A cleaned up fork of ngrep for OpenBSD
git clone git://
Log | Files | Refs | README | LICENSE

DateCommit messageAuthorFiles+-
2020-09-19 07:25Fix timestamp print due to nonstandard bpf_timevalStuart Henderson1+4-2
2020-09-19 07:18reorder getopt switch casesStephen Gregoratto1+3-3
2020-09-17 01:40Make process match the form of pcap_handlerStephen Gregoratto2+24-24
2020-09-17 01:24Make packet buffer timeout a ppc constantStephen Gregoratto2+3-2
2020-09-17 01:21Make frame/match counters size_tStephen Gregoratto1+7-6
2020-09-17 01:20replace stop i32 with length check conditionalStephen Gregoratto1+2-3
2020-09-16 10:53Make dump_(unwrapped|byline) one functionStephen Gregoratto2+31-40
2020-09-16 06:27Rework highlighting codeStephen Gregoratto3+54-57
2020-09-16 06:26seperate arpa headerStephen Gregoratto1+1-0
2020-09-16 04:56replace all unsigned char types to uint8_tStephen Gregoratto2+45-52
2020-09-16 04:37process: bool fragmented flagStephen Gregoratto2+10-12
2020-09-16 04:15clean up case statements and add fallthroughsStephen Gregoratto1+1-2
2020-09-16 04:08simplify packet offset mathStephen Gregoratto1+21-20
2020-09-15 09:43add objects/tags to gitignoreStephen Gregoratto1+3-0
2020-09-15 08:32remove lingering function decl from headerStephen Gregoratto1+0-2
2020-09-15 08:30begin the boolification, mwahahah!Stephen Gregoratto2+79-79
2020-09-15 07:50drop ethertypes.h for if_ether.h, seperate headersStephen Gregoratto1+2-1
2020-09-15 07:48replace custom rtaphdr_t with base radiotap_headerStephen Gregoratto2+5-8
2020-09-15 07:20tweak manpage wording on highlights/packet displayStephen Gregoratto1+2-5
2020-09-15 07:16typo fixStephen Gregoratto1+1-1
2020-07-01 00:36bin_match_func: Replace rolling memcmp with memmemStephen Gregoratto1+9-10
2020-06-25 07:02Reformat sources again with clang-formatStephen Gregoratto2+215-202
2020-06-24 11:42Re-enable data highlighting for regexesStephen Gregoratto2+11-21
2020-06-24 10:59Properly check pcap return vals, drop pcap_lookupdevStephen Gregoratto1+28-13
2020-06-24 10:29Fix printing the "0x" prefix when using regexesStephen Gregoratto1+3-3
2020-06-24 10:22Drop netident_t and set ident char in dump_packetStephen Gregoratto2+6-17
2020-06-24 10:14Remove a couple casts and fix formattingStephen Gregoratto1+63-45
2020-06-24 06:58Silence prototype warningsStephen Gregoratto2+24-15
2020-06-24 06:11Rewrite Makefile in BSD formStephen Gregoratto1+12-18
2020-06-24 05:30Tweak manpage, re-enable higlighting mode optionStephen Gregoratto2+13-4
2020-06-23 10:53Remove tcpkill clause in LICENCEStephen Gregoratto1+0-31
2020-06-23 10:24Split setup_matcher() into two, rewrite hex conversionStephen Gregoratto2+125-74
2020-06-21 13:02Fix expressions not being matched due to e9f2f7eStephen Gregoratto1+21-15
2020-06-17 05:15Sync usage text with manpageStephen Gregoratto1+4-36
2020-06-17 04:59Rewrite manpage in mdoc(7), remove bpf explanationStephen Gregoratto1+254-508
2020-06-17 03:30Fix clean_exit to exit with the proper codeStephen Gregoratto2+34-27
2020-06-17 03:15Axe remaining version func prototypeStephen Gregoratto1+0-1
2020-06-17 03:05Overhaul the bpf filter setup stage, unveil earlyStephen Gregoratto2+102-95
2020-06-16 10:20Re-enable priv dropping and unveil filesStephen Gregoratto3+63-32
2020-06-14 13:38Remove unused headers and sortStephen Gregoratto1+6-7
2020-06-14 12:33sort option handling alphabeticallyStephen Gregoratto1+70-70
2020-06-14 12:21Replace _atoui32 macro with strtonumStephen Gregoratto2+17-12
2020-06-14 12:01add todoStephen Gregoratto1+5-0
2020-06-14 11:43move len checks from the dump_funcs to the callerStephen Gregoratto1+67-74
2020-06-14 11:19Replace all error reporting with the err(3) familyStephen Gregoratto1+23-20
2020-06-14 10:13Start work on reformatting sources in KNFStephen Gregoratto2+1120-1090
2020-06-14 08:22Remove locale settingStephen Gregoratto1+0-10
2020-06-14 08:18Clean headers using include-what-you-useStephen Gregoratto1+6-6
2020-06-14 07:21Remove unused tcpkill functionsStephen Gregoratto2+0-94
2020-06-14 07:15Remove all autotools and GNU regex library filesStephen Gregoratto23+21-18179
2020-06-14 06:55Remove portability parts for initial build.Stephen Gregoratto10+23-1097
2020-06-14 07:46Update license so future changes are under the ISCStephen Gregoratto4+78-58
2019-01-28 19:07Merge pull request #19 from h3xx/fix-pathsJordan Ritter1+4-4
2018-01-01 17:46Merge pull request #11 from rfrancoise/configures-fixesJordan Ritter1+2-2
2017-09-08 14:54Fix another doc goofJordan Ritter1+1-2
2017-09-07 21:28Fix doc goofJordan Ritter1+1-1
2017-09-07 21:23Version bump for unreleased changesJordan Ritter1+1-1
2017-09-07 21:21Version bump for releaseJordan Ritter1+1-1
2017-09-07 18:01Update, simplify, and markdown-ify docsJordan Ritter9+840-535
2017-09-07 20:33Allow VLAN hack to be disabled at compileJordan Ritter4+51-1
2017-09-07 20:28Fix configure --enable-* logicJordan Ritter2+56-32
2017-09-07 00:27Fallback fix for VLAN & related problemsJordan Ritter2+161-133
2017-09-06 22:56Always count matches, and emit total upon exitJordan Ritter1+8-9
2017-09-06 23:30Modify exit behavior to match BSD/GNU grepJordan Ritter3+45-36
2017-09-06 23:13Emit frame # in header when not in single modeJordan Ritter1+4-1
2017-09-06 21:28Add support for Solaris IPnetJordan Ritter5+64-1
2017-09-06 20:44Fix pcap datalink bug introducd with VLAN changesJordan Ritter2+89-77
2017-09-06 19:20Hackfix broken clean targets when using system PCREJordan Ritter1+2-2
2017-09-06 18:36Doc updates for new versionJordan Ritter4+23-8
2017-09-06 18:35docs: regex speed test no longer relevantJordan Ritter1+0-57
2017-09-06 17:36Import Debian patch to compile on kFreeBSD and HURDJordan Ritter1+1-1
2017-09-06 17:34Import Debian manpage patch, and update date to reflectJordan Ritter1+8-8
2017-09-06 17:31Import Debian autotools patch: use system's if presentJordan Ritter2+10-0
2017-09-06 17:28Update to latest autotools config.*Jordan Ritter2+1784-1685
2017-09-06 17:27Update CopyrightJordan Ritter7+7-7
2016-03-09 19:59Reduce searchable space when vlan header presentJordan Ritter1+1-1
2015-09-14 05:01Updates for `tcpkill_kill()` to support 32-bit values for `kill_count`Joshua Piccari3+5-6
2015-07-08 20:29Expand integer range for various options to 32-bits -- closes #3David Haguenauer2+14-7
2015-09-03 16:33Adds required libnet check to enable tcpkillJordan Ritter2+48-0
2015-09-03 16:29Adds missing USE_TCPKILL entryJordan Ritter1+1-1
2014-07-24 16:42Version bump for unreleased changesJordan Ritter1+1-1
2014-07-24 16:28Update VS2012 configuration, builds on Win32 againJordan Ritter6+138-205
2014-07-23 20:59Doc updates for version, github issues locationJordan Ritter4+19-22
2014-07-23 20:59Version bump for releaseJordan Ritter3+11-3
2014-07-23 20:49Actual confirmed bugfix for VLAN parsing issue.Jordan Ritter2+34-17
2014-07-19 00:41Avert warnings: cast malloc retvalJordan Ritter1+2-2
2014-07-17 20:55Version bump for releaseJordan Ritter1+1-1
2014-06-13 20:46Automatically include VLAN traffic if presentJordan Ritter1+21-2
2014-06-13 20:45Emit the active BPF filter when reading PCAP dumpsJordan Ritter1+2-2
2014-06-13 20:23Emit PCAP library version along with ngrep versionJordan Ritter1+1-1
2014-06-12 20:48Convert all output to AC_MSG_ macros, & minor formatting cleanupsJordan Ritter2+130-90
2014-05-22 19:42Invert BPF lexer restart default - don't unless specifiedJordan Ritter2+210-293
2014-05-22 17:22Re-organize some compile flags and get HAVE_CONFIG_H backJordan Ritter2+11-7
2014-05-22 20:56Nuke old CVS Id referencesJordan Ritter12+3-33
2014-05-21 23:51Documentation updatesJordan Ritter4+77-54
2014-05-21 23:51Nuke included PCRE 7.4 library, deferring to system versionJordan Ritter83+0-84961
2014-05-21 23:33Add tcpkill/dsniff (-K), a downstream patch from DebianJordan Ritter7+204-20
2014-05-21 23:20Autoconf updates & sync with long-standing downstream config forksJordan Ritter3+2372-2617
2014-05-21 23:00Fix gcc'en complaints about using non-literals as formatstrJordan Ritter1+8-8
2014-05-21 22:55Update autoconf stuffJordan Ritter2+601-526
2014-05-21 22:52Update copyrightsJordan Ritter7+9-9
2014-02-21 18:22Call setlocale to make isprint() work based on current localeJordan Ritter1+3-1
2008-01-31 18:09fix for bug #1883408: call pcap_loop() with a -1 count, not 0.Jordan Ritter1+1-1
2007-12-04 07:59fixed bug in hiliting mechanism: when using non-standard dump method (-W) without a specific match term, hiliting would bleed the entire terminal.Jordan Ritter1+20-23
2007-12-04 02:20potential fix for bug #1787433: VLAN support. by moving our "(ip...)" filter to the end instead of the beginning, we make it possible for users to specify any vlan logic in their bpf filter and have everything still work (bpf requires vlan be ordered first in the filter)Jordan Ritter1+3-2
2007-12-04 02:16potential fix for bug #1787433: VLAN supportJordan Ritter1+18-4
2007-12-03 11:42moved ``shared''->``sys'' (better match to ``int'' for --with-regex-impl)Jordan Ritter2+12-23
2007-12-03 11:30an attempt at solving some weird utf-8 issue (but not fixed yet)Jordan Ritter1+7-1
2007-12-03 11:17nuke pcre-5.0Jordan Ritter43+0-65008
2007-12-03 11:11upgraded compile logic for pcre-7.4Jordan Ritter3+91-75
2007-12-03 11:00import of PCRE 7.4, sans docs and testdataJordan Ritter83+84961-0
2007-12-03 09:00updated for changesJordan Ritter1+2690-2071
2007-12-03 08:59re-wrote a bit of the Makefile to make proper (standard) use of CPPFLAGS, CFLAGS, etc. so, the Makefile should now behave a lot more consistently with the expectations the configure script sets forth for overriding certain paths, etc.Jordan Ritter1+13-14
2007-12-03 08:58updated with: (1) remove HAVE_DUMB_UDPHDR stuff (2) added support for system-supplied regex libs (3) re-organized a little bit more to clean upJordan Ritter1+135-121
2007-12-03 08:55updated manpage for latest date (in prep for release)Jordan Ritter1+1-1
2007-12-03 08:55remove HAVE_DUMB_UDPHDR stuffJordan Ritter1+0-2
2007-12-03 08:54updates to fix compiler warnings about type incompatibilities (again!) and support for using system-supplied versions of the regex libJordan Ritter1+10-12
2007-06-19 10:12Fix for bug #1738953: why would I subtract the payload's length from a variable that is supposed to describe exactly that?? Removed ip6_plen from TCP, UDP and ICMPv6 calculations.Jordan Ritter1+1-11
2007-04-12 05:31commit latest versionsJordan Ritter2+1791-2548
2007-04-12 05:29add support for OpenBSD's PFLOG packet capture type (patch #1696074), and fix an aesthetic bug whereby the configure script would say it was searching for specific DLT_ types within "bpf.h", when in fact the file might be named differently (misleading)Jordan Ritter1+23-10
2007-04-12 05:28add support for OpenBSD's PFLOG packet capture type (patch #1696074)Jordan Ritter3+8-0
2007-02-15 02:15updated with additional -T invocationJordan Ritter1+1-0
2007-01-25 05:42updated with latest patch additionJordan Ritter1+4-0
2007-01-25 05:36merge in requested functionality and docs for time-diff-since-first-match, and updated copyright noticeJordan Ritter3+38-9
2007-01-25 05:34updated copyright to 2007Jordan Ritter4+4-4
2007-01-25 05:33updated with latest versions from gnu.orgJordan Ritter2+27-8
2006-12-14 00:19switched from -H to -C (original patch suggestion); seems to make more sense anyway given that some terms don't show bold as well as they do straight out color.Jordan Ritter1+6-6
2006-12-14 00:18changed version number to 1.46-CVS because color is a major feature-add, and changed the semantic for switching bold vs. hilite (only in code for now)Jordan Ritter1+5-2
2006-12-14 00:07eliminate gcc4 warning about unsigned char*/char* warning with re_search() callJordan Ritter1+1-1
2006-12-01 10:16more work around the hiliting stuff. wtf is the format for the GREP_COLOR envariable? lame manpages.Jordan Ritter2+17-8
2006-12-01 09:48initial experimental hiliting work (merge in awesome patch from Guohan Lu). seems to work well!Jordan Ritter2+88-20
2006-12-01 07:40call setlocale(LC_ALL, "") only on UNIX platforms -- on Win32, it sets the locale to the standard ANSI 8bit codepage which completely whacks out isprint().Jordan Ritter1+2-0
2006-12-01 07:25complete consistency for make invocation as $(MAKE)Jordan Ritter1+2-2
2006-12-01 07:04bump version, and adjustments for win32 changesJordan Ritter1+3-2
2006-12-01 07:03merge in portions of a Win32 patch from Adam Strzelecki: (1) use an /active/ network device by default (not just the first in the list) (2) enable the window-size functionalityJordan Ritter1+42-9
2006-12-01 05:54apply setlocale() patch from debian guys (hey guys can you pass that stuff along to me?)Jordan Ritter1+3-0
2006-11-29 05:38fix for bug #1604997: duplicate ngrep.8 entriesJordan Ritter1+0-15
2006-11-28 13:38update copyright notice and version informationJordan Ritter2+3-3
2006-11-28 13:38update libpcap/winpcap download locations and version informationJordan Ritter1+3-3
2006-11-28 13:37update version, date and supported platformsJordan Ritter1+2-1
2006-11-28 13:37updated with v1.45 changesJordan Ritter1+38-0
2006-11-28 13:36update copyright and date noticesJordan Ritter1+2-2
2006-11-28 13:36add missing copyright and license noticeJordan Ritter1+5-0
2006-11-28 13:35update copyright, improve packaging targetJordan Ritter1+4-2
2006-11-16 05:57revert #if/#endif guard around ws_* variable decls (for WIN32)Jordan Ritter1+3-3
2006-11-16 05:47updated by removing preprocessor defs and adding config.h file to list.Jordan Ritter1+165-162
2006-11-16 05:45in the WIN32 compile scenario, start including config.h (from the UNIX, instead of relying on's project settings to manage macros and #definesJordan Ritter1+1-0
2006-11-16 03:13instead of handling UNIX/GNU cpp macros directly in the vcproj files, just add the config.h(.in) into the win32 support, to make it more consistent with how the UNIX version is built, and to make values more easily tweaked/patched without needing to mess with project settings.Jordan Ritter1+23-0
2006-11-16 03:03update copyright dateJordan Ritter1+1-1
2006-11-15 03:44commit from updatesJordan Ritter1+2540-1751
2006-11-15 03:43simplified regex lib compilation: switched from TARGET-based stuff to straight object-file dependenciesJordan Ritter1+7-9
2006-11-15 03:42changed/fixed dependency functionality between versions regex libs; fixed clean/distclean kludges; simplified logicJordan Ritter1+17-28
2006-11-15 01:47oops, swap order of clean commands so that subsequent recursive invocations of make don't complain about missing filesJordan Ritter1+2-2
2006-11-15 01:46adjusted to properly clean itself up. amended a comment in the makefile itself that said it was explicitly trying to accomplish it (but didn't).Jordan Ritter1+2-0
2006-11-15 01:22fixup of the stupid clean targets. this should be the end of it.Jordan Ritter1+14-14
2006-10-18 04:17updated with most recent versionsJordan Ritter2+128-52
2006-10-18 04:02updated from new configure.inJordan Ritter1+46-3
2006-10-18 04:00very minor radiotap DLT detection optimizationJordan Ritter1+5-7
2006-10-18 03:57radiotap support and version bumpJordan Ritter1+10-1
2006-10-18 03:57radiotap supportJordan Ritter2+36-21
2006-10-18 03:53added radiotap support. still not happy with it but it's as good as it's gonna get. explored duplicating what libpcap does to support it but it looks like the variable-length header garbage caused them a fair bit of trouble too. oh well.Jordan Ritter1+16-0
2006-10-18 03:49initially a bugfix for #1543011 (snaplen truncatation leading to int overflow and garbage input to pattern matcher), I also discovered a bug in the ipv6 tcp packet length calculation.Jordan Ritter1+47-47
2006-09-11 13:30woops, missed one USE_DROPPRIVS wrapperJordan Ritter1+1-1
2006-09-11 13:02oh ye gods of broken gcc optimization, I yield to thee! UNCLE, I SAY, UNCLE!Jordan Ritter1+4-2
2006-09-11 12:54merge in patch from Ilya Evseev for improving configure's hintsJordan Ritter1+11-11
2006-09-11 11:57eh, why even bother compiling/linking the drop_privs code if it was disabled at compile-time in configureJordan Ritter1+4-1
2006-09-11 11:22in response to issue/patch #1231106: move drop_privs() down to right before pcap_loop() call. originally had it happen as quickly as possible, to avoid potential faults from unforseen startup input conditions, but I agree that the risk is small enough to be outweighed by the inconvenience/problem of dropping privileges too quickly, before the program is fully set up to run as intended.Jordan Ritter1+4-4
2006-09-11 09:35fix bug #1480799: added missing include on BSD|SOLARIS|MACOSX for inet_ntoa(); on 64bit systems the implicit 32bit int retval auto-generated by the compiler truncates the 64bit char* pointer inet_ntoa() returns, causing printf() to chokeJordan Ritter1+1-0
2006-09-11 09:08make impractical a race condition bug whereby double-frees can occur by multiple (trapped) signals delivered to ngrep before exit(). set all trapped signals to SIG_IGN immediately upon signal entry. seems to be happening more frequently in the last year.Jordan Ritter1+8-0
2006-09-11 09:05only #define windowsize variables if not on win32Jordan Ritter1+2-1
2006-09-11 09:04fix bug #1543011: incorrect calculation of when snaplen truncates within packet headers, leading to len overflow and garbage input into the pattern matcher, behaviour undefined. rewrote logic to center around pcap_pkthdr->caplen, yielding bugfix + performance improvement and code simplification.Jordan Ritter1+27-49
2006-09-11 05:24fix bug #1499961: ``-s 0'' defaults to max size instead of an actual zero lengthJordan Ritter1+5-3
2005-06-30 23:35update online help reference to include new "single" to ``-W''Jordan Ritter1+1-5
2005-06-30 23:35update online usage to specify "single" flag to ``-W''Jordan Ritter1+1-1
2005-06-30 19:34add credit for box used in IPv6 testingJordan Ritter1+4-0
2005-06-30 17:24update to latest versions (2005-06-30)Jordan Ritter2+349-317
2005-06-30 17:22add one more post-configure CONFIG indication -- which regex lib is being usedJordan Ritter2+12-0
2005-06-30 17:08drop -cvs tag for releaseJordan Ritter1+1-1
2005-06-30 17:08minor adjustment in tardist processJordan Ritter1+1-1
2005-06-30 17:07latest winpcap driver has ipv6 by defaultJordan Ritter1+2-2
2005-06-30 16:16aestheticJordan Ritter1+0-2
2005-06-30 16:15update for 1.44 releaseJordan Ritter1+1-1
2005-06-30 16:12add tardist targetJordan Ritter1+20-0
2005-06-30 15:39updates for version 1.44Jordan Ritter1+16-10
2005-06-30 14:53changelog update for 1.44Jordan Ritter1+27-0
2005-06-30 14:44atoi is signedJordan Ritter1+3-3
2005-06-25 22:29updated for new configure.inJordan Ritter1+28-2
2005-06-25 22:28add new section for emitting configuration details, such as things affected by cmdline optionsJordan Ritter1+31-2
2005-06-25 21:27icmp6 data structure has ::icmp6_type/::icmp6_code, not ::icmp_type/::icmp_codeJordan Ritter1+1-1
2005-05-04 19:05updated with signed types as well, since although win32 will compile it, the browser/debugger *insisted* it had never been defined (liars!!)Jordan Ritter1+5-0
2005-05-04 19:02change pcap accumulator "timeout" value from 1s to 100ms -- on unix this doesn't seem to matter, but on win32 this is the interval pcap_loop() will wait (to accumulate packets) before invoking the callback function. on win32 this made it seem as though ngrep only ran once a second. now it will run every 100ms, which makes it seems a lot snappier.Jordan Ritter1+1-1
2005-05-04 18:52revert to pre-servicepack versions of these files so that they're more compatible with everyone (once upgraded, older versions can't read them)Jordan Ritter2+24-26
2005-05-04 18:48move netident_t stuff inside braces because this is C, can't just alloc vars anywhereJordan Ritter1+12-10
2005-05-04 18:22fix usage() to acknowledge new ``single'' option, plus a few more type and aesthetic changesJordan Ritter1+27-29
2005-05-04 18:09correct include path for types fileJordan Ritter1+2-2
2005-05-04 01:24more explicit bitwidth/sign'edness stuffsJordan Ritter2+56-54
2005-05-02 04:59added comments about ``-W single''Jordan Ritter1+8-5
2005-05-02 04:54cvs-specific version number and tidy commentsJordan Ritter2+1-3
2005-05-02 04:53added new option ``-N'' to print out subprotocol number when viewing raw (or otherwise unknown) packets, added ``-W single'' to fix bug #1151381, changed a bunch of variables to be explicit about bit width and signed'ness, refactored the process() loop to condense duplicate code and simplify IPv6 integration logic, clarified the "quiet" flag usage semantics, fixed a few more occurrences of bug #1174279 (improper handling of fragmentation) with IGMP and whatever else, updated docs with all the new flags an stuffJordan Ritter3+162-207
2005-04-27 22:52add credit to bernard massot for his ipv6 patchJordan Ritter1+5-0
2005-04-27 22:34updaed to MSVC 7.1 (7.0 + service packs), from internal format 7.0 to 8.0. renamed nettypes.h to types.h and added references to new inet_ntop() implJordan Ritter2+28-8
2005-04-27 22:31nuke all the nasty ^M'sJordan Ritter1+129-129
2005-04-27 22:29win32-compatible implementation of inet_ntop() (used from FreeBSD, copyright notice and license preserved, as required)Jordan Ritter2+194-0
2005-04-27 22:29now that I'm putting more type info in here than just "net types", renamingJordan Ritter2+177-101
2005-04-27 22:23address all warnings from -Wall; changed internal method for constraining possible bpf filters to be able to switch between ip and ip+ipv6 (IPv6 support); changed default_filter (bpf) to use same mechanism; explicit on signed-ness of everything; added a few more commentsJordan Ritter2+72-39
2005-04-27 21:47added support for IPv6. configure has this off by default since the bpf filter logic will actually fail in the event that libpcap was compiled without ipv6 support either.Jordan Ritter5+352-184
2005-04-27 16:10fix bug #1174279, garbage characters dumped for fragmented udp packets. have not heard back from bug reporter, but regardless I believe this is a real bug. also, version bump for CVS differences.Jordan Ritter2+3-3
2005-03-14 18:41removed duplicated ``-F'' documentation ( Ritter1+1-5
2005-02-24 04:50update CHANGES.txt for releaseJordan Ritter1+2-3
2005-02-24 04:49update with latest changesJordan Ritter1+1-1
2005-02-24 04:25fix for bug 1144991: change test for that old broken redhat glibc udp header file to assume the common case (instead of the edge condition as it did before) in the event of text program failureJordan Ritter2+14-36
2005-02-23 23:15minor fix that static/debug targets compile regex dependency (just like default target)Jordan Ritter1+2-2
2005-02-22 06:28grammatical changesJordan Ritter1+3-3
2005-02-22 06:26typoJordan Ritter1+1-1
2005-02-22 06:25rename REGEX.txt -> PCRE.txtJordan Ritter1+0-0
2005-02-22 06:01updated with tests against pcre 5.0Jordan Ritter1+48-21
2005-02-22 05:03clean target should also nuke any static binary createdJordan Ritter1+1-1
2005-02-22 05:00OK, commit of clean targets which should now finally clean up everything (including what each respective regex lib's distclean misses)Jordan Ritter1+12-11
2005-02-22 04:48zero out changelog (regex is now maintained through glibc so there won't be anymore updates to this particular one), and nuke test and doc data as they're not pertinent to the ngrep source tree (I'll put in a link instead)Jordan Ritter32+0-17830
2005-02-21 21:05don't need these files eitherJordan Ritter3+0-6981
2005-02-21 20:56don't need test data for ngrep source distribution. will instead include a link.Jordan Ritter12+0-21582
2005-02-21 20:23documentation for PCRE is huge, and really just unnecessary. will include a link to it insteadJordan Ritter64+0-15666
2005-02-21 20:17clarify a few thingsJordan Ritter1+4-4
2005-02-20 22:17typoJordan Ritter1+1-1
2005-02-20 22:16add a note about some distributions separating the libpcap library from the development headersJordan Ritter1+3-0
2005-02-20 05:56remove ``-L'' documentation since that is windows-only and thus there isn't much use to putting it in the manpageJordan Ritter1+2-8
2005-02-20 05:54version bump (remove -cvs designation for forthcoming release)Jordan Ritter1+1-1
2005-02-20 05:52make showing ``-L'' in help/usage win32-specificJordan Ritter1+5-1
2005-02-20 05:48move back USE_PCRE block after config.h include, that's where USE_PCRE is setJordan Ritter1+4-4
2005-02-20 05:37remove DROPPRIVS_ONLY_ROOTJordan Ritter1+0-1
2005-02-20 05:35rename LICENSE and CHANGES, and update CHANGES.txt with new features for upcoming 1.43 releaseJordan Ritter3+191-155
2005-02-20 05:15documentation cleanupJordan Ritter8+186-220
2005-02-20 05:15aesthetic in help/usageJordan Ritter1+1-1
2005-02-20 05:04updated install guide with more useful detail and recent informationJordan Ritter1+72-11
2005-02-20 04:29add Win32-specific part of usage() (device list index et al.)Jordan Ritter1+6-1
2005-02-20 04:26[finally] put full help in usage statementJordan Ritter1+31-3
2005-02-20 04:10(win32) fix some warnings, change device list output, don't output anything when description isn't present, and shortcurcuit when done from alldevs traversalJordan Ritter1+7-8
2005-02-20 03:59last set of %d->%u changes I think, and condense 2 drop_privs() to 1Jordan Ritter1+6-10
2005-02-20 03:47rename no_dropprivs -> dont_dropprivs, add uid|euid == 0 check before drop_privs(), and fixed one %d->%uJordan Ritter1+4-4
2005-02-20 03:43aestheticJordan Ritter1+5-5
2005-02-20 03:41reorganize includes and variable definitionsJordan Ritter1+12-12
2005-02-20 03:41remove DROPPRIVS_ONLY_ROOTJordan Ritter1+0-21
2005-02-20 03:33tuned clean targets to get rid of all those pesky files that their distclean's missJordan Ritter1+4-4
2005-02-20 02:31bunch more signed-ness changesJordan Ritter1+15-15
2005-02-20 02:12previous fix for lack of default_filter didn't work; this one doesJordan Ritter1+8-9
2005-02-19 19:51update credits for windows portJordan Ritter1+1-1
2005-02-19 19:25update pcre from 3.4 to 5.0; change dev to usedev so we can detect when the device name has been allocated by us versus pcap_lookupdev() (win32); deprecated the print_time_diff_init stuff (kludged on win32 because it doesn't have gettimeofday()!); fix subtle but long-standing bug: set default_filter to "ip" in case one isn't specified (especially important now that there is a default handler for protocol_type); more %d->%u changes; some aesthetic changes, and changed is*() casts from (int) to (unsigned char) (I think this is right now)Jordan Ritter2+51-49
2005-02-19 19:21commit configure for changesJordan Ritter1+160-151
2005-02-19 19:20switch pcre 3.4 to 5.0Jordan Ritter1+1-1
2005-02-19 19:19clean up pcre and regex targets, and switch pcre from 3.4 to 5.0Jordan Ritter1+3-3
2005-02-19 19:17import latest pcreJordan Ritter119+102254-0
2005-02-19 08:23relocate stuff around in order to determine what fatures the bpf.h file providesJordan Ritter1+84-73
2005-02-19 08:21cleanup regex and pcre build tarsJordan Ritter1+2-2
2005-02-16 06:59update copyright dateJordan Ritter3+3-3
2005-02-16 06:50update documentation for -d and -LJordan Ritter1+10-4
2005-02-16 06:18clean up casts for raw (default) caseJordan Ritter1+1-1
2005-02-16 06:03added IGMP and raw (unknown ip protocol type) supportJordan Ritter1+81-0
2005-02-16 06:01add IGMP packet type for win32 support nettypes.hJordan Ritter1+67-61
2005-02-16 05:55remove match_data printf() (what was that, a debug that sneaked in?)Jordan Ritter1+0-2
2005-02-16 05:14add win32-specific support filesJordan Ritter5+378-0
2005-02-16 05:13major revisions: - heal win32 code fork (large chunk of code changes, requires winpcap 3.x) - rewrite privelege revocation logic (dump SPC, use my own) - change many ints to unsigneds to be safe - initialize ws_col (for win32 who doesn't get update_windowsize()) - fix several signed casts (e.g. strlen(), match & dump functions) - fix several type casts (e.g. isprint(int)) - remove some unused variables - remove MACOSX-specific localtime cast and do the cast for allJordan Ritter2+197-42
2005-02-16 04:36well, after much testing across linux 2.4, linux 2.6, openbsd, netbsd, and freebsd, I am dumping the Secure Programming Cookbook's privelege- dropping code and using my own simpler version, which I have verified on the aforementioned operating systems (thanks to Joshua Wright for pointing me in this direction).Jordan Ritter1+13-55
2005-02-16 04:31removed dependency on pcap's bpf.h file, as it turns out that pcap.h all the way back to 0.6.x auto-included it. this should help resolve the compile problems being caused by the pcap developer's include filename change. also, recompiled configure from using autoconf-2.59.Jordan Ritter2+441-242
2005-02-16 04:30update to newer versionsJordan Ritter2+497-236
2005-02-16 04:07changes requested for using more standardized (autoconf?) variable names that can be overriddenJordan Ritter1+9-4
2004-06-23 18:11fix IEEE802.11 header size offset (bug #977573) and update versionJordan Ritter1+2-2
2004-05-14 19:30added quick check to drop_privs to report failure of getpwnam(). doesn't affect security; ngrep would have crashed anyway trying to deref the struct.Jordan Ritter1+8-1
2004-03-30 22:38fix for bug #926318, correct ``-n'' bug whereby ngrep would not actually exit until n+1 matches were achieved.Jordan Ritter1+9-6
2004-03-29 02:28updated the TODO listJordan Ritter1+0-2
2004-03-29 02:26updated reporting BUGS sectionJordan Ritter1+6-3
2004-03-29 02:23updated documentation with new command line optionsJordan Ritter1+29-2
2004-03-29 02:15updated copyright datesJordan Ritter4+4-4
2004-03-29 02:11removing this extraneous documentation; deferring to online documentation for better examplesJordan Ritter1+0-21
2004-03-29 02:10updated copyright yearJordan Ritter1+1-1
2004-03-29 02:09updated with latest version and usage informationJordan Ritter1+17-7
2004-03-28 22:26updated with latest changesJordan Ritter1+30-0
2004-02-11 01:37updated embedded dateJordan Ritter1+1-1
2004-01-04 21:12changing version identifier for forthcoming releaseJordan Ritter1+1-1
2004-01-04 21:03update to match configure.inJordan Ritter1+3-2
2004-01-04 21:03aesthetic, and delete unused logic from *solaris* caseJordan Ritter1+3-2
2004-01-04 20:56aesthetic, freebsd testedJordan Ritter2+12-1
2004-01-04 20:39update *bsd* case with a warning message about older libpcapsJordan Ritter1+9-0
2004-01-04 20:19updated from configure.inJordan Ritter1+59-53
2004-01-04 20:18moved all DEFINE's towards the end, standardized how they are set.Jordan Ritter1+32-22
2004-01-02 23:11fixed the formatting for options (--help) and changed the tcpdump check to redirect stderr to null when tcpdump isn't foundJordan Ritter2+13-13
2004-01-02 23:10changed ngrep default behaviour to do multi-line match and added ``-M'' to turn it off, and also realized that the re_err allocation for pcre was unnecessary as pcre is using static pointer buffers and isn't actually populating any memory (besides the pointer val).Jordan Ritter1+16-9
2004-01-02 19:43updatedJordan Ritter1+0-15
2003-12-31 02:06fix for macosx drop_privs (still!). thanks to joseph holsten for giving me access to his box to testJordan Ritter1+2-0
2003-12-31 01:25stupid typo :(Jordan Ritter1+1-1
2003-12-29 23:41fix bug in changed logic whereby the $dumb_udphdr value is not preset with an assumption, and thus comes out empty when configure is executed on a non-linux platform.Jordan Ritter2+4-0
2003-12-29 18:22added option -R, to allow users to consciously avoid any dropprivs if they don't want it.Jordan Ritter2+17-1
2003-12-29 18:20small bug in update_windowsize wrt the new -c option caused ngrep to spin out of control.Jordan Ritter1+28-12
2003-12-29 01:50added note for people to use project website at sourceforge to submit patches, give feedback or whatever.Jordan Ritter1+11-0
2003-12-29 01:45added ``-c'', explicitly define column width instead of ioctl()'ing for it.Jordan Ritter1+6-0
2003-12-29 01:36changed minor behaviourism of ``-q'' (quiet). previously when outputting to a pcap_dump file, -q would omit even printing the packet dump to the console altogether (Whereas the normal behaviour is simply to omit printing ``#'' marks). now the behaviour between normal and pcap_dump file usage is identical, and specifying a second ``-q'' on the command-line will omit the console display of the payload regardless of mode.Jordan Ritter1+12-9
2003-12-29 01:30added ``-F'' (read bpf filter from file) optionJordan Ritter3+64-8
2003-12-29 00:52enforce incompatibility between -x and -WJordan Ritter1+4-0
2003-12-29 00:45added -P option (specify alternate non-print char) and -W (specify different Wrapping output mechanisms for non-hexmode display)Jordan Ritter3+81-22
2003-12-28 23:16updated all references of ``COPYRIGHT'' to ``LICENSE''Jordan Ritter5+27-27
2003-12-28 23:03default prefix stuff now works properly, and will favor tcpdump's install path if it's presentJordan Ritter2+80-78
2003-12-28 22:41remove auto-generated file, and update installation portion to pay attention to prefix stuff, as well as the DESTDIR kludge often used for relocating the root of an entire installation without touching prefixesJordan Ritter3+11-5
2003-12-28 22:25most defines now moved into hereJordan Ritter1+20-0
2003-12-28 22:24a huge chunk of changes reorganizing the entire, bringing it up to 2.57, logic ordering, moved all the variables into config.h(.in), and just make it look nicer. next will be to make prefix stuff work.Jordan Ritter4+4194-1922
2003-12-27 01:54new pass at the drop_privs() code, thank you SPCJordan Ritter1+44-0
2003-12-27 01:23version bumpJordan Ritter1+1-1
2003-12-27 01:14changes for supporting --with-nonroot-dropprivs (drop privileges even when not root)Jordan Ritter4+149-100
2003-11-17 16:25updated (ipv6 support)Jordan Ritter1+1-1
2003-11-17 16:24fix error from hand-patching ECN patchJordan Ritter1+1-1
2003-11-17 16:21updated with good feedback from gentoo bug/guys. should solve the autoconf weirdness/change in behaviour between versions of gcc by fixing a long- standing bug in the autoconf logic that never manifested before because previous versions of gcc didn't care.Jordan Ritter2+22-23
2003-11-08 22:24updatesJordan Ritter2+27-17
2003-11-08 22:20bug reports from have made me re-analyze the autoconf syntax, and it's not clear that anything was wrong before, but under the latest autoconf (which has clearly changed some shit) it didn't work properly. these changes are more in-line what autoconf's documentation says to do, and at least works under autoconf 2.13Jordan Ritter3+92-81
2003-10-23 13:51fix for subtle change in behaviour when detecting which udphdr struct definition to use. gentoo bug 31307 ( Ritter1+2-0
2003-08-10 18:50oops, heheJordan Ritter1+1-0
2003-08-10 04:14update usage()Jordan Ritter1+3-1
2003-08-10 02:17note the license amendmentsJordan Ritter1+1-0
2003-08-10 02:15updated with version changesJordan Ritter2+4-4
2003-08-10 02:13regened with new configure.inJordan Ritter1+48-21
2003-08-10 02:12good bye, restrictive licenseJordan Ritter2+38-37
2003-08-10 02:03changed drop_privs codeJordan Ritter1+5-5
2003-08-10 01:49updatedJordan Ritter3+7-2
2003-08-10 01:42more de-tabification, more supported OSes, and an additional include for Tru64 5.1AJordan Ritter2+18-15
2003-08-10 01:17added in interface type 105 (DLT_IEEE802_11) support (I *think* I got it right..)Jordan Ritter3+19-0
2003-08-10 00:59TCP ECN support (from Maik Pfeil <>)Jordan Ritter4+107-93
2003-08-10 00:48de-tabbed, corrected some of the includes for AIX and IRIXJordan Ritter1+582-580
2003-01-21 22:47documentation changes, a few cosmetic changes, added --safe-user compile time option, and code to drop privs, not guaranteed to be portable yet because I can't find access to the old boxes I used to port it in the first place version bump, getting ready to produce a maintenance releaseJordan Ritter7+145-88
2002-06-14 23:10added -S (set limitlen)Jordan Ritter4+27-6
2002-03-15 18:46updated with HAVE_LOOP and HAVE_SLL, for DLT_* types only present in newer libpcapJordan Ritter1+4-0
2002-03-15 18:46updated from new configure.inJordan Ritter1+89-21
2002-03-15 18:45updated with new stuff to check for a few new DLT_* typesJordan Ritter1+29-0
2002-01-03 16:55changes I forgot to put in for the MacOS X compile support. just eliminates annoying warnings with non-fatal symbol collisions on Mac OS X compilations.Jordan Ritter3+1785-290
2001-12-31 22:20updated libpcap locationJordan Ritter1+1-1
2001-12-31 22:11MacOS X compile supportJordan Ritter1+1-1
2001-12-31 22:07updated date of manualJordan Ritter1+1-1
2001-12-31 22:05typo: @STRIP@ -> @STRIPFLAG@Jordan Ritter1+1-1
2001-12-31 22:02updated with info version 1.40.1Jordan Ritter1+9-0
2001-12-31 22:02updated version number for new releaseJordan Ritter1+1-1
2001-12-31 22:01updated version, release date, and supported OSesJordan Ritter1+2-2
2001-12-31 21:48renameJordan Ritter1+0-0
2001-12-31 21:44MacOS X compile supportJordan Ritter4+109-82
2001-12-31 21:42updated to newestJordan Ritter2+82-56
2001-12-31 21:32added isdn header sizeJordan Ritter1+1-0
2001-12-31 21:30-I and -O descriptions were switchedJordan Ritter1+2-2
2001-12-31 21:28added support for isdn (DELETANG Frederic (ziga))Jordan Ritter1+4-0
2001-12-31 21:21changes to provide for --with-pcap-includes=, in case someone put their includes in an extremely non-standard place.Jordan Ritter1+8-1
2001-12-31 21:11compile fix for openBSD 3.0's tun device, which uses DLT_LOOP.Jordan Ritter1+1-0
2001-10-26 05:29Updated to newest versions from GNU (Nathan Sandver at Debian reports complaints of lack of support for the HPPA architecture).Jordan Ritter2+518-414
2001-07-09 22:35cooked sockets todo itemJordan Ritter1+2-0
2001-07-06 00:19updatedJordan Ritter1+3-6
2001-07-06 00:17added script I wrote for George Bakos ( to pump multiple pcap_dumps through ngrep simultaneously. meep.Jordan Ritter1+129-0
2001-06-26 17:55another hack to make sure we clean. god this makefile sucks.Jordan Ritter1+1-1
2001-06-26 17:32removed first distclean double-colon rule and moved associated rm command to second rule. the first double-colon rule would for some reason sometimes result in the config.status getting nuked before the second distclean target was called, other times it would work just fine. perhaps a bug (race?) in gnu make? oh well.Jordan Ritter1+6-2
2001-06-26 16:54added debug output to unsupported interface type error messageJordan Ritter1+1-1
2001-06-10 21:56updateJordan Ritter1+2-0
2001-06-06 23:33minor cosmetic fixupJordan Ritter1+3-3
2001-06-06 22:07specified -s wrong in the usage; should show a required argumentJordan Ritter1+2-2
2001-06-06 22:07specified -s wrong; should show a required argumentJordan Ritter2+7-5
2001-06-06 15:21updated for new version, new -s switch (set bpf caplen)Jordan Ritter1+1-2
2001-06-06 15:19updated for new versionJordan Ritter2+7-1
2001-06-06 15:16updated for upcoming new release, addition of -s (set caplen)Jordan Ritter1+4-3
2001-06-06 15:15added -s (set caplen)Jordan Ritter1+6-3
2001-06-06 15:15updated for -s (set caplen)Jordan Ritter1+5-2
2001-06-06 15:12potential fix for bug in payload length calculation; the pcap_pkthdr caplen was not being consideredJordan Ritter1+12-3
2001-05-08 14:27added #include <time.h> to LINUX includes; apparently glibc 2.2 has removed or swithed around some of the indirect includes that were present in 2.1.Jordan Ritter1+1-0
2001-04-24 06:33updated license to contain more specific advertising clause; we'll see if the OS guys will take this oneJordan Ritter1+3-3
2001-04-23 14:44advanced version numberJordan Ritter1+1-1
2001-04-23 14:44updated for -p stupidityJordan Ritter1+3-0
2001-04-23 14:43advance version number for stupidityJordan Ritter1+1-1
2001-04-23 14:34fucking a.Jordan Ritter1+1-1
2001-04-22 23:34added -p (don't go into promiscuous mode)Jordan Ritter1+1-0
2001-04-22 23:27added -p (don't go into promiscuous mode)Jordan Ritter1+5-2
2001-04-22 23:27added -pJordan Ritter1+4-3
2001-04-22 23:26added -p (no promiscuous mode)Jordan Ritter1+5-2
2001-04-20 00:02updated AIX version and platformJordan Ritter1+2-2
2001-04-20 00:02final patches to compile on AIX; idiotic ip_hl macro was in the wayJordan Ritter1+12-7
2001-04-19 02:05more changesJordan Ritter1+4-0
2001-04-19 02:02updated README to reflect point releaseJordan Ritter1+3-1
2001-04-19 01:47updated from (AIX addition)Jordan Ritter1+20-12
2001-04-19 01:47updated version for bugfix point-release (ioctl() headerfile update for BSD-style OSes)Jordan Ritter1+1-1
2001-04-19 01:45added AIX contributorJordan Ritter1+4-0
2001-04-19 01:45added includes for AIX (may not be complete, waiting for 1.39 results)Jordan Ritter1+7-0
2001-04-19 01:44added AIX defineJordan Ritter1+5-0
2001-03-07 02:38added HPUX and IRIX, still waiting for version specificsJordan Ritter1+2-0
2001-03-07 02:37added tty.h include for solaris/bsd type boxen to eliminate compiler error searching for winsize SIGWINCH infoJordan Ritter1+1-0
2001-03-03 00:22added NetBSD to the known working platformsJordan Ritter1+1-0
2001-03-03 00:18updated the descriptionJordan Ritter1+6-5
2001-03-01 18:03added slackware7 to the mixJordan Ritter1+1-0
2001-02-28 20:19added a little truthJordan Ritter1+1-2
2001-02-27 06:11minor updatesJordan Ritter1+3-3
2001-02-27 06:10updatedJordan Ritter2+19-6
2001-02-27 06:10changed multi-lib regex compile logic once again. this might be it.Jordan Ritter1+13-16
2001-02-27 06:10changed around order of ops, added --without-restart, changed multi-lib logic yet againJordan Ritter2+291-233
2001-02-27 06:09updated copyright date, manual dateJordan Ritter1+2-2
2001-02-27 06:09updated copyright dates added NEED_RESTART ifdefJordan Ritter2+10-7
2001-02-25 16:45Updated email addresses.Jordan Ritter1+3-3
2001-02-25 16:40updated regex.c with the original changes for 64 bit clean-ness and symbol clashesJordan Ritter1+22-9
2001-02-25 15:40left out pcre_options from pcre_compile removed string lowercase from caseless block for pcre finished re_match_func by adding correct exit codes for pcreJordan Ritter1+49-49
2001-02-25 15:38minor formatting changeJordan Ritter1+2-2
2001-02-25 15:38updated bug listJordan Ritter1+14-10
2001-02-25 14:42Added some discussion of the differences between GNU regex and PCRE.Jordan Ritter1+30-0
2001-02-24 22:04Import of PCRE 3.4 and GNU regex 0.12.Jordan Ritter47+31674-0
2001-02-24 22:00removed GNU regex.c and regex.h in preparation for alternative regex librariesJordan Ritter12+301-5561
2000-10-03 15:34guess I missed removing the cast..Jordan Ritter1+1-1
2000-09-28 22:12removed extraneous semi-colonJordan Ritter1+1-1
2000-09-24 18:30added optimization to init timeval structures const'ifyed re_err and removed type castJordan Ritter2+25-15
2000-09-24 18:24updated config.* from GNU, added hpux11 type to configure.inJordan Ritter5+937-217
2000-09-11 17:33forgot to commit with ngrep.c contains TOKENRING_SIZE and VERSION definesJordan Ritter1+4-0
2000-09-04 19:39added vacuum into the credits for the token ring patchJordan Ritter1+3-0
2000-09-04 19:35fix in print_time_absolute for tm_mon (months are numbered 0 - 11)Jordan Ritter1+1-1
2000-09-04 19:32added version string define now that ngrep is using cvs merged vacuum's tokenring patchJordan Ritter1+5-2
2000-09-04 19:12Initial revisionJordan Ritter19+11573-0