Commit graph

54 commits

Author SHA1 Message Date
William Robinet
ced211ef0a
Lower cmake version requirement (Ubuntu Focal) 2023-08-10 09:43:20 +02:00
William Robinet
45111603a7
Remove autotools files 2023-08-09 16:12:15 +02:00
William Robinet
bde08ddbd5
Initial cmake setup 2023-08-09 15:36:52 +02:00
William Robinet
fda6e32aed
Add -z option for printing timestamps in front of TCP headers 2023-08-03 11:09:56 +02:00
William Robinet
6686cedfdd Add support for IPv6 traffic dump 2021-04-07 17:40:16 +02:00
William Robinet
e2810c62ee Adjust copyright info 2021-01-29 14:00:56 +01:00
William Robinet
9d3974b85f Avoid leak in TCP segment reassembly code 2021-01-27 18:42:07 +01:00
William Robinet
4997301a9d Exit process_tcp_packet() in case TCP header is incomplete 2021-01-27 18:32:18 +01:00
William Robinet
f24eafd8b4 Check timestamp_diff return code correctly 2021-01-27 18:31:28 +01:00
William Robinet
2a7b0f664f Cleanup before exit on error 2021-01-27 18:30:28 +01:00
William Robinet
b3316bb5fd Fix for crash if length of captured frame is less than Ethernet header size 2021-01-21 09:57:27 +01:00
William Robinet
d1f8d01d4b Check packet size before looking at IP header 2021-01-20 11:22:55 +01:00
William Robinet
fba06b5c79 Output error to stderr 2021-01-19 17:25:02 +01:00
William Robinet
96021582f4 Avoid leak by freeing SSL decoding context properly 2021-01-15 12:11:37 +01:00
William Robinet
8ef5540e58 Close everything properly in case of SIGINT 2021-01-15 11:59:26 +01:00
William Robinet
d0ca1a8adc First import of the JSON output code (https://github.com/adulau/ssldump/issues/41) 2021-01-06 17:52:45 +01:00
William Robinet
28b4915099 Do not print information message when no connection is cleaned at shutdown 2020-12-09 16:01:54 +01:00
William Robinet
8c8c97fcb0 Close global pcap struct properly in case of SIGINT 2020-12-09 15:14:24 +01:00
William Robinet
79b804bd18 Rework https://github.com/adulau/ssldump/pull/26 after build system changes 2020-10-06 17:34:58 +02:00
William Robinet
67de5d014d Remove definitions of unused variables 2020-10-06 10:20:16 +02:00
William Robinet
97f6623e71 Fix for "warning: promoted type int of K&R function parameter is not compatible with the parameter type ..." 2020-10-06 10:05:25 +02:00
William Robinet
cbb6ecf373 Fix for "warning: using the result of an assignment as a condition without parentheses" 2020-10-06 09:26:07 +02:00
William Robinet
c651800ab1 Remove unused RCSSTRING variable globally 2020-10-03 10:41:05 +02:00
William Robinet
eeb45211fe Clean debug functions, remove duplicates 2020-09-04 14:13:59 +02:00
William Robinet
55510f8fb1 Fix segfault by OOB read on malformed packets (2) 2020-09-03 19:07:21 +02:00
William Robinet
cebce341c5 Fix segfault by OOB read on malformed packets 2020-09-03 19:06:50 +02:00
William Robinet
68787acabe Fix deprecation warning from libcap 1.9.1 2020-08-28 18:25:24 +02:00
William Robinet
05e57beb34 Fix warning about type of arguments of pcap_handler 2020-08-27 18:16:04 +02:00
William Robinet
bb5b88c03a Fix warning about signal() arguments type 2020-08-27 17:13:55 +02:00
William Robinet
e645dc3562 Fix build warnings for missing prototypes 2020-08-27 16:39:01 +02:00
William Robinet
0a840ae521 Autoconf setup rewritten 2020-08-27 16:20:38 +02:00
Aleksey Ryabkov
77ee0d4b39 add save decrypted datato pcap. first alpha version 2020-04-12 01:14:38 +03:00
EaseTheWorld
36d81fabcb Handle weird 3-way handshake(syn&ack -> syn -> ack)
I have pcaps from Cisco2960 span port and found some tcp handshake has weird order 3-way handshake.
It seems first packet order between sessions is not guaranted for cisco span. maybe.
Current state transition is
        INIT -- syn --> SYN1 -- syn&ack --> SYN2 -- ack --> ESTABLISHED
New state transition starts with SYN1 or SYN2 and adds(revive actually)
STATE_ACK to handle both cases.
case1 : INIT -- syn --> SYN1 -- syn&ack -->ACK -- ack --> ESTABLISHED (normal)
case2 : INIT -- syn&ack --> SYN2 -- syn -->ACK -- ack --> ESTABLISHED
(weird)
2019-08-14 09:00:54 +09:00
Ulrik Haugen
3a96262c3a Take project name and version from configure define
... in print_version.
2019-05-21 10:37:48 +02:00
Ulrik Haugen
8d02dd6b31 Remove presumably extraneous files 2019-05-21 10:37:48 +02:00
Ulrik Haugen
d6a86f847c Whitespace 2019-05-21 10:37:48 +02:00
mathewmarcus
170158a65b add l option for SSLKEYLOGFILE 2018-07-05 08:06:49 -05:00
Alper Akcan
d18d2fce01 Fix packet length calculation if IP length is 0, due to TSO 2017-05-29 15:54:19 +03:00
William Robinet
2e0d67c172 Fix order of arguments in calls to calloc 2015-05-18 15:40:22 +02:00
William Robinet
ca50396186 Make valgrind/memcheck happy 2015-05-13 09:45:11 +02:00
William Robinet
d87056ac76 Avoid auto-vivisection during connection clean-up ... 2015-04-27 22:43:47 +02:00
William Robinet
d5dc74824d Fix inactive connection removal 2015-04-27 14:37:44 +02:00
William Robinet
05fe4a619c Initialize initial reference timeval
Avoids wrong cleaning of first connection(s)
2015-04-23 11:29:42 +02:00
William Robinet
4310c3f117 In flight connection pool cleaning 2015-04-22 11:23:37 +02:00
William Robinet
68255f5e9d Fix memory leak at connection closing 2015-04-17 10:59:26 +02:00
326e7a3eab Free also the packet structure 2015-02-14 14:31:35 +01:00
58bd5e795f Snaplen increased to the default jumbo frame size
If the snaplen is lower than the total frame length announced,
ssldump won't be able to reassemble the payload. "Length mismatch"
error. Tested on Ethernet uplinks supporting jumbo frame.
2015-02-01 13:57:03 +01:00
3d17d67ea0 Continue even if no IP address is assigned on the interface
ssldump in a production environment can be used on a capture
interface where no IP addresses are assigned. Print a warning instead
of exiting.
2015-02-01 13:31:01 +01:00
1f8c78169f ssldump-0.9-pcap-vlan.patch 2015-01-31 10:17:49 +01:00
fd3ca8ad0f ssldump-0.9-link_layer.patch 2015-01-31 10:17:27 +01:00