debian/0000775000000000000000000000000012265002555007172 5ustar debian/tcpdump.docs0000664000000000000000000000001212246466404011517 0ustar README.md debian/README.Debian0000664000000000000000000000051512265002404011225 0ustar Apparmor Profile ---------------- If your system uses apparmor, please note that the shipped enforcing profile works with the default installation, and changes in your configuration may require changes to the installed apparmor profile. Please see https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this software. debian/copyright0000664000000000000000000001416112246464651011140 0ustar This package was debianized by Anand Kumria on Wed, 22 Nov 2000 13:19:33 +1100, then maintained by Torsten Landschoff and Romain Francoise . It was downloaded from http://www.tcpdump.org/ Upstream Authors: tcpdump-workers@tcpdump.org Licensed under the 3-clause BSD license: Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. The names of the authors may not be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Some files in this package are licensed under the 4-clause BSD license, the copyright on most of them belongs to The Regents of the University of California. Since the license was retroactively changed in 1999 to remove the advertising clause, they are effectively under the 3-clause license even if the text of the license in the files hasn't been updated. See the following document for more details: Other files under the 4-clause BSD license and whose copyright doesn't belong to the The Regents of the University of California are listed below: - aodv.h, Copyright (c) 2003 Bruce M. Simpson - atmuni31.h, Copyright (c) 1997 Yen Yen Lim and North Dakota State University - ieee802_11.h, Copyright (c) 2001 Fortress Technologies and Charlie Lenahan - print-802_11.c, Copyright (c) 2001 Fortress Technologies and Charlie Lenahan - print-aodv.c, Copyright (c) 2003 Bruce M. Simpson - print-ascii.c, Copyright (c) 1997, 1998 The NetBSD Foundation, Inc. - print-cnfp.c, Copyright (c) 1998 Michael Shalayeff - print-gre.c, Copyright (c) 2002 Jason L. Wright - print-mobile.c, Copyright (c) 1998 The NetBSD Foundation, Inc. - print-sunatm.c, Copyright (c) 1997 Yen Yen Lim and North Dakota State University - print-telnet.c, Copyright (c) 1997, 1998 The NetBSD Foundation, Inc. - print-timed.c, Copyright (c) 2000 Ben Smithurst - missing/inet_aton.c, Copyright (c) 1995, 1996, 1997 Kungliga Tekniska Högskolan (Royal Institute of Technology, Stockholm, Sweden). - missing/inet_ntop.c, Copyright (c) 1995, 1996, 1997 Kungliga Tekniska Högskolan (Royal Institute of Technology, Stockholm, Sweden). - missing/inet_pton.c, Copyright (c) 1995, 1996, 1997 Kungliga Tekniska Högskolan (Royal Institute of Technology, Stockholm, Sweden). Current upstream maintainers: Bill Fenner Fulvio Risso Guy Harris Hannes Gredler Jun-ichiro itojun Hagino Michael Richardson Additional people who have contributed patches: Alan Bawden Alexey Kuznetsov Albert Chin Andrew Brown Antti Kantee Arkadiusz Miskiewicz Armando L. Caro Jr. Assar Westerlund Brian Ginsbach Charles M. Hannum Chris G. Demetriou Chris Pepper Darren Reed David Kaelbling David Young Don Ebright Eric Anderson Franz Schaefer Gianluca Varenni Gisle Vanem Graeme Hewson Greg Stark Greg Troxel Guillaume Pelat Hyung Sik Yoon Igor Khristophorov Jan-Philip Velders Jason R. Thorpe Javier Achirica Jean Tourrilhes Jefferson Ogata Jesper Peterson John Bankier Jon Lindgren Juergen Schoenwaelder Kazushi Sugyo Klaus Klein Koryn Grant Krzysztof Halasa Lorenzo Cavallaro Loris Degioanni Love Hörnquist-Åstrand Maciej W. Rozycki Marcus Felipe Pereira Martin Husemann Mike Wiacek Monroe Williams Octavian Cerna Olaf Kirch Onno van der Linden Paul Mundt Pavel Kankovsky Peter Fales Peter Jeremy Phil Wood Rafal Maszkowski Rick Jones Scott Barron Scott Gifford Sebastian Krahmer Shaun Clowes Solomon Peachy Stefan Hudson Takashi Yamamoto Tony Li Torsten Landschoff Uns Lider Uwe Girlich Xianjie Zhang Yen Yen Lim Yoann Vandoorselaere The original LBL crew: Steve McCanne Craig Leres Van Jacobson debian/changelog0000664000000000000000000007373012265002730011051 0ustar tcpdump (4.5.1-2ubuntu1) trusty; urgency=medium * Resynchronize on Debian remaining differences: * debian/control: - Build-Depends on dh-apparmor. - Suggests apparmor * debian/README.Debian, debian/tcpdump.dirs, debian/usr.sbin.tcpdump, debian/patches/patches/90_man_apparmor.diff, debian/install, debian/rules: - Install enforcing AppArmor profile. -- Sebastien Bacher Mon, 13 Jan 2014 16:22:22 +0100 tcpdump (4.5.1-2) unstable; urgency=low * Disable nflog-e testcase, the NFLOG header length is specified in host byte order which makes capture files order-dependent (closes: #731031). -- Romain Francoise Sun, 01 Dec 2013 12:13:16 +0100 tcpdump (4.5.1-1) unstable; urgency=low * New upstream release. * Disable new pppoes testcase which uses a new pcap feature to avoid tying the two upstream versions together. * debian/control: Set Standards-Version to 3.9.5. -- Romain Francoise Sat, 30 Nov 2013 23:54:03 +0100 tcpdump (4.4.0-1ubuntu1) saucy; urgency=low * Resynchronize on Debian remaining differences: * debian/control: - Build-Depends on dh-apparmor. - Suggests apparmor * debian/README.Debian, debian/tcpdump.dirs, debian/usr.sbin.tcpdump, debian/patches/patches/90_man_apparmor.diff, debian/install, debian/rules: - Install enforcing AppArmor profile. -- Sebastien Bacher Wed, 29 May 2013 15:24:34 +0200 tcpdump (4.4.0-1) unstable; urgency=low * New upstream release: + Fixes format error in NTP printer (closes: #686276). + Rewords -e description (closes: #648768). * debian/control: Set Standards-Version to 3.9.4. * Use canonical locations in Vcs-* fields. -- Romain Francoise Sat, 25 May 2013 13:50:30 +0200 tcpdump (4.3.0-1ubuntu1) quantal; urgency=low * Merge from Debian unstable. Remaining changes: - Add enforcing AppArmor profile. - debian/control: Build-Depends on dh-apparmor. -- Logan Rosen Wed, 08 Aug 2012 20:06:38 -0400 tcpdump (4.3.0-1) unstable; urgency=low * New upstream release. * Re-enable test suite. -- Romain Francoise Wed, 13 Jun 2012 22:55:54 +0200 tcpdump (4.2.1-3) unstable; urgency=low * Fix CPPFLAGS handling in upstream configure.in to avoid losing hardening flags, patch by Simon Ruderich (closes: #662016). * Fix some misspellings pointed out by lintian. * debian/control: Set Standards-Version to 3.9.3. -- Romain Francoise Sat, 03 Mar 2012 17:11:48 +0100 tcpdump (4.2.1-2) unstable; urgency=low * Drop debian/patches/50_kfreebsd.diff (closes: #658848). -- Romain Francoise Mon, 06 Feb 2012 19:01:12 +0100 tcpdump (4.2.1-1ubuntu2) precise; urgency=low * debian/control: Build-Depends on dh-apparmor (LP: #948095) -- Jamie Strandboge Tue, 06 Mar 2012 09:18:56 -0600 tcpdump (4.2.1-1ubuntu1) precise; urgency=low * Resynchronise with Debian. Remaining changes (LP: #892285): - Add enforcing AppArmor profile. * Refreshed manpage patch to apply to new upstream. -- Stéphane Graber Wed, 04 Jan 2012 10:33:48 +0100 tcpdump (4.2.1-1) unstable; urgency=low * New upstream release. * Upload to unstable. -- Romain Francoise Mon, 02 Jan 2012 20:19:22 +0100 tcpdump (4.2.0~rc1-2) experimental; urgency=low * Make sure OpenSSL support gets enabled: since it moved to multiarch paths, the configure script doesn't find libcrypto.so and disables crypto support. To fix this, simplify detection logic in configure.in and run autoconf before configuring. * Redo build flags handling: + Enable hardening flags via dpkg-buildflags, not hardening-includes. + Switch to debhelper compat level 9 to have build flags exported automatically. + Adjust build-depends accordingly. * Enable parallel build in debhelper. -- Romain Francoise Sun, 06 Nov 2011 19:14:23 +0100 tcpdump (4.2.0~rc1-1) experimental; urgency=low * New upstream beta release (closes: #636806); now switches to the -Z user before opening the first output file (closes: #434603). * debian/control: Set Standards-Version to 3.9.2. -- Romain Francoise Sun, 14 Aug 2011 10:44:58 +0200 tcpdump (4.1.1-2ubuntu2) oneiric; urgency=low * debian/usr.sbin.tcpdump: - allow gzip and bzip2 (LP: #722856) - allow read and write to .pcap files - allow read of /var/log/snort/*log* files * debian/patches/90_man_apparmor.diff: update man page to reference AppArmor confinement -- Jamie Strandboge Wed, 22 Jun 2011 09:13:45 -0500 tcpdump (4.1.1-2ubuntu1) oneiric; urgency=low * Resynchronise with Debian. Remaining changes: - Add enforcing AppArmor profile. * Remove unnecessary debian/postinst and debian/postrm files; dh_installdeb will generate these itself. -- Colin Watson Thu, 26 May 2011 16:11:16 +0100 tcpdump (4.1.1-2) unstable; urgency=low * Fix FTBFS on GNU/Hurd; patch from Svante Signell (closes: #622287). * debian/control: Tweak short and long descriptions, set Standards-Version to 3.9.1. -- Romain Francoise Mon, 11 Apr 2011 22:37:29 +0200 tcpdump (4.1.1-1ubuntu4) oneiric; urgency=low * Rebuild for OpenSSL 1.0.0. -- Colin Watson Wed, 25 May 2011 22:43:20 +0100 tcpdump (4.1.1-1ubuntu3) natty; urgency=low * debian/usr.sbin.tcpdump: allow read access to /etc/ethers (LP: #660904) -- Jamie Strandboge Fri, 07 Jan 2011 12:56:05 -0600 tcpdump (4.1.1-1ubuntu2) maverick; urgency=low * debian/control: Build-Depends on debhelper >= 7.4.20ubuntu5 * debian/usr.sbin.tcpdump: include local override file * debian/rules, debian/postrm, debian/postinst: use dh_apparmor -- Jamie Strandboge Fri, 06 Aug 2010 12:46:37 -0500 tcpdump (4.1.1-1ubuntu1) maverick; urgency=low * Merge from debian unstable. Remaining changes: - add enforcing AppArmor profile: - create debian/usr.sbin.tcpdump - debian/control: suggest apparmor >= 2.3 - create debian/postrm: remove force-complain and disable links on purge - create debian/README.Debian: give information on AppArmor - create debian/postinst: reload tcpdump profile - create debian/install: install profile to /etc/apparmor.d - create debian/tcpdump.dirs: create etc/apparmor.d/force-complain -- Jamie Strandboge Tue, 22 Jun 2010 12:44:32 -0500 tcpdump (4.1.1-1) unstable; urgency=low * New upstream release (closes: #576001). * debian/rules: Disable dh_auto_test (for now). * debian/control: Set Standards-Version to 3.8.4. * debian/patches/30_uflag_flushopen.diff: New patch: when saving to a capture file with -U, flush the file immediately after opening it. Suggested by Ferenc Wagner (closes: #533625). * debian/patches/20_man_fixes.diff: Fix TCP flags description, thanks to Christophe Rhodes (closes: #575724). -- Romain Francoise Tue, 06 Apr 2010 19:58:14 +0200 tcpdump (4.0.0-6ubuntu4) maverick; urgency=low * debian/usr.sbin.tcpdump: - allow device probing (LP: #585150) - allow 'w' access to /dev/bus/usb/**/[0-9]*, needed for proper USB probing with libpcap 1.1 and higher -- Jamie Strandboge Thu, 10 Jun 2010 14:54:22 -0500 tcpdump (4.0.0-6ubuntu3) lucid; urgency=low * debian/usr.sbin.tcpdump: allow access for usbmon (LP: #523345) -- Jamie Strandboge Tue, 23 Mar 2010 14:31:59 -0500 tcpdump (4.0.0-6ubuntu2) lucid; urgency=low * clean up installation of apparmor profile. Thanks to Colin Watson for helping me diagnose the problem (LP: #504903) - debian/rules: remove 'binary' target - add debian/install -- Jamie Strandboge Fri, 08 Jan 2010 13:34:56 -0600 tcpdump (4.0.0-6ubuntu1) lucid; urgency=low * Merge from debian testing. Remaining changes: - add enforcing AppArmor profile - create debian/usr.sbin.tcpdump - debian/control: suggest apparmor >= 2.3 - debian/postrm: remove force-complain and disable links on purge - debian/rules: update 'binary' target to add profile - debian/README.Debian: give information on AppArmor - debian/postinst: reload tcpdump profile - debian/tcpdump.dirs: added back for AppArmor directories -- Jamie Strandboge Tue, 05 Jan 2010 08:21:25 -0600 tcpdump (4.0.0-6) unstable; urgency=low * debian/control: Build-depend on hardening-includes. * debian/rules: Use hardening.make. -- Romain Francoise Thu, 24 Dec 2009 11:51:12 +0100 tcpdump (4.0.0-5) unstable; urgency=low * Switch to 3.0 (quilt) source format: + Drop build-depends on quilt. + Remove patch/unpatch logic from debian/rules. + Remove README.source. + Refresh debian/patches/30_tcp_seq.diff. * Use dh(1): + debian/compat: Bump to 7. + debian/control: Build-depend on debhelper (>= 7.0.50~). + debian/rules: Simplify. + debian/tcpdump.dirs: Removed. -- Romain Francoise Sun, 08 Nov 2009 17:25:38 +0100 tcpdump (4.0.0-4ubuntu2) lucid; urgency=low * debian/usr.sbin.tcpdump: require 'owner' for file in @{HOME} -- Jamie Strandboge Fri, 04 Dec 2009 09:02:14 -0600 tcpdump (4.0.0-4ubuntu1) lucid; urgency=low * Merge from debian unstable (LP: #473236), remaining changes: - add enforcing apparmor profile - create debian/usr.sbin.tcpdump - debian/control: suggest apparmor >= 2.3 - debian/postinst: reload apparmor - debian/postrm: remove force-complain link - debian/tcpdump.install: add profile - debian/rules: install the profile - debian/README.Debian: give information on Apparmor - debian/postinst: reload individual tcpdump profile, not all of apparmor - debian/postrm: also remove any symlinks in the /etc/apparmor.d/disable directory on purge -- Nicolas Valcárcel Scerpella (Canonical) Tue, 03 Nov 2009 14:47:48 -0500 tcpdump (4.0.0-4) unstable; urgency=low * debian/control: + Add ${misc:Depends} to Depends. + Set Standards-Version to 3.8.3; no changes needed. * debian/{watch,README.source}: New files. * debian/copyright: Remove link to original file. -- Romain Francoise Thu, 08 Oct 2009 19:00:23 +0200 tcpdump (4.0.0-3) unstable; urgency=low * debian/patches/20_man_fixes.diff: Update; pcap-filter is in section 7, not 4 (closes: #527599). * debian/control: Set Standards-Version to 3.8.1. -- Romain Francoise Tue, 16 Jun 2009 11:51:14 +0200 tcpdump (4.0.0-2ubuntu2) karmic; urgency=low * debian/postinst: reload individual tcpdump profile, not all of apparmor (LP: #412749) * debian/postrm: also remove any symlinks in the /etc/apparmor.d/disable directory on purge -- Jamie Strandboge Wed, 12 Aug 2009 16:58:28 -0500 tcpdump (4.0.0-2ubuntu1) karmic; urgency=low * Merge from debian unstable, remaining changes: - add enforcing apparmor profile - create debian/usr.sbin.tcpdump - debian/control: suggest apparmor >= 2.3 - debian/postinst: reload apparmor - debian/postrm: remove force-complain link - debian/tcpdump.install: add profile - debian/rules: install the profile - debian/README.Debian: give information on Apparmor -- Jamie Strandboge Thu, 14 May 2009 12:58:52 -0500 tcpdump (4.0.0-2) unstable; urgency=low * debian/patches/30_tcp_seq.diff: Patch from Ilpo Järvinen adding back default display of sequence numbers in TCP printer (closes: #517661). * debian/patches/series: Update. -- Romain Francoise Sun, 01 Mar 2009 14:51:25 +0100 tcpdump (4.0.0-1) unstable; urgency=low * Upload to unstable. -- Romain Francoise Wed, 18 Feb 2009 18:55:35 +0100 tcpdump (4.0.0-1~exp1) experimental; urgency=low * New upstream release. * debian/control: Set Standards-Version to 3.8.0. * debian/rules: Don't set DH_VERBOSE. * debian/patches/15_install.diff: New patch, don't install two identical tcpdump binaries. -- Romain Francoise Sun, 30 Nov 2008 22:55:39 +0100 tcpdump (3.9.8-4ubuntu2) jaunty; urgency=low * debian/usr.sbin.tcpdump: use 'audit deny' instead of 'deny' (LP: #348592) -- Jamie Strandboge Wed, 25 Mar 2009 13:33:28 -0500 tcpdump (3.9.8-4ubuntu1) jaunty; urgency=low * add enforcing apparmor profile - create debian/usr.sbin.tcpdump - debian/control: suggest apparmor >= 2.3 - debian/postinst: reload apparmor - debian/postrm: remove force-complain link - debian/tcpdump.install: add profile - debian/rules: install the profile - debian/README.Debian: give information on Apparmor -- Jamie Strandboge Tue, 03 Feb 2009 01:54:34 +0100 tcpdump (3.9.8-4) unstable; urgency=low * debian/control: Build-Depend on libpcap0.8-dev (>= 0.9.3), not (>= 0.9.3-1). -- Romain Francoise Sat, 08 Mar 2008 19:24:02 +0100 tcpdump (3.9.8-3) unstable; urgency=low * debian/copyright: Convert to UTF-8 encoding. * debian/control: Set Standards-Version to 3.7.3, no changes needed. -- Romain Francoise Sun, 23 Dec 2007 14:32:17 +0100 tcpdump (3.9.8-2) unstable; urgency=low * debian/control: Add Vcs-Browser and Vcs-Git fields. * debian/patches/50_kfreebsd.diff: New patch by Petr Salinger fixing FTBFS on Debian GNU/kFreeBSD (closes: #448695). -- Romain Francoise Sat, 03 Nov 2007 11:12:53 +0100 tcpdump (3.9.8-1) unstable; urgency=low * New upstream release. -- Romain Francoise Thu, 27 Sep 2007 22:41:53 +0200 tcpdump (3.9.7-2) unstable; urgency=low * debian/control: Move upstream URL to the Homepage header. -- Romain Francoise Fri, 21 Sep 2007 19:48:05 +0200 tcpdump (3.9.7-1) unstable; urgency=low * New upstream release. * debian/patches/41_cve-2007-3798.diff: Deleted. * debian/patches/40_cve-2007-1218.diff: Deleted. * debian/patches/series: Update. -- Romain Francoise Sun, 12 Aug 2007 12:45:31 +0200 tcpdump (3.9.5-4) unstable; urgency=low * debian/rules: Don't ignore errors in clean target. * debian/patches/50_autotools-dev.diff: New patch, make config.{guess,sub} exec newer versions of themselves if autotools-dev is installed. * debian/patches/series: Update. * debian/control: Add build-depends on autotools-dev. -- Romain Francoise Sat, 11 Aug 2007 20:18:34 +0200 tcpdump (3.9.5-3) unstable; urgency=medium * Convert to quilt for patch management: + debian/control: Build-Depend on quilt (>= 0.40) instead of dpatch. + debian/rules: Include /usr/share/quilt/quilt.make. + Convert all dpatch patches to regular patches. * debian/patches/41_cve-2007-3798.diff: New patch, fixes an integer overflow in the BGP dissector (CVE-2007-3798), thanks to Daniel Leidert (closes: #434030). * debian/patches/series: Update. -- Romain Francoise Wed, 01 Aug 2007 19:56:04 +0200 tcpdump (3.9.5-2) unstable; urgency=medium * debian/patches/40_cve-2007-1218.dpatch: New patch, fixes a potential buffer overflow in the 802.11 printer (CVE-2007-1218), thanks to Moritz Muehlenhoff (closes: #413430). * debian/patches/00list: Update. -- Romain Francoise Mon, 5 Mar 2007 20:22:50 +0100 tcpdump (3.9.5-1) unstable; urgency=low * New upstream release. * debian/patches/20_man_fixes.dpatch: Resync. -- Romain Francoise Sat, 23 Sep 2006 21:13:07 +0200 tcpdump (3.9.4-4) unstable; urgency=low * debian/compat: Switch to debhelper compatibility level 5. * debian/control: + Build-Depend on debhelper (>= 5). + Remove Uploaders field. + Bump Standards-Version to 3.7.2, no changes needed. * debian/rules: Misc. cleanups. -- Romain Francoise Sat, 20 May 2006 13:07:45 +0200 tcpdump (3.9.4-3) unstable; urgency=low * debian/patches/20_man_fixes.dpatch: Merge patch from A Costa fixing a few typos (closes: #351014). -- Romain Francoise Thu, 2 Feb 2006 22:24:04 +0100 tcpdump (3.9.4-2) unstable; urgency=low * debian/patches/20_man_fixes.dpatch: Merge patch from A Costa fixing a few typos (closes: #342310). -- Romain Francoise Sat, 10 Dec 2005 14:26:20 +0100 tcpdump (3.9.4-1) unstable; urgency=low * New upstream release. * debian/patches/40_spelling.dpatch: Dropped (included upstream). * debian/patches/30_version.dpatch: Dropped. * debian/patches/30_vlan_eflag: New patch, reverse test for eflag in print-ether.c to match the intended effect (closes: #324706). * This upload also transitions tcpdump to OpenSSL 0.9.8. -- Romain Francoise Sun, 9 Oct 2005 20:11:49 +0200 tcpdump (3.9.3-2) unstable; urgency=low * debian/patches/40_spelling.dpatch: New patch, fixes spelling errors ("advertisment" vs. "advertisement"), thanks to Michael Shields (closes: #318676). * debian/patches/00list: Update. -- Romain Francoise Sun, 17 Jul 2005 12:28:22 +0200 tcpdump (3.9.3-1) unstable; urgency=low * New upstream release. * Build-Depend on libpcap0.8-dev (which is really libpcap 0.9.3). * debian/patches/30_ascii-output.dpatch: Dropped (merged upstream). * debian/patches/30_version: New patch, fixes upstream version (still at 3.9.2 while this is version 3.9.3). * debian/patches/00list: Update. -- Romain Francoise Sat, 16 Jul 2005 14:59:30 +0200 tcpdump (3.9.1-1) unstable; urgency=low * New upstream release. * debian/patches/30_ascii-output.dpatch: New patch, fixes -x, -X and -A priorities and removes extra newline and tab characters in the ascii output (closes: #285764, #316908). * debian/patches/00list: Update. -- Romain Francoise Wed, 6 Jul 2005 20:17:19 +0200 tcpdump (3.9.0.cvs.20050622-1) unstable; urgency=low * New CVS snapshot. * debian/control: Bump Standards-Version to 3.6.2.1, no changes needed. -- Romain Francoise Wed, 22 Jun 2005 19:52:31 +0200 tcpdump (3.9.0.cvs.20050614-1) unstable; urgency=low * New CVS snapshot. * Upload to unstable. -- Romain Francoise Tue, 14 Jun 2005 19:43:24 +0200 tcpdump (3.9.0.cvs.20050529-1) experimental; urgency=low * New upstream CVS snapshot for experimental. -- Romain Francoise Sun, 29 May 2005 12:55:31 +0200 tcpdump (3.9.0.cvs.20050511-1) experimental; urgency=low * Upstream CVS snapshot of tcpdump 3.9 for experimental. * debian/patches/20_man_fixes.dpatch: Resynchronized. * debian/patches/30_openssl_des.dpatch: Dropped (fixed upstream). * debian/patches/40_ipv6cp.dpatch: Ditto. * debian/patches/50_misc_dos.dpatch: Ditto. * debian/patches/00list: Update. * debian/control: Build with libpcap0.9, also in experimental. -- Romain Francoise Wed, 11 May 2005 20:00:31 +0200 tcpdump (3.8.3-5) unstable; urgency=low * debian/copyright: Clarify license conditions, some files in the distribution are still under the 4-clause BSD license (closes: #283008). * debian/changelog: Revise 3.8.3-4 entry to add CAN numbers (which have been assigned in the meantime). -- Romain Francoise Sun, 1 May 2005 17:23:45 +0200 tcpdump (3.8.3-4) unstable; urgency=high * Urgency set to high due to security fixes. * debian/patches/50_misc_dos.dpatch: Security fixes stolen from the 3.8 branch fix infinite loops in the BGP, ISIS, LDP and RSVP dissectors [CAN-2005-1278, CAN-2005-1279, CAN-2005-1280] (closes: #306529). * debian/patches/00list: Add 50_misc_dos. -- Romain Francoise Wed, 27 Apr 2005 21:05:37 +0200 tcpdump (3.8.3-3) unstable; urgency=low * debian/patches/40_ipv6cp.dpatch: New patch, do not try to print IPV6CP ppp packets, the dissector doesn't support it (closes: #255179). * debian/patches/00list: Add 40_ipv6cp. -- Romain Francoise Sat, 19 Jun 2004 15:01:27 +0200 tcpdump (3.8.3-2) unstable; urgency=low * debian/rules: Enable crypto support (closes: #82581, #93428). * debian/control: + Build-Depend on libssl-dev. + Put back URL markers in description. + Switch Maintainer and Uploaders fields to match reality. * debian/patches/30_openssl_des.dpatch: Patch to make upstream's configure script check for DES_cbc_encrypt instead of des_cbc_encrypt, (the function got renamed in OpenSSL 0.9.7), which saves us the hassle of re-running autoconf. Temporary hack since upstream has fixed this in CVS already. * debian/patches/00list: Add 30_openssl_des. -- Romain Francoise Fri, 14 May 2004 22:14:08 +0200 tcpdump (3.8.3-1) unstable; urgency=low * New upstream release. * debian/rules: + Add -D_FILE_OFFSET_BITS=64 to default CFLAGS to match libpcap (closes: #154762). + Use dpatch for patch management. + Clean up CFLAGS handling. + Support DEB_BUILD_OPTIONS. * debian/control: + Build-Depend on libpcap0.8-dev, dpatch. + Add versioned Build-Depends on debhelper. + Remove Emacs-style URL markers from description. * debian/compat: New file. * debian/copyright: Update. * debian/tcpdump.docs: Do not install upstream INSTALL file. * debian/patches: New directory. * debian/patches/10_man_install.dpatch: Patch split off the Debian diff to change man install paths in upstream Makefile.in. * debian/patches/20_man_fixes.dpatch: Patch split off the Debian diff to fix some inconsistencies in the upstream man page. * debian/patches/00list: New file (patch list). -- Romain Francoise Tue, 11 May 2004 14:02:09 +0200 tcpdump (3.7.2-4) unstable; urgency=high * Urgency high due to security fixes. * Backport changes from upstream CVS to fix ISAKMP payload handling denial-of-service vulnerabilities (CAN-2004-0183, CAN-2004-0184). Detailed changes (with corresponding upstream revisions): + Add length checks in isakmp_id_print() (print-isakmp.c, rev. 1.47) + Add data checks all over the place, change rawprint() prototype and add corresponding return value checks (print-isakmp.c, rev. 1.46) + Add missing ntohs() and change length initialization in isakmp_id_print(), not porting prototype changes (print-isakmp.c, rev. 1.45) -- Romain Francoise Tue, 6 Apr 2004 19:39:24 +0200 tcpdump (3.7.2-3) unstable; urgency=low * Backport changes from upstream CVS to fix several vulnerabilities in ISAKMP, L2TP and Radius parsing (closes: #227844, #227845, #227846). -- Romain Francoise Sat, 17 Jan 2004 14:12:30 +0100 tcpdump (3.7.2-2) unstable; urgency=low * Acknowledge NMU by Romain (closes: #208543). * Apply man page fixes by Romain: + networks(4) changed to networks(5) (closes: #194180). + ethers(3N) changed to ethers(5) (closes: #197888). * debian/control: Added Romain Francoise as co maintainer. Thanks for your help, Romain! -- Torsten Landschoff Sun, 19 Oct 2003 04:12:31 +0200 tcpdump (3.7.2-1.1) unstable; urgency=low * NMU * Reverse order of #include directives in print-sctp.c so that IPPROTO_SCTP is defined (closes: #208543). -- Romain Francoise Sun, 12 Oct 2003 17:06:01 +0200 tcpdump (3.7.2-1) unstable; urgency=low * New upstream release (closes: #195816). -- Torsten Landschoff Sun, 8 Jun 2003 00:14:44 +0200 tcpdump (3.7.1-1.2) unstable; urgency=high * Non-maintainer upload * Apply security fixes from 3.7.2 - Fixed infinite loop when parsing malformed isakmp packets. (CAN-2003-0108) - Fixed infinite loop when parsing malformed BGP packets. - Fixed buffer overflow with certain malformed NFS packets. -- Matt Zimmerman Thu, 27 Feb 2003 11:00:32 -0500 tcpdump (3.7.1-1.1) unstable; urgency=low * NMU * Simple rebuild to deal with libpcap0->libpcap0.7 transition. Sourceful NMU so that every arch rebuilds it. -- LaMont Jones Wed, 14 Aug 2002 21:25:45 -0600 tcpdump (3.7.1-1) unstable; urgency=low * New upstream release (closes: #138052). -- Torsten Landschoff Sat, 3 Aug 2002 23:54:04 +0200 tcpdump (3.6.2-2) unstable; urgency=HIGH * print-rx.c: Take the version from current CVS fixing the remote buffer overflow reported in FreeBSD Security Advisory SA-01:48 yesterday. Thanks to Matt Zimmerman for forwarding the report, I might have missed it. * debian/control: Clean the Build-Depends from build-essential packages. -- Torsten Landschoff Thu, 19 Jul 2001 15:03:48 +0200 tcpdump (3.6.2-1) unstable; urgency=low * New upstream release. -- Torsten Landschoff Tue, 6 Mar 2001 04:18:16 +0100 tcpdump (3.6.1-2) unstable; urgency=low * debian/rules: Force support for IPv6 (closes: #82665). * print-icmp6.c: Removed duplicate definition also in icmp6.h to get the package to compile with IPv6. * Rebuild should fix the missing libpcap0-dependency (closes: #82666). Additional info: The missing dependency was because the configure script found my libpcap sources in the parent directory. Black magic always works against you :( -- Torsten Landschoff Thu, 18 Jan 2001 00:44:01 +0100 tcpdump (3.6.1-1) unstable; urgency=high * Taking back the package. Kudos to Anand for his help. * New upstream release. This release fixes a security hole in print-rx.c. * debian/rules: Disable crypto support (closes: #81969). * Removed empty README.Debian (closes: #81966). -- Torsten Landschoff Tue, 16 Jan 2001 16:04:03 +0100 tcpdump (3.5.2-3) unstable; urgency=low * Fixup dependancy stuff. Sheesh. (Closes: #78063, #78081, #78082) -- Anand Kumria Tue, 28 Nov 2000 02:16:01 +1100 tcpdump (3.5.2-2) unstable; urgency=low * Update both config.guess and config.sub (Closes: #36692, #53145) * Opps, make the .diff available. * We require a particular libpcap version to work (Closes: #77877) -- Anand Kumria Mon, 27 Nov 2000 01:13:55 +1100 tcpdump (3.5.2-1) unstable; urgency=low * New Maintainer * New upstream release (Closes: #75889) * Upstream added hex dump (-x) and ascii dump (-X) Closes: #23514, #29418) * Acknowledge and incorporate security fixes (Closes: #63708, #77489) * Appletalk / Ethertalk patches are in (Closes: #67642) -- Anand Kumria Wed, 22 Nov 2000 13:19:33 +1100 tcpdump (3.4a6-4.1) frozen unstable; urgency=high * Non-maintainer upload by security team * Apply patch from tcpdump-workers mailinglist to fix DNS DoS attack against tcpdump. Based on patch from Guy Harris as found on http://www.tcpdump.org/lists/workers/1999/msg00607.html * Fix Build-Depends entry in debian/control -- Wichert Akkerman Sun, 7 May 2000 15:17:33 +0200 tcpdump (3.4a6-4) unstable; urgency=low * New maintainer. * tcpdump.c (main): Reestablish priviliges before closing the device (closes: #19959). * It seems the problem with ppp came from the kernel - I can dump packages on ppp0 just fine... (closes: #25757) * print-tcp.c (tcp_print): Applied patch from David S. Miller submitted by Andrea Arcangeli to fix tcpdump sack TCP option interpretation (closes: #28530). * print-bootp.c (rfc1048_print): Interpret timezone offset as signed (closes: #40376). Fixed byte order problem in printing internet addresses (closes: #40375). Thanks to Roderick Schertler for the patch. * Several files: Applied SMB patch from samba.org (closes: #27653). * print-ip.c (ip_print): Check for ip headers with less than 5 longs. Patch taken from RedHat's source package. * Redid debian/rules using debhelper. * Makefile.in: Install the manpage into man8 instead of man1. * tcpdump.1: Moved to section 8 (admin commands). * print-smb.c (print_smb): Disabled anything but printing the command info by default. Otherwise we would get flooded with smb information. You can get all info using -vvv. Two -v's will give you the SMB headers. * tcpdump.1: Documented the behaviour described above. -- Torsten Landschoff Mon, 22 Nov 1999 01:31:44 +0100 tcpdump (3.4a6-3) frozen unstable; urgency=low * fixed permissions -- Peter Tobias Mon, 30 Mar 1998 02:28:39 +0200 tcpdump (3.4a6-2) frozen unstable; urgency=low * rebuild with latest debmake, fixes #19415 (should also fix the lintian warnings) * updated standards-version -- Peter Tobias Mon, 30 Mar 1998 00:28:39 +0200 tcpdump (3.4a6-1) unstable; urgency=low * updated to latest upstream version, fixes: Bug#17163 * install changelog.Debian compressed, fixes: Bug#15417 -- Peter Tobias Sun, 1 Feb 1998 00:08:31 +0100 tcpdump (3.4a4-1) unstable; urgency=low * updated to latest upstream version * libc6 version -- Peter Tobias Wed, 17 Sep 1997 23:22:54 +0200 tcpdump (3.3.1a2-1) frozen stable unstable; urgency=medium * updated to latest upstream version (works with new libpcap now) -- Peter Tobias Sat, 24 May 1997 00:49:17 +0200 tcpdump (3.3-2) unstable; urgency=low * fixed SLIP support -- Peter Tobias Sun, 16 Feb 1997 21:06:51 +0100 tcpdump (3.3-1) unstable; urgency=low * updated to latest upstream version -- Peter Tobias Thu, 16 Jan 1997 01:34:00 +0100 debian/rules0000775000000000000000000000052712265002555010256 0ustar #!/usr/bin/make -f export DEB_BUILD_MAINT_OPTIONS = hardening=+all export DEB_CFLAGS_MAINT_APPEND = -D_FILE_OFFSET_BITS=64 %: dh $@ --parallel override_dh_auto_configure: autoconf --force ./configure --prefix=/usr --enable-ipv6 --with-crypto override_dh_installdeb: dh_apparmor --profile-name=usr.sbin.tcpdump -ptcpdump dh_installdeb debian/tcpdump.dirs0000664000000000000000000000003612265002427011526 0ustar etc/apparmor.d/force-complain debian/source/0000775000000000000000000000000012246464651010502 5ustar debian/source/format0000664000000000000000000000001412246464651011710 0ustar 3.0 (quilt) debian/source/lintian-overrides0000664000000000000000000000006212246464651014061 0ustar package-needs-versioned-debhelper-build-depends 9 debian/control0000664000000000000000000000230512265002735010575 0ustar Source: tcpdump Section: net Priority: optional Maintainer: Ubuntu Developers XSBC-Original-Maintainer: Romain Francoise Build-Depends: dpkg-dev (>= 1.16.1~), debhelper (>= 8.9.4~), libpcap0.8-dev (>= 0.9.3), libssl-dev, autotools-dev, autoconf, dh-apparmor, Standards-Version: 3.9.5 Homepage: http://www.tcpdump.org/ Vcs-Browser: http://anonscm.debian.org/gitweb/?p=users/rfrancoise/tcpdump.git Vcs-Git: git://anonscm.debian.org/users/rfrancoise/tcpdump.git Package: tcpdump Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Suggests: apparmor (>= 2.3) Description: command-line network traffic analyzer This program allows you to dump the traffic on a network. tcpdump is able to examine IPv4, ICMPv4, IPv6, ICMPv6, UDP, TCP, SNMP, AFS BGP, RIP, PIM, DVMRP, IGMP, SMB, OSPF, NFS and many other packet types. . It can be used to print out the headers of packets on a network interface, filter packets that match a certain expression. You can use this tool to track down network problems, to detect attacks or to monitor network activities. debian/install0000664000000000000000000000004712265002505010557 0ustar debian/usr.sbin.tcpdump etc/apparmor.d debian/compat0000664000000000000000000000000212246464651010400 0ustar 9 debian/watch0000664000000000000000000000010212246464651010224 0ustar version=3 http://www.tcpdump.org release/tcpdump-([\d\.]*).tar.gz debian/tcpdump.examples0000664000000000000000000000005712246464651012420 0ustar atime.awk packetdat.awk send-ack.awk stime.awk debian/patches/0000775000000000000000000000000012265002467010623 5ustar debian/patches/90_man_apparmor.diff0000664000000000000000000000246012265002467014443 0ustar Author: Jamie Strandboge Description: Update man page to make AppArmor confinement more discoverable Forwarded: no (Ubuntu-specific) === modified file 'tcpdump.1.in' Index: tcpdump-4.5.1/tcpdump.1.in =================================================================== --- tcpdump-4.5.1.orig/tcpdump.1.in 2014-01-13 16:24:35.241569631 +0100 +++ tcpdump-4.5.1/tcpdump.1.in 2014-01-13 16:24:35.233569631 +0100 @@ -136,7 +136,11 @@ analysis, and/or with the .B \-r flag, which causes it to read from a saved packet file rather than to -read packets from a network interface. It can also be run with the +read packets from a network interface (please note \fItcpdump\fP is +protected via an enforcing +.BR apparmor (7) +profile in Ubuntu which limits the files \fItcpdump\fP may access). +It can also be run with the .B \-V flag, which causes it to read a list of saved packet files. In all cases, only packets that match @@ -1757,7 +1761,7 @@ serviced the `new packet' interrupt. .SH "SEE ALSO" stty(1), pcap(3PCAP), bpf(4), nit(4P), pcap-savefile(@MAN_FILE_FORMATS@), -pcap-filter(@MAN_MISC_INFO@), pcap-tstamp-type(@MAN_MISC_INFO@) +pcap-filter(@MAN_MISC_INFO@), pcap-tstamp-type(@MAN_MISC_INFO@), apparmor(7) .LP .RS .I http://www.iana.org/assignments/media-types/application/vnd.tcpdump.pcap debian/patches/15_install.diff0000664000000000000000000000107512246464651013441 0ustar Don't install a versioned binary. --- Makefile.in | 1 - 1 file changed, 1 deletion(-) --- a/Makefile.in +++ b/Makefile.in @@ -406,7 +406,6 @@ [ -d $(DESTDIR)$(sbindir) ] || \ (mkdir -p $(DESTDIR)$(sbindir); chmod 755 $(DESTDIR)$(sbindir)) $(INSTALL_PROGRAM) $(PROG) $(DESTDIR)$(sbindir)/$(PROG) - $(INSTALL_PROGRAM) $(PROG) $(DESTDIR)$(sbindir)/$(PROG).`cat ${srcdir}/VERSION` [ -d $(DESTDIR)$(mandir)/man8 ] || \ (mkdir -p $(DESTDIR)$(mandir)/man8; chmod 755 $(DESTDIR)$(mandir)/man8) $(INSTALL_DATA) $(PROG).1 $(DESTDIR)$(mandir)/man8/$(PROG).8 debian/patches/00_failing_tests.diff0000664000000000000000000000143412246614060014606 0ustar Disable failing tests: * pppoes_id requires libpcap >= 4.5 * nflog-e requires little-endian build host --- a/tests/TESTLIST +++ b/tests/TESTLIST @@ -86,7 +86,7 @@ # PPPoE tests pppoe pppoe.pcap pppoe.out -t pppoes pppoes.pcap pppoes.out -t -pppoes_id pppoes.pcap pppoes_id.out -t pppoes 0x3b +#pppoes_id pppoes.pcap pppoes_id.out -t pppoes 0x3b # IGMP tests igmpv3-queries igmpv3-queries.pcap igmpv3-queries.out -t @@ -156,7 +156,7 @@ geonet-calm-fast geonet_and_calm_fast.pcap geonet_and_calm_fast.out -t -vv -n # NFLOG test case -nflog-e nflog.pcap nflog-e.out -t -e +#nflog-e nflog.pcap nflog-e.out -t -e # syslog test case syslog-v syslog_udp.pcap syslog-v.out -t -v debian/patches/series0000664000000000000000000000020412265002460012025 0ustar 00_failing_tests.diff 10_man_install.diff 15_install.diff 20_man_fixes.diff 50_hurd.diff 50_autotools-dev.diff 90_man_apparmor.diff debian/patches/20_man_fixes.diff0000664000000000000000000000067512246464651013745 0ustar Misc. fixes to the upstream man page. --- tcpdump.1.in | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) --- a/tcpdump.1.in +++ b/tcpdump.1.in @@ -22,7 +22,7 @@ .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. .\" -.TH TCPDUMP 1 "12 July 2012" +.TH TCPDUMP 8 "12 July 2012" .SH NAME tcpdump \- dump traffic on a network .SH SYNOPSIS debian/patches/50_hurd.diff0000664000000000000000000000064612246464651012737 0ustar Support build on GNU/Hurd; from Svante Signell. --- tcpdump-stdinc.h | 4 ++++ 1 file changed, 4 insertions(+) --- a/tcpdump-stdinc.h +++ b/tcpdump-stdinc.h @@ -117,7 +117,11 @@ #ifdef HAVE_SYS_BITYPES_H #include #endif +#ifndef __GNU__ #include +#else +#include +#endif #include /* concession to AIX */ #include #include debian/patches/50_autotools-dev.diff0000664000000000000000000000152012246464651014572 0ustar Use canonical versions of config.{guess,sub} instead of upstream's. --- config.guess | 5 +++++ config.sub | 5 +++++ 2 files changed, 10 insertions(+) --- a/config.guess +++ b/config.guess @@ -1,4 +1,9 @@ #! /bin/sh + +if [ -x /usr/share/misc/config.guess ]; then + exec /usr/share/misc/config.guess "$@" +fi + # Attempt to guess a canonical system name. # Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, # 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 --- a/config.sub +++ b/config.sub @@ -1,4 +1,9 @@ #! /bin/sh + +if [ -x /usr/share/misc/config.sub ]; then + exec /usr/share/misc/config.sub "$@" +fi + # Configuration validation subroutine script. # Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, # 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 debian/patches/10_man_install.diff0000664000000000000000000000164512246464651014272 0ustar Change man page install paths for Debian. --- Makefile.in | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) --- a/Makefile.in +++ b/Makefile.in @@ -407,13 +407,13 @@ (mkdir -p $(DESTDIR)$(sbindir); chmod 755 $(DESTDIR)$(sbindir)) $(INSTALL_PROGRAM) $(PROG) $(DESTDIR)$(sbindir)/$(PROG) $(INSTALL_PROGRAM) $(PROG) $(DESTDIR)$(sbindir)/$(PROG).`cat ${srcdir}/VERSION` - [ -d $(DESTDIR)$(mandir)/man1 ] || \ - (mkdir -p $(DESTDIR)$(mandir)/man1; chmod 755 $(DESTDIR)$(mandir)/man1) - $(INSTALL_DATA) $(PROG).1 $(DESTDIR)$(mandir)/man1/$(PROG).1 + [ -d $(DESTDIR)$(mandir)/man8 ] || \ + (mkdir -p $(DESTDIR)$(mandir)/man8; chmod 755 $(DESTDIR)$(mandir)/man8) + $(INSTALL_DATA) $(PROG).1 $(DESTDIR)$(mandir)/man8/$(PROG).8 uninstall: rm -f $(DESTDIR)$(sbindir)/$(PROG) - rm -f $(DESTDIR)$(mandir)/man1/$(PROG).1 + rm -f $(DESTDIR)$(mandir)/man8/$(PROG).8 lint: $(GENSRC) lint -hbxn $(SRC) | \ debian/usr.sbin.tcpdump0000664000000000000000000000261212265002365012333 0ustar # vim:syntax=apparmor # Last Modified: Wed Feb 3 07:58:30 2009 # Author: Jamie Strandboge #include /usr/sbin/tcpdump { #include #include #include capability net_raw, capability setuid, capability setgid, capability dac_override, network raw, network packet, # for -D capability sys_module, @{PROC}/bus/usb/ r, @{PROC}/bus/usb/** r, # for finding an interface @{PROC}/[0-9]*/net/dev r, /sys/bus/usb/devices/ r, /sys/class/net/ r, /sys/devices/**/net/* r, # for tracing USB bus, which libpcap supports /dev/usbmon* r, /dev/bus/usb/ r, /dev/bus/usb/** r, # for init_etherarray(), with -e /etc/ethers r, # for USB probing (see libpcap-1.1.x/pcap-usb-linux.c:probe_devices()) /dev/bus/usb/**/[0-9]* w, # for -z /bin/gzip ixr, /bin/bzip2 ixr, # for -F and -w audit deny @{HOME}/.* mrwkl, audit deny @{HOME}/.*/ rw, audit deny @{HOME}/.*/** mrwkl, audit deny @{HOME}/bin/ rw, audit deny @{HOME}/bin/** mrwkl, owner @{HOME}/ r, owner @{HOME}/** rw, # for -r, -F and -w /**.[pP][cC][aA][pP] rw, # for convenience with -r (ie, read pcap files from other sources) /var/log/snort/*log* r, /usr/sbin/tcpdump r, # Site-specific additions and overrides. See local/README for details. #include }