/ Source Code 1994 March / Source_Code_CD-ROM_Walnut_Creek_March_1994.iso / unix_c / networks / tcpdump.tar

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 52 45 41 44 4d 45 00 00 | 00 00 00 00 00 00 00 00 |README..|........|
|00000010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 20 20 20 34 | 34 34 20 00 20 20 33 30 |....   4|44 .  30|
|00000070| 36 30 20 00 20 20 20 20 | 33 34 20 00 20 20 20 20 |60 .    |34 .    |
|00000080| 20 20 33 30 30 37 36 20 | 20 34 37 34 34 31 34 32 |  30076 | 4744142|
|00000090| 30 31 33 20 20 20 35 30 | 33 30 00 20 00 00 00 00 |013   50|30. ....|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 53 75 6e 20 4a 61 6e 20 | 31 33 20 31 32 3a 32 30 |Sun Jan |13 12:20|
|00000210| 3a 34 30 20 50 53 54 20 | 31 39 39 31 0a 56 65 72 |:40 PST |1991.Ver|
|00000220| 73 69 6f 6e 20 32 2e 30 | 0a 0a 54 68 69 73 20 64 |sion 2.0|..This d|
|00000230| 69 72 65 63 74 6f 72 79 | 20 63 6f 6e 74 61 69 6e |irectory| contain|
|00000240| 73 20 61 6e 20 61 6c 70 | 68 61 20 72 65 6c 65 61 |s an alp|ha relea|
|00000250| 73 65 20 6f 66 20 74 63 | 70 64 75 6d 70 20 61 6e |se of tc|pdump an|
|00000260| 64 20 74 68 65 20 6e 65 | 77 0a 42 65 72 6b 65 6c |d the ne|w.Berkel|
|00000270| 65 79 20 50 61 63 6b 65 | 74 20 46 69 6c 74 65 72 |ey Packe|t Filter|
|00000280| 2c 20 42 50 46 2e 20 20 | 54 63 70 64 75 6d 70 20 |, BPF.  |Tcpdump |
|00000290| 6e 6f 77 20 72 75 6e 73 | 20 6f 6e 20 34 2e 33 20 |now runs| on 4.3 |
|000002a0| 42 53 44 20 73 79 73 74 | 65 6d 73 2c 0a 70 72 6f |BSD syst|ems,.pro|
|000002b0| 76 69 64 65 64 20 79 6f | 75 20 69 6e 73 74 61 6c |vided yo|u instal|
|000002c0| 6c 20 42 50 46 20 69 6e | 20 79 6f 75 72 20 6b 65 |l BPF in| your ke|
|000002d0| 72 6e 65 6c 2e 20 20 49 | 74 20 73 68 6f 75 6c 64 |rnel.  I|t should|
|000002e0| 20 62 65 20 72 65 6c 61 | 74 69 76 65 6c 79 0a 65 | be rela|tively.e|
|000002f0| 61 73 79 20 74 6f 20 67 | 65 74 20 75 70 20 6f 6e |asy to g|et up on|
|00000300| 20 61 6e 79 20 42 53 44 | 20 64 65 72 69 76 65 64 | any BSD| derived|
|00000310| 20 73 79 73 74 65 6d 2e | 20 20 49 6e 20 66 61 63 | system.|  In fac|
|00000320| 74 2c 20 77 65 27 72 65 | 20 72 75 6e 6e 69 6e 67 |t, we're| running|
|00000330| 0a 42 50 46 20 6f 6e 20 | 6f 75 72 20 68 70 33 30 |.BPF on |our hp30|
|00000340| 30 27 73 20 28 75 6e 64 | 65 72 20 42 53 44 20 54 |0's (und|er BSD T|
|00000350| 61 68 6f 65 29 2c 20 61 | 6e 64 20 6f 6e 20 61 6c |ahoe), a|nd on al|
|00000360| 6c 20 6f 75 72 20 53 75 | 6e 73 20 28 69 74 20 68 |l our Su|ns (it h|
|00000370| 61 73 0a 62 65 65 6e 20 | 74 65 73 74 65 64 20 6f |as.been |tested o|
|00000380| 6e 20 73 70 61 72 63 73 | 20 61 6e 64 20 36 38 30 |n sparcs| and 680|
|00000390| 78 30 27 73 2c 20 75 6e | 64 65 72 20 53 75 6e 4f |x0's, un|der SunO|
|000003a0| 53 20 33 2e 35 20 61 6e | 64 20 53 75 6e 4f 53 20 |S 3.5 an|d SunOS |
|000003b0| 34 2e 31 29 2e 0a 42 50 | 46 20 77 69 6c 6c 20 6c |4.1)..BP|F will l|
|000003c0| 69 6b 65 6c 79 20 6d 61 | 6b 65 20 69 74 73 20 77 |ikely ma|ke its w|
|000003d0| 61 79 20 69 6e 74 6f 20 | 34 2e 34 20 42 53 44 2e |ay into |4.4 BSD.|
|000003e0| 20 20 53 65 65 20 62 70 | 66 2f 52 45 41 44 4d 45 |  See bp|f/README|
|000003f0| 20 66 6f 72 20 66 75 72 | 74 68 65 72 0a 64 65 74 | for fur|ther.det|
|00000400| 61 69 6c 73 20 61 6e 64 | 20 61 6e 20 69 6e 73 74 |ails and| an inst|
|00000410| 61 6c 6c 61 74 69 6f 6e | 20 70 72 6f 63 65 64 75 |allation| procedu|
|00000420| 72 65 2e 0a 0a 48 65 72 | 65 20 61 72 65 20 74 68 |re...Her|e are th|
|00000430| 65 20 6d 61 6a 6f 72 20 | 63 68 61 6e 67 65 73 20 |e major |changes |
|00000440| 66 72 6f 6d 20 74 68 65 | 20 4d 61 72 20 27 39 30 |from the| Mar '90|
|00000450| 20 72 65 6c 65 61 73 65 | 3a 0a 0a 20 2d 20 41 20 | release|:.. - A |
|00000460| 70 61 63 6b 65 74 20 64 | 75 6d 70 65 72 20 68 61 |packet d|umper ha|
|00000470| 73 20 62 65 65 6e 20 61 | 64 64 65 64 20 28 74 68 |s been a|dded (th|
|00000480| 61 6e 6b 73 20 74 6f 20 | 4a 65 66 66 20 4d 6f 67 |anks to |Jeff Mog|
|00000490| 75 6c 20 6f 66 20 44 45 | 43 57 52 4c 29 2e 20 0a |ul of DE|CWRL). .|
|000004a0| 20 20 20 57 69 74 68 20 | 74 68 69 73 20 6f 70 74 |   With |this opt|
|000004b0| 69 6f 6e 2c 20 79 6f 75 | 20 63 61 6e 20 63 72 65 |ion, you| can cre|
|000004c0| 61 74 65 20 61 6e 20 61 | 72 63 68 69 74 65 63 74 |ate an a|rchitect|
|000004d0| 75 72 65 20 69 6e 64 65 | 70 65 6e 64 65 6e 74 20 |ure inde|pendent |
|000004e0| 62 69 6e 61 72 79 20 0a | 20 20 20 74 72 61 63 65 |binary .|   trace|
|000004f0| 20 66 69 6c 65 20 69 6e | 20 72 65 61 6c 20 74 69 | file in| real ti|
|00000500| 6d 65 2c 20 77 69 74 68 | 6f 75 74 20 74 68 65 20 |me, with|out the |
|00000510| 6f 76 65 72 68 65 61 64 | 20 6f 66 20 74 68 65 20 |overhead| of the |
|00000520| 70 61 63 6b 65 74 20 70 | 72 69 6e 74 65 72 2e 20 |packet p|rinter. |
|00000530| 20 0a 20 20 20 41 74 20 | 61 20 6c 61 74 65 72 20 | .   At |a later |
|00000540| 74 69 6d 65 2c 20 74 68 | 65 20 70 61 63 6b 65 74 |time, th|e packet|
|00000550| 73 20 63 61 6e 20 62 65 | 20 66 69 6c 74 65 72 65 |s can be| filtere|
|00000560| 64 20 28 61 67 61 69 6e | 29 20 61 6e 64 20 70 72 |d (again|) and pr|
|00000570| 69 6e 74 65 64 2e 0a 0a | 20 2d 20 42 53 44 20 69 |inted...| - BSD i|
|00000580| 73 20 73 75 70 70 6f 72 | 74 65 64 2e 20 20 59 6f |s suppor|ted.  Yo|
|00000590| 75 20 6d 75 73 74 20 69 | 6e 73 74 61 6c 6c 20 42 |u must i|nstall B|
|000005a0| 50 46 20 69 6e 20 79 6f | 75 72 20 6b 65 72 6e 65 |PF in yo|ur kerne|
|000005b0| 6c 2e 20 20 0a 20 20 20 | 53 69 6e 63 65 20 74 68 |l.  .   |Since th|
|000005c0| 65 20 66 69 6c 74 65 72 | 69 6e 67 20 69 73 20 6e |e filter|ing is n|
|000005d0| 6f 77 20 64 6f 6e 65 20 | 69 6e 20 74 68 65 20 6b |ow done |in the k|
|000005e0| 65 72 6e 65 6c 2c 20 66 | 65 77 65 72 20 70 61 63 |ernel, f|ewer pac|
|000005f0| 6b 65 74 73 20 61 72 65 | 0a 20 20 20 64 72 6f 70 |kets are|.   drop|
|00000600| 70 65 64 2e 20 20 49 6e | 20 66 61 63 74 2c 20 77 |ped.  In| fact, w|
|00000610| 69 74 68 20 42 50 46 20 | 61 6e 64 20 74 68 65 20 |ith BPF |and the |
|00000620| 70 61 63 6b 65 74 20 64 | 75 6d 70 65 72 20 6f 70 |packet d|umper op|
|00000630| 74 69 6f 6e 2c 20 61 20 | 6d 65 61 73 6c 79 0a 20 |tion, a |measly. |
|00000640| 20 20 53 75 6e 20 33 2f | 35 30 20 63 61 6e 20 6b |  Sun 3/|50 can k|
|00000650| 65 65 70 20 75 70 20 77 | 69 74 68 20 61 20 62 75 |eep up w|ith a bu|
|00000660| 73 79 20 6e 65 74 77 6f | 72 6b 2e 0a 0a 20 2d 20 |sy netwo|rk... - |
|00000670| 43 6f 6d 70 72 65 73 73 | 65 64 20 53 4c 49 50 20 |Compress|ed SLIP |
|00000680| 70 61 63 6b 65 74 73 20 | 63 61 6e 20 6e 6f 77 20 |packets |can now |
|00000690| 62 65 20 64 75 6d 70 65 | 64 2c 20 70 72 6f 76 69 |be dumpe|d, provi|
|000006a0| 64 65 64 20 79 6f 75 20 | 75 73 65 20 6f 75 72 0a |ded you |use our.|
|000006b0| 20 20 20 53 4c 49 50 20 | 73 6f 66 74 77 61 72 65 |   SLIP |software|
|000006c0| 20 61 6e 64 20 42 50 46 | 2e 20 20 54 68 65 73 65 | and BPF|.  These|
|000006d0| 20 70 61 63 6b 65 74 73 | 20 61 72 65 20 64 75 6d | packets| are dum|
|000006e0| 70 65 64 20 61 73 20 61 | 6e 79 20 6f 74 68 65 72 |ped as a|ny other|
|000006f0| 20 49 50 0a 20 20 20 70 | 61 63 6b 65 74 3b 20 74 | IP.   p|acket; t|
|00000700| 68 65 20 63 6f 6d 70 72 | 65 73 73 65 64 20 68 65 |he compr|essed he|
|00000710| 61 64 65 72 73 20 61 72 | 65 20 64 75 6d 70 65 64 |aders ar|e dumped|
|00000720| 20 77 69 74 68 20 74 68 | 65 20 27 2d 65 27 20 6f | with th|e '-e' o|
|00000730| 70 74 69 6f 6e 2e 0a 0a | 20 2d 20 4d 61 63 68 69 |ption...| - Machi|
|00000740| 6e 65 73 20 77 69 74 68 | 20 6c 69 74 74 6c 65 2d |nes with| little-|
|00000750| 65 6e 64 69 61 6e 20 62 | 79 74 65 20 6f 72 64 65 |endian b|yte orde|
|00000760| 72 69 6e 67 20 61 72 65 | 20 73 75 70 70 6f 72 74 |ring are| support|
|00000770| 65 64 20 28 74 68 61 6e | 6b 73 20 74 6f 0a 20 20 |ed (than|ks to.  |
|00000780| 20 4a 65 66 66 20 4d 6f | 67 75 6c 29 2e 0a 0a 20 | Jeff Mo|gul)... |
|00000790| 2d 20 55 6c 74 72 69 78 | 20 69 73 20 73 75 70 70 |- Ultrix| is supp|
|000007a0| 6f 72 74 65 64 20 28 61 | 6c 73 6f 20 74 68 61 6e |orted (a|lso than|
|000007b0| 6b 73 20 74 6f 20 4a 65 | 66 66 20 4d 6f 67 75 6c |ks to Je|ff Mogul|
|000007c0| 29 2e 0a 0a 20 2d 20 49 | 42 4d 20 52 54 20 61 6e |)... - I|BM RT an|
|000007d0| 64 20 53 74 61 6e 66 6f | 72 64 20 45 6e 65 74 66 |d Stanfo|rd Enetf|
|000007e0| 69 6c 74 65 72 20 73 75 | 70 70 6f 72 74 20 68 61 |ilter su|pport ha|
|000007f0| 73 20 62 65 65 6e 20 61 | 64 64 65 64 20 62 79 0a |s been a|dded by.|
|00000800| 20 20 20 52 61 79 61 6e | 20 5a 61 63 68 61 72 69 |   Rayan| Zachari|
|00000810| 61 73 73 65 6e 20 3c 72 | 61 79 61 6e 40 63 61 6e |assen <r|ayan@can|
|00000820| 65 74 2e 63 61 3e 2e 20 | 20 54 63 70 64 75 6d 70 |et.ca>. | Tcpdump|
|00000830| 20 68 61 73 20 62 65 65 | 6e 20 74 65 73 74 65 64 | has bee|n tested|
|00000840| 20 75 6e 64 65 72 0a 20 | 20 20 62 6f 74 68 20 74 | under. |  both t|
|00000850| 68 65 20 76 61 6e 69 6c | 6c 61 20 65 6e 65 74 66 |he vanil|la enetf|
|00000860| 69 6c 74 65 72 20 69 6e | 74 65 72 66 61 63 65 2c |ilter in|terface,|
|00000870| 20 61 6e 64 20 74 68 65 | 20 65 78 74 65 6e 64 65 | and the| extende|
|00000880| 64 20 69 6e 74 65 72 66 | 61 63 65 20 0a 20 20 20 |d interf|ace .   |
|00000890| 28 23 69 66 64 65 66 27 | 64 20 62 79 20 49 42 4d |(#ifdef'|d by IBM|
|000008a0| 52 54 50 43 29 20 70 72 | 65 73 65 6e 74 20 69 6e |RTPC) pr|esent in|
|000008b0| 20 74 68 65 20 4d 45 52 | 49 54 20 76 65 72 73 69 | the MER|IT versi|
|000008c0| 6f 6e 20 6f 66 20 74 68 | 65 20 65 6e 65 74 66 69 |on of th|e enetfi|
|000008d0| 6c 74 65 72 2e 0a 0a 20 | 2d 20 54 46 54 50 20 70 |lter... |- TFTP p|
|000008e0| 61 63 6b 65 74 73 20 61 | 72 65 20 6e 6f 77 20 70 |ackets a|re now p|
|000008f0| 72 69 6e 74 65 64 20 28 | 72 65 71 75 65 73 74 73 |rinted (|requests|
|00000900| 20 6f 6e 6c 79 29 2e 0a | 0a 20 2d 20 42 4f 4f 54 | only)..|. - BOOT|
|00000910| 50 20 70 61 63 6b 65 74 | 73 20 61 72 65 20 6e 6f |P packet|s are no|
|00000920| 77 20 70 72 69 6e 74 65 | 64 2e 0a 0a 20 2d 20 53 |w printe|d... - S|
|00000930| 4e 4d 50 20 70 61 63 6b | 65 74 73 20 61 72 65 20 |NMP pack|ets are |
|00000940| 6e 6f 77 20 70 72 69 6e | 74 65 64 2e 20 28 74 68 |now prin|ted. (th|
|00000950| 61 6e 6b 73 20 74 6f 20 | 4a 6f 68 6e 20 4c 6f 56 |anks to |John LoV|
|00000960| 65 72 73 6f 20 6f 66 20 | 58 79 6c 6f 67 69 63 73 |erso of |Xylogics|
|00000970| 29 2e 0a 0a 50 72 6f 62 | 6c 65 6d 73 2c 20 62 75 |)...Prob|lems, bu|
|00000980| 67 73 2c 20 71 75 65 73 | 74 69 6f 6e 73 2c 20 64 |gs, ques|tions, d|
|00000990| 65 73 69 72 61 62 6c 65 | 20 65 6e 68 61 6e 63 65 |esirable| enhance|
|000009a0| 6d 65 6e 74 73 2c 20 65 | 74 63 2e 2c 20 73 68 6f |ments, e|tc., sho|
|000009b0| 75 6c 64 20 62 65 0a 73 | 65 6e 74 20 74 6f 20 74 |uld be.s|ent to t|
|000009c0| 68 65 20 65 6d 61 69 6c | 20 61 64 64 72 65 73 73 |he email| address|
|000009d0| 20 22 74 63 70 64 75 6d | 70 40 65 65 2e 6c 62 6c | "tcpdum|p@ee.lbl|
|000009e0| 2e 67 6f 76 22 2e 20 20 | 57 65 20 61 72 65 20 76 |.gov".  |We are v|
|000009f0| 65 72 79 0a 69 6e 74 65 | 72 65 73 74 65 64 20 69 |ery.inte|rested i|
|00000a00| 6e 20 68 65 61 72 69 6e | 67 20 61 62 6f 75 74 20 |n hearin|g about |
|00000a10| 61 6e 79 20 70 72 6f 62 | 6c 65 6d 73 20 79 6f 75 |any prob|lems you|
|00000a20| 20 6d 61 79 20 65 6e 63 | 6f 75 6e 74 65 72 2c 20 | may enc|ounter, |
|00000a30| 65 73 70 65 63 69 61 6c | 6c 79 0a 74 68 6f 73 65 |especial|ly.those|
|00000a40| 20 72 65 6c 61 74 69 6e | 67 20 74 6f 20 74 68 65 | relatin|g to the|
|00000a50| 20 42 50 46 20 6b 65 72 | 6e 65 6c 20 6d 6f 64 69 | BPF ker|nel modi|
|00000a60| 66 69 63 61 74 69 6f 6e | 73 2e 20 20 55 6e 64 6f |fication|s.  Undo|
|00000a70| 75 62 74 65 64 6c 79 2c | 20 73 6f 6d 65 0a 61 73 |ubtedly,| some.as|
|00000a80| 70 65 63 74 73 20 6f 66 | 20 74 68 65 20 69 6e 73 |pects of| the ins|
|00000a90| 74 61 6c 6c 61 74 69 6f | 6e 20 6d 61 79 20 62 65 |tallatio|n may be|
|00000aa0| 20 75 6e 63 6c 65 61 72 | 2c 20 61 6e 64 20 79 6f | unclear|, and yo|
|00000ab0| 75 72 20 66 65 65 64 62 | 61 63 6b 20 77 69 6c 6c |ur feedb|ack will|
|00000ac0| 0a 62 65 20 76 61 6c 75 | 65 64 20 61 73 20 61 20 |.be valu|ed as a |
|00000ad0| 6d 65 61 6e 73 20 6f 66 | 20 6d 61 6b 69 6e 67 20 |means of| making |
|00000ae0| 74 68 69 73 20 70 61 63 | 6b 61 67 65 20 61 73 20 |this pac|kage as |
|00000af0| 65 61 73 79 20 74 6f 20 | 75 73 65 20 61 73 20 70 |easy to |use as p|
|00000b00| 6f 73 73 69 62 6c 65 2e | 0a 41 6c 73 6f 2c 20 74 |ossible.|.Also, t|
|00000b10| 63 70 64 75 6d 70 27 73 | 20 6d 61 6b 65 66 69 6c |cpdump's| makefil|
|00000b20| 65 20 68 61 73 20 63 6f | 6e 74 69 6e 75 65 64 20 |e has co|ntinued |
|00000b30| 74 6f 20 65 76 6f 6c 76 | 65 2e 20 20 4d 75 6c 74 |to evolv|e.  Mult|
|00000b40| 69 70 6c 65 20 70 6c 61 | 74 66 6f 72 6d 73 0a 61 |iple pla|tforms.a|
|00000b50| 72 65 20 73 75 70 70 6f | 72 74 65 64 20 75 73 69 |re suppo|rted usi|
|00000b60| 6e 67 20 73 75 62 64 69 | 72 65 63 74 6f 72 69 65 |ng subdi|rectorie|
|00000b70| 73 2e 20 20 53 65 65 20 | 49 4e 53 54 41 4c 4c 20 |s.  See |INSTALL |
|00000b80| 66 6f 72 20 6d 6f 72 65 | 20 64 65 74 61 69 6c 73 |for more| details|
|00000b90| 2e 0a 0a 20 2d 20 53 74 | 65 76 65 20 4d 63 43 61 |... - St|eve McCa|
|00000ba0| 6e 6e 65 20 28 6d 63 63 | 61 6e 6e 65 40 65 65 2e |nne (mcc|anne@ee.|
|00000bb0| 6c 62 6c 2e 67 6f 76 29 | 0a 20 20 20 43 72 61 69 |lbl.gov)|.   Crai|
|00000bc0| 67 20 4c 65 72 65 73 20 | 28 6c 65 72 65 73 40 65 |g Leres |(leres@e|
|00000bd0| 65 2e 6c 62 6c 2e 67 6f | 76 29 0a 20 20 20 56 61 |e.lbl.go|v).   Va|
|00000be0| 6e 20 4a 61 63 6f 62 73 | 6f 6e 20 28 76 61 6e 40 |n Jacobs|on (van@|
|00000bf0| 65 65 2e 6c 62 6c 2e 67 | 6f 76 29 0a 0a 2d 2d 2d |ee.lbl.g|ov)..---|
|00000c00| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000c10| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 0a 0a 4f 6c 64 |--------|---..Old|
|00000c20| 20 6e 65 77 73 3a 0a 0a | 20 2d 20 53 70 61 72 63 | news:..| - Sparc|
|00000c30| 20 61 72 63 68 69 74 65 | 63 74 75 72 65 73 2c 20 | archite|ctures, |
|00000c40| 69 6e 63 6c 75 64 69 6e | 67 20 74 68 65 20 53 70 |includin|g the Sp|
|00000c50| 61 72 63 73 74 61 74 69 | 6f 6e 2d 31 2c 20 61 72 |arcstati|on-1, ar|
|00000c60| 65 20 6e 6f 77 0a 20 20 | 20 73 75 70 70 6f 72 74 |e now.  | support|
|00000c70| 65 64 20 74 68 61 6e 6b | 73 20 74 6f 20 53 74 65 |ed thank|s to Ste|
|00000c80| 76 65 20 4d 63 43 61 6e | 6e 65 20 61 6e 64 20 43 |ve McCan|ne and C|
|00000c90| 72 61 69 67 20 4c 65 72 | 65 73 2e 0a 0a 20 2d 20 |raig Ler|es... - |
|00000ca0| 53 75 6e 4f 53 20 34 20 | 69 73 20 6e 6f 77 20 73 |SunOS 4 |is now s|
|00000cb0| 75 70 70 6f 72 74 65 64 | 20 74 68 61 6e 6b 73 20 |upported| thanks |
|00000cc0| 74 6f 20 4d 69 63 6b 79 | 20 4c 69 75 20 6f 66 20 |to Micky| Liu of |
|00000cd0| 43 6f 6c 75 6d 62 69 61 | 0a 20 20 20 55 6e 69 76 |Columbia|.   Univ|
|00000ce0| 65 72 73 69 74 79 20 28 | 6d 69 63 6b 79 40 63 75 |ersity (|micky@cu|
|00000cf0| 6e 69 78 63 2e 63 63 2e | 63 6f 6c 75 6d 62 69 61 |nixc.cc.|columbia|
|00000d00| 2e 65 64 75 29 2e 0a 0a | 20 2d 20 49 50 20 6f 70 |.edu)...| - IP op|
|00000d10| 74 69 6f 6e 73 20 61 72 | 65 20 6e 6f 77 20 70 72 |tions ar|e now pr|
|00000d20| 69 6e 74 65 64 2e 0a 0a | 20 2d 20 52 49 50 20 70 |inted...| - RIP p|
|00000d30| 61 63 6b 65 74 73 20 61 | 72 65 20 6e 6f 77 20 70 |ackets a|re now p|
|00000d40| 72 69 6e 74 65 64 2e 0a | 0a 20 2d 20 54 68 65 72 |rinted..|. - Ther|
|00000d50| 65 27 73 20 61 20 2d 76 | 20 66 6c 61 67 20 74 68 |e's a -v| flag th|
|00000d60| 61 74 20 70 72 69 6e 74 | 73 20 6f 75 74 20 6d 6f |at print|s out mo|
|00000d70| 72 65 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 20 74 |re infor|mation t|
|00000d80| 68 61 6e 20 74 68 65 0a | 20 20 20 64 65 66 61 75 |han the.|   defau|
|00000d90| 6c 74 20 28 65 2e 67 2e | 2c 20 69 74 20 77 69 6c |lt (e.g.|, it wil|
|00000da0| 6c 20 65 6e 61 62 6c 65 | 20 70 72 69 6e 74 69 6e |l enable| printin|
|00000db0| 67 20 6f 66 20 49 50 20 | 74 74 6c 2c 20 74 6f 73 |g of IP |ttl, tos|
|00000dc0| 20 61 6e 64 20 69 64 29 | 0a 20 20 20 61 6e 64 20 | and id)|.   and |
|00000dd0| 2d 71 20 66 6c 61 67 20 | 74 68 61 74 20 70 72 69 |-q flag |that pri|
|00000de0| 6e 74 73 20 6f 75 74 20 | 6c 65 73 73 20 28 65 2e |nts out |less (e.|
|00000df0| 67 2e 2c 20 69 74 20 77 | 69 6c 6c 20 64 69 73 61 |g., it w|ill disa|
|00000e00| 62 6c 65 0a 20 20 20 69 | 6e 74 65 72 70 72 65 74 |ble.   i|nterpret|
|00000e10| 61 74 69 6f 6e 20 6f 66 | 20 41 70 70 6c 65 54 61 |ation of| AppleTa|
|00000e20| 6c 6b 2d 69 6e 2d 55 44 | 50 29 2e 0a 0a 20 2d 20 |lk-in-UD|P)... - |
|00000e30| 54 68 65 20 67 72 61 6d | 6d 61 72 20 68 61 73 20 |The gram|mar has |
|00000e40| 75 6e 64 65 72 67 6f 6e | 65 20 73 75 62 73 74 61 |undergon|e substa|
|00000e50| 6e 74 69 61 6c 20 63 68 | 61 6e 67 65 73 20 28 69 |ntial ch|anges (i|
|00000e60| 66 20 79 6f 75 20 68 61 | 76 65 20 61 6e 0a 20 20 |f you ha|ve an.  |
|00000e70| 20 65 61 72 6c 69 65 72 | 20 76 65 72 73 69 6f 6e | earlier| version|
|00000e80| 20 6f 66 20 74 63 70 64 | 75 6d 70 2c 20 79 6f 75 | of tcpd|ump, you|
|00000e90| 20 73 68 6f 75 6c 64 20 | 72 65 2d 72 65 61 64 20 | should |re-read |
|00000ea0| 74 68 65 20 6d 61 6e 75 | 61 6c 0a 20 20 20 65 6e |the manu|al.   en|
|00000eb0| 74 72 79 29 2e 0a 0a 20 | 20 20 54 68 65 20 6d 6f |try)... |  The mo|
|00000ec0| 73 74 20 75 73 65 66 75 | 6c 20 63 68 61 6e 67 65 |st usefu|l change|
|00000ed0| 20 69 73 20 74 68 65 20 | 61 64 64 69 74 69 6f 6e | is the |addition|
|00000ee0| 20 6f 66 20 61 6e 20 65 | 78 70 72 65 73 73 69 6f | of an e|xpressio|
|00000ef0| 6e 0a 20 20 20 73 79 6e | 74 61 78 20 74 68 61 74 |n.   syn|tax that|
|00000f00| 20 6c 65 74 73 20 79 6f | 75 20 66 69 6c 74 65 72 | lets yo|u filter|
|00000f10| 20 6f 6e 20 61 72 62 69 | 74 72 61 72 79 20 66 69 | on arbi|trary fi|
|00000f20| 65 6c 64 73 20 6f 72 20 | 76 61 6c 75 65 73 20 69 |elds or |values i|
|00000f30| 6e 20 74 68 65 0a 20 20 | 20 70 61 63 6b 65 74 2e |n the.  | packet.|
|00000f40| 20 20 45 2e 67 2e 2c 20 | 22 69 70 5b 30 5d 20 3e |  E.g., |"ip[0] >|
|00000f50| 20 30 78 34 35 22 20 77 | 6f 75 6c 64 20 70 72 69 | 0x45" w|ould pri|
|00000f60| 6e 74 20 6f 6e 6c 79 20 | 70 61 63 6b 65 74 73 20 |nt only |packets |
|00000f70| 77 69 74 68 20 49 50 0a | 20 20 20 6f 70 74 69 6f |with IP.|   optio|
|00000f80| 6e 73 2c 20 22 74 63 70 | 5b 31 33 5d 20 26 20 33 |ns, "tcp|[13] & 3|
|00000f90| 20 21 3d 20 30 22 20 77 | 6f 75 6c 64 20 70 72 69 | != 0" w|ould pri|
|00000fa0| 6e 74 20 6f 6e 6c 79 20 | 54 43 50 20 53 59 4e 20 |nt only |TCP SYN |
|00000fb0| 61 6e 64 20 46 49 4e 0a | 20 20 20 70 61 63 6b 65 |and FIN.|   packe|
|00000fc0| 74 73 2e 0a 0a 20 20 20 | 54 68 65 20 6d 6f 73 74 |ts...   |The most|
|00000fd0| 20 70 61 69 6e 66 75 6c | 20 63 68 61 6e 67 65 20 | painful| change |
|00000fe0| 69 73 20 74 68 61 74 20 | 63 6f 6e 63 61 74 65 6e |is that |concaten|
|00000ff0| 61 74 69 6f 6e 20 6e 6f | 20 6c 6f 6e 67 65 72 20 |ation no| longer |
|00001000| 6d 65 61 6e 73 0a 20 20 | 20 22 61 6e 64 22 20 2d |means.  | "and" -|
|00001010| 2d 20 65 2e 67 2e 2c 20 | 79 6f 75 20 68 61 76 65 |- e.g., |you have|
|00001020| 20 74 6f 20 73 61 79 20 | 22 68 6f 73 74 20 66 6f | to say |"host fo|
|00001030| 6f 20 61 6e 64 20 70 6f | 72 74 20 62 61 72 22 20 |o and po|rt bar" |
|00001040| 69 6e 73 74 65 61 64 0a | 20 20 20 6f 66 20 22 68 |instead.|   of "h|
|00001050| 6f 73 74 20 66 6f 6f 20 | 70 6f 72 74 20 62 61 72 |ost foo |port bar|
|00001060| 22 2e 20 20 54 68 65 20 | 75 70 20 73 69 64 65 20 |".  The |up side |
|00001070| 74 6f 20 74 68 69 73 20 | 64 6f 77 6e 20 69 73 20 |to this |down is |
|00001080| 74 68 61 74 0a 20 20 20 | 72 65 70 65 61 74 65 64 |that.   |repeated|
|00001090| 20 71 75 61 6c 69 66 69 | 65 72 73 20 63 61 6e 20 | qualifi|ers can |
|000010a0| 62 65 20 6f 6d 69 74 74 | 65 64 2c 20 6d 61 6b 69 |be omitt|ed, maki|
|000010b0| 6e 67 20 6d 6f 73 74 20 | 66 69 6c 74 65 72 0a 20 |ng most |filter. |
|000010c0| 20 20 65 78 70 72 65 73 | 73 69 6f 6e 73 20 73 68 |  expres|sions sh|
|000010d0| 6f 72 74 65 72 2e 20 20 | 45 2e 67 2e 2c 20 79 6f |orter.  |E.g., yo|
|000010e0| 75 20 63 61 6e 20 6e 6f | 77 20 73 61 79 20 22 69 |u can no|w say "i|
|000010f0| 70 20 68 6f 73 74 20 66 | 6f 6f 20 61 6e 64 0a 20 |p host f|oo and. |
|00001100| 20 20 28 62 61 72 20 6f | 72 20 62 61 7a 29 22 20 |  (bar o|r baz)" |
|00001110| 74 6f 20 6c 6f 6f 6b 20 | 61 74 20 69 70 20 74 72 |to look |at ip tr|
|00001120| 61 66 66 69 63 20 62 65 | 74 77 65 65 6e 20 68 6f |affic be|tween ho|
|00001130| 73 74 73 20 66 6f 6f 20 | 61 6e 64 20 62 61 72 20 |sts foo |and bar |
|00001140| 6f 72 0a 20 20 20 62 65 | 74 77 65 65 6e 20 68 6f |or.   be|tween ho|
|00001150| 73 74 73 20 66 6f 6f 20 | 61 6e 64 20 62 61 7a 2e |sts foo |and baz.|
|00001160| 20 20 5b 54 68 65 20 6f | 6c 64 20 77 61 79 20 6f |  [The o|ld way o|
|00001170| 66 20 73 61 79 69 6e 67 | 20 74 68 69 73 20 77 61 |f saying| this wa|
|00001180| 73 20 22 69 70 0a 20 20 | 20 68 6f 73 74 20 66 6f |s "ip.  | host fo|
|00001190| 6f 20 61 6e 64 20 28 69 | 70 20 68 6f 73 74 20 62 |o and (i|p host b|
|000011a0| 61 72 20 6f 72 20 69 70 | 20 68 6f 73 74 20 62 61 |ar or ip| host ba|
|000011b0| 7a 29 22 2e 5d 0a 0a 2d | 2d 2d 2d 2d 2d 2d 2d 2d |z)".]..-|--------|
|000011c0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000011d0| 2d 2d 2d 2d 2d 0a 0a 54 | 68 65 20 70 72 6f 67 72 |-----..T|he progr|
|000011e0| 61 6d 20 69 73 20 6c 6f | 6f 73 65 6c 79 20 62 61 |am is lo|osely ba|
|000011f0| 73 65 64 20 6f 6e 20 53 | 4d 49 27 73 20 22 65 74 |sed on S|MI's "et|
|00001200| 68 65 72 66 69 6e 64 22 | 20 61 6c 74 68 6f 75 67 |herfind"| althoug|
|00001210| 68 20 6e 6f 6e 65 0a 6f | 66 20 74 68 65 20 65 74 |h none.o|f the et|
|00001220| 68 65 72 66 69 6e 64 20 | 63 6f 64 65 20 72 65 6d |herfind |code rem|
|00001230| 61 69 6e 73 2e 20 20 49 | 74 20 77 61 73 20 6f 72 |ains.  I|t was or|
|00001240| 69 67 69 6e 61 6c 6c 79 | 20 77 72 69 74 74 65 6e |iginally| written|
|00001250| 20 62 79 20 56 61 6e 0a | 4a 61 63 6f 62 73 6f 6e | by Van.|Jacobson|
|00001260| 2c 20 4c 61 77 72 65 6e | 63 65 20 42 65 72 6b 65 |, Lawren|ce Berke|
|00001270| 6c 65 79 20 4c 61 62 6f | 72 61 74 6f 72 79 2c 20 |ley Labo|ratory, |
|00001280| 61 73 20 70 61 72 74 20 | 6f 66 20 61 6e 20 6f 6e |as part |of an on|
|00001290| 67 6f 69 6e 67 0a 72 65 | 73 65 61 72 63 68 20 70 |going.re|search p|
|000012a0| 72 6f 6a 65 63 74 20 74 | 6f 20 69 6e 76 65 73 74 |roject t|o invest|
|000012b0| 69 67 61 74 65 20 61 6e | 64 20 69 6d 70 72 6f 76 |igate an|d improv|
|000012c0| 65 20 74 63 70 20 61 6e | 64 20 69 6e 74 65 72 6e |e tcp an|d intern|
|000012d0| 65 74 0a 67 61 74 65 77 | 61 79 20 70 65 72 66 6f |et.gatew|ay perfo|
|000012e0| 72 6d 61 6e 63 65 2e 20 | 20 54 68 65 20 70 61 72 |rmance. | The par|
|000012f0| 74 73 20 6f 66 20 74 68 | 65 20 70 72 6f 67 72 61 |ts of th|e progra|
|00001300| 6d 20 6f 72 69 67 69 6e | 61 6c 6c 79 20 74 61 6b |m origin|ally tak|
|00001310| 65 6e 0a 66 72 6f 6d 20 | 53 75 6e 27 73 20 65 74 |en.from |Sun's et|
|00001320| 68 65 72 66 69 6e 64 20 | 77 65 72 65 20 6c 61 74 |herfind |were lat|
|00001330| 65 72 20 72 65 2d 77 72 | 69 74 74 65 6e 20 62 79 |er re-wr|itten by|
|00001340| 20 53 74 65 76 65 20 4d | 63 43 61 6e 6e 65 20 6f | Steve M|cCanne o|
|00001350| 66 0a 4c 42 4c 2e 20 20 | 54 6f 20 69 6e 73 75 72 |f.LBL.  |To insur|
|00001360| 65 20 74 68 61 74 20 77 | 6f 75 6c 64 20 62 65 20 |e that w|ould be |
|00001370| 6e 6f 20 76 65 73 74 69 | 67 65 20 6f 66 20 70 72 |no vesti|ge of pr|
|00001380| 6f 70 72 69 65 74 61 72 | 79 20 63 6f 64 65 20 69 |oprietar|y code i|
|00001390| 6e 0a 74 63 70 64 75 6d | 70 2c 20 53 74 65 76 65 |n.tcpdum|p, Steve|
|000013a0| 20 77 72 6f 74 65 20 74 | 68 65 73 65 20 70 69 65 | wrote t|hese pie|
|000013b0| 63 65 73 20 66 72 6f 6d | 20 74 68 65 20 73 70 65 |ces from| the spe|
|000013c0| 63 69 66 69 63 61 74 69 | 6f 6e 20 67 69 76 65 6e |cificati|on given|
|000013d0| 0a 62 79 20 74 68 65 20 | 6d 61 6e 75 61 6c 20 65 |.by the |manual e|
|000013e0| 6e 74 72 79 2c 20 77 69 | 74 68 20 6e 6f 20 61 63 |ntry, wi|th no ac|
|000013f0| 63 65 73 73 20 74 6f 20 | 74 68 65 20 73 6f 75 72 |cess to |the sour|
|00001400| 63 65 20 6f 66 20 74 63 | 70 64 75 6d 70 20 6f 72 |ce of tc|pdump or|
|00001410| 0a 65 74 68 65 72 66 69 | 6e 64 2e 0a 0a 54 68 65 |.etherfi|nd...The|
|00001420| 20 63 75 72 72 65 6e 74 | 20 76 65 72 73 69 6f 6e | current| version|
|00001430| 73 20 6f 66 20 74 68 65 | 73 65 20 66 69 6c 65 73 |s of the|se files|
|00001440| 20 61 72 65 20 61 76 61 | 69 6c 61 62 6c 65 20 76 | are ava|ilable v|
|00001450| 69 61 20 61 6e 6f 6e 79 | 6d 6f 75 73 0a 66 74 70 |ia anony|mous.ftp|
|00001460| 20 66 72 6f 6d 20 68 6f | 73 74 20 66 74 70 2e 65 | from ho|st ftp.e|
|00001470| 65 2e 6c 62 6c 2e 67 6f | 76 20 28 63 75 72 72 65 |e.lbl.go|v (curre|
|00001480| 6e 74 6c 79 20 61 74 20 | 61 64 64 72 65 73 73 20 |ntly at |address |
|00001490| 31 32 38 2e 33 2e 32 35 | 34 2e 36 38 29 0a 66 69 |128.3.25|4.68).fi|
|000014a0| 6c 65 20 74 63 70 64 75 | 6d 70 2e 74 61 72 2e 5a |le tcpdu|mp.tar.Z|
|000014b0| 20 28 61 20 63 6f 6d 70 | 72 65 73 73 65 64 20 55 | (a comp|ressed U|
|000014c0| 6e 69 78 20 74 61 72 20 | 66 69 6c 65 29 2e 0a 0a |nix tar |file)...|
|000014d0| 54 68 69 73 20 70 72 6f | 67 72 61 6d 20 69 73 20 |This pro|gram is |
|000014e0| 73 75 62 6a 65 63 74 20 | 74 6f 20 74 68 65 20 27 |subject |to the '|
|000014f0| 73 74 61 6e 64 61 72 64 | 27 20 42 65 72 6b 65 6c |standard|' Berkel|
|00001500| 65 79 20 6e 65 74 77 6f | 72 6b 20 73 6f 66 74 77 |ey netwo|rk softw|
|00001510| 61 72 65 0a 63 6f 70 79 | 72 69 67 68 74 3a 0a 20 |are.copy|right:. |
|00001520| 20 0a 20 20 43 6f 70 79 | 72 69 67 68 74 20 28 63 | .  Copy|right (c|
|00001530| 29 20 31 39 38 38 2d 31 | 39 39 30 20 54 68 65 20 |) 1988-1|990 The |
|00001540| 52 65 67 65 6e 74 73 20 | 6f 66 20 74 68 65 20 55 |Regents |of the U|
|00001550| 6e 69 76 65 72 73 69 74 | 79 20 6f 66 20 43 61 6c |niversit|y of Cal|
|00001560| 69 66 6f 72 6e 69 61 2e | 0a 20 20 41 6c 6c 20 72 |ifornia.|.  All r|
|00001570| 69 67 68 74 73 20 72 65 | 73 65 72 76 65 64 2e 0a |ights re|served..|
|00001580| 0a 20 20 52 65 64 69 73 | 74 72 69 62 75 74 69 6f |.  Redis|tributio|
|00001590| 6e 20 61 6e 64 20 75 73 | 65 20 69 6e 20 73 6f 75 |n and us|e in sou|
|000015a0| 72 63 65 20 61 6e 64 20 | 62 69 6e 61 72 79 20 66 |rce and |binary f|
|000015b0| 6f 72 6d 73 2c 20 77 69 | 74 68 20 6f 72 20 77 69 |orms, wi|th or wi|
|000015c0| 74 68 6f 75 74 0a 20 20 | 6d 6f 64 69 66 69 63 61 |thout.  |modifica|
|000015d0| 74 69 6f 6e 2c 20 61 72 | 65 20 70 65 72 6d 69 74 |tion, ar|e permit|
|000015e0| 74 65 64 20 70 72 6f 76 | 69 64 65 64 20 74 68 61 |ted prov|ided tha|
|000015f0| 74 3a 20 28 31 29 20 73 | 6f 75 72 63 65 20 63 6f |t: (1) s|ource co|
|00001600| 64 65 20 64 69 73 74 72 | 69 62 75 74 69 6f 6e 73 |de distr|ibutions|
|00001610| 0a 20 20 72 65 74 61 69 | 6e 20 74 68 65 20 61 62 |.  retai|n the ab|
|00001620| 6f 76 65 20 63 6f 70 79 | 72 69 67 68 74 20 6e 6f |ove copy|right no|
|00001630| 74 69 63 65 20 61 6e 64 | 20 74 68 69 73 20 70 61 |tice and| this pa|
|00001640| 72 61 67 72 61 70 68 20 | 69 6e 20 69 74 73 20 65 |ragraph |in its e|
|00001650| 6e 74 69 72 65 74 79 2c | 20 28 32 29 0a 20 20 64 |ntirety,| (2).  d|
|00001660| 69 73 74 72 69 62 75 74 | 69 6f 6e 73 20 69 6e 63 |istribut|ions inc|
|00001670| 6c 75 64 69 6e 67 20 62 | 69 6e 61 72 79 20 63 6f |luding b|inary co|
|00001680| 64 65 20 69 6e 63 6c 75 | 64 65 20 74 68 65 20 61 |de inclu|de the a|
|00001690| 62 6f 76 65 20 63 6f 70 | 79 72 69 67 68 74 20 6e |bove cop|yright n|
|000016a0| 6f 74 69 63 65 20 61 6e | 64 0a 20 20 74 68 69 73 |otice an|d.  this|
|000016b0| 20 70 61 72 61 67 72 61 | 70 68 20 69 6e 20 69 74 | paragra|ph in it|
|000016c0| 73 20 65 6e 74 69 72 65 | 74 79 20 69 6e 20 74 68 |s entire|ty in th|
|000016d0| 65 20 64 6f 63 75 6d 65 | 6e 74 61 74 69 6f 6e 20 |e docume|ntation |
|000016e0| 6f 72 20 6f 74 68 65 72 | 20 6d 61 74 65 72 69 61 |or other| materia|
|000016f0| 6c 73 0a 20 20 70 72 6f | 76 69 64 65 64 20 77 69 |ls.  pro|vided wi|
|00001700| 74 68 20 74 68 65 20 64 | 69 73 74 72 69 62 75 74 |th the d|istribut|
|00001710| 69 6f 6e 2c 20 61 6e 64 | 20 28 33 29 20 61 6c 6c |ion, and| (3) all|
|00001720| 20 61 64 76 65 72 74 69 | 73 69 6e 67 20 6d 61 74 | adverti|sing mat|
|00001730| 65 72 69 61 6c 73 20 6d | 65 6e 74 69 6f 6e 69 6e |erials m|entionin|
|00001740| 67 0a 20 20 66 65 61 74 | 75 72 65 73 20 6f 72 20 |g.  feat|ures or |
|00001750| 75 73 65 20 6f 66 20 74 | 68 69 73 20 73 6f 66 74 |use of t|his soft|
|00001760| 77 61 72 65 20 64 69 73 | 70 6c 61 79 20 74 68 65 |ware dis|play the|
|00001770| 20 66 6f 6c 6c 6f 77 69 | 6e 67 20 61 63 6b 6e 6f | followi|ng ackno|
|00001780| 77 6c 65 64 67 65 6d 65 | 6e 74 3a 0a 20 20 60 60 |wledgeme|nt:.  ``|
|00001790| 54 68 69 73 20 70 72 6f | 64 75 63 74 20 69 6e 63 |This pro|duct inc|
|000017a0| 6c 75 64 65 73 20 73 6f | 66 74 77 61 72 65 20 64 |ludes so|ftware d|
|000017b0| 65 76 65 6c 6f 70 65 64 | 20 62 79 20 74 68 65 20 |eveloped| by the |
|000017c0| 55 6e 69 76 65 72 73 69 | 74 79 20 6f 66 20 43 61 |Universi|ty of Ca|
|000017d0| 6c 69 66 6f 72 6e 69 61 | 2c 0a 20 20 4c 61 77 72 |lifornia|,.  Lawr|
|000017e0| 65 6e 63 65 20 42 65 72 | 6b 65 6c 65 79 20 4c 61 |ence Ber|keley La|
|000017f0| 62 6f 72 61 74 6f 72 79 | 20 61 6e 64 20 69 74 73 |boratory| and its|
|00001800| 20 63 6f 6e 74 72 69 62 | 75 74 6f 72 73 2e 27 27 | contrib|utors.''|
|00001810| 20 4e 65 69 74 68 65 72 | 20 74 68 65 20 6e 61 6d | Neither| the nam|
|00001820| 65 20 6f 66 0a 20 20 74 | 68 65 20 55 6e 69 76 65 |e of.  t|he Unive|
|00001830| 72 73 69 74 79 20 6e 6f | 72 20 74 68 65 20 6e 61 |rsity no|r the na|
|00001840| 6d 65 73 20 6f 66 20 69 | 74 73 20 63 6f 6e 74 72 |mes of i|ts contr|
|00001850| 69 62 75 74 6f 72 73 20 | 6d 61 79 20 62 65 20 75 |ibutors |may be u|
|00001860| 73 65 64 20 74 6f 20 65 | 6e 64 6f 72 73 65 0a 20 |sed to e|ndorse. |
|00001870| 20 6f 72 20 70 72 6f 6d | 6f 74 65 20 70 72 6f 64 | or prom|ote prod|
|00001880| 75 63 74 73 20 64 65 72 | 69 76 65 64 20 66 72 6f |ucts der|ived fro|
|00001890| 6d 20 74 68 69 73 20 73 | 6f 66 74 77 61 72 65 20 |m this s|oftware |
|000018a0| 77 69 74 68 6f 75 74 20 | 73 70 65 63 69 66 69 63 |without |specific|
|000018b0| 20 70 72 69 6f 72 0a 20 | 20 77 72 69 74 74 65 6e | prior. | written|
|000018c0| 20 70 65 72 6d 69 73 73 | 69 6f 6e 2e 0a 20 20 54 | permiss|ion..  T|
|000018d0| 48 49 53 20 53 4f 46 54 | 57 41 52 45 20 49 53 20 |HIS SOFT|WARE IS |
|000018e0| 50 52 4f 56 49 44 45 44 | 20 60 60 41 53 20 49 53 |PROVIDED| ``AS IS|
|000018f0| 27 27 20 41 4e 44 20 57 | 49 54 48 4f 55 54 20 41 |'' AND W|ITHOUT A|
|00001900| 4e 59 20 45 58 50 52 45 | 53 53 20 4f 52 20 49 4d |NY EXPRE|SS OR IM|
|00001910| 50 4c 49 45 44 0a 20 20 | 57 41 52 52 41 4e 54 49 |PLIED.  |WARRANTI|
|00001920| 45 53 2c 20 49 4e 43 4c | 55 44 49 4e 47 2c 20 57 |ES, INCL|UDING, W|
|00001930| 49 54 48 4f 55 54 20 4c | 49 4d 49 54 41 54 49 4f |ITHOUT L|IMITATIO|
|00001940| 4e 2c 20 54 48 45 20 49 | 4d 50 4c 49 45 44 20 57 |N, THE I|MPLIED W|
|00001950| 41 52 52 41 4e 54 49 45 | 53 20 4f 46 0a 20 20 4d |ARRANTIE|S OF.  M|
|00001960| 45 52 43 48 41 4e 54 41 | 42 49 4c 49 54 59 20 41 |ERCHANTA|BILITY A|
|00001970| 4e 44 20 46 49 54 4e 45 | 53 53 20 46 4f 52 20 41 |ND FITNE|SS FOR A|
|00001980| 20 50 41 52 54 49 43 55 | 4c 41 52 20 50 55 52 50 | PARTICU|LAR PURP|
|00001990| 4f 53 45 2e 0a 0a 45 6e | 6a 6f 79 2e 0a 0a 20 20 |OSE...En|joy...  |
|000019a0| 2d 20 56 61 6e 20 4a 61 | 63 6f 62 73 6f 6e 2c 20 |- Van Ja|cobson, |
|000019b0| 53 74 65 76 65 20 4d 63 | 43 61 6e 6e 65 2c 20 43 |Steve Mc|Canne, C|
|000019c0| 72 61 69 67 20 4c 65 72 | 65 73 0a 2d 2d 2d 2d 2d |raig Ler|es.-----|
|000019d0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000019e0| 2d 2d 2d 2d 2d 2d 2d 0a | 0a 54 68 69 73 20 64 69 |-------.|.This di|
|000019f0| 72 65 63 74 6f 72 79 20 | 61 6c 73 6f 20 63 6f 6e |rectory |also con|
|00001a00| 74 61 69 6e 73 20 73 6f | 6d 65 20 73 68 6f 72 74 |tains so|me short|
|00001a10| 20 61 77 6b 20 70 72 6f | 67 72 61 6d 73 20 69 6e | awk pro|grams in|
|00001a20| 74 65 6e 64 65 64 20 61 | 73 0a 65 78 61 6d 70 6c |tended a|s.exampl|
|00001a30| 65 73 20 6f 66 20 77 61 | 79 73 20 74 6f 20 72 65 |es of wa|ys to re|
|00001a40| 64 75 63 65 20 74 63 70 | 64 75 6d 70 20 64 61 74 |duce tcp|dump dat|
|00001a50| 61 20 77 68 65 6e 20 79 | 6f 75 27 72 65 20 74 72 |a when y|ou're tr|
|00001a60| 61 63 6b 69 6e 67 0a 70 | 61 72 74 69 63 75 6c 61 |acking.p|articula|
|00001a70| 72 20 6e 65 74 77 6f 72 | 6b 20 70 72 6f 62 6c 65 |r networ|k proble|
|00001a80| 6d 73 3a 0a 0a 73 65 6e | 64 2d 61 63 6b 2e 61 77 |ms:..sen|d-ack.aw|
|00001a90| 6b 0a 09 53 69 6d 70 6c | 69 66 69 65 73 20 74 68 |k..Simpl|ifies th|
|00001aa0| 65 20 74 63 70 64 75 6d | 70 20 74 72 61 63 65 20 |e tcpdum|p trace |
|00001ab0| 66 6f 72 20 61 6e 20 66 | 74 70 20 28 6f 72 20 6f |for an f|tp (or o|
|00001ac0| 74 68 65 72 20 75 6e 69 | 64 69 72 65 63 74 69 6f |ther uni|directio|
|00001ad0| 6e 61 6c 0a 09 74 63 70 | 20 74 72 61 6e 73 66 65 |nal..tcp| transfe|
|00001ae0| 72 29 2e 20 20 53 69 6e | 63 65 20 77 65 20 61 73 |r).  Sin|ce we as|
|00001af0| 73 75 6d 65 20 74 68 61 | 74 20 6f 6e 65 20 68 6f |sume tha|t one ho|
|00001b00| 73 74 20 6f 6e 6c 79 20 | 73 65 6e 64 73 20 61 6e |st only |sends an|
|00001b10| 64 0a 09 74 68 65 20 6f | 74 68 65 72 20 6f 6e 6c |d..the o|ther onl|
|00001b20| 79 20 61 63 6b 73 2c 20 | 61 6c 6c 20 61 64 64 72 |y acks, |all addr|
|00001b30| 65 73 73 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |ess info|rmation |
|00001b40| 69 73 20 6c 65 66 74 20 | 6f 66 66 20 61 6e 64 0a |is left |off and.|
|00001b50| 09 77 65 20 6a 75 73 74 | 20 6e 6f 74 65 20 69 66 |.we just| note if|
|00001b60| 20 74 68 65 20 70 61 63 | 6b 65 74 20 69 73 20 61 | the pac|ket is a|
|00001b70| 20 22 73 65 6e 64 22 20 | 6f 72 20 61 6e 20 22 61 | "send" |or an "a|
|00001b80| 63 6b 22 2e 0a 0a 09 54 | 68 65 72 65 20 69 73 20 |ck"....T|here is |
|00001b90| 6f 6e 65 20 6f 75 74 70 | 75 74 20 6c 69 6e 65 20 |one outp|ut line |
|00001ba0| 70 65 72 20 6c 69 6e 65 | 20 6f 66 20 74 68 65 20 |per line| of the |
|00001bb0| 6f 72 69 67 69 6e 61 6c | 20 74 72 61 63 65 2e 20 |original| trace. |
|00001bc0| 0a 09 46 69 65 6c 64 20 | 31 20 69 73 20 74 68 65 |..Field |1 is the|
|00001bd0| 20 70 61 63 6b 65 74 20 | 74 69 6d 65 20 69 6e 20 | packet |time in |
|00001be0| 64 65 63 69 6d 61 6c 20 | 73 65 63 6f 6e 64 73 2c |decimal |seconds,|
|00001bf0| 20 72 65 6c 61 74 69 76 | 65 0a 09 74 6f 20 74 68 | relativ|e..to th|
|00001c00| 65 20 73 74 61 72 74 20 | 6f 66 20 74 68 65 20 63 |e start |of the c|
|00001c10| 6f 6e 76 65 72 73 61 74 | 69 6f 6e 2e 20 20 46 69 |onversat|ion.  Fi|
|00001c20| 65 6c 64 20 32 20 69 73 | 20 64 65 6c 74 61 2d 74 |eld 2 is| delta-t|
|00001c30| 69 6d 65 0a 09 66 72 6f | 6d 20 6c 61 73 74 20 70 |ime..fro|m last p|
|00001c40| 61 63 6b 65 74 2e 20 20 | 46 69 65 6c 64 20 33 20 |acket.  |Field 3 |
|00001c50| 69 73 20 70 61 63 6b 65 | 74 20 74 79 70 65 2f 64 |is packe|t type/d|
|00001c60| 69 72 65 63 74 69 6f 6e | 2e 20 0a 09 22 53 65 6e |irection|. .."Sen|
|00001c70| 64 22 20 6d 65 61 6e 73 | 20 64 61 74 61 20 67 6f |d" means| data go|
|00001c80| 69 6e 67 20 66 72 6f 6d | 20 73 65 6e 64 65 72 20 |ing from| sender |
|00001c90| 74 6f 20 72 65 63 65 69 | 76 65 72 2c 20 22 61 63 |to recei|ver, "ac|
|00001ca0| 6b 22 0a 09 6d 65 61 6e | 73 20 61 6e 20 61 63 6b |k"..mean|s an ack|
|00001cb0| 20 67 6f 69 6e 67 20 66 | 72 6f 6d 20 74 68 65 20 | going f|rom the |
|00001cc0| 72 65 63 65 69 76 65 72 | 20 74 6f 20 74 68 65 20 |receiver| to the |
|00001cd0| 73 65 6e 64 65 72 2e 20 | 20 41 0a 09 70 72 65 63 |sender. | A..prec|
|00001ce0| 65 64 69 6e 67 20 22 2a | 22 20 69 6e 64 69 63 61 |eding "*|" indica|
|00001cf0| 74 65 73 20 74 68 61 74 | 20 74 68 65 20 64 61 74 |tes that| the dat|
|00001d00| 61 20 69 73 20 61 20 72 | 65 74 72 61 6e 73 6d 69 |a is a r|etransmi|
|00001d10| 73 73 69 6f 6e 2e 0a 09 | 41 20 70 72 65 63 65 64 |ssion...|A preced|
|00001d20| 69 6e 67 20 22 2d 22 20 | 69 6e 64 69 63 61 74 65 |ing "-" |indicate|
|00001d30| 73 20 61 20 68 6f 6c 65 | 20 69 6e 20 74 68 65 20 |s a hole| in the |
|00001d40| 73 65 71 75 65 6e 63 65 | 20 73 70 61 63 65 0a 09 |sequence| space..|
|00001d50| 28 69 2e 65 2e 2c 20 6d | 69 73 73 69 6e 67 20 70 |(i.e., m|issing p|
|00001d60| 61 63 6b 65 74 28 73 29 | 29 2c 20 61 20 22 23 22 |acket(s)|), a "#"|
|00001d70| 20 6d 65 61 6e 73 20 61 | 6e 20 6f 64 64 2d 73 69 | means a|n odd-si|
|00001d80| 7a 65 20 28 6e 6f 74 20 | 6d 61 78 0a 09 73 65 67 |ze (not |max..seg|
|00001d90| 20 73 69 7a 65 29 20 70 | 61 63 6b 65 74 2e 20 20 | size) p|acket.  |
|00001da0| 46 69 65 6c 64 20 34 20 | 68 61 73 20 74 68 65 20 |Field 4 |has the |
|00001db0| 70 61 63 6b 65 74 20 66 | 6c 61 67 73 0a 09 28 73 |packet f|lags..(s|
|00001dc0| 61 6d 65 20 66 6f 72 6d | 61 74 20 61 73 20 72 61 |ame form|at as ra|
|00001dd0| 77 20 74 72 61 63 65 29 | 2e 20 20 46 69 65 6c 64 |w trace)|.  Field|
|00001de0| 20 35 20 69 73 20 74 68 | 65 20 73 65 71 75 65 6e | 5 is th|e sequen|
|00001df0| 63 65 0a 09 6e 75 6d 62 | 65 72 20 28 73 74 61 72 |ce..numb|er (star|
|00001e00| 74 20 73 65 71 2e 20 6e | 75 6d 20 66 6f 72 20 73 |t seq. n|um for s|
|00001e10| 65 6e 64 65 72 2c 20 6e | 65 78 74 20 65 78 70 65 |ender, n|ext expe|
|00001e20| 63 74 65 64 20 73 65 71 | 20 6e 75 6d 62 65 72 0a |cted seq| number.|
|00001e30| 09 66 6f 72 20 61 63 6b | 73 29 2e 20 20 54 68 65 |.for ack|s).  The|
|00001e40| 20 6e 75 6d 62 65 72 20 | 69 6e 20 70 61 72 65 6e | number |in paren|
|00001e50| 73 20 66 6f 6c 6c 6f 77 | 69 6e 67 20 61 6e 20 61 |s follow|ing an a|
|00001e60| 63 6b 20 69 73 0a 09 74 | 68 65 20 64 65 6c 74 61 |ck is..t|he delta|
|00001e70| 2d 74 69 6d 65 20 66 72 | 6f 6d 20 74 68 65 20 66 |-time fr|om the f|
|00001e80| 69 72 73 74 20 73 65 6e | 64 20 6f 66 20 74 68 65 |irst sen|d of the|
|00001e90| 20 70 61 63 6b 65 74 20 | 74 6f 20 74 68 65 0a 09 | packet |to the..|
|00001ea0| 61 63 6b 2e 20 20 41 20 | 6e 75 6d 62 65 72 20 69 |ack.  A |number i|
|00001eb0| 6e 20 70 61 72 65 6e 73 | 20 66 6f 6c 6c 6f 77 69 |n parens| followi|
|00001ec0| 6e 67 20 61 20 73 65 6e | 64 20 69 73 20 74 68 65 |ng a sen|d is the|
|00001ed0| 0a 09 64 65 6c 74 61 2d | 74 69 6d 65 20 66 72 6f |..delta-|time fro|
|00001ee0| 6d 20 74 68 65 20 66 69 | 72 73 74 20 73 65 6e 64 |m the fi|rst send|
|00001ef0| 20 6f 66 20 74 68 65 20 | 70 61 63 6b 65 74 20 74 | of the |packet t|
|00001f00| 6f 20 74 68 65 0a 09 63 | 75 72 72 65 6e 74 20 73 |o the..c|urrent s|
|00001f10| 65 6e 64 20 28 6f 6e 20 | 64 75 70 6c 69 63 61 74 |end (on |duplicat|
|00001f20| 65 20 70 61 63 6b 65 74 | 73 20 6f 6e 6c 79 29 2e |e packet|s only).|
|00001f30| 20 20 44 75 70 6c 69 63 | 61 74 65 0a 09 73 65 6e |  Duplic|ate..sen|
|00001f40| 64 73 20 6f 72 20 61 63 | 6b 73 20 68 61 76 65 20 |ds or ac|ks have |
|00001f50| 61 20 6e 75 6d 62 65 72 | 20 69 6e 20 73 71 75 61 |a number| in squa|
|00001f60| 72 65 20 62 72 61 63 6b | 65 74 73 20 73 68 6f 77 |re brack|ets show|
|00001f70| 69 6e 67 0a 09 74 68 65 | 20 6e 75 6d 62 65 72 20 |ing..the| number |
|00001f80| 6f 66 20 64 75 70 6c 69 | 63 61 74 65 73 20 73 6f |of dupli|cates so|
|00001f90| 20 66 61 72 2e 20 0a 0a | 09 48 65 72 65 20 69 73 | far. ..|.Here is|
|00001fa0| 20 61 20 73 68 6f 72 74 | 20 73 61 6d 70 6c 65 20 | a short| sample |
|00001fb0| 66 72 6f 6d 20 6e 65 61 | 72 20 74 68 65 20 73 74 |from nea|r the st|
|00001fc0| 61 72 74 20 6f 66 20 61 | 6e 20 66 74 70 3a 0a 09 |art of a|n ftp:..|
|00001fd0| 09 33 2e 30 30 20 20 20 | 20 30 2e 32 30 20 20 20 |.3.00   | 0.20   |
|00001fe0| 73 65 6e 64 20 2e 20 35 | 31 32 0a 09 09 33 2e 32 |send . 5|12...3.2|
|00001ff0| 30 20 20 20 20 30 2e 32 | 30 20 20 20 20 61 63 6b |0    0.2|0    ack|
|00002000| 20 2e 20 31 30 32 34 20 | 20 28 30 2e 32 30 29 0a | . 1024 | (0.20).|
|00002010| 09 09 33 2e 32 30 20 20 | 20 20 30 2e 30 30 20 20 |..3.20  |  0.00  |
|00002020| 20 73 65 6e 64 20 50 20 | 31 30 32 34 0a 09 09 33 | send P |1024...3|
|00002030| 2e 34 30 20 20 20 20 30 | 2e 32 30 20 20 20 20 61 |.40    0|.20    a|
|00002040| 63 6b 20 2e 20 31 35 33 | 36 20 20 28 30 2e 32 30 |ck . 153|6  (0.20|
|00002050| 29 0a 09 09 33 2e 38 30 | 20 20 20 20 30 2e 34 30 |)...3.80|    0.40|
|00002060| 20 2a 20 73 65 6e 64 20 | 2e 20 30 20 20 28 33 2e | * send |. 0  (3.|
|00002070| 38 30 29 20 5b 32 5d 0a | 09 09 33 2e 38 32 20 20 |80) [2].|..3.82  |
|00002080| 20 20 30 2e 30 32 20 2a | 20 20 61 63 6b 20 2e 20 |  0.02 *|  ack . |
|00002090| 31 35 33 36 20 20 28 30 | 2e 36 32 29 20 5b 32 5d |1536  (0|.62) [2]|
|000020a0| 0a 09 54 68 72 65 65 20 | 73 65 63 6f 6e 64 73 20 |..Three |seconds |
|000020b0| 69 6e 74 6f 20 74 68 65 | 20 63 6f 6e 76 65 72 73 |into the| convers|
|000020c0| 61 74 69 6f 6e 2c 20 62 | 79 74 65 73 20 35 31 32 |ation, b|ytes 512|
|000020d0| 20 74 68 72 6f 75 67 68 | 20 31 30 32 33 0a 09 77 | through| 1023..w|
|000020e0| 65 72 65 20 73 65 6e 74 | 2e 20 20 32 30 30 6d 73 |ere sent|.  200ms|
|000020f0| 20 6c 61 74 65 72 20 74 | 68 65 79 20 77 65 72 65 | later t|hey were|
|00002100| 20 61 63 6b 65 64 2e 20 | 20 53 68 6f 72 74 6c 79 | acked. | Shortly|
|00002110| 20 74 68 65 72 65 61 66 | 74 65 72 0a 09 62 79 74 | thereaf|ter..byt|
|00002120| 65 73 20 31 30 32 34 2d | 31 35 33 35 20 77 65 72 |es 1024-|1535 wer|
|00002130| 65 20 73 65 6e 74 20 61 | 6e 64 20 61 67 61 69 6e |e sent a|nd again|
|00002140| 20 61 63 6b 65 64 20 61 | 66 74 65 72 20 32 30 30 | acked a|fter 200|
|00002150| 6d 73 2e 20 0a 09 54 68 | 65 6e 2c 20 66 6f 72 20 |ms. ..Th|en, for |
|00002160| 6e 6f 20 61 70 70 61 72 | 65 6e 74 20 72 65 61 73 |no appar|ent reas|
|00002170| 6f 6e 2c 20 30 2d 35 31 | 31 20 69 73 20 72 65 74 |on, 0-51|1 is ret|
|00002180| 72 61 6e 73 6d 69 74 74 | 65 64 2c 20 33 2e 38 0a |ransmitt|ed, 3.8.|
|00002190| 09 73 65 63 6f 6e 64 73 | 20 61 66 74 65 72 20 69 |.seconds| after i|
|000021a0| 74 73 20 69 6e 69 74 69 | 61 6c 20 73 65 6e 64 20 |ts initi|al send |
|000021b0| 28 74 68 65 20 72 6f 75 | 6e 64 20 74 72 69 70 20 |(the rou|nd trip |
|000021c0| 74 69 6d 65 20 66 6f 72 | 20 74 68 69 73 0a 09 66 |time for| this..f|
|000021d0| 74 70 20 77 61 73 20 31 | 73 65 63 2c 20 2b 2d 35 |tp was 1|sec, +-5|
|000021e0| 30 30 6d 73 29 2e 20 20 | 53 69 6e 63 65 20 74 68 |00ms).  |Since th|
|000021f0| 65 20 72 65 63 65 69 76 | 65 72 20 69 73 20 65 78 |e receiv|er is ex|
|00002200| 70 65 63 74 69 6e 67 0a | 09 31 35 33 36 2c 20 31 |pecting.|.1536, 1|
|00002210| 35 33 36 20 69 73 20 72 | 65 2d 61 63 6b 65 64 20 |536 is r|e-acked |
|00002220| 77 68 65 6e 20 30 20 61 | 72 72 69 76 65 73 2e 20 |when 0 a|rrives. |
|00002230| 0a 0a 70 61 63 6b 65 74 | 64 61 74 2e 61 77 6b 0a |..packet|dat.awk.|
|00002240| 09 43 6f 6d 70 75 74 65 | 73 20 63 68 75 6e 6b 20 |.Compute|s chunk |
|00002250| 73 75 6d 6d 61 72 79 20 | 64 61 74 61 20 66 6f 72 |summary |data for|
|00002260| 20 61 6e 20 66 74 70 20 | 28 6f 72 20 73 69 6d 69 | an ftp |(or simi|
|00002270| 6c 61 72 0a 09 75 6e 69 | 64 69 72 65 63 74 69 6f |lar..uni|directio|
|00002280| 6e 61 6c 20 74 63 70 20 | 74 72 61 6e 73 66 65 72 |nal tcp |transfer|
|00002290| 29 2e 20 5b 41 20 22 63 | 68 75 6e 6b 22 20 72 65 |). [A "c|hunk" re|
|000022a0| 66 65 72 73 20 74 6f 0a | 09 61 20 63 68 75 6e 6b |fers to.|.a chunk|
|000022b0| 20 6f 66 20 74 68 65 20 | 73 65 71 75 65 6e 63 65 | of the |sequence|
|000022c0| 20 73 70 61 63 65 20 2d | 2d 20 65 73 73 65 6e 74 | space -|- essent|
|000022d0| 69 61 6c 6c 79 20 74 68 | 65 20 70 61 63 6b 65 74 |ially th|e packet|
|000022e0| 0a 09 73 65 71 75 65 6e | 63 65 20 6e 75 6d 62 65 |..sequen|ce numbe|
|000022f0| 72 20 64 69 76 69 64 65 | 64 20 62 79 20 74 68 65 |r divide|d by the|
|00002300| 20 6d 61 78 20 73 65 67 | 6d 65 6e 74 20 73 69 7a | max seg|ment siz|
|00002310| 65 2e 5d 0a 0a 09 41 20 | 73 75 6d 6d 61 72 79 20 |e.]...A |summary |
|00002320| 6c 69 6e 65 20 69 73 20 | 70 72 69 6e 74 65 64 20 |line is |printed |
|00002330| 73 68 6f 77 69 6e 67 20 | 74 68 65 20 6e 75 6d 62 |showing |the numb|
|00002340| 65 72 20 6f 66 20 63 68 | 75 6e 6b 73 2c 0a 09 74 |er of ch|unks,..t|
|00002350| 68 65 20 6e 75 6d 62 65 | 72 20 6f 66 20 70 61 63 |he numbe|r of pac|
|00002360| 6b 65 74 73 20 69 74 20 | 74 6f 6f 6b 20 74 6f 20 |kets it |took to |
|00002370| 73 65 6e 64 20 74 68 61 | 74 20 6d 61 6e 79 20 63 |send tha|t many c|
|00002380| 68 75 6e 6b 73 0a 09 28 | 69 66 20 74 68 65 72 65 |hunks..(|if there|
|00002390| 20 61 72 65 20 6e 6f 20 | 6c 6f 73 74 20 6f 72 20 | are no |lost or |
|000023a0| 64 75 70 6c 69 63 61 74 | 65 64 20 70 61 63 6b 65 |duplicat|ed packe|
|000023b0| 74 73 2c 20 74 68 65 20 | 6e 75 6d 62 65 72 0a 09 |ts, the |number..|
|000023c0| 6f 66 20 70 61 63 6b 65 | 74 73 20 73 68 6f 75 6c |of packe|ts shoul|
|000023d0| 64 20 65 71 75 61 6c 20 | 74 68 65 20 6e 75 6d 62 |d equal |the numb|
|000023e0| 65 72 20 6f 66 20 63 68 | 75 6e 6b 73 29 20 61 6e |er of ch|unks) an|
|000023f0| 64 20 74 68 65 0a 09 6e | 75 6d 62 65 72 20 6f 66 |d the..n|umber of|
|00002400| 20 61 63 6b 73 2e 0a 0a | 09 46 6f 6c 6c 6f 77 69 | acks...|.Followi|
|00002410| 6e 67 20 74 68 65 20 73 | 75 6d 6d 61 72 79 20 6c |ng the s|ummary l|
|00002420| 69 6e 65 20 69 73 20 6f | 6e 65 20 6c 69 6e 65 20 |ine is o|ne line |
|00002430| 6f 66 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 0a 09 |of infor|mation..|
|00002440| 70 65 72 20 63 68 75 6e | 6b 2e 20 20 54 68 65 20 |per chun|k.  The |
|00002450| 6c 69 6e 65 20 63 6f 6e | 74 61 69 6e 73 20 65 69 |line con|tains ei|
|00002460| 67 68 74 20 66 69 65 6c | 64 73 3a 0a 09 20 20 20 |ght fiel|ds:..   |
|00002470| 31 20 2d 20 74 68 65 20 | 63 68 75 6e 6b 20 6e 75 |1 - the |chunk nu|
|00002480| 6d 62 65 72 0a 09 20 20 | 20 32 20 2d 20 74 68 65 |mber..  | 2 - the|
|00002490| 20 73 74 61 72 74 20 73 | 65 71 75 65 6e 63 65 20 | start s|equence |
|000024a0| 6e 75 6d 62 65 72 20 66 | 6f 72 20 74 68 69 73 20 |number f|or this |
|000024b0| 63 68 75 6e 6b 0a 09 20 | 20 20 33 20 2d 20 74 69 |chunk.. |  3 - ti|
|000024c0| 6d 65 20 6f 66 20 66 69 | 72 73 74 20 73 65 6e 64 |me of fi|rst send|
|000024d0| 0a 09 20 20 20 34 20 2d | 20 74 69 6d 65 20 6f 66 |..   4 -| time of|
|000024e0| 20 6c 61 73 74 20 73 65 | 6e 64 0a 09 20 20 20 35 | last se|nd..   5|
|000024f0| 20 2d 20 74 69 6d 65 20 | 6f 66 20 66 69 72 73 74 | - time |of first|
|00002500| 20 61 63 6b 0a 09 20 20 | 20 36 20 2d 20 74 69 6d | ack..  | 6 - tim|
|00002510| 65 20 6f 66 20 6c 61 73 | 74 20 61 63 6b 0a 09 20 |e of las|t ack.. |
|00002520| 20 20 37 20 2d 20 6e 75 | 6d 62 65 72 20 6f 66 20 |  7 - nu|mber of |
|00002530| 74 69 6d 65 73 20 63 68 | 75 6e 6b 20 77 61 73 20 |times ch|unk was |
|00002540| 73 65 6e 74 20 0a 09 20 | 20 20 38 20 2d 20 6e 75 |sent .. |  8 - nu|
|00002550| 6d 62 65 72 20 6f 66 20 | 74 69 6d 65 73 20 63 68 |mber of |times ch|
|00002560| 75 6e 6b 20 77 61 73 20 | 61 63 6b 65 64 0a 09 28 |unk was |acked..(|
|00002570| 61 6c 6c 20 74 69 6d 65 | 73 20 61 72 65 20 69 6e |all time|s are in|
|00002580| 20 64 65 63 69 6d 61 6c | 20 73 65 63 6f 6e 64 73 | decimal| seconds|
|00002590| 2c 20 72 65 6c 61 74 69 | 76 65 20 74 6f 20 74 68 |, relati|ve to th|
|000025a0| 65 20 73 74 61 72 74 0a | 09 6f 66 20 74 68 65 20 |e start.|.of the |
|000025b0| 63 6f 6e 76 65 72 73 61 | 74 69 6f 6e 2e 29 0a 0a |conversa|tion.)..|
|000025c0| 09 41 73 20 61 6e 20 65 | 78 61 6d 70 6c 65 2c 20 |.As an e|xample, |
|000025d0| 68 65 72 65 20 69 73 20 | 74 68 65 20 66 69 72 73 |here is |the firs|
|000025e0| 74 20 70 61 72 74 20 6f | 66 20 74 68 65 20 6f 75 |t part o|f the ou|
|000025f0| 74 70 75 74 20 66 6f 72 | 0a 09 61 6e 20 66 74 70 |tput for|..an ftp|
|00002600| 20 74 72 61 63 65 3a 0a | 0a 09 23 20 31 33 34 20 | trace:.|..# 134 |
|00002610| 63 68 75 6e 6b 73 2e 20 | 20 35 33 36 20 70 61 63 |chunks. | 536 pac|
|00002620| 6b 65 74 73 20 73 65 6e | 74 2e 20 20 35 30 38 20 |kets sen|t.  508 |
|00002630| 61 63 6b 73 2e 0a 09 31 | 20 20 20 20 20 20 20 31 |acks...1|       1|
|00002640| 20 20 20 20 20 20 20 30 | 2e 30 30 20 20 20 20 35 |       0|.00    5|
|00002650| 2e 38 30 20 20 20 20 30 | 2e 32 30 20 20 20 20 30 |.80    0|.20    0|
|00002660| 2e 32 30 20 20 20 20 34 | 20 20 20 20 20 20 20 31 |.20    4|       1|
|00002670| 0a 09 32 20 20 20 20 20 | 20 20 35 31 33 20 20 20 |..2     |  513   |
|00002680| 20 20 30 2e 32 38 20 20 | 20 20 36 2e 32 30 20 20 |  0.28  |  6.20  |
|00002690| 20 20 30 2e 34 30 20 20 | 20 20 30 2e 34 30 20 20 |  0.40  |  0.40  |
|000026a0| 20 20 34 20 20 20 20 20 | 20 20 31 0a 09 33 20 20 |  4     |  1..3  |
|000026b0| 20 20 20 20 20 31 30 32 | 35 20 20 20 20 31 2e 31 |     102|5    1.1|
|000026c0| 36 20 20 20 20 36 2e 33 | 32 20 20 20 20 31 2e 32 |6    6.3|2    1.2|
|000026d0| 30 20 20 20 20 31 2e 32 | 30 20 20 20 20 34 20 20 |0    1.2|0    4  |
|000026e0| 20 20 20 20 20 31 0a 09 | 34 20 20 20 20 20 20 20 |     1..|4       |
|000026f0| 31 35 36 31 20 20 20 20 | 31 2e 38 36 20 20 20 20 |1561    |1.86    |
|00002700| 31 35 2e 30 30 20 20 20 | 32 2e 30 30 20 20 20 20 |15.00   |2.00    |
|00002710| 32 2e 30 30 20 20 20 20 | 36 20 20 20 20 20 20 20 |2.00    |6       |
|00002720| 31 0a 09 35 20 20 20 20 | 20 20 20 32 30 34 39 20 |1..5    |   2049 |
|00002730| 20 20 20 32 2e 31 36 20 | 20 20 20 31 35 2e 34 34 |   2.16 |   15.44|
|00002740| 20 20 20 32 2e 32 30 20 | 20 20 20 32 2e 32 30 20 |   2.20 |   2.20 |
|00002750| 20 20 20 35 20 20 20 20 | 20 20 20 31 0a 09 36 20 |   5    |   1..6 |
|00002760| 20 20 20 20 20 20 32 35 | 38 35 20 20 20 20 32 2e |      25|85    2.|
|00002770| 36 34 20 20 20 20 31 36 | 2e 34 34 20 20 20 32 2e |64    16|.44   2.|
|00002780| 38 30 20 20 20 20 32 2e | 38 30 20 20 20 20 35 20 |80    2.|80    5 |
|00002790| 20 20 20 20 20 20 31 0a | 09 37 20 20 20 20 20 20 |      1.|.7      |
|000027a0| 20 33 30 37 33 20 20 20 | 20 33 2e 30 30 20 20 20 | 3073   | 3.00   |
|000027b0| 20 31 36 2e 36 36 20 20 | 20 33 2e 32 30 20 20 20 | 16.66  | 3.20   |
|000027c0| 20 33 2e 32 30 20 20 20 | 20 34 20 20 20 20 20 20 | 3.20   | 4      |
|000027d0| 20 31 0a 09 38 20 20 20 | 20 20 20 20 33 36 30 39 | 1..8   |    3609|
|000027e0| 20 20 20 20 33 2e 32 30 | 20 20 20 20 31 37 2e 32 |    3.20|    17.2|
|000027f0| 34 20 20 20 33 2e 34 30 | 20 20 20 20 35 2e 38 32 |4   3.40|    5.82|
|00002800| 20 20 20 20 34 20 20 20 | 20 20 20 20 31 31 0a 09 |    4   |    11..|
|00002810| 39 20 20 20 20 20 20 20 | 34 30 39 37 20 20 20 20 |9       |4097    |
|00002820| 36 2e 30 32 20 20 20 20 | 36 2e 35 38 20 20 20 20 |6.02    |6.58    |
|00002830| 36 2e 32 30 20 20 20 20 | 36 2e 38 30 20 20 20 20 |6.20    |6.80    |
|00002840| 32 20 20 20 20 20 20 20 | 35 0a 0a 09 54 68 69 73 |2       |5...This|
|00002850| 20 73 61 79 73 20 74 68 | 61 74 20 31 33 34 20 63 | says th|at 134 c|
|00002860| 68 75 6e 6b 73 20 77 65 | 72 65 20 74 72 61 6e 73 |hunks we|re trans|
|00002870| 66 65 72 65 64 20 28 61 | 62 6f 75 74 20 37 30 4b |fered (a|bout 70K|
|00002880| 0a 09 73 69 6e 63 65 20 | 74 68 65 20 61 76 65 72 |..since |the aver|
|00002890| 61 67 65 20 70 61 63 6b | 65 74 20 73 69 7a 65 20 |age pack|et size |
|000028a0| 77 61 73 20 35 31 32 20 | 62 79 74 65 73 29 2e 20 |was 512 |bytes). |
|000028b0| 20 49 74 20 74 6f 6f 6b | 0a 09 35 33 36 20 70 61 | It took|..536 pa|
|000028c0| 63 6b 65 74 73 20 74 6f | 20 74 72 61 6e 73 66 65 |ckets to| transfe|
|000028d0| 72 20 74 68 65 20 64 61 | 74 61 20 28 69 2e 65 2e |r the da|ta (i.e.|
|000028e0| 2c 20 6f 6e 20 74 68 65 | 20 61 76 65 72 61 67 65 |, on the| average|
|000028f0| 0a 09 65 61 63 68 20 63 | 68 75 6e 6b 20 77 61 73 |..each c|hunk was|
|00002900| 20 74 72 61 6e 73 6d 69 | 74 74 65 64 20 66 6f 75 | transmi|tted fou|
|00002910| 72 20 74 69 6d 65 73 29 | 2e 20 20 4c 6f 6f 6b 69 |r times)|.  Looki|
|00002920| 6e 67 20 61 74 2c 0a 09 | 73 61 79 2c 20 63 68 75 |ng at,..|say, chu|
|00002930| 6e 6b 20 34 2c 20 77 65 | 20 73 65 65 20 69 74 20 |nk 4, we| see it |
|00002940| 72 65 70 72 65 73 65 6e | 74 73 20 74 68 65 20 35 |represen|ts the 5|
|00002950| 31 32 20 62 79 74 65 73 | 20 6f 66 0a 09 73 65 71 |12 bytes| of..seq|
|00002960| 75 65 6e 63 65 20 73 70 | 61 63 65 20 66 72 6f 6d |uence sp|ace from|
|00002970| 20 31 35 36 31 20 74 6f | 20 32 30 34 38 2e 20 20 | 1561 to| 2048.  |
|00002980| 49 74 20 77 61 73 20 66 | 69 72 73 74 20 73 65 6e |It was f|irst sen|
|00002990| 74 0a 09 31 2e 38 36 20 | 73 65 63 6f 6e 64 73 20 |t..1.86 |seconds |
|000029a0| 69 6e 74 6f 20 74 68 65 | 20 63 6f 6e 76 65 72 73 |into the| convers|
|000029b0| 61 74 69 6f 6e 2e 20 20 | 49 74 20 77 61 73 20 6c |ation.  |It was l|
|000029c0| 61 73 74 0a 09 73 65 6e | 74 20 31 35 20 73 65 63 |ast..sen|t 15 sec|
|000029d0| 6f 6e 64 73 20 69 6e 74 | 6f 20 74 68 65 20 63 6f |onds int|o the co|
|000029e0| 6e 76 65 72 73 61 74 69 | 6f 6e 20 61 6e 64 20 77 |nversati|on and w|
|000029f0| 61 73 20 73 65 6e 74 0a | 09 61 20 74 6f 74 61 6c |as sent.|.a total|
|00002a00| 20 6f 66 20 36 20 74 69 | 6d 65 73 20 28 69 2e 65 | of 6 ti|mes (i.e|
|00002a10| 2e 2c 20 69 74 20 77 61 | 73 20 72 65 74 72 61 6e |., it wa|s retran|
|00002a20| 73 6d 69 74 74 65 64 20 | 65 76 65 72 79 0a 09 32 |smitted |every..2|
|00002a30| 20 73 65 63 6f 6e 64 73 | 20 6f 6e 20 74 68 65 20 | seconds| on the |
|00002a40| 61 76 65 72 61 67 65 29 | 2e 20 20 49 74 20 77 61 |average)|.  It wa|
|00002a50| 73 20 61 63 6b 65 64 20 | 6f 6e 63 65 2c 20 31 34 |s acked |once, 14|
|00002a60| 30 6d 73 0a 09 61 66 74 | 65 72 20 69 74 20 66 69 |0ms..aft|er it fi|
|00002a70| 72 73 74 20 61 72 72 69 | 76 65 64 2e 0a 0a 73 74 |rst arri|ved...st|
|00002a80| 69 6d 65 2e 61 77 6b 0a | 61 74 69 6d 65 2e 61 77 |ime.awk.|atime.aw|
|00002a90| 6b 0a 09 4f 75 74 70 75 | 74 20 6f 6e 65 20 6c 69 |k..Outpu|t one li|
|00002aa0| 6e 65 20 70 65 72 20 73 | 65 6e 64 20 6f 72 20 61 |ne per s|end or a|
|00002ab0| 63 6b 2c 20 72 65 73 70 | 65 63 74 69 76 65 6c 79 |ck, resp|ectively|
|00002ac0| 2c 20 69 6e 20 74 68 65 | 20 66 6f 72 6d 0a 09 09 |, in the| form...|
|00002ad0| 3c 74 69 6d 65 3e 20 3c | 73 65 71 2e 20 6e 75 6d |<time> <|seq. num|
|00002ae0| 62 65 72 3e 0a 09 77 68 | 65 72 65 20 3c 74 69 6d |ber>..wh|ere <tim|
|00002af0| 65 3e 20 69 73 20 74 68 | 65 20 74 69 6d 65 20 69 |e> is th|e time i|
|00002b00| 6e 20 73 65 63 6f 6e 64 | 73 20 73 69 6e 63 65 20 |n second|s since |
|00002b10| 74 68 65 20 73 74 61 72 | 74 20 6f 66 20 74 68 65 |the star|t of the|
|00002b20| 0a 09 74 72 61 6e 73 66 | 65 72 20 61 6e 64 20 3c |..transf|er and <|
|00002b30| 73 65 71 2e 20 6e 75 6d | 62 65 72 3e 20 69 73 20 |seq. num|ber> is |
|00002b40| 74 68 65 20 73 65 71 75 | 65 6e 63 65 20 6e 75 6d |the sequ|ence num|
|00002b50| 62 65 72 20 62 65 69 6e | 67 20 73 65 6e 74 0a 09 |ber bein|g sent..|
|00002b60| 6f 72 20 61 63 6b 65 64 | 2e 20 20 49 20 74 79 70 |or acked|.  I typ|
|00002b70| 69 63 61 6c 6c 79 20 70 | 6c 6f 74 20 74 68 69 73 |ically p|lot this|
|00002b80| 20 64 61 74 61 20 6c 6f | 6f 6b 69 6e 67 20 66 6f | data lo|oking fo|
|00002b90| 72 20 73 75 73 70 69 63 | 69 6f 75 73 0a 09 70 61 |r suspic|ious..pa|
|00002ba0| 74 74 65 72 6e 73 2e 0a | 0a 0a 54 68 65 20 70 72 |tterns..|..The pr|
|00002bb0| 6f 62 6c 65 6d 20 49 20 | 77 61 73 20 6c 6f 6f 6b |oblem I |was look|
|00002bc0| 69 6e 67 20 61 74 20 77 | 61 73 20 74 68 65 20 62 |ing at w|as the b|
|00002bd0| 75 6c 6b 2d 64 61 74 61 | 2d 74 72 61 6e 73 66 65 |ulk-data|-transfe|
|00002be0| 72 0a 74 68 72 6f 75 67 | 68 70 75 74 20 6f 66 20 |r.throug|hput of |
|00002bf0| 6d 65 64 69 75 6d 20 64 | 65 6c 61 79 20 6e 65 74 |medium d|elay net|
|00002c00| 77 6f 72 6b 20 70 61 74 | 68 73 20 28 31 2d 36 20 |work pat|hs (1-6 |
|00002c10| 73 65 63 2e 20 20 72 6f | 75 6e 64 20 74 72 69 70 |sec.  ro|und trip|
|00002c20| 0a 74 69 6d 65 29 20 75 | 6e 64 65 72 20 74 79 70 |.time) u|nder typ|
|00002c30| 69 63 61 6c 20 44 41 52 | 50 41 20 49 6e 74 65 72 |ical DAR|PA Inter|
|00002c40| 6e 65 74 20 63 6f 6e 64 | 69 74 69 6f 6e 73 2e 20 |net cond|itions. |
|00002c50| 20 54 68 65 20 74 72 61 | 63 65 20 6f 66 20 74 68 | The tra|ce of th|
|00002c60| 65 0a 66 74 70 20 74 72 | 61 6e 73 66 65 72 20 6f |e.ftp tr|ansfer o|
|00002c70| 66 20 61 20 6c 61 72 67 | 65 20 66 69 6c 65 20 77 |f a larg|e file w|
|00002c80| 61 73 20 75 73 65 64 20 | 61 73 20 74 68 65 20 72 |as used |as the r|
|00002c90| 61 77 20 64 61 74 61 20 | 73 6f 75 72 63 65 2e 20 |aw data |source. |
|00002ca0| 0a 54 68 65 20 6d 65 74 | 68 6f 64 20 77 61 73 3a |.The met|hod was:|
|00002cb0| 0a 0a 20 20 2d 20 4f 6e | 20 61 20 6c 6f 63 61 6c |..  - On| a local|
|00002cc0| 20 68 6f 73 74 20 28 62 | 75 74 20 6e 6f 74 20 74 | host (b|ut not t|
|00002cd0| 68 65 20 53 75 6e 20 72 | 75 6e 6e 69 6e 67 20 74 |he Sun r|unning t|
|00002ce0| 63 70 64 75 6d 70 29 2c | 20 63 6f 6e 6e 65 63 74 |cpdump),| connect|
|00002cf0| 20 74 6f 0a 20 20 20 20 | 74 68 65 20 72 65 6d 6f | to.    |the remo|
|00002d00| 74 65 20 66 74 70 2e 0a | 0a 20 20 2d 20 4f 6e 20 |te ftp..|.  - On |
|00002d10| 74 68 65 20 6d 6f 6e 69 | 74 6f 72 20 53 75 6e 2c |the moni|tor Sun,|
|00002d20| 20 73 74 61 72 74 20 74 | 68 65 20 74 72 61 63 65 | start t|he trace|
|00002d30| 20 67 6f 69 6e 67 2e 20 | 20 45 2e 67 2e 2c 0a 09 | going. | E.g.,..|
|00002d40| 74 63 70 64 75 6d 70 20 | 62 65 74 77 65 65 6e 20 |tcpdump |between |
|00002d50| 6c 6f 63 61 6c 20 72 65 | 6d 6f 74 65 20 61 6e 64 |local re|mote and|
|00002d60| 20 70 6f 72 74 20 66 74 | 70 2d 64 61 74 61 20 3e | port ft|p-data >|
|00002d70| 74 72 61 63 65 66 69 6c | 65 0a 0a 20 20 2d 20 4f |tracefil|e..  - O|
|00002d80| 6e 20 6c 6f 63 61 6c 2c | 20 64 6f 20 65 69 74 68 |n local,| do eith|
|00002d90| 65 72 20 61 20 67 65 74 | 20 6f 72 20 70 75 74 20 |er a get| or put |
|00002da0| 6f 66 20 61 20 6c 61 72 | 67 65 20 66 69 6c 65 20 |of a lar|ge file |
|00002db0| 28 7e 35 30 30 4b 42 29 | 2c 0a 20 20 20 20 70 72 |(~500KB)|,.    pr|
|00002dc0| 65 66 65 72 61 62 6c 79 | 20 74 6f 20 74 68 65 20 |eferably| to the |
|00002dd0| 6e 75 6c 6c 20 64 65 76 | 69 63 65 20 28 74 6f 20 |null dev|ice (to |
|00002de0| 6d 69 6e 69 6d 69 7a 65 | 20 65 66 66 65 63 74 73 |minimize| effects|
|00002df0| 20 6c 69 6b 65 0a 20 20 | 20 20 63 6c 6f 73 69 6e | like.  |  closin|
|00002e00| 67 20 74 68 65 20 72 65 | 63 65 69 76 65 20 77 69 |g the re|ceive wi|
|00002e10| 6e 64 6f 77 20 77 68 69 | 6c 65 20 77 61 69 74 69 |ndow whi|le waiti|
|00002e20| 6e 67 20 66 6f 72 20 61 | 20 64 69 73 6b 20 77 72 |ng for a| disk wr|
|00002e30| 69 74 65 29 2e 0a 0a 20 | 20 2d 20 57 68 65 6e 20 |ite)... | - When |
|00002e40| 74 72 61 6e 66 65 72 20 | 69 73 20 66 69 6e 69 73 |tranfer |is finis|
|00002e50| 68 65 64 2c 20 73 74 6f | 70 20 74 63 70 64 75 6d |hed, sto|p tcpdum|
|00002e60| 70 2e 20 20 55 73 65 20 | 61 77 6b 20 74 6f 20 6d |p.  Use |awk to m|
|00002e70| 61 6b 65 20 75 70 0a 20 | 20 20 20 74 77 6f 20 66 |ake up. |   two f|
|00002e80| 69 6c 65 73 20 6f 66 20 | 73 75 6d 6d 61 72 79 20 |iles of |summary |
|00002e90| 64 61 74 61 20 28 6d 61 | 78 73 69 7a 65 20 69 73 |data (ma|xsize is|
|00002ea0| 20 74 68 65 20 6d 61 78 | 69 6d 75 6d 20 70 61 63 | the max|imum pac|
|00002eb0| 6b 65 74 20 73 69 7a 65 | 2c 0a 20 20 20 20 74 72 |ket size|,.    tr|
|00002ec0| 61 63 65 64 61 74 61 20 | 69 73 20 74 68 65 20 66 |acedata |is the f|
|00002ed0| 69 6c 65 20 6f 66 20 74 | 63 70 64 75 6d 70 20 74 |ile of t|cpdump t|
|00002ee0| 72 61 63 65 64 61 74 61 | 29 3a 0a 20 20 20 20 20 |racedata|):.     |
|00002ef0| 20 61 77 6b 20 2d 66 20 | 73 65 6e 64 2d 61 63 6b | awk -f |send-ack|
|00002f00| 2e 61 77 6b 20 70 61 63 | 6b 65 74 73 69 7a 65 3d |.awk pac|ketsize=|
|00002f10| 61 76 67 73 69 7a 65 20 | 74 72 61 63 65 64 61 74 |avgsize |tracedat|
|00002f20| 61 20 3e 73 61 0a 20 20 | 20 20 20 20 61 77 6b 20 |a >sa.  |    awk |
|00002f30| 2d 66 20 70 61 63 6b 65 | 74 64 61 74 2e 61 77 6b |-f packe|tdat.awk|
|00002f40| 20 70 61 63 6b 65 74 73 | 69 7a 65 3d 61 76 67 73 | packets|ize=avgs|
|00002f50| 69 7a 65 20 74 72 61 63 | 65 64 61 74 61 20 3e 70 |ize trac|edata >p|
|00002f60| 64 0a 0a 20 20 2d 20 57 | 68 69 6c 65 20 74 68 65 |d..  - W|hile the|
|00002f70| 20 73 75 6d 6d 61 72 79 | 20 64 61 74 61 20 66 69 | summary| data fi|
|00002f80| 6c 65 73 20 61 72 65 20 | 70 72 69 6e 74 69 6e 67 |les are |printing|
|00002f90| 2c 20 74 61 6b 65 20 61 | 20 6c 6f 6f 6b 20 61 74 |, take a| look at|
|00002fa0| 0a 20 20 20 20 68 6f 77 | 20 74 68 65 20 74 72 61 |.    how| the tra|
|00002fb0| 6e 73 66 65 72 20 62 65 | 68 61 76 65 64 3a 0a 20 |nsfer be|haved:. |
|00002fc0| 20 20 20 20 20 61 77 6b | 20 2d 66 20 73 74 69 6d |     awk| -f stim|
|00002fd0| 65 2e 61 77 6b 20 74 72 | 61 63 65 64 61 74 61 20 |e.awk tr|acedata |
|00002fe0| 7c 20 78 67 72 61 70 68 | 0a 20 20 20 20 28 39 30 || xgraph|.    (90|
|00002ff0| 25 20 6f 66 20 77 68 61 | 74 20 79 6f 75 20 6c 65 |% of wha|t you le|
|00003000| 61 72 6e 20 73 65 65 6d | 73 20 74 6f 20 68 61 70 |arn seem|s to hap|
|00003010| 70 65 6e 20 69 6e 20 74 | 68 69 73 20 73 74 65 70 |pen in t|his step|
|00003020| 29 2e 0a 0a 20 20 2d 20 | 44 6f 20 61 6c 6c 20 6f |)...  - |Do all o|
|00003030| 66 20 74 68 65 20 61 62 | 6f 76 65 20 73 74 65 70 |f the ab|ove step|
|00003040| 73 20 73 65 76 65 72 61 | 6c 20 74 69 6d 65 73 2c |s severa|l times,|
|00003050| 20 62 6f 74 68 20 64 69 | 72 65 63 74 69 6f 6e 73 | both di|rections|
|00003060| 2c 0a 20 20 20 20 61 74 | 20 64 69 66 66 65 72 65 |,.    at| differe|
|00003070| 6e 74 20 74 69 6d 65 73 | 20 6f 66 20 64 61 79 2c |nt times| of day,|
|00003080| 20 77 69 74 68 20 64 69 | 66 66 65 72 65 6e 74 20 | with di|fferent |
|00003090| 70 72 6f 74 6f 63 6f 6c | 0a 20 20 20 20 69 6d 70 |protocol|.    imp|
|000030a0| 6c 65 6d 65 6e 74 61 74 | 69 6f 6e 73 20 6f 6e 20 |lementat|ions on |
|000030b0| 74 68 65 20 6f 74 68 65 | 72 20 65 6e 64 2e 0a 0a |the othe|r end...|
|000030c0| 20 20 2d 20 55 73 69 6e | 67 20 6f 6e 65 20 6f 66 |  - Usin|g one of|
|000030d0| 20 74 68 65 20 55 6e 69 | 78 20 64 61 74 61 20 61 | the Uni|x data a|
|000030e0| 6e 61 6c 79 73 69 73 20 | 70 61 63 6b 61 67 65 73 |nalysis |packages|
|000030f0| 20 28 69 6e 20 6d 79 20 | 63 61 73 65 2c 0a 20 20 | (in my |case,.  |
|00003100| 20 20 53 20 61 6e 64 20 | 47 61 72 79 20 50 65 72 |  S and |Gary Per|
|00003110| 6c 6d 61 6e 27 73 20 55 | 6e 69 78 7c 53 74 61 74 |lman's U|nix|Stat|
|00003120| 29 2c 20 73 70 65 6e 64 | 20 61 20 66 65 77 20 6d |), spend| a few m|
|00003130| 6f 6e 74 68 73 20 73 74 | 61 72 69 6e 67 0a 20 20 |onths st|aring.  |
|00003140| 20 20 61 74 20 74 68 65 | 20 64 61 74 61 2e 0a 0a |  at the| data...|
|00003150| 20 20 2d 20 43 68 61 6e | 67 65 20 73 6f 6d 65 74 |  - Chan|ge somet|
|00003160| 68 69 6e 67 20 69 6e 20 | 74 68 65 20 6c 6f 63 61 |hing in |the loca|
|00003170| 6c 20 70 72 6f 74 6f 63 | 6f 6c 20 69 6d 70 6c 65 |l protoc|ol imple|
|00003180| 6d 65 6e 74 61 74 69 6f | 6e 20 61 6e 64 0a 20 20 |mentatio|n and.  |
|00003190| 20 20 72 65 64 6f 20 74 | 68 65 20 73 74 65 70 73 |  redo t|he steps|
|000031a0| 20 61 62 6f 76 65 2e 0a | 0a 20 20 2d 20 4f 6e 63 | above..|.  - Onc|
|000031b0| 65 20 61 20 77 65 65 6b | 2c 20 74 65 6c 6c 20 79 |e a week|, tell y|
|000031c0| 6f 75 72 20 66 75 6e 64 | 69 6e 67 20 61 67 65 6e |our fund|ing agen|
|000031d0| 74 20 74 68 61 74 20 79 | 6f 75 27 72 65 20 64 69 |t that y|ou're di|
|000031e0| 73 63 6f 76 65 72 69 6e | 67 0a 20 20 20 20 77 6f |scoverin|g.    wo|
|000031f0| 6e 64 65 72 66 75 6c 20 | 74 68 69 6e 67 73 20 61 |nderful |things a|
|00003200| 6e 64 20 79 6f 75 27 6c | 6c 20 77 72 69 74 65 20 |nd you'l|l write |
|00003210| 75 70 20 74 68 61 74 20 | 72 65 73 65 61 72 63 68 |up that |research|
|00003220| 20 72 65 70 6f 72 74 0a | 20 20 20 20 22 72 65 61 | report.|    "rea|
|00003230| 6c 20 73 6f 6f 6e 20 6e | 6f 77 22 2e 0a 0a 65 73 |l soon n|ow"...es|
|00003240| 20 61 72 65 20 61 76 61 | 69 6c 61 62 6c 65 20 76 | are ava|ilable v|
|00003250| 69 61 20 61 6e 6f 6e 79 | 6d 6f 75 73 0a 66 74 70 |ia anony|mous.ftp|
|00003260| 20 66 72 6f 6d 20 68 6f | 73 74 20 66 74 70 2e 65 | from ho|st ftp.e|
|00003270| 65 2e 6c 62 6c 2e 67 6f | 76 20 28 63 75 72 72 65 |e.lbl.go|v (curre|
|00003280| 6e 74 6c 79 20 61 74 20 | 61 64 64 72 65 73 73 20 |ntly at |address |
|00003290| 31 32 38 2e 33 2e 32 35 | 34 2e 36 38 29 0a 66 69 |128.3.25|4.68).fi|
|000032a0| 6c 65 20 74 63 70 64 75 | 6d 70 2e 74 61 72 2e 5a |le tcpdu|mp.tar.Z|
|000032b0| 20 28 61 20 63 6f 6d 70 | 72 65 73 73 65 64 20 55 | (a comp|ressed U|
|000032c0| 6e 69 78 20 74 61 72 20 | 66 69 6c 65 29 2e 0a 0a |nix tar |file)...|
|000032d0| 54 68 69 73 20 70 72 6f | 67 72 61 6d 20 69 73 20 |This pro|gram is |
|000032e0| 73 75 62 6a 65 63 74 20 | 74 6f 20 74 68 65 20 27 |subject |to the '|
|000032f0| 73 74 61 6e 64 61 72 64 | 27 20 42 65 72 6b 65 6c |standard|' Berkel|
|00003300| 65 79 20 6e 65 74 77 6f | 72 6b 20 73 6f 66 74 77 |ey netwo|rk softw|
|00003310| 61 72 65 0a 63 6f 70 79 | 72 69 67 68 74 3a 0a 20 |are.copy|right:. |
|00003320| 20 0a 20 20 43 6f 70 79 | 72 69 67 68 74 20 28 63 | .  Copy|right (c|
|00003330| 29 20 31 39 38 38 2d 31 | 39 39 30 20 54 68 65 20 |) 1988-1|990 The |
|00003340| 52 65 67 65 6e 74 73 20 | 6f 66 20 74 68 65 20 55 |Regents |of the U|
|00003350| 6e 69 76 65 72 73 69 74 | 79 20 6f 66 20 43 61 6c |niversit|y of Cal|
|00003360| 69 66 6f 72 6e 69 61 2e | 0a 20 20 41 6c 6c 20 72 |ifornia.|.  All r|
|00003370| 69 67 68 74 73 20 72 65 | 73 65 72 76 65 64 2e 0a |ights re|served..|
|00003380| 0a 20 20 52 65 64 69 73 | 74 72 69 62 75 74 69 6f |.  Redis|tributio|
|00003390| 6e 20 61 6e 64 20 75 73 | 65 20 69 6e 20 73 6f 75 |n and us|e in sou|
|000033a0| 72 63 65 20 61 6e 64 20 | 62 69 6e 61 72 79 20 66 |rce and |binary f|
|000033b0| 6f 72 6d 73 2c 20 77 69 | 74 68 20 6f 72 20 77 69 |orms, wi|th or wi|
|000033c0| 74 68 6f 75 74 0a 20 20 | 6d 6f 64 69 66 69 63 61 |thout.  |modifica|
|000033d0| 74 69 6f 6e 2c 20 61 72 | 65 20 70 65 72 6d 69 74 |tion, ar|e permit|
|000033e0| 74 65 64 20 70 72 6f 76 | 69 64 65 64 20 74 68 61 |ted prov|ided tha|
|000033f0| 74 3a 20 28 31 29 20 73 | 6f 75 72 63 65 20 63 6f |t: (1) s|ource co|
|00003400| 49 4e 53 54 41 4c 4c 00 | 00 00 00 00 00 00 00 00 |INSTALL.|........|
|00003410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003460| 00 00 00 00 20 20 20 34 | 34 34 20 00 20 20 33 30 |....   4|44 .  30|
|00003470| 36 30 20 00 20 20 20 20 | 33 34 20 00 20 20 20 20 |60 .    |34 .    |
|00003480| 20 20 31 30 34 30 31 20 | 20 34 37 34 32 37 31 36 |  10401 | 4742716|
|00003490| 34 35 37 20 20 20 35 32 | 31 30 00 20 00 00 00 00 |457   52|10. ....|
|000034a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000034f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000035f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00003600| 40 28 23 29 20 24 48 65 | 61 64 65 72 3a 20 49 4e |@(#) $He|ader: IN|
|00003610| 53 54 41 4c 4c 2c 76 20 | 31 2e 31 31 20 39 31 2f |STALL,v |1.11 91/|
|00003620| 30 31 2f 30 39 20 31 34 | 3a 34 35 3a 35 32 20 6d |01/09 14|:45:52 m|
|00003630| 63 63 61 6e 6e 65 20 45 | 78 70 20 24 20 28 4c 42 |ccanne E|xp $ (LB|
|00003640| 4c 29 0a 0a 54 6f 20 62 | 75 69 6c 64 20 74 63 70 |L)..To b|uild tcp|
|00003650| 64 75 6d 70 2c 20 65 64 | 69 74 20 74 68 65 20 4d |dump, ed|it the M|
|00003660| 61 6b 65 66 69 6c 65 20 | 74 6f 20 6d 61 6b 65 20 |akefile |to make |
|00003670| 61 70 70 72 6f 70 72 69 | 61 74 65 20 63 68 61 6e |appropri|ate chan|
|00003680| 67 65 73 20 66 6f 72 0a | 79 6f 75 72 20 73 69 74 |ges for.|your sit|
|00003690| 65 2e 20 20 54 68 69 6e | 67 73 20 79 6f 75 20 6d |e.  Thin|gs you m|
|000036a0| 61 79 20 68 61 76 65 20 | 74 6f 20 63 68 61 6e 67 |ay have |to chang|
|000036b0| 65 20 61 72 65 3a 0a 20 | 2d 20 44 65 66 69 6e 65 |e are:. |- Define|
|000036c0| 20 22 43 43 20 3d 20 63 | 63 22 20 69 66 20 79 6f | "CC = c|c" if yo|
|000036d0| 75 20 64 6f 6e 27 74 20 | 68 61 76 65 20 67 63 63 |u don't |have gcc|
|000036e0| 2e 0a 20 2d 20 44 65 66 | 69 6e 65 20 22 59 41 43 |.. - Def|ine "YAC|
|000036f0| 43 20 3d 20 79 61 63 63 | 22 20 69 66 20 79 6f 75 |C = yacc|" if you|
|00003700| 20 64 6f 6e 27 74 20 68 | 61 76 65 20 62 69 73 6f | don't h|ave biso|
|00003710| 6e 2e 0a 20 20 20 42 69 | 73 6f 6e 20 69 73 20 61 |n..   Bi|son is a|
|00003720| 76 61 69 6c 61 62 6c 65 | 20 76 69 61 20 61 6e 6f |vailable| via ano|
|00003730| 6e 79 6d 6f 75 73 20 66 | 74 70 20 66 72 6f 6d 20 |nymous f|tp from |
|00003740| 70 72 65 70 2e 61 69 2e | 6d 69 74 2e 65 64 75 20 |prep.ai.|mit.edu |
|00003750| 28 31 38 2e 37 31 2e 30 | 2e 33 38 29 2c 0a 20 20 |(18.71.0|.38),.  |
|00003760| 20 69 6e 20 74 68 65 20 | 64 69 72 65 63 74 6f 72 | in the |director|
|00003770| 79 20 70 75 62 2f 67 6e | 75 2e 20 20 53 65 74 20 |y pub/gn|u.  Set |
|00003780| 62 69 6e 61 72 79 20 6d | 6f 64 65 20 61 6e 64 20 |binary m|ode and |
|00003790| 72 65 74 72 69 65 76 65 | 20 74 68 65 20 63 6f 6d |retrieve| the com|
|000037a0| 70 72 65 73 73 65 64 20 | 0a 20 20 20 74 61 72 63 |pressed |.   tarc|
|000037b0| 68 69 76 65 20 70 75 62 | 2f 67 6e 75 2f 62 69 73 |hive pub|/gnu/bis|
|000037c0| 6f 6e 2d 31 2e 31 31 2e | 74 61 72 2e 5a 20 28 6f |on-1.11.|tar.Z (o|
|000037d0| 72 20 77 68 61 74 65 76 | 65 72 20 74 68 65 20 68 |r whatev|er the h|
|000037e0| 69 67 68 65 73 74 20 76 | 65 72 73 69 6f 6e 20 69 |ighest v|ersion i|
|000037f0| 73 29 2e 0a 20 2d 20 44 | 65 66 69 6e 65 20 22 4c |s).. - D|efine "L|
|00003800| 45 58 20 3d 20 6c 65 78 | 22 20 69 66 20 79 6f 75 |EX = lex|" if you|
|00003810| 20 64 6f 6e 27 74 20 68 | 61 76 65 20 66 6c 65 78 | don't h|ave flex|
|00003820| 2e 20 20 49 66 20 79 6f | 75 72 20 76 65 72 73 69 |.  If yo|ur versi|
|00003830| 6f 6e 20 6f 66 0a 20 20 | 20 66 6c 65 78 20 69 73 |on of.  | flex is|
|00003840| 20 6f 6c 64 65 72 20 74 | 68 61 6e 20 32 2e 31 2c | older t|han 2.1,|
|00003850| 20 79 6f 75 20 6d 75 73 | 74 20 61 64 64 20 2d 44 | you mus|t add -D|
|00003860| 46 4c 45 58 5f 53 43 41 | 4e 4e 45 52 20 74 6f 20 |FLEX_SCA|NNER to |
|00003870| 44 45 46 49 4e 45 53 2e | 0a 20 20 20 46 6c 65 78 |DEFINES.|.   Flex|
|00003880| 20 69 73 20 61 76 61 69 | 6c 61 62 6c 65 20 76 69 | is avai|lable vi|
|00003890| 61 20 61 6e 6f 6e 79 6d | 6f 75 73 20 66 74 70 20 |a anonym|ous ftp |
|000038a0| 66 72 6f 6d 20 66 74 70 | 2e 65 65 2e 6c 62 6c 2e |from ftp|.ee.lbl.|
|000038b0| 67 6f 76 20 28 31 32 38 | 2e 33 2e 32 35 34 2e 36 |gov (128|.3.254.6|
|000038c0| 38 29 2e 0a 20 20 20 53 | 65 74 20 62 69 6e 61 72 |8)..   S|et binar|
|000038d0| 79 20 6d 6f 64 65 20 61 | 6e 64 20 72 65 74 72 69 |y mode a|nd retri|
|000038e0| 65 76 65 20 74 68 65 20 | 63 6f 6d 70 72 65 73 73 |eve the |compress|
|000038f0| 65 64 20 74 61 72 63 68 | 69 76 65 20 66 6c 65 78 |ed tarch|ive flex|
|00003900| 2d 32 2e 33 2e 74 61 72 | 2e 5a 0a 20 20 20 28 6f |-2.3.tar|.Z.   (o|
|00003910| 72 20 77 68 61 74 65 76 | 65 72 20 74 68 65 20 68 |r whatev|er the h|
|00003920| 69 67 68 65 73 74 20 76 | 65 72 73 69 6f 6e 20 69 |ighest v|ersion i|
|00003930| 73 29 2e 0a 20 2d 20 52 | 65 64 65 66 69 6e 65 20 |s).. - R|edefine |
|00003940| 42 49 4e 44 45 53 54 20 | 61 6e 64 2f 6f 72 20 4d |BINDEST |and/or M|
|00003950| 41 4e 44 45 53 54 20 69 | 66 20 79 6f 75 20 77 61 |ANDEST i|f you wa|
|00003960| 6e 74 20 74 68 65 20 62 | 69 6e 61 72 79 20 6f 72 |nt the b|inary or|
|00003970| 20 6d 61 6e 75 61 6c 0a | 20 20 20 65 6e 74 72 79 | manual.|   entry|
|00003980| 20 69 6e 73 74 61 6c 6c | 65 64 20 73 6f 6d 65 77 | install|ed somew|
|00003990| 68 65 72 65 20 65 6c 73 | 65 2e 0a 20 2d 20 52 65 |here els|e.. - Re|
|000039a0| 6d 6f 76 65 20 2d 44 43 | 53 4c 49 50 20 66 72 6f |move -DC|SLIP fro|
|000039b0| 6d 20 44 45 46 49 4e 45 | 53 20 75 6e 6c 65 73 73 |m DEFINE|S unless|
|000039c0| 20 79 6f 75 20 68 61 76 | 65 20 42 50 46 20 61 6e | you hav|e BPF an|
|000039d0| 64 20 53 4c 49 50 20 69 | 6e 20 79 6f 75 72 20 6b |d SLIP i|n your k|
|000039e0| 65 72 6e 65 6c 2c 0a 20 | 20 20 61 6e 64 20 6e 65 |ernel,. |  and ne|
|000039f0| 74 2f 69 66 5f 73 6c 2e | 63 20 68 61 73 20 62 65 |t/if_sl.|c has be|
|00003a00| 65 6e 20 6d 6f 64 69 66 | 69 65 64 20 74 6f 20 69 |en modif|ied to i|
|00003a10| 6e 74 65 72 61 63 74 20 | 77 69 74 68 20 42 50 46 |nteract |with BPF|
|00003a20| 20 28 6f 72 20 79 6f 75 | 20 68 61 76 65 0a 20 20 | (or you| have.  |
|00003a30| 20 69 6e 73 74 61 6c 6c | 65 64 20 6f 75 72 20 53 | install|ed our S|
|00003a40| 4c 49 50 20 73 6f 66 74 | 77 61 72 65 29 2e 0a 20 |LIP soft|ware).. |
|00003a50| 2d 20 52 65 6d 6f 76 65 | 20 2d 44 50 50 50 20 66 |- Remove| -DPPP f|
|00003a60| 72 6f 6d 20 44 45 46 49 | 4e 45 53 20 75 6e 6c 65 |rom DEFI|NES unle|
|00003a70| 73 73 20 79 6f 75 20 68 | 61 76 65 20 42 50 46 20 |ss you h|ave BPF |
|00003a80| 69 6e 20 79 6f 75 72 20 | 6b 65 72 6e 65 6c 2c 20 |in your |kernel, |
|00003a90| 61 6e 64 20 61 6e 79 0a | 20 20 20 70 6f 69 6e 74 |and any.|   point|
|00003aa0| 2d 74 6f 2d 70 6f 69 6e | 74 20 64 72 69 76 65 72 |-to-poin|t driver|
|00003ab0| 73 20 68 61 76 65 20 62 | 65 65 6e 20 6d 6f 64 69 |s have b|een modi|
|00003ac0| 66 69 65 64 20 74 6f 20 | 69 6e 74 65 72 61 63 74 |fied to |interact|
|00003ad0| 20 77 69 74 68 20 42 50 | 46 2e 0a 20 2d 20 4f 6e | with BP|F.. - On|
|00003ae0| 20 49 42 4d 20 52 54 73 | 20 72 75 6e 6e 69 6e 67 | IBM RTs| running|
|00003af0| 20 34 2e 33 42 53 44 20 | 61 6e 64 20 65 6e 65 74 | 4.3BSD |and enet|
|00003b00| 2c 20 74 68 65 73 65 20 | 64 65 66 69 6e 65 73 20 |, these |defines |
|00003b10| 68 61 76 65 20 62 65 65 | 6e 20 6b 6e 6f 77 6e 20 |have bee|n known |
|00003b20| 74 6f 20 77 6f 72 6b 3a | 0a 09 44 45 46 49 4e 45 |to work:|..DEFINE|
|00003b30| 53 20 3d 20 2d 44 4e 4f | 56 46 50 52 49 4e 54 46 |S = -DNO|VFPRINTF|
|00003b40| 20 2d 44 49 42 4d 52 54 | 50 43 0a 09 43 46 4c 41 | -DIBMRT|PC..CFLA|
|00003b50| 47 53 20 3d 20 24 28 53 | 54 41 4e 44 41 52 44 5f |GS = $(S|TANDARD_|
|00003b60| 43 46 4c 41 47 53 29 20 | 2d 55 5f 5f 53 54 44 43 |CFLAGS) |-U__STDC|
|00003b70| 5f 5f 0a 09 4d 44 20 3d | 20 65 63 68 6f 20 72 74 |__..MD =| echo rt|
|00003b80| 0a 20 2d 20 44 65 66 69 | 6e 65 20 47 52 4f 55 50 |. - Defi|ne GROUP|
|00003b90| 20 74 6f 20 74 68 65 20 | 67 72 6f 75 70 20 6e 61 | to the |group na|
|00003ba0| 6d 65 20 74 68 61 74 20 | 74 63 70 64 75 6d 70 20 |me that |tcpdump |
|00003bb0| 73 68 6f 75 6c 64 20 62 | 65 20 69 6e 73 74 61 6c |should b|e instal|
|00003bc0| 6c 65 64 20 75 6e 64 65 | 72 2e 0a 20 20 20 46 6f |led unde|r..   Fo|
|00003bd0| 72 20 73 65 63 75 72 69 | 74 79 20 72 65 61 73 6f |r securi|ty reaso|
|00003be0| 6e 73 2c 20 77 65 20 68 | 61 76 65 20 66 6f 75 6e |ns, we h|ave foun|
|00003bf0| 64 20 69 74 20 63 6f 6e | 76 65 6e 69 65 6e 74 20 |d it con|venient |
|00003c00| 74 6f 20 63 72 65 61 74 | 65 20 61 20 67 72 6f 75 |to creat|e a grou|
|00003c10| 70 0a 20 20 20 61 73 73 | 6f 63 69 61 74 65 64 20 |p.   ass|ociated |
|00003c20| 77 69 74 68 20 72 61 77 | 20 6e 65 74 77 6f 72 6b |with raw| network|
|00003c30| 20 61 63 63 65 73 73 2e | 0a 0a 53 69 6e 63 65 20 | access.|..Since |
|00003c40| 74 63 70 64 75 6d 70 20 | 6e 6f 77 20 75 73 65 73 |tcpdump |now uses|
|00003c50| 20 74 68 65 20 42 50 46 | 20 70 61 63 6b 65 74 20 | the BPF| packet |
|00003c60| 66 69 6c 74 65 72 69 6e | 67 20 6d 61 63 68 69 6e |filterin|g machin|
|00003c70| 65 72 79 2c 20 69 74 20 | 69 6e 63 6c 75 64 65 73 |ery, it |includes|
|00003c80| 0a 73 6f 6d 65 20 66 69 | 6c 65 73 20 74 68 61 74 |.some fi|les that|
|00003c90| 20 6d 61 79 20 6e 6f 74 | 20 62 65 20 70 72 65 73 | may not| be pres|
|00003ca0| 65 6e 74 20 79 6f 75 72 | 20 73 79 73 74 65 6d 20 |ent your| system |
|00003cb0| 28 69 2e 65 2e 2c 20 3c | 6e 65 74 2f 62 70 66 2e |(i.e., <|net/bpf.|
|00003cc0| 68 3e 29 2e 0a 54 6f 20 | 67 65 74 20 61 72 6f 75 |h>)..To |get arou|
|00003cd0| 6e 64 20 74 68 69 73 2c | 20 77 65 20 68 61 76 65 |nd this,| we have|
|00003ce0| 20 70 6c 61 63 65 64 20 | 63 6f 70 69 65 73 20 6f | placed |copies o|
|00003cf0| 66 20 74 68 65 20 72 65 | 71 75 69 72 65 64 20 66 |f the re|quired f|
|00003d00| 69 6c 65 73 20 69 6e 20 | 0a 74 63 70 64 75 6d 70 |iles in |.tcpdump|
|00003d10| 2f 6e 65 74 2c 20 61 6e | 64 20 61 64 64 65 64 20 |/net, an|d added |
|00003d20| 27 2d 49 2e 2e 27 20 74 | 6f 20 74 68 65 20 4d 61 |'-I..' t|o the Ma|
|00003d30| 6b 65 66 69 6c 65 20 49 | 4e 43 4c 55 44 45 53 20 |kefile I|NCLUDES |
|00003d40| 73 6f 20 27 63 63 27 20 | 63 61 6e 20 0a 66 69 6e |so 'cc' |can .fin|
|00003d50| 64 20 74 68 65 6d 2e 0a | 0a 4f 6e 63 65 20 74 68 |d them..|.Once th|
|00003d60| 65 20 4d 61 6b 65 66 69 | 6c 65 20 69 73 20 72 69 |e Makefi|le is ri|
|00003d70| 67 68 74 2c 20 6a 75 73 | 74 20 74 79 70 65 20 22 |ght, jus|t type "|
|00003d80| 6d 61 6b 65 22 2e 20 20 | 54 68 69 73 20 77 69 6c |make".  |This wil|
|00003d90| 6c 20 63 72 65 61 74 65 | 0a 61 20 73 75 62 64 69 |l create|.a subdi|
|00003da0| 72 65 63 74 6f 72 79 20 | 61 70 70 72 6f 70 72 69 |rectory |appropri|
|00003db0| 61 74 65 20 66 6f 72 20 | 74 68 65 20 61 72 63 68 |ate for |the arch|
|00003dc0| 69 74 65 63 74 75 72 65 | 20 61 6e 64 20 4f 53 20 |itecture| and OS |
|00003dd0| 79 6f 75 27 72 65 20 62 | 75 69 6c 64 69 6e 67 0a |you're b|uilding.|
|00003de0| 6f 6e 20 28 69 2e 65 2e | 2c 20 22 73 75 6e 33 2d |on (i.e.|, "sun3-|
|00003df0| 73 75 6e 6f 73 33 22 2c | 20 22 73 75 6e 34 2d 73 |sunos3",| "sun4-s|
|00003e00| 75 6e 6f 73 34 22 2c 20 | 22 68 70 33 30 30 2d 62 |unos4", |"hp300-b|
|00003e10| 73 64 22 2c 20 65 74 63 | 2e 29 20 62 79 0a 73 65 |sd", etc|.) by.se|
|00003e20| 74 74 69 6e 67 20 75 70 | 20 61 70 70 72 6f 70 72 |tting up| appropr|
|00003e30| 69 61 74 65 20 6c 69 6e | 6b 73 2e 20 20 49 66 20 |iate lin|ks.  If |
|00003e40| 74 68 65 20 66 69 6c 65 | 20 2f 64 65 76 2f 62 70 |the file| /dev/bp|
|00003e50| 66 30 20 65 78 69 73 74 | 73 2c 20 74 68 65 20 6d |f0 exist|s, the m|
|00003e60| 61 6b 65 0a 70 72 6f 63 | 65 64 75 72 65 20 61 73 |ake.proc|edure as|
|00003e70| 73 75 6d 65 73 20 79 6f | 75 20 77 61 6e 74 20 74 |sumes yo|u want t|
|00003e80| 6f 20 75 73 65 20 42 50 | 46 2e 20 20 49 66 20 2f |o use BP|F.  If /|
|00003e90| 75 73 72 2f 69 6e 63 6c | 75 64 65 2f 6e 65 74 2f |usr/incl|ude/net/|
|00003ea0| 65 6e 65 74 2e 68 20 65 | 78 69 73 74 73 2c 0a 74 |enet.h e|xists,.t|
|00003eb0| 68 65 6e 20 65 6e 65 74 | 20 69 73 20 61 73 73 75 |hen enet| is assu|
|00003ec0| 6d 65 64 2e 20 20 4f 74 | 68 65 72 77 69 73 65 2c |med.  Ot|herwise,|
|00003ed0| 20 74 68 65 20 70 61 63 | 6b 65 74 20 63 61 70 74 | the pac|ket capt|
|00003ee0| 75 72 65 0a 69 6e 74 65 | 72 66 61 63 65 20 69 73 |ure.inte|rface is|
|00003ef0| 20 64 65 64 75 63 65 64 | 20 66 72 6f 6d 20 74 68 | deduced| from th|
|00003f00| 65 20 4f 53 20 61 73 20 | 66 6f 6c 6c 6f 77 73 3a |e OS as |follows:|
|00003f10| 0a 0a 09 09 42 53 44 20 | 2d 20 42 50 46 0a 09 09 |....BSD |- BPF...|
|00003f20| 53 75 6e 4f 53 20 33 20 | 2d 20 4e 49 54 0a 09 09 |SunOS 3 |- NIT...|
|00003f30| 53 75 6e 4f 53 20 34 20 | 2d 20 53 54 52 45 41 4d |SunOS 4 |- STREAM|
|00003f40| 53 20 4e 49 54 0a 09 09 | 55 6c 74 72 69 78 20 2d |S NIT...|Ultrix -|
|00003f50| 20 44 45 43 20 50 61 63 | 6b 65 74 66 69 6c 74 65 | DEC Pac|ketfilte|
|00003f60| 72 0a 0a 57 65 20 75 73 | 65 20 73 65 70 61 72 61 |r..We us|e separa|
|00003f70| 74 65 20 73 75 62 64 69 | 72 65 63 74 6f 72 69 65 |te subdi|rectorie|
|00003f80| 73 20 73 6f 20 77 65 20 | 63 61 6e 20 73 75 70 70 |s so we |can supp|
|00003f90| 6f 72 74 20 6d 75 6c 74 | 69 70 6c 65 20 70 6c 61 |ort mult|iple pla|
|00003fa0| 74 66 6f 72 6d 73 20 66 | 72 6f 6d 0a 6f 6e 65 20 |tforms f|rom.one |
|00003fb0| 63 6f 70 79 20 6f 66 20 | 74 68 65 20 73 6f 75 72 |copy of |the sour|
|00003fc0| 63 65 2e 20 20 44 4f 4e | 27 54 20 73 61 79 20 22 |ce.  DON|'T say "|
|00003fd0| 6d 61 6b 65 20 74 63 70 | 64 75 6d 70 22 20 69 6e |make tcp|dump" in|
|00003fe0| 20 74 68 65 20 74 6f 70 | 20 6c 65 76 65 6c 0a 64 | the top| level.d|
|00003ff0| 69 72 65 63 74 6f 72 79 | 20 2d 2d 20 69 74 20 77 |irectory| -- it w|
|00004000| 6f 6e 27 74 20 77 6f 72 | 6b 20 61 6e 64 20 69 74 |on't wor|k and it|
|00004010| 20 77 69 6c 6c 20 6c 65 | 61 76 65 20 61 20 6c 6f | will le|ave a lo|
|00004020| 74 20 6f 66 20 75 73 65 | 6c 65 73 73 20 2e 6f 27 |t of use|less .o'|
|00004030| 73 20 61 72 6f 75 6e 64 | 2e 0a 0a 49 66 20 6c 69 |s around|...If li|
|00004040| 6e 6b 69 6e 67 20 74 63 | 70 64 75 6d 70 20 66 61 |nking tc|pdump fa|
|00004050| 69 6c 73 20 77 69 74 68 | 20 22 55 6e 64 65 66 69 |ils with| "Undefi|
|00004060| 6e 65 64 3a 20 5f 61 6c | 6c 6f 63 61 22 20 77 68 |ned: _al|loca" wh|
|00004070| 65 6e 20 75 73 69 6e 67 | 20 62 69 73 6f 6e 0a 6f |en using| bison.o|
|00004080| 6e 20 61 20 53 75 6e 34 | 2c 20 79 6f 75 72 20 76 |n a Sun4|, your v|
|00004090| 65 72 73 69 6f 6e 20 6f | 66 20 62 69 73 6f 6e 20 |ersion o|f bison |
|000040a0| 69 73 20 62 72 6f 6b 65 | 6e 2e 20 54 6f 20 66 69 |is broke|n. To fi|
|000040b0| 78 20 69 74 2c 20 69 6e | 73 65 72 74 20 74 68 65 |x it, in|sert the|
|000040c0| 0a 6c 69 6e 65 73 3a 0a | 0a 09 23 69 66 64 65 66 |.lines:.|..#ifdef|
|000040d0| 20 5f 5f 47 4e 55 43 5f | 5f 0a 09 23 64 65 66 69 | __GNUC_|_..#defi|
|000040e0| 6e 65 20 61 6c 6c 6f 63 | 61 20 5f 5f 62 75 69 6c |ne alloc|a __buil|
|000040f0| 74 69 6e 5f 61 6c 6c 6f | 63 61 0a 09 23 65 6c 73 |tin_allo|ca..#els|
|00004100| 65 0a 09 23 69 66 64 65 | 66 20 73 70 61 72 63 0a |e..#ifde|f sparc.|
|00004110| 09 23 69 6e 63 6c 75 64 | 65 20 3c 61 6c 6c 6f 63 |.#includ|e <alloc|
|00004120| 61 2e 68 3e 0a 09 23 65 | 6c 73 65 0a 09 63 68 61 |a.h>..#e|lse..cha|
|00004130| 72 20 2a 61 6c 6c 6f 63 | 61 20 28 29 3b 0a 09 23 |r *alloc|a ();..#|
|00004140| 65 6e 64 69 66 0a 09 23 | 65 6e 64 69 66 0a 0a 72 |endif..#|endif..r|
|00004150| 69 67 68 74 20 61 66 74 | 65 72 20 74 68 65 20 28 |ight aft|er the (|
|00004160| 31 30 30 20 6c 69 6e 65 | 21 29 20 47 4e 55 20 6c |100 line|!) GNU l|
|00004170| 69 63 65 6e 73 65 20 63 | 6f 6d 6d 65 6e 74 20 69 |icense c|omment i|
|00004180| 6e 20 62 69 73 6f 6e 2e | 73 69 6d 70 6c 65 2c 0a |n bison.|simple,.|
|00004190| 72 65 6d 6f 76 65 20 73 | 75 6e 34 2d 73 75 6e 6f |remove s|un4-suno|
|000041a0| 73 34 2f 74 63 70 67 72 | 61 6d 2e 5b 63 6f 5d 2c |s4/tcpgr|am.[co],|
|000041b0| 20 61 6e 64 20 66 69 72 | 65 20 75 70 20 6d 61 6b | and fir|e up mak|
|000041c0| 65 20 61 67 61 69 6e 2e | 0a 0a 49 66 20 79 6f 75 |e again.|..If you|
|000041d0| 20 61 72 65 20 72 75 6e | 6e 69 6e 67 20 61 20 76 | are run|ning a v|
|000041e0| 65 72 73 69 6f 6e 20 6f | 66 20 53 75 6e 4f 53 20 |ersion o|f SunOS |
|000041f0| 65 61 72 6c 69 65 72 20 | 74 68 61 6e 20 34 2e 31 |earlier |than 4.1|
|00004200| 2c 20 79 6f 75 20 77 69 | 6c 6c 0a 6e 65 65 64 20 |, you wi|ll.need |
|00004210| 74 6f 20 72 65 70 6c 61 | 63 65 20 74 68 65 20 53 |to repla|ce the S|
|00004220| 75 6e 20 73 75 70 70 6c | 69 65 64 20 2f 73 79 73 |un suppl|ied /sys|
|00004230| 2f 73 75 6e 7b 33 2c 34 | 2c 34 63 7d 2f 4f 42 4a |/sun{3,4|,4c}/OBJ|
|00004240| 2f 6e 69 74 5f 69 66 2e | 6f 0a 77 69 74 68 20 74 |/nit_if.|o.with t|
|00004250| 68 65 20 61 70 70 72 6f | 70 72 69 61 74 65 20 76 |he appro|priate v|
|00004260| 65 72 73 69 6f 6e 20 66 | 72 6f 6d 20 74 68 69 73 |ersion f|rom this|
|00004270| 20 64 69 73 74 72 69 62 | 75 74 69 6f 6e 27 73 20 | distrib|ution's |
|00004280| 53 55 4e 4f 53 34 0a 73 | 75 62 64 69 72 65 63 74 |SUNOS4.s|ubdirect|
|00004290| 6f 72 79 20 61 6e 64 20 | 62 75 69 6c 64 20 61 20 |ory and |build a |
|000042a0| 6e 65 77 20 6b 65 72 6e | 65 6c 3a 0a 0a 20 20 20 |new kern|el:..   |
|000042b0| 20 20 20 20 6e 69 74 5f | 69 66 2e 6f 2e 73 75 6e |    nit_|if.o.sun|
|000042c0| 33 2d 73 75 6e 6f 73 34 | 09 09 28 61 6e 79 20 66 |3-sunos4|..(any f|
|000042d0| 6c 61 76 6f 72 20 6f 66 | 20 73 75 6e 33 29 0a 20 |lavor of| sun3). |
|000042e0| 20 20 20 20 20 20 6e 69 | 74 5f 69 66 2e 6f 2e 73 |      ni|t_if.o.s|
|000042f0| 75 6e 34 63 2d 73 75 6e | 6f 73 34 2e 30 2e 33 63 |un4c-sun|os4.0.3c|
|00004300| 09 28 53 53 31 2c 20 53 | 53 31 2b 2c 20 49 50 43 |.(SS1, S|S1+, IPC|
|00004310| 2c 20 53 4c 43 2c 20 65 | 74 63 2e 29 0a 20 20 20 |, SLC, e|tc.).   |
|00004320| 20 20 20 20 6e 69 74 5f | 69 66 2e 6f 2e 73 75 6e |    nit_|if.o.sun|
|00004330| 34 2d 73 75 6e 6f 73 34 | 09 09 28 53 75 6e 34 27 |4-sunos4|..(Sun4'|
|00004340| 73 20 6e 6f 74 20 63 6f | 76 65 72 65 64 20 62 79 |s not co|vered by|
|00004350| 0a 09 09 09 09 09 20 20 | 20 20 6e 69 74 5f 69 66 |......  |  nit_if|
|00004360| 2e 6f 2e 73 75 6e 34 63 | 2d 73 75 6e 6f 73 34 2e |.o.sun4c|-sunos4.|
|00004370| 30 2e 33 63 29 0a 0a 54 | 68 65 73 65 20 6e 69 74 |0.3c)..T|hese nit|
|00004380| 20 72 65 70 6c 61 63 65 | 6d 65 6e 74 73 20 66 69 | replace|ments fi|
|00004390| 78 20 61 20 62 75 67 20 | 74 68 61 74 20 6d 61 6b |x a bug |that mak|
|000043a0| 65 73 20 6e 69 74 20 65 | 73 73 65 6e 74 69 61 6c |es nit e|ssential|
|000043b0| 6c 79 20 75 6e 75 73 61 | 62 6c 65 20 69 6e 0a 70 |ly unusa|ble in.p|
|000043c0| 72 65 2d 53 75 6e 4f 53 | 20 34 2e 31 2e 20 20 49 |re-SunOS| 4.1.  I|
|000043d0| 6e 20 61 64 64 69 74 69 | 6f 6e 2c 20 6f 75 72 20 |n additi|on, our |
|000043e0| 73 75 6e 34 63 2d 73 75 | 6e 6f 73 34 2e 30 2e 33 |sun4c-su|nos4.0.3|
|000043f0| 63 20 6e 69 74 20 67 69 | 76 65 73 20 79 6f 75 0a |c nit gi|ves you.|
|00004400| 74 69 6d 65 73 74 61 6d | 70 73 20 74 6f 20 74 68 |timestam|ps to th|
|00004410| 65 20 72 65 73 6f 6c 75 | 74 69 6f 6e 20 6f 66 20 |e resolu|tion of |
|00004420| 74 68 65 20 53 53 2d 31 | 20 63 6c 6f 63 6b 20 28 |the SS-1| clock (|
|00004430| 31 20 75 73 29 20 72 61 | 74 68 65 72 20 74 68 61 |1 us) ra|ther tha|
|00004440| 6e 20 74 68 65 0a 6c 6f | 75 73 79 20 32 30 6d 73 |n the.lo|usy 20ms|
|00004450| 20 74 69 6d 65 73 74 61 | 6d 70 73 20 53 75 6e 20 | timesta|mps Sun |
|00004460| 67 69 76 65 73 20 79 6f | 75 20 20 28 74 63 70 64 |gives yo|u  (tcpd|
|00004470| 75 6d 70 20 77 69 6c 6c | 20 70 72 69 6e 74 20 6f |ump will| print o|
|00004480| 75 74 20 74 68 65 20 66 | 75 6c 6c 0a 74 69 6d 65 |ut the f|ull.time|
|00004490| 73 74 61 6d 70 20 72 65 | 73 6f 6c 75 74 69 6f 6e |stamp re|solution|
|000044a0| 20 69 66 20 69 74 20 66 | 69 6e 64 73 20 69 74 27 | if it f|inds it'|
|000044b0| 73 20 72 75 6e 6e 69 6e | 67 20 6f 6e 20 61 20 53 |s runnin|g on a S|
|000044c0| 53 2d 31 29 2e 0a 0a 49 | 66 20 65 76 65 72 79 74 |S-1)...I|f everyt|
|000044d0| 68 69 6e 67 20 62 75 69 | 6c 64 73 20 6f 6b 2c 20 |hing bui|lds ok, |
|000044e0| 73 75 20 61 6e 64 20 74 | 79 70 65 20 22 6d 61 6b |su and t|ype "mak|
|000044f0| 65 20 69 6e 73 74 61 6c | 6c 22 2e 20 20 54 68 69 |e instal|l".  Thi|
|00004500| 73 20 77 69 6c 6c 0a 69 | 6e 73 74 61 6c 6c 20 74 |s will.i|nstall t|
|00004510| 68 65 20 74 63 70 64 75 | 6d 70 20 61 6e 64 20 69 |he tcpdu|mp and i|
|00004520| 74 73 20 6d 61 6e 75 61 | 6c 20 65 6e 74 72 79 2e |ts manua|l entry.|
|00004530| 20 20 4e 6f 74 65 20 74 | 68 61 74 20 73 69 6e 63 |  Note t|hat sinc|
|00004540| 65 20 4e 49 54 0a 63 61 | 6e 20 6f 6e 6c 79 20 62 |e NIT.ca|n only b|
|00004550| 65 20 75 73 65 64 20 62 | 79 20 72 6f 6f 74 2c 20 |e used b|y root, |
|00004560| 74 63 70 64 75 6d 70 20 | 69 73 20 69 6e 73 74 61 |tcpdump |is insta|
|00004570| 6c 6c 65 64 20 73 65 74 | 75 69 64 20 74 6f 20 72 |lled set|uid to r|
|00004580| 6f 6f 74 2e 20 20 0a 41 | 73 20 61 20 73 65 63 75 |oot.  .A|s a secu|
|00004590| 72 69 74 79 20 6d 65 61 | 73 75 72 65 2c 20 77 65 |rity mea|sure, we|
|000045a0| 20 69 6e 73 74 61 6c 6c | 20 69 74 20 65 78 65 63 | install| it exec|
|000045b0| 74 75 61 62 6c 65 20 6f | 6e 6c 79 20 62 79 20 67 |tuable o|nly by g|
|000045c0| 72 6f 75 70 20 77 68 65 | 65 6c 2e 0a 4f 6e 20 74 |roup whe|el..On t|
|000045d0| 68 65 20 6f 74 68 65 72 | 20 68 61 6e 64 2c 20 42 |he other| hand, B|
|000045e0| 50 46 20 70 61 63 6b 65 | 74 20 61 63 63 65 73 73 |PF packe|t access|
|000045f0| 20 69 73 20 63 6f 6e 74 | 72 6f 6c 6c 65 64 20 62 | is cont|rolled b|
|00004600| 79 20 70 65 72 6d 69 73 | 73 69 6f 6e 73 0a 74 6f |y permis|sions.to|
|00004610| 20 2f 64 65 76 2f 62 70 | 66 30 20 65 74 63 2e 2c | /dev/bp|f0 etc.,|
|00004620| 20 61 6e 64 20 69 6e 20 | 74 68 69 73 20 63 61 73 | and in |this cas|
|00004630| 65 2c 20 74 63 70 64 75 | 6d 70 20 64 6f 65 73 20 |e, tcpdu|mp does |
|00004640| 6e 6f 74 20 68 61 76 65 | 20 74 6f 20 62 65 20 73 |not have| to be s|
|00004650| 65 74 75 69 64 2e 0a 0a | 49 66 20 79 6f 75 27 72 |etuid...|If you'r|
|00004660| 65 20 72 75 6e 6e 69 6e | 67 20 61 20 42 53 44 20 |e runnin|g a BSD |
|00004670| 73 79 73 74 65 6d 20 6f | 72 20 77 6f 75 6c 64 20 |system o|r would |
|00004680| 6c 69 6b 65 20 74 6f 20 | 72 65 70 6c 61 63 65 20 |like to |replace |
|00004690| 53 75 6e 27 73 20 4e 49 | 54 20 69 6e 74 65 72 66 |Sun's NI|T interf|
|000046a0| 61 63 65 2c 0a 79 6f 75 | 20 6e 65 65 64 20 74 6f |ace,.you| need to|
|000046b0| 20 69 6e 73 74 61 6c 6c | 20 6f 75 72 20 70 61 63 | install| our pac|
|000046c0| 6b 65 74 20 66 69 6c 74 | 65 72 20 69 6e 20 79 6f |ket filt|er in yo|
|000046d0| 75 72 20 6b 65 72 6e 65 | 6c 2e 20 20 53 65 65 20 |ur kerne|l.  See |
|000046e0| 62 70 66 2f 52 45 41 44 | 4d 45 20 66 6f 72 20 0a |bpf/READ|ME for .|
|000046f0| 6d 6f 72 65 20 64 65 74 | 61 69 6c 73 2e 0a 0a 0a |more det|ails....|
|00004700| 0a 6c 65 73 20 69 6e 20 | 0a 74 63 70 64 75 6d 70 |.les in |.tcpdump|
|00004710| 2f 6e 65 74 2c 20 61 6e | 64 20 61 64 64 65 64 20 |/net, an|d added |
|00004720| 27 2d 49 2e 2e 27 20 74 | 6f 20 74 68 65 20 4d 61 |'-I..' t|o the Ma|
|00004730| 6b 65 66 69 6c 65 20 49 | 4e 43 4c 55 44 45 53 20 |kefile I|NCLUDES |
|00004740| 73 6f 20 27 63 63 27 20 | 63 61 6e 20 0a 66 69 6e |so 'cc' |can .fin|
|00004750| 64 20 74 68 65 6d 2e 0a | 0a 4f 6e 63 65 20 74 68 |d them..|.Once th|
|00004760| 65 20 4d 61 6b 65 66 69 | 6c 65 20 69 73 20 72 69 |e Makefi|le is ri|
|00004770| 67 68 74 2c 20 6a 75 73 | 74 20 74 79 70 65 20 22 |ght, jus|t type "|
|00004780| 6d 61 6b 65 22 2e 20 20 | 54 68 69 73 20 77 69 6c |make".  |This wil|
|00004790| 6c 20 63 72 65 61 74 65 | 0a 61 20 73 75 62 64 69 |l create|.a subdi|
|000047a0| 72 65 63 74 6f 72 79 20 | 61 70 70 72 6f 70 72 69 |rectory |appropri|
|000047b0| 61 74 65 20 66 6f 72 20 | 74 68 65 20 61 72 63 68 |ate for |the arch|
|000047c0| 69 74 65 63 74 75 72 65 | 20 61 6e 64 20 4f 53 20 |itecture| and OS |
|000047d0| 79 6f 75 27 72 65 20 62 | 75 69 6c 64 69 6e 67 0a |you're b|uilding.|
|000047e0| 6f 6e 20 28 69 2e 65 2e | 2c 20 22 73 75 6e 33 2d |on (i.e.|, "sun3-|
|000047f0| 73 75 6e 6f 73 33 22 2c | 20 22 73 75 6e 34 2d 73 |sunos3",| "sun4-s|
|00004800| 4d 61 6b 65 66 69 6c 65 | 00 00 00 00 00 00 00 00 |Makefile|........|
|00004810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004860| 00 00 00 00 20 20 20 34 | 34 34 20 00 20 20 33 30 |....   4|44 .  30|
|00004870| 36 30 20 00 20 20 20 20 | 33 34 20 00 20 20 20 20 |60 .    |34 .    |
|00004880| 20 20 31 35 33 30 33 20 | 20 34 37 34 33 32 32 30 |  15303 | 4743220|
|00004890| 36 32 33 20 20 20 35 36 | 30 37 00 20 00 00 00 00 |623   56|07. ....|
|000048a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000048b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000048c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000048d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000048e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000048f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000049f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00004a00| 23 20 20 43 6f 70 79 72 | 69 67 68 74 20 28 63 29 |#  Copyr|ight (c)|
|00004a10| 20 31 39 38 38 2d 31 39 | 39 30 20 54 68 65 20 52 | 1988-19|90 The R|
|00004a20| 65 67 65 6e 74 73 20 6f | 66 20 74 68 65 20 55 6e |egents o|f the Un|
|00004a30| 69 76 65 72 73 69 74 79 | 20 6f 66 20 43 61 6c 69 |iversity| of Cali|
|00004a40| 66 6f 72 6e 69 61 2e 0a | 23 20 20 41 6c 6c 20 72 |fornia..|#  All r|
|00004a50| 69 67 68 74 73 20 72 65 | 73 65 72 76 65 64 2e 0a |ights re|served..|
|00004a60| 23 0a 23 20 20 52 65 64 | 69 73 74 72 69 62 75 74 |#.#  Red|istribut|
|00004a70| 69 6f 6e 20 61 6e 64 20 | 75 73 65 20 69 6e 20 73 |ion and |use in s|
|00004a80| 6f 75 72 63 65 20 61 6e | 64 20 62 69 6e 61 72 79 |ource an|d binary|
|00004a90| 20 66 6f 72 6d 73 2c 20 | 77 69 74 68 20 6f 72 20 | forms, |with or |
|00004aa0| 77 69 74 68 6f 75 74 0a | 23 20 20 6d 6f 64 69 66 |without.|#  modif|
|00004ab0| 69 63 61 74 69 6f 6e 2c | 20 61 72 65 20 70 65 72 |ication,| are per|
|00004ac0| 6d 69 74 74 65 64 20 70 | 72 6f 76 69 64 65 64 20 |mitted p|rovided |
|00004ad0| 74 68 61 74 3a 20 28 31 | 29 20 73 6f 75 72 63 65 |that: (1|) source|
|00004ae0| 20 63 6f 64 65 20 64 69 | 73 74 72 69 62 75 74 69 | code di|stributi|
|00004af0| 6f 6e 73 0a 23 20 20 72 | 65 74 61 69 6e 20 74 68 |ons.#  r|etain th|
|00004b00| 65 20 61 62 6f 76 65 20 | 63 6f 70 79 72 69 67 68 |e above |copyrigh|
|00004b10| 74 20 6e 6f 74 69 63 65 | 20 61 6e 64 20 74 68 69 |t notice| and thi|
|00004b20| 73 20 70 61 72 61 67 72 | 61 70 68 20 69 6e 20 69 |s paragr|aph in i|
|00004b30| 74 73 20 65 6e 74 69 72 | 65 74 79 2c 20 28 32 29 |ts entir|ety, (2)|
|00004b40| 0a 23 20 20 64 69 73 74 | 72 69 62 75 74 69 6f 6e |.#  dist|ribution|
|00004b50| 73 20 69 6e 63 6c 75 64 | 69 6e 67 20 62 69 6e 61 |s includ|ing bina|
|00004b60| 72 79 20 63 6f 64 65 20 | 69 6e 63 6c 75 64 65 20 |ry code |include |
|00004b70| 74 68 65 20 61 62 6f 76 | 65 20 63 6f 70 79 72 69 |the abov|e copyri|
|00004b80| 67 68 74 20 6e 6f 74 69 | 63 65 20 61 6e 64 0a 23 |ght noti|ce and.#|
|00004b90| 20 20 74 68 69 73 20 70 | 61 72 61 67 72 61 70 68 |  this p|aragraph|
|00004ba0| 20 69 6e 20 69 74 73 20 | 65 6e 74 69 72 65 74 79 | in its |entirety|
|00004bb0| 20 69 6e 20 74 68 65 20 | 64 6f 63 75 6d 65 6e 74 | in the |document|
|00004bc0| 61 74 69 6f 6e 20 6f 72 | 20 6f 74 68 65 72 20 6d |ation or| other m|
|00004bd0| 61 74 65 72 69 61 6c 73 | 0a 23 20 20 70 72 6f 76 |aterials|.#  prov|
|00004be0| 69 64 65 64 20 77 69 74 | 68 20 74 68 65 20 64 69 |ided wit|h the di|
|00004bf0| 73 74 72 69 62 75 74 69 | 6f 6e 2c 20 61 6e 64 20 |stributi|on, and |
|00004c00| 28 33 29 20 61 6c 6c 20 | 61 64 76 65 72 74 69 73 |(3) all |advertis|
|00004c10| 69 6e 67 20 6d 61 74 65 | 72 69 61 6c 73 20 6d 65 |ing mate|rials me|
|00004c20| 6e 74 69 6f 6e 69 6e 67 | 0a 23 20 20 66 65 61 74 |ntioning|.#  feat|
|00004c30| 75 72 65 73 20 6f 72 20 | 75 73 65 20 6f 66 20 74 |ures or |use of t|
|00004c40| 68 69 73 20 73 6f 66 74 | 77 61 72 65 20 64 69 73 |his soft|ware dis|
|00004c50| 70 6c 61 79 20 74 68 65 | 20 66 6f 6c 6c 6f 77 69 |play the| followi|
|00004c60| 6e 67 20 61 63 6b 6e 6f | 77 6c 65 64 67 65 6d 65 |ng ackno|wledgeme|
|00004c70| 6e 74 3a 0a 23 20 20 60 | 60 54 68 69 73 20 70 72 |nt:.#  `|`This pr|
|00004c80| 6f 64 75 63 74 20 69 6e | 63 6c 75 64 65 73 20 73 |oduct in|cludes s|
|00004c90| 6f 66 74 77 61 72 65 20 | 64 65 76 65 6c 6f 70 65 |oftware |develope|
|00004ca0| 64 20 62 79 20 74 68 65 | 20 55 6e 69 76 65 72 73 |d by the| Univers|
|00004cb0| 69 74 79 20 6f 66 20 43 | 61 6c 69 66 6f 72 6e 69 |ity of C|aliforni|
|00004cc0| 61 2c 0a 23 20 20 4c 61 | 77 72 65 6e 63 65 20 42 |a,.#  La|wrence B|
|00004cd0| 65 72 6b 65 6c 65 79 20 | 4c 61 62 6f 72 61 74 6f |erkeley |Laborato|
|00004ce0| 72 79 20 61 6e 64 20 69 | 74 73 20 63 6f 6e 74 72 |ry and i|ts contr|
|00004cf0| 69 62 75 74 6f 72 73 2e | 27 27 20 4e 65 69 74 68 |ibutors.|'' Neith|
|00004d00| 65 72 20 74 68 65 20 6e | 61 6d 65 20 6f 66 0a 23 |er the n|ame of.#|
|00004d10| 20 20 74 68 65 20 55 6e | 69 76 65 72 73 69 74 79 |  the Un|iversity|
|00004d20| 20 6e 6f 72 20 74 68 65 | 20 6e 61 6d 65 73 20 6f | nor the| names o|
|00004d30| 66 20 69 74 73 20 63 6f | 6e 74 72 69 62 75 74 6f |f its co|ntributo|
|00004d40| 72 73 20 6d 61 79 20 62 | 65 20 75 73 65 64 20 74 |rs may b|e used t|
|00004d50| 6f 20 65 6e 64 6f 72 73 | 65 0a 23 20 20 6f 72 20 |o endors|e.#  or |
|00004d60| 70 72 6f 6d 6f 74 65 20 | 70 72 6f 64 75 63 74 73 |promote |products|
|00004d70| 20 64 65 72 69 76 65 64 | 20 66 72 6f 6d 20 74 68 | derived| from th|
|00004d80| 69 73 20 73 6f 66 74 77 | 61 72 65 20 77 69 74 68 |is softw|are with|
|00004d90| 6f 75 74 20 73 70 65 63 | 69 66 69 63 20 70 72 69 |out spec|ific pri|
|00004da0| 6f 72 0a 23 20 20 77 72 | 69 74 74 65 6e 20 70 65 |or.#  wr|itten pe|
|00004db0| 72 6d 69 73 73 69 6f 6e | 2e 0a 23 20 20 54 48 49 |rmission|..#  THI|
|00004dc0| 53 20 53 4f 46 54 57 41 | 52 45 20 49 53 20 50 52 |S SOFTWA|RE IS PR|
|00004dd0| 4f 56 49 44 45 44 20 60 | 60 41 53 20 49 53 27 27 |OVIDED `|`AS IS''|
|00004de0| 20 41 4e 44 20 57 49 54 | 48 4f 55 54 20 41 4e 59 | AND WIT|HOUT ANY|
|00004df0| 20 45 58 50 52 45 53 53 | 20 4f 52 20 49 4d 50 4c | EXPRESS| OR IMPL|
|00004e00| 49 45 44 0a 23 20 20 57 | 41 52 52 41 4e 54 49 45 |IED.#  W|ARRANTIE|
|00004e10| 53 2c 20 49 4e 43 4c 55 | 44 49 4e 47 2c 20 57 49 |S, INCLU|DING, WI|
|00004e20| 54 48 4f 55 54 20 4c 49 | 4d 49 54 41 54 49 4f 4e |THOUT LI|MITATION|
|00004e30| 2c 20 54 48 45 20 49 4d | 50 4c 49 45 44 20 57 41 |, THE IM|PLIED WA|
|00004e40| 52 52 41 4e 54 49 45 53 | 20 4f 46 0a 23 20 20 4d |RRANTIES| OF.#  M|
|00004e50| 45 52 43 48 41 4e 54 41 | 42 49 4c 49 54 59 20 41 |ERCHANTA|BILITY A|
|00004e60| 4e 44 20 46 49 54 4e 45 | 53 53 20 46 4f 52 20 41 |ND FITNE|SS FOR A|
|00004e70| 20 50 41 52 54 49 43 55 | 4c 41 52 20 50 55 52 50 | PARTICU|LAR PURP|
|00004e80| 4f 53 45 2e 0a 23 0a 23 | 20 40 28 23 29 20 24 48 |OSE..#.#| @(#) $H|
|00004e90| 65 61 64 65 72 3a 20 4d | 61 6b 65 66 69 6c 65 2c |eader: M|akefile,|
|00004ea0| 76 20 31 2e 38 31 20 39 | 31 2f 30 31 2f 31 30 20 |v 1.81 9|1/01/10 |
|00004eb0| 31 38 3a 32 31 3a 30 38 | 20 6d 63 63 61 6e 6e 65 |18:21:08| mccanne|
|00004ec0| 20 45 78 70 20 24 20 28 | 4c 42 4c 29 0a 0a 23 20 | Exp $ (|LBL)..# |
|00004ed0| 50 6f 73 73 69 62 6c 65 | 20 4f 70 74 69 6f 6e 73 |Possible| Options|
|00004ee0| 3a 0a 23 20 20 2d 44 43 | 53 4c 49 50 09 69 6e 63 |:.#  -DC|SLIP.inc|
|00004ef0| 6c 75 64 65 20 73 75 70 | 70 6f 72 74 20 66 6f 72 |lude sup|port for|
|00004f00| 20 6b 65 72 6e 65 6c 20 | 73 6c 69 70 20 69 6e 74 | kernel |slip int|
|00004f10| 65 72 66 61 63 65 0a 23 | 20 20 2d 44 50 50 50 09 |erface.#|  -DPPP.|
|00004f20| 69 6e 63 6c 75 64 65 20 | 73 75 70 70 6f 72 74 20 |include |support |
|00004f30| 66 6f 72 20 70 6f 69 6e | 74 20 74 6f 20 70 6f 69 |for poin|t to poi|
|00004f40| 6e 74 20 70 72 6f 74 6f | 63 6f 6c 0a 23 20 20 2d |nt proto|col.#  -|
|00004f50| 44 49 42 4d 52 54 50 43 | 09 65 6e 61 62 6c 65 20 |DIBMRTPC|.enable |
|00004f60| 74 68 65 20 4d 45 52 49 | 54 20 61 64 64 69 74 69 |the MERI|T additi|
|00004f70| 6f 6e 73 20 74 6f 20 74 | 68 65 20 53 74 61 6e 66 |ons to t|he Stanf|
|00004f80| 6f 72 64 20 45 6e 65 74 | 66 69 6c 74 65 72 0a 23 |ord Enet|filter.#|
|00004f90| 20 20 2d 44 4e 4f 56 46 | 50 52 49 4e 54 46 09 73 |  -DNOVF|PRINTF.s|
|00004fa0| 69 6d 75 6c 61 74 65 20 | 76 66 70 72 69 6e 74 66 |imulate |vfprintf|
|00004fb0| 28 29 20 6f 6e 20 73 79 | 73 74 65 6d 73 20 74 68 |() on sy|stems th|
|00004fc0| 61 74 20 64 6f 6e 27 74 | 20 68 61 76 65 20 69 74 |at don't| have it|
|00004fd0| 0a 23 0a 23 20 43 53 4c | 49 50 20 61 6e 64 20 50 |.#.# CSL|IP and P|
|00004fe0| 50 50 20 77 6f 72 6b 20 | 6f 6e 6c 79 20 75 6e 64 |PP work |only und|
|00004ff0| 65 72 20 42 50 46 2e 0a | 23 0a 44 45 46 49 4e 45 |er BPF..|#.DEFINE|
|00005000| 53 20 3d 20 2d 44 43 53 | 4c 49 50 20 2d 44 50 50 |S = -DCS|LIP -DPP|
|00005010| 50 0a 43 43 4f 50 54 20 | 3d 20 2d 4f 0a 49 4e 43 |P.CCOPT |= -O.INC|
|00005020| 4c 55 44 45 53 20 3d 20 | 2d 49 2e 2e 0a 0a 23 20 |LUDES = |-I....# |
|00005030| 54 68 65 20 69 6e 73 74 | 61 6c 6c 65 64 20 62 69 |The inst|alled bi|
|00005040| 6e 61 72 79 20 69 73 20 | 6f 77 6e 65 64 20 62 79 |nary is |owned by|
|00005050| 20 74 68 69 73 20 67 72 | 6f 75 70 2e 0a 47 52 4f | this gr|oup..GRO|
|00005060| 55 50 20 3d 20 62 70 66 | 0a 0a 23 20 46 75 6c 6c |UP = bpf|..# Full|
|00005070| 20 70 61 74 68 6e 61 6d | 65 20 6f 66 20 77 68 65 | pathnam|e of whe|
|00005080| 72 65 20 74 6f 20 69 6e | 73 74 61 6c 6c 20 74 68 |re to in|stall th|
|00005090| 65 20 62 69 6e 61 72 79 | 0a 42 49 4e 44 45 53 54 |e binary|.BINDEST|
|000050a0| 20 3d 20 2f 75 73 72 2f | 65 74 63 2f 74 63 70 64 | = /usr/|etc/tcpd|
|000050b0| 75 6d 70 0a 23 20 46 75 | 6c 6c 20 70 61 74 68 6e |ump.# Fu|ll pathn|
|000050c0| 61 6d 65 20 6f 66 20 77 | 68 65 72 65 20 74 6f 20 |ame of w|here to |
|000050d0| 69 6e 73 74 61 6c 6c 20 | 74 68 65 20 6d 61 6e 75 |install |the manu|
|000050e0| 61 6c 20 65 6e 74 72 79 | 0a 4d 41 4e 44 45 53 54 |al entry|.MANDEST|
|000050f0| 20 3d 20 2f 75 73 72 2f | 6d 61 6e 2f 6d 61 6e 6c | = /usr/|man/manl|
|00005100| 2f 74 63 70 64 75 6d 70 | 2e 6c 0a 0a 23 20 53 74 |/tcpdump|.l..# St|
|00005110| 61 6e 64 61 72 64 20 43 | 46 4c 41 47 53 0a 53 54 |andard C|FLAGS.ST|
|00005120| 41 4e 44 41 52 44 5f 43 | 46 4c 41 47 53 20 3d 20 |ANDARD_C|FLAGS = |
|00005130| 24 28 43 43 4f 50 54 29 | 20 24 28 44 45 46 49 4e |$(CCOPT)| $(DEFIN|
|00005140| 45 53 29 20 24 28 49 4e | 43 4c 55 44 45 53 29 0a |ES) $(IN|CLUDES).|
|00005150| 0a 23 20 43 46 4c 41 47 | 53 20 64 65 66 69 6e 69 |.# CFLAG|S defini|
|00005160| 74 69 6f 6e 73 20 70 65 | 72 20 6d 61 63 68 69 6e |tions pe|r machin|
|00005170| 65 20 76 73 2e 20 6f 73 | 0a 23 68 70 33 30 30 2d |e vs. os|.#hp300-|
|00005180| 62 73 64 23 43 46 4c 41 | 47 53 20 3d 20 24 28 53 |bsd#CFLA|GS = $(S|
|00005190| 54 41 4e 44 41 52 44 5f | 43 46 4c 41 47 53 29 0a |TANDARD_|CFLAGS).|
|000051a0| 23 6d 69 70 73 2d 75 6c | 74 72 69 78 23 43 46 4c |#mips-ul|trix#CFL|
|000051b0| 41 47 53 20 3d 20 24 28 | 53 54 41 4e 44 41 52 44 |AGS = $(|STANDARD|
|000051c0| 5f 43 46 4c 41 47 53 29 | 0a 23 72 74 2d 62 73 64 |_CFLAGS)|.#rt-bsd|
|000051d0| 23 43 46 4c 41 47 53 20 | 3d 20 24 28 53 54 41 4e |#CFLAGS |= $(STAN|
|000051e0| 44 41 52 44 5f 43 46 4c | 41 47 53 29 20 2d 55 5f |DARD_CFL|AGS) -U_|
|000051f0| 5f 53 54 44 43 5f 5f 0a | 23 73 75 6e 33 2d 73 75 |_STDC__.|#sun3-su|
|00005200| 6e 6f 73 33 23 43 46 4c | 41 47 53 20 3d 20 24 28 |nos3#CFL|AGS = $(|
|00005210| 53 54 41 4e 44 41 52 44 | 5f 43 46 4c 41 47 53 29 |STANDARD|_CFLAGS)|
|00005220| 20 0a 23 73 75 6e 33 2d | 73 75 6e 6f 73 34 23 43 | .#sun3-|sunos4#C|
|00005230| 46 4c 41 47 53 20 3d 20 | 24 28 53 54 41 4e 44 41 |FLAGS = |$(STANDA|
|00005240| 52 44 5f 43 46 4c 41 47 | 53 29 0a 23 73 75 6e 34 |RD_CFLAG|S).#sun4|
|00005250| 2d 73 75 6e 6f 73 34 23 | 43 46 4c 41 47 53 20 3d |-sunos4#|CFLAGS =|
|00005260| 20 24 28 53 54 41 4e 44 | 41 52 44 5f 43 46 4c 41 | $(STAND|ARD_CFLA|
|00005270| 47 53 29 0a 23 74 61 68 | 6f 65 2d 62 73 64 23 43 |GS).#tah|oe-bsd#C|
|00005280| 46 4c 41 47 53 20 3d 20 | 24 28 53 54 41 4e 44 41 |FLAGS = |$(STANDA|
|00005290| 52 44 5f 43 46 4c 41 47 | 53 29 0a 23 76 61 78 2d |RD_CFLAG|S).#vax-|
|000052a0| 62 73 64 23 43 46 4c 41 | 47 53 20 3d 20 24 28 53 |bsd#CFLA|GS = $(S|
|000052b0| 54 41 4e 44 41 52 44 5f | 43 46 4c 41 47 53 29 0a |TANDARD_|CFLAGS).|
|000052c0| 23 76 61 78 2d 75 6c 74 | 72 69 78 23 43 46 4c 41 |#vax-ult|rix#CFLA|
|000052d0| 47 53 20 3d 20 24 28 53 | 54 41 4e 44 41 52 44 5f |GS = $(S|TANDARD_|
|000052e0| 43 46 4c 41 47 53 29 0a | 0a 53 55 42 44 49 52 53 |CFLAGS).|.SUBDIRS|
|000052f0| 20 3d 20 68 70 33 30 30 | 2d 62 73 64 20 6d 69 70 | = hp300|-bsd mip|
|00005300| 73 2d 75 6c 74 72 69 78 | 20 73 75 6e 3f 2d 73 75 |s-ultrix| sun?-su|
|00005310| 6e 6f 73 3f 20 74 61 68 | 6f 65 2d 62 73 64 20 76 |nos? tah|oe-bsd v|
|00005320| 61 78 2d 62 73 64 20 76 | 61 78 2d 75 6c 74 72 69 |ax-bsd v|ax-ultri|
|00005330| 78 20 72 74 2d 62 73 64 | 0a 0a 23 20 43 68 61 6e |x rt-bsd|..# Chan|
|00005340| 67 65 20 74 68 65 73 65 | 20 74 6f 20 63 63 2f 6c |ge these| to cc/l|
|00005350| 65 78 2f 79 61 63 63 20 | 69 66 20 79 6f 75 20 64 |ex/yacc |if you d|
|00005360| 6f 6e 27 74 20 68 61 76 | 65 20 67 63 63 2c 20 66 |on't hav|e gcc, f|
|00005370| 6c 65 78 20 61 6e 64 2f | 6f 72 20 62 69 73 6f 6e |lex and/|or bison|
|00005380| 2e 0a 43 43 20 3d 20 67 | 63 63 20 2d 67 0a 4c 45 |..CC = g|cc -g.LE|
|00005390| 58 20 3d 20 66 6c 65 78 | 0a 59 41 43 43 20 3d 20 |X = flex|.YACC = |
|000053a0| 62 69 73 6f 6e 20 2d 79 | 0a 4d 41 4b 45 20 3d 20 |bison -y|.MAKE = |
|000053b0| 6d 61 6b 65 0a 0a 23 20 | 53 63 72 69 70 74 20 6f |make..# |Script o|
|000053c0| 72 20 70 72 6f 67 72 61 | 6d 73 20 74 68 61 74 20 |r progra|ms that |
|000053d0| 72 65 74 75 72 6e 73 20 | 74 68 65 20 6d 61 63 68 |returns |the mach|
|000053e0| 69 6e 65 20 61 6e 64 20 | 6f 73 20 74 79 70 65 73 |ine and |os types|
|000053f0| 2e 0a 4d 44 20 3d 20 2e | 2f 6d 64 74 79 70 65 0a |..MD = .|/mdtype.|
|00005400| 4f 53 20 3d 20 2e 2f 6f | 73 74 79 70 65 0a 0a 23 |OS = ./o|stype..#|
|00005410| 20 45 78 70 6c 69 63 69 | 74 6c 79 20 64 65 66 69 | Explici|tly defi|
|00005420| 6e 65 20 63 6f 6d 70 69 | 6c 69 61 74 69 6f 6e 20 |ne compi|liation |
|00005430| 72 75 6c 65 20 73 69 6e | 63 65 20 53 75 6e 4f 53 |rule sin|ce SunOS|
|00005440| 20 34 27 73 20 6d 61 6b | 65 20 64 6f 65 73 6e 27 | 4's mak|e doesn'|
|00005450| 74 20 6c 69 6b 65 20 67 | 63 63 2e 0a 23 20 41 6c |t like g|cc..# Al|
|00005460| 73 6f 2c 20 67 63 63 20 | 64 6f 65 73 20 6e 6f 74 |so, gcc |does not|
|00005470| 20 72 65 6d 6f 76 65 20 | 74 68 65 20 2e 6f 20 62 | remove |the .o b|
|00005480| 65 66 6f 72 65 20 66 6f | 72 6b 69 6e 67 20 27 61 |efore fo|rking 'a|
|00005490| 73 27 2c 20 77 68 69 63 | 68 20 63 61 6e 20 62 65 |s', whic|h can be|
|000054a0| 20 61 0a 23 20 70 72 6f | 62 6c 65 6d 20 69 66 20 | a.# pro|blem if |
|000054b0| 79 6f 75 20 64 6f 6e 27 | 74 20 6f 77 6e 20 74 68 |you don'|t own th|
|000054c0| 65 20 66 69 6c 65 20 62 | 75 74 20 63 61 6e 20 77 |e file b|ut can w|
|000054d0| 72 69 74 65 20 74 6f 20 | 74 68 65 20 64 69 72 65 |rite to |the dire|
|000054e0| 63 74 6f 72 79 2e 0a 2e | 63 2e 6f 3a 0a 09 72 6d |ctory...|c.o:..rm|
|000054f0| 20 2d 66 20 24 40 3b 20 | 24 28 43 43 29 20 24 28 | -f $@; |$(CC) $(|
|00005500| 43 46 4c 41 47 53 29 20 | 2d 63 20 24 2a 2e 63 0a |CFLAGS) |-c $*.c.|
|00005510| 0a 43 53 52 43 20 3d 09 | 74 63 70 64 75 6d 70 2e |.CSRC =.|tcpdump.|
|00005520| 63 20 61 64 64 72 74 6f | 6e 61 6d 65 2e 63 20 5c |c addrto|name.c \|
|00005530| 0a 09 70 72 69 6e 74 2d | 65 74 68 65 72 2e 63 20 |..print-|ether.c |
|00005540| 70 72 69 6e 74 2d 69 70 | 2e 63 20 70 72 69 6e 74 |print-ip|.c print|
|00005550| 2d 61 72 70 2e 63 20 70 | 72 69 6e 74 2d 74 63 70 |-arp.c p|rint-tcp|
|00005560| 2e 63 20 70 72 69 6e 74 | 2d 75 64 70 2e 63 20 5c |.c print|-udp.c \|
|00005570| 0a 09 70 72 69 6e 74 2d | 61 74 61 6c 6b 2e 63 20 |..print-|atalk.c |
|00005580| 70 72 69 6e 74 2d 64 6f | 6d 61 69 6e 2e 63 20 70 |print-do|main.c p|
|00005590| 72 69 6e 74 2d 74 66 74 | 70 2e 63 20 70 72 69 6e |rint-tft|p.c prin|
|000055a0| 74 2d 62 6f 6f 74 70 2e | 63 20 70 72 69 6e 74 2d |t-bootp.|c print-|
|000055b0| 6e 66 73 2e 63 20 5c 0a | 09 70 72 69 6e 74 2d 69 |nfs.c \.|.print-i|
|000055c0| 63 6d 70 2e 63 20 6e 61 | 6d 65 74 6f 61 64 64 72 |cmp.c na|metoaddr|
|000055d0| 2e 63 20 70 72 69 6e 74 | 2d 73 6c 2e 63 20 70 72 |.c print|-sl.c pr|
|000055e0| 69 6e 74 2d 70 70 70 2e | 63 20 70 72 69 6e 74 2d |int-ppp.|c print-|
|000055f0| 72 69 70 2e 63 20 5c 0a | 09 70 72 69 6e 74 2d 73 |rip.c \.|.print-s|
|00005600| 6e 6d 70 2e 63 20 70 72 | 69 6e 74 2d 6e 74 70 2e |nmp.c pr|int-ntp.|
|00005610| 63 20 5c 0a 09 73 61 76 | 65 66 69 6c 65 2e 63 20 |c \..sav|efile.c |
|00005620| 75 74 69 6c 2e 63 20 65 | 74 68 65 72 65 6e 74 2e |util.c e|therent.|
|00005630| 63 20 69 6e 65 74 2e 63 | 20 67 65 6e 63 6f 64 65 |c inet.c| gencode|
|00005640| 2e 63 20 6f 70 74 69 6d | 69 7a 65 2e 63 20 5c 0a |.c optim|ize.c \.|
|00005650| 09 62 70 66 5f 64 75 6d | 70 2e 63 20 62 70 66 5f |.bpf_dum|p.c bpf_|
|00005660| 66 69 6c 74 65 72 2e 63 | 20 62 70 66 5f 69 6d 61 |filter.c| bpf_ima|
|00005670| 67 65 2e 63 0a 0a 53 52 | 43 20 3d 09 24 28 43 53 |ge.c..SR|C =.$(CS|
|00005680| 52 43 29 20 74 63 70 67 | 72 61 6d 2e 79 20 74 63 |RC) tcpg|ram.y tc|
|00005690| 70 6c 65 78 2e 6c 0a 0a | 4d 53 52 43 20 3d 09 6d |plex.l..|MSRC =.m|
|000056a0| 64 2d 68 70 33 30 30 2e | 63 20 6d 64 2d 6d 69 70 |d-hp300.|c md-mip|
|000056b0| 73 2e 63 20 6d 64 2d 73 | 75 6e 33 2e 63 20 6d 64 |s.c md-s|un3.c md|
|000056c0| 2d 73 75 6e 34 2e 63 20 | 6d 64 2d 76 61 78 2e 63 |-sun4.c |md-vax.c|
|000056d0| 20 6d 64 2d 72 74 2e 63 | 0a 0a 50 53 52 43 20 3d | md-rt.c|..PSRC =|
|000056e0| 09 70 63 61 70 2d 6e 69 | 74 2e 63 20 70 63 61 70 |.pcap-ni|t.c pcap|
|000056f0| 2d 70 66 2e 63 20 70 63 | 61 70 2d 73 6e 69 74 2e |-pf.c pc|ap-snit.|
|00005700| 63 20 70 63 61 70 2d 62 | 70 66 2e 63 20 70 63 61 |c pcap-b|pf.c pca|
|00005710| 70 2d 65 6e 65 74 2e 63 | 0a 0a 4f 53 52 43 20 3d |p-enet.c|..OSRC =|
|00005720| 09 6f 73 2d 73 75 6e 6f | 73 33 2e 63 20 6f 73 2d |.os-suno|s3.c os-|
|00005730| 73 75 6e 6f 73 34 2e 63 | 20 6f 73 2d 62 73 64 2e |sunos4.c| os-bsd.|
|00005740| 63 20 6f 73 2d 75 6c 74 | 72 69 78 2e 63 0a 0a 4f |c os-ult|rix.c..O|
|00005750| 42 4a 20 3d 09 74 63 70 | 64 75 6d 70 2e 6f 20 74 |BJ =.tcp|dump.o t|
|00005760| 63 70 67 72 61 6d 2e 6f | 20 74 63 70 6c 65 78 2e |cpgram.o| tcplex.|
|00005770| 6f 20 61 64 64 72 74 6f | 6e 61 6d 65 2e 6f 20 5c |o addrto|name.o \|
|00005780| 0a 09 70 72 69 6e 74 2d | 65 74 68 65 72 2e 6f 20 |..print-|ether.o |
|00005790| 70 72 69 6e 74 2d 69 70 | 2e 6f 20 70 72 69 6e 74 |print-ip|.o print|
|000057a0| 2d 61 72 70 2e 6f 20 70 | 72 69 6e 74 2d 74 63 70 |-arp.o p|rint-tcp|
|000057b0| 2e 6f 20 70 72 69 6e 74 | 2d 75 64 70 2e 6f 20 5c |.o print|-udp.o \|
|000057c0| 0a 09 70 72 69 6e 74 2d | 61 74 61 6c 6b 2e 6f 20 |..print-|atalk.o |
|000057d0| 70 72 69 6e 74 2d 64 6f | 6d 61 69 6e 2e 6f 20 70 |print-do|main.o p|
|000057e0| 72 69 6e 74 2d 74 66 74 | 70 2e 6f 20 70 72 69 6e |rint-tft|p.o prin|
|000057f0| 74 2d 62 6f 6f 74 70 2e | 6f 20 70 72 69 6e 74 2d |t-bootp.|o print-|
|00005800| 6e 66 73 2e 6f 20 5c 0a | 09 70 72 69 6e 74 2d 69 |nfs.o \.|.print-i|
|00005810| 63 6d 70 2e 6f 20 6e 61 | 6d 65 74 6f 61 64 64 72 |cmp.o na|metoaddr|
|00005820| 2e 6f 20 70 72 69 6e 74 | 2d 73 6c 2e 6f 20 70 72 |.o print|-sl.o pr|
|00005830| 69 6e 74 2d 70 70 70 2e | 6f 20 70 72 69 6e 74 2d |int-ppp.|o print-|
|00005840| 72 69 70 2e 6f 20 5c 0a | 09 70 72 69 6e 74 2d 73 |rip.o \.|.print-s|
|00005850| 6e 6d 70 2e 6f 20 70 72 | 69 6e 74 2d 6e 74 70 2e |nmp.o pr|int-ntp.|
|00005860| 6f 20 5c 0a 09 70 63 61 | 70 2e 6f 20 6d 64 2e 6f |o \..pca|p.o md.o|
|00005870| 20 6f 73 2e 6f 20 5c 0a | 09 73 61 76 65 66 69 6c | os.o \.|.savefil|
|00005880| 65 2e 6f 20 75 74 69 6c | 2e 6f 20 65 74 68 65 72 |e.o util|.o ether|
|00005890| 65 6e 74 2e 6f 20 69 6e | 65 74 2e 6f 20 67 65 6e |ent.o in|et.o gen|
|000058a0| 63 6f 64 65 2e 6f 20 6f | 70 74 69 6d 69 7a 65 2e |code.o o|ptimize.|
|000058b0| 6f 20 5c 0a 09 62 70 66 | 5f 64 75 6d 70 2e 6f 20 |o \..bpf|_dump.o |
|000058c0| 62 70 66 5f 66 69 6c 74 | 65 72 2e 6f 20 62 70 66 |bpf_filt|er.o bpf|
|000058d0| 5f 69 6d 61 67 65 2e 6f | 0a 0a 48 44 52 20 3d 09 |_image.o|..HDR =.|
|000058e0| 69 6e 74 65 72 66 61 63 | 65 2e 68 20 61 70 70 6c |interfac|e.h appl|
|000058f0| 65 74 61 6c 6b 2e 68 20 | 61 64 64 72 74 6f 6e 61 |etalk.h |addrtona|
|00005900| 6d 65 2e 68 20 5c 0a 09 | 62 6f 6f 74 70 2e 68 20 |me.h \..|bootp.h |
|00005910| 6d 69 62 2e 68 20 73 61 | 76 65 66 69 6c 65 2e 68 |mib.h sa|vefile.h|
|00005920| 20 65 74 68 65 72 70 72 | 6f 74 6f 2e 68 20 6e 61 | etherpr|oto.h na|
|00005930| 6d 65 74 6f 61 64 64 72 | 2e 68 20 5c 0a 09 65 74 |metoaddr|.h \..et|
|00005940| 68 65 72 65 6e 74 2e 68 | 20 6e 74 70 2e 68 20 67 |herent.h| ntp.h g|
|00005950| 65 6e 63 6f 64 65 2e 68 | 20 65 78 74 72 61 63 74 |encode.h| extract|
|00005960| 2e 68 0a 0a 4d 48 44 52 | 20 3d 09 6d 64 2d 68 70 |.h..MHDR| =.md-hp|
|00005970| 33 30 30 2e 68 20 6d 64 | 2d 73 75 6e 33 2e 68 20 |300.h md|-sun3.h |
|00005980| 6d 64 2d 73 75 6e 34 2e | 68 20 6d 64 2d 6d 69 70 |md-sun4.|h md-mip|
|00005990| 73 2e 68 20 6d 64 2d 76 | 61 78 2e 68 20 6d 64 2d |s.h md-v|ax.h md-|
|000059a0| 72 74 2e 68 0a 0a 4f 48 | 44 52 20 3d 09 6f 73 2d |rt.h..OH|DR =.os-|
|000059b0| 62 73 64 2e 68 20 6f 73 | 2d 73 75 6e 6f 73 33 2e |bsd.h os|-sunos3.|
|000059c0| 68 20 6f 73 2d 73 75 6e | 6f 73 34 2e 68 20 6f 73 |h os-sun|os4.h os|
|000059d0| 2d 75 6c 74 72 69 78 2e | 68 0a 0a 54 41 47 48 44 |-ultrix.|h..TAGHD|
|000059e0| 52 3d 09 2f 75 73 72 2f | 69 6e 63 6c 75 64 65 2f |R=./usr/|include/|
|000059f0| 6e 65 74 69 6e 65 74 2f | 69 6e 2e 68 20 5c 0a 09 |netinet/|in.h \..|
|00005a00| 2f 75 73 72 2f 69 6e 63 | 6c 75 64 65 2f 6e 65 74 |/usr/inc|lude/net|
|00005a10| 69 6e 65 74 2f 75 64 70 | 2e 68 20 5c 0a 09 2f 75 |inet/udp|.h \../u|
|00005a20| 73 72 2f 69 6e 63 6c 75 | 64 65 2f 6e 65 74 69 6e |sr/inclu|de/netin|
|00005a30| 65 74 2f 74 63 70 2e 68 | 20 5c 0a 09 2f 75 73 72 |et/tcp.h| \../usr|
|00005a40| 2f 69 6e 63 6c 75 64 65 | 2f 61 72 70 61 2f 74 66 |/include|/arpa/tf|
|00005a50| 74 70 2e 68 20 5c 0a 09 | 2f 75 73 72 2f 69 6e 63 |tp.h \..|/usr/inc|
|00005a60| 6c 75 64 65 2f 6e 65 74 | 69 6e 65 74 2f 69 66 5f |lude/net|inet/if_|
|00005a70| 65 74 68 65 72 2e 68 0a | 0a 23 20 54 68 65 73 65 |ether.h.|.# These|
|00005a80| 20 66 69 6c 65 73 20 61 | 72 65 20 61 75 74 6f 6d | files a|re autom|
|00005a90| 61 74 69 63 61 6c 6c 79 | 20 67 65 6e 65 72 61 74 |atically| generat|
|00005aa0| 65 64 2e 0a 23 0a 47 45 | 4e 20 3d 09 74 6f 6b 64 |ed..#.GE|N =.tokd|
|00005ab0| 65 66 73 2e 68 20 74 63 | 70 67 72 61 6d 2e 63 20 |efs.h tc|pgram.c |
|00005ac0| 74 63 70 6c 65 78 2e 63 | 0a 0a 41 57 4b 53 20 3d |tcplex.c|..AWKS =|
|00005ad0| 09 61 74 69 6d 65 2e 61 | 77 6b 20 70 61 63 6b 65 |.atime.a|wk packe|
|00005ae0| 74 64 61 74 2e 61 77 6b | 20 73 65 6e 64 2d 61 63 |tdat.awk| send-ac|
|00005af0| 6b 2e 61 77 6b 20 73 74 | 69 6d 65 2e 61 77 6b 0a |k.awk st|ime.awk.|
|00005b00| 0a 23 20 22 61 6c 6c 22 | 20 6d 75 73 74 20 63 6f |.# "all"| must co|
|00005b10| 6d 65 20 62 65 66 6f 72 | 65 20 74 63 70 64 75 6d |me befor|e tcpdum|
|00005b20| 70 20 73 6f 20 77 65 20 | 63 61 6e 20 64 65 6c 65 |p so we |can dele|
|00005b30| 74 65 20 69 74 20 77 69 | 74 68 20 73 65 64 0a 61 |te it wi|th sed.a|
|00005b40| 6c 6c 3a 20 73 75 62 6d | 61 6b 65 0a 0a 74 63 70 |ll: subm|ake..tcp|
|00005b50| 64 75 6d 70 3a 20 24 28 | 4f 42 4a 29 0a 09 24 28 |dump: $(|OBJ)..$(|
|00005b60| 43 43 29 20 24 28 43 46 | 4c 41 47 53 29 20 2d 6f |CC) $(CF|LAGS) -o|
|00005b70| 20 24 40 20 24 28 4f 42 | 4a 29 20 24 28 4c 49 42 | $@ $(OB|J) $(LIB|
|00005b80| 29 0a 0a 73 75 62 6d 61 | 6b 65 3a 20 66 6f 72 63 |)..subma|ke: forc|
|00005b90| 65 0a 09 2d 40 64 69 72 | 3d 60 24 28 4d 44 29 60 |e..-@dir|=`$(MD)`|
|00005ba0| 2d 60 24 28 4f 53 29 60 | 3b 20 5c 0a 09 69 66 20 |-`$(OS)`|; \..if |
|00005bb0| 5b 20 21 20 2d 64 20 24 | 24 64 69 72 20 5d 3b 20 |[ ! -d $|$dir ]; |
|00005bc0| 74 68 65 6e 20 24 7b 4d | 41 4b 45 7d 20 24 7b 4d |then ${M|AKE} ${M|
|00005bd0| 46 4c 41 47 53 7d 20 63 | 6f 6e 66 69 67 3b 20 66 |FLAGS} c|onfig; f|
|00005be0| 69 3b 20 5c 0a 09 73 65 | 74 20 2d 78 3b 20 5c 0a |i; \..se|t -x; \.|
|00005bf0| 09 63 64 20 24 24 64 69 | 72 3b 20 24 7b 4d 41 4b |.cd $$di|r; ${MAK|
|00005c00| 45 7d 20 24 7b 4d 46 4c | 41 47 53 7d 0a 0a 23 20 |E} ${MFL|AGS}..# |
|00005c10| 4e 2e 42 2e 2d 20 73 79 | 6d 62 6f 6c 69 63 20 6c |N.B.- sy|mbolic l|
|00005c20| 69 6e 6b 73 20 61 72 65 | 20 75 73 65 64 20 69 6e |inks are| used in|
|00005c30| 20 74 68 65 20 73 75 62 | 64 69 72 65 63 74 6f 72 | the sub|director|
|00005c40| 79 20 72 61 74 68 65 72 | 20 74 68 61 6e 20 56 50 |y rather| than VP|
|00005c50| 41 54 48 0a 23 20 62 65 | 63 61 75 73 65 20 61 74 |ATH.# be|cause at|
|00005c60| 20 6c 65 61 73 74 20 6f | 6e 65 20 53 75 6e 20 63 | least o|ne Sun c|
|00005c70| 63 20 63 6f 6d 70 69 6c | 65 72 20 70 75 74 73 20 |c compil|er puts |
|00005c80| 74 68 65 20 2e 6f 20 69 | 6e 20 74 68 65 20 77 72 |the .o i|n the wr|
|00005c90| 6f 6e 67 20 70 6c 61 63 | 65 0a 23 20 77 68 65 6e |ong plac|e.# when|
|00005ca0| 20 75 73 69 6e 67 20 56 | 50 41 54 48 20 61 6e 64 | using V|PATH and|
|00005cb0| 20 69 74 27 73 20 61 6c | 6d 6f 73 74 20 69 6d 70 | it's al|most imp|
|00005cc0| 6f 73 73 69 62 6c 65 20 | 74 6f 20 67 65 74 20 22 |ossible |to get "|
|00005cd0| 6d 61 6b 65 20 64 65 70 | 65 6e 64 22 20 74 6f 0a |make dep|end" to.|
|00005ce0| 23 20 64 6f 20 74 68 65 | 20 72 69 67 68 74 20 74 |# do the| right t|
|00005cf0| 68 69 6e 67 2e 0a 0a 63 | 6f 6e 66 69 67 3a 0a 09 |hing...c|onfig:..|
|00005d00| 2d 40 6d 64 3d 60 24 28 | 4d 44 29 60 3b 20 6f 73 |-@md=`$(|MD)`; os|
|00005d10| 3d 60 24 28 4f 53 29 60 | 3b 20 64 69 72 3d 24 24 |=`$(OS)`|; dir=$$|
|00005d20| 6d 64 2d 24 24 6f 73 3b | 20 6c 69 73 74 3d 3b 20 |md-$$os;| list=; |
|00005d30| 5c 0a 09 69 66 20 5b 20 | 2d 66 20 2f 64 65 76 2f |\..if [ |-f /dev/|
|00005d40| 62 70 66 30 20 5d 20 3b | 20 74 68 65 6e 20 70 63 |bpf0 ] ;| then pc|
|00005d50| 61 70 3d 22 62 70 66 22 | 3b 20 5c 0a 09 65 6c 69 |ap="bpf"|; \..eli|
|00005d60| 66 20 5b 20 24 24 6f 73 | 20 3d 20 22 73 75 6e 6f |f [ $$os| = "suno|
|00005d70| 73 33 22 20 5d 20 3b 20 | 74 68 65 6e 20 70 63 61 |s3" ] ; |then pca|
|00005d80| 70 3d 22 6e 69 74 22 3b | 20 5c 0a 09 65 6c 69 66 |p="nit";| \..elif|
|00005d90| 20 5b 20 24 24 6f 73 20 | 3d 20 22 73 75 6e 6f 73 | [ $$os |= "sunos|
|00005da0| 34 22 20 5d 20 3b 20 74 | 68 65 6e 20 70 63 61 70 |4" ] ; t|hen pcap|
|00005db0| 3d 22 73 6e 69 74 22 3b | 20 5c 0a 09 65 6c 69 66 |="snit";| \..elif|
|00005dc0| 20 5b 20 24 24 6f 73 20 | 3d 20 22 75 6c 74 72 69 | [ $$os |= "ultri|
|00005dd0| 78 22 20 5d 20 3b 20 74 | 68 65 6e 20 70 63 61 70 |x" ] ; t|hen pcap|
|00005de0| 3d 22 70 66 22 3b 20 5c | 0a 09 65 6c 69 66 20 5b |="pf"; \|..elif [|
|00005df0| 20 2d 66 20 2f 75 73 72 | 2f 69 6e 63 6c 75 64 65 | -f /usr|/include|
|00005e00| 2f 6e 65 74 2f 65 6e 65 | 74 2e 68 20 5d 20 3b 20 |/net/ene|t.h ] ; |
|00005e10| 74 68 65 6e 20 70 63 61 | 70 3d 22 65 6e 65 74 22 |then pca|p="enet"|
|00005e20| 3b 20 5c 0a 09 65 6c 73 | 65 20 70 63 61 70 3d 22 |; \..els|e pcap="|
|00005e30| 62 70 66 22 3b 20 66 69 | 3b 20 5c 0a 09 66 6f 72 |bpf"; fi|; \..for|
|00005e40| 20 69 20 69 6e 20 24 28 | 53 52 43 29 20 24 28 48 | i in $(|SRC) $(H|
|00005e50| 44 52 29 3b 20 64 6f 20 | 6c 69 73 74 3d 22 2e 2e |DR); do |list="..|
|00005e60| 2f 24 24 69 20 24 24 6c | 69 73 74 22 3b 20 64 6f |/$$i $$l|ist"; do|
|00005e70| 6e 65 3b 20 5c 0a 09 73 | 65 74 20 2d 78 3b 20 6d |ne; \..s|et -x; m|
|00005e80| 6b 64 69 72 20 24 24 64 | 69 72 3b 20 63 68 6d 6f |kdir $$d|ir; chmo|
|00005e90| 64 20 75 67 2b 77 20 24 | 24 64 69 72 3b 20 6c 6e |d ug+w $|$dir; ln|
|00005ea0| 20 2d 73 20 24 24 6c 69 | 73 74 20 24 24 64 69 72 | -s $$li|st $$dir|
|00005eb0| 3b 20 5c 0a 09 6c 6e 20 | 2d 73 20 2e 2e 2f 6d 64 |; \..ln |-s ../md|
|00005ec0| 2d 24 24 6d 64 2e 63 20 | 24 24 64 69 72 2f 6d 64 |-$$md.c |$$dir/md|
|00005ed0| 2e 63 3b 20 6c 6e 20 2d | 73 20 2e 2e 2f 6d 64 2d |.c; ln -|s ../md-|
|00005ee0| 24 24 6d 64 2e 68 20 24 | 24 64 69 72 2f 6d 64 2e |$$md.h $|$dir/md.|
|00005ef0| 68 3b 20 5c 0a 09 6c 6e | 20 2d 73 20 2e 2e 2f 6f |h; \..ln| -s ../o|
|00005f00| 73 2d 24 24 6f 73 2e 63 | 20 24 24 64 69 72 2f 6f |s-$$os.c| $$dir/o|
|00005f10| 73 2e 63 3b 20 6c 6e 20 | 2d 73 20 2e 2e 2f 6f 73 |s.c; ln |-s ../os|
|00005f20| 2d 24 24 6f 73 2e 68 20 | 24 24 64 69 72 2f 6f 73 |-$$os.h |$$dir/os|
|00005f30| 2e 68 3b 20 5c 0a 09 6c | 6e 20 2d 73 20 2e 2e 2f |.h; \..l|n -s ../|
|00005f40| 70 63 61 70 2d 24 24 70 | 63 61 70 2e 63 20 24 24 |pcap-$$p|cap.c $$|
|00005f50| 64 69 72 2f 70 63 61 70 | 2e 63 3b 20 5c 0a 09 73 |dir/pcap|.c; \..s|
|00005f60| 65 64 20 2d 65 20 22 2f | 5e 61 6c 6c 3a 2f 64 22 |ed -e "/|^all:/d"|
|00005f70| 20 2d 65 20 22 73 2f 5e | 23 24 24 64 69 72 23 2f | -e "s/^|#$$dir#/|
|00005f80| 2f 22 20 4d 61 6b 65 66 | 69 6c 65 20 3e 24 24 64 |/" Makef|ile >$$d|
|00005f90| 69 72 2f 4d 61 6b 65 66 | 69 6c 65 3b 20 5c 0a 09 |ir/Makef|ile; \..|
|00005fa0| 63 68 6d 6f 64 20 75 67 | 2b 77 20 24 24 64 69 72 |chmod ug|+w $$dir|
|00005fb0| 2f 4d 61 6b 65 66 69 6c | 65 3b 20 5c 0a 09 63 64 |/Makefil|e; \..cd|
|00005fc0| 20 24 24 64 69 72 20 3b | 20 24 7b 4d 41 4b 45 7d | $$dir ;| ${MAKE}|
|00005fd0| 20 24 7b 4d 46 4c 41 47 | 53 7d 20 64 65 70 65 6e | ${MFLAG|S} depen|
|00005fe0| 64 0a 0a 74 63 70 6c 65 | 78 2e 63 3a 20 74 63 70 |d..tcple|x.c: tcp|
|00005ff0| 6c 65 78 2e 6c 0a 09 72 | 6d 20 2d 66 20 24 40 0a |lex.l..r|m -f $@.|
|00006000| 09 24 28 4c 45 58 29 20 | 24 3c 0a 09 6d 76 20 2d |.$(LEX) |$<..mv -|
|00006010| 66 20 6c 65 78 2e 79 79 | 2e 63 20 74 63 70 6c 65 |f lex.yy|.c tcple|
|00006020| 78 2e 63 0a 0a 74 6f 6b | 64 65 66 73 2e 68 3a 20 |x.c..tok|defs.h: |
|00006030| 74 63 70 67 72 61 6d 2e | 63 0a 74 63 70 67 72 61 |tcpgram.|c.tcpgra|
|00006040| 6d 2e 63 3a 20 74 63 70 | 67 72 61 6d 2e 79 0a 09 |m.c: tcp|gram.y..|
|00006050| 72 6d 20 2d 66 20 74 63 | 70 67 72 61 6d 2e 63 20 |rm -f tc|pgram.c |
|00006060| 74 6f 6b 64 65 66 73 2e | 68 0a 09 24 28 59 41 43 |tokdefs.|h..$(YAC|
|00006070| 43 29 20 2d 64 20 24 3c | 0a 09 6d 76 20 79 2e 74 |C) -d $<|..mv y.t|
|00006080| 61 62 2e 63 20 74 63 70 | 67 72 61 6d 2e 63 0a 09 |ab.c tcp|gram.c..|
|00006090| 6d 76 20 79 2e 74 61 62 | 2e 68 20 74 6f 6b 64 65 |mv y.tab|.h tokde|
|000060a0| 66 73 2e 68 0a 0a 69 6e | 73 74 61 6c 6c 3a 20 66 |fs.h..in|stall: f|
|000060b0| 6f 72 63 65 0a 09 40 64 | 69 72 3d 60 24 28 4d 44 |orce..@d|ir=`$(MD|
|000060c0| 29 60 2d 60 24 28 4f 53 | 29 60 3b 20 73 65 74 20 |)`-`$(OS|)`; set |
|000060d0| 2d 78 3b 20 5c 0a 09 69 | 6e 73 74 61 6c 6c 20 2d |-x; \..i|nstall -|
|000060e0| 6d 20 37 35 30 20 2d 67 | 20 24 28 47 52 4f 55 50 |m 750 -g| $(GROUP|
|000060f0| 29 20 24 24 64 69 72 2f | 74 63 70 64 75 6d 70 20 |) $$dir/|tcpdump |
|00006100| 24 28 44 45 53 54 44 49 | 52 29 24 28 42 49 4e 44 |$(DESTDI|R)$(BIND|
|00006110| 45 53 54 29 3b 20 5c 0a | 09 69 6e 73 74 61 6c 6c |EST); \.|.install|
|00006120| 20 2d 63 20 74 63 70 64 | 75 6d 70 2e 31 20 24 28 | -c tcpd|ump.1 $(|
|00006130| 44 45 53 54 44 49 52 29 | 24 28 4d 41 4e 44 45 53 |DESTDIR)|$(MANDES|
|00006140| 54 29 0a 0a 6c 69 6e 74 | 3a 09 66 6f 72 63 65 0a |T)..lint|:.force.|
|00006150| 09 6c 69 6e 74 20 2d 68 | 62 78 6e 20 24 28 43 53 |.lint -h|bxn $(CS|
|00006160| 52 43 29 20 7c 20 5c 0a | 09 20 20 20 20 67 72 65 |RC) | \.|.    gre|
|00006170| 70 20 2d 76 20 27 73 74 | 72 75 63 74 2f 75 6e 69 |p -v 'st|ruct/uni|
|00006180| 6f 6e 20 2e 2a 20 6e 65 | 76 65 72 20 64 65 66 69 |on .* ne|ver defi|
|00006190| 6e 65 64 27 20 7c 20 5c | 0a 09 20 20 20 20 67 72 |ned' | \|..    gr|
|000061a0| 65 70 20 2d 76 20 27 70 | 6f 73 73 69 62 6c 65 20 |ep -v 'p|ossible |
|000061b0| 70 6f 69 6e 74 65 72 20 | 61 6c 69 67 6e 6d 65 6e |pointer |alignmen|
|000061c0| 74 20 70 72 6f 62 6c 65 | 6d 27 0a 0a 23 20 54 68 |t proble|m'..# Th|
|000061d0| 69 73 20 6d 69 67 68 74 | 20 62 65 20 66 75 74 69 |is might| be futi|
|000061e0| 6c 65 0a 6c 69 6e 74 2e | 75 6c 74 72 69 78 3a 20 |le.lint.|ultrix: |
|000061f0| 66 6f 72 63 65 0a 09 6c | 69 6e 74 20 24 28 43 46 |force..l|int $(CF|
|00006200| 4c 41 47 53 5f 55 4c 54 | 52 49 58 29 20 24 28 43 |LAGS_ULT|RIX) $(C|
|00006210| 53 52 43 29 20 74 63 70 | 6c 65 78 2e 63 20 74 63 |SRC) tcp|lex.c tc|
|00006220| 70 67 72 61 6d 2e 63 0a | 0a 63 6c 65 61 6e 3a 0a |pgram.c.|.clean:.|
|00006230| 09 72 6d 20 2d 66 20 2a | 2e 6f 20 74 63 70 64 75 |.rm -f *|.o tcpdu|
|00006240| 6d 70 20 74 63 70 64 75 | 6d 70 2e 73 68 61 72 20 |mp tcpdu|mp.shar |
|00006250| 24 28 47 45 4e 29 20 3b | 20 5c 0a 09 72 6d 20 2d |$(GEN) ;| \..rm -|
|00006260| 72 66 20 24 28 53 55 42 | 44 49 52 53 29 0a 0a 54 |rf $(SUB|DIRS)..T|
|00006270| 41 47 46 49 4c 45 53 20 | 3d 20 24 28 53 52 43 29 |AGFILES |= $(SRC)|
|00006280| 20 6d 64 2e 63 20 6f 73 | 2e 63 20 70 63 61 70 2e | md.c os|.c pcap.|
|00006290| 63 20 24 28 48 44 52 29 | 20 6d 64 2e 68 20 6f 73 |c $(HDR)| md.h os|
|000062a0| 2e 68 20 24 28 54 41 47 | 48 44 52 29 20 0a 0a 74 |.h $(TAG|HDR) ..t|
|000062b0| 61 67 73 3a 09 24 28 54 | 41 47 46 49 4c 45 53 29 |ags:.$(T|AGFILES)|
|000062c0| 0a 09 63 74 61 67 73 20 | 2d 77 74 20 24 28 54 41 |..ctags |-wt $(TA|
|000062d0| 47 46 49 4c 45 53 29 0a | 0a 54 41 52 4e 41 4d 45 |GFILES).|.TARNAME|
|000062e0| 20 3d 20 2f 74 6d 70 2f | 74 63 70 64 75 6d 70 2d | = /tmp/|tcpdump-|
|000062f0| 32 2e 30 2e 74 61 72 0a | 0a 74 61 72 3a 09 66 6f |2.0.tar.|.tar:.fo|
|00006300| 72 63 65 0a 09 74 61 72 | 20 63 66 20 24 28 54 41 |rce..tar| cf $(TA|
|00006310| 52 4e 41 4d 45 29 20 52 | 45 41 44 4d 45 20 49 4e |RNAME) R|EADME IN|
|00006320| 53 54 41 4c 4c 20 4d 61 | 6b 65 66 69 6c 65 20 74 |STALL Ma|kefile t|
|00006330| 63 70 64 75 6d 70 2e 31 | 20 5c 0a 09 09 6d 64 74 |cpdump.1| \...mdt|
|00006340| 79 70 65 20 6f 73 74 79 | 70 65 20 6f 73 74 79 70 |ype osty|pe ostyp|
|00006350| 65 2e 61 77 6b 20 6d 61 | 6b 65 6d 69 62 20 5c 0a |e.awk ma|kemib \.|
|00006360| 09 09 24 28 53 52 43 29 | 20 24 28 4d 53 52 43 29 |..$(SRC)| $(MSRC)|
|00006370| 20 24 28 4f 53 52 43 29 | 20 24 28 50 53 52 43 29 | $(OSRC)| $(PSRC)|
|00006380| 20 5c 0a 09 09 24 28 48 | 44 52 29 20 24 28 4d 48 | \...$(H|DR) $(MH|
|00006390| 44 52 29 20 24 28 4f 48 | 44 52 29 20 5c 0a 09 09 |DR) $(OH|DR) \...|
|000063a0| 24 28 41 57 4b 53 29 20 | 5c 0a 09 09 53 55 4e 4f |$(AWKS) |\...SUNO|
|000063b0| 53 34 20 6e 65 74 0a 09 | 74 61 72 20 75 66 68 46 |S4 net..|tar ufhF|
|000063c0| 46 20 24 28 54 41 52 4e | 41 4d 45 29 20 62 70 66 |F $(TARN|AME) bpf|
|000063d0| 0a 09 63 6f 6d 70 72 65 | 73 73 20 24 28 54 41 52 |..compre|ss $(TAR|
|000063e0| 4e 41 4d 45 29 0a 0a 66 | 6f 72 63 65 3a 09 2f 74 |NAME)..f|orce:./t|
|000063f0| 6d 70 0a 0a 64 65 70 65 | 6e 64 3a 09 66 6f 72 63 |mp..depe|nd:.forc|
+--------+-------------------------+-------------------------+--------+--------+