head 1.1; branch 1.1.1; access; symbols netbsd-11-0-RC6:1.1.1.2 netbsd-11-0-RC5:1.1.1.2 netbsd-11-0-RC4:1.1.1.2 netbsd-11-0-RC3:1.1.1.2 tcpdump-4-99-6:1.1.1.3 netbsd-11-0-RC2:1.1.1.2 netbsd-11-0-RC1:1.1.1.2 perseant-exfatfs-base-20250801:1.1.1.2 netbsd-11:1.1.1.2.0.2 netbsd-11-base:1.1.1.2 tcpdump-4-99-5:1.1.1.2 perseant-exfatfs-base-20240630:1.1.1.1 perseant-exfatfs:1.1.1.1.0.2 perseant-exfatfs-base:1.1.1.1 tcpdump-4-99-4:1.1.1.1 TCPDUMP:1.1.1; locks; strict; comment @# @; 1.1 date 2023.08.17.15.57.18; author christos; state Exp; branches 1.1.1.1; next ; commitid 6SL2uKbgSix3J9BE; 1.1.1.1 date 2023.08.17.15.57.18; author christos; state Exp; branches 1.1.1.1.2.1; next 1.1.1.2; commitid 6SL2uKbgSix3J9BE; 1.1.1.2 date 2024.09.02.15.50.12; author christos; state Exp; branches; next 1.1.1.3; commitid E0666bfLa9iupfoF; 1.1.1.3 date 2026.03.19.00.00.55; author christos; state Exp; branches; next ; commitid eaFgVHJVXxuJ3wyG; 1.1.1.1.2.1 date 2025.08.02.05.23.34; author perseant; state Exp; branches; next ; commitid 23j6GFaDws3O875G; desc @@ 1.1 log @Initial revision @ text @ 1 15:17:28.958610 IP (tos 0x0, ttl 128, id 14471, offset 0, flags [none], proto UDP (17), length 207) 192.168.1.249.138 > 192.168.1.255.138: UDP, length 179 2 15:17:28.958708 IP (tos 0x0, ttl 128, id 14472, offset 0, flags [none], proto UDP (17), length 207) 192.168.1.249.138 > 192.168.1.255.138: UDP, length 179 3 15:17:28.959360 IP (tos 0x0, ttl 128, id 14473, offset 0, flags [none], proto UDP (17), length 237) 192.168.1.249.138 > 192.168.1.255.138: UDP, length 209 4 15:17:28.961018 IP (tos 0x0, ttl 128, id 14474, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 5 15:17:29.710899 IP (tos 0x0, ttl 128, id 14477, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 6 15:17:30.461235 IP (tos 0x0, ttl 128, id 14478, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 7 15:17:30.798408 IP (tos 0x0, ttl 128, id 14479, offset 0, flags [none], proto UDP (17), length 229) 192.168.1.249.138 > 192.168.1.255.138: UDP, length 201 8 15:17:33.464213 IP (tos 0x0, ttl 128, id 14484, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 9 15:17:34.214302 IP (tos 0x0, ttl 128, id 14485, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 10 15:17:34.964688 IP (tos 0x0, ttl 128, id 14486, offset 0, flags [none], proto UDP (17), length 78) 192.168.1.249.137 > 192.168.1.255.137: UDP, length 50 11 15:17:35.473290 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.249, length 28 12 15:17:35.481559 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.1 is-at 00:0d:88:4f:25:91, length 46 13 15:17:35.481577 IP (tos 0x0, ttl 128, id 14487, offset 0, flags [none], proto UDP (17), length 328) 192.168.1.249.68 > 192.168.1.1.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0xc82d253d, secs 36609, Flags [Broadcast] Client-IP 192.168.1.249 Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Release Server-ID (54), length 4: 192.168.1.1 Client-ID (61), length 7: ether 00:04:23:57:a5:7a 14 15:17:35.622870 EAP packet (0) v1, len 5, Request (1), id 1, len 5 Type Identity (1) 15 15:17:35.666378 IP (tos 0x0, ttl 128, id 14495, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0x9817873c, Flags [none] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 16 15:17:35.851486 IP (tos 0x0, ttl 128, id 14497, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0xd5037d2e, Flags [none] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 17 15:17:36.156548 EAPOL start (1) v1, len 0 18 15:17:36.158698 EAP packet (0) v1, len 5, Request (1), id 2, len 5 Type Identity (1) 19 15:17:37.766046 EAP packet (0) v1, len 45, Response (2), id 2, len 45 Type Identity (1), Identity: 1295023820005391@@mnc023.mcc295.owlan.org 20 15:17:37.790625 EAP packet (0) v1, len 20, Request (1), id 16, len 20 Type SIM (18) subtype [Start] 0x0a 21 15:17:37.830669 EAP packet (0) v1, len 76, Response (2), id 16, len 76 Type SIM (18) subtype [Start] 0x0a 22 15:17:37.848577 EAP packet (0) v1, len 80, Request (1), id 17, len 80 Type SIM (18) subtype [Challenge] 0x0b 23 15:17:38.661939 EAP packet (0) v1, len 28, Response (2), id 17, len 28 Type SIM (18) subtype [Challenge] 0x0b 24 15:17:38.685352 EAP packet (0) v1, len 4, Success (3), id 0, len 4 25 15:17:38.686358 EAPOL key (3) v1, len 57 26 15:17:38.687182 EAPOL key (3) v1, len 44 27 15:17:39.852392 IP (tos 0x0, ttl 128, id 14503, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0xd5037d2e, secs 26881, Flags [none] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 28 15:17:46.852719 IP (tos 0x0, ttl 128, id 14511, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0xd5037d2e, secs 26881, Flags [none] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 29 15:18:02.852731 IP (tos 0x0, ttl 128, id 14514, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0xd5037d2e, secs 26881, Flags [none] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 30 15:18:08.689384 EAPOL start (1) v1, len 0 31 15:18:08.696826 EAP packet (0) v1, len 5, Request (1), id 3, len 5 Type Identity (1) 32 15:18:08.713116 EAP packet (0) v1, len 45, Response (2), id 3, len 45 Type Identity (1), Identity: 1295023820005391@@mnc023.mcc295.owlan.org 33 15:18:08.787664 EAP packet (0) v1, len 20, Request (1), id 47, len 20 Type SIM (18) subtype [Start] 0x0a 34 15:18:10.344628 EAP packet (0) v1, len 76, Response (2), id 47, len 76 Type SIM (18) subtype [Start] 0x0a 35 15:18:10.473292 EAP packet (0) v1, len 80, Request (1), id 48, len 80 Type SIM (18) subtype [Challenge] 0x0b 36 15:18:11.152435 EAP packet (0) v1, len 28, Response (2), id 48, len 28 Type SIM (18) subtype [Challenge] 0x0b 37 15:18:11.251425 EAP packet (0) v1, len 4, Success (3), id 0, len 4 38 15:18:11.252509 EAPOL key (3) v1, len 57 39 15:18:11.253336 EAPOL key (3) v1, len 44 40 15:18:35.856823 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 41 15:18:35.885105 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 42 15:18:36.885304 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 43 15:18:37.907817 IP (tos 0x0, ttl 1, id 14526, offset 0, flags [none], proto UDP (17), length 161) 169.254.67.194.4299 > 239.255.255.250.1900: UDP, length 133 44 15:18:37.910524 IP (tos 0x0, ttl 1, id 14528, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) 169.254.67.194 > 224.0.0.22: igmp v3 report, 1 group record(s) [gaddr 239.255.255.250 to_ex, 0 source(s)] 45 15:18:37.964030 IP (tos 0x0, ttl 128, id 14530, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 46 15:18:38.691974 IP (tos 0x0, ttl 1, id 14532, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) 169.254.67.194 > 224.0.0.22: igmp v3 report, 1 group record(s) [gaddr 239.255.255.250 to_ex, 0 source(s)] 47 15:18:38.714004 IP (tos 0x0, ttl 128, id 14533, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 48 15:18:39.464435 IP (tos 0x0, ttl 128, id 14534, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 49 15:18:39.898479 IP (tos 0x0, ttl 128, id 14535, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0x9245394e, Flags [Broadcast] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 50 15:18:40.214836 IP (tos 0x0, ttl 128, id 14536, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 51 15:18:40.909196 IP (tos 0x0, ttl 1, id 14538, offset 0, flags [none], proto UDP (17), length 161) 169.254.67.194.4299 > 239.255.255.250.1900: UDP, length 133 52 15:18:40.965632 IP (tos 0x0, ttl 128, id 14540, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 53 15:18:41.254259 EAPOL start (1) v1, len 0 54 15:18:41.256353 EAP packet (0) v1, len 5, Request (1), id 4, len 5 Type Identity (1) 55 15:18:41.275901 EAP packet (0) v1, len 45, Response (2), id 4, len 45 Type Identity (1), Identity: 1295023820005391@@mnc023.mcc295.owlan.org 56 15:18:41.388857 EAP packet (0) v1, len 20, Request (1), id 80, len 20 Type SIM (18) subtype [Start] 0x0a 57 15:18:41.715620 IP (tos 0x0, ttl 128, id 14541, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 58 15:18:42.466013 IP (tos 0x0, ttl 128, id 14542, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 59 15:18:42.963175 EAP packet (0) v1, len 76, Response (2), id 80, len 76 Type SIM (18) subtype [Start] 0x0a 60 15:18:42.987906 EAP packet (0) v1, len 80, Request (1), id 81, len 80 Type SIM (18) subtype [Challenge] 0x0b 61 15:18:43.216408 IP (tos 0x0, ttl 128, id 14543, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 62 15:18:43.675053 EAP packet (0) v1, len 28, Response (2), id 81, len 28 Type SIM (18) subtype [Challenge] 0x0b 63 15:18:43.695554 EAP packet (0) v1, len 4, Success (3), id 0, len 4 64 15:18:43.696547 EAPOL key (3) v1, len 57 65 15:18:43.697368 EAPOL key (3) v1, len 44 66 15:18:43.899684 IP (tos 0x0, ttl 128, id 14544, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0x9245394e, secs 10497, Flags [Broadcast] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 67 15:18:43.909719 IP (tos 0x0, ttl 1, id 14546, offset 0, flags [none], proto UDP (17), length 161) 169.254.67.194.4299 > 239.255.255.250.1900: UDP, length 133 68 15:18:43.967353 IP (tos 0x0, ttl 128, id 14548, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 69 15:18:43.967896 IP (tos 0x0, ttl 128, id 14549, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 70 15:18:44.717196 IP (tos 0x0, ttl 128, id 14552, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 71 15:18:44.718161 IP (tos 0x0, ttl 128, id 14553, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 72 15:18:45.467593 IP (tos 0x0, ttl 128, id 14554, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 73 15:18:45.468557 IP (tos 0x0, ttl 128, id 14555, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 74 15:18:46.217980 IP (tos 0x0, ttl 128, id 14556, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 75 15:18:46.218950 IP (tos 0x0, ttl 128, id 14557, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 76 15:18:46.969929 IP (tos 0x0, ttl 128, id 14563, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 77 15:18:46.970205 IP (tos 0x0, ttl 128, id 14564, offset 0, flags [none], proto UDP (17), length 229) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 201 78 15:18:48.470207 IP (tos 0x0, ttl 128, id 14566, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 79 15:18:49.970986 IP (tos 0x0, ttl 128, id 14567, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 80 15:18:51.471768 IP (tos 0x0, ttl 128, id 14568, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 81 15:18:52.900388 IP (tos 0x0, ttl 128, id 14569, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0x9245394e, secs 10497, Flags [Broadcast] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 82 15:18:52.972547 IP (tos 0x0, ttl 128, id 14570, offset 0, flags [none], proto UDP (17), length 219) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 191 83 15:18:53.972751 IP (tos 0x0, ttl 128, id 14571, offset 0, flags [none], proto UDP (17), length 219) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 191 84 15:18:54.972939 IP (tos 0x0, ttl 128, id 14572, offset 0, flags [none], proto UDP (17), length 219) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 191 85 15:18:55.973129 IP (tos 0x0, ttl 128, id 14573, offset 0, flags [none], proto UDP (17), length 219) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 191 86 15:18:56.973475 IP (tos 0x0, ttl 128, id 14574, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 87 15:18:57.723686 IP (tos 0x0, ttl 128, id 14575, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 88 15:18:58.474079 IP (tos 0x0, ttl 128, id 14576, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 89 15:18:59.224473 IP (tos 0x0, ttl 128, id 14579, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 90 15:18:59.974983 IP (tos 0x0, ttl 128, id 14580, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 91 15:19:00.725263 IP (tos 0x0, ttl 128, id 14581, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 92 15:19:01.475654 IP (tos 0x0, ttl 128, id 14582, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 93 15:19:02.226046 IP (tos 0x0, ttl 128, id 14583, offset 0, flags [none], proto UDP (17), length 96) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 68 94 15:19:02.976511 IP (tos 0x0, ttl 128, id 14584, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 95 15:19:02.976737 IP (tos 0x0, ttl 128, id 14585, offset 0, flags [none], proto UDP (17), length 207) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 179 96 15:19:02.977520 IP (tos 0x0, ttl 128, id 14586, offset 0, flags [none], proto UDP (17), length 237) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 209 97 15:19:02.979092 IP (tos 0x0, ttl 128, id 14587, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 98 15:19:03.728840 IP (tos 0x0, ttl 128, id 14588, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 99 15:19:04.479238 IP (tos 0x0, ttl 128, id 14589, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 100 15:19:07.482218 IP (tos 0x0, ttl 128, id 14593, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 101 15:19:08.232205 IP (tos 0x0, ttl 128, id 14594, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 102 15:19:08.982597 IP (tos 0x0, ttl 128, id 14596, offset 0, flags [none], proto UDP (17), length 78) 169.254.67.194.137 > 169.254.255.255.137: UDP, length 50 103 15:19:09.900631 IP (tos 0x0, ttl 128, id 14598, offset 0, flags [none], proto UDP (17), length 328) 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 00:04:23:57:a5:7a, length 300, xid 0x9245394e, secs 10497, Flags [Broadcast] Client-Ethernet-Address 00:04:23:57:a5:7a Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message (53), length 1: Discover NOAUTO (116), length 1: Y Client-ID (61), length 7: ether 00:04:23:57:a5:7a Requested-IP (50), length 4: 192.168.1.249 Hostname (12), length 8: "DJP95S0J" Vendor-Class (60), length 8: "MSFT 5.0" Parameter-Request (55), length 11: Subnet-Mask (1), Domain-Name (15), Default-Gateway (3), Domain-Name-Server (6) Netbios-Name-Server (44), Netbios-Node (46), Netbios-Scope (47), Router-Discovery (31) Static-Route (33), Classless-Static-Route-Microsoft (249), Vendor-Option (43) 104 15:19:13.696821 EAPOL start (1) v1, len 0 105 15:19:13.704581 EAP packet (0) v1, len 5, Request (1), id 5, len 5 Type Identity (1) 106 15:19:13.718221 EAP packet (0) v1, len 45, Response (2), id 5, len 45 Type Identity (1), Identity: 1295023820005391@@mnc023.mcc295.owlan.org 107 15:19:13.734974 EAP packet (0) v1, len 20, Request (1), id 112, len 20 Type SIM (18) subtype [Start] 0x0a 108 15:19:14.801245 IP (tos 0x0, ttl 128, id 14604, offset 0, flags [none], proto UDP (17), length 229) 169.254.67.194.138 > 169.254.255.255.138: UDP, length 201 109 15:19:15.293800 EAP packet (0) v1, len 76, Response (2), id 112, len 76 Type SIM (18) subtype [Start] 0x0a 110 15:19:15.312531 EAP packet (0) v1, len 80, Request (1), id 113, len 80 Type SIM (18) subtype [Challenge] 0x0b 111 15:19:15.997763 EAP packet (0) v1, len 28, Response (2), id 113, len 28 Type SIM (18) subtype [Challenge] 0x0b 112 15:19:16.022323 EAP packet (0) v1, len 4, Success (3), id 0, len 4 113 15:19:16.023335 EAPOL key (3) v1, len 57 114 15:19:16.024149 EAPOL key (3) v1, len 44 @ 1.1.1.1 log @Import tcpdump-4.99.4 (last was 4.9.3) Friday, April 7, 2023 / The Tcpdump Group Summary for 4.99.4 tcpdump release Source code: Fix spaces before tabs in indentation. Updated printers: LSP ping: Fix "Unused value" warnings from Coverity. CVE-2023-1801: Fix an out-of-bounds write in the SMB printer. DNS: sync resource types with IANA. ICMPv6: Update the output to show a RPL DAO field name. Geneve: Fix the Geneve UDP port test. Building and testing: Require at least autoconf 2.69. Don't check for strftime(), as it's in C90 and beyond. Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21. Documentation: man: Document TCP flag names better. Thursday, January 12, 2023 / The Tcpdump Group Summary for 4.99.3 tcpdump release Updated printers: PTP: Use the proper values for the control field and print un-allocated values for the message field as "Reserved" instead of "none". Source code: smbutil.c: Replace obsolete function call (asctime) Building and testing: cmake: Update the minimum required version to 2.8.12 (except Windows). CI: Introduce and use TCPDUMP_CMAKE_TAINTED. Makefile.in: Add the releasecheck target. Makefile.in: Add "make -s install" in the releasecheck target. Cirrus CI: Run the "make releasecheck" command in the Linux task. Makefile.in: Add the whitespacecheck target. Cirrus CI: Run the "make whitespacecheck" command in the Linux task. Address all shellcheck warnings in update-test.sh. Makefile.in: Get rid of a remain of gnuc.h. Documentation: Reformat the installation notes (INSTALL.txt) in Markdown. Convert CONTRIBUTING to Markdown. CONTRIBUTING.md: Document the use of "protocol: " in a commit summary. Add a README file for NetBSD. Fix CMake build to set man page section numbers in tcpdump.1 Saturday, December 31, 2022 / The Tcpdump Group Summary for 4.99.2 tcpdump release Updated printers: BGP: Update cease notification decoding to RFC 9003. BGP: decode BGP link-bandwidth extended community properly. BGP: Fix parsing the AIGP attribute BGP: make sure the path attributes don't go past the end of the packet. BGP: Shutdown message can be up to 255 bytes length according to rfc9003 DSA: correctly determine VID. EAP: fix some length checks and output issues. 802.11: Fix the misleading comment regarding "From DS", "To DS" Frame Control Flags. 802.11: Fetch the CF and TIM IEs a field at a time. 802.15.4, BGP, LISP: fix some length checks, compiler warnings, and undefined behavior warnings. PFLOG: handle LINKTYPE_PFLOG/DLT_PFLOG files from all OSes on all OSes. RRCP: support more Realtek protocols than just RRCP. MPLS: show the EXP field as TC, as per RFC 5462. ICMP: redo MPLS Extension code as general ICMP Extension code. VQP: Do not print unknown error codes twice. Juniper: Add some bounds checks. Juniper: Don't treat known DLT_ types as "Unknown". lwres: Fix a length check, update a variable type. EAP: Fix some undefined behaviors at runtime. Ethernet: Rework the length checks, add a length check. IPX: Add two length checks. Zephyr: Avoid printing non-ASCII characters. VRRP: Print the protocol name before any GET_(). DCCP: Get rid of trailing commas in lists. Juniper: Report invalid packets as invalid, not truncated. IPv6: Remove an obsolete code in an always-false #if wrapper. ISAKMP: Use GET_U_1() to replace a direct dereference. RADIUS: Use GET_U_1() to replace a direct dereference. TCP: Fix an invalid check. RESP: Fix an invalid check. RESP: Remove an unnecessary test. Arista: Refine the output format and print HwInfo. sFlow: add support for IPv6 agent, add a length check. VRRP: add support for IPv6. OSPF: Update to match the Router Properties registry. OSPF: Remove two unnecessary dereferences. OSPF: Add support bit Nt RFC3101. OSPFv3: Remove two unnecessary dereferences. ICMPv6: Fix output for Router Renumbering messages. ICMPv6: Fix the Node Information flags. ICMPv6: Remove an unused macro and extra blank lines. ICMPv6: Add a length check in the rpl_dio_print() function. ICMPv6: Use GET_IP6ADDR_STRING() in the rpl_dio_print() function. IPv6: Add some checks for the Hop-by-Hop Options header IPv6: Add a check for the Jumbo Payload Hop-by-Hop option. NFS: Fix the format for printing an unsigned int PTP: fix printing of the correction fields PTP: Use ND_LCHECK_U for checking invalid length. WHOIS: Add its own printer source file and printer function MPTCP: print length before subtype inside MPTCP options ESP: Add a workaround to a "use-of-uninitialized-value". PPP: Add tests to avoid incorrectly re-entering ppp_hdlc(). PPP: Don't process further if protocol is unknown (-e option). PPP: Change the pointer to packet data. ZEP: Add three length checks. Add some const qualifiers. Building and testing: Update config.guess and config.sub. Use AS_HELP_STRING macro instead of AC_HELP_STRING. Handle some Autoconf/make errors better. Fix an error when cross-compiling. Use "git archive" for the "make releasetar" process. Remove the release candidate rcX targets. Mend "make check" on Solaris 9 with Autoconf. Address assorted compiler warnings. Fix auto-enabling of Capsicum on FreeBSD with Autoconf. Treat "msys" as Windows for test exit statuses. Clean up some help messages in configure. Use unified diff by default. Remove awk code from mkdep. Fix configure test errors with Clang 15 CMake: Prevent stripping of the RPATH on installation. AppVeyor CI: update Npcap site, update to 1.12 SDK. Cirrus CI: Use the same configuration as for the main branch. CI: Add back running tcpdump -J/-L and capture, now with Cirrus VMs. Remove four test files (They are now in the libpcap tests directory). On Solaris, for 64-bit builds, use the 64-bit pcap-config. Tell CMake not to check for a C++ compiler. CMake: Add a way to request -Werror and equivalents. configure: Special-case macOS /usr/bin/pcap-config as we do in CMake. configure: Use pcap-config --static-pcap-only if available. configure: Use ac_c_werror_flag to force unknown compiler flags to fail. configure: Use AC_COMPILE_IFELSE() and AC_LANG_SOURCE() for testing flags. Run the test that fails on OpenBSD only if we're not on OpenBSD. Source code: Fix some snapend-changing routines to protect against pointer underflow. Use __func__ from C99 in some function calls. Memory allocator: Update nd_add_alloc_list() to a static function. addrtoname.c: Fix two invalid tests. Use more S_SUCCESS and S_ERR_HOST_PROGRAM in main(). Add some comments about "don't use GET_IP6ADDR_STRING()". Assign ndo->ndo_packetp in pretty_print_packet(). Add ND_LCHECKMSG_U, ND_LCHECK_U, ND_LCHECKMSG_ZU and ND_LCHECK_ZU macros. Update tok2strbuf() to a static function. netdissect.h: Keep the link-layer dissectors names sorted. setsignal(): Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output. Use __builtin_unreachable(). Fail if nd_push_buffer() or nd_push_snaplen() fails. Improve code style and fix many typos. Documentation: Some man page cleanups. Update the print interface for the packet count to stdout. Note that we require compilers to support at least some of C99. Update AIX and Solaris-related specifics. INSTALL.txt: Add doc/README.*, delete the deleted win32 directory. Update README.md and README.Win32.md. Update some comments with new RFC numbers. Wednesday, June 9, 2021 by gharris Summary for 4.99.1 tcpdump release Source code: Squelch some compiler warnings ICMP: Update the snapend for some nested IP packets. MACsec: Update the snapend thus the ICV field is not payload for the caller. EIGRP: Fix packet header fields SMB: Disable printer by default in CMake builds OLSR: Print the protocol name even if the packet is invalid MSDP: Print ": " before the protocol name ESP: Remove padding, padding length and next header from the buffer DHCPv6: Update the snapend for nested DHCPv6 packets OpenFlow 1.0: Get snapend right for nested frames. TCP: Update the snapend before decoding a MPTCP option Ethernet, IEEE 802.15.4, IP, L2TP, TCP, ZEP: Add bounds checks ForCES: Refine SPARSEDATA-TLV length check. ASCII/hex: Use nd_trunc_longjmp() in truncation cases GeoNet: Add a ND_TCHECK_LEN() call Replace ND_TCHECK_/memcpy() pairs with GET_CPY_BYTES(). BGP: Fix overwrites of global 'astostr' temporary buffer ARP: fix overwrites of static buffer in q922_string(). Frame Relay: have q922_string() handle errors better. Building and testing: Rebuild configure script when building release Fix "make clean" for out-of-tree autotools builds CMake: add stuff from CMAKE_PREFIX_PATH to PKG_CONFIG_PATH. Documentation: man: Update a reference as www.cifs.org is gone. [skip ci] man: Update DNS sections Solaris: Fix a compile error with Sun C Wednesday, December 30, 2020, by mcr@@sandelman.ca, denis and fxl. Summary for 4.99.0 tcpdump release CVE-2018-16301: For the -F option handle large input files safely. Improve the contents, wording and formatting of the man page. Print unsupported link-layer protocol packets in hex. Add support for new network protocols and DLTs: Arista, Autosar SOME/IP, Broadcom LI and Ethernet switches tag, IEEE 802.15.9, IP-over-InfiniBand (IPoIB), Linux SLL2, Linux vsockmon, MACsec, Marvell Distributed Switch Architecture, OpenFlow 1.3, Precision Time Protocol (PTP), SSH, WHOIS, ZigBee Encapsulation Protocol (ZEP). Make protocol-specific updates for: AH, DHCP, DNS, ESP, FRF.16, HNCP, ICMP6, IEEE 802.15.4, IPv6, IS-IS, Linux SLL, LLDP, LSP ping, MPTCP, NFS, NSH, NTP, OSPF, OSPF6, PGM, PIM, PPTP, RADIUS, RSVP, Rx, SMB, UDLD, VXLAN-GPE. User interface: Make SLL2 the default for Linux "any" pseudo-device. Add --micro and --nano shorthands. Add --count to print a counter only instead of decoding. Add --print, to cause packet printing even with -w. Add support for remote capture if libpcap supports it. Display the "wireless" flag and connection status. Flush the output packet buffer on a SIGUSR2. Add the snapshot length to the "reading from file ..." message. Fix local time printing (DST offset in timestamps). Allow -C arguments > 2^31-1 GB if they can fit into a long. Handle very large -f files by rejecting them. Report periodic stats only when safe to do so. Print the number of packets captured only as often as necessary. With no -s, or with -s 0, don't specify the snapshot length with newer versions of libpcap. Improve version and usage message printing. Building and testing: Install into bindir, not sbindir. autoconf: replace --with-system-libpcap with --disable-local-libpcap. Require the compiler to support C99. Better detect and use various C compilers and their features. Add CMake as the second build system. Make out-of-tree builds more reliable. Use pkg-config to detect libpcap if available. Improve Windows support. Add more tests and improve the scripts that run them. Test both with "normal" and "x87" floating-point. Eliminate dependency on libdnet. FreeBSD: Print a proper error message about monitor mode VAP. Use libcasper if available. Fix failure to capture on RDMA device. Include the correct capsicum header. Source code: Start the transition to longjmp() for packet truncation handling. Introduce new helper functions, including GET_*(), nd_print_protocol(), nd_print_invalid(), nd_print_trunc(), nd_trunc_longjmp() and others. Put integer signedness right in many cases. Introduce nd_uint*, nd_mac_addr, nd_ipv4 and nd_ipv6 types to fix alignment issues, especially on SPARC. Fix many C compiler, Coverity, UBSan and cppcheck warnings. Fix issues detected with AddressSanitizer. Remove many workarounds for older compilers and OSes. Add a sanity check on packet header length. Add and remove plenty of bounds checks. Clean up pcap_findalldevs() call to find the first interface. Use a short timeout, rather than immediate mode, for text output. Handle DLT_ENC files *not* written on the same OS and byte-order host. Add, and use, macros to do locale-independent case mapping. Use a table instead of getprotobynumber(). Get rid of ND_UNALIGNED and ND_TCHECK(). Make roundup2() generally available. Resync SMI list against Wireshark. Fix many typos. @ text @@ 1.1.1.1.2.1 log @Sync with HEAD @ text @d1 1 a1 1 1 2004-03-23 15:17:28.958610 IP (tos 0x0, ttl 128, id 14471, offset 0, flags [none], proto UDP (17), length 207) d3 1 a3 1 2 2004-03-23 15:17:28.958708 IP (tos 0x0, ttl 128, id 14472, offset 0, flags [none], proto UDP (17), length 207) d5 1 a5 1 3 2004-03-23 15:17:28.959360 IP (tos 0x0, ttl 128, id 14473, offset 0, flags [none], proto UDP (17), length 237) d7 1 a7 1 4 2004-03-23 15:17:28.961018 IP (tos 0x0, ttl 128, id 14474, offset 0, flags [none], proto UDP (17), length 78) d9 1 a9 1 5 2004-03-23 15:17:29.710899 IP (tos 0x0, ttl 128, id 14477, offset 0, flags [none], proto UDP (17), length 78) d11 1 a11 1 6 2004-03-23 15:17:30.461235 IP (tos 0x0, ttl 128, id 14478, offset 0, flags [none], proto UDP (17), length 78) d13 1 a13 1 7 2004-03-23 15:17:30.798408 IP (tos 0x0, ttl 128, id 14479, offset 0, flags [none], proto UDP (17), length 229) d15 1 a15 1 8 2004-03-23 15:17:33.464213 IP (tos 0x0, ttl 128, id 14484, offset 0, flags [none], proto UDP (17), length 78) d17 1 a17 1 9 2004-03-23 15:17:34.214302 IP (tos 0x0, ttl 128, id 14485, offset 0, flags [none], proto UDP (17), length 78) d19 1 a19 1 10 2004-03-23 15:17:34.964688 IP (tos 0x0, ttl 128, id 14486, offset 0, flags [none], proto UDP (17), length 78) d21 3 a23 3 11 2004-03-23 15:17:35.473290 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.249, length 28 12 2004-03-23 15:17:35.481559 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.1 is-at 00:0d:88:4f:25:91, length 46 13 2004-03-23 15:17:35.481577 IP (tos 0x0, ttl 128, id 14487, offset 0, flags [none], proto UDP (17), length 328) d32 1 a32 1 14 2004-03-23 15:17:35.622870 EAP packet (0) v1, len 5, Request (1), id 1, len 5 d34 1 a34 1 15 2004-03-23 15:17:35.666378 IP (tos 0x0, ttl 128, id 14495, offset 0, flags [none], proto UDP (17), length 328) d49 1 a49 1 16 2004-03-23 15:17:35.851486 IP (tos 0x0, ttl 128, id 14497, offset 0, flags [none], proto UDP (17), length 328) d64 2 a65 2 17 2004-03-23 15:17:36.156548 EAPOL start (1) v1, len 0 18 2004-03-23 15:17:36.158698 EAP packet (0) v1, len 5, Request (1), id 2, len 5 d67 1 a67 1 19 2004-03-23 15:17:37.766046 EAP packet (0) v1, len 45, Response (2), id 2, len 45 d69 1 a69 1 20 2004-03-23 15:17:37.790625 EAP packet (0) v1, len 20, Request (1), id 16, len 20 d71 1 a71 1 21 2004-03-23 15:17:37.830669 EAP packet (0) v1, len 76, Response (2), id 16, len 76 d73 1 a73 1 22 2004-03-23 15:17:37.848577 EAP packet (0) v1, len 80, Request (1), id 17, len 80 d75 1 a75 1 23 2004-03-23 15:17:38.661939 EAP packet (0) v1, len 28, Response (2), id 17, len 28 d77 4 a80 4 24 2004-03-23 15:17:38.685352 EAP packet (0) v1, len 4, Success (3), id 0, len 4 25 2004-03-23 15:17:38.686358 EAPOL key (3) v1, len 57 26 2004-03-23 15:17:38.687182 EAPOL key (3) v1, len 44 27 2004-03-23 15:17:39.852392 IP (tos 0x0, ttl 128, id 14503, offset 0, flags [none], proto UDP (17), length 328) d95 1 a95 1 28 2004-03-23 15:17:46.852719 IP (tos 0x0, ttl 128, id 14511, offset 0, flags [none], proto UDP (17), length 328) d110 1 a110 1 29 2004-03-23 15:18:02.852731 IP (tos 0x0, ttl 128, id 14514, offset 0, flags [none], proto UDP (17), length 328) d125 2 a126 2 30 2004-03-23 15:18:08.689384 EAPOL start (1) v1, len 0 31 2004-03-23 15:18:08.696826 EAP packet (0) v1, len 5, Request (1), id 3, len 5 d128 1 a128 1 32 2004-03-23 15:18:08.713116 EAP packet (0) v1, len 45, Response (2), id 3, len 45 d130 1 a130 1 33 2004-03-23 15:18:08.787664 EAP packet (0) v1, len 20, Request (1), id 47, len 20 d132 1 a132 1 34 2004-03-23 15:18:10.344628 EAP packet (0) v1, len 76, Response (2), id 47, len 76 d134 1 a134 1 35 2004-03-23 15:18:10.473292 EAP packet (0) v1, len 80, Request (1), id 48, len 80 d136 1 a136 1 36 2004-03-23 15:18:11.152435 EAP packet (0) v1, len 28, Response (2), id 48, len 28 d138 7 a144 7 37 2004-03-23 15:18:11.251425 EAP packet (0) v1, len 4, Success (3), id 0, len 4 38 2004-03-23 15:18:11.252509 EAPOL key (3) v1, len 57 39 2004-03-23 15:18:11.253336 EAPOL key (3) v1, len 44 40 2004-03-23 15:18:35.856823 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 41 2004-03-23 15:18:35.885105 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 42 2004-03-23 15:18:36.885304 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 43 2004-03-23 15:18:37.907817 IP (tos 0x0, ttl 1, id 14526, offset 0, flags [none], proto UDP (17), length 161) d146 1 a146 1 44 2004-03-23 15:18:37.910524 IP (tos 0x0, ttl 1, id 14528, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) d148 1 a148 1 45 2004-03-23 15:18:37.964030 IP (tos 0x0, ttl 128, id 14530, offset 0, flags [none], proto UDP (17), length 96) d150 1 a150 1 46 2004-03-23 15:18:38.691974 IP (tos 0x0, ttl 1, id 14532, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) d152 1 a152 1 47 2004-03-23 15:18:38.714004 IP (tos 0x0, ttl 128, id 14533, offset 0, flags [none], proto UDP (17), length 96) d154 1 a154 1 48 2004-03-23 15:18:39.464435 IP (tos 0x0, ttl 128, id 14534, offset 0, flags [none], proto UDP (17), length 96) d156 1 a156 1 49 2004-03-23 15:18:39.898479 IP (tos 0x0, ttl 128, id 14535, offset 0, flags [none], proto UDP (17), length 328) d171 1 a171 1 50 2004-03-23 15:18:40.214836 IP (tos 0x0, ttl 128, id 14536, offset 0, flags [none], proto UDP (17), length 96) d173 1 a173 1 51 2004-03-23 15:18:40.909196 IP (tos 0x0, ttl 1, id 14538, offset 0, flags [none], proto UDP (17), length 161) d175 1 a175 1 52 2004-03-23 15:18:40.965632 IP (tos 0x0, ttl 128, id 14540, offset 0, flags [none], proto UDP (17), length 96) d177 2 a178 2 53 2004-03-23 15:18:41.254259 EAPOL start (1) v1, len 0 54 2004-03-23 15:18:41.256353 EAP packet (0) v1, len 5, Request (1), id 4, len 5 d180 1 a180 1 55 2004-03-23 15:18:41.275901 EAP packet (0) v1, len 45, Response (2), id 4, len 45 d182 1 a182 1 56 2004-03-23 15:18:41.388857 EAP packet (0) v1, len 20, Request (1), id 80, len 20 d184 1 a184 1 57 2004-03-23 15:18:41.715620 IP (tos 0x0, ttl 128, id 14541, offset 0, flags [none], proto UDP (17), length 96) d186 1 a186 1 58 2004-03-23 15:18:42.466013 IP (tos 0x0, ttl 128, id 14542, offset 0, flags [none], proto UDP (17), length 96) d188 1 a188 1 59 2004-03-23 15:18:42.963175 EAP packet (0) v1, len 76, Response (2), id 80, len 76 d190 1 a190 1 60 2004-03-23 15:18:42.987906 EAP packet (0) v1, len 80, Request (1), id 81, len 80 d192 1 a192 1 61 2004-03-23 15:18:43.216408 IP (tos 0x0, ttl 128, id 14543, offset 0, flags [none], proto UDP (17), length 96) d194 1 a194 1 62 2004-03-23 15:18:43.675053 EAP packet (0) v1, len 28, Response (2), id 81, len 28 d196 4 a199 4 63 2004-03-23 15:18:43.695554 EAP packet (0) v1, len 4, Success (3), id 0, len 4 64 2004-03-23 15:18:43.696547 EAPOL key (3) v1, len 57 65 2004-03-23 15:18:43.697368 EAPOL key (3) v1, len 44 66 2004-03-23 15:18:43.899684 IP (tos 0x0, ttl 128, id 14544, offset 0, flags [none], proto UDP (17), length 328) d214 1 a214 1 67 2004-03-23 15:18:43.909719 IP (tos 0x0, ttl 1, id 14546, offset 0, flags [none], proto UDP (17), length 161) d216 1 a216 1 68 2004-03-23 15:18:43.967353 IP (tos 0x0, ttl 128, id 14548, offset 0, flags [none], proto UDP (17), length 96) d218 1 a218 1 69 2004-03-23 15:18:43.967896 IP (tos 0x0, ttl 128, id 14549, offset 0, flags [none], proto UDP (17), length 96) d220 1 a220 1 70 2004-03-23 15:18:44.717196 IP (tos 0x0, ttl 128, id 14552, offset 0, flags [none], proto UDP (17), length 96) d222 1 a222 1 71 2004-03-23 15:18:44.718161 IP (tos 0x0, ttl 128, id 14553, offset 0, flags [none], proto UDP (17), length 96) d224 1 a224 1 72 2004-03-23 15:18:45.467593 IP (tos 0x0, ttl 128, id 14554, offset 0, flags [none], proto UDP (17), length 96) d226 1 a226 1 73 2004-03-23 15:18:45.468557 IP (tos 0x0, ttl 128, id 14555, offset 0, flags [none], proto UDP (17), length 96) d228 1 a228 1 74 2004-03-23 15:18:46.217980 IP (tos 0x0, ttl 128, id 14556, offset 0, flags [none], proto UDP (17), length 96) d230 1 a230 1 75 2004-03-23 15:18:46.218950 IP (tos 0x0, ttl 128, id 14557, offset 0, flags [none], proto UDP (17), length 96) d232 1 a232 1 76 2004-03-23 15:18:46.969929 IP (tos 0x0, ttl 128, id 14563, offset 0, flags [none], proto UDP (17), length 207) d234 1 a234 1 77 2004-03-23 15:18:46.970205 IP (tos 0x0, ttl 128, id 14564, offset 0, flags [none], proto UDP (17), length 229) d236 1 a236 1 78 2004-03-23 15:18:48.470207 IP (tos 0x0, ttl 128, id 14566, offset 0, flags [none], proto UDP (17), length 207) d238 1 a238 1 79 2004-03-23 15:18:49.970986 IP (tos 0x0, ttl 128, id 14567, offset 0, flags [none], proto UDP (17), length 207) d240 1 a240 1 80 2004-03-23 15:18:51.471768 IP (tos 0x0, ttl 128, id 14568, offset 0, flags [none], proto UDP (17), length 207) d242 1 a242 1 81 2004-03-23 15:18:52.900388 IP (tos 0x0, ttl 128, id 14569, offset 0, flags [none], proto UDP (17), length 328) d257 1 a257 1 82 2004-03-23 15:18:52.972547 IP (tos 0x0, ttl 128, id 14570, offset 0, flags [none], proto UDP (17), length 219) d259 1 a259 1 83 2004-03-23 15:18:53.972751 IP (tos 0x0, ttl 128, id 14571, offset 0, flags [none], proto UDP (17), length 219) d261 1 a261 1 84 2004-03-23 15:18:54.972939 IP (tos 0x0, ttl 128, id 14572, offset 0, flags [none], proto UDP (17), length 219) d263 1 a263 1 85 2004-03-23 15:18:55.973129 IP (tos 0x0, ttl 128, id 14573, offset 0, flags [none], proto UDP (17), length 219) d265 1 a265 1 86 2004-03-23 15:18:56.973475 IP (tos 0x0, ttl 128, id 14574, offset 0, flags [none], proto UDP (17), length 96) d267 1 a267 1 87 2004-03-23 15:18:57.723686 IP (tos 0x0, ttl 128, id 14575, offset 0, flags [none], proto UDP (17), length 96) d269 1 a269 1 88 2004-03-23 15:18:58.474079 IP (tos 0x0, ttl 128, id 14576, offset 0, flags [none], proto UDP (17), length 96) d271 1 a271 1 89 2004-03-23 15:18:59.224473 IP (tos 0x0, ttl 128, id 14579, offset 0, flags [none], proto UDP (17), length 96) d273 1 a273 1 90 2004-03-23 15:18:59.974983 IP (tos 0x0, ttl 128, id 14580, offset 0, flags [none], proto UDP (17), length 96) d275 1 a275 1 91 2004-03-23 15:19:00.725263 IP (tos 0x0, ttl 128, id 14581, offset 0, flags [none], proto UDP (17), length 96) d277 1 a277 1 92 2004-03-23 15:19:01.475654 IP (tos 0x0, ttl 128, id 14582, offset 0, flags [none], proto UDP (17), length 96) d279 1 a279 1 93 2004-03-23 15:19:02.226046 IP (tos 0x0, ttl 128, id 14583, offset 0, flags [none], proto UDP (17), length 96) d281 1 a281 1 94 2004-03-23 15:19:02.976511 IP (tos 0x0, ttl 128, id 14584, offset 0, flags [none], proto UDP (17), length 207) d283 1 a283 1 95 2004-03-23 15:19:02.976737 IP (tos 0x0, ttl 128, id 14585, offset 0, flags [none], proto UDP (17), length 207) d285 1 a285 1 96 2004-03-23 15:19:02.977520 IP (tos 0x0, ttl 128, id 14586, offset 0, flags [none], proto UDP (17), length 237) d287 1 a287 1 97 2004-03-23 15:19:02.979092 IP (tos 0x0, ttl 128, id 14587, offset 0, flags [none], proto UDP (17), length 78) d289 1 a289 1 98 2004-03-23 15:19:03.728840 IP (tos 0x0, ttl 128, id 14588, offset 0, flags [none], proto UDP (17), length 78) d291 1 a291 1 99 2004-03-23 15:19:04.479238 IP (tos 0x0, ttl 128, id 14589, offset 0, flags [none], proto UDP (17), length 78) d293 1 a293 1 100 2004-03-23 15:19:07.482218 IP (tos 0x0, ttl 128, id 14593, offset 0, flags [none], proto UDP (17), length 78) d295 1 a295 1 101 2004-03-23 15:19:08.232205 IP (tos 0x0, ttl 128, id 14594, offset 0, flags [none], proto UDP (17), length 78) d297 1 a297 1 102 2004-03-23 15:19:08.982597 IP (tos 0x0, ttl 128, id 14596, offset 0, flags [none], proto UDP (17), length 78) d299 1 a299 1 103 2004-03-23 15:19:09.900631 IP (tos 0x0, ttl 128, id 14598, offset 0, flags [none], proto UDP (17), length 328) d314 2 a315 2 104 2004-03-23 15:19:13.696821 EAPOL start (1) v1, len 0 105 2004-03-23 15:19:13.704581 EAP packet (0) v1, len 5, Request (1), id 5, len 5 d317 1 a317 1 106 2004-03-23 15:19:13.718221 EAP packet (0) v1, len 45, Response (2), id 5, len 45 d319 1 a319 1 107 2004-03-23 15:19:13.734974 EAP packet (0) v1, len 20, Request (1), id 112, len 20 d321 1 a321 1 108 2004-03-23 15:19:14.801245 IP (tos 0x0, ttl 128, id 14604, offset 0, flags [none], proto UDP (17), length 229) d323 1 a323 1 109 2004-03-23 15:19:15.293800 EAP packet (0) v1, len 76, Response (2), id 112, len 76 d325 1 a325 1 110 2004-03-23 15:19:15.312531 EAP packet (0) v1, len 80, Request (1), id 113, len 80 d327 1 a327 1 111 2004-03-23 15:19:15.997763 EAP packet (0) v1, len 28, Response (2), id 113, len 28 d329 3 a331 3 112 2004-03-23 15:19:16.022323 EAP packet (0) v1, len 4, Success (3), id 0, len 4 113 2004-03-23 15:19:16.023335 EAPOL key (3) v1, len 57 114 2004-03-23 15:19:16.024149 EAPOL key (3) v1, len 44 @ 1.1.1.2 log @Import tcpdump-4.99.5, previous was 4.99.4 Friday, August 30, 2024 / The Tcpdump Group Summary for 4.99.5 tcpdump release Refine protocol decoding for: Arista: Use the test .pcap file from pull request #955 (HwInfo). BGP: Fix an undefined behavior when it tries to parse a too-short packet. CARP: Print the protocol name before any GET_(). CDP: only hex-dump unknown TLVs in verbose mode. DHCP: parse the SZTP redirect tag. DHCPv6: client-id/server-id DUID type 2 correction; parse the user class, boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355). DNS: Detect and correctly handle too-short URI RRs. EAP: Assign ndo_protocol in the eap_print() function. ESP: Don't use EVP_add_cipher_alias() (fixes building on OpenBSD 7.5). Frame Relay (Multilink): Fix the Timestamp Information Element printing. ICMPv6: Fix printing the Home Agent Address Discovery Reply Message. IEEE 802.11: no need for an element ID in the structures for IEs, make the length in the IE structures a u_int, include the "TA" field while printing Block Ack Control frame. IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the header length. IPv6: Fix printing invalid cases as invalid, not truncated; use ND_ICHECKMSG_U() to print an invalid version. IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers. ISAKMP: Fix printing Delete payload SPI when size is zero. Kerberos: Print the protocol name, remove a redundant bounds check. lwres: Fix an undefined behavior in pointer arithmetic. OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of some lengths, and fix handling of snapend. TCP: Test ports < 1024 in port order to select the printer. UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain. UDP: Test ports < 1024 in port order to select the printer. LDP: Add missing fields of the Common Session Parameters TLV and fix the offset for the A&D bits. NFLOG: Use correct AF code points on all OSes. NFS: Avoid printing non-ASCII characters. OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes. OSPF: Update LS-Ack printing not to run off the end of the packet. OSPF6: Fix an undefined behavior. pflog: use nd_ types in struct pfloghdr. PPP: Check if there is some data to hexdump. PPP: Remove an extra colon before LCP Callback Operation. Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397; Note: This problem does not affect any tcpdump release. PTP: Fix spelling of type SIGNALING, Parse major and minor version correctly, Print majorSdoId field instead of just the first bit. RIP: Make a couple trivial protocol updates. RPKI-Router: Refine length and bounds checks. RX: Use the "%Y-%m-%d" date format. smbutil.c: Use the "%Y-%m-%d" date format. SNMP: Fix two undefined behaviors. Text protocols: Fix printing truncation if it is not the case. ZEP: Use the "%Y-%m-%d" date format. ZMTP: Replace custom code with bittok2str(). User interface: Print the supported time stamp types (-J) to stdout instead of stderr. Print the list of data link types (-L) to stdout instead of stderr. Use symmetrical quotation characters in error messages. Update --version option to print 32/64-bit build and time_t size. Improve error messages for invalid interface indexes specified with -i. Support "3des" as an alias for "des_ede3_cbc" even if the crypto library doesn't support adding aliases. Source code: tcpdump: Fix a memory leak. child_cleanup: reap as many child processes as possible. Ignore failures when setting the default "any" device DLL to LINUX_SLL2. Fix for backends which doesn't support capsicum. Update ND_BYTES_BETWEEN() macro for better accuracy. Update ND_BYTES_AVAILABLE_AFTER() macro for better accuracy. Introduce new ND_ICHECK*() macros to deduplicate more code. Skip privilege dropping when using -Z root on --with-user builds. Add a nd_printjn() function. Make nd_trunc_longjmp() not static inline. Include from netdissect.h. Remove init_crc10_table() and the entourage. Initialize tzcode early. Capsicum support: Fix a 'not defined' macro error. Update the "Error converting time" tests for packet times. Fix warnings when building for 32-bit and defining _TIME_BITS=64. Free interface list just before exiting where it wasn't being freed. Building and testing: Add a configure option to help debugging (--enable-instrument-functions). At build time require a proof of suitable snprintf(3) implementation in libc (and document Solaris 9 as unsupported because of that). Makefile.in: Add two "touch .devel" commands in the releasecheck target. Autoconf: Get --with-user and --with-chroot right. Autoconf: Fix --static-pcap-only test on Solaris 10. Autoconf: Add some warning flags for clang 13 or newer. Autoconf: Update config.{guess,sub}, timestamps 2024-01-01. Autoconf: Add autogen.sh, remove configure and config.h.in and put these generated files in the release tarball. Autoconf: Update the install-sh script to the 2020-11-14.01 version. configure: Apply autoupdate 2.69. CMake: improve the comment before project(tcpdump C). Do not require vsnprintf(). tests: Use the -tttt option, by default, for the tests. Autoconf, CMake: Get the size of a void * and a time_t. Fix propagation of cc_werr_cflags() output. Makefile.in: Fix the depend target. mkdep: Exit with a non-zero status if a command fails. Autoconf: use V_INCLS to update the list of include search paths. Autoconf: don't put anything before -I and -L flags for local libpcap. Autoconf, CMake: work around an Xcode 15+ issue. Autoconf, CMake: use pkg-config and Homebrew when looking for libcrypto. Fix Sun C invocation from CMake. mkdep: Use TMPDIR if it is set and not null. Add initial support for building with TinyCC. Makefile.in: Use the variable MAKE instead of the make command. Makefile.in: Add instrumentation configuration in releasecheck target. Make various improvements to the TESTrun script. Untangle detection of pcap_findalldevs(). Autoconf: don't use egrep, use $EGREP. Autoconf: check for gethostbyaddr(), not gethostbyname(). Autoconf, CMake: search for gethostbyaddr() in libnetwork. Make illumos build warning-free. Documentation: Fixed errors in doc/README.Win32.md and renamed it to README.windows.md. Make various improvements to the man page. Add initial README file for Haiku. Make various improvements to CONTRIBUTING.md. @ text @d1 1 a1 1 1 2004-03-23 15:17:28.958610 IP (tos 0x0, ttl 128, id 14471, offset 0, flags [none], proto UDP (17), length 207) d3 1 a3 1 2 2004-03-23 15:17:28.958708 IP (tos 0x0, ttl 128, id 14472, offset 0, flags [none], proto UDP (17), length 207) d5 1 a5 1 3 2004-03-23 15:17:28.959360 IP (tos 0x0, ttl 128, id 14473, offset 0, flags [none], proto UDP (17), length 237) d7 1 a7 1 4 2004-03-23 15:17:28.961018 IP (tos 0x0, ttl 128, id 14474, offset 0, flags [none], proto UDP (17), length 78) d9 1 a9 1 5 2004-03-23 15:17:29.710899 IP (tos 0x0, ttl 128, id 14477, offset 0, flags [none], proto UDP (17), length 78) d11 1 a11 1 6 2004-03-23 15:17:30.461235 IP (tos 0x0, ttl 128, id 14478, offset 0, flags [none], proto UDP (17), length 78) d13 1 a13 1 7 2004-03-23 15:17:30.798408 IP (tos 0x0, ttl 128, id 14479, offset 0, flags [none], proto UDP (17), length 229) d15 1 a15 1 8 2004-03-23 15:17:33.464213 IP (tos 0x0, ttl 128, id 14484, offset 0, flags [none], proto UDP (17), length 78) d17 1 a17 1 9 2004-03-23 15:17:34.214302 IP (tos 0x0, ttl 128, id 14485, offset 0, flags [none], proto UDP (17), length 78) d19 1 a19 1 10 2004-03-23 15:17:34.964688 IP (tos 0x0, ttl 128, id 14486, offset 0, flags [none], proto UDP (17), length 78) d21 3 a23 3 11 2004-03-23 15:17:35.473290 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 tell 192.168.1.249, length 28 12 2004-03-23 15:17:35.481559 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.1 is-at 00:0d:88:4f:25:91, length 46 13 2004-03-23 15:17:35.481577 IP (tos 0x0, ttl 128, id 14487, offset 0, flags [none], proto UDP (17), length 328) d32 1 a32 1 14 2004-03-23 15:17:35.622870 EAP packet (0) v1, len 5, Request (1), id 1, len 5 d34 1 a34 1 15 2004-03-23 15:17:35.666378 IP (tos 0x0, ttl 128, id 14495, offset 0, flags [none], proto UDP (17), length 328) d49 1 a49 1 16 2004-03-23 15:17:35.851486 IP (tos 0x0, ttl 128, id 14497, offset 0, flags [none], proto UDP (17), length 328) d64 2 a65 2 17 2004-03-23 15:17:36.156548 EAPOL start (1) v1, len 0 18 2004-03-23 15:17:36.158698 EAP packet (0) v1, len 5, Request (1), id 2, len 5 d67 1 a67 1 19 2004-03-23 15:17:37.766046 EAP packet (0) v1, len 45, Response (2), id 2, len 45 d69 1 a69 1 20 2004-03-23 15:17:37.790625 EAP packet (0) v1, len 20, Request (1), id 16, len 20 d71 1 a71 1 21 2004-03-23 15:17:37.830669 EAP packet (0) v1, len 76, Response (2), id 16, len 76 d73 1 a73 1 22 2004-03-23 15:17:37.848577 EAP packet (0) v1, len 80, Request (1), id 17, len 80 d75 1 a75 1 23 2004-03-23 15:17:38.661939 EAP packet (0) v1, len 28, Response (2), id 17, len 28 d77 4 a80 4 24 2004-03-23 15:17:38.685352 EAP packet (0) v1, len 4, Success (3), id 0, len 4 25 2004-03-23 15:17:38.686358 EAPOL key (3) v1, len 57 26 2004-03-23 15:17:38.687182 EAPOL key (3) v1, len 44 27 2004-03-23 15:17:39.852392 IP (tos 0x0, ttl 128, id 14503, offset 0, flags [none], proto UDP (17), length 328) d95 1 a95 1 28 2004-03-23 15:17:46.852719 IP (tos 0x0, ttl 128, id 14511, offset 0, flags [none], proto UDP (17), length 328) d110 1 a110 1 29 2004-03-23 15:18:02.852731 IP (tos 0x0, ttl 128, id 14514, offset 0, flags [none], proto UDP (17), length 328) d125 2 a126 2 30 2004-03-23 15:18:08.689384 EAPOL start (1) v1, len 0 31 2004-03-23 15:18:08.696826 EAP packet (0) v1, len 5, Request (1), id 3, len 5 d128 1 a128 1 32 2004-03-23 15:18:08.713116 EAP packet (0) v1, len 45, Response (2), id 3, len 45 d130 1 a130 1 33 2004-03-23 15:18:08.787664 EAP packet (0) v1, len 20, Request (1), id 47, len 20 d132 1 a132 1 34 2004-03-23 15:18:10.344628 EAP packet (0) v1, len 76, Response (2), id 47, len 76 d134 1 a134 1 35 2004-03-23 15:18:10.473292 EAP packet (0) v1, len 80, Request (1), id 48, len 80 d136 1 a136 1 36 2004-03-23 15:18:11.152435 EAP packet (0) v1, len 28, Response (2), id 48, len 28 d138 7 a144 7 37 2004-03-23 15:18:11.251425 EAP packet (0) v1, len 4, Success (3), id 0, len 4 38 2004-03-23 15:18:11.252509 EAPOL key (3) v1, len 57 39 2004-03-23 15:18:11.253336 EAPOL key (3) v1, len 44 40 2004-03-23 15:18:35.856823 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 41 2004-03-23 15:18:35.885105 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 42 2004-03-23 15:18:36.885304 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 169.254.67.194 tell 169.254.67.194, length 28 43 2004-03-23 15:18:37.907817 IP (tos 0x0, ttl 1, id 14526, offset 0, flags [none], proto UDP (17), length 161) d146 1 a146 1 44 2004-03-23 15:18:37.910524 IP (tos 0x0, ttl 1, id 14528, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) d148 1 a148 1 45 2004-03-23 15:18:37.964030 IP (tos 0x0, ttl 128, id 14530, offset 0, flags [none], proto UDP (17), length 96) d150 1 a150 1 46 2004-03-23 15:18:38.691974 IP (tos 0x0, ttl 1, id 14532, offset 0, flags [none], proto IGMP (2), length 40, options (RA)) d152 1 a152 1 47 2004-03-23 15:18:38.714004 IP (tos 0x0, ttl 128, id 14533, offset 0, flags [none], proto UDP (17), length 96) d154 1 a154 1 48 2004-03-23 15:18:39.464435 IP (tos 0x0, ttl 128, id 14534, offset 0, flags [none], proto UDP (17), length 96) d156 1 a156 1 49 2004-03-23 15:18:39.898479 IP (tos 0x0, ttl 128, id 14535, offset 0, flags [none], proto UDP (17), length 328) d171 1 a171 1 50 2004-03-23 15:18:40.214836 IP (tos 0x0, ttl 128, id 14536, offset 0, flags [none], proto UDP (17), length 96) d173 1 a173 1 51 2004-03-23 15:18:40.909196 IP (tos 0x0, ttl 1, id 14538, offset 0, flags [none], proto UDP (17), length 161) d175 1 a175 1 52 2004-03-23 15:18:40.965632 IP (tos 0x0, ttl 128, id 14540, offset 0, flags [none], proto UDP (17), length 96) d177 2 a178 2 53 2004-03-23 15:18:41.254259 EAPOL start (1) v1, len 0 54 2004-03-23 15:18:41.256353 EAP packet (0) v1, len 5, Request (1), id 4, len 5 d180 1 a180 1 55 2004-03-23 15:18:41.275901 EAP packet (0) v1, len 45, Response (2), id 4, len 45 d182 1 a182 1 56 2004-03-23 15:18:41.388857 EAP packet (0) v1, len 20, Request (1), id 80, len 20 d184 1 a184 1 57 2004-03-23 15:18:41.715620 IP (tos 0x0, ttl 128, id 14541, offset 0, flags [none], proto UDP (17), length 96) d186 1 a186 1 58 2004-03-23 15:18:42.466013 IP (tos 0x0, ttl 128, id 14542, offset 0, flags [none], proto UDP (17), length 96) d188 1 a188 1 59 2004-03-23 15:18:42.963175 EAP packet (0) v1, len 76, Response (2), id 80, len 76 d190 1 a190 1 60 2004-03-23 15:18:42.987906 EAP packet (0) v1, len 80, Request (1), id 81, len 80 d192 1 a192 1 61 2004-03-23 15:18:43.216408 IP (tos 0x0, ttl 128, id 14543, offset 0, flags [none], proto UDP (17), length 96) d194 1 a194 1 62 2004-03-23 15:18:43.675053 EAP packet (0) v1, len 28, Response (2), id 81, len 28 d196 4 a199 4 63 2004-03-23 15:18:43.695554 EAP packet (0) v1, len 4, Success (3), id 0, len 4 64 2004-03-23 15:18:43.696547 EAPOL key (3) v1, len 57 65 2004-03-23 15:18:43.697368 EAPOL key (3) v1, len 44 66 2004-03-23 15:18:43.899684 IP (tos 0x0, ttl 128, id 14544, offset 0, flags [none], proto UDP (17), length 328) d214 1 a214 1 67 2004-03-23 15:18:43.909719 IP (tos 0x0, ttl 1, id 14546, offset 0, flags [none], proto UDP (17), length 161) d216 1 a216 1 68 2004-03-23 15:18:43.967353 IP (tos 0x0, ttl 128, id 14548, offset 0, flags [none], proto UDP (17), length 96) d218 1 a218 1 69 2004-03-23 15:18:43.967896 IP (tos 0x0, ttl 128, id 14549, offset 0, flags [none], proto UDP (17), length 96) d220 1 a220 1 70 2004-03-23 15:18:44.717196 IP (tos 0x0, ttl 128, id 14552, offset 0, flags [none], proto UDP (17), length 96) d222 1 a222 1 71 2004-03-23 15:18:44.718161 IP (tos 0x0, ttl 128, id 14553, offset 0, flags [none], proto UDP (17), length 96) d224 1 a224 1 72 2004-03-23 15:18:45.467593 IP (tos 0x0, ttl 128, id 14554, offset 0, flags [none], proto UDP (17), length 96) d226 1 a226 1 73 2004-03-23 15:18:45.468557 IP (tos 0x0, ttl 128, id 14555, offset 0, flags [none], proto UDP (17), length 96) d228 1 a228 1 74 2004-03-23 15:18:46.217980 IP (tos 0x0, ttl 128, id 14556, offset 0, flags [none], proto UDP (17), length 96) d230 1 a230 1 75 2004-03-23 15:18:46.218950 IP (tos 0x0, ttl 128, id 14557, offset 0, flags [none], proto UDP (17), length 96) d232 1 a232 1 76 2004-03-23 15:18:46.969929 IP (tos 0x0, ttl 128, id 14563, offset 0, flags [none], proto UDP (17), length 207) d234 1 a234 1 77 2004-03-23 15:18:46.970205 IP (tos 0x0, ttl 128, id 14564, offset 0, flags [none], proto UDP (17), length 229) d236 1 a236 1 78 2004-03-23 15:18:48.470207 IP (tos 0x0, ttl 128, id 14566, offset 0, flags [none], proto UDP (17), length 207) d238 1 a238 1 79 2004-03-23 15:18:49.970986 IP (tos 0x0, ttl 128, id 14567, offset 0, flags [none], proto UDP (17), length 207) d240 1 a240 1 80 2004-03-23 15:18:51.471768 IP (tos 0x0, ttl 128, id 14568, offset 0, flags [none], proto UDP (17), length 207) d242 1 a242 1 81 2004-03-23 15:18:52.900388 IP (tos 0x0, ttl 128, id 14569, offset 0, flags [none], proto UDP (17), length 328) d257 1 a257 1 82 2004-03-23 15:18:52.972547 IP (tos 0x0, ttl 128, id 14570, offset 0, flags [none], proto UDP (17), length 219) d259 1 a259 1 83 2004-03-23 15:18:53.972751 IP (tos 0x0, ttl 128, id 14571, offset 0, flags [none], proto UDP (17), length 219) d261 1 a261 1 84 2004-03-23 15:18:54.972939 IP (tos 0x0, ttl 128, id 14572, offset 0, flags [none], proto UDP (17), length 219) d263 1 a263 1 85 2004-03-23 15:18:55.973129 IP (tos 0x0, ttl 128, id 14573, offset 0, flags [none], proto UDP (17), length 219) d265 1 a265 1 86 2004-03-23 15:18:56.973475 IP (tos 0x0, ttl 128, id 14574, offset 0, flags [none], proto UDP (17), length 96) d267 1 a267 1 87 2004-03-23 15:18:57.723686 IP (tos 0x0, ttl 128, id 14575, offset 0, flags [none], proto UDP (17), length 96) d269 1 a269 1 88 2004-03-23 15:18:58.474079 IP (tos 0x0, ttl 128, id 14576, offset 0, flags [none], proto UDP (17), length 96) d271 1 a271 1 89 2004-03-23 15:18:59.224473 IP (tos 0x0, ttl 128, id 14579, offset 0, flags [none], proto UDP (17), length 96) d273 1 a273 1 90 2004-03-23 15:18:59.974983 IP (tos 0x0, ttl 128, id 14580, offset 0, flags [none], proto UDP (17), length 96) d275 1 a275 1 91 2004-03-23 15:19:00.725263 IP (tos 0x0, ttl 128, id 14581, offset 0, flags [none], proto UDP (17), length 96) d277 1 a277 1 92 2004-03-23 15:19:01.475654 IP (tos 0x0, ttl 128, id 14582, offset 0, flags [none], proto UDP (17), length 96) d279 1 a279 1 93 2004-03-23 15:19:02.226046 IP (tos 0x0, ttl 128, id 14583, offset 0, flags [none], proto UDP (17), length 96) d281 1 a281 1 94 2004-03-23 15:19:02.976511 IP (tos 0x0, ttl 128, id 14584, offset 0, flags [none], proto UDP (17), length 207) d283 1 a283 1 95 2004-03-23 15:19:02.976737 IP (tos 0x0, ttl 128, id 14585, offset 0, flags [none], proto UDP (17), length 207) d285 1 a285 1 96 2004-03-23 15:19:02.977520 IP (tos 0x0, ttl 128, id 14586, offset 0, flags [none], proto UDP (17), length 237) d287 1 a287 1 97 2004-03-23 15:19:02.979092 IP (tos 0x0, ttl 128, id 14587, offset 0, flags [none], proto UDP (17), length 78) d289 1 a289 1 98 2004-03-23 15:19:03.728840 IP (tos 0x0, ttl 128, id 14588, offset 0, flags [none], proto UDP (17), length 78) d291 1 a291 1 99 2004-03-23 15:19:04.479238 IP (tos 0x0, ttl 128, id 14589, offset 0, flags [none], proto UDP (17), length 78) d293 1 a293 1 100 2004-03-23 15:19:07.482218 IP (tos 0x0, ttl 128, id 14593, offset 0, flags [none], proto UDP (17), length 78) d295 1 a295 1 101 2004-03-23 15:19:08.232205 IP (tos 0x0, ttl 128, id 14594, offset 0, flags [none], proto UDP (17), length 78) d297 1 a297 1 102 2004-03-23 15:19:08.982597 IP (tos 0x0, ttl 128, id 14596, offset 0, flags [none], proto UDP (17), length 78) d299 1 a299 1 103 2004-03-23 15:19:09.900631 IP (tos 0x0, ttl 128, id 14598, offset 0, flags [none], proto UDP (17), length 328) d314 2 a315 2 104 2004-03-23 15:19:13.696821 EAPOL start (1) v1, len 0 105 2004-03-23 15:19:13.704581 EAP packet (0) v1, len 5, Request (1), id 5, len 5 d317 1 a317 1 106 2004-03-23 15:19:13.718221 EAP packet (0) v1, len 45, Response (2), id 5, len 45 d319 1 a319 1 107 2004-03-23 15:19:13.734974 EAP packet (0) v1, len 20, Request (1), id 112, len 20 d321 1 a321 1 108 2004-03-23 15:19:14.801245 IP (tos 0x0, ttl 128, id 14604, offset 0, flags [none], proto UDP (17), length 229) d323 1 a323 1 109 2004-03-23 15:19:15.293800 EAP packet (0) v1, len 76, Response (2), id 112, len 76 d325 1 a325 1 110 2004-03-23 15:19:15.312531 EAP packet (0) v1, len 80, Request (1), id 113, len 80 d327 1 a327 1 111 2004-03-23 15:19:15.997763 EAP packet (0) v1, len 28, Response (2), id 113, len 28 d329 3 a331 3 112 2004-03-23 15:19:16.022323 EAP packet (0) v1, len 4, Success (3), id 0, len 4 113 2004-03-23 15:19:16.023335 EAPOL key (3) v1, len 57 114 2004-03-23 15:19:16.024149 EAPOL key (3) v1, len 44 @ 1.1.1.3 log @Import tcpdump 4.99.6 (previous was 4.99.5) Tuesday, December 30, 2025 / The Tcpdump Group Summary for 4.99.6 tcpdump release Remove protocol decoding for: OTV (draft-hasmit-otv-04, this Internet-Draft is no longer active). Refine protocol decoding for: DNS: Use ND_TCHECK_LEN() instead of a custom bounds check. IPv6: Add a missing comma and remove a colon in the output. TCP: Note if the Urgent Pointer is non-zero while URG flag not set, if the verbose level is > 1 (option -vv and more). TCP: Note if the Acknowledgment Number is non-zero while ACK flag not set, if the verbose level is > 1 (option -vv and more). TCP: Fix Reset segment processing. IP, IPv6: Fix setting the snapshot length for the payload. IP: Use ND_TTEST_LEN() instead of a custom bounds check. frag6: Add a bounds check in non-verbose mode. PTP: Remove spaces before colons in output. PTP: Fix management packet fields. ISO: Avoid undefined behavior and integer overflow in the Fletcher checksum calculation. NFS: Delete dead code. BOOTP: Use an uint16_t variable to get the result of a GET_BE_U_2(). ZEP: use the existing NTP time formatting code. NTP: Fix p_ntp_time_fmt() using epoch 1/epoch 2 convention (RFC 4330). NTP: Update a field name with the RFC 5905 name (Origin Timestamp). IPv6 mobility: Modernize packet parsing and make fixes. IP6OPTS: Modernize packet parsing and make fixes. VXLAN: Add UDP port 8472 used by Linux as the default port. EGP: Replace custom code with tok2str(); Modernize packet parsing and fix printing with -v option. User interface: Add optional unit suffix on -C file size. Improve the handling of size suffixes for -C. Print errors for options -A, -x[x] and -X[X] (mutually exclusive). Print errors about -C, -G and -z options usage. For PCAP_ERROR_CAPTURE_NOTSUP, show the error message provided by libpcap for that error if it's non-empty. Update the -z option processing. Print "invalid option -- z" when it is. Add the -g option, causing IPv4 output in verbose mode to be on one line. Other: Avoid race condition when receiving signal during shutdown. Always show the interface name in error messages when the interface can't be opened. Clean up the message shown if a -i flag is specified with an interface index that's too large. Source code: Fix '-tt' option printing when time > 2106-02-07T06:28:15Z. Add sub-second packet timestamp checks for invalid micro/nano. Remove unused missing/snprintf.c. Fix incompatible pointer types with time functions calls on Windows. Use C99 macros to define 64-bit constants and maximum 64-bit values. Windows: Fixed to find wpcap.dll if WinPcap isn't installed and Npcap was installed without the WinPcap API compatibility option. (GitHub issue #1226). Building and testing: Makefile.in: Use a local libpcap in the releasecheck target. CMake: Fix build with CMake 3.31. autotools, CMake: don't separately test whether snprintf(3) is available and whether it's suitable - the test for whether it's suitable also fails if it's unavailable. CMake: Skip snprintf(3) tests when cross-compiling. autotools, CMake: fix issues with snprintf test and sanitizers. CMake: check whether check_c_source_runs() works, treat the build as a cross-compile if it doesn't work. Autoconf: Use AC_SYS_YEAR2038_RECOMMENDED when possible if the environment variable BUILD_YEAR2038 = yes (via autogen.sh). Autoconf: Avoid incorrectly include the libpcap's config.h. Autoconf: Refine reporting of os-proto.h. Require config.h to be from the tcpdump build. AppVeyor: Update Npcap SDK to 1.15. autogen.sh: Allow to configure Autoconf warnings. autogen.sh: Delete all trailing blank lines at end of configure. @ text @d40 1 a40 1 Auto-Configure (116), length 1: Y d55 1 a55 1 Auto-Configure (116), length 1: Y d86 1 a86 1 Auto-Configure (116), length 1: Y d101 1 a101 1 Auto-Configure (116), length 1: Y d116 1 a116 1 Auto-Configure (116), length 1: Y d162 1 a162 1 Auto-Configure (116), length 1: Y d205 1 a205 1 Auto-Configure (116), length 1: Y d248 1 a248 1 Auto-Configure (116), length 1: Y d305 1 a305 1 Auto-Configure (116), length 1: Y @