Lines Matching +full:update +full:- +full:fc +full:- +full:fixup
5 BGP: Fix an undefined behavior when it tries to parse a too-short packet.
7 CDP: only hex-dump unknown TLVs in verbose mode.
9 DHCPv6: client-id/server-id DUID type 2 correction; parse the user class,
10 boot file URL, and SZTP redirect options; add DUID-UUID printing
12 DNS: Detect and correctly handle too-short URI RRs.
25 IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers.
37 NFS: Avoid printing non-ASCII characters.
39 OSPF: Update LS-Ack printing not to run off the end of the packet.
44 Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397;
49 RPKI-Router: Refine length and bounds checks.
50 RX: Use the "%Y-%m-%d" date format.
51 smbutil.c: Use the "%Y-%m-%d" date format.
54 ZEP: Use the "%Y-%m-%d" date format.
57 Print the supported time stamp types (-J) to stdout instead of stderr.
58 Print the list of data link types (-L) to stdout instead of stderr.
60 Update --version option to print 32/64-bit build and time_t size.
62 with -i.
70 Update ND_BYTES_BETWEEN() macro for better accuracy.
71 Update ND_BYTES_AVAILABLE_AFTER() macro for better accuracy.
73 Skip privilege dropping when using -Z root on --with-user builds.
80 Update the "Error converting time" tests for packet times.
81 Fix warnings when building for 32-bit and defining _TIME_BITS=64.
85 Add a configure option to help debugging (--enable-instrument-functions).
89 Autoconf: Get --with-user and --with-chroot right.
90 Autoconf: Fix --static-pcap-only test on Solaris 10.
92 Autoconf: Update config.{guess,sub}, timestamps 2024-01-01.
95 Autoconf: Update the install-sh script to the 2020-11-14.01 version.
99 tests: Use the -tttt option, by default, for the tests.
103 mkdep: Exit with a non-zero status if a command fails.
104 Autoconf: use V_INCLS to update the list of include search paths.
105 Autoconf: don't put anything before -I and -L flags for local libpcap.
107 Autoconf, CMake: use pkg-config and Homebrew when looking for
119 Make illumos build warning-free.
132 CVE-2023-1801: Fix an out-of-bounds write in the SMB printer.
134 ICMPv6: Update the output to show a RPL DAO field name.
139 Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21.
146 PTP: Use the proper values for the control field and print un-allocated
151 cmake: Update the minimum required version to 2.8.12 (except Windows).
154 Makefile.in: Add "make -s install" in the releasecheck target.
158 Address all shellcheck warnings in update-test.sh.
170 BGP: Update cease notification decoding to RFC 9003.
171 BGP: decode BGP link-bandwidth extended community properly.
190 lwres: Fix a length check, update a variable type.
194 Zephyr: Avoid printing non-ASCII characters.
198 IPv6: Remove an obsolete code in an always-false #if wrapper.
207 OSPF: Update to match the Router Properties registry.
216 IPv6: Add some checks for the Hop-by-Hop Options header
217 IPv6: Add a check for the Jumbo Payload Hop-by-Hop option.
223 ESP: Add a workaround to a "use-of-uninitialized-value".
224 PPP: Add tests to avoid incorrectly re-entering ppp_hdlc().
225 PPP: Don't process further if protocol is unknown (-e option).
230 Update config.guess and config.sub.
233 Fix an error when cross-compiling.
238 Fix auto-enabling of Capsicum on FreeBSD with Autoconf.
245 AppVeyor CI: update Npcap site, update to 1.12 SDK.
247 CI: Add back running tcpdump -J/-L and capture, now with Cirrus VMs.
249 On Solaris, for 64-bit builds, use the 64-bit pcap-config.
251 CMake: Add a way to request -Werror and equivalents.
252 configure: Special-case macOS /usr/bin/pcap-config as we do in CMake.
253 configure: Use pcap-config --static-pcap-only if available.
259 Fix some snapend-changing routines to protect against pointer
262 Memory allocator: Update nd_add_alloc_list() to a static function.
266 Assign ndo->ndo_packetp in pretty_print_packet().
268 Update tok2strbuf() to a static function.
269 netdissect.h: Keep the link-layer dissectors names sorted.
270 setsignal(): Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP)
277 Update the print interface for the packet count to stdout.
279 Update AIX and Solaris-related specifics.
281 Update README.md and README.Win32.md.
282 Update some comments with new RFC numbers.
288 ICMP: Update the snapend for some nested IP packets.
289 MACsec: Update the snapend thus the ICV field is not payload
296 DHCPv6: Update the snapend for nested DHCPv6 packets
298 TCP: Update the snapend before decoding a MPTCP option
300 ForCES: Refine SPARSEDATA-TLV length check.
309 Fix "make clean" for out-of-tree autotools builds
312 man: Update a reference as www.cifs.org is gone.
313 man: Update DNS sections
319 CVE-2018-16301: For the -F option handle large input files safely.
321 Print unsupported link-layer protocol packets in hex.
323 Broadcom LI and Ethernet switches tag, IEEE 802.15.9, IP-over-InfiniBand
327 Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16, HNCP,
328 ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP ping, MPTCP, NFS,
330 VXLAN-GPE.
332 Make SLL2 the default for Linux "any" pseudo-device.
333 Add --micro and --nano shorthands.
334 Add --count to print a counter only instead of decoding.
335 Add --print, to cause packet printing even with -w.
341 Allow -C arguments > 2^31-1 GB if they can fit into a long.
342 Handle very large -f files by rejecting them.
345 With no -s, or with -s 0, don't specify the snapshot length with newer
350 autoconf: replace --with-system-libpcap with --disable-local-libpcap.
354 Make out-of-tree builds more reliable.
355 Use pkg-config to detect libpcap if available.
358 Test both with "normal" and "x87" floating-point.
379 Handle DLT_ENC files *not* written on the same OS and byte-order host.
380 Add, and use, macros to do locale-independent case mapping.
388 A huge thank you to Denis, Francois-Xavier and Guy who did much of the heavy lifting.
391 CVE-2017-16808 (AoE)
392 CVE-2018-14468 (FrameRelay)
393 CVE-2018-14469 (IKEv1)
394 CVE-2018-14470 (BABEL)
395 CVE-2018-14466 (AFS/RX)
396 CVE-2018-14461 (LDP)
397 CVE-2018-14462 (ICMP)
398 CVE-2018-14465 (RSVP)
399 CVE-2018-14881 (BGP)
400 CVE-2018-14464 (LMP)
401 CVE-2018-14463 (VRRP)
402 CVE-2018-14467 (BGP)
403 CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
404 CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
405 CVE-2018-14880 (OSPF6)
406 CVE-2018-16451 (SMB)
407 CVE-2018-14882 (RPL)
408 CVE-2018-16227 (802.11)
409 CVE-2018-16229 (DCCP)
410 CVE-2018-16230 (BGP)
411 CVE-2018-16452 (SMB)
412 CVE-2018-16300 (BGP)
413 CVE-2018-16228 (HNCP)
414 CVE-2019-15166 (LMP)
415 CVE-2019-15167 (VRRP)
417 CVE-2018-14879 (tcpdump -V)
422 any protocol name resolution if -n is specified.
425 Clean up IS-IS printing.
427 CVE-2017-11543 (SLIP)
428 CVE-2017-13011 (bittok2str_internal)
430 CVE-2017-12989 (RESP)
431 CVE-2017-12990 (ISAKMP)
432 CVE-2017-12995 (DNS)
433 CVE-2017-12997 (LLDP)
434 Fix buffer over-read vulnerabilities:
435 CVE-2017-11541 (safeputs)
436 CVE-2017-11542 (PIMv1)
437 CVE-2017-12893 (SMB/CIFS)
438 CVE-2017-12894 (lookup_bytestring)
439 CVE-2017-12895 (ICMP)
440 CVE-2017-12896 (ISAKMP)
441 CVE-2017-12897 (ISO CLNS)
442 CVE-2017-12898 (NFS)
443 CVE-2017-12899 (DECnet)
444 CVE-2017-12900 (tok2strbuf)
445 CVE-2017-12901 (EIGRP)
446 CVE-2017-12902 (Zephyr)
447 CVE-2017-12985 (IPv6)
448 CVE-2017-12986 (IPv6 routing headers)
449 CVE-2017-12987 (IEEE 802.11)
450 CVE-2017-12988 (telnet)
451 CVE-2017-12991 (BGP)
452 CVE-2017-12992 (RIPng)
453 CVE-2017-12993 (Juniper)
454 CVE-2017-12994 (BGP)
455 CVE-2017-12996 (PIMv2)
456 CVE-2017-12998 (ISO IS-IS)
457 CVE-2017-12999 (ISO IS-IS)
458 CVE-2017-13000 (IEEE 802.15.4)
459 CVE-2017-13001 (NFS)
460 CVE-2017-13002 (AODV)
461 CVE-2017-13003 (LMP)
462 CVE-2017-13004 (Juniper)
463 CVE-2017-13005 (NFS)
464 CVE-2017-13006 (L2TP)
465 CVE-2017-13007 (Apple PKTAP)
466 CVE-2017-13008 (IEEE 802.11)
467 CVE-2017-13009 (IPv6 mobility)
468 CVE-2017-13010 (BEEP)
469 CVE-2017-13012 (ICMP)
470 CVE-2017-13013 (ARP)
471 CVE-2017-13014 (White Board)
472 CVE-2017-13015 (EAP)
473 CVE-2017-11543 (SLIP)
474 CVE-2017-13016 (ISO ES-IS)
475 CVE-2017-13017 (DHCPv6)
476 CVE-2017-13018 (PGM)
477 CVE-2017-13019 (PGM)
478 CVE-2017-13020 (VTP)
479 CVE-2017-13021 (ICMPv6)
480 CVE-2017-13022 (IP)
481 CVE-2017-13023 (IPv6 mobility)
482 CVE-2017-13024 (IPv6 mobility)
483 CVE-2017-13025 (IPv6 mobility)
484 CVE-2017-13026 (ISO IS-IS)
485 CVE-2017-13027 (LLDP)
486 CVE-2017-13028 (BOOTP)
487 CVE-2017-13029 (PPP)
488 CVE-2017-13030 (PIM)
489 CVE-2017-13031 (IPv6 fragmentation header)
490 CVE-2017-13032 (RADIUS)
491 CVE-2017-13033 (VTP)
492 CVE-2017-13034 (PGM)
493 CVE-2017-13035 (ISO IS-IS)
494 CVE-2017-13036 (OSPFv3)
495 CVE-2017-13037 (IP)
496 CVE-2017-13038 (PPP)
497 CVE-2017-13039 (ISAKMP)
498 CVE-2017-13040 (MPTCP)
499 CVE-2017-13041 (ICMPv6)
500 CVE-2017-13042 (HNCP)
501 CVE-2017-13043 (BGP)
502 CVE-2017-13044 (HNCP)
503 CVE-2017-13045 (VQP)
504 CVE-2017-13046 (BGP)
505 CVE-2017-13047 (ISO ES-IS)
506 CVE-2017-13048 (RSVP)
507 CVE-2017-13049 (Rx)
508 CVE-2017-13050 (RPKI-Router)
509 CVE-2017-13051 (RSVP)
510 CVE-2017-13052 (CFM)
511 CVE-2017-13053 (BGP)
512 CVE-2017-13054 (LLDP)
513 CVE-2017-13055 (ISO IS-IS)
514 CVE-2017-13687 (Cisco HDLC)
515 CVE-2017-13688 (OLSR)
516 CVE-2017-13689 (IKEv1)
517 CVE-2017-13690 (IKEv2)
518 CVE-2017-13725 (IPv6 routing headers)
522 CVE-2017-11108/Fix bounds checking for STP.
524 Fixup -C for file size >2GB (GH #488).
528 On Linux fix a use-after-free when the requested interface does not exist.
534 (More information in the log with CVE-2016-* and CVE-2017-*)
535 Change the way protocols print link-layer addresses (Fix heap overflows
536 in CALM-FAST and GeoNetworking printers)
546 Compile with more warning options in devel mode if supported (-Wcast-qual, ...)
548 Fix a bunch of de-constifications
550 Update Coverity and Travis-CI setup
551 Update Visual Studio files
555 Try opening interfaces by name first, then by name-as-index
557 Fix a segmentation fault with 'tcpdump -J'
561 Fixes issue where statistics not reported when -G and -W options used
570 802.11: Radiotap dBm values get printed as dB; Update a test output accordingly
579 BFD: Update specification from draft to RFC 5880
580 BFD: Update to print optional authentication field
583 BGP: Update BGP numbers from IANA; Print minor values for FSM notification
585 Babel: Add decoder for source-specific extension
586 CDP: Filter out non-printable characters
592 DHCPv6: Update Status Codes with RFCs/IANA names
599 FDDI: Fix -e output for FDDI
600 FR: Add some packet-length checks and improve Q.933 printing (Fix heap overflows)
602 Geneve: Fix error message with invalid option length; Update list option classes
604 ICMP6: Fetch a 32-bit big-endian quantity with EXTRACT_32BITS()
611 IPoFC: Fix -e output (IP-over-Fibre Channel)
616 ISOCLNS/IS-IS: Add support for Purge Originator Identifier (RFC6232) and test cases
617 ISOCLNS/IS-IS: Don't overwrite packet data when checking the signature
618 ISOCLNS/IS-IS: Filter out non-printable characters
619 ISOCLNS/IS-IS: Fix segmentation faults
620 ISOCLNS/IS-IS: Have signature_verify() do the copying and clearing
623 LLC/SNAP: With -e, print the LLC header before the SNAP header; without it, cut the SNAP header
626 LLC: Fix the printing of RFC 948-style IP packets
627 LLC: Skip the LLC and SNAP headers with -x for 802.11 and some other protocols
629 MPLS LSP ping: Update printing for RFC 4379, bug fixes, more bounds checks
637 OLSR: Fix printing of smart-gateway HNAs in IPv4
649 RADIUS: Add Value 13 "VLAN" to Tunnel-Type attribute
650 RADIUS: Filter out non-printable characters
653 RPKI-RTR: Add a return value check for "fn_printn" call
654 RPKI-RTR: Remove printing when truncated condition already detected
674 STP: Filter out non-printable characters
676 TCP: Correct TCP option Kind value for TCP Auth and add SCPS-TP
679 TCP: Put TCP-AO option decoding right
682 TokenRing: Fix -e output
688 VTP: Add bounds checks and filter out non-printable characters
694 Fix "-x" for Apple PKTAP and PPI packets
696 Fix display of timestamps with -tt, -ttt and -ttttt options
698 Use PRIx64 to print a 64-bit number in hex.
700 … dagid is always an IPv6 address, not an opaque 128-bit string, and other fixes to RPL printer.
706 draft-ietf-nvo3-vxlan-gpe-01
707 Network Service Header: draft-ietf-sfc-nsh-01
709 Pass an adjusted struct pcap_pkthdr to the sub-printer.
711 CVE-2014-8767: OLSR
712 CVE-2014-8768: Geonet
713 CVE-2014-8769: AODV
714 Don't do the DDP-over-UDP heuristic first: GitHub issue #499.
724 BGP: add decoding of ADD-PATH capability
725 fixes to LLC header printing, and RFC948-style IP packets
739 DCCP: update Packet Types with RFC4340/IANA names
740 fixes for CVE-2015-0261: IPv6 mobility header check issue
741 fixes for CVE-2015-2153, 2154, 2155: kday packets
747 Radius: update Packet Type Codes and Attribute Types with RFC/IANA names
749 improvements to telnet printer, even if not -v
750 omit length for bcp, print-tcp uses it
755 CVE-2014-9140 PPP dissector fixed.
759 fix out-of-source-tree builds: find libpcap that is out of source
765 add a short option '#', same as long option '--number'
777 -A flag does not consider CR to be printable anymore
794 fix printing of unknown TCP options, and tcp fast-open
796 some gcc-version-specific flag tuning
804 Point users to the the-tcpdump-group repository on GitHub rather
809 Add support for VXLAN (draft-mahalingam-dutt-dcops-vxlan-03),
810 and add "vxlan" as an option for -T.
811 Add support for OTV (draft-hasmit-otv-04).
817 RPKI-RTR (RFC6810) is now official (TCP Port 323)
820 Add "radius" as an option for -T.
821 Update Action codes for handle_action function according to
823 Decode DHCPv6 AFTR-Name option (RFC6334).
827 Address sub-TLV in ISIS.
830 On Linux systems with cap-ng.h, drop root privileges
841 Document "-T carp"
844 Document that "-e" is used to get MAC addresses
849 Don't treat 192_1_2, when passed to -i, as an interface number
855 updates to documentation on -l, -U and -w flags.
862 permit -n flag to affect print-ip for protocol numbers
874 Don't assume we have <rpc/rpc.h> - check for it.
875 Support "-T carp" as a way of dissecting IP protocol 112 as CARP
877 Support Hilscher NetAnalyzer link-layer header format.
879 Get rid of never-true test.
880 Fix an unintended fall-through in a case statement in the ARP
884 Make stricter sanity checks in the ES-IS printer.
892 merged 802.15.4 decoder from Dmitry Eremin-Solenikov <dbaryshkov
895 Use "-H", not "-h", for the 802.11s option. (-h always help)
897 add support for the RPKI/Router Protocol, per -ietf-sidr-rpki-rtr-12
899 sFlow changes for 64-bit counters.
905 updated RPL type code to RPL-17 draft
917 If -U is specified, flush the file after creating it, so it's
918 not zero-length
921 Add a -h flag, and only attempt to recognize 802.11s mesh
923 When printing the link-layer type list, send *all* output to
931 Don't blow up if a zero-length link-layer address is passed to
940 Add a -b flag to print the AS number in BGP packets in ASDOT
944 Handle the new DLT_ for memory-mapped USB captures on Linux
945 Make the default snapshot (-s) the maximum
946 Print name of device (when -L is used)
951 Add support for non-standard Ethertypes used by 3com PPPoE gear
956 Add basic IPv6 support to print-olsr
963 Don't include -L/usr/lib in LDFLAGS
967 Update testcases to make output changes
968 Fix compiling with/out smi (--with{,out}-smi)
969 Fix compiling without IPv6 support (--disable-ipv6)
977 Add support for compiling on case-insensitive file systems
979 Update support for decoding AFS
980 Update DHCPv6 printer
981 Use newer libpcap API's (allows -B option on all platforms)
982 Add -I to turn on monitor mode
989 Add support for Frame-Relay ARP
993 Print EGP header in new-world-order style
994 Converted print-isakmp.c to NETDISSECT
997 Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted
1005 BGP: fixes for IPv6-less builds.
1008 802.11: print QoS data, avoid dissect of no-data frame, ignore padding.
1013 BGP: don't print TLV values that didn't fit, from www.digit-labs.org.
1017 Update man page to reflect changes to libpcap
1027 Add support for the Message-id NACK c-type.
1029 Add support for Multiple-STP as per 802.1s
1030 Add support for rapid-SPT as per 802.1w
1031 Add support for CFM Link-trace msg, Link-trace-Reply msg,
1032 Sender-ID tlv, private tlv, port, interface status
1034 https://tools.ietf.org/id/draft-foschiano-udld-02.txt
1037 Add support for variable-length checksum in DCCP, as per section 9 of
1039 Add support for per-VLAN spanning tree and per-VLAN rapid spanning tree
1040 Add support for Multiple-STP as per 802.1s
1043 Update dhcp6 options table as per IETF standardization activities
1051 Add support for Frame-Relay ARP
1054 Add support for FRF.16 Multilink Frame-Relay (DLT_MFR)
1061 Add support for PPP over Frame-Relay
1065 Add support for Address-Withdraw and Label-Withdraw Msgs
1076 Decoder support for more Juniper link-layer types
1082 Add support for RSVP integrity objects, update fast-reroute
1087 Update diffserver-TE codepoints as per RFC 4124.
1089 Don't require any fields other than flags to be present in IS-IS
1108 ML-FR, ML-PIC, ML-PPP, PL-PPP, LS-PIC
1112 TCP-MD5 (RFC 2385)
1113 ESP-in-UDP (RFC 3948)
1116 IP over FC
1123 LSP-PING
1125 EIGRP-IP, EIGRP-IPX
1127 Radio - via radiotap
1138 Fixes for print-isakmp.c CVE: CAN-2004-0183, CAN-2004-0184
1139 https://web.archive.org/web/20160328035955/https://www.rapid7.com/resources/advisories/R7-0017.jsp
1140 IP-over-IEEE1394 printing.
1143 fixes for print-aodv.c - check for too short packets
1144 formatting changes to print-ascii for hex output.
1145 check for too short packets: print-bgp.c, print-bootp.c, print-cdp.c,
1146 print-chdlc.c, print-domain.c, print-icmp.c, print-icmp6.c,
1147 print-ip.c, print-lwres.c, print-ospf.c, print-pim.c,
1148 print-ppp.c,print-pppoe.c, print-rsvp.c, print-wb.c
1149 print-ether.c - better handling of unknown types.
1150 print-isoclns.c - additional decoding of types.
1151 print-llc.c - strings for LLC names added.
1152 print-pfloc.c - various enhancements
1153 print-radius.c - better decoding to strings.
1157 changed syntax of -E argument so that multiple SAs can be decrypted
1173 Fixes to Frame-Relay decoder for Q.933/922 frames.
1174 Clarified when Solaris can do captures as non-root.
1176 New -U flag. -flush stdout after every packet
1177 New -A flag -print ascii only
1178 support for decoding IS-IS inside Cisco HDLC Frames
1184 UDP/TCP pseudo-checksum properly for source-route options.
1186 Add support for RFC 2625 IP-over-Fibre Channel.
1197 Pretty-print unprintable network names in 802.11 printer.
1199 Updated DHCPv6 printer to match draft-ietf-dhc-dhcpv6-22.txt
1206 Handle "old" DR-Priority and Bidir-Capable PIM HELLO options.
1215 LLC SAP support for FDDI/token ring/RFC-1483 style ATM
1220 Fix a memory leak found by Miklos Szeredi - pcap_ether_aton().
1225 OUI 0x0000f8 decoded as encapsulated ethernet for Cisco-custom bridging
1227 Solaris - devices with digits in them. Stefan Hudson <hudson@mbay.net>
1233 IPv6 ND improvements, MobileIP dissector, 2292bis-02 for RA option.
1235 Handle IPX socket 0x553 -> NetBIOS-over-IPX socket, "nwlink-dgm"
1238 MIPS and SPARC get strict alignment macros (affects print-bgp.c)
1241 DHCP6 updated to draft-22.txt spec.
1245 now we are -Wstrict-prototype clean.
1250 cjclark@alum.mit.edu: print the IP proto for non-initial fragments.
1254 Token Ring support on DLPI - Onno van der Linden <onno@simplex.nl>
1257 Handle (GRE-encapsulated) PPTP
1258 added -C option to rotate save file every optarg * 1,000,000 bytes.
1259 support for "vrrp" name - NetBSD, by Klaus Klein <kleink@netbsd.org>.
1261 IS-IS over PPP support, from Hannes Gredler <hannes@juniper.net>.
1264 HP-UX can now handle large number of PPAs.
1285 IPv6 improvements: dhcp (draft-15), mobile-ip6, ppp, ospf6,
1288 timed, vrrp, radius, chdlc, cnfp, cdp, IEEE802.1d, raw-AppleTalk
1292 Improvements to: print-telnet, IPTalk, bootp/dhcp, ECN, PPP,
1295 HP-UX 11.0 -- find the right dlpi device.
1296 Solaris 8 - IPv6 works
1297 Linux - Added support for an "any" device to capture on all interfaces
1307 - switch to config.h for autoconf
1308 - unify RCSID strings
1309 - Updated PIMv1, PIMv2, DVMRP, IGMP parsers, add Cisco Auto-RP parser
1310 - Really fix the RIP printer
1311 - Fix MAC address -> name translation.
1312 - some -Wall -Wformat fixes
1313 - update makemib to parse much of SMIv2
1314 - Print TCP sequence # with -vv even if you normally wouldn't
1315 - Print as much of IP/TCP/UDP headers as possible even if truncated.
1318 - -X will make a ascii dump. from netbsd.
1319 - telnet command sequence decoder (ff xx xx). from netbsd.
1320 - print-bgp.c: improve options printing. ugly code exists for
1322 - const poisoning in SMB decoder.
1323 - -Wall -Werror clean checks.
1324 - bring in KAME IPv6/IPsec decoding code.
1327 - SNMPv2 and SNMPv3 printer
1328 - If compiled with libsmi, tcpdump can load MIBs on the fly to decode
1330 - Incorporate NFS parsing code from NetBSD. Adds support for nfsv3.
1331 - portability fixes
1332 - permit building in different directories.
1335 - bring in code at
1336 /afs/transarc.com/public/afs-contrib/tools/tcpdump for parsing
1340 - SMB printing code
1343 - print-rx.c: add code for printing MakeDir and StoreStatus. Also
1347 - Created tcpdump.org repository
1351 - Hardwire Linux slip support since it's too hard to detect.
1353 - Redo configuration of "network" libraries (-lsocket and -lnsl) to
1356 - Added -a which tries to translate network and broadcast addresses to
1359 - Added a configure option to disable gcc.
1361 - Added a "raw" packet printer.
1363 - Not having an interface address is no longer fatal. Requested by John
1366 - Rework signal setup to accommodate Linux.
1368 - OSPF truncation check fix. Also display the type of OSPF packets
1372 - Fix truncation check bugs in the Kerberos printer. Reported by Ezra
1375 - Don't catch SIGHUP when invoked with nohup(1). Thanks to Dave Plonka
1378 - Specify full install target as a way of detecting if install
1381 - Bit-swap FDDI addresses for BSD/OS too. Thanks to Paul Vixie
1384 - Fix off-by-one bug when testing size of ethernet packets. Thanks to
1387 - Add a local autoconf macro to check for routines in libraries; the
1391 - Add a local autoconf macro to check for types; the autoconf version
1394 - Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header
1397 - Extend OSF ip header workaround to versions 1 and 2.
1399 - Fix some signed problems in the nfs printer. As reported by David
1402 - Detect group wheel and use it as the default since BSD/OS' install
1405 - AIX needs special loader options. Thanks to Jonathan I. Kamens
1408 - Fixed the nfs printer to print port numbers in decimal. Thanks to
1411 - Find installed libpcap in /usr/local/lib when not using gcc.
1413 - Disallow network masks with non-network bits set.
1415 - Attempt to detect "egcs" versions of gcc.
1417 - Add missing closing double quotes when displaying bootp strings.
1418 Reported by Viet-Trung Luu (vluu@picard.math.uwaterloo.ca)
1422 - Added Linux support.
1424 - GRE encapsulated packet printer thanks to John Hawkinson
1427 - Rewrite gmt2local() to avoid problematic os dependencies.
1429 - Suppress nfs truncation message on errors.
1431 - Add missing m4 quoting in AC_LBL_UNALIGNED_ACCESS autoconf macro.
1434 - Enable "ip_hl vs. ip_vhl" workaround for OSF4 too.
1436 - Print arp hardware type in host order. Thanks to Onno van der Linden
1439 - Avoid solaris compiler warnings. Thanks to Bruce Barnett
1442 - Fix rip printer to not print one more route than is actually in the
1443 packet. Thanks to Jean-Luc Richier (Jean-Luc.Richier@imag.fr) and
1446 - Use autoconf endian detection since BYTE_ORDER isn't defined on all systems.
1448 - Fix dvmrp printer truncation checks and add a dvmrp probe printer.
1451 - Rewrite ospf printer to improve truncation checks.
1453 - Don't parse tcp options past the EOL. As noted by David Sacerdote
1459 - Don't say really small UDP packets are truncated just because they
1464 - Added rfc1716 icmp codes as suggested by Martin Fredriksson
1467 - Print mtu for icmp unreach need frag packets. Thanks to John
1470 - Decode icmp router discovery messages. Thanks to Jeffrey Honig
1473 - Added a printer entry for DLT_IEEE802 as suggested by Tak Kushida
1476 - Check igmp checksum if possible. Thanks to John Hawkinson.
1478 - Made changes for SINIX. Thanks to Andrej Borsenkow
1481 - Use autoconf's idea of the top level directory in install targets.
1484 - Avoid infinite loop in tcp options printing code. Thanks to Jeffrey
1487 - Avoid using -lsocket in IRIX 5.2 and earlier since it breaks snoop.
1490 - Added some more packet truncation checks.
1492 - On systems that have it, use sigset() instead of signal() since
1495 - Fixed some more alignment problems on the alpha.
1497 - Add code to massage unprintable characters in the domain and ipx
1500 - Added explicit netmask support. Thanks to Steve Nuchia
1503 - Add "sca" keyword (for DEC cluster services) as suggested by Terry
1506 - Add "atalk" keyword as suggested by John Hawkinson.
1508 - Added an igrp printer. Thanks to Francis Dupont
1511 - Print IPX net numbers in hex a la Novell Netware. Thanks to Terry
1514 - Fixed snmp extended tag field parsing bug. Thanks to Pascal Hennequin
1515 (pascal.hennequin@hugo.int-evry.fr)
1517 - Added some ETHERTYPEs missing on some systems.
1519 - Added truncated packet macros and various checks.
1521 - Fixed endian problems with the DECnet printer.
1523 - Use $CC when checking gcc version. Thanks to Carl Lindberg
1526 - Fixes for AIX (although this system is not yet supported). Thanks to
1529 - Fix bugs in the autoconf misaligned accesses code fragment.
1531 - Include sys/param.h to get BYTE_ORDER in a few places. Thanks to
1536 - Print new icmp unreachable codes as suggested by Martin Fredriksson
1540 - Fix an alignment endian bug in getname(). Thanks to John Hawkinson.
1542 - Define "new" domain record types if not found in arpa/nameserv.h.
1547 - Added RIP V2 support. Thanks to Jeffrey Honig (jch@bsdi.com)
1549 - Added T/TCP options printing. As suggested by Richard Stevens
1552 - Use autoconf to detect architectures that can't handle misaligned
1557 - Changed u_int32/int32 to u_int32_t/int32_t to be consistent with bsd
1560 - Port to GNU autoconf.
1562 - Add support for printing DVMRP and PIM traffic thanks to
1565 - Fix AppleTalk, IPX and DECnet byte order problems due to wrong endian
1568 - Minor fixes to the man page thanks to Mark Andrews.
1570 - Endian fixes to RTP and vat packet dumpers, thanks to Bruce Mah
1573 - Added support for new dns types, thanks to Rainer Orth.
1575 - Fixed tftp_print() to print the block number for ACKs.
1577 - Document -dd and -ddd. Resulted from a bug report from Charlie Slater
1580 - Check return status from malloc/calloc/etc.
1582 - Check return status from pcap_loop() so we can print an error and
1585 - Bail if ip option length is <= 0. Resulted from a bug report from
1588 - Print out a little more information for sun rpc packets.
1590 - Add support for Kerberos 4 thanks to John Hawkinson (jhawk@mit.edu).
1592 - Fixed the Fix EXTRACT_SHORT() and EXTRACT_LONG() macros (which were
1595 - Fixed alignment bug in ipx_decode(). Thanks to Matt Crawford
1598 - Fix ntp_print() to not print garbage when the stratum is
1601 - Rewrote tcp options printer code to check for truncation. Added
1604 - Fixed an endian bug in the ospf printer. Thanks to Jeffrey C Honig
1607 - Fix rip printer to handle 4.4 BSD sockaddr struct which only uses one
1611 - Don't checksum ip header if we don't have all of it. Thanks to John
1614 - Print out hostnames if possible in egp printer. Thanks to Jeffrey
1620 - Include time.h when SVR4 is defined to avoid problems under Solaris
1623 - Fix etheraddr_string() in the ETHER_SERVICE to return the saved
1625 (petri@ibr.cs.tu-bs.de).
1627 - Detect when pcap raises the snaplen (e.g. with snit). Print a warning
1629 (Pascal.Hennequin@hugo.int-evry.fr).
1631 - Add a truncated packet test to print-nfs.c. Thanks to Pascal Hennequin.
1633 - BYTEORDER -> BYTE_ORDER Thanks to Terry Kennedy (terry@spcvxa.spc.edu).
1637 - Although there never was a 3.0.3 release, the linux boys cleverly
1642 - Change configuration to not use gcc v2 flags with gcc v1.
1644 - Redo gmt2local() so that it works under BSDI (which seems to return
1648 - Change configure to recognize IP[0-9]* as "mips" SGI hardware. Based
1651 - Don't pass cc flags to gcc. Resulted from a bug report from Rainer
1652 Orth (ro@techfak.uni-bielefeld.de).
1654 - Fixed printout of connection id for uncompressed tcp slip packets.
1657 - Hack around deficiency in Ultrix's make.
1659 - Add ETHERTYPE_TRAIL define which is missing from irix5.
1663 - Fix problems with gcc2 vs. malloc() and read() prototypes under SunOS 4.
1667 - Added support for printing tcp option timestamps thanks to
1670 - Reorganize protocol dumpers to take const pointers to packets so they
1674 the output form -x would be wrong on little endian machines because
1678 - Added support for decnet protocol dumping thanks to Jeff Mogul
1681 - Fix bug that caused length of packet to be incorrectly printed
1685 - Added support for IPX protocol dumping thanks to Brad Parker
1688 - Added check to verify IP header checksum under -v thanks to
1691 - Move packet capture code to new libpcap library (which is
1694 - Prototype everything and assume an ansi compiler.
1696 - print-arp.c: Print hardware ethernet addresses if they're not
1699 - print-bootp.c: Decode the cmu vendor field. Add RFC1497 tags.
1702 - print-fddi.c: Improvements. Thanks to Jeffrey Mogul
1705 - print-icmp.c: Byte swap netmask before printing. Thanks to
1708 - print-ip.c: Print the inner ip datagram of ip-in-ip encapsulated packets.
1710 "(encap)". Under -v, both the inner and output packets are dumped
1714 conventional syntax. (You can filter away all the ip-in-ip traffic
1717 - print-nfs.c: Keep pending rpc's in circular table. Add generic
1720 - print-ospf.c: Improvements. Thanks to Jeffrey Mogul.
1722 - tcpdump.c: Add -T flag allows interpretation of "vat", "wb", "rpc"
1728 - Fix bug with -c flag.
1732 - savefile.c: Remove hack that shouldn't have been exported. Add
1735 - Added the 'icmp' keyword. For example, 'icmp[0] != 8 and icmp[0] != 0'
1736 matches non-echo/reply ICMP packets.
1738 - Many improvements to filter code optimizer.
1740 - Added 'multicast' keyword and extended the 'broadcast' keyword can now be
1744 - Added support for monitoring the loopback interface (i.e. 'tcpdump -i lo').
1748 - Added support for the Ungermann-Bass Ethernet on IBM/PC-RTs running AOS.
1751 - Added EGP and OSPF printers, thanks to Jeffrey Honig.
1755 - Internal release (never publicly exported).
1759 - Various byte ordering fixes.
1761 - Add truncation checks.
1763 - inet.c: Support BSD style SIOCGIFCONF.
1765 - nametoaddr.c: Handle multi addresses for single host.
1767 - optimize.c: Rewritten.
1769 - pcap-bpf.c: don't choke when we get ptraced. only set promiscuous
1772 - print-atal.c: Fix an alignment bug (thanks to
1775 - print-bootp.c: First attempt at decoding the vendor buffer.
1777 - print-domain.c: Fix truncation checks.
1779 - print-icmp.c: Calculate length of packets from the ip header.
1781 - print-ip.c: Print frag id in decimal (so it's easier to match up
1782 with non-frags). Add support for ospf, egp and igmp.
1784 - print-nfs.c: Lots of changes.
1786 - print-ntp.c: Make some verbose output depend on -v.
1788 - print-snmp.c: New version from John LoVerso.
1790 - print-tcp.c: Print rfc1072 tcp options.
1792 - tcpdump.c: Print "0x" prefix for %x formats. Always print 6 digits
1795 - A packet dumper has been added (thanks to Jeff Mogul of DECWRL).
1800 - BSD is supported. You must have BPF in your kernel.
1805 - Compressed SLIP packets can now be dumped, provided you use our
1807 packet; the compressed headers are dumped with the '-e' option.
1809 - Machines with little-endian byte ordering are supported (thanks to
1812 - Ultrix 4.0 is supported (also thanks to Jeff Mogul).
1814 - IBM RT and Stanford Enetfilter support has been added by
1819 - TFTP packets are now printed (requests only).
1821 - BOOTP packets are now printed.
1823 - SNMP packets are now printed. (thanks to John LoVerso of Xylogics).
1825 - Sparc architectures, including the Sparcstation-1, are now
1828 - SunOS 4 is now supported thanks to Micky Liu of Columbia
1831 - IP options are now printed.
1833 - RIP packets are now printed.
1835 - There's a -v flag that prints out more information than the
1837 and -q flag that prints out less (e.g., it will disable
1838 interpretation of AppleTalk-in-UDP).
1840 - The grammar has undergone substantial changes (if you have an
1841 earlier version of tcpdump, you should re-read the manual
1851 "and" -- e.g., you have to say "host foo and port bar" instead
1861 - Initial public release.