[el5_u4_base] tcpdump-14:3.9.4-14.el5.x86_64

Tcpdump is a command-line tool for monitoring network traffic.
Tcpdump can capture and display the packet headers on a particular
network interface or on all interfaces.  Tcpdump can display all of
the packet headers, or just the ones that match particular criteria.

Install tcpdump if you need a program to monitor network traffic.

Changelog (Show File list) (Show related packages)

• Mon Aug 25 2008 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-14.el5

  - compile tcpdump with -fno-strict-aliasing

• Fri Aug 22 2008 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-13.el5

  - don't double-count received packets (#441446)

• Wed Dec 05 2007 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-12.el5

  - use LINUX_SLL or RAW as data link types when qeth device is not
    in layer2 mode (#281241)
  - require /usr/sbin/sendmail (#259301)
  - enable crypto support on 64-bit architectures (#345041)
  - support decoding IKEv2 packets (#290131)

• Thu Aug 30 2007 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-11.el5

  - fix buffer overflow in BGP dissector (#250294, CVE-2007-3798)

• Wed May 30 2007 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-10.el5

  - with -C option, drop root privileges before opening first savefile (#241677)

• Wed May 16 2007 Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9.el5

  - fix buffer overflow in 802.11 printer (#232347, CVE-2007-1218)
  - fix return codes in arpwatch init script (#237779)

• Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 14:3.9.4-8.1

  - rebuild

• Thu Jun 22 2006 Martin Stransky <stransky@redhat.com> - 14:3.9.4-8

  - more ipv6 flags

• Sun Jun 04 2006 Jeremy Katz <katzj@redhat.com> - 14:3.9.4-7

  - fix libpcap-devel inclusion of .so and its deps (#193189)

• Thu Jun 01 2006 Martin Stransky <stransky@redhat.com> - 14:3.9.4-6

  - added release to arpwatch package name

• Wed May 31 2006 Martin Stransky <stransky@redhat.com> - 14:3.9.4-5

  - removed libpcap-devel dependency from libpcap

• Mon May 29 2006 Martin Stransky <stransky@redhat.com> - 14:3.9.4-4

  - added libpcap-devel package (#193189)

• Tue Mar 28 2006 Martin Stransky <stransky@redhat.com> - 14:3.9.4-3

  - updated ethernet codes (#186633)

• Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 14:3.9.4-2.2

  - bump again for double-long bug on ppc(64)

• Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 14:3.9.4-2.1

  - rebuilt for new gcc4.1 snapshot and glibc changes

• Tue Dec 20 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.4-2

  - fix for #176010 - file owner problem when using 'ring buffer

• Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

  - rebuilt

• Thu Nov 10 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.4-1

  - new upstream

• Thu Nov 10 2005 Tomas Mraz <tmraz@redhat.com> - 14:3.9.3-5

  - rebuilt against new openssl

• Wed Nov 09 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.3-4

  - rebuilt

• Tue Aug 09 2005 Jeremy Katz <katzj@redhat.com> - 14:3.9.3-3

  - remove explicit kernel dep for libpcap too

• Tue Jul 26 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.3-2

  - fixed typo in last patch

• Tue Jul 26 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.3-1

  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)

• Thu Jul 14 2005 Martin Stransky <stransky@redhat.com> - 14:3.9.1-1

  - New upstream version

• Tue Jun 21 2005 Martin Stransky <stransky@redhat.com> - 14:3.8.2-14

  - add shadow-utils to Prereq (#160643)

• Tue Jun 07 2005 Martin Stransky <stransky@redhat.com> - 14:3.8.2-13

  - fix for CAN-2005-1267 - BGP DoS, #159209

• Thu Apr 28 2005 Martin Stransky <stransky@redhat.com> - 14:3.8.2-12

  - fix for CAN-2005-1280 Multiple DoS issues in tcpdump 
    (CAN-2005-1279 CAN-2005-1278), #156041

• Mon Mar 07 2005 Martin Stransky <stransky@redhat.com>

  - rebuilt

• Mon Feb 14 2005 Martin Stransky <stransky@redhat.com> - 14:3.8.2-10

  - remove explicit kernel dependecy (#146165)
  - support for files larger than 2GB (#147840)

• Fri Feb 11 2005 Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9

  - added arpsnmp options to specify sender and recipient 
    and corrected arpwatch and arpsnmp man pages (#70386)

• Thu Feb 10 2005 Ivana Varekova <varekova@redhat.com> - 14:3.8.2-8

  - rebuilt

• Tue Oct 12 2004 Harald Hoyer <harald@redhat.com> - 14:3.8.2-7

  - fixed nfs protocol parsing for 64 bit architectures (bug 132781)

• Wed Sep 15 2004 Harald Hoyer <harald@redhat.com> - 14:3.8.2-6

  - added libpcap-0.8.3-ppp.patch for ppp (bug 128053)

• Wed Jun 23 2004 Elliot Lee <sopwith@redhat.com>

  - added flex to BuildRequires

• Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Sun May 30 2004 Florian La Roche <Florian.LaRoche@redhat.de>

  - simplify rpm scripts

• Tue Apr 06 2004 Harald Hoyer <harald@redhat.com> - 14:3.8.2-3

  - added LICENSE files

• Wed Mar 31 2004 Harald Hoyer <harald@redhat.com> - 14:3.8.2-2

  - update to libpcap-0.8.3 (tcpdump-3.8.3 seems to be older that 3.8.2!!)

• Tue Mar 30 2004 Harald Hoyer <harald@redhat.com> - 14:3.8.2-1

  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches

• Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Fri Jan 23 2004 Harald Hoyer <harald@redhat.de> 14:3.8.1-4/17

  - fixed arpwatch version
  - fixed libpcap library version
  - fixed tcpdump droproot

• Tue Jan 20 2004 Harald Hoyer <harald@redhat.de> 14:3.8.1-3

  - corrected tcpslice (bpf.h issue)

• Tue Jan 13 2004 Harald Hoyer <harald@redhat.de> 14:3.8.1-2

  - more security issues (patch 18)

• Fri Jan 09 2004 Phil Knirsch <pknirsch@redhat.com> 14:3.8.1-1

  - Updated to latest version because of security issue

• Fri Aug 29 2003 Harald Hoyer <harald@redhat.de> 14:3.7.2-7

  - build libpcap shared library with gcc and not ld

• Tue Jul 22 2003 Phil Knirsch <pknirsch@redhat.com> 14:3.7.2-6.1

  - rebuilt

• Mon Jul 21 2003 Phil Knirsch <pknirsch@redhat.com> 14:3.7.2-6

  - rebuilt

• Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>

  - rebuilt

• Wed May 21 2003 Harald Hoyer <harald@redhat.de> 14:3.7.2-5

  - add proper attributes for arp.dat, ethercodes

• Tue May 20 2003 Harald Hoyer <harald@redhat.de> 14:3.7.2-4

  - take ethercodes.dat from the arpwatch package now

• Tue May 06 2003 Harald Hoyer <harald@redhat.de> 14:3.7.2-3

  - compile tcpdump with autoheader #90208

• Thu May 01 2003 Elliot Lee <sopwith@redhat.com> 14:3.7.2-2

  - Add sctpdef patch to fix ppc64 builds

• Thu Feb 27 2003 Phil Knirsch <pknirsch@redhat.com> 14:3.7.2-1

  - Update to upstream version 3.7.2

• Sat Feb 01 2003 Florian La Roche <Florian.LaRoche@redhat.de>

  - sanitized rpm scripts

• Wed Jan 22 2003 Tim Powers <timp@redhat.com> 12:3.6.3-20

  - rebuilt

• Tue Jan 07 2003 Nalin Dahyabhai <nalin@redhat.com> 12:3.6.3-19/0.6.2-19/2.1a11-19

  - rebuild

• Sat Jan 04 2003 Jeff Johnson <jbj@redhat.com> 12:3.6.3-18/0.6.2-18/2.1a11-18

  - set execute bits on library so that requires are generated.

• Wed Dec 11 2002 Harald Hoyer <harald@redhat.de> 12:3.6.3-17/0.6.2-17/2.1a11-17

  - common release no. across all subpackages

• Wed Dec 11 2002 Harald Hoyer <harald@redhat.de> 12:3.6.3-5/0.6.2-16/2.1a11-16

  - print_bgp security fix

• Mon Nov 18 2002 Tim Powers <timp@redhat.com>

  - rebuild on all arches

• Fri Aug 02 2002 Harald Hoyer <harald@redhat.de> 12:3.6.3-3/0.6.2-16/2.1a11-16

  - added man page descriptions for the new parameters

• Thu Aug 01 2002 Harald Hoyer <harald@redhat.de> 12:3.6.3-2

  - added arpwatch options to specify sender and recipient (#70386)

• Tue Jul 23 2002 Harald Hoyer <harald@redhat.de> 12:3.6.3-1

  - removed prestripping

• Thu May 16 2002 Harald Hoyer <harald@redhat.de> 12:3.6.2-13

  - added official 3.6.3 fix
  - fixed 6.2 compat #63113

• Wed Jan 23 2002 Harald Hoyer <harald@redhat.de> 12:3.6.2-12

  - tcpdump-3.6.2-snaplen.patch added to fix #55145

• Tue Dec 18 2001 Harald Hoyer <harald@redhat.de> 12:3.6.2-10

  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711

• Fri Aug 31 2001 Harald Hoyer <harald@redhat.de> 12:3.6.2-9

  - took better fix for #52654 from tcpdump cvs

• Thu Aug 30 2001 Harald Hoyer <harald@redhat.de> 11:3.6.2-8

  - fixed #52654

• Thu Jul 19 2001 Harald Hoyer <harald@redhat.de> 10:3.6.2-7

  - added shared library to libpcap (#47174)
  - afs printing security patch (#49294)

• Wed Jun 20 2001 Harald Hoyer <harald@redhat.de>

  - use initgroups, instead of setgroups

• Mon Jun 18 2001 Harald Hoyer <harald@redhat.de>

  - added dropgroup patches (#44563)

• Mon May 07 2001 Harald Hoyer <harald@redhat.de>

  - switched to Pekka's tcpdump-3.6.2 package
  - incremented epoch

• Sat Apr 14 2001 Pekka Savola <pekkas@netcore.fi>

  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch

• Wed Feb 14 2001 Harald Hoyer <harald@redhat.de>

  - glibc sys/time -> time include patch

• Wed Feb 07 2001 Trond Eivind Glomsrød <teg@redhat.com>

  - Add space to this check

• Wed Feb 07 2001 Harald Hoyer <harald@redhat.com>

  - added check for presence of /etc/sysconfig/arpwatch (#23172)

• Wed Feb 07 2001 Pekka Savola <pekkas@netcore.fi>

  - update to 3.6.2, 0.6.2 and new CVS of tcpslice.
  - i18n'ize arpwatch init script

• Fri Feb 02 2001 Trond Eivind Glomsrød <teg@redhat.com>

  - i18nize initscript

• Mon Jan 29 2001 Harald Hoyer <harald@redhat.com>

  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)

• Mon Jan 22 2001 Harald Hoyer <harald@redhat.com>

  - more (potential) overflows in libpcap. #21373
  - documentation fix for #20906

• Sun Jan 14 2001 Pekka Savola <pekkas@netcore.fi>

  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'

• Sat Jan 13 2001 Pekka Savola <pekkas@netcore.fi>

  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default

• Thu Jan 11 2001 Pekka Savola <pekkas@netcore.fi>

  - Update to tcpdump 3.6.1 and libpcap 0.6.1 releases.

• Mon Jan 08 2001 Pekka Savola <pekkas@netcore.fi>

  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.

• Mon Jan 01 2001 Pekka Savola <pekkas@netcore.fi>

  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection

• Sun Dec 31 2000 Pekka Savola <pekkas@netcore.fi>

  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10

• Sun Nov 26 2000 Jeff Johnson <jbj@redhat.com>

  - more (potential) overflows in libpcap.

• Sun Nov 12 2000 Jeff Johnson <jbj@redhat.com>

  - eliminate still more buffer overflows (from FreeBSD) (#20069).

• Thu Nov 02 2000 Jeff Johnson <jbj@redhat.com>

  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).

• Sun Oct 15 2000 Jeff Johnson <jbj@redhat.com>

  - updated ethercodes.dat

• Thu Oct 12 2000 Jeff Johnson <jbj@redhat.com>

  - fix arpwatch tmp race (#18943).

• Fri Aug 11 2000 Bill Nottingham <notting@redhat.com>

  - fix condrestart

• Fri Aug 11 2000 Jeff Johnson <jbj@redhat.com>

  - correct arpsnmp man pages (#15442).
  - don't print harmless ENOPROTOOPT message (#13518).

• Fri Aug 04 2000 Jeff Johnson <jbj@redhat.com>

  - rebuild with final kernel headers (#13518).

• Sat Jul 22 2000 Jeff Johnson <jbj@redhat.com>

  - add STP patch (#14112).

• Fri Jul 14 2000 Matt Wilson <msw@redhat.com>

  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun

• Wed Jul 12 2000 Prospector <bugzilla@redhat.com>

  - automatic rebuild

• Tue Jul 11 2000 Jeff Johnson <jbj@redhat.com>

  - updated man page and help (pekkas@netcore.fi) (#10739 et al).

• Sun Jun 18 2000 Jeff Johnson <jbj@redhat/com>

  - FHS packaging.

• Tue May 09 2000 Bill Nottingham <notting@redhat.com>

  - minor tweaks for ia64 (prototypes)

• Thu Feb 17 2000 Bernhard Rosenkraenzer <bero@redhat.com>

  - Compile shared libpcap with -fPIC (Bug #6342)

• Wed Feb 02 2000 Cristian Gafton <gafton@redhat.com>

  - fix descriptions
  - man pages are compressed

• Wed Dec 22 1999 Jeff Johnson <jbj@redhat.com>

  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).

• Thu Sep 09 1999 Cristian Gafton <gafton@redhat.com>

  - fox the pcap.h header

• Fri Aug 20 1999 Jeff Johnson <jbj@redhat.com>

  - prevent segfault on obscure spoofed ip header (#4634).

• Wed Aug 18 1999 Jeff Johnson <jbj@redhat.com>

  - add defattr to arpwatch (#4591).

• Mon Aug 16 1999 Bill Nottingham <notting@redhat.com>

  - initscript munging

• Sun Aug 08 1999 Jeff Johnson <jbj@redhat.com>

  - add -DWORDS_BIGINDIAN to tcpdump compile on sparc sparc61.

• Tue Aug 03 1999 Jeff Johnson <jbj@redhat.com>

  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).

• Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>

  - auto rebuild in the new build environment (release 10)

• Fri Mar 19 1999 Jeff Johnson <jbj@redhat.com>

  - strip binaries.

• Wed Jan 13 1999 Bill Nottingham <notting@redhat.com>

  - autoconf fixes for arm

• Tue Sep 29 1998 Jeff Johnson <jbj@redhat.com>

  - libpcap description typo.

• Sat Sep 19 1998 Jeff Johnson <jbj@redhat.com>

  - fix arpwatch summary line.

• Mon Aug 17 1998 Jeff Johnson <jbj@redhat.com>

  - enable arpwatch

• Mon Aug 03 1998 Jeff Johnson <jbj@redhat.com>

  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)

• Thu May 07 1998 Prospector System <bugs@redhat.com>

  - translations modified for de, fr, tr

• Sat May 02 1998 Alan Cox <alan@rehat.com>

  - Added the SACK printing fix so you can dump Linux 2.1+.

• Tue Oct 21 1997 Erik Troan <ewt@redhat.com>

  - updated to release 3.4a5
  - uses a buildroot and %attr

• Thu Jul 17 1997 Erik Troan <ewt@redhat.com>

  - built against glibc