summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Add a CARP dissector and a command-line option to dissect proto 112 as CARP.George Neville-Neil2011-11-238-3/+113
| | | | | | | | | | | | | | | | | | | | | CARP and VRRP both use IP protocol number 112, so there needs to be a -T flag to specify that protocol 112 be dissected as CARP rather than VRRP. Also update the man page.
* | | Redo length checks in ospf6_print_lsa().Guy Harris2011-10-131-74/+129
| | | | | | | | | | | | | | | | | | Check to make sure we haven't run past the end of the LSA by doing length checks - and be a bit fussier about length checks. Do more end-of-packet checks as well.
* | | Constify some arguments.Guy Harris2011-10-132-4/+4
| | |
* | | Put in missing break.Michal Sekletar2011-10-131-0/+1
| | | | | | | | | | | | Reviewed-by: Guy Harris <guy@alum.mit.edu>
* | | Remove unnecessary test.Michal Sekletar2011-10-132-4/+7
| | | | | | | | | | | | | | | | | | Also, from me: add a comment explaining why the test isn't being done. Reviewed-by: Guy Harris <guy@alum.mit.edu>
* | | Clean up option-walking code.Guy Harris2011-10-131-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | Loop as long as the remaining option list length is not zero, even if that means we try to process the remaining options if the remaining length is 1, so that if the option length is bogus, we'll report it. Check for a valid ESIS_OPTION_ES_CONF_TIME length - it's supposed to be 2.
* | | Fix test output - IP protocol 72 is in /etc/services on at least some UN*Xes.zilog80a2011-10-131-1/+1
| | | | | | | | | | | | Reviewed-By: Guy Harris <guy@alum.mit.edu>
* | | Change name of Hilscher link types to say NETANALYER.Guy Harris2011-09-153-18/+18
| | | | | | | | | | | | | | | That makes the names a bit shorter, and mentions the specific Hilscher product to which they apply.
* | | Add printers for the Hilscher Ethernet link-layer types.Guy Harris2011-09-153-1/+69
|/ /
* | Handle systems with getrpcbynumber() but no header file for it.Guy Harris2011-09-024-7/+11
| | | | | | | | | | | | Glibc 2.14 doesn't install the ONC RPC headers, but it installs the ONC RPC routines, presumably for binary compatibility. Don't use getrpcbynumber() unless we have it *and* the header file to declare it.
* | Merge branch 'master' of git+ssh://bpf.tcpdump.org/tcpdump/master/git/tcpdumpMichael Richardson2011-08-275-31/+45
|\ \ | | | | | | | | | | | | Conflicts: Makefile.in
| * | Get rid of another zero-length array.Guy Harris2011-08-141-1/+0
| | |
| * | Don't compile print-babel.c if we don't have IPv6 support.Guy Harris2011-08-144-13/+6
| | |
| * | Get rid of GCCisms.Guy Harris2011-08-141-10/+11
| | | | | | | | | | | | | | | Not all C compilers support anonymous unions in structures, zero-length array members of structures, or __attribute__.
| * | Don't assume we have IPv6 support.Guy Harris2011-08-141-0/+8
| | |
| * | Declare all local variables before any executable statements.Guy Harris2011-08-141-1/+2
| | | | | | | | | | | | Some C compilers let you get away with that C++-ism; not all do.
| * | Make sure ppi.h is in the release tarball.Romain Francoise2011-08-141-0/+1
| | | | | | | | | | | | Reviewed-By: Guy Harris <guy@alum.mit.edu>
| * | Update the EXTRA_DIST list to reflect what's now in the tests directory.Guy Harris2011-07-261-18/+25
| |/
* | For Babel, recognise both UDP/6696 and UDP/6697.Juliusz Chroboczek2011-08-272-2/+3
| | | | | | | | | | IANA has reallocated the Babel port; it is now 6696. This patch makes tcpdump recognise both the old and the new Babel ports.
* | remove deleted files from list of distributed filesMichael Richardson2011-08-271-5/+0
| |
* | removed unnecessary fileMichael Richardson2011-08-271-491/+0
|/
* Changes for 4.2 of tcpdumpMichael Richardson2011-07-241-0/+21
|
* Fwd: pcap filesJamal Hadi Salim2011-07-032-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On Tue, Jun 28, 2011 at 3:52 PM, Michael Richardson <mcr@sandelman.ca> wrote: > I'm not aware of a new file. The email i responded to had 4 attachments sent by Evangelos. Those were supposed to replace the files with those exact names. > Please send github tree, ideally. You mentioned github to me last time and offered to get me to learn it in 5 minutes;-> I havent had time and the old school stuff i do still works. How about i send you patch #1 to delete the old files (as attached) and another to re-add with new ones. Alternatively: I could send one that overrides the existing ones. cheers, jamal > -- > ]       He who is tired of Weird Al is tired of life!           |  firewalls  [ > ]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[ > ] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[ >   Kyoto Plus: watch the video <http://www.youtube.com/watch?v=kzx1ycLXQSE> >                       then sign the petition. > commit d93443f24bfb5fd982ff33deb66979bae811db57 Author: Jamal Hadi Salim <jhs@mojatatu.com> Date: Tue Jun 28 16:15:49 2011 -0400 [PATCH] Remove test files using old ForCES ports Signed-off-by: Jamal Hadi Salim <hadi@mojatatu.com>
* ignore more cruftMichael Richardson2011-07-031-0/+2
|
* removed unneeded pcap fileMichael Richardson2011-07-031-22231/+0
|
* Note that ndo_error doesn't, and *ndo_error shouldn't, return.Guy Harris2011-06-242-2/+3
| | | | | Tcpdump's ndo_error() doesn't return. Any other ndo_error routine supplied to netdissect shouldn't, either, as printers expect it not to.
* Use "-H", not "-h", for the 802.11s option, and improve error reporting.Guy Harris2011-06-215-8/+15
| | | | | | | | I was rudely surprised to find that "tcpdump -h" wasn't printing a usage message, and I'm the person who *added* the "-h" option. Make it "-H", and add an explicit "-h" option to print a usage message, so nobody else makes the same mistake. Also, don't clear opterr, so that if you give an illegal command-line option, you get an explanatory error message.
* from Weesan Lee <weesan@juniper.net>: display pim bidir supportHannes Gredler2011-06-212-2/+7
|
* Handle ICMP6 checksums more like TCP checksums.Guy Harris2011-06-171-2/+5
| | | | | | | Instead of printing the result of icmp6_cksum() if it's non-zero, print the checksum field value and the value it should have had. That means that what we print is the same regardless of whether we're running on a big-endian or little-endian machine.
* Fix some warnings.Guy Harris2011-06-171-2/+2
|
* Add a routine to do the "checksum with pseudo-header" stuff for IPv4.Guy Harris2011-06-176-76/+43
| | | | Clean up some other stuff while we're at it.
* Use nextproto6_cksum() for XXX-over-IPv6 checksums.Guy Harris2011-06-177-87/+12
| | | | Get rid of duplicated checksums with IPv6 pseudo-headers.
* Handle UDP checksums more like TCP checksums.Guy Harris2011-06-163-63/+78
| | | | | | | | | | | | | | | Instead of printing the result of udp_cksum() if it's non-zero, print the checksum field value and the value it should have had. That means that what we print is the same regardless of whether we're running on a big-endian or little-endian machine. Also, just as we did with TCP: Check -v and -K, and the fragmented flag, up front; then check the IP version etc.. Don't check for IPv6 if we already know it's IPv4. Fetch the checksum field only once. Update some test files for the new output format.
* Get rid of $Id$ - you can't get that with Git.Guy Harris2011-06-161-2/+0
|
* Clean up the checksum checking.Guy Harris2011-06-161-19/+25
| | | | | | Check -v and -K, and the fragmented flag, up front; then check the IP version etc.. Don't check for IPv6 if we already know it's IPv4. Fetch the checksum field only once.
* add support for the RPKI/Router Protocol as per draft-ietf-sidr-rpki-rtr-12Hannes Gredler2011-06-168-1/+400
|
* Go with Wireshark's Internet checksum routine.Guy Harris2011-06-1315-260/+378
| | | | | | | | | | | | | The Wireshark routine is based on the BSD in-kernel portable checksum routine (thus BSD-licensed); it takes a vector of pointers and lengths and checksums the concatenation of the buffers in question (just as the BSD in-kernel routine checksums a chain of mbufs). This simplifies the "with a pseudo-header" checksums; hopefully it'll fix up the problems being seen on some big-endian platforms, which might be due to hand-calculating some or all of the checksum and doing so incorrectly. It also gets rid of some code that might be dereferencing unaligned pointers.
* Update sflow test output to reflect recent changes to print-sflow.c.Guy Harris2011-06-121-458/+520
|
* Fix some problems with the tests.Guy Harris2011-06-122-5/+20
| | | | | | | | | Get rid of some no-longer-necessary uudecodes (Git can store binary files such as pcap files, so we no longer need to uuencode them, and the uuencoded files are no longer around), and handle the "-X" and "-XX" flag tests (where we had to rename the "should be" output files to avoid collisions on case-insensitive file systems such as the default local file system on the desktop UN*X with the biggest market share).
* The ifSpeed field of a generic interface counter in sFlow is 64 bits.Rick Jones2011-06-021-2/+2
| | | | | | | | The "overlay" definition in print-sflow.c is correct, but the actual extract for printing is using EXTRACT_32BITS rather than EXTRACT_64BITS, which leads to an incorrect report for speed. Reviewed-By: Guy Harris <guy@alum.mit.edu>
* Don't use "struct netdissect_options" in interface.h.Guy Harris2011-05-052-8/+6
| | | | | | Use it in netdissect.h, where it's defined; otherwise, we get a bunch of warnings when compiling modules that include interface.h but don't yet include netdissect.h.
* From: Darren Reed <darren.reed@oracle.com>Michael Richardson2011-05-036-7/+130
| | | | | | | | | | | | | | | To: tcpdump-workers@lists.tcpdump.org Date: Sat, 09 Apr 2011 12:51:14 +1000 Subject: [tcpdump-workers] Printing PPI packets Printing PPI packets with tcpdump does not turn out to be that hard. My simple tests have produced the output as below. It would be worthwhile having some changes made into the tcpdump code base that were similar to the attached that print them out.
* removed need for uudecodeMichael Richardson2011-04-3034-1174/+0
|
* added babal test casesMichael Richardson2011-04-284-0/+79
|
* Merge branch 'master' of git+ssh://bpf.tcpdump.org/tcpdump/master/git/tcpdumpMichael Richardson2011-04-286-80/+424
|\
| * Fix endianness of some parameters.Andrew Nording2011-04-282-3/+3
| | | | | | | | Reviewed-By: Guy Harris <guy@alum.mit.edu>
| * Add error checking and support for DCB Exchange protocol (DCBX) version 1.01.Guy Harris2011-04-284-67/+384
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From Kaladhar Musunuru <kaladharm@sourceforge.net>: Added support for DCB Exchange protocol (DCBX) version 1.01. http://www.ieee802.org/1/files/public/docs2008/az-wadekar-dcbx-capability-exchange-discovery-protocol-1108-v1.01.pdf DCBX protocol exchanges control state machine and generic feature state machine parameters as Organizationally specific TLVs. The OUI used for the DCBX TLV 1.01 is 0x001B21. Following TLVs are decoded: - Control state - Priority Groups (PG) - Priority-based Flow Control (PFC) - Application Protocol (APP) From me: Add a bunch of additional error checking, and sort the main switch statement by TLV code (and thus by the order in the specification). Also update/add indications of what standards document what items.
| * Babel dissector, from Juliusz Chroboczek and Grégoire Henry.Juliusz Chroboczek2011-04-276-5/+432
| | | | | | | | Reviewed-By: Guy Harris <guy@alum.mit.edu>
| * Try to handle radiotap Rate values > 127 better.Guy Harris2011-04-271-10/+37
| | | | | | | | | | | | | | | | | | | | | | | | Use the same heuristic Wireshark uses, i.e. assume that FreeBSD only reports MCS indices between 0 and 15, and that any other values with the 0x80 bit set are rate values. (Yes, those do exist.) Also note, as I did in Wireshark, that it might be possible to extract from the XChannel and Flags field the additional information to convert an MCS index from the Rate field into a rate. (Whether that's possible depends on what platforms using the FreeBSD convention do with the channel width and guard interval information.)
* | updated forces test casesMichael Richardson2011-04-285-93/+540
| |