Don't link tcpdump(8) with libl and remove reference to `yydebug'.

From Martin Vahlensieck.

wire the wireguard packet printer into tcpdump.

from Matt Dunwoodie and Jason A. Donenfeld

add support for printing RfC 2332 NBMA Next Hop Resolution Protocol (NHRP)

ok dlg@

add support for printing RFC 8300 Network Service Header (NSH)

ok deraadt@

Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision

wire the wireguard packet printer into tcpdump.

from Matt Dunwoodie and Jason A. Donenfeld

add support for printing RfC 2332 NBMA Next Hop Resolution Protocol (NHRP)

ok dlg@

add support for printing RFC 8300 Network Service Header (NSH)

ok deraadt@

Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision

add support for printing RfC 2332 NBMA Next Hop Resolution Protocol (NHRP)

ok dlg@

add support for printing RFC 8300 Network Service Header (NSH)

ok deraadt@

Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision

add support for printing RFC 8300 Network Service Header (NSH)

ok deraadt@

Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision

Simple USBPcap parser for tcpdump(8). Raw dumps can be nicely analysed
in wireshark.

ok deraadt@, dlg@

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision

Kill <net/slip.h>.

The ioctl(2) it defines is not supported since a long time and most of
its defines are already present in tcpdump(8).

ok jca@

Updates tcpdump's OpenFlow printer to use the string maps from switchd
(manually synced). Also make the output a bit more like other printers.

OK rzalamena@

Teach tcpdump(8) how to read OpenFlow packets. This initial implementation
supports the following message types: hello, error, echo request/reply,
feature request/reply, set config, packet-in, packet-out, flow removed and
flow mod.

We currently only support printing this messages for OpenFlow 1.3.5, however
it is possible to reuse some functions and get other versions working too.

ok deraadt@

Remove conditional compilation and #defines around signal handling
Don't catch signals that were ignored on entry
Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error

ok millert@

Don't use exp2f(), it breaks build on vax. Use a shift instead.
reported by deraadt@

Make tcpdump(1) print more information from the HT Capabilities element.
tweak + ok sthen@

remove backwards compat layer for alpha osf1. back then compilers and
the parsers sucked, so byte misalignment repair was requested. These
days it means the parsers should improve.
ok lteo

Import in_cksum_shouldbe() from mainline tcpdump; this is needed by my
upcoming commit which will fix and improve the display of bad checksums
for the major protocols.

ok henning@

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

Add support to tcpdump for decoding the GPRS Tunnelling Protocol (GTP),
used to carry GPRS data over IP for GSM and UMTS networks. The decoder
understands GTPv0, GTPv0', GTPv1-C, GTPv1-U and GTPv1' traffic, however
at this stage not all TLV fields are fully decoded.

This work has been kindly sponsored by SystemNet AS (www.systemnet.no).

"commit" deraadt@

Add support for IEEE "slow protocols" LACP, MARKER as per 802.3ad.
Code from tcpdump.org with cleanup and shrinkage by me.
Help and ideas for extra sanity checks from canacar@
OK canacar@

add VLAN Query Protocol (VQP) dissector; ok canacar@ markus@

Add a simple printer for IEEE 802.1AB LLDP, the Link Layer Discovery
Protocol.

LLDP is used by some switch vendors as a replacement for the non-free
Cizzco Discovery Protocol (CDP) due to some Cisco patentry...

ok brad@

add printer for IAPP and hostapd(8) messages

ok canacar@, tested by aanriot@ and others

Add a best effort mpls decoder. From Jason L. Wright.
Since the encapsulated protocol information is not always
available in the MPLS tag stack. The decoder attempts
to guess the protocol.
ok brad@

add a printer for 802.11 and for additional radiotap headers,
use -y IEEE802_11 or IEEE802_11_RADIO if supported by the driver.

ok canacar@

Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.

ok markus@ pb@

Do away with non-aligned memory accesses.
ok deraadt@ hshoexer@

general cleanup and better SIGCHLD handling from millert@
ok canacar@

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

print the operating system of TCP SYN packets with the -o option

add support for ESP decryption; ok deraadt@; feedback mickey@;
many manpage fixes from jmc@

support for NAT-T (draft-ietf-ipsec-udp-encaps-06.txt); ok deraadt@

remove -Werror; ok millert

pfsync support; deraadt@ ok

stop breaking the damn tree mickey

tcpdump support for pfsync; henning@ ok

remove egp support; unresolved non-bsd license for a decoder of protocol that
noone uses anymore is not worth the amount of work needed to be resolved.

HSRP dissector, from Julian Cowley <julian@lava.net> via tcpdump.org

sparc64 needs LBL_ALIGN.

remove mips leftovers; ok brad

interpret DLT_PFLOG

disable smb decoder, as there seems to be fewer bound checks than needed

add support for printing cdp (Cisco Discovery Protocol), from tcpdump.org

add lwres (BINDv9 resolver) printing. from tcpdump.org and modified by ho@

etherip printing code... handles draft (v2) and current (v3)

timed printing; from Ben Smithurst <ben@scientia.demon.co.uk>; via tcpdump.org

smb printing; from Andrew Tridgell; via tcpdump.org

add vrrp printing; from tcpdump.org

code for printing bridge spanning tree packets
also fix a bug where llc encoded frames are hex dumped twice when -x is used

Add -Wall -Werror to CFLAGS. (niklas@, jakob@ ok)

INET6
DHCP/BOOTP
tcp & udp checksum detection
numerous bugfixes

enable INET6

BGP support (from KAME/WIDE). INET6 parts not done yet.

Mobile IP support (from KAME/NetBSD)

L2TP support (from KAME)

add raw support

HAVE_FDDI

- Merge some changes from tcpdump 3.4
-a flag; attempt to convert network and broadcast addresses to names
Improved signal handling
Miscellaneous fixes and typos
OSPF MD5 authentication support

- -X flag; emacs-hexl print (including ascii)

- Add ECN bits to TCP and IP headers

- IKE & IPsec (ESP & AH) support

OK deraadt@

add cisco netflow proto printing; not tested w/ version 5, but should work anyways

handle IPSec processed packets (DLT_ENC) in libpcap, display them with
tcpdump + additional info (SPI + which type of transforms where passed).

Use YP ethers

$OpenBSD$

Add RADIUS printing support. Blech.

HAVE_NET_SLIP_H; PR286, felix@mamba.pond.sub.org

Some architectures need strict alignment

*** empty log message ***

add NetBIOS printing.

it is 3.2 now.

sync to latest

Updating to the latest LBL release.
Sun's SKIP support added.

branches: 1.1.1;
Initial revision