From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 06 Jan 2023 17:02:49 +0100 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1pDpBC-003d2n-Ew for lore@lore.pengutronix.de; Fri, 06 Jan 2023 17:02:49 +0100 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1pDpBA-0008Dq-TK; Fri, 06 Jan 2023 17:02:48 +0100 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pDp9o-0003xs-EK; Fri, 06 Jan 2023 17:01:24 +0100 Received: from [2a0a:edc0:0:1101:1d::54] (helo=dude05.red.stw.pengutronix.de) by drehscheibe.grey.stw.pengutronix.de with esmtp (Exim 4.94.2) (envelope-from ) id 1pDp9n-004Eqg-P5; Fri, 06 Jan 2023 17:01:23 +0100 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.94.2) (envelope-from ) id 1pDp9n-00Cu22-1A; Fri, 06 Jan 2023 17:01:23 +0100 From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 6 Jan 2023 17:01:23 +0100 Message-Id: <20230106160123.3075279-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20230102100926.1906782-1-christian.melki@t2data.com> References: <20230102100926.1906782-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] tcpdump: Version bump. 4.99.1 -> 4.99.2 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as f6d24029107b2825a9d6f652f4ce2a33a21b26bf. Michael [sent from post-receive hook] On Fri, 06 Jan 2023 17:01:22 +0100, Christian Melki wrote: > Mostly bugfixes. > https://github.com/the-tcpdump-group/tcpdump/blob/e6d119663fd850eca250e7b999015b0d3b856f28/CHANGES#L54 > Reworked .in file for various errors. > > * Correct various (double-) whitespace errors. > * libcap-ng is not "as well" in relation to libpcap as in wording. > It's a completely different library related to POSIX > capabilities. It's needed for tcpdump to run in non-root mode. > Don't make them sound like they're similar. > * Some other minor text fixes. > > Signed-off-by: Christian Melki > Message-Id: <20230102100926.1906782-1-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/tcpdump.in b/rules/tcpdump.in > index 74d607252f09..bc5ffdecca58 100644 > --- a/rules/tcpdump.in > +++ b/rules/tcpdump.in > @@ -6,35 +6,38 @@ menuconfig TCPDUMP > select LIBCAP_NG if TCPDUMP_ENABLE_LIBCAP_NG > select OPENSSL if TCPDUMP_ENABLE_CRYPTO > help > - Tcpdump prints out the headers of packets on a network interface > - that match the boolean expression. It can also be run with > + Tcpdump prints out the headers of packets on a network interface > + that match the boolean expression. It can also be run with > the -w flag, which causes it to save the packet data to a file > for later analysis, and/or with the -r flag, which causes it to > read from a saved packet file rather than to read packets from > - a network interface. In all cases, only packets that match > + a network interface. In all cases, only packets that match > expression will be processed by tcpdump. > > if TCPDUMP > > config TCPDUMP_ENABLE_LIBCAP_NG > bool > - prompt "use libcap-ng as well" > + prompt "enable libcap-ng support" > help > - Use libpcap and libcap-ng > + Use libcap-ng (POSIX capabilities) in tcpdump. > + It allows tcpdump to shift uid/gid and chroot to > + operate in a non-privileged mode instead of using root. > > config TCPDUMP_ENABLE_CRYPTO > bool > prompt "enable crypto support" > help > - Select this, if you don't need support for > - encryption (e.g. IPsec ESP packets) > + Select this if you need support for decoding various > + protocols in relation to encryption (f.ex. IPsec packets) > > config TCPDUMP_SMB > bool > - prompt "enable possibly-buggy SMB printer" > + prompt "enable SMB-printer decoding support" > default y > help > - Notes from configure, when this entry is checked: > - The SMB printer may have exploitable buffer overflows!!! > + Select this if need support for decoding packets > + in relation to SMB/CIFS (printers). > + Still considered buggy. > > endif > diff --git a/rules/tcpdump.make b/rules/tcpdump.make > index b618c8749480..4a040e01704f 100644 > --- a/rules/tcpdump.make > +++ b/rules/tcpdump.make > @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_TCPDUMP) += tcpdump > # > # Paths and names > # > -TCPDUMP_VERSION := 4.99.1 > -TCPDUMP_MD5 := 929a255c71a9933608bd7c31927760f7 > +TCPDUMP_VERSION := 4.99.2 > +TCPDUMP_MD5 := 69f8cc8e44606ba49482fa98c2f7f937 > TCPDUMP := tcpdump-$(TCPDUMP_VERSION) > TCPDUMP_SUFFIX := tar.gz > TCPDUMP_URL := http://www.tcpdump.org/release/$(TCPDUMP).$(TCPDUMP_SUFFIX)