From 75b7d95814c9942d283d6a330af2dfcc84dd70c5 Mon Sep 17 00:00:00 2001 From: CentOS Buildsys Date: Nov 08 2013 17:21:36 +0000 Subject: import tcpdump-4.5.0-1.20131108gitb07944a.el7.src.rpm --- diff --git a/.tcpdump.metadata b/.tcpdump.metadata new file mode 100644 index 0000000..f8abb98 --- /dev/null +++ b/.tcpdump.metadata @@ -0,0 +1,2 @@ +98790301cb1bf4399a95153bc62d49b3f5808994 SOURCES/tcpslice-1.2a3.tar.gz +34b2dcef6431ab99428c5b9277ff8364ddf7c3ad SOURCES/tcpdump-4.5.0-20131108gitb07944a.tar.gz diff --git a/README.md b/README.md deleted file mode 100644 index 0e7897f..0000000 --- a/README.md +++ /dev/null @@ -1,5 +0,0 @@ -The master branch has no content - -Look at the c7 branch if you are working with CentOS-7, or the c4/c5/c6 branch for CentOS-4, 5 or 6 - -If you find this file in a distro specific branch, it means that no content has been checked in yet diff --git a/SOURCES/tcpdump-4.0.0-icmp6msec.patch b/SOURCES/tcpdump-4.0.0-icmp6msec.patch new file mode 100644 index 0000000..912bd94 --- /dev/null +++ b/SOURCES/tcpdump-4.0.0-icmp6msec.patch @@ -0,0 +1,12 @@ +diff -up tcpdump/print-icmp6.c.icmp6msec tcpdump/print-icmp6.c +--- tcpdump/print-icmp6.c.icmp6msec 2009-08-19 00:02:37.000000000 +0200 ++++ tcpdump/print-icmp6.c 2009-08-20 16:33:59.000000000 +0200 +@@ -397,7 +397,7 @@ icmp6_print(const u_char *bp, u_int leng + p = (struct nd_router_advert *)dp; + TCHECK(p->nd_ra_retransmit); + printf("\n\thop limit %u, Flags [%s]" \ +- ", pref %s, router lifetime %us, reachable time %us, retrans time %us", ++ ", pref %s, router lifetime %us, reachable time %ums, retrans time %ums", + (u_int)p->nd_ra_curhoplimit, + bittok2str(icmp6_opt_ra_flag_values,"none",(p->nd_ra_flags_reserved)), + get_rtpref(p->nd_ra_flags_reserved), diff --git a/SOURCES/tcpdump-4.0.0-portnumbers.patch b/SOURCES/tcpdump-4.0.0-portnumbers.patch new file mode 100644 index 0000000..22bd2f2 --- /dev/null +++ b/SOURCES/tcpdump-4.0.0-portnumbers.patch @@ -0,0 +1,37 @@ +diff -up tcpdump-3.9.8/addrtoname.c.portnumbers tcpdump-3.9.8/addrtoname.c +--- tcpdump-3.9.8/addrtoname.c.portnumbers 2007-09-26 03:59:52.000000000 +0200 ++++ tcpdump-3.9.8/addrtoname.c 2008-08-29 13:53:12.000000000 +0200 +@@ -704,7 +704,7 @@ init_servarray(void) + + while (table->name) + table = table->nxt; +- if (nflag) { ++ if (nflag > 1) { + (void)snprintf(buf, sizeof(buf), "%d", port); + table->name = strdup(buf); + } else +@@ -1104,7 +1104,7 @@ init_addrtoname(u_int32_t localnet, u_in + f_localnet = localnet; + f_netmask = mask; + } +- if (nflag) ++ if (nflag > 1) + /* + * Simplest way to suppress names. + */ +diff -up tcpdump-3.9.8/tcpdump.1.portnumbers tcpdump-3.9.8/tcpdump.1 +--- tcpdump-3.9.8/tcpdump.1.in.portnumbers 2008-08-29 13:53:12.000000000 +0200 ++++ tcpdump-3.9.8/tcpdump.1.in 2008-08-29 13:53:12.000000000 +0200 +@@ -403,7 +403,11 @@ Use \fIsecret\fP as a shared secret for + TCP segments with the TCP-MD5 option (RFC 2385), if present. + .TP + .B \-n +-Don't convert addresses (i.e., host addresses, port numbers, etc.) to names. ++Don't convert host addresses to names. This can be used to avoid ++DNS lookups. ++.TP ++.B \-nn ++Don't convert protocol and port numbers etc. to names either. + .TP + .B \-N + Don't print domain name qualification of host names. diff --git a/SOURCES/tcpdump-4.4.0-eperm.patch b/SOURCES/tcpdump-4.4.0-eperm.patch new file mode 100644 index 0000000..5750a8a --- /dev/null +++ b/SOURCES/tcpdump-4.4.0-eperm.patch @@ -0,0 +1,77 @@ +diff -up tcpdump-4.4.0/tcpdump.1.in.eperm tcpdump-4.4.0/tcpdump.1.in +--- tcpdump-4.4.0/tcpdump.1.in.eperm 2013-10-07 15:21:26.795602764 +0200 ++++ tcpdump-4.4.0/tcpdump.1.in 2013-10-07 15:21:26.800602762 +0200 +@@ -221,6 +221,9 @@ have the name specified with the + flag, with a number after it, starting at 1 and continuing upward. + The units of \fIfile_size\fP are millions of bytes (1,000,000 bytes, + not 1,048,576 bytes). ++ ++Note that when used with \fB\-Z\fR option (enabled by default), privileges ++are dropped before opening first savefile. + .TP + .B \-d + Dump the compiled packet-matching code in a human readable form to +@@ -720,7 +723,9 @@ but before opening any savefiles for out + and the group ID to the primary group of + .IR user . + .IP +-This behavior can also be enabled by default at compile time. ++This behavior is enabled by default (\fB\-Z tcpdump\fR), and can ++be disabled by \fB\-Z root\fR. ++ + .IP "\fI expression\fP" + .RS + selects which packets will be dumped. +diff -up tcpdump-4.4.0/tcpdump.c.eperm tcpdump-4.4.0/tcpdump.c +--- tcpdump-4.4.0/tcpdump.c.eperm 2013-03-24 22:49:18.000000000 +0100 ++++ tcpdump-4.4.0/tcpdump.c 2013-10-07 15:22:26.360590143 +0200 +@@ -1426,11 +1426,24 @@ main(int argc, char **argv) + } + #endif /* HAVE_CAP_NG_H */ + +- if (getuid() == 0 || geteuid() == 0) { +- if (username || chroot_dir) ++ /* If user is running tcpdump as root and wants to write to the savefile, ++ * we will check if -C is set and if it is, we will drop root ++ * privileges right away and consequent call to pcap_dump_open() ++ * will most likely fail for the first file. If -C flag is not set we ++ * will create file as root then change ownership of file to proper ++ * user(default tcpdump) and drop root privileges. ++ */ ++ int chown_flag = 0; ++ ++ if (WFileName && (getuid() == 0 || geteuid() == 0)) ++ if (Cflag && (username || chroot_dir)) ++ droproot(username, chroot_dir); ++ else ++ chown_flag = 1; ++ else ++ if ((getuid() == 0 || geteuid() == 0) && (username || chroot_dir)) + droproot(username, chroot_dir); + +- } + #endif /* WIN32 */ + + if (pcap_setfilter(pd, &fcode) < 0) +@@ -1450,6 +1463,21 @@ main(int argc, char **argv) + MakeFilename(dumpinfo.CurrentFileName, WFileName, 0, 0); + + p = pcap_dump_open(pd, dumpinfo.CurrentFileName); ++ ++ /* Change ownership of file and drop root privileges */ ++ if (chown_flag) { ++ struct passwd *pwd; ++ ++ pwd = getpwnam(username); ++ if (!pwd) ++ error("Couldn't find user '%s'", username); ++ ++ if (strcmp(WFileName, "-") && chown(dumpinfo.CurrentFileName, pwd->pw_uid, pwd->pw_gid) < 0) ++ error("Couldn't change ownership of savefile"); ++ ++ if (username || chroot_dir) ++ droproot(username, chroot_dir); ++ } + #ifdef HAVE_CAP_NG_H + /* Give up capabilities, clear Effective set */ + capng_clear(CAPNG_EFFECTIVE); diff --git a/SOURCES/tcpdump-4.5.0-gethostby.patch b/SOURCES/tcpdump-4.5.0-gethostby.patch new file mode 100644 index 0000000..f1cf324 --- /dev/null +++ b/SOURCES/tcpdump-4.5.0-gethostby.patch @@ -0,0 +1,93 @@ +diff -up tcpdump-4.5.0/addrtoname.c.gethostby tcpdump-4.5.0/addrtoname.c +--- tcpdump-4.5.0/addrtoname.c.gethostby 2013-11-08 09:03:52.166752012 +0100 ++++ tcpdump-4.5.0/addrtoname.c 2013-11-08 09:04:57.792747210 +0100 +@@ -224,7 +224,6 @@ static u_int32_t f_localnet; + const char * + getname(const u_char *ap) + { +- register struct hostent *hp; + u_int32_t addr; + static struct hnamemem *p; /* static for longjmp() */ + +@@ -246,6 +245,28 @@ getname(const u_char *ap) + */ + if (!nflag && + (addr & f_netmask) == f_localnet) { ++#ifdef HAVE_GETNAMEINFO ++ struct sockaddr_in sa; ++ char hbuf[NI_MAXHOST]; ++ ++ memset(&sa, 0, sizeof (sa)); ++ sa.sin_family = AF_INET; ++ sa.sin_addr.s_addr = addr; ++ if (!getnameinfo((struct sockaddr *)&sa, sizeof (sa), ++ hbuf, sizeof (hbuf), NULL, 0, 0)) { ++ if (Nflag) { ++ char *dotp; ++ ++ /* Remove domain qualifications */ ++ dotp = strchr(hbuf, '.'); ++ if (dotp) ++ *dotp = '\0'; ++ } ++ p->name = strdup(hbuf); ++ return p->name; ++ } ++#else ++ register struct hostent *hp; + hp = gethostbyaddr((char *)&addr, 4, AF_INET); + if (hp) { + char *dotp; +@@ -259,6 +280,7 @@ getname(const u_char *ap) + } + return (p->name); + } ++#endif + } + p->name = strdup(intoa(addr)); + return (p->name); +@@ -272,7 +294,6 @@ getname(const u_char *ap) + const char * + getname6(const u_char *ap) + { +- register struct hostent *hp; + union { + struct in6_addr addr; + struct for_hash_addr { +@@ -297,6 +318,28 @@ getname6(const u_char *ap) + * Do not print names if -n was given. + */ + if (!nflag) { ++#ifdef HAVE_GETNAMEINFO ++ struct sockaddr_in6 sa; ++ char hbuf[NI_MAXHOST]; ++ ++ memset(&sa, 0, sizeof (sa)); ++ sa.sin6_family = AF_INET6; ++ sa.sin6_addr = addr.addr; ++ if (!getnameinfo((struct sockaddr *)&sa, sizeof (sa), ++ hbuf, sizeof (hbuf), NULL, 0, 0)) { ++ if (Nflag) { ++ char *dotp; ++ ++ /* Remove domain qualifications */ ++ dotp = strchr(hbuf, '.'); ++ if (dotp) ++ *dotp = '\0'; ++ } ++ p->name = strdup(hbuf); ++ return p->name; ++ } ++#else ++ register struct hostent *hp; + hp = gethostbyaddr((char *)&addr, sizeof(addr), AF_INET6); + if (hp) { + char *dotp; +@@ -310,6 +353,7 @@ getname6(const u_char *ap) + } + return (p->name); + } ++#endif + } + cp = inet_ntop(AF_INET6, &addr, ntop_buf, sizeof(ntop_buf)); + p->name = strdup(cp); diff --git a/SOURCES/tcpslice-1.2a3-dateformat.patch b/SOURCES/tcpslice-1.2a3-dateformat.patch new file mode 100644 index 0000000..dd59457 --- /dev/null +++ b/SOURCES/tcpslice-1.2a3-dateformat.patch @@ -0,0 +1,14 @@ +diff -up tcpslice-1.2a3/tcpslice.c.orig tcpslice-1.2a3/tcpslice.c +--- tcpslice-1.2a3/tcpslice.c.orig 2005-10-25 00:06:26.000000000 +0200 ++++ tcpslice-1.2a3/tcpslice.c 2011-08-24 13:12:53.215962428 +0200 +@@ -404,7 +404,9 @@ fill_tm(char *time_string, int is_delta, + + while (isdigit(*t_stop)) + ++t_stop; +- if (! t_stop) ++ ++ if (!(*t_stop)) ++ /* we've reached end of string -> bad date format */ + error("bad date format %s, problem starting at %s", + time_string, t_start); + diff --git a/SOURCES/tcpslice-1.2a3-time.patch b/SOURCES/tcpslice-1.2a3-time.patch new file mode 100644 index 0000000..c59448d --- /dev/null +++ b/SOURCES/tcpslice-1.2a3-time.patch @@ -0,0 +1,71 @@ +--- tcpslice-1.2a3.orig/search.c 2000-09-10 10:52:40.000000000 +0200 ++++ tcpslice-1.2a3/search.c 2006-07-28 14:56:55.000000000 +0200 +@@ -53,7 +53,7 @@ + /* Size of a packet header in bytes; easier than typing the sizeof() all + * the time ... + */ +-#define PACKET_HDR_LEN (sizeof( struct pcap_pkthdr )) ++#define PACKET_HDR_LEN (sizeof( struct pcap_sf_pkthdr )) + + extern int snaplen; + +@@ -111,16 +111,24 @@ + static void + extract_header( pcap_t *p, u_char *buf, struct pcap_pkthdr *hdr ) + { +- memcpy((char *) hdr, (char *) buf, sizeof(struct pcap_pkthdr)); ++ struct pcap_sf_pkthdr hdri; ++ ++ memcpy((char *) &hdri, (char *) buf, sizeof(struct pcap_sf_pkthdr)); + + if ( pcap_is_swapped( p ) ) + { +- hdr->ts.tv_sec = SWAPLONG(hdr->ts.tv_sec); +- hdr->ts.tv_usec = SWAPLONG(hdr->ts.tv_usec); +- hdr->len = SWAPLONG(hdr->len); +- hdr->caplen = SWAPLONG(hdr->caplen); ++ hdr->ts.tv_sec = SWAPLONG(hdri.ts.tv_sec); ++ hdr->ts.tv_usec = SWAPLONG(hdri.ts.tv_usec); ++ hdr->len = SWAPLONG(hdri.len); ++ hdr->caplen = SWAPLONG(hdri.caplen); ++ } ++ else ++ { ++ hdr->ts.tv_sec = hdri.ts.tv_sec; ++ hdr->ts.tv_usec = hdri.ts.tv_usec; ++ hdr->len = hdri.len; ++ hdr->caplen = hdri.caplen; + } +- + /* + * From bpf/libpcap/savefile.c: + * +--- tcpslice-1.2a3.orig/tcpslice.h 1995-11-02 00:40:53.000000000 +0100 ++++ tcpslice-1.2a3/tcpslice.h 2006-07-28 14:56:55.000000000 +0200 +@@ -20,6 +20,26 @@ + */ + + ++#include ++/* #include */ ++ ++/* ++ * This is a timeval as stored in disk in a dumpfile. ++ * It has to use the same types everywhere, independent of the actual ++ * `struct timeval' ++ */ ++ ++struct pcap_timeval { ++ bpf_int32 tv_sec; /* seconds */ ++ bpf_int32 tv_usec; /* microseconds */ ++}; ++ ++struct pcap_sf_pkthdr { ++ struct pcap_timeval ts; /* time stamp */ ++ bpf_u_int32 caplen; /* length of portion present */ ++ bpf_u_int32 len; /* length this packet (off wire) */ ++}; ++ + time_t gwtm2secs( struct tm *tm ); + + int sf_find_end( struct pcap *p, struct timeval *first_timestamp, diff --git a/SOURCES/tcpslice-CVS.20010207-bpf.patch b/SOURCES/tcpslice-CVS.20010207-bpf.patch new file mode 100644 index 0000000..8aaad3b --- /dev/null +++ b/SOURCES/tcpslice-CVS.20010207-bpf.patch @@ -0,0 +1,12 @@ +diff -ur tcpdump-3.8.1/tcpslice/tcpslice.c tcpdump-3.8.1.new/tcpslice/tcpslice.c +--- tcpslice/tcpslice.c 2004-01-15 17:35:53.000000000 +0100 ++++ tcpslice/tcpslice.c 2004-01-15 16:12:57.000000000 +0100 +@@ -35,7 +35,7 @@ + #include + #include + +-#include ++/* #include */ + + #include + #ifdef HAVE_FCNTL_H diff --git a/SPECS/tcpdump.spec b/SPECS/tcpdump.spec new file mode 100644 index 0000000..f5f1991 --- /dev/null +++ b/SPECS/tcpdump.spec @@ -0,0 +1,622 @@ +Summary: A network traffic monitoring tool +Name: tcpdump +Epoch: 14 +Version: 4.5.0 +Release: 1.20131108gitb07944a%{?dist} +License: BSD with advertising +URL: http://www.tcpdump.org +Group: Applications/Internet +Requires(pre): shadow-utils +BuildRequires: openssl-devel libpcap-devel +BuildRequires: automake sharutils + +Source0: tcpdump-4.5.0-20131108gitb07944a.tar.gz +Source1: ftp://ftp.ee.lbl.gov/tcpslice-1.2a3.tar.gz + +Patch1: tcpdump-4.0.0-portnumbers.patch +Patch2: tcpdump-4.0.0-icmp6msec.patch +Patch3: tcpdump-4.5.0-gethostby.patch +Patch4: tcpdump-4.4.0-eperm.patch +Patch5: tcpslice-1.2a3-time.patch +Patch6: tcpslice-CVS.20010207-bpf.patch +Patch7: tcpslice-1.2a3-dateformat.patch + +%define tcpslice_dir tcpslice-1.2a3 + +%description +Tcpdump is a command-line tool for monitoring network traffic. +Tcpdump can capture and display the packet headers on a particular +network interface or on all interfaces. Tcpdump can display all of +the packet headers, or just the ones that match particular criteria. + +Install tcpdump if you need a program to monitor network traffic. + +%prep +%setup -q -a 1 + +%patch1 -p1 -b .portnumbers +%patch2 -p1 -b .icmp6msec +%patch3 -p1 -b .gethostby +%patch4 -p1 -b .eperm + +pushd %{tcpslice_dir} +%patch5 -p1 -b .time +%patch6 -p1 -b .bpf +%patch7 -p1 -b .dateformat +popd + +find . -name '*.c' -o -name '*.h' | xargs chmod 644 + +%build +export CFLAGS="$RPM_OPT_FLAGS $(getconf LFS_CFLAGS) -fno-strict-aliasing" + +pushd %{tcpslice_dir} +# update config.{guess,sub} +automake -a -f 2> /dev/null || : +%configure +make %{?_smp_mflags} +popd + +%configure --with-crypto --with-user=tcpdump --without-smi +make %{?_smp_mflags} + +%check +#make check + +%install +mkdir -p ${RPM_BUILD_ROOT}%{_libdir} +mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8 +mkdir -p ${RPM_BUILD_ROOT}%{_sbindir} + +pushd %{tcpslice_dir} +install -m755 tcpslice ${RPM_BUILD_ROOT}%{_sbindir} +install -m644 tcpslice.1 ${RPM_BUILD_ROOT}%{_mandir}/man8/tcpslice.8 +popd + +install -m755 tcpdump ${RPM_BUILD_ROOT}%{_sbindir} +install -m644 tcpdump.1 ${RPM_BUILD_ROOT}%{_mandir}/man8/tcpdump.8 + +# fix section numbers +sed -i 's/\(\.TH[a-zA-Z ]*\)[1-9]\(.*\)/\18\2/' \ + ${RPM_BUILD_ROOT}%{_mandir}/man8/* + +%pre +/usr/sbin/groupadd -g 72 tcpdump 2> /dev/null +/usr/sbin/useradd -u 72 -g 72 -s /sbin/nologin -M -r \ + -d / tcpdump 2> /dev/null +exit 0 + +%files +%defattr(-,root,root) +%doc LICENSE README.md CHANGES CREDITS +%{_sbindir}/tcpdump +%{_sbindir}/tcpslice +%{_mandir}/man8/tcpslice.8* +%{_mandir}/man8/tcpdump.8* + +%changelog +* Fri Nov 08 2013 Michal Sekletar - 14:4.5.0-1.20131108gitb07944a +- update to snaphot gitb07944a (#1026855) +- don't try to change ownership of stdout (#1015767) + +* Thu Jun 06 2013 Michal Sekletar - 14:4.4.0-1 +- update to 4.4.0 + +* Fri Feb 15 2013 Fedora Release Engineering - 14:4.3.0-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Sat Jul 21 2012 Fedora Release Engineering - 14:4.3.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Wed Jun 13 2012 Michal Sekletar - 14:4.3.0-1 +- Update to 4.3.0 + +* Wed May 16 2012 Michal Sekletar +- Resolves: #809638 +- created savefile has proper owner + +* Sat Jan 14 2012 Fedora Release Engineering - 14:4.2.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Jan 03 2012 Jan Synáček - 14:4.2.1-1 +- Update to 4.2.1 +- Remove ppi.h from sources (readded again in upstream tarball) + +* Thu Dec 02 2011 Michal Sekletar - 14:4.2.0-1 +- updated to 4.2.0 +- added new source file ppi.h, missing in upstream tarball +- disabled make check because of missing .pcap files in testsuite +- dropped unnecessary patches + +* Wed Aug 24 2011 Michal Sekletar - 14:4.1.1-3 +- Fix manpage (#663739) +- Fix improper handling of bad date format in tcpslice (#684005) +- Spec file clean up + +* Wed Feb 09 2011 Fedora Release Engineering - 14:4.1.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Tue Apr 06 2010 Miroslav Lichvar - 14:4.1.1-1 +- update to 4.1.1 +- add %%check + +* Wed Sep 23 2009 Miroslav Lichvar - 14:4.0.0-3.20090921gitdf3cb4 +- update to snapshot 20090921gitdf3cb4 + +* Fri Aug 21 2009 Tomas Mraz - 14:4.0.0-2.20090818git832d2c +- rebuilt with new openssl + +* Thu Aug 20 2009 Miroslav Lichvar - 14:4.0.0-1.20090818git832d2c +- update to post 4.0.0 git snapshot 20090818git832d2c +- print retrans and reachable times in ICMPv6 as milliseconds (#474264) + +* Sun Jul 26 2009 Fedora Release Engineering - 14:3.9.8-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Wed Feb 25 2009 Fedora Release Engineering - 14:3.9.8-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Tue Jan 20 2009 Miroslav Lichvar - 14:3.9.8-7 +- rebuild for new openssl +- convert CREDITS to UTF-8 (#226481) + +* Fri Aug 29 2008 Miroslav Lichvar - 14:3.9.8-6 +- rediff patches with fuzz +- add -fno-strict-aliasing to CFLAGS + +* Mon Jun 02 2008 Miroslav Lichvar - 14:3.9.8-5 +- update config.{guess,sub} when building tcpslice +- remove -D_GNU_SOURCE from CFLAGS +- disable libsmi check in configure + +* Wed Feb 13 2008 Miroslav Lichvar - 14:3.9.8-4 +- fix building with new glibc headers + +* Thu Dec 06 2007 Miroslav Lichvar - 14:3.9.8-3 +- update IKEv2 support + +* Thu Dec 6 2007 Jeremy Katz - 14:3.9.8-2 +- rebuild for new openssl + +* Wed Oct 24 2007 Miroslav Lichvar - 14:3.9.8-1 +- update to 3.9.8 +- don't use gethostbyaddr +- fix default user in man page + +* Tue Sep 18 2007 Miroslav Lichvar - 14:3.9.7-5 +- support decoding IKEv2 packets + +* Wed Aug 22 2007 Miroslav Lichvar - 14:3.9.7-4 +- rebuild + +* Thu Aug 09 2007 Miroslav Lichvar - 14:3.9.7-3 +- enable crypto support on 64-bit architectures +- update license tag + +* Wed Jul 25 2007 Jeremy Katz - 14:3.9.7-2 +- rebuild for toolchain bug + +* Tue Jul 24 2007 Miroslav Lichvar - 14:3.9.7-1 +- update to 3.9.7 +- with -C option, drop root privileges before opening first savefile (#244860) +- update tcpslice to 1.2a3 +- include time patch from Debian to fix tcpslice on 64-bit architectures + +* Thu Mar 15 2007 Miroslav Lichvar - 14:3.9.5-3 +- fix buffer overflow in 802.11 printer (#232349, CVE-2007-1218) +- spec cleanup (#226481) + +* Tue Dec 12 2006 Miroslav Lichvar - 14:3.9.5-2 +- use tcpdump user, fix scriptlet (#219268) + +* Wed Nov 29 2006 Miroslav Lichvar - 14:3.9.5-1 +- split off libpcap and arpwatch (#193657) +- update to 3.9.5 +- force linking with system libpcap + +* Fri Nov 17 2006 Miroslav Lichvar - 14:3.9.4-9 +- fix processing of Prism and AVS headers (#206686) +- fix arp2ethers script +- update ethercodes.dat +- move pcap man page to devel package + +* Wed Jul 12 2006 Jesse Keating - 14:3.9.4-8.1 +- rebuild + +* Thu Jun 22 2006 Martin Stransky - 14:3.9.4-8 +- more ipv6 flags + +* Sun Jun 4 2006 Jeremy Katz - 14:3.9.4-7 +- fix libpcap-devel inclusion of .so and its deps (#193189) + +* Thu Jun 1 2006 Martin Stransky - 14:3.9.4-6 +- added release to arpwatch package name + +* Wed May 31 2006 Martin Stransky - 14:3.9.4-5 +- removed libpcap-devel dependency from libpcap + +* Mon May 29 2006 Martin Stransky - 14:3.9.4-4 +- added libpcap-devel package (#193189) + +* Tue Mar 28 2006 Martin Stransky - 14:3.9.4-3 +- updated ethernet codes (#186633) + +* Fri Feb 10 2006 Jesse Keating - 14:3.9.4-2.2 +- bump again for double-long bug on ppc(64) + +* Tue Feb 07 2006 Jesse Keating - 14:3.9.4-2.1 +- rebuilt for new gcc4.1 snapshot and glibc changes + +* Tue Dec 20 2005 Martin Stransky - 14:3.9.4-2 +- fix for #176010 - file owner problem when using 'ring buffer + +* Fri Dec 09 2005 Jesse Keating +- rebuilt + +* Thu Nov 10 2005 Martin Stransky - 14:3.9.4-1 +- new upstream + +* Thu Nov 10 2005 Tomas Mraz - 14:3.9.3-5 +- rebuilt against new openssl + +* Wed Nov 9 2005 Martin Stransky - 14:3.9.3-4 +- rebuilt + +* Tue Aug 9 2005 Jeremy Katz - 14:3.9.3-3 +- remove explicit kernel dep for libpcap too + +* Tue Jul 26 2005 Martin Stransky - 14:3.9.3-2 +- fixed typo in last patch + +* Tue Jul 26 2005 Martin Stransky - 14:3.9.3-1 +- New upstream version - 3.9.3 +- fix for #164227 (buffer overflow) +- fix for #164230 (missing debug info) + +* Tue Jul 14 2005 Martin Stransky - 14:3.9.1-1 +- New upstream version + +* Tue Jun 21 2005 Martin Stransky - 14:3.8.2-14 +- add shadow-utils to Prereq (#160643) + +* Tue Jun 7 2005 Martin Stransky - 14:3.8.2-13 +- fix for CAN-2005-1267 - BGP DoS, #159209 + +* Thu Apr 28 2005 Martin Stransky - 14:3.8.2-12 +- fix for CAN-2005-1280 Multiple DoS issues in tcpdump + (CAN-2005-1279 CAN-2005-1278), #156041 + +* Mon Mar 7 2005 Martin Stransky +- rebuilt + +* Mon Feb 14 2005 Martin Stransky - 14:3.8.2-10 +- remove explicit kernel dependecy (#146165) +- support for files larger than 2GB (#147840) + +* Fri Feb 11 2005 Ivana Varekova - 14:3.8.2-9 +- added arpsnmp options to specify sender and recipient + and corrected arpwatch and arpsnmp man pages (#70386) + +* Thu Feb 10 2005 Ivana Varekova - 14:3.8.2-8 +- rebuilt + +* Wed Oct 12 2004 Harald Hoyer - 14:3.8.2-7 +- fixed nfs protocol parsing for 64 bit architectures (bug 132781) + +* Wed Sep 15 2004 Harald Hoyer - 14:3.8.2-6 +- added libpcap-0.8.3-ppp.patch for ppp (bug 128053) + +* Wed Jun 23 2004 Elliot Lee +- added flex to BuildRequires + +* Tue Jun 15 2004 Elliot Lee +- rebuilt + +* Sun May 30 2004 Florian La Roche +- simplify rpm scripts + +* Tue Apr 6 2004 Harald Hoyer - 14:3.8.2-3 +- added LICENSE files + +* Wed Mar 31 2004 Harald Hoyer - 14:3.8.2-2 +- update to libpcap-0.8.3 (tcpdump-3.8.3 seems to be older that 3.8.2!!) + +* Tue Mar 30 2004 Harald Hoyer - 14:3.8.2-1 +- update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13 +- patched tcpdump configure for gcc34 optimizations +- removed obsolete patches + +* Tue Mar 02 2004 Elliot Lee +- rebuilt + +* Fri Feb 13 2004 Elliot Lee +- rebuilt + +* Tue Jan 23 2004 Harald Hoyer 14:3.8.1-4/17 +- fixed arpwatch version +- fixed libpcap library version +- fixed tcpdump droproot + +* Tue Jan 20 2004 Harald Hoyer 14:3.8.1-3 +- corrected tcpslice (bpf.h issue) + +* Tue Jan 13 2004 Harald Hoyer 14:3.8.1-2 +- more security issues (patch 18) + +* Fri Jan 09 2004 Phil Knirsch 14:3.8.1-1 +- Updated to latest version because of security issue + +* Fri Aug 29 2003 Harald Hoyer 14:3.7.2-7 +- build libpcap shared library with gcc and not ld + +* Tue Jul 22 2003 Phil Knirsch 14:3.7.2-6.1 +- rebuilt + +* Mon Jul 21 2003 Phil Knirsch 14:3.7.2-6 +- rebuilt + +* Wed Jun 04 2003 Elliot Lee +- rebuilt + +* Wed May 21 2003 Harald Hoyer 14:3.7.2-5 +- add proper attributes for arp.dat, ethercodes + +* Tue May 20 2003 Harald Hoyer 14:3.7.2-4 +- take ethercodes.dat from the arpwatch package now + +* Tue May 6 2003 Harald Hoyer 14:3.7.2-3 +- compile tcpdump with autoheader #90208 + +* Thu May 1 2003 Elliot Lee 14:3.7.2-2 +- Add sctpdef patch to fix ppc64 builds + +* Thu Feb 27 2003 Phil Knirsch 14:3.7.2-1 +- Update to upstream version 3.7.2 + +* Sat Feb 01 2003 Florian La Roche +- sanitized rpm scripts + +* Wed Jan 22 2003 Tim Powers 12:3.6.3-20 +- rebuilt + +* Tue Jan 7 2003 Nalin Dahyabhai 12:3.6.3-19/0.6.2-19/2.1a11-19 +- rebuild + +* Sat Jan 4 2003 Jeff Johnson 12:3.6.3-18/0.6.2-18/2.1a11-18 +- set execute bits on library so that requires are generated. + +* Wed Dec 11 2002 Harald Hoyer 12:3.6.3-17/0.6.2-17/2.1a11-17 +- common release no. across all subpackages + +* Wed Dec 11 2002 Harald Hoyer 12:3.6.3-5/0.6.2-16/2.1a11-16 +- print_bgp security fix + +* Mon Nov 18 2002 Tim Powers +- rebuild on all arches + +* Fri Aug 2 2002 Harald Hoyer 12:3.6.3-3/0.6.2-16/2.1a11-16 +- added man page descriptions for the new parameters + +* Thu Aug 1 2002 Harald Hoyer 12:3.6.3-2 +- added arpwatch options to specify sender and recipient (#70386) + +* Tue Jul 23 2002 Harald Hoyer 12:3.6.3-1 +- removed prestripping + +* Thu May 16 2002 Harald Hoyer 12:3.6.2-13 +- added official 3.6.3 fix +- fixed 6.2 compat #63113 + +* Wed Jan 23 2002 Harald Hoyer 12:3.6.2-12 +- tcpdump-3.6.2-snaplen.patch added to fix #55145 + +* Tue Dec 18 2001 Harald Hoyer 12:3.6.2-10 +- took old purge patch for filters +- fixed #54225,#58346 +- drop root by default #49635 +- fixed #54593 +- fixed #57711 + +* Fri Aug 31 2001 Harald Hoyer 12:3.6.2-9 +- took better fix for #52654 from tcpdump cvs + +* Thu Aug 30 2001 Harald Hoyer 11:3.6.2-8 +- fixed #52654 + +* Thu Jul 19 2001 Harald Hoyer 10:3.6.2-7 +- added shared library to libpcap (#47174) +- afs printing security patch (#49294) + +* Wed Jun 20 2001 Harald Hoyer +- use initgroups, instead of setgroups + +* Mon Jun 18 2001 Harald Hoyer +- added dropgroup patches (#44563) + +* Mon May 07 2001 Harald Hoyer +- switched to Pekka's tcpdump-3.6.2 package +- incremented epoch + +* Sat Apr 14 2001 Pekka Savola +- fix building of tcpslice on glibc 2.2.2 (time.h) +- disable /etc/init.d requirement and fix %%post scripts in arpwatch + +* Wed Feb 14 2001 Harald Hoyer +- glibc sys/time -> time include patch + +* Wed Feb 7 2001 Trond Eivind Glomsrød +- Add space to this check + +* Wed Feb 07 2001 Harald Hoyer +- added check for presence of /etc/sysconfig/arpwatch (#23172) + +* Wed Feb 7 2001 Pekka Savola +- update to 3.6.2, 0.6.2 and new CVS of tcpslice. +- i18n'ize arpwatch init script + +* Fri Feb 2 2001 Trond Eivind Glomsrød +- i18nize initscript + +* Mon Jan 29 2001 Harald Hoyer +- fixed EINTR stopping for e.g. SIGSTOP. (#22008) +- added -u option for tcpdump (#20231) +- new arpwatch version (#23172) +- added "all" and "one" interface for -i (#20907) +- added arpwatch sysconfig (#23172) + +* Mon Jan 22 2001 Harald Hoyer +- more (potential) overflows in libpcap. #21373 +- documentation fix for #20906 + +* Sun Jan 14 2001 Pekka Savola +- use --enable-ipv6 +- Add two patches from CVS to enhance 802.2 printing, and more importantly, + to be able to specify 'no stp' + +* Sat Jan 13 2001 Pekka Savola +- Make SMB printing output a lot more quiet unless in verbose mode. +- Make -n resolve port/protocol numbers but not hostnames, -nn for no + resolving at all +- Separate droproot patch from a more generic man/usage fix one +- Add non-promiscuous mode -by default patch, but don't apply it by default + +* Thu Jan 11 2001 Pekka Savola +- Update to tcpdump 3.6.1 and libpcap 0.6.1 releases. + +* Mon Jan 8 2001 Pekka Savola +- Update to 20010108 CVS, disable some upstreamed patches. +- Change some additional .1 pages to .8. +- Add droproot patch, some --usage and man page fixes. + +* Mon Jan 1 2001 Pekka Savola +- Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6. +- add earlier print-domain.c, the latest is segfaulting +- don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway +- don't use savestr, require openssl, tweak tweak tweak +- add tcpslice, patch it a bit for egcs detection + +* Sun Dec 31 2000 Pekka Savola +- tcpdump: spice up the manpage about interfaces +- tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour. +- upgrade arpwatch to 2.1a10 + +* Sun Nov 26 2000 Jeff Johnson +- more (potential) overflows in libpcap. + +* Sun Nov 12 2000 Jeff Johnson +- eliminate still more buffer overflows (from FreeBSD) (#20069). + +* Thu Nov 2 2000 Jeff Johnson +- eliminate more buffer overflows (from FreeBSD) (#20069). +- 802.1q ether type incorrect (#19850). +- add -u flag to drop arpwatch privs (#19696). + +* Sun Oct 15 2000 Jeff Johnson +- updated ethercodes.dat + +* Thu Oct 12 2000 Jeff Johnson +- fix arpwatch tmp race (#18943). + +* Fri Aug 11 2000 Bill Nottingham +- fix condrestart + +* Fri Aug 11 2000 Jeff Johnson +- correct arpsnmp man pages (#15442). +- don't print harmless ENOPROTOOPT message (#13518). + +* Fri Aug 4 2000 Jeff Johnson +- rebuild with final kernel headers (#13518). + +* Sat Jul 22 2000 Jeff Johnson +- add STP patch (#14112). + +* Fri Jul 14 2000 Matt Wilson +- source /etc/init.d/functions +- back out /etc/init.d/arpwatch, place file in /etc/rc.d +- move initscript to /etc/init.d +- changed initscript to use start() and stop() functions +- added condrestart to init script +- added %%post %%preun %%postun scripts to register arpwatch script +- added Prereq: for all things needed in post/preun/postun + +* Wed Jul 12 2000 Prospector +- automatic rebuild + +* Tue Jul 11 2000 Jeff Johnson +- updated man page and help (pekkas@netcore.fi) (#10739 et al). + +* Sun Jun 18 2000 Jeff Johnson +- FHS packaging. + +* Tue May 9 2000 Bill Nottingham +- minor tweaks for ia64 (prototypes) + +* Thu Feb 17 2000 Bernhard Rosenkraenzer +- Compile shared libpcap with -fPIC (Bug #6342) + +* Wed Feb 02 2000 Cristian Gafton +- fix descriptions +- man pages are compressed + +* Wed Dec 22 1999 Jeff Johnson +- remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40. +- upgrade to ANK ss991030 snapshot with pcap magic fix (#6773). +- add getprotobyname lookup (#6725). +- getservbyname port lookup appears functional (#7569). +- remove uid 2090 backdoor (sorry Dave) (#7116). + +* Thu Sep 09 1999 Cristian Gafton +- fox the pcap.h header + +* Fri Aug 20 1999 Jeff Johnson +- prevent segfault on obscure spoofed ip header (#4634). + +* Wed Aug 18 1999 Jeff Johnson +- add defattr to arpwatch (#4591). + +* Mon Aug 16 1999 Bill Nottingham +- initscript munging + +* Sun Aug 8 1999 Jeff Johnson +- add -DWORDS_BIGINDIAN to tcpdump compile on sparc sparc61. + +* Tue Aug 3 1999 Jeff Johnson +- include A. Kuznetsov's patches to libpcap/tcpdump. +- added arpsnmp to package (#3258). +- arp2ethers written for different of awk (#4326). + +* Sun Mar 21 1999 Cristian Gafton +- auto rebuild in the new build environment (release 10) + +* Fri Mar 19 1999 Jeff Johnson +- strip binaries. + +* Wed Jan 13 1999 Bill Nottingham +- autoconf fixes for arm + +* Tue Sep 29 1998 Jeff Johnson +- libpcap description typo. + +* Sat Sep 19 1998 Jeff Johnson +- fix arpwatch summary line. + +* Mon Aug 17 1998 Jeff Johnson +- enable arpwatch + +* Mon Aug 3 1998 Jeff Johnson +- separate package for libpcap. +- update tcpdump to 3.4, libpcap to 0.4. +- added arpwatch (but disabled for now) + +* Thu May 07 1998 Prospector System +- translations modified for de, fr, tr + +* Sat May 2 1998 Alan Cox +- Added the SACK printing fix so you can dump Linux 2.1+. + +* Tue Oct 21 1997 Erik Troan +- updated to release 3.4a5 +- uses a buildroot and %%attr + +* Thu Jul 17 1997 Erik Troan +- built against glibc