 - SMB printing code
1343 - print-rx.c: add code for printing MakeDir and StoreStatus. Also
1347 - Created tcpdump.org repository
1351 - Hardwire Linux slip support since it's too hard to detect.
1353 - Redo configuration of "network" libraries (-lsocket and -lnsl) to
1356 - Added -a which tries to translate network and broadcast addresses to
1359 - Added a configure option to disable gcc.
1361 - Added a "raw" packet printer.
1363 - Not having an interface address is no longer fatal. Requested by John
1366 - Rework signal setup to accommodate Linux.
1368 - OSPF truncation check fix. Also display the type of OSPF packets
1372 - Fix truncation check bugs in the Kerberos printer. Reported by Ezra
1375 - Don't catch SIGHUP when invoked with nohup(1). Thanks to Dave Plonka
1378 - Specify full install target as a way of detecting if install
1381 - Bit-swap FDDI addresses for BSD/OS too. Thanks to Paul Vixie
1384 - Fix off-by-one bug when testing size of ethernet packets. Thanks to
1387 - Add a local autoconf macro to check for routines in libraries; the
1391 - Add a local autoconf macro to check for types; the autoconf version
1394 - Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header
1397 - Extend OSF ip header workaround to versions 1 and 2.
1399 - Fix some signed problems in the nfs printer. As reported by David
1402 - Detect group wheel and use it as the default since BSD/OS' install
1405 - AIX needs special loader options. Thanks to Jonathan I. Kamens
1408 - Fixed the nfs printer to print port numbers in decimal. Thanks to
1411 - Find installed libpcap in /usr/local/lib when not using gcc.
1413 - Disallow network masks with non-network bits set.
1415 - Attempt to detect "egcs" versions of gcc.
1417 - Add missing closing double quotes when displaying bootp strings.
1418 Reported by Viet-Trung Luu (vluu@picard.math.uwaterloo.ca)
1422 - Added Linux support.
1424 - GRE encapsulated packet printer thanks to John Hawkinson
1427 - Rewrite gmt2local() to avoid problematic os dependencies.
1429 - Suppress nfs truncation message on errors.
1431 - Add missing m4 quoting in AC_LBL_UNALIGNED_ACCESS autoconf macro.
1434 - Enable "ip_hl vs. ip_vhl" workaround for OSF4 too.
1436 - Print arp hardware type in host order. Thanks to Onno van der Linden
1439 - Avoid solaris compiler warnings. Thanks to Bruce Barnett
1442 - Fix rip printer to not print one more route than is actually in the
1443 packet. Thanks to Jean-Luc Richier (Jean-Luc.Richier@imag.fr) and
1446 - Use autoconf endian detection since BYTE_ORDER isn't defined on all systems.
1448 - Fix dvmrp printer truncation checks and add a dvmrp probe printer.
1451 - Rewrite ospf printer to improve truncation checks.
1453 - Don't parse tcp options past the EOL. As noted by David Sacerdote
1459 - Don't say really small UDP packets are truncated just because they
1464 - Added rfc1716 icmp codes as suggested by Martin Fredriksson
1467 - Print mtu for icmp unreach need frag packets. Thanks to John
1470 - Decode icmp router discovery messages. Thanks to Jeffrey Honig
1473 - Added a printer entry for DLT_IEEE802 as suggested by Tak Kushida
1476 - Check igmp checksum if possible. Thanks to John Hawkinson.
1478 - Made changes for SINIX. Thanks to Andrej Borsenkow
1481 - Use autoconf's idea of the top level directory in install targets.
1484 - Avoid infinite loop in tcp options printing code. Thanks to Jeffrey
1487 - Avoid using -lsocket in IRIX 5.2 and earlier since it breaks snoop.
1490 - Added some more packet truncation checks.
1492 - On systems that have it, use sigset() instead of signal() since
1495 - Fixed some more alignment problems on the alpha.
1497 - Add code to massage unprintable characters in the domain and ipx
1500 - Added explicit netmask support. Thanks to Steve Nuchia
1503 - Add "sca" keyword (for DEC cluster services) as suggested by Terry
1506 - Add "atalk" keyword as suggested by John Hawkinson.
1508 - Added an igrp printer. Thanks to Francis Dupont
1511 - Print IPX net numbers in hex a la Novell Netware. Thanks to Terry
1514 - Fixed snmp extended tag field parsing bug. Thanks to Pascal Hennequin
1515 (pascal.hennequin@hugo.int-evry.fr)
1517 - Added some ETHERTYPEs missing on some systems.
1519 - Added truncated packet macros and various checks.
1521 - Fixed endian problems with the DECnet printer.
1523 - Use $CC when checking gcc version. Thanks to Carl Lindberg
1526 - Fixes for AIX (although this system is not yet supported). Thanks to
1529 - Fix bugs in the autoconf misaligned accesses code fragment.
1531 - Include sys/param.h to get BYTE_ORDER in a few places. Thanks to
1536 - Print new icmp unreachable codes as suggested by Martin Fredriksson
1540 - Fix an alignment endian bug in getname(). Thanks to John Hawkinson.
1542 - Define "new" domain record types if not found in arpa/nameserv.h.
1547 - Added RIP V2 support. Thanks to Jeffrey Honig (jch@bsdi.com)
1549 - Added T/TCP options printing. As suggested by Richard Stevens
1552 - Use autoconf to detect architectures that can't handle misaligned
1557 - Changed u_int32/int32 to u_int32_t/int32_t to be consistent with bsd
1560 - Port to GNU autoconf.
1562 - Add support for printing DVMRP and PIM traffic thanks to
1565 - Fix AppleTalk, IPX and DECnet byte order problems due to wrong endian
1568 - Minor fixes to the man page thanks to Mark Andrews.
1570 - Endian fixes to RTP and vat packet dumpers, thanks to Bruce Mah
1573 - Added support for new dns types, thanks to Rainer Orth.
1575 - Fixed tftp_print() to print the block number for ACKs.
1577 - Document -dd and -ddd. Resulted from a bug report from Charlie Slater
1580 - Check return status from malloc/calloc/etc.
1582 - Check return status from pcap_loop() so we can print an error and
1585 - Bail if ip option length is <= 0. Resulted from a bug report from
1588 - Print out a little more information for sun rpc packets.
1590 - Add support for Kerberos 4 thanks to John Hawkinson (jhawk@mit.edu).
1592 - Fixed the Fix EXTRACT_SHORT() and EXTRACT_LONG() macros (which were
1595 - Fixed alignment bug in ipx_decode(). Thanks to Matt Crawford
1598 - Fix ntp_print() to not print garbage when the stratum is
1601 - Rewrote tcp options printer code to check for truncation. Added
1604 - Fixed an endian bug in the ospf printer. Thanks to Jeffrey C Honig
1607 - Fix rip printer to handle 4.4 BSD sockaddr struct which only uses one
1611 - Don't checksum ip header if we don't have all of it. Thanks to John
1614 - Print out hostnames if possible in egp printer. Thanks to Jeffrey
1620 - Include time.h when SVR4 is defined to avoid problems under Solaris
1623 - Fix etheraddr_string() in the ETHER_SERVICE to return the saved
1625 (petri@ibr.cs.tu-bs.de).
1627 - Detect when pcap raises the snaplen (e.g. with snit). Print a warning
1629 (Pascal.Hennequin@hugo.int-evry.fr).
1631 - Add a truncated packet test to print-nfs.c. Thanks to Pascal Hennequin.
1633 - BYTEORDER -> BYTE_ORDER Thanks to Terry Kennedy (terry@spcvxa.spc.edu).
1637 - Although there never was a 3.0.3 release, the linux boys cleverly
1642 - Change configuration to not use gcc v2 flags with gcc v1.
1644 - Redo gmt2local() so that it works under BSDI (which seems to return
1648 - Change configure to recognize IP[0-9]* as "mips" SGI hardware. Based
1651 - Don't pass cc flags to gcc. Resulted from a bug report from Rainer
1652 Orth (ro@techfak.uni-bielefeld.de).
1654 - Fixed printout of connection id for uncompressed tcp slip packets.
1657 - Hack around deficiency in Ultrix's make.
1659 - Add ETHERTYPE_TRAIL define which is missing from irix5.
1663 - Fix problems with gcc2 vs. malloc() and read() prototypes under SunOS 4.
1667 - Added support for printing tcp option timestamps thanks to
1670 - Reorganize protocol dumpers to take const pointers to packets so they
1674 the output form -x would be wrong on little endian machines because
1678 - Added support for decnet protocol dumping thanks to Jeff Mogul
1681 - Fix bug that caused length of packet to be incorrectly printed
1685 - Added support for IPX protocol dumping thanks to Brad Parker
1688 - Added check to verify IP header checksum under -v thanks to
1691 - Move packet capture code to new libpcap library (which is
1694 - Prototype everything and assume an ansi compiler.
1696 - print-arp.c: Print hardware ethernet addresses if they're not
1699 - print-bootp.c: Decode the cmu vendor field. Add RFC1497 tags.
1702 - print-fddi.c: Improvements. Thanks to Jeffrey Mogul
1705 - print-icmp.c: Byte swap netmask before printing. Thanks to
1708 - print-ip.c: Print the inner ip datagram of ip-in-ip encapsulated packets.
1710 "(encap)". Under -v, both the inner and output packets are dumped
1714 conventional syntax. (You can filter away all the ip-in-ip traffic
1717 - print-nfs.c: Keep pending rpc's in circular table. Add generic
1720 - print-ospf.c: Improvements. Thanks to Jeffrey Mogul.
1722 - tcpdump.c: Add -T flag allows interpretation of "vat", "wb", "rpc"
1728 - Fix bug with -c flag.
1732 - savefile.c: Remove hack that shouldn't have been exported. Add
1735 - Added the 'icmp' keyword. For example, 'icmp[0] != 8 and icmp[0] != 0'
1736 matches non-echo/reply ICMP packets.
1738 - Many improvements to filter code optimizer.
1740 - Added 'multicast' keyword and extended the 'broadcast' keyword can now be
1744 - Added support for monitoring the loopback interface (i.e. 'tcpdump -i lo').
1748 - Added support for the Ungermann-Bass Ethernet on IBM/PC-RTs running AOS.
1751 - Added EGP and OSPF printers, thanks to Jeffrey Honig.
1755 - Internal release (never publicly exported).
1759 - Various byte ordering fixes.
1761 - Add truncation checks.
1763 - inet.c: Support BSD style SIOCGIFCONF.
1765 - nametoaddr.c: Handle multi addresses for single host.
1767 - optimize.c: Rewritten.
1769 - pcap-bpf.c: don't choke when we get ptraced. only set promiscuous
1772 - print-atal.c: Fix an alignment bug (thanks to
1775 - print-bootp.c: First attempt at decoding the vendor buffer.
1777 - print-domain.c: Fix truncation checks.
1779 - print-icmp.c: Calculate length of packets from the ip header.
1781 - print-ip.c: Print frag id in decimal (so it's easier to match up
1782 with non-frags). Add support for ospf, egp and igmp.
1784 - print-nfs.c: Lots of changes.
1786 - print-ntp.c: Make some verbose output depend on -v.
1788 - print-snmp.c: New version from John LoVerso.
1790 - print-tcp.c: Print rfc1072 tcp options.
1792 - tcpdump.c: Print "0x" prefix for %x formats. Always print 6 digits
1795 - A packet dumper has been added (thanks to Jeff Mogul of DECWRL).
1800 - BSD is supported. You must have BPF in your kernel.
1805 - Compressed SLIP packets can now be dumped, provided you use our
1807 packet; the compressed headers are dumped with the '-e' option.
1809 - Machines with little-endian byte ordering are supported (thanks to
1812 - Ultrix 4.0 is supported (also thanks to Jeff Mogul).
1814 - IBM RT and Stanford Enetfilter support has been added by
1819 - TFTP packets are now printed (requests only).
1821 - BOOTP packets are now printed.
1823 - SNMP packets are now printed. (thanks to John LoVerso of Xylogics).
1825 - Sparc architectures, including the Sparcstation-1, are now
1828 - SunOS 4 is now supported thanks to Micky Liu of Columbia
1831 - IP options are now printed.
1833 - RIP packets are now printed.
1835 - There's a -v flag that prints out more information than the
1837 and -q flag that prints out less (e.g., it will disable
1838 interpretation of AppleTalk-in-UDP).
1840 - The grammar has undergone substantial changes (if you have an
1841 earlier version of tcpdump, you should re-read the manual
1851 "and" -- e.g., you have to say "host foo and port bar" instead
1861 - Initial public release.