JP Abgrall | 53f17a9 | 2014-02-12 14:02:41 -0800 | [diff] [blame] | 1 | Wednesday Jan. 15, 2014 guy@alum.mit.edu |
| 2 | Summary for 4.5.2 tcpdump release |
| 3 | Man page fix |
| 4 | Fix crashes on SPARC |
The Android Open Source Project | 2949f58 | 2009-03-03 19:30:46 -0800 | [diff] [blame] | 5 | |
JP Abgrall | 53f17a9 | 2014-02-12 14:02:41 -0800 | [diff] [blame] | 6 | Monday Nov. 11, 2013 mcr@sandelman.ca |
| 7 | Summary for 4.5.1 tcpdump release |
| 8 | CREDITS file fixes |
| 9 | |
| 10 | Thursday Nov. 7, 2013 mcr@sandelman.ca and guy@alum.mit.edu. |
| 11 | Summary for 4.5.0 tcpdump release |
| 12 | some NFSv4 fixes for printing |
| 13 | fix printing of unknown TCP options, and tcp fast-open |
| 14 | fixes for syslog parser |
| 15 | some gcc-version-specific flag tuning |
| 16 | adopt MacOS deprecation workarounds for openssl |
| 17 | improvements to babel printing |
| 18 | add OpenFlow 1.0 (no SSL) and test cases |
| 19 | GeoNet printer. |
| 20 | added STBC Rx support |
| 21 | improvements to DHCPv6 decoder |
| 22 | clarify which autoconf is needed |
| 23 | Point users to the the-tcpdump-group repository on GitHub rather |
| 24 | than the mcr repository |
| 25 | Add MSDP printer. |
| 26 | Fixed IPv6 check on Solaris and other OSes requiring extra |
| 27 | networking libraries. |
| 28 | Add support for VXLAN (draft-mahalingam-dutt-dcops-vxlan-03), |
| 29 | and add "vxlan" as an option for -T. |
| 30 | Add support for OTV (draft-hasmit-otv-04). |
| 31 | fixes for DLT_IEEE802_11_RADIO datalink types |
| 32 | added MPTCP decoder |
| 33 | |
| 34 | Saturday April 6, 2013 guy@alum.mit.edu. |
| 35 | Summary for 4.4.0 tcpdump release |
| 36 | RPKI-RTR (RFC6810) is now official (TCP Port 323) |
| 37 | Fix detection of OpenSSL libcrypto. |
| 38 | Add DNSSL (RFC6106) support. |
| 39 | Add "radius" as an option for -T. |
| 40 | Update Action codes for handle_action function according to |
| 41 | 802.11s amendment. |
| 42 | Decode DHCPv6 AFTR-Name option (RFC6334). |
| 43 | Updates for Babel. |
| 44 | Fix printing of infinite lifetime in ICMPv6. |
| 45 | Added support for SPB, SPBM Service Identifier, and Unicast |
| 46 | Address sub-TLV in ISIS. |
| 47 | Decode RIPv2 authentication up to RFC4822. |
| 48 | Fix RIP Request/full table decoding issues. |
| 49 | On Linux systems with cap-ng.h, drop root privileges |
| 50 | using Linux Capabilities. |
| 51 | Add support for reading multiple files. |
| 52 | Add MS NLB heartbeat printer. |
| 53 | Separate multiple nexthops in BGP. |
| 54 | |
| 55 | Wednesday November 28, 2012 guy@alum.mit.edu. |
| 56 | Summary for 4.3.1 tcpdump release |
| 57 | Print "LLDP, length N" for LLDP packets even when not in verbose |
| 58 | mode, so something is printed even if only the timestamp is |
| 59 | present |
| 60 | Document "-T carp" |
| 61 | Print NTP poll interval correctly (it's an exponent, so print |
| 62 | both its raw value and 2^value) |
| 63 | Document that "-e" is used to get MAC addresses |
| 64 | More clearly document that you need to escape or quote |
| 65 | backslashes in filter expressions on the command line |
| 66 | Fix some "the the" in the man page |
| 67 | Use the right maximum path length |
| 68 | Don't treat 192_1_2, when passed to -i, as an interface number |
| 69 | |
| 70 | Friday April 3, 2012. mcr@sandelman.ca. |
| 71 | Summary for 4.3.0 tcpdump release |
| 72 | fixes for forces: SPARSE data (per RFC 5810) |
| 73 | some more test cases added |
| 74 | updates to documentation on -l, -U and -w flags. |
| 75 | Fix printing of BGP optional headers. |
| 76 | Tried to include DLT_PFSYNC support, failed due to headers required. |
| 77 | added TIPC support. |
| 78 | Fix LLDP Network Policy bit definitions. |
| 79 | fixes for IGMPv3's Max Response Time: it is in units of 0.1 second. |
| 80 | SIGUSR1 can be used rather than SIGINFO for stats |
| 81 | permit -n flag to affect print-ip for protocol numbers |
| 82 | ND_OPT_ADVINTERVAL is in milliseconds, not seconds |
| 83 | Teach PPPoE parser about RFC 4638 |
| 84 | |
| 85 | |
| 86 | Friday December 9, 2011. guy@alum.mit.edu. |
| 87 | Summary for 4.2.1 tcpdump release |
| 88 | Only build the Babel printer if IPv6 is enabled. |
| 89 | Support Babel on port 6696 as well as 6697. |
| 90 | Include ppi.h in release tarball. |
| 91 | Include all the test files in the release tarball, and don't |
| 92 | "include" test files that no longer exist. |
| 93 | Don't assume we have <rpc/rpc.h> - check for it. |
| 94 | Support "-T carp" as a way of dissecting IP protocol 112 as CARP |
| 95 | rather than VRRP. |
| 96 | Support Hilscher NetAnalyzer link-layer header format. |
| 97 | Constify some pointers and fix compiler warnings. |
| 98 | Get rid of never-true test. |
| 99 | Fix an unintended fall-through in a case statement in the ARP |
| 100 | printer. |
| 101 | Fix several cases where sizeof(sizeof(XXX)) was used when just |
| 102 | sizeof(XXX) was intended. |
| 103 | Make stricter sanity checks in the ES-IS printer. |
| 104 | Get rid of some GCCisms that caused builds to fai with compilers |
| 105 | that don't support them. |
| 106 | Fix typo in man page. |
| 107 | Added length checks to Babel printer. |
| 108 | |
| 109 | Sunday July 24, 2011. mcr@sandelman.ca. |
| 110 | Summary for 4.2.+ |
| 111 | merged 802.15.4 decoder from Dmitry Eremin-Solenikov <dbaryshkov |
| 112 | at gmail dot com> |
| 113 | updates to forces for new port numbers |
| 114 | Use "-H", not "-h", for the 802.11s option. (-h always help) |
| 115 | Better ICMPv6 checksum handling. |
| 116 | add support for the RPKI/Router Protocol, per -ietf-sidr-rpki-rtr-12 |
| 117 | get rid of uuencoded pcap test files, git can do binary. |
| 118 | sFlow changes for 64-bit counters. |
| 119 | fixes for PPI packet header handling and printing. |
| 120 | Add DCB Exchange protocol (DCBX) version 1.01. |
| 121 | Babel dissector, from Juliusz Chroboczek and Grégoire Henry. |
| 122 | improvements to radiotap for rate values > 127. |
| 123 | Many improvements to ForCES decode, including fix SCTP TML port |
| 124 | updated RPL type code to RPL-17 draft |
| 125 | Improve printout of DHCPv6 options. |
| 126 | added support and test case for QinQ (802.1q VLAN) packets |
| 127 | Handle DLT_IEEE802_15_4_NOFCS like DLT_IEEE802_15_4. |
| 128 | Build fixes for Sparc and other machines with alignment restrictions. |
| 129 | Merged changes from Debian package. |
| 130 | PGM: Add ACK decoding and add PGMCC DATA and FEEDBACK options. |
| 131 | Build fixes for OSX (Snow Leopard and others) |
| 132 | Add support for IEEE 802.15.4 packets |
| 133 | |
| 134 | Tue. July 20, 2010. guy@alum.mit.edu. |
| 135 | Summary for 4.1.2 tcpdump release |
| 136 | If -U is specified, flush the file after creating it, so it's |
| 137 | not zero-length |
| 138 | Fix TCP flags output description, and some typoes, in the man |
| 139 | page |
| 140 | Add a -h flag, and only attempt to recognize 802.11s mesh |
| 141 | headers if it's set |
| 142 | When printing the link-layer type list, send *all* output to |
| 143 | stderr |
| 144 | Include the CFLAGS setting when configure was run in the |
| 145 | compiler flags |
| 146 | |
| 147 | Thu. April 1, 2010. guy@alum.mit.edu. |
| 148 | Summary for 4.1.1 tcpdump release |
| 149 | Fix build on systems with PF, such as FreeBSD and OpenBSD. |
| 150 | Don't blow up if a zero-length link-layer address is passed to |
| 151 | linkaddr_string(). |
| 152 | |
| 153 | Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu. |
| 154 | Summary for 4.1.0 tcpdump release |
| 155 | Fix printing of MAC addresses for VLAN frames with a length |
| 156 | field |
| 157 | Add some additional bounds checks and use the EXTRACT_ macros |
| 158 | more |
| 159 | Add a -b flag to print the AS number in BGP packets in ASDOT |
| 160 | notation rather than ASPLAIN notation |
| 161 | Add ICMPv6 RFC 5006 support |
| 162 | Decode the access flags in NFS access requests |
| 163 | Handle the new DLT_ for memory-mapped USB captures on Linux |
| 164 | Make the default snapshot (-s) the maximum |
| 165 | Print name of device (when -L is used) |
| 166 | Support for OpenSolaris (and SXCE build 125 and later) |
| 167 | Print new TCP flags |
| 168 | Add support for RPL DIO |
| 169 | Add support for TCP User Timeout (UTO) |
| 170 | Add support for non-standard Ethertypes used by 3com PPPoE gear |
| 171 | Add support for 802.11n and 802.11s |
| 172 | Add support for Transparent Ethernet Bridge ethertype in GRE |
| 173 | Add 4 byte AS support for BGP printer |
| 174 | Add support for the MDT SAFI 66 BG printer |
| 175 | Add basic IPv6 support to print-olsr |
| 176 | Add USB printer |
| 177 | Add printer for ForCES |
| 178 | Handle frames with an FCS |
| 179 | Handle 802.11n Control Wrapper, Block Acq Req and Block Ack frames |
| 180 | Fix TCP sequence number printing |
| 181 | Report 802.2 packets as 802.2 instead of 802.3 |
| 182 | Don't include -L/usr/lib in LDFLAGS |
| 183 | On x86_64 Linux, look in lib64 directory too |
| 184 | Lots of code clean ups |
| 185 | Autoconf clean ups |
| 186 | Update testcases to make output changes |
| 187 | Fix compiling with/out smi (--with{,out}-smi) |
| 188 | Fix compiling without IPv6 support (--disable-ipv6) |
| 189 | |
| 190 | Mon. October 27, 2008. ken@netfunctional.ca. Summary for 4.0.0 tcpdump release |
| 191 | Add support for Bluetooth Sniffing |
| 192 | Add support for Realtek Remote Control Protocol (openrrcp.org.ru) |
| 193 | Add support for 802.11 AVS |
| 194 | Add support for SMB over TCP |
| 195 | Add support for 4 byte BGP AS printing |
| 196 | Add support for compiling on case-insensitive file systems |
| 197 | Add support for ikev2 printing |
| 198 | Update support for decoding AFS |
| 199 | Update DHCPv6 printer |
| 200 | Use newer libpcap API's (allows -B option on all platforms) |
| 201 | Add -I to turn on monitor mode |
| 202 | Bugfixes in lldp, lspping, dccp, ESP, NFS printers |
| 203 | Cleanup unused files and various cruft |
| 204 | |
| 205 | Mon. September 10, 2007. ken@xelerance.com. Summary for 3.9.8 tcpdump release |
| 206 | Rework ARP printer |
| 207 | Rework OSPFv3 printer |
| 208 | Add support for Frame-Relay ARP |
| 209 | Decode DHCP Option 121 (RFC 3442 Classless Static Route) |
| 210 | Decode DHCP Option 249 (MS Classless Static Route) the same as Option 121 |
| 211 | TLV: Add support for Juniper .pcap extensions |
| 212 | Print EGP header in new-world-order style |
| 213 | Converted print-isakmp.c to NETDISSECT |
| 214 | Moved AF specific stuff into af.h |
| 215 | Test subsystem now table driven, and saves outputs and diffs to one place |
The Android Open Source Project | 2949f58 | 2009-03-03 19:30:46 -0800 | [diff] [blame] | 216 | Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted |
| 217 | libpcap files on an OS other than where the file was generated |
| 218 | |
JP Abgrall | 53f17a9 | 2014-02-12 14:02:41 -0800 | [diff] [blame] | 219 | |
| 220 | Wed. July 23, 2007. mcr@xelerance.com. Summary for 3.9.7 libpcap release |
The Android Open Source Project | 2949f58 | 2009-03-03 19:30:46 -0800 | [diff] [blame] | 221 | |
| 222 | NFS: Print unsigned values as such. |
| 223 | RX: parse safely. |
| 224 | BGP: fixes for IPv6-less builds. |
| 225 | 801.1ag: use standard codepoint. |
| 226 | use /dev/bpf on systems with such a device. |
| 227 | 802.11: print QoS data, avoid dissect of no-data frame, ignore padding. |
| 228 | smb: make sure that we haven't gone past the end of the captured data. |
| 229 | smb: squelch an uninitialized complaint from coverity. |
| 230 | NFS: from NetBSD; don't interpret the reply as a possible NFS reply |
| 231 | if it got MSG_DENIED. |
| 232 | BGP: don't print TLV values that didn't fit, from www.digit-labs.org. |
| 233 | revised INSTALL.txt about libpcap dependancy. |
| 234 | |
| 235 | Wed. April 25, 2007. ken@xelerance.com. Summary for 3.9.6 tcpdump release |
| 236 | Update man page to reflect changes to libpcap |
| 237 | Changes to both TCP and IP Printer Output |
| 238 | Fix a potential buffer overflow in the 802.11 printer |
| 239 | Print basic info about a few more Cisco LAN protocols. |
| 240 | mDNS cleanup |
| 241 | ICMP MPLS rework of the extension code |
| 242 | bugfix: use the correct codepoint for the OSPF simple text auth token |
| 243 | entry, and use safeputs to print the password. |
| 244 | Add support in pflog for additional values |
| 245 | Add support for OIF RSVP Extensions UNI 1.0 Rev. 2 and additional RSVP objects |
| 246 | Add support for the Message-id NACK c-type. |
| 247 | Add support for 802.3ah loopback ctrl msg |
| 248 | Add support for Multiple-STP as per 802.1s |
| 249 | Add support for rapid-SPT as per 802.1w |
| 250 | Add support for CFM Link-trace msg, Link-trace-Reply msg, |
| 251 | Sender-ID tlv, private tlv, port, interface status |
| 252 | Add support for unidirectional link detection as per |
| 253 | http://www.ietf.org/internet-drafts/draft-foschiano-udld-02.txt |
| 254 | Add support for the olsr protocol as per RFC 3626 plus the LQ |
| 255 | extensions from olsr.org |
| 256 | Add support for variable-length checksum in DCCP, as per section 9 of |
| 257 | RFC 4340. |
| 258 | Add support for per-VLAN spanning tree and per-VLAN rapid spanning tree |
| 259 | Add support for Multiple-STP as per 802.1s |
| 260 | Add support for the cisco propriatry 'dynamic trunking protocol' |
| 261 | Add support for the cisco proprietary VTP protocol |
| 262 | Update dhcp6 options table as per IETF standardization activities |
| 263 | |
| 264 | |
| 265 | Tue. September 19, 2006. ken@xelerance.com. Summary for 3.9.5 tcpdump release |
| 266 | |
| 267 | Fix compiling on AIX (, at end of ENUM) |
| 268 | Updated list of DNS RR typecodes |
| 269 | Use local Ethernet defs on WIN32 |
| 270 | Add support for Frame-Relay ARP |
| 271 | Fixes for compiling under MSVC++ |
| 272 | Add support for parsing Juniper .pcap files |
| 273 | Add support for FRF.16 Multilink Frame-Relay (DLT_MFR) |
| 274 | Rework the OSPFv3 printer |
| 275 | Fix printing for 4.4BSD/NetBSD NFS Filehandles |
| 276 | Add support for Cisco style NLPID encapsulation |
| 277 | Add cisco prop. eigrp related, extended communities |
| 278 | Add support for BGP signaled VPLS |
| 279 | Cleanup the bootp printer |
| 280 | Add support for PPP over Frame-Relay |
| 281 | Add some bounds checking to the IP options code, and clean up |
| 282 | the options output a bit. |
| 283 | Add additional modp groups to ISAKMP printer |
| 284 | Add support for Address-Withdraw and Label-Withdraw Msgs |
| 285 | Add support for the BFD Discriminator TLV |
| 286 | Fixes for 64bit compiling |
| 287 | Add support for PIMv2 checksum verification |
| 288 | Add support for further dissection of the IPCP Compression Option |
| 289 | Add support for Cisco's proposed VQP protocol |
| 290 | Add basic support for keyed authentication TCP option |
| 291 | Lots of minor cosmetic changes to output printers |
| 292 | |
| 293 | |
| 294 | Mon. September 19, 2005. ken@xelerance.com. Summary for 3.9.4 tcpdump release |
| 295 | Decoder support for more Juniper link-layer types |
| 296 | Fix a potential buffer overflow (although it can't occur in |
| 297 | practice). |
| 298 | Fix the handling of unknown management frame types in the 802.11 |
| 299 | printer. |
| 300 | Add FRF.16 support, fix various Frame Relay bugs. |
| 301 | Add support for RSVP integrity objects, update fast-reroute |
| 302 | object printer to latest spec. |
| 303 | Clean up documentation of vlan filter expression, document mpls |
| 304 | filter expression. |
| 305 | Document new pppoed and pppoes filter expressions. |
| 306 | Update diffserver-TE codepoints as per RFC 4124. |
| 307 | Spelling fixes in ICMPv6. |
| 308 | Don't require any fields other than flags to be present in IS-IS |
| 309 | restart signaling TLVs, and only print the system ID in |
| 310 | those TLVs as system IDs, not as node IDs. |
| 311 | Support for DCCP. |
| 312 | |
| 313 | Tue. July 5, 2005. ken@xelerance.com. Summary for 3.9.3 tcpdump release |
| 314 | |
| 315 | Option to chroot() when dropping privs |
| 316 | Fixes for compiling on nearly every platform, |
| 317 | including improved 64bit support |
| 318 | Many new testcases |
| 319 | Support for sending packets |
| 320 | Many compliation fixes on most platforms |
| 321 | Fixes for recent version of GCC to eliminate warnings |
| 322 | Improved Unicode support |
| 323 | |
| 324 | Decoders & DLT Changes, Updates and New: |
| 325 | AES ESP support |
| 326 | Juniper ATM, FRF.15, FRF.16, PPPoE, |
| 327 | ML-FR, ML-PIC, ML-PPP, PL-PPP, LS-PIC |
| 328 | GGSN,ES,MONITOR,SERVICES |
| 329 | L2VPN |
| 330 | Axent Raptor/Symantec Firewall |
| 331 | TCP-MD5 (RFC 2385) |
| 332 | ESP-in-UDP (RFC 3948) |
| 333 | ATM OAM |
| 334 | LMP, LMP Service Discovery |
| 335 | IP over FC |
| 336 | IP over IEEE 1394 |
| 337 | BACnet MS/TP |
| 338 | SS7 |
| 339 | LDP over TCP |
| 340 | LACP, MARKER as per 802.3ad |
| 341 | PGM (RFC 3208) |
| 342 | LSP-PING |
| 343 | G.7041/Y.1303 Generic Framing Procedure |
| 344 | EIGRP-IP, EIGRP-IPX |
| 345 | ICMP6 |
| 346 | Radio - via radiotap |
| 347 | DHCPv6 |
| 348 | HDLC over PPP |
| 349 | |
| 350 | Tue. March 30, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.3 release |
| 351 | |
| 352 | No changes from 3.8.2. Version bumped only to maintain consistency |
| 353 | with libpcap 0.8.3. |
| 354 | |
| 355 | Mon. March 29, 2004. mcr@sandelman.ottawa.on.ca. Summary for 3.8.2 release |
| 356 | |
| 357 | Fixes for print-isakmp.c CVE: CAN-2004-0183, CAN-2004-0184 |
| 358 | http://www.rapid7.com/advisories/R7-0017.html |
| 359 | IP-over-IEEE1394 printing. |
| 360 | some MINGW32 changes. |
| 361 | updates for autoconf 2.5 |
| 362 | fixes for print-aodv.c - check for too short packets |
| 363 | formatting changes to print-ascii for hex output. |
| 364 | check for too short packets: print-bgp.c, print-bootp.c, print-cdp.c, |
| 365 | print-chdlc.c, print-domain.c, print-icmp.c, print-icmp6.c, |
| 366 | print-ip.c, print-lwres.c, print-ospf.c, print-pim.c, |
| 367 | print-ppp.c,print-pppoe.c, print-rsvp.c, print-wb.c |
| 368 | print-ether.c - better handling of unknown types. |
| 369 | print-isoclns.c - additional decoding of types. |
| 370 | print-llc.c - strings for LLC names added. |
| 371 | print-pfloc.c - various enhancements |
| 372 | print-radius.c - better decoding to strings. |
| 373 | |
| 374 | Wed. November 12, 2003. mcr@sandelman.ottawa.on.ca. Summary for 3.8 release |
| 375 | |
| 376 | changed syntax of -E argument so that multiple SAs can be decrypted |
| 377 | fixes for Digital Unix headers and Documentation |
| 378 | __attribute__ fixes |
| 379 | CDP changes from Terry Kennedy <terry@tmk.com>. |
| 380 | IPv6 mobility updates from Kazushi Sugyo <sugyo@pb.jp.nec.com> |
| 381 | Fixes for ASN.1 decoder for 2.100.3 forms. |
| 382 | Added a count of packets received and processed to clarify numbers. |
| 383 | Incorporated WinDUMP patches for Win32 builds. |
| 384 | PPPoE payload length headers. |
| 385 | Fixes for HP C compiler builds. |
| 386 | Use new pcap_breakloop() and pcap_findalldevs() if we can. |
| 387 | BGP output split into multiple lines. |
| 388 | Fixes to 802.11 decoding. |
| 389 | Fixes to PIM decoder. |
| 390 | SuperH is a CPU that can't handle unaligned access. Many fixes for |
| 391 | unaligned access work. |
| 392 | Fixes to Frame-Relay decoder for Q.933/922 frames. |
| 393 | Clarified when Solaris can do captures as non-root. |
| 394 | Added tests/ subdir for examples/regression tests. |
| 395 | New -U flag. -flush stdout after every packet |
| 396 | New -A flag -print ascii only |
| 397 | support for decoding IS-IS inside Cisco HDLC Frames |
| 398 | more verbosity for tftp decoder |
| 399 | mDNS decoder |
| 400 | new BFD decoder |
| 401 | cross compilation patches |
| 402 | RFC 3561 AODV support. |
| 403 | UDP/TCP pseudo-checksum properly for source-route options. |
| 404 | sanitized all files to modified BSD license |
| 405 | Add support for RFC 2625 IP-over-Fibre Channel. |
| 406 | fixes for DECnet support. |
| 407 | Support RFC 2684 bridging of Ethernet, 802.5 Token Ring, and FDDI. |
| 408 | RFC 2684 encapsulation of BPDUs. |
| 409 | |
| 410 | Tuesday, February 25, 2003. fenner@research.att.com. 3.7.2 release |
| 411 | |
| 412 | Fixed infinite loop when parsing malformed isakmp packets. |
| 413 | (reported by iDefense; already fixed in CVS) |
| 414 | Fixed infinite loop when parsing malformed BGP packets. |
| 415 | Fixed buffer overflow with certain malformed NFS packets. |
| 416 | Pretty-print unprintable network names in 802.11 printer. |
| 417 | Handle truncated nbp (appletalk) packets. |
| 418 | Updated DHCPv6 printer to match draft-ietf-dhc-dhcpv6-22.txt |
| 419 | Print IP protocol name even if we don't have a printer for it. |
| 420 | Print IP protocol name or number for fragments. |
| 421 | Print the whole MPLS label stack, not just the top label. |
| 422 | Print request header and file handle for NFS v3 FSINFO and PATHCONF |
| 423 | requests. |
| 424 | Fix NFS packet truncation checks. |
| 425 | Handle "old" DR-Priority and Bidir-Capable PIM HELLO options. |
| 426 | Handle unknown RADIUS attributes properly. |
| 427 | Fix an ASN.1 parsing error that would cause e.g. the OID |
| 428 | 2.100.3 to be misrepresented as 4.20.3 . |
| 429 | |
| 430 | Monday, January 21, 2002. mcr@sandelman.ottawa.on.ca. Summary for 3.7 release |
| 431 | see http://www.tcpdump.org/cvs-log/2002-01-21.10:16:48.html for commit log. |
| 432 | keyword "ipx" added. |
| 433 | Better OSI/802.2 support on Linux. |
| 434 | IEEE 802.11 support, from clenahan@fortresstech.com, achirica@ttd.net. |
| 435 | LLC SAP support for FDDI/token ring/RFC-1483 style ATM |
| 436 | BXXP protocol was replaced by the BEEP protocol; |
| 437 | improvements to SNAP demux. |
| 438 | Changes to "any" interface documentation. |
| 439 | Documentation on pcap_stats() counters. |
| 440 | Fix a memory leak found by Miklos Szeredi - pcap_ether_aton(). |
| 441 | Added MPLS encapsulation decoding per RFC3032. |
| 442 | DNS dissector handles TKEY, TSIG and IXFR. |
| 443 | adaptive SLIP interface patch from Igor Khristophorov <igor@atdot.org> |
| 444 | SMB printing has much improved bounds checks |
| 445 | OUI 0x0000f8 decoded as encapsulated ethernet for Cisco-custom bridging |
| 446 | Zephyr support, from Nickolai Zeldovich <kolya@MIT.EDU>. |
| 447 | Solaris - devices with digits in them. Stefan Hudson <hudson@mbay.net> |
| 448 | IPX socket 0x85be is for Cisco EIGRP over IPX. |
| 449 | Improvements to fragmented ESP handling. |
| 450 | SCTP support from Armando L. Caro Jr. <acaro@mail.eecis.udel.edu> |
| 451 | Linux ARPHDR_ATM support fixed. |
| 452 | Added a "netbeui" keyword, which selects NetBEUI packets. |
| 453 | IPv6 ND improvements, MobileIP dissector, 2292bis-02 for RA option. |
| 454 | Handle ARPHDR_HDLC from Marcus Felipe Pereira <marcus@task.com.br>. |
| 455 | Handle IPX socket 0x553 -> NetBIOS-over-IPX socket, "nwlink-dgm" |
| 456 | Better Linux libc5 compat. |
| 457 | BIND9 lwres dissector added. |
| 458 | MIPS and SPARC get strict alignment macros (affects print-bgp.c) |
| 459 | Apple LocalTalk LINKTYPE_ reserved. |
| 460 | New time stamp formats documented. |
| 461 | DHCP6 updated to draft-22.txt spec. |
| 462 | ICMP types/codes now accept symbolic names. |
| 463 | Add SIGINFO handler from LBL |
| 464 | encrypted CIPE tunnels in IRIX, from Franz Schaefer <schaefer@mond.at>. |
| 465 | now we are -Wstrict-prototype clean. |
| 466 | NetBSD DLT_PPP_ETHER; adapted from Martin Husemann <martin@netbsd.org>. |
| 467 | PPPoE dissector cleaned up. |
| 468 | Support for LocalTalk hardware, from Uns Lider <unslider@miranda.org>. |
| 469 | In dissector, now the caller prints the IP addresses rather than proto. |
| 470 | cjclark@alum.mit.edu: print the IP proto for non-initial fragments. |
| 471 | LLC frames with a DSAP and LSAP of 0xe0 are IPX frames. |
| 472 | Linux cooked frames with a type value of LINUX_SLL_P_802_3 are IPX. |
| 473 | captures on the "any" device won't be done in promiscuous mode |
| 474 | Token Ring support on DLPI - Onno van der Linden <onno@simplex.nl> |
| 475 | ARCNet support, from NetBSD. |
| 476 | HSRP dissector, from Julian Cowley <julian@lava.net>. |
| 477 | Handle (GRE-encapsulated) PPTP |
| 478 | added -C option to rotate save file every optarg * 1,000,000 bytes. |
| 479 | support for "vrrp" name - NetBSD, by Klaus Klein <kleink@netbsd.org>. |
| 480 | PPTP support, from Motonori Shindo <mshindo@mshindo.net>. |
| 481 | IS-IS over PPP support, from Hannes Gredler <hannes@juniper.net>. |
| 482 | CNFP support for IPv6,format. Harry Raaymakers <harryr@connect.com.au>. |
| 483 | ESP printing updated to RFC2406. |
| 484 | HP-UX can now handle large number of PPAs. |
| 485 | MSDP printer added. |
| 486 | L2TP dissector improvements from Motonori Shindo. |
| 487 | |
| 488 | Tuesday January 9, 2001. mcr@sandelman.ottawa.on.ca. Summary for 3.6 release |
| 489 | Cleaned up documentation. |
| 490 | Promisc mode fixes for Linux |
| 491 | IPsec changes/cleanups. |
| 492 | Alignment fixes for picky architectures |
| 493 | |
| 494 | Removed dependency on native headers for packet dissectors. |
| 495 | Removed Linux specific headers that were shipped |
| 496 | |
| 497 | libpcap changes provide for exchanging capture files between |
| 498 | systems. Save files now have well known PACKET_ values instead of |
| 499 | depending upon system dependant mappings of DLT_* types. |
| 500 | |
| 501 | Support for computing/checking IP and UDP/TCP checksums. |
| 502 | |
| 503 | Updated autoconf stock files. |
| 504 | |
| 505 | IPv6 improvements: dhcp (draft-15), mobile-ip6, ppp, ospf6, |
| 506 | |
| 507 | Added dissector support for: ISOCLNS, Token Ring, IGMPv3, bxxp, |
| 508 | timed, vrrp, radius, chdlc, cnfp, cdp, IEEE802.1d, raw-AppleTalk |
| 509 | |
| 510 | Added filtering support for: VLANs, ESIS, ISIS |
| 511 | |
| 512 | Improvements to: print-telnet, IPTalk, bootp/dhcp, ECN, PPP, |
| 513 | L2TP, PPPoE |
| 514 | |
| 515 | HP-UX 11.0 -- find the right dlpi device. |
| 516 | Solaris 8 - IPv6 works |
| 517 | Linux - Added support for an "any" device to capture on all interfaces |
| 518 | |
| 519 | Security fixes: buffer overrun audit done. Strcpy replaced with |
| 520 | strlcpy, sprintf replaced with snprintf. |
| 521 | Look for lex problems, and warn about them. |
| 522 | |
| 523 | |
| 524 | v3.5 Fri Jan 28 18:00:00 PST 2000 |
| 525 | |
| 526 | Bill Fenner <fenner@research.att.com> |
| 527 | - switch to config.h for autoconf |
| 528 | - unify RCSID strings |
| 529 | - Updated PIMv1, PIMv2, DVMRP, IGMP parsers, add Cisco Auto-RP parser |
| 530 | - Really fix the RIP printer |
| 531 | - Fix MAC address -> name translation. |
| 532 | - some -Wall -Wformat fixes |
| 533 | - update makemib to parse much of SMIv2 |
| 534 | - Print TCP sequence # with -vv even if you normally wouldn't |
| 535 | - Print as much of IP/TCP/UDP headers as possible even if truncated. |
| 536 | |
| 537 | itojun@iijlab.net |
| 538 | - -X will make a ascii dump. from netbsd. |
| 539 | - telnet command sequence decoder (ff xx xx). from netbsd. |
| 540 | - print-bgp.c: improve options printing. ugly code exists for |
| 541 | unaligned option parsing (need some fix). |
| 542 | - const poisoning in SMB decoder. |
| 543 | - -Wall -Werror clean checks. |
| 544 | - bring in KAME IPv6/IPsec decoding code. |
| 545 | |
| 546 | Assar Westerlund <assar@sics.se> |
| 547 | - SNMPv2 and SNMPv3 printer |
| 548 | - If compiled with libsmi, tcpdump can load MIBs on the fly to decode |
| 549 | SNMP packets. |
| 550 | - Incorporate NFS parsing code from NetBSD. Adds support for nfsv3. |
| 551 | - portability fixes |
| 552 | - permit building in different directories. |
| 553 | |
| 554 | Ken Hornstein <kenh@cmf.nrl.navy.mil> |
| 555 | - bring in code at |
| 556 | /afs/transarc.com/public/afs-contrib/tools/tcpdump for parsing |
| 557 | AFS3 packets |
| 558 | |
| 559 | Andrew Tridgell <tridge@linuxcare.com> |
| 560 | - SMB printing code |
| 561 | |
| 562 | Love <lha@stacken.kth.se> |
| 563 | - print-rx.c: add code for printing MakeDir and StoreStatus. Also |
| 564 | change date format to the right one. |
| 565 | |
| 566 | Michael C. Richardson <mcr@sandelman.ottawa.on.ca> |
| 567 | - Created tcpdump.org repository |
| 568 | |
| 569 | v3.4 Sat Jul 25 12:40:55 PDT 1998 |
| 570 | |
| 571 | - Hardwire Linux slip support since it's too hard to detect. |
| 572 | |
| 573 | - Redo configuration of "network" libraries (-lsocket and -lnsl) to |
| 574 | deal with IRIX. Thanks to John Hawkinson (jhawk@mit.edu) |
| 575 | |
| 576 | - Added -a which tries to translate network and broadcast addresses to |
| 577 | names. Suggested by Rob van Nieuwkerk (robn@verdi.et.tudelft.nl) |
| 578 | |
| 579 | - Added a configure option to disable gcc. |
| 580 | |
| 581 | - Added a "raw" packet printer. |
| 582 | |
| 583 | - Not having an interface address is no longer fatal. Requested by John |
| 584 | Hawkinson. |
| 585 | |
| 586 | - Rework signal setup to accommodate Linux. |
| 587 | |
| 588 | - OSPF truncation check fix. Also display the type of OSPF packets |
| 589 | using MD5 authentication. Thanks to Brian Wellington |
| 590 | (bwelling@tis.com) |
| 591 | |
| 592 | - Fix truncation check bugs in the Kerberos printer. Reported by Ezra |
| 593 | Peisach (epeisach@mit.edu) |
| 594 | |
| 595 | - Don't catch SIGHUP when invoked with nohup(1). Thanks to Dave Plonka |
| 596 | (plonka@mfa.com) |
| 597 | |
| 598 | - Specify full install target as a way of detecting if install |
| 599 | directory does not exist. Thanks to Dave Plonka. |
| 600 | |
| 601 | - Bit-swap FDDI addresses for BSD/OS too. Thanks to Paul Vixie |
| 602 | (paul@vix.com) |
| 603 | |
| 604 | - Fix off-by-one bug when testing size of ethernet packets. Thanks to |
| 605 | Marty Leisner (leisner@sdsp.mc.xerox.com) |
| 606 | |
| 607 | - Add a local autoconf macro to check for routines in libraries; the |
| 608 | autoconf version is broken (it only puts the library name in the |
| 609 | cache variable name). Thanks to John Hawkinson. |
| 610 | |
| 611 | - Add a local autoconf macro to check for types; the autoconf version |
| 612 | is broken (it uses grep instead of actually compiling a code fragment). |
| 613 | |
| 614 | - Modified to support the new BSD/OS 2.1 PPP and SLIP link layer header |
| 615 | formats. |
| 616 | |
| 617 | - Extend OSF ip header workaround to versions 1 and 2. |
| 618 | |
| 619 | - Fix some signed problems in the nfs printer. As reported by David |
| 620 | Sacerdote (davids@silence.secnet.com) |
| 621 | |
| 622 | - Detect group wheel and use it as the default since BSD/OS' install |
| 623 | can't hack numeric groups. Reported by David Sacerdote. |
| 624 | |
| 625 | - AIX needs special loader options. Thanks to Jonathan I. Kamens |
| 626 | (jik@cam.ov.com) |
| 627 | |
| 628 | - Fixed the nfs printer to print port numbers in decimal. Thanks to |
| 629 | Kent Vander Velden (graphix@iastate.edu) |
| 630 | |
| 631 | - Find installed libpcap in /usr/local/lib when not using gcc. |
| 632 | |
| 633 | - Disallow network masks with non-network bits set. |
| 634 | |
| 635 | - Attempt to detect "egcs" versions of gcc. |
| 636 | |
| 637 | - Add missing closing double quotes when displaying bootp strings. |
| 638 | Reported by Viet-Trung Luu (vluu@picard.math.uwaterloo.ca) |
| 639 | |
| 640 | v3.3 Sat Nov 30 20:56:27 PST 1996 |
| 641 | |
| 642 | - Added Linux support. |
| 643 | |
| 644 | - GRE encapsulated packet printer thanks to John Hawkinson |
| 645 | (jhawk@mit.edu) |
| 646 | |
| 647 | - Rewrite gmt2local() to avoid problematic os dependencies. |
| 648 | |
| 649 | - Suppress nfs truncation message on errors. |
| 650 | |
| 651 | - Add missing m4 quoting in AC_LBL_UNALIGNED_ACCESS autoconf macro. |
| 652 | Reported by Joachim Ott (ott@ardala.han.de) |
| 653 | |
| 654 | - Enable "ip_hl vs. ip_vhl" workaround for OSF4 too. |
| 655 | |
| 656 | - Print arp hardware type in host order. Thanks to Onno van der Linden |
| 657 | (onno@simplex.nl) |
| 658 | |
| 659 | - Avoid solaris compiler warnings. Thanks to Bruce Barnett |
| 660 | (barnett@grymoire.crd.ge.com) |
| 661 | |
| 662 | - Fix rip printer to not print one more route than is actually in the |
| 663 | packet. Thanks to Jean-Luc Richier (Jean-Luc.Richier@imag.fr) and |
| 664 | Bill Fenner (fenner@parc.xerox.com) |
| 665 | |
| 666 | - Use autoconf endian detection since BYTE_ORDER isn't defined on all systems. |
| 667 | |
| 668 | - Fix dvmrp printer truncation checks and add a dvmrp probe printer. |
| 669 | Thanks to Danny J. Mitzel (mitzel@ipsilon.com) |
| 670 | |
| 671 | - Rewrite ospf printer to improve truncation checks. |
| 672 | |
| 673 | - Don't parse tcp options past the EOL. As noted by David Sacerdote |
| 674 | (davids@secnet.com). Also, check tcp options to make sure they ar |
| 675 | actually in the tcp header (in addition to the normal truncation |
| 676 | checks). Fix the SACK code to print the N blocks (instead of the |
| 677 | first block N times). |
| 678 | |
| 679 | - Don't say really small UDP packets are truncated just because they |
| 680 | aren't big enough to be a RPC. As noted by David Sacerdote. |
| 681 | |
| 682 | v3.2.1 Sun Jul 14 03:02:26 PDT 1996 |
| 683 | |
| 684 | - Added rfc1716 icmp codes as suggested by Martin Fredriksson |
| 685 | (martin@msp.se) |
| 686 | |
| 687 | - Print mtu for icmp unreach need frag packets. Thanks to John |
| 688 | Hawkinson (jhawk@mit.edu) |
| 689 | |
| 690 | - Decode icmp router discovery messages. Thanks to Jeffrey Honig |
| 691 | (jch@bsdi.com) |
| 692 | |
| 693 | - Added a printer entry for DLT_IEEE802 as suggested by Tak Kushida |
| 694 | (kushida@trl.ibm.co.jp) |
| 695 | |
| 696 | - Check igmp checksum if possible. Thanks to John Hawkinson. |
| 697 | |
| 698 | - Made changes for SINIX. Thanks to Andrej Borsenkow |
| 699 | (borsenkow.msk@sni.de) |
| 700 | |
| 701 | - Use autoconf's idea of the top level directory in install targets. |
| 702 | Thanks to John Hawkinson. |
| 703 | |
| 704 | - Avoid infinite loop in tcp options printing code. Thanks to Jeffrey |
| 705 | Mogul (mogul@pa.dec.com) |
| 706 | |
| 707 | - Avoid using -lsocket in IRIX 5.2 and earlier since it breaks snoop. |
| 708 | Thanks to John Hawkinson. |
| 709 | |
| 710 | - Added some more packet truncation checks. |
| 711 | |
| 712 | - On systems that have it, use sigset() instead of signal() since |
| 713 | signal() has different semantics on these systems. |
| 714 | |
| 715 | - Fixed some more alignment problems on the alpha. |
| 716 | |
| 717 | - Add code to massage unprintable characters in the domain and ipx |
| 718 | printers. Thanks to John Hawkinson. |
| 719 | |
| 720 | - Added explicit netmask support. Thanks to Steve Nuchia |
| 721 | (steve@research.oknet.com) |
| 722 | |
| 723 | - Add "sca" keyword (for DEC cluster services) as suggested by Terry |
| 724 | Kennedy (terry@spcvxa.spc.edu) |
| 725 | |
| 726 | - Add "atalk" keyword as suggested by John Hawkinson. |
| 727 | |
| 728 | - Added an igrp printer. Thanks to Francis Dupont |
| 729 | (francis.dupont@inria.fr) |
| 730 | |
| 731 | - Print IPX net numbers in hex a la Novell Netware. Thanks to Terry |
| 732 | Kennedy (terry@spcvxa.spc.edu) |
| 733 | |
| 734 | - Fixed snmp extended tag field parsing bug. Thanks to Pascal Hennequin |
| 735 | (pascal.hennequin@hugo.int-evry.fr) |
| 736 | |
| 737 | - Added some ETHERTYPEs missing on some systems. |
| 738 | |
| 739 | - Added truncated packet macros and various checks. |
| 740 | |
| 741 | - Fixed endian problems with the DECnet printer. |
| 742 | |
| 743 | - Use $CC when checking gcc version. Thanks to Carl Lindberg |
| 744 | (carl_lindberg@blacksmith.com) |
| 745 | |
| 746 | - Fixes for AIX (although this system is not yet supported). Thanks to |
| 747 | John Hawkinson. |
| 748 | |
| 749 | - Fix bugs in the autoconf misaligned accesses code fragment. |
| 750 | |
| 751 | - Include sys/param.h to get BYTE_ORDER in a few places. Thanks to |
| 752 | Pavlin Ivanov Radoslavov (pavlin@cs.titech.ac.jp) |
| 753 | |
| 754 | v3.2 Sun Jun 23 02:28:10 PDT 1996 |
| 755 | |
| 756 | - Print new icmp unreachable codes as suggested by Martin Fredriksson |
| 757 | (martin@msp.se). Also print code value when unknown for icmp redirect |
| 758 | and time exceeded. |
| 759 | |
| 760 | - Fix an alignment endian bug in getname(). Thanks to John Hawkinson. |
| 761 | |
| 762 | - Define "new" domain record types if not found in arpa/nameserv.h. |
| 763 | Resulted from a suggestion from John Hawkinson (jhawk@mit.edu). Also |
| 764 | fixed an endian bug when printing mx record and added some new record |
| 765 | types. |
| 766 | |
| 767 | - Added RIP V2 support. Thanks to Jeffrey Honig (jch@bsdi.com) |
| 768 | |
| 769 | - Added T/TCP options printing. As suggested by Richard Stevens |
| 770 | (rstevens@noao.edu) |
| 771 | |
| 772 | - Use autoconf to detect architectures that can't handle misaligned |
| 773 | accesses. |
| 774 | |
| 775 | v3.1 Thu Jun 13 20:59:32 PDT 1996 |
| 776 | |
| 777 | - Changed u_int32/int32 to u_int32_t/int32_t to be consistent with bsd |
| 778 | and bind (as suggested by Charles Hannum). |
| 779 | |
| 780 | - Port to GNU autoconf. |
| 781 | |
| 782 | - Add support for printing DVMRP and PIM traffic thanks to |
| 783 | Havard Eidnes (Havard.Eidnes@runit.sintef.no). |
| 784 | |
| 785 | - Fix AppleTalk, IPX and DECnet byte order problems due to wrong endian |
| 786 | define being referenced. Reported by Terry Kennedy. |
| 787 | |
| 788 | - Minor fixes to the man page thanks to Mark Andrews. |
| 789 | |
| 790 | - Endian fixes to RTP and vat packet dumpers, thanks to Bruce Mah |
| 791 | (bmah@cs.berkeley.edu). |
| 792 | |
| 793 | - Added support for new dns types, thanks to Rainer Orth. |
| 794 | |
| 795 | - Fixed tftp_print() to print the block number for ACKs. |
| 796 | |
| 797 | - Document -dd and -ddd. Resulted from a bug report from Charlie Slater |
| 798 | (cslater@imatek.com). |
| 799 | |
| 800 | - Check return status from malloc/calloc/etc. |
| 801 | |
| 802 | - Check return status from pcap_loop() so we can print an error and |
| 803 | exit with a bad status if there were problems. |
| 804 | |
| 805 | - Bail if ip option length is <= 0. Resulted from a bug report from |
| 806 | Darren Reed (darrenr@vitruvius.arbld.unimelb.edu.au). |
| 807 | |
| 808 | - Print out a little more information for sun rpc packets. |
| 809 | |
| 810 | - Add suport for Kerberos 4 thanks to John Hawkinson (jhawk@mit.edu). |
| 811 | |
| 812 | - Fixed the Fix EXTRACT_SHORT() and EXTRACT_LONG() macros (which were |
| 813 | wrong on little endian machines). |
| 814 | |
| 815 | - Fixed alignment bug in ipx_decode(). Thanks to Matt Crawford |
| 816 | (crawdad@fnal.gov). |
| 817 | |
| 818 | - Fix ntp_print() to not print garbage when the stratum is |
| 819 | "unspecified." Thanks to Deus Ex Machina (root@belle.bork.com). |
| 820 | |
| 821 | - Rewrote tcp options printer code to check for truncation. Added |
| 822 | selective acknowledgment case. |
| 823 | |
| 824 | - Fixed an endian bug in the ospf printer. Thanks to Jeffrey C Honig |
| 825 | (jch@bsdi.com) |
| 826 | |
| 827 | - Fix rip printer to handle 4.4 BSD sockaddr struct which only uses one |
| 828 | octet for the sa_family member. Thanks to Yoshitaka Tokugawa |
| 829 | (toku@dit.co.jp) |
| 830 | |
| 831 | - Don't checksum ip header if we don't have all of it. Thanks to John |
| 832 | Hawkinson (jhawk@mit.edu). |
| 833 | |
| 834 | - Print out hostnames if possible in egp printer. Thanks to Jeffrey |
| 835 | Honig (jhc@bsdi.com) |
| 836 | |
| 837 | |
| 838 | v3.1a1 Wed May 3 19:21:11 PDT 1995 |
| 839 | |
| 840 | - Include time.h when SVR4 is defined to avoid problems under Solaris |
| 841 | 2.3. |
| 842 | |
| 843 | - Fix etheraddr_string() in the ETHER_SERVICE to return the saved |
| 844 | strings, not the local buffer. Thanks to Stefan Petri |
| 845 | (petri@ibr.cs.tu-bs.de). |
| 846 | |
| 847 | - Detect when pcap raises the snaplen (e.g. with snit). Print a warning |
| 848 | that the selected value was not used. Thanks to Pascal Hennequin |
| 849 | (Pascal.Hennequin@hugo.int-evry.fr). |
| 850 | |
| 851 | - Add a truncated packet test to print-nfs.c. Thanks to Pascal Hennequin. |
| 852 | |
| 853 | - BYTEORDER -> BYTE_ORDER Thanks to Terry Kennedy (terry@spcvxa.spc.edu). |
| 854 | |
| 855 | v3.0.3 Sun Oct 1 18:35:00 GMT 1995 |
| 856 | |
| 857 | - Although there never was a 3.0.3 release, the linux boys cleverly |
| 858 | "released" one in late 1995. |
| 859 | |
| 860 | v3.0.2 Thu Apr 20 21:28:16 PDT 1995 |
| 861 | |
| 862 | - Change configuration to not use gcc v2 flags with gcc v1. |
| 863 | |
| 864 | - Redo gmt2local() so that it works under BSDI (which seems to return |
| 865 | an empty timezone struct from gettimeofday()). Based on report from |
| 866 | Terry Kennedy (terry@spcvxa.spc.edu). |
| 867 | |
| 868 | - Change configure to recognize IP[0-9]* as "mips" SGI hardware. Based |
| 869 | on report from Mark Andrews (mandrews@alias.com). |
| 870 | |
| 871 | - Don't pass cc flags to gcc. Resulted from a bug report from Rainer |
| 872 | Orth (ro@techfak.uni-bielefeld.de). |
| 873 | |
| 874 | - Fixed printout of connection id for uncompressed tcp slip packets. |
| 875 | Resulted from a bug report from Richard Stevens (rstevens@noao.edu). |
| 876 | |
| 877 | - Hack around deficiency in Ultrix's make. |
| 878 | |
| 879 | - Add ETHERTYPE_TRAIL define which is missing from irix5. |
| 880 | |
| 881 | v3.0.1 Wed Aug 31 22:42:26 PDT 1994 |
| 882 | |
| 883 | - Fix problems with gcc2 vs. malloc() and read() prototypes under SunOS 4. |
| 884 | |
| 885 | v3.0 Mon Jun 20 19:23:27 PDT 1994 |
| 886 | |
| 887 | - Added support for printing tcp option timestamps thanks to |
| 888 | Mark Andrews (mandrews@alias.com). |
| 889 | |
| 890 | - Reorganize protocol dumpers to take const pointers to packets so they |
| 891 | never change the contents (i.e., they used to do endian conversions |
| 892 | in place). Previously, whenever more than one pass was taken over |
| 893 | the packet, the packet contents would be dumped incorrectly (i.e., |
| 894 | the output form -x would be wrong on little endian machines because |
| 895 | the protocol dumpers would modify the data). Thanks to Charles Hannum |
| 896 | (mycroft@gnu.ai.mit.edu) for reporting this problem. |
| 897 | |
| 898 | - Added support for decnet protocol dumping thanks to Jeff Mogul |
| 899 | (mogul@pa.dec.com). |
| 900 | |
| 901 | - Fix bug that caused length of packet to be incorrectly printed |
| 902 | (off by ether header size) for unknown ethernet types thanks |
| 903 | to Greg Miller (gmiller@kayak.mitre.org). |
| 904 | |
| 905 | - Added support for IPX protocol dumping thanks to Brad Parker |
| 906 | (brad@fcr.com). |
| 907 | |
| 908 | - Added check to verify IP header checksum under -v thanks to |
| 909 | Brad Parker (brad@fcr.com). |
| 910 | |
| 911 | - Move packet capture code to new libpcap library (which is |
| 912 | packaged separately). |
| 913 | |
| 914 | - Prototype everything and assume an ansi compiler. |
| 915 | |
| 916 | - print-arp.c: Print hardware ethernet addresses if they're not |
| 917 | what we expect. |
| 918 | |
| 919 | - print-bootp.c: Decode the cmu vendor field. Add RFC1497 tags. |
| 920 | Many helpful suggestions from Gordon Ross (gwr@jericho.mc.com). |
| 921 | |
| 922 | - print-fddi.c: Improvements. Thanks to Jeffrey Mogul |
| 923 | (mogul@pa.dec.com). |
| 924 | |
| 925 | - print-icmp.c: Byte swap netmask before printing. Thanks to |
| 926 | Richard Stevens (rstevens@noao.edu). Print icmp type when unknown. |
| 927 | |
| 928 | - print-ip.c: Print the inner ip datagram of ip-in-ip encapsulated packets. |
| 929 | By default, only the inner packet is dumped, appended with the token |
| 930 | "(encap)". Under -v, both the inner and output packets are dumped |
| 931 | (on the same line). Note that the filter applies to the original packet, |
| 932 | not the encapsulated packet. So if you run tcpdump on a net with an |
| 933 | IP Multicast tunnel, you cannot filter out the datagrams using the |
| 934 | conventional syntax. (You can filter away all the ip-in-ip traffic |
| 935 | with "not ip proto 4".) |
| 936 | |
| 937 | - print-nfs.c: Keep pending rpc's in circular table. Add generic |
| 938 | nfs header and remove os dependences. Thanks to Jeffrey Mogul. |
| 939 | |
| 940 | - print-ospf.c: Improvements. Thanks to Jeffrey Mogul. |
| 941 | |
| 942 | - tcpdump.c: Add -T flag allows interpretation of "vat", "wb", "rpc" |
| 943 | (sunrpc) and rtp packets. Added "inbound" and "outbound" keywords |
| 944 | Add && and || operators |
| 945 | |
| 946 | v2.2.1 Tue Jun 6 17:57:22 PDT 1992 |
| 947 | |
| 948 | - Fix bug with -c flag. |
| 949 | |
| 950 | v2.2 Fri May 22 17:19:41 PDT 1992 |
| 951 | |
| 952 | - savefile.c: Remove hack that shouldn't have been exported. Add |
| 953 | truncate checks. |
| 954 | |
| 955 | - Added the 'icmp' keyword. For example, 'icmp[0] != 8 and icmp[0] != 0' |
| 956 | matches non-echo/reply ICMP packets. |
| 957 | |
| 958 | - Many improvements to filter code optimizer. |
| 959 | |
| 960 | - Added 'multicast' keyword and extended the 'broadcast' keyword can now be |
| 961 | so that protocol qualifications are allowed. For example, "ip broadcast" |
| 962 | and "ether multicast" are valid filters. |
| 963 | |
| 964 | - Added support for monitoring the loopback interface (i.e. 'tcpdump -i lo'). |
| 965 | Jeffrey Honig (jch@MITCHELL.CIT.CORNELL.EDU) contributed the kernel |
| 966 | patches to netinet/if_loop.c. |
| 967 | |
| 968 | - Added support for the Ungermann-Bass Ethernet on IBM/PC-RTs running AOS. |
| 969 | Contact Jeffrey Honig (jch@MITCHELL.CIT.CORNELL.EDU) for the diffs. |
| 970 | |
| 971 | - Added EGP and OSPF printers, thanks to Jeffrey Honig. |
| 972 | |
| 973 | v2.1 Tue Jan 28 11:00:14 PST 1992 |
| 974 | |
| 975 | - Internal release (never publically exported). |
| 976 | |
| 977 | v2.0.1 Sun Jan 26 21:10:10 PDT |
| 978 | |
| 979 | - Various byte ordering fixes. |
| 980 | |
| 981 | - Add truncation checks. |
| 982 | |
| 983 | - inet.c: Support BSD style SIOCGIFCONF. |
| 984 | |
| 985 | - nametoaddr.c: Handle multi addresses for single host. |
| 986 | |
| 987 | - optimize.c: Rewritten. |
| 988 | |
| 989 | - pcap-bpf.c: don't choke when we get ptraced. only set promiscuous |
| 990 | for broadcast nets. |
| 991 | |
| 992 | - print-atal.c: Fix an alignment bug (thanks to |
| 993 | stanonik@nprdc.navy.mil) Add missing printf() argument. |
| 994 | |
| 995 | - print-bootp.c: First attempt at decoding the vendor buffer. |
| 996 | |
| 997 | - print-domain.c: Fix truncation checks. |
| 998 | |
| 999 | - print-icmp.c: Calculate length of packets from the ip header. |
| 1000 | |
| 1001 | - print-ip.c: Print frag id in decimal (so it's easier to match up |
| 1002 | with non-frags). Add support for ospf, egp and igmp. |
| 1003 | |
| 1004 | - print-nfs.c: Lots of changes. |
| 1005 | |
| 1006 | - print-ntp.c: Make some verbose output depend on -v. |
| 1007 | |
| 1008 | - print-snmp.c: New version from John LoVerso. |
| 1009 | |
| 1010 | - print-tcp.c: Print rfc1072 tcp options. |
| 1011 | |
| 1012 | - tcpdump.c: Print "0x" prefix for %x formats. Always print 6 digits |
| 1013 | (microseconds) worth of precision. Fix uid bugs. |
| 1014 | |
| 1015 | - A packet dumper has been added (thanks to Jeff Mogul of DECWRL). |
| 1016 | With this option, you can create an architecture independent binary |
| 1017 | trace file in real time, without the overhead of the packet printer. |
| 1018 | At a later time, the packets can be filtered (again) and printed. |
| 1019 | |
| 1020 | - BSD is supported. You must have BPF in your kernel. |
| 1021 | Since the filtering is now done in the kernel, fewer packets are |
| 1022 | dropped. In fact, with BPF and the packet dumper option, a measly |
| 1023 | Sun 3/50 can keep up with a busy network. |
| 1024 | |
| 1025 | - Compressed SLIP packets can now be dumped, provided you use our |
| 1026 | SLIP software and BPF. These packets are dumped as any other IP |
| 1027 | packet; the compressed headers are dumped with the '-e' option. |
| 1028 | |
| 1029 | - Machines with little-endian byte ordering are supported (thanks to |
| 1030 | Jeff Mogul). |
| 1031 | |
| 1032 | - Ultrix 4.0 is supported (also thanks to Jeff Mogul). |
| 1033 | |
| 1034 | - IBM RT and Stanford Enetfilter support has been added by |
| 1035 | Rayan Zachariassen <rayan@canet.ca>. Tcpdump has been tested under |
| 1036 | both the vanilla Enetfilter interface, and the extended interface |
| 1037 | (#ifdef'd by IBMRTPC) present in the MERIT version of the Enetfilter. |
| 1038 | |
| 1039 | - TFTP packets are now printed (requests only). |
| 1040 | |
| 1041 | - BOOTP packets are now printed. |
| 1042 | |
| 1043 | - SNMP packets are now printed. (thanks to John LoVerso of Xylogics). |
| 1044 | |
| 1045 | - Sparc architectures, including the Sparcstation-1, are now |
| 1046 | supported thanks to Steve McCanne and Craig Leres. |
| 1047 | |
| 1048 | - SunOS 4 is now supported thanks to Micky Liu of Columbia |
| 1049 | University (micky@cunixc.cc.columbia.edu). |
| 1050 | |
| 1051 | - IP options are now printed. |
| 1052 | |
| 1053 | - RIP packets are now printed. |
| 1054 | |
| 1055 | - There's a -v flag that prints out more information than the |
| 1056 | default (e.g., it will enable printing of IP ttl, tos and id) |
| 1057 | and -q flag that prints out less (e.g., it will disable |
| 1058 | interpretation of AppleTalk-in-UDP). |
| 1059 | |
| 1060 | - The grammar has undergone substantial changes (if you have an |
| 1061 | earlier version of tcpdump, you should re-read the manual |
| 1062 | entry). |
| 1063 | |
| 1064 | The most useful change is the addition of an expression |
| 1065 | syntax that lets you filter on arbitrary fields or values in the |
| 1066 | packet. E.g., "ip[0] > 0x45" would print only packets with IP |
| 1067 | options, "tcp[13] & 3 != 0" would print only TCP SYN and FIN |
| 1068 | packets. |
| 1069 | |
| 1070 | The most painful change is that concatenation no longer means |
| 1071 | "and" -- e.g., you have to say "host foo and port bar" instead |
| 1072 | of "host foo port bar". The up side to this down is that |
| 1073 | repeated qualifiers can be omitted, making most filter |
| 1074 | expressions shorter. E.g., you can now say "ip host foo and |
| 1075 | (bar or baz)" to look at ip traffic between hosts foo and bar or |
| 1076 | between hosts foo and baz. [The old way of saying this was "ip |
| 1077 | host foo and (ip host bar or ip host baz)".] |
| 1078 | |
| 1079 | v2.0 Sun Jan 13 12:20:40 PST 1991 |
| 1080 | |
| 1081 | - Initial public release. |