Commit graph

23 commits

Author SHA1 Message Date
Aleksey Ryabkov
77ee0d4b39 add save decrypted datato pcap. first alpha version 2020-04-12 01:14:38 +03:00
EaseTheWorld
36d81fabcb Handle weird 3-way handshake(syn&ack -> syn -> ack)
I have pcaps from Cisco2960 span port and found some tcp handshake has weird order 3-way handshake.
It seems first packet order between sessions is not guaranted for cisco span. maybe.
Current state transition is
        INIT -- syn --> SYN1 -- syn&ack --> SYN2 -- ack --> ESTABLISHED
New state transition starts with SYN1 or SYN2 and adds(revive actually)
STATE_ACK to handle both cases.
case1 : INIT -- syn --> SYN1 -- syn&ack -->ACK -- ack --> ESTABLISHED (normal)
case2 : INIT -- syn&ack --> SYN2 -- syn -->ACK -- ack --> ESTABLISHED
(weird)
2019-08-14 09:00:54 +09:00
Ulrik Haugen
3a96262c3a Take project name and version from configure define
... in print_version.
2019-05-21 10:37:48 +02:00
Ulrik Haugen
8d02dd6b31 Remove presumably extraneous files 2019-05-21 10:37:48 +02:00
Ulrik Haugen
d6a86f847c Whitespace 2019-05-21 10:37:48 +02:00
mathewmarcus
170158a65b add l option for SSLKEYLOGFILE 2018-07-05 08:06:49 -05:00
Alper Akcan
d18d2fce01 Fix packet length calculation if IP length is 0, due to TSO 2017-05-29 15:54:19 +03:00
William Robinet
2e0d67c172 Fix order of arguments in calls to calloc 2015-05-18 15:40:22 +02:00
William Robinet
ca50396186 Make valgrind/memcheck happy 2015-05-13 09:45:11 +02:00
William Robinet
d87056ac76 Avoid auto-vivisection during connection clean-up ... 2015-04-27 22:43:47 +02:00
William Robinet
d5dc74824d Fix inactive connection removal 2015-04-27 14:37:44 +02:00
William Robinet
05fe4a619c Initialize initial reference timeval
Avoids wrong cleaning of first connection(s)
2015-04-23 11:29:42 +02:00
William Robinet
4310c3f117 In flight connection pool cleaning 2015-04-22 11:23:37 +02:00
William Robinet
68255f5e9d Fix memory leak at connection closing 2015-04-17 10:59:26 +02:00
326e7a3eab Free also the packet structure 2015-02-14 14:31:35 +01:00
58bd5e795f Snaplen increased to the default jumbo frame size
If the snaplen is lower than the total frame length announced,
ssldump won't be able to reassemble the payload. "Length mismatch"
error. Tested on Ethernet uplinks supporting jumbo frame.
2015-02-01 13:57:03 +01:00
3d17d67ea0 Continue even if no IP address is assigned on the interface
ssldump in a production environment can be used on a capture
interface where no IP addresses are assigned. Print a warning instead
of exiting.
2015-02-01 13:31:01 +01:00
1f8c78169f ssldump-0.9-pcap-vlan.patch 2015-01-31 10:17:49 +01:00
fd3ca8ad0f ssldump-0.9-link_layer.patch 2015-01-31 10:17:27 +01:00
cc6554ebb6 sldump-0.9-cvs-20060619.patch 2015-01-31 10:16:06 +01:00
c98257f57e sldump-0.9-libpcap.patch 2015-01-31 10:15:25 +01:00
b15b27c315 ssldump-0.9-openssl.patch 2015-01-31 10:15:00 +01:00
ea12dfe6d2 ssldump_0.9b3.orig.tar.gz Import 2015-01-31 10:13:33 +01:00