mirrors/tcpdump
0
0
Fork 0
mirror of https://github.com/the-tcpdump-group/tcpdump.git synced 2024-11-24 02:23:27 +08:00
Code Issues Packages Projects Releases Wiki Activity
a2629c969d
tcpdump/tests/TESTLIST

904 lines
40 KiB
Plaintext
Raw Normal View History

Update CONTRIBUTING and TESTLIST according to a recent change It's a follow-up to 018b2b8c96. Thanks to Gisle Vanem to spot one of the inconsistencies. Moreover: Remove a useless '-#' option in TESTLIST.
2018-08-10 02:34:56 +08:00
# The options -# and -n are useless in TESTLIST. They are already set
Remove now unused 'tests/TESTonce' Update a comment.
2020-09-07 03:35:49 +08:00
# in TESTrun.
The Option -n is useless in TESTLIST This option is already set in TESTonce.
2015-09-17 05:37:54 +08:00
fix flags printing tests The test cases included the timestamp (due to missing -t) and failed unless run in the same timezone as produced. The failures printed by print-flags.sh did not make it into the final report because the script always returned 0. Strip the timestamps and replace print-flags.sh with some contents in TESTLIST.
2013-10-26 15:23:10 +08:00
# Various flags applied to a TCP session.
#
# We cannot rely on, for example, "print-x.out" and
# "print-X.out" being different files - we might be running
# this on a case-insensitive file system, e.g. a Windows
# file system or a case-insensitive HFS+ file system on
Use pcapng as the name of the file format. At one point, I remember a discussion resulting in the official name of the next-generation replacement for pcap format being changed to "pcapng", with no hyphen. Make tcpdump reflect that. While we're at it, uppdate to use "macOS" as the name of Apple's UNIX-for-Macs, as appropriate (don't use it for versions that were still called Mac OS X or OS X).
2018-01-09 10:49:50 +08:00
# macOS.
fix flags printing tests The test cases included the timestamp (due to missing -t) and failed unless run in the same timezone as produced. The failures printed by print-flags.sh did not make it into the final report because the script always returned 0. Strip the timestamps and replace print-flags.sh with some contents in TESTLIST.
2013-10-26 15:23:10 +08:00
#
# Therefore, for "X" and "XX", we have "print-capX.out"
# and "print-capXX.out".
#
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
print-x print-flags.pcap print-x.out -x
print-xx print-flags.pcap print-xx.out -xx
print-X print-flags.pcap print-capX.out -X
print-XX print-flags.pcap print-capXX.out -XX
print-A print-flags.pcap print-A.out -A
print-AA print-flags.pcap print-AA.out -AA
Add --print-sampling option to print every Nth packet New option `--print-sampling=NTH` will parse and print every NTH packet, with all other packets producing no output. This option enables `--print` and `-S` flags. Print sampling is useful for real-time inspection of an interface with a high packet rate, or initial inspection of large capture files.
2022-01-17 08:05:15 +08:00
print-sampling print-flags.pcap print-sampling.out --print-sampling=3
fix flags printing tests The test cases included the timestamp (due to missing -t) and failed unless run in the same timezone as produced. The failures printed by print-flags.sh did not make it into the final report because the script always returned 0. Strip the timestamps and replace print-flags.sh with some contents in TESTLIST.
2013-10-26 15:23:10 +08:00
Add tests for more code coverage in timestamp printing functions Use a TCP 3-Way Handshake test, nano precision. Display micro outputs and nano outputs (with -q).
2021-01-06 00:03:32 +08:00
# TCP 3-Way Handshake test, nano precision
# Use "no -t", -t, -tt, -ttt, -tttt, -ttttt options for more code coverage
# in timestamp printing functions
# micro outputs with -q
tcp-handshake-micro tcp-handshake-nano.pcap tcp-handshake-micro.out -q
tcp-handshake-micro-t tcp-handshake-nano.pcap tcp-handshake-micro-t.out -t -q
tcp-handshake-micro-tt tcp-handshake-nano.pcap tcp-handshake-micro-tt.out -tt -q
tcp-handshake-micro-ttt tcp-handshake-nano.pcap tcp-handshake-micro-ttt.out -ttt -q
tcp-handshake-micro-tttt tcp-handshake-nano.pcap tcp-handshake-micro-tttt.out -tttt -q
tcp-handshake-micro-ttttt tcp-handshake-nano.pcap tcp-handshake-micro-ttttt.out -ttttt -q
# nano outputs with -q
tcp-handshake-nano tcp-handshake-nano.pcap tcp-handshake-nano.out -q --nano
tcp-handshake-nano-t tcp-handshake-nano.pcap tcp-handshake-nano-t.out -t -q --nano
tcp-handshake-nano-tt tcp-handshake-nano.pcap tcp-handshake-nano-tt.out -tt -q --nano
tcp-handshake-nano-ttt tcp-handshake-nano.pcap tcp-handshake-nano-ttt.out -ttt -q --nano
tcp-handshake-nano-tttt tcp-handshake-nano.pcap tcp-handshake-nano-tttt.out -tttt -q --nano
tcp-handshake-nano-ttttt tcp-handshake-nano.pcap tcp-handshake-nano-ttttt.out -ttttt -q --nano
TCP: Add a test with data in the RST segment
2021-01-18 19:46:23 +08:00
# TCP with data in the RST segment
tcp_rst_data tcp_rst_data.pcap tcp_rst_data.out -v
TCP: Add a test with data in the RST segment, truncated example
2021-01-19 21:58:48 +08:00
# TCP with data in the RST segment, truncated example
tcp_rst_data-trunc tcp_rst_data-trunc.pcap tcp_rst_data-trunc.out -v
TCP: Add a test with data in the RST segment
2021-01-18 19:46:23 +08:00
Separate multiple nexthops. Multiple nexthops in MP-BGP were not getting separated, so you are left wondering "what kind of address is dead:beef::1fe80::1ff:fe01:0"? Separate them with ", " so that it is more clear that they are multiple nexthops.
2012-03-01 21:38:25 +08:00
# BGP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
bgp_vpn_attrset bgp_vpn_attrset.pcap bgp_vpn_attrset.out -v
mpbgp-linklocal-nexthop mpbgp-linklocal-nexthop.pcap mpbgp-linklocal-nexthop.out -v
bgp_infloop-v bgp-infinite-loop.pcap bgp_infloop-v.out -v
bgp-aigp bgp-aigp.pcap bgp-aigp.out -v
BGP: Fix parsing the AIGP attribute There was an invalid ND_TCHECK_LEN(), thus the AIGP metric attribute at the end of an update message was incorrectly shown as truncated. Remove it because the data fetching is secured by GET_BE_U_8 and print_unknown_data. Add a test file with AIGP attribute at the end of an update message. This should fix GitHub issue #975. Remark: This code need more updates on length checks to change some 'truncated' process to 'invalid' process.
2022-02-09 21:01:40 +08:00
bgp-aigp-2 bgp-aigp-2.pcap bgp-aigp-2.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
bgp-large-community bgp-large-community.pcap bgp-large-community.out -v
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
bgp-shutdown-communication bgp-shutdown-communication.pcapng bgp-shutdown-communication.out -v
Added ability to decode bgp add-path for updated and withdrawn routes for ipv4 and ipv6. Since there is no flag to signal that a message contains add-path content, a heuristic approach is taken where we assume an add-path format if an add-path message is sensible and that standard bgp is not. In this way we will only display as add-path if displaying as regular bgp was in some way incorrect anyway. Also modified bgp_update_print to correctly decode withdrawn routes as IPv4 as IPv6 routes are always in MP_UNREACH_NLRI.
2017-09-19 06:56:50 +08:00
bgp-addpath bgp-addpath.pcap bgp-addpath.out -v
Add 4-byte ASN tests, both with -b and without
2019-04-12 04:14:43 +08:00
bgp-4byte-asn bgp-4byte-asn.pcap bgp-4byte-asn.out -v
bgp-4byte-asdot bgp-4byte-asn.pcap bgp-4byte-asdot.out -vb
Decode the Multiple Labels capability (RFC8277)
2019-07-07 22:44:09 +08:00
bgp-lu-multiple-labels bgp-lu-multiple-labels.pcap bgp-lu-multiple-labels.out -v
add bgp EVPN SAFI
2019-08-18 15:43:08 +08:00
bgp-evpn bgp-evpn.pcap bgp-evpn.out -v
add bgp LLGR capability
2019-08-20 16:39:47 +08:00
bgp-llgr bgp-evpn.pcap bgp-llgr.out -v
add BGP encap ext community
2019-08-29 23:44:41 +08:00
bgp-encap bgp-encap.pcap bgp-encap.out -v
Fix BGP Route Target Membership NLRI prefix decoding As described in RFC4684, prefix lengths of 0 and 32-96 are all valid. Introduce bgp_rt_prefix_print() to print partial route targets.
2020-04-01 22:25:39 +08:00
bgp-rt-prefix bgp-rt-prefix.pcap bgp-rt-prefix.out -v
Rename two pcapng test files to .pcapng
2022-03-08 23:37:42 +08:00
bgp-extended-shutdown-msg bgp-extended-shutdown-msg.pcapng bgp-extended-shutdown-msg.out -v
Rename a pcapng test file to .pcapng
2021-10-28 04:16:11 +08:00
bgp-link-bw-extcommunity bgp-link-bw-extcommunity.pcapng bgp-link-bw-extcommunity.out -v
Rename a pcapng test file to .pcapng
2022-01-18 05:56:44 +08:00
bgp-extended-msg bgp-extended-msg.pcapng bgp-extended-msg.out -v
Rename two pcapng test files to .pcapng
2022-01-23 19:27:31 +08:00
bgp-enhanced-route-refresh bgp-enhanced-route-refresh.pcapng bgp-enhanced-route-refresh.out -v
bgp-enhanced-route-refresh-subtype bgp-enhanced-route-refresh-subtype.pcapng bgp-enhanced-route-refresh-subtype.out -v
Rename two pcapng test files to .pcapng
2022-03-08 23:37:42 +08:00
bgp-extended-optional-parameters-length bgp-extended-optional-parameters-length.pcapng bgp-extended-optional-parameters-length.out -v
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
Add Broadcom tags tests Add 3 tests to test that we can properly dissect Broadcom tags. Two are for DSA_TAG_BRCM where the tag is between Ethernet MAC SA and Type/Length and one for DSA_TAG_BRCM_PREPEND where the tag is encapsulating the Ethernet frame (thus requires -e to be shown).
2019-01-26 08:58:42 +08:00
# Broadcom tag tests
brcmtag brcm-tag.pcap brcm-tag.out
brcmtag-e brcm-tag.pcap brcm-tag-e.out -e
brcmtagprepend brcm-tag-prepend.pcap brcm-tag-prepend.out -e
add support for Broadcom LI header (pull request #843) fix build break for Broadcom LI printer on BSD platforms incorporate review comments: make bcm_li_print() void, add a sample capture incorporate review comments: remove trailing tabs add BCM LI outputs to testset incorporate review comment: return after printing update verbose output for bcm-li
2020-04-01 20:40:50 +08:00
# Broadcom LI
bcm-li bcm-li.pcap bcm-li.out
bcm-li-v bcm-li.pcap bcm-li-v.out -v
Add tests for Marvell (E)DSA tags
2019-04-07 05:31:26 +08:00
# Marvell DSA tag tests
dsa dsa.pcap dsa.out
dsa-e dsa.pcap dsa-e.out -e
DSA: Correctly determine VID The 4 MSBs of the VID is stored in the lower nibble of the tag's third byte. Previously the priority bits where folded into the VID space, e.g. a packet with VID=1 and priority 6 was printed as having a VID of 1537 (0x601). Add DSA test PCAPs with packets containing a high VID and non-zero FPri values to make sure we catch any future regressions. Signed-off-by: Tobias Waldekranz <tobias@waldekranz.com>
2021-10-06 04:46:40 +08:00
dsa-high-vid dsa-high-vid.pcap dsa-high-vid.out
dsa-high-vid-e dsa-high-vid.pcap dsa-high-vid-e.out -e
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# EAP tests
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# now in smb.tests
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
Add tests for Marvell (E)DSA tags
2019-04-07 05:31:26 +08:00
# Marvell DSA tag tests
edsa edsa.pcap edsa.out
edsa-e edsa.pcap edsa-e.out -e
DSA: Correctly determine VID The 4 MSBs of the VID is stored in the lower nibble of the tag's third byte. Previously the priority bits where folded into the VID space, e.g. a packet with VID=1 and priority 6 was printed as having a VID of 1537 (0x601). Add DSA test PCAPs with packets containing a high VID and non-zero FPri values to make sure we catch any future regressions. Signed-off-by: Tobias Waldekranz <tobias@waldekranz.com>
2021-10-06 04:46:40 +08:00
edsa-high-vid edsa-high-vid.pcap edsa-high-vid.out
edsa-high-vid-e edsa-high-vid.pcap edsa-high-vid-e.out -e
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# ESP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
esp0 02-sunrise-sunset-esp.pcap esp0.out
make OpenSSL-specific tests conditional
2014-02-17 04:22:37 +08:00
# more ESP tests in crypto.sh
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# ISAKMP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
isakmp1 isakmp-delete-segfault.pcap isakmp1.out
isakmp2 isakmp-pointer-loop.pcap isakmp2.out
isakmp3 isakmp-identification-segfault.pcap isakmp3.out -v
skip some tests when compiled with Capsicum When compiled with Capsicum, tcpdump -E 'file filename' fails to read the secret from the file with the "Not permitted in capability mode" error and exits with code 3. Skip respective tests until this logic is handled in a better way.
2014-12-31 04:29:57 +08:00
# isakmp4 is in crypto.sh
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
isakmp5-v ISAKMP_sa_setup.pcap isakmp5-v.out -v
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
LMP: add -T override and fix version 1 test(s) The Link Management Protocol version 1 sample capture added to the tests directory in commit 212eef2 was produced using non-standard UDP port 49998. Later assignment of port 701 reflected in commit 960aee5 made it impossible to decode the capture. This change adds a -T override for LMP, uses it to replace the broken test with two working tests and dismisses the custom test script, lmp.sh.
2013-09-07 16:22:37 +08:00
# Link Management Protocol tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
lmp lmp.pcap lmp.out -T lmp
LMPv1: make the "-v" test GCC-specific (GH #333)
2014-01-20 19:38:08 +08:00
# lmp-v is now conditionally handled by lmp-v.sh
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# MPLS tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
mpls-ldp-hello mpls-ldp-hello.pcap mpls-ldp-hello.out -v
ldp_infloop ldp-infinite-loop.pcap ldp_infloop.out
lspping-fec-ldp lspping-fec-ldp.pcap lspping-fec-ldp.out
lspping-fec-ldp-v lspping-fec-ldp.pcap lspping-fec-ldp-v.out -v
lspping-fec-ldp-vv lspping-fec-ldp.pcap lspping-fec-ldp-vv.out -vv
lspping-fec-rsvp lspping-fec-rsvp.pcap lspping-fec-rsvp.out
lspping-fec-rsvp-v lspping-fec-rsvp.pcap lspping-fec-rsvp-v.out -v
lspping-fec-rsvp-vv lspping-fec-rsvp.pcap lspping-fec-rsvp-vv.out -vv
mpls-traceroute mpls-traceroute.pcap mpls-traceroute.out
mpls-traceroute-v mpls-traceroute.pcap mpls-traceroute-v.out -v
Print MPLS-over-UDP.
2020-02-09 03:25:38 +08:00
mpls-over-udp mpls-over-udp.pcap mpls-over-udp.out
mpls-over-udp-v mpls-over-udp.pcap mpls-over-udp-v.out -v
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# OSPF tests
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# ospf-gmpls
# ospf-nssa-bitnt
# ospf3_ah-vv
# ospf3_bc-vv
# ospf3_mp-vv
# ospf3_nbma-vv
# ospf2-seg-fault-1-v (fuzzed pcap)
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
ospf3_auth-vv ospf3_auth.pcapng ospf3_auth-vv.out -v -v
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
# IKEv2 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
ikev2four ikev2four.pcap ikev2four.out -v
ikev2fourv ikev2four.pcap ikev2fourv.out -v -v -v
ikev2fourv4 ikev2four.pcap ikev2fourv4.out -v -v -v -v
make OpenSSL-specific tests conditional
2014-02-17 04:22:37 +08:00
# ikev2pI2 test in crypto.sh
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
ikev2pI2-segfault ikev2pI2-segfault.pcapng ikev2pI2-segfault.out
ikev2pI2-segfault-v ikev2pI2-segfault.pcapng ikev2pI2-segfault-v.out -v
changed test subsystem to be more table driven, and to save the outputs and diffs into a consistent place
2007-08-29 10:36:04 +08:00
initial test case for decoding RPL messages
2009-11-15 10:21:58 +08:00
# IETF ROLL RPL packets
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dio02 rpl-19-pickdag.pcap rpl-19-pickdag.out -v -v
dio03 rpl-19-pickdag.pcap rpl-19-pickdagvvv.out -v -v -v
dao01 rpl-14-dao.pcap rpl-14-daovvv.out -v -v -v
daoack01 rpl-26-senddaoack.pcap rpl-26-senddaovv.out -v -v -v
test cases for Solaris print-ipnet. Confirms ndo printer code works
2010-01-11 03:28:33 +08:00
# IPNET encapsulated site
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
e1000g e1000g.pcap e1000g.out
IPNET: Add a test case with '-e' option
2020-11-13 02:03:29 +08:00
e1000g-e e1000g.pcap e1000g-e.out -e
test cases for Solaris print-ipnet. Confirms ndo printer code works
2010-01-11 03:28:33 +08:00
Add an IPX/RIP/SAP test.
2017-12-05 05:52:40 +08:00
# IPX/Netware packets
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# now in smb.tests
Add an IPX/RIP/SAP test.
2017-12-05 05:52:40 +08:00
IPX: Add a length check This fix an undefined behavior at runtime. The error was: print-ipx.c:93:43: runtime error: unsigned integer overflow: 29 - 30 cannot be represented in type 'unsigned int' Add a test case.
2019-03-12 05:07:06 +08:00
# IPX/Netware invalid
ipx-invalid-length ipx-invalid-length.pcap ipx-invalid-length.out
test cases for Solaris print-ipnet. Confirms ndo printer code works
2010-01-11 03:28:33 +08:00
IETF FORCES protocol printer, from Jamal Hadi Salim <hadi at cyberus.ca.
2010-01-11 03:49:46 +08:00
# IETF FORCES WG packets and printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
forces01 forces1.pcap forces1.out
forces01vvv forces1.pcap forces1vvv.out -v -v -v
forces01vvvv forces1.pcap forces1vvvv.out -v -v -v -v
updated forces test cases
2011-04-29 06:27:24 +08:00
# need new pcap file, not sure what the differences were?
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
#forces02 forces2.pcap forces2.out
#forces02v forces2.pcap forces2v.out -v
#forces02vv forces2.pcap forces2vv.out -v -v
IETF FORCES protocol printer, from Jamal Hadi Salim <hadi at cyberus.ca.
2010-01-11 03:49:46 +08:00
updated RPL printer from draft-07 to rfc6550 for DIO message. Decode the DIO suboptions as well, added new test case
2014-01-03 10:33:26 +08:00
# 802.1ad, QinQ tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
qinq QinQpacket.pcap QinQpacket.out -e
qinqv QinQpacket.pcap QinQpacketv.out -e -v
added support and test case for QinQ packets
2010-10-08 02:47:22 +08:00
added sflow test cases
2011-04-28 03:21:21 +08:00
# now SFLOW tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
sflow1 sflow_multiple_counter_30_pdus.pcap sflow_multiple_counter_30_pdus.out -v
sflow2 sflow_multiple_counter_30_pdus.pcap sflow_multiple_counter_30_pdus-nv.out
Add support for IPv6 agent in sFlow.
2020-09-04 01:06:47 +08:00
# ipv6 sflow support
sflow-v6 sflow-print-v6.pcap sflow-print-v6.out -vvv
added support and test case for QinQ packets
2010-10-08 02:47:22 +08:00
AHCP: add version 1 decoder Add new decoder for UDP port 5359 and a sample packet capture produced on a couple of Linux hosts (a server and a client). Besides that, an existing Babel capture contained AHCP packets and the current AHCP tests cover 0, 1 and 2 "-v" flags.
2013-11-12 21:10:33 +08:00
# AHCP and Babel tests
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
ahcp-vv ahcp.pcapng ahcp-vv.out -vv
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
babel1 babel.pcap babel1.out
babel1v babel.pcap babel1v.out -v
babel_auth babel_auth.pcap babel_auth.out -v
babel_pad1 babel_pad1.pcap babel_pad1.out
babel_rtt babel_rtt.pcap babel_rtt.out -v
babel: update to include various later RFCs and I-Ds, including RFC 6126bis. Adapted from GitHub pull request #768, with some cleanups and an additional test update to handle the addition of the Unicast flag to the Hello TLV. Added a list of RFCs and I-Ds.
2020-05-24 16:13:32 +08:00
babel_rfc6126bis babel_rfc6126bis.pcap babel_rfc6126bis.out -v
Add simple PPPoE test case
2011-12-11 09:57:56 +08:00
# PPPoE tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
pppoe pppoe.pcap pppoe.out
pppoes pppoes.pcap pppoes.out
pppoes_id pppoes.pcap pppoes_id.out pppoes 0x3b
Add a test for IGMPv3 query response times
2012-02-25 23:21:38 +08:00
PPP: Fix two loops for undefined behavior at runtime The errors were: print-ppp.c:518:9: runtime error: unsigned integer overflow: 38 - 230 cannot be represented in type 'unsigned int' print-ppp.c:1138:63: runtime error: unsigned integer overflow: 204 - 220 cannot be represented in type 'unsigned int' Add a test case.
2019-03-19 05:51:44 +08:00
# PPP invalid
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
truncated_aack truncated-aack.pcap trunc_aack.out
PPP: Fix two loops for undefined behavior at runtime The errors were: print-ppp.c:518:9: runtime error: unsigned integer overflow: 38 - 230 cannot be represented in type 'unsigned int' print-ppp.c:1138:63: runtime error: unsigned integer overflow: 204 - 220 cannot be represented in type 'unsigned int' Add a test case.
2019-03-19 05:51:44 +08:00
ppp-invalid-lengths ppp-invalid-lengths.pcap ppp-invalid-lengths.out -v
add a test case for the previous commit
2016-10-17 04:45:22 +08:00
Add a test for IGMPv3 query response times
2012-02-25 23:21:38 +08:00
# IGMP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
igmpv1 IGMP_V1.pcap igmpv1.out
igmpv2 IGMP_V2.pcap igmpv2.out
igmpv3-queries igmpv3-queries.pcap igmpv3-queries.out
mtrace mtrace.pcap mtrace.out
dvmrp mrinfo_query.pcap dvmrp.out
Merge branch 'master' of git://github.com/mcr/tcpdump Conflicts: tests/TESTLIST
2013-02-23 03:51:33 +08:00
Add dissector for ICMP Interface Identification Object
2020-11-25 00:50:18 +08:00
# ICMPv4 -- pcap from https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6632
rfc5837 icmp-rfc5837.pcap icmp-rfc5837.out -v
added icmpv6 test case
2012-03-29 22:04:51 +08:00
# ICMPv6
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
icmpv6 icmpv6.pcap icmpv6.out -vv
icmpv6_opt24-v icmpv6_opt24.pcap icmpv6_opt24-v.out -v
ICMPv6: Add a length check If the length is zero, it's invalid, print that. Add a test with this case.
2018-06-24 01:08:19 +08:00
icmpv6-length-zero icmpv6-length-zero.pcapng icmpv6-length-zero.out
Add tests for ICMPv6 Param Problem Frag header messages
2019-05-09 22:41:54 +08:00
icmpv6-rfc7112 icmpv6-rfc7112.pcap icmpv6-rfc7112.out
Added test files for spb.
2012-06-04 11:55:13 +08:00
# SPB tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
spb spb.pcap spb.out
fix RIP Request/full table decoding issues RIP Request and Response messages have the same structure. Update a switch block in rip_print() to proceed with decoding of both. A Request message may contain an AFI 0 RTE standing for a full table request, normally sent on a router start. Update rip_entry_print_v1() and rip_entry_print_v2() to treat IPv4 and AFI 0 as two valid, distinguishable cases.
2012-06-12 01:01:34 +08:00
Added-bpduv4-test-files
2012-10-04 23:18:22 +08:00
# SPB BPDUv4 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
spb_bpduv4 spb_bpduv4.pcap spb_bpduv4.out
spb_bpduv4-v spb_bpduv4.pcap spb_bpduv4-v.out -v
Added-bpduv4-test-files
2012-10-04 23:18:22 +08:00
Added Test cases for DCB and EVB TLVs.
2013-08-29 12:31:41 +08:00
# DCB Tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dcb_ets dcb_ets.pcap dcb_ets.out -vv
dcb_pfc dcb_pfc.pcap dcb_pfc.out -vv
dcb_qcn dcb_qcn.pcap dcb_qcn.out -vv
Added Test cases for DCB and EVB TLVs.
2013-08-29 12:31:41 +08:00
# EVB tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
evb evb.pcap evb.out -vv
Added Test cases for DCB and EVB TLVs.
2013-08-29 12:31:41 +08:00
use more PacketLife captures for test cases Improve coverage for ISAKMP, IGMP and HDLC. Add initial coverage for STP variants, DECnet, RADIUS, DTP, LACP, LLDP, CDP, VTP and UDLD.
2014-04-14 18:12:46 +08:00
# STP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
mstp-v MSTP_Intra-Region_BPDUs.pcap mstp-v.out -v
stp-v 802.1D_spanning_tree.pcap stp-v.out -v
rstp-v 802.1w_rapid_STP.pcap rstp-v.out -v
rpvst-v rpvstp-trunk-native-vid5.pcap rpvst-v.out -v
use more PacketLife captures for test cases Improve coverage for ISAKMP, IGMP and HDLC. Add initial coverage for STP variants, DECnet, RADIUS, DTP, LACP, LLDP, CDP, VTP and UDLD.
2014-04-14 18:12:46 +08:00
fix RIP Request/full table decoding issues RIP Request and Response messages have the same structure. Update a switch block in rip_print() to proceed with decoding of both. A Request message may contain an AFI 0 RTE standing for a full table request, normally sent on a router start. Update rip_entry_print_v1() and rip_entry_print_v2() to treat IPv4 and AFI 0 as two valid, distinguishable cases.
2012-06-12 01:01:34 +08:00
# RIP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
ripv1v2 ripv1v2.pcap ripv1v2.out -v
ripv2_auth ripv2_auth.pcap ripv2_auth.out -v
add dhcpv6-aftr-name test in tests/TESTLIST
2012-11-21 18:26:20 +08:00
RIP: Fix two loops for undefined behavior at runtime 1) RIPv2 The error was: print-rip.c:386:9: runtime error: unsigned integer overflow: 16 - 20 cannot be represented in type 'unsigned int' Without this change the unsigned integer variable 'len' is assigned a very high value, because of underflow, and the loop continue incorrectly. Add a test case. 2) RIPv1 Same bugfix, based on a code inspection, so comes without a test case.
2019-03-09 01:04:43 +08:00
# RIP invalid
ripv2-invalid-length ripv2-invalid-length.pcap ripv2-invalid-length.out -v
add dhcpv6-aftr-name test in tests/TESTLIST
2012-11-21 18:26:20 +08:00
# DHCPv6 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dhcpv6-aftr-name dhcpv6-AFTR-Name-RFC6334.pcap dhcpv6-AFTR-Name-RFC6334.out -v
dhcpv6-ia-na dhcpv6-ia-na.pcap dhcpv6-ia-na.out -v
dhcpv6-ia-pd dhcpv6-ia-pd.pcap dhcpv6-ia-pd.out -v
dhcpv6-ia-ta dhcpv6-ia-ta.pcap dhcpv6-ia-ta.out -v
dhcpv6-ntp-server dhcpv6-ntp-server.pcap dhcpv6-ntp-server.out -v
dhcpv6-sip-server-d dhcpv6-sip-server-d.pcap dhcpv6-sip-server-d.out -v
dhcpv6-domain-list dhcpv6-domain-list.pcap dhcpv6-domain-list.out -v
dhcpv6-mud dhcpv6-mud.pcap dhcpv6-mud.out -vv
ZeroMQ initial support (ZMTP/1.0 framing) This change adds support for ZMTP/1.0 (ZeroMQ Message Transport Protocol 1.0) framing in TCP packets, as defined in http://rfc.zeromq.org/spec:13 and implemented in zeromq library. Since there is no assigned port number for ZeroMQ, the user is left responsible for making only the related TCP packets captured and enforcing ZMTP/1.0 decoding through the "-T zmtp1" option. Each ZMTP/1.0 frame of a packet will produce a single additional line of output. The "-v" flag will add up to 8 lines (128 bytes) worth of hex+ASCII dump of the frame body, and "-vv" and higher will dump the full frame body, however long. Beware that this code handles neither IP fragmentation nor TCP segmentation and will incorrectly decode segments not starting at a frame boundary. The included sample capture stands for a short ZeroMQ session between a REQ/REP socket pair doing 3 anonymous 2-way exchanges. It was produced using version 2.1.9 of zeromq library patched to fix its bug #293, so that all MBZ bits of the flags field are set to 0.
2013-02-09 21:36:24 +08:00
add a test case for native PGM This commit adds a capture of a few PGM (IP protocol 113) packets produced with version 2.2.0 of zeromq library built with PGM support (using the "pgm://" protocol schema). Each of the three ODATA packets in the capture contains a ZeroMQ datagram in the "Data" (application data) field. There is a new test case covering the PGM part of the capture.
2013-03-15 00:24:22 +08:00
# ZeroMQ/PGM tests
# ZMTP/1.0 over TCP
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
zmtp1v zmtp1.pcap zmtp1.out -v -T zmtp1
add a test case for native PGM This commit adds a capture of a few PGM (IP protocol 113) packets produced with version 2.2.0 of zeromq library built with PGM support (using the "pgm://" protocol schema). Each of the three ODATA packets in the capture contains a ZeroMQ datagram in the "Data" (application data) field. There is a new test case covering the PGM part of the capture.
2013-03-15 00:24:22 +08:00
# native PGM
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
pgmv pgm_zmtp1.pcap pgmv.out -v
use existing PGM decoder for UDP-encapsulated PGM The original PGM uses its own IP protocol number. "EPGM" or "PGM/UDP" stands for UDP-encapsulated PGM, which has no assigned UDP port number and can be decoded only by means of -T option, which now accepts "pgm" protocol type for this purpose. There is also a sample capture of EPGM now (similar to the one of native PGM, but produced using the "epgm://" protocol schema) and a respective test case.
2013-03-15 01:17:53 +08:00
# UDP-encapsulated PGM
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
epgmv epgm_zmtp1.pcap epgmv.out -v -T pgm
improve ZeroMQ support (ZMTP/1.0 inside PGM/EPGM) This change adds new code to decode ZeroMQ datagrams, couples it with the PGM decoder and extends the -T option to make all this work. There are two new test cases based on existing captures of ZMTP/1.0 inside [E]PGM to decode the ZMTP/1.0 part of these. This functionality enables decoding of the traffic zeromq library produces for "pgm://" and "epgm://" protocol schemas.
2013-03-15 01:59:38 +08:00
# ZMTP/1.0 inside native PGM
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
pgm_zmtp1v pgm_zmtp1.pcap pgm_zmtp1v.out -v -T pgm_zmtp1
improve ZeroMQ support (ZMTP/1.0 inside PGM/EPGM) This change adds new code to decode ZeroMQ datagrams, couples it with the PGM decoder and extends the -T option to make all this work. There are two new test cases based on existing captures of ZMTP/1.0 inside [E]PGM to decode the ZMTP/1.0 part of these. This functionality enables decoding of the traffic zeromq library produces for "pgm://" and "epgm://" protocol schemas.
2013-03-15 01:59:38 +08:00
# ZMTP/1.0 inside UDP-encapsulated PGM
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
epgm_zmtp1v epgm_zmtp1.pcap epgm_zmtp1v.out -v -T pgm_zmtp1
Add a test file for the previous fix
2015-11-27 04:38:38 +08:00
# fuzzed pcap
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
zmtp1-inf-loop-1 zmtp1-inf-loop-1.pcapng zmtp1-inf-loop-1.out -T zmtp1
Add two MS NLB test captures msnlb1.pcap contains two heartbeat packets from a single cluster (two nodes). msnlb2.pcap is the same capture with a lower snaplen to exercice the truncation code path.
2013-02-24 01:50:06 +08:00
PGM: add POLL/POLR test
2019-06-11 08:33:42 +08:00
# native PGM POLL/POLR
pgm_poll_polr pgm_poll_polr.pcap pgm_poll_polr.out -v
Add two MS NLB test captures msnlb1.pcap contains two heartbeat packets from a single cluster (two nodes). msnlb2.pcap is the same capture with a lower snaplen to exercice the truncation code path.
2013-02-24 01:50:06 +08:00
# MS NLB tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
msnlb msnlb.pcap msnlb.out
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
msnlb2 msnlb2.pcapng msnlb2.out
Multipath TCP (RFC 6824) support This commit adds the support of Multipath TCP (MPTCP). MPTCP is a new extension to TCP standardized at the IETF. MPTCP allows to use several IP addresses at the same time by distributing data across several subflows (TCP connections) while still presenting the standard TCP socket API to the application. Its benefits are better resource utilization, better throughput and smoother reaction to failures.
2013-02-26 00:00:02 +08:00
# MPTCP tests
MPTCP: parse MP_CAPABLE v1 options A new version of MPTCP protocol (RFC8684) has been published, with some changes to the MP_CAPABLE options handling. Let tcpdump print the protocol version, and adjust parsing of MP_CAPABLE options according to RFC8684. Signed-off-by: Davide Caratti <dcaratti@redhat.com>
2020-01-13 22:07:30 +08:00
mptcp-v0 mptcp-v0.pcap mptcp-v0.out
mptcp-v1 mptcp-v1.pcap mptcp-v1.out
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
mptcp-fclose mptcp-fclose.pcap mptcp-fclose.out
mptcp: add support for ADD_ADDR "echo bit" print "v1-echo" if the echo bit is set in the ADD_ADDR suboption (see RFC8684 §3.4.1). While at it, dissect the 4 bits after the MPTCP option subtype when the value is "ADD_ADDR" (0x3), according to protocol v0 and v1. Add a selftest with a capture taken from a recent Linux kernel implementation, and fix printout of add-addr in the existing selftests. Signed-off-by: Davide Caratti <dcaratti@redhat.com>
2020-09-29 03:39:43 +08:00
mptcp-aa-v1 mptcp-aa-v1.pcap mptcp-aa-v1.out
mptcp-aa-echo mptcp-aa-echo.pcap mptcp-aa-echo.out
mptcp: add support for MP_TCPRST dissect the MP_TCPRST sub-option in accordance to RFC8684 §3.6. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/189 Signed-off-by: Davide Caratti <dcaratti@redhat.com>
2021-05-07 21:42:53 +08:00
mptcp-tcprst mptcp-tcprst.pcap mptcp-tcprst.out
MPTCP: parse v1 ADD_ADDR option RFC6824bis-18 (MPTCP version 1) makes changes to the MPTCP ADD_ADDR option format. An HMAC field is added to the option and the IP version field is removed and replaced with an Echo bit that provides a reliability mechanism. This change allows either v0 or v1 ADD_ADDR options to be parsed and displayed correctly. Signed-off-by: Peter Krystad <peter.krystad@linux.intel.com>
2020-02-28 02:55:51 +08:00
add a TCP Fast Open test case The sample capture is a subset of the capture downloaded from http://cloudshark.org/captures/5c1fa7f9ae91
2013-10-03 15:28:57 +08:00
# TFO tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
tfo tfo-5c1fa7f9ae91.pcap tfo.out
TCP: add a test case for the previous commit The SCPS TCP option is malformed as discussed in GitHub issue #516 and is printed as such. The .pcap file was contributed by Patrik Lundquist.
2016-11-01 23:16:11 +08:00
# SCPS
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
scps_invalid scps_invalid.pcap scps_invalid.out
new test for DLT_IEEE802_11_RADIO w/ext. bitmap I modified the mac80211 and ath9k kernel module such that extra information regarding rssi, etc are available, which is why I needed the extra bitmap. Capturing the packets is simply a matter of using tcpdump -i wlan0 -w dumpfile.
2013-04-28 21:11:38 +08:00
# IEEE 802.11 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
802.11_exthdr ieee802.11_exthdr.pcap ieee802.11_exthdr.out -v
802.11_rx-stbc ieee802.11_rx-stbc.pcap ieee802.11_rx-stbc.out
IEEE 802.11: Add a test to check the 802.11s Mesh ID in management frames The newly added pcap file contains a Mesh Beacon frame, a Wildcard Probe Request and a Mesh Probe Response. The test case checks if the "Mesh ID" field is properly parsed by the IEEE 802.11 printer.
2021-07-04 20:54:57 +08:00
802.11_meshid ieee802.11_meshid.pcap ieee802.11_meshid.out
add OpenFlow 1.0 decoder (no SSL) The new file openflow-1.0.h is a verbatim copy of the file openflow.h from the openflow-1.0.0.tar.gz distribution. The new file print-openflow-1.0.c contains a set of functions for OpenFlow 1.0 (wire protocol 0x01) decoding. Of these functions only of10_header_body_print() is exported and used by the minimal OpenFlow decoder. It is intended that future (1.1, 1.2, 1.3.0) OpenFlow version decoders are implemented the same way (in modules of their own), since different versions of OpenFlow specification reuse the same symbols for different numeric values. This way, print-openflow-1.1.c would include openflow-1.1.h and so on. The new test case "of10_p3295-vv" was produced using a Pica8 P-3295 switch and Trema controller running a purpose-built sample application.
2013-05-22 00:46:54 +08:00
# OpenFlow tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
of10_p3295-vv of10_p3295.pcap of10_p3295-vv.out -vv
of10_s4810-vvvv of10_s4810.pcap of10_s4810-vvvv.out -vvvv
of10_pf5240-vv of10_pf5240.pcap of10_pf5240-vv.out -vv
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
of10_7050q-v of10_7050q.pcapng of10_7050q-v.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
of10_7050sx_bsn-vv of10_7050sx_bsn.pcap of10_7050sx_bsn-vv.out -vv
OpenFlow: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release and was fixed in the 4.9.3 release. The problem was fixed in master branch by commit ad69daa2e4cf9ce6789295bd7f55a55ac4d9d0b2. Update the output of the test accordingly. Partial update from 1ccaff37644f88949c9f45a3781082cdfa720856 in 4.9 branch.
2019-10-24 23:50:29 +08:00
of10_7050sx_bsn-oobr of10_7050sx_bsn-oobr.pcap of10_7050sx_bsn-oobr.out -v
OpenFlow 1.3: Add initial partial support. This code processes only the simplest message types (9 out of the 30 defined). Add a test from [1], which comes from [2], which comes from a contributor in Ericsson (Zoltán Lajos Kis). 1: https://wiki.wireshark.org/SampleCaptures#OpenFlow 2: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9283
2020-09-28 06:17:56 +08:00
of13_ericsson of13_ericsson.pcapng of13_ericsson.out
of13_ericsson-v of13_ericsson.pcapng of13_ericsson-v.out -v
of13_ericsson-vv of13_ericsson.pcapng of13_ericsson-vv.out -vv
OpenFlow 1.0: Improve handling of some lengths. For OFPT_PACKET_OUT print "actions_len", as it is a part of the message and should appear in its decoding (in other message types it is derived from the message length). ND_ICHECK_*() in of10_actions_print(), of10_flow_stats_reply_print() and of10_packet_out_print() after printing at least some of the output. This, compared to just "(invalid) (invalid)", makes it much easier to understand where and why the packet data was not fully decoded. Define OF_ACTION_MINLEN unsigned to squelch the induced compiler warnings. A number of similar checks still remain to be converted the same way.
2021-12-30 05:06:25 +08:00
of10_inv_OFPST_FLOW-v of10_inv_OFPST_FLOW.pcap of10_inv_OFPST_FLOW-v.out -v
OpenFlow: Refine more length checks. In print-openflow-1.0.c and print-openflow-1.3.c replace the remaining "goto invalid" checks with ND_ICHECK_U() and ND_ICHECKMSG_U(). Redo the changes from commit 1ce16ea: use the same order of arguments and the same comparison operators as before the change and lose the unsigned compensation, which is no longer required. Add another test case using a malformed packet from Francois-Xavier.
2022-01-06 06:57:45 +08:00
of10_inv_QUEUE_GET_CONFIG_REPLY-vv of10_inv_QUEUE_GET_CONFIG_REPLY.pcap of10_inv_QUEUE_GET_CONFIG_REPLY-vv.out -vv
Improved quality, bug fixes, typos. Added test case
2013-06-27 19:28:10 +08:00
# GeoNetworking and CALM FAST tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
geonet-calm-fast geonet_and_calm_fast.pcap geonet_and_calm_fast.out -vv
NFLOG: remove header dependency, add a test case This change removes detection of linux/netfilter/nfnetlink_log.h, which was only used to provide two constants. The constants are now defined in print-nflog.c, making it possible to compile (and test) the NFLOG decoder on all systems, not only Linux. There is now a test case for the decoder, it was produced on a Linux host with: iptables -A INPUT -p udp --source 74.82.42.42 -j NFLOG --nflog-group 20 dig @74.82.42.42 ...
2013-09-09 18:45:31 +08:00
M3UA support added (GH #342) SCTP's payload protocol identifiers added. M3UA tests provided by wireshark http://wiki.wireshark.org/SampleCaptures#Sigtran_Protocol_Family But RFC4666 tells that parameter 0x0002 aren't carried by M3UA, so it's OK that tcpdump doesn't know about this identifier. Conflicts: Makefile.in interface.h print-sctp.c sctpConstants.h ----------------------------------------------------------------------- The change to sctp_print() does three things: * makes detection of ForCES consider PPID, not just port number * verifies chunk length of all SCTP_DATA chunks, not just of ForCES * adds PPID-specific dispatching with a particular case of M3UA -- Denis
2013-11-22 17:28:37 +08:00
# M3UA tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
m3ua isup.pcap isup.out
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# m3ua-vv
M3UA support added (GH #342) SCTP's payload protocol identifiers added. M3UA tests provided by wireshark http://wiki.wireshark.org/SampleCaptures#Sigtran_Protocol_Family But RFC4666 tells that parameter 0x0002 aren't carried by M3UA, so it's OK that tcpdump doesn't know about this identifier. Conflicts: Makefile.in interface.h print-sctp.c sctpConstants.h ----------------------------------------------------------------------- The change to sctp_print() does three things: * makes detection of ForCES consider PPID, not just port number * verifies chunk length of all SCTP_DATA chunks, not just of ForCES * adds PPID-specific dispatching with a particular case of M3UA -- Denis
2013-11-22 17:28:37 +08:00
Make the NFLOG test case unconditional There is no more HAVE_PCAP_NFLOG_H macro to test. libpcap has support for NFLOG in current in 1.8.1 and in old releases 1.7.4, 1.6.2 and 1.5.3. Thus there should be no problem to always do the test.
2018-05-29 18:38:39 +08:00
# NFLOG test case
nflog-e nflog.pcap nflog-e.out -e
add a test case for syslog over UDP The new capture contains two datagrams produced by logger utility (syslog default timestamp format) and two datagrams produced by rsyslog (RFC3339 timestamp format). One of the rsyslog datagrams has priority consisting of two figures and the other -- of one figure.
2013-09-12 23:42:48 +08:00
# syslog test case
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
syslog-v syslog_udp.pcap syslog-v.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
DNS: Add two test files (over TCP and over UDP)
2020-06-10 17:44:10 +08:00
# DNS test cases
dns_tcp dns_tcp.pcap dns_tcp.out
dns_tcp-v dns_tcp.pcap dns_tcp-v.out -v
dns_tcp-vv dns_tcp.pcap dns_tcp-vv.out -vv
dns_tcp-vvv dns_tcp.pcap dns_tcp-vvv.out -vvv
dns_udp dns_udp.pcap dns_udp.out
dns_udp-v dns_udp.pcap dns_udp-v.out -v
dns_udp-vv dns_udp.pcap dns_udp-vv.out -vv
dns_udp-vvv dns_udp.pcap dns_udp-vvv.out -vvv
Add "domain" as an option for -T This allows tcpdump to handle DNS running on non-standard ports. Add two test files with DNS over TCP and DNS over UDP, port 8053.
2020-03-02 23:04:35 +08:00
# DNS on non-standard ports.
dns_tcp_8053 dns_tcp_8053.pcap dns_tcp_8053.out -vv
dns_tcp_8053-T dns_tcp_8053.pcap dns_tcp_8053-T.out -vv -T domain
dns_udp_8053 dns_udp_8053.pcap dns_udp_8053.out -vv
dns_udp_8053-T dns_udp_8053.pcap dns_udp_8053-T.out -vv -T domain
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
add a DNSSEC test case This is related to GH #445 and GH #467.
2015-07-10 18:52:56 +08:00
# DNSSEC from https://bugzilla.redhat.com/show_bug.cgi?id=205842, -vv exposes EDNS DO
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dnssec-vv dnssec.pcap dnssec-vv.out -vv
print-ip6: add a test on the header version value
2013-11-12 18:01:20 +08:00
#IPv6 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
ipv6-bad-version ipv6-bad-version.pcap ipv6-bad-version.out
ipv6-routing-header ipv6-routing-header.pcap ipv6-routing-header.out -v
Add support for IPv6 routing header type 4 IPv6 routing header type 4 is known as Segment Routing Header (SRH). It is used by Segment Routing (SR) to steer a packet through a controlled set of instructions, called segments. It is described in https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-07 An extension is added to allow tcpdump to print SRH information.
2017-12-30 00:43:35 +08:00
ipv6-srh-ext-header ipv6-srh-ext-header.pcap ipv6-srh-ext-header.out -v
Fix checksum calculation for IPv6 Segment Routing (SRv6) traffic The checksum calculation for IPv6 packets is based on a pseudo header that includes the packet's final Destination Address (DA). If the IPv6 packet contains a Routing header, the final DA is the last element of the Routing header [RFC8200]. Currently, tcpdump supports Routing header types 0 and 2. IPv6 Segment Routing Header (SRH) is a new Routing header type (4). SRH is defined in draft-ietf-6man-segment-routing-header [1]. This patch fix the checksum calculation for SRv6 packets. It allows tcpdump to get the final DA value from SRv6 packets. [1] https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-17
2018-11-23 02:05:16 +08:00
ipv6-srh-insert-cksum ipv6-srh-insert-cksum.pcap ipv6-srh-insert-cksum.out -v
SRv6: Add a test output without '-e' This is a follow-up to commit 1103418a18d71c0fe448c0459a42ff1bc20bb0dc.
2020-08-08 00:19:34 +08:00
ipv6-srh-ipproto-ether-v ipv6-srh-ipproto-ether.pcap ipv6-srh-ipproto-ether-v.out -v
ipv6-srh-ipproto-ether-ev ipv6-srh-ipproto-ether.pcap ipv6-srh-ipproto-ether-ev.out -ev
add a decoder for Loopback/CTP tcpdump used to print an empty line for a Loopback (CTP) packet, which many Cisco switches send by default every 10 seconds. This commit adds a decoder for the protocol and a test case, which uses the sample capture from Wireshark wiki (configuration_test_protocol_aka_loop.pcap).
2014-01-09 20:54:47 +08:00
# Loopback/CTP test case
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
loopback loopback.pcap loopback.out
fix partial checksum errors in DCCP decoder, IPv4 case
2014-02-15 19:32:44 +08:00
# DCCP partial checksums tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dccp_partial_csum_v4_simple dccp_partial_csum_v4_simple.pcap dccp_partial_csum_v4_simple.out -vv
dccp_partial_csum_v4_longer dccp_partial_csum_v4_longer.pcap dccp_partial_csum_v4_longer.out -vv
dccp_partial_csum_v6_simple dccp_partial_csum_v6_simple.pcap dccp_partial_csum_v6_simple.out -vv
dccp_partial_csum_v6_longer dccp_partial_csum_v6_longer.pcap dccp_partial_csum_v6_longer.out -vv
VRRP: add a sample capture and two test cases The sample capture consists of VRRPv2/IPv4, VRRPv3/IPv4 and VRRPv3/IPv6 packets. It was produced using 7 MikroTik devices running RouterOS 6.10 and configured for the same set of virtual addresses with different priorities per device. The devices were powered on one after another with a ~30 seconds delay in the order of VRRP priority ascending. The test cases decode the capture with and without "-v".
2014-03-06 06:31:25 +08:00
# VRRP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
vrrp vrrp.pcap vrrp.out
vrrp-v vrrp.pcap vrrp-v.out -v
PIM: add some v2 test cases The sample captures come from packetlife.net through courtesy of Jeremy Stretch.
2014-04-12 14:51:48 +08:00
add PacketLife captures for HSRP and IS-IS
2014-04-17 18:27:22 +08:00
# HSRP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
hsrp_1 HSRP_coup.pcap hsrp_1.out
hsrp_1-v HSRP_coup.pcap hsrp_1-v.out -v
hsrp_2-v HSRP_election.pcap hsrp_2-v.out -v
hsrp_3-v HSRP_failover.pcap hsrp_3-v.out -v
add PacketLife captures for HSRP and IS-IS
2014-04-17 18:27:22 +08:00
PIM: add some v2 test cases The sample captures come from packetlife.net through courtesy of Jeremy Stretch.
2014-04-12 14:51:48 +08:00
# PIMv2 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
pimv2_dm-v PIM-DM_pruning.pcap pimv2_dm-v.out -v
pimv2_register-v PIM_register_register-stop.pcap pimv2_register-v.out -v
pimv2_sm-v PIM-SM_join_prune.pcap pimv2_sm-v.out -v
pimv2_bootstrap-v PIMv2_bootstrap.pcap pimv2_bootstrap-v.out -v
pimv2_hellos-v PIMv2_hellos.pcap pimv2_hellos-v.out -v
An assortment of PIMv2 packets for testing
2019-07-06 02:21:47 +08:00
pim-packet-assortment pim-packet-assortment.pcap pim-packet-assortment.out
pim-packet-assortment-v pim-packet-assortment.pcap pim-packet-assortment-v.out -v
pim-packet-assortment-vv pim-packet-assortment.pcap pim-packet-assortment-vv.out -vv
put Hannes' prior captures to work Add test cases for the .pcap files added in 2005 (complements commits 279c3bd, 80d7284 and 0dcd9ac).
2014-04-14 18:00:57 +08:00
# IS-IS tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
isis_infloop-v isis-infinite-loop.pcap isis_infloop-v.out -v
isis_poi-v isis_poi.pcap isis_poi.out -v
isis_poi2-v isis_poi2.pcap isis_poi2.out -v
isis_1 ISIS_external_lsp.pcap isis_1.out
isis_1-v ISIS_external_lsp.pcap isis_1-v.out -v
isis_2-v ISIS_level1_adjacency.pcap isis_2-v.out -v
isis_3-v ISIS_level2_adjacency.pcap isis_3-v.out -v
isis_4-v ISIS_p2p_adjacency.pcap isis_4-v.out -v
add isis router capability TLV
2019-08-22 23:20:28 +08:00
isis_cap_tlv isis_cap_tlv.pcap isis_cap_tlv.out -v
Parse the IS-IS Instance Identifier TLV from RFC8202
2020-02-21 20:45:24 +08:00
isis_iid-v isis_iid_tlv.pcap isis_iid_tlv.out -v
Rename a pcapng test file to .pcapng
2020-04-25 17:09:00 +08:00
isis_sr-v isis_sr.pcapng isis_sr.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# fuzzed pcap
ISOCLNS: Manage a test as GCC-specific
2016-07-16 23:14:53 +08:00
# isis-seg-fault-1-v is now conditionally handled by isis-seg-fault-1-v.sh
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
isis-seg-fault-2-v isis-seg-fault-2.pcapng isis-seg-fault-2-v.out -v
isis-seg-fault-3-v isis-seg-fault-3.pcapng isis-seg-fault-3-v.out -v
IS-IS: Add LAN Adjacency Segment Identifier subTLV Adapted from GitHub pull request #798. Print " (invalid)" when combinations of V-Flag and L-Flag are invalid. Update comments (draft -> RFC). Remove some ND_TCHECK_LEN because GET_ use. Update the output of isis_sid test because commit b09710dfcdd50251efd487e800cd1b9fd01eaf96 updated the output format of the IS-IS dissector.
2019-08-23 16:46:39 +08:00
isis_sid isis_sid.pcap isis_sid.out -v
put Hannes' prior captures to work Add test cases for the .pcap files added in 2005 (complements commits 279c3bd, 80d7284 and 0dcd9ac).
2014-04-14 18:00:57 +08:00
# RSVP tests
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# rsvp_infloop-v
add rsvp capability object rfc5063
2019-09-02 23:09:09 +08:00
rsvp_cap rsvp_cap.pcap rsvp_cap.out -v
Add test file for a previous fix Fix was: "RSVP: Fix an infinite loop" (commit d7d269e8c67b6e8262db27bb92ae524aa3c3f439)
2015-10-24 20:04:58 +08:00
# fuzzed pcap
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
rsvp-inf-loop-2-v rsvp-inf-loop-2.pcapng rsvp-inf-loop-2-v.out -v
put Hannes' prior captures to work Add test cases for the .pcap files added in 2005 (complements commits 279c3bd, 80d7284 and 0dcd9ac).
2014-04-14 18:00:57 +08:00
# HDLC tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
hdlc1 chdlc-slarp.pcap hdlc1.out
hdlc2 chdlc-slarp-short.pcap hdlc2.out
hdlc3 HDLC.pcap hdlc3.out
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
hdlc4 hdlc_slarp.pcapng hdlc4.out
use more PacketLife captures for test cases Improve coverage for ISAKMP, IGMP and HDLC. Add initial coverage for STP variants, DECnet, RADIUS, DTP, LACP, LLDP, CDP, VTP and UDLD.
2014-04-14 18:12:46 +08:00
# DECnet test case
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# decnet
use more PacketLife captures for test cases Improve coverage for ISAKMP, IGMP and HDLC. Add initial coverage for STP variants, DECnet, RADIUS, DTP, LACP, LLDP, CDP, VTP and UDLD.
2014-04-14 18:12:46 +08:00
# RADIUS tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
radius-v RADIUS.pcap radius-v.out -v
Added RADIUS attributes from RFC3162 NAS IPv6 Address (95) Framed Interface ID (96) Framed IPv6 Prefix (97) Login IPv6 Host (98) Framed IPv6 Route (99) Framed IPv6 Pool (100) Added new functions to print ipv6 address and netmask, added unit test to test those.
2015-06-25 21:14:46 +08:00
radius-rfc3162 RADIUS-RFC3162.pcap radius-rfc3162-v.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
radius-rfc4675 RADIUS-RFC4675.pcap radius-rfc4675-v.out -v
radius-rfc5176 RADIUS-RFC5176.pcap radius-rfc5176-v.out -v
radius-port1700 RADIUS-port1700.pcap radius-port1700-v.out -v
Added RADIUS attribute from RFC5176/RFC5580 Error Cause (101)
2015-07-03 00:36:14 +08:00
radius-rfc5176-2 RADIUS-RFC5176-2.pcap radius-rfc5176-2-v.out -v
Added RADIUS attributes from RFC 5447 * MIP6-Feature-Vector (124) (with extra attributes from RFC 6572) * MIP6-Home-Link-Prefix (125)
2017-10-04 02:10:23 +08:00
radius-rfc5447 RADIUS-RFC5447.pcap radius-rfc5447-v.out -v
RADIUS: Add attributes from RFC5580. (GH #706)
2018-10-03 02:17:42 +08:00
radius-rfc5580 RADIUS-RFC5580.pcap radius-rfc5580-v.out -v
use more PacketLife captures for test cases Improve coverage for ISAKMP, IGMP and HDLC. Add initial coverage for STP variants, DECnet, RADIUS, DTP, LACP, LLDP, CDP, VTP and UDLD.
2014-04-14 18:12:46 +08:00
# link-level protocols
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dtp-v DTP.pcap dtp-v.out -v
lacp-ev LACP.pcap lacp-ev.out -e -v
lldp_cdp-ev LLDP_and_CDP.pcap lldp_cdp-ev.out -e -v
cdp-v 3560_CDP.pcap cdp-v.out -v
udld-v UDLD.pcap udld-v.out -v
lldp_mud-v lldp_mudurl.pcap lldp_mudurl-v.out -e -v
lldp_mud-vv lldp_mudurl.pcap lldp_mudurl-vv.out -e -vv
LLDP 8021 link aggregation TLV support As per IEEE std 802.1-AB-2009, 802.3 link aggregation TLV has been deprecated and link aggregation TLV has been added as an 802.1 TLV. Support for this is given.
2020-06-28 13:37:54 +08:00
lldp_8021_linkagg-v lldp_8021_linkagg.pcap lldp_8021_linkagg-v.out -v
lldp_8021_linkagg-vv lldp_8021_linkagg.pcap lldp_8021_linkagg-vv.out -vv
Add a test file for a previous fix Fix was: "UDLD: Fix an infinite loop" (commit 9759a5bc71a30159479f85a2d8aceb1f348ef818)
2015-11-21 04:28:21 +08:00
# fuzzed pcap
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
udld-inf-loop-1-v udld-inf-loop-1.pcapng udld-inf-loop-1-v.out -v
EIGRP: add IPv4 test cases from PacketLife
2014-04-16 16:29:54 +08:00
# EIGRP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
eigrp1-v EIGRP_adjacency.pcap eigrp1-v.out -v
eigrp2-v EIGRP_goodbye.pcap eigrp2-v.out -v
eigrp3-v EIGRP_subnet_down.pcap eigrp3-v.out -v
eigrp4-v EIGRP_subnet_up.pcap eigrp4-v.out -v
Print EIGRP when carried in IPv6 The EIGRP protocol can be carried in IPv4 or IPv6. The basic protocol remains the same. So call the EIGRP dissector for IPv6 packets with IPPROTO_EIGRP.
2017-08-24 03:55:15 +08:00
eigrp5 EIGRP_ipv6.pcap eigrp5.out
add PacketLife captures for HSRP and IS-IS
2014-04-17 18:27:22 +08:00
AoE: add version 1 decoder (GH #298) The sample capture was produced with two Linux hosts (aoetools version 36, kernel module version 85, vblade version 21). One of the hosts exported a 1MB block device containing a freshly created filesystem and the other mounted it, wrote a small file and then unmounted.
2014-05-05 00:48:03 +08:00
# ATA-over-Ethernet tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
aoe_1 AoE_Linux.pcap aoe_1.out
aoe_1-v AoE_Linux.pcap aoe_1-v.out -v
Add support for Generic Network Virtualization Encapsulation (Geneve). Defined in http://tools.ietf.org/html/draft-gross-geneve-02
2014-11-05 10:47:24 +08:00
# Geneve tests
Fix a test name
2019-06-11 18:54:37 +08:00
geneve-vv geneve.pcap geneve-vv.out -vv
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
geneve-vni geneve.pcap geneve-vni.out geneve 0xb
geneve-tcp geneve.pcap geneve-tcp.out "geneve && tcp"
DHCP: decoder for the User Class option (RFC3004)
2014-11-28 18:10:24 +08:00
# DHCP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dhcp-rfc3004 dhcp-rfc3004.pcap dhcp-rfc3004-v.out -v
Update for messages and TLVs defined in RFC4388
2020-09-15 11:16:14 +08:00
dhcp-rfc4388 dhcp-rfc4388.pcap dhcp-rfc4388.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
dhcp-rfc5859 dhcp-rfc5859.pcap dhcp-rfc5859-v.out -v
dhcp-mud dhcp-mud.pcap dhcp-mud.out -vv
Add support for the Marvell Extended Distributed Switch Architecture header This header can be used with Marvell switches to direct packets in/out of a specific port in a tree of interconnected switches. The header uses its own Ethertype of 0xdada. By default, only brief output is printed, showing the switch device, port, and vlan the packet is to/from. However if -e is given, to print the link-level header, all fields are printed.
2015-04-20 04:35:00 +08:00
VXLAN: Add a test case
2016-01-25 16:44:31 +08:00
# VXLAN tests
Update CONTRIBUTING and TESTLIST according to a recent change It's a follow-up to 018b2b8c96. Thanks to Gisle Vanem to spot one of the inconsistencies. Moreover: Remove a useless '-#' option in TESTLIST.
2018-08-10 02:34:56 +08:00
vxlan vxlan.pcap vxlan.out -e
VXLAN: Add a test case
2016-01-25 16:44:31 +08:00
PPTP: Add two tests With and without '-v' option. The capture file comes from the Wireshark menagerie (pptp.cap).
2020-10-31 18:43:24 +08:00
# PPTP tests
pptp pptp.pcap pptp.out
pptp-v pptp.pcap pptp-v.out -v
Add three test cases for already fixed CVEs CVEs by Steffen Bauch CVE-2014-8767: OLSR CVE-2014-8768: Geonet CVE-2014-8769: AODV
2016-02-06 21:49:56 +08:00
# CVEs 2014 malformed packets from Steffen Bauch
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
cve-2014-8767-OLSR cve-2014-8767-OLSR.pcap cve-2014-8767-OLSR.out -v
cve-2014-8768-Geonet cve-2014-8768-Geonet.pcap cve-2014-8768-Geonet.out -v
cve-2014-8769-AODV cve-2014-8769-AODV.pcap cve-2014-8769-AODV.out -v
Add three test cases for already fixed CVEs CVEs by Steffen Bauch CVE-2014-8767: OLSR CVE-2014-8768: Geonet CVE-2014-8769: AODV
2016-02-06 21:49:56 +08:00
test case for cve2015-0261 -- corrupted IPv6 mobility header Author: Michael Richardson <mcr@sandelman.ca>
2015-02-16 10:22:11 +08:00
# bad packets from Kevin Day
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2155 -- fuzz testing on FORCES printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday1 kday1.pcap kday1.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday2 kday2.pcap kday2.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday3 kday3.pcap kday3.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday4 kday4.pcap kday4.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday5 kday5.pcap kday5.out -v
annotate kday packets with CVE numbers
2015-03-10 03:15:31 +08:00
# cve-2015-2154 -- ethernet printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday6 kday6.pcap kday6.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday7 kday7.pcap kday7.out -v
Add test files for a previous fix Fix was: "ISOCLNS: Fix two segmentation faults" (commit 8db57a4b904cf3f7eeb6e4ad66dae6dd8c9cd115) Moreover: group together IS-IS tests. Fix typos.
2015-11-05 18:13:46 +08:00
# cve-2015-2153 -- fuzz testing on TCP printer
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
kday8 kday8.pcap kday8.out -v
test case for cve2015-0261 -- corrupted IPv6 mobility header Author: Michael Richardson <mcr@sandelman.ca>
2015-02-16 10:22:11 +08:00
# bad packets from reversex86.
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
cve2015-0261_01 cve2015-0261-ipv6.pcap cve2015-0261-ipv6.out -v
cve2015-0261_02 cve2015-0261-crash.pcap cve2015-0261-crash.out -v
olsr: add a test to cover a HNA sgw case Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
2015-04-25 01:03:48 +08:00
# OLSRv1 tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
olsrv1_1 OLSRv1_HNA_sgw_1.pcap OLSRv1_HNA_sgw_1.out -v
Add a test that makes unaligned accesses. From GitHub issue #478, in which tcpdump crashed on SPARC due to making an unaligned access.
2015-08-26 02:18:38 +08:00
# tests with unaligned data, to make sure they work on SPARC
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
unaligned-nfs-1 unaligned-nfs-1.pcap unaligned-nfs-1.out -v
Initial commit for support of Type 3 and Type 4 LISP packets. Fixing Travis CI build for LISP commit Adding testcases for lisp notify and register Fixing build warnings Added ND_TCHECK for relevant headers Fixing ND_TCHECK2 issues Adding support for multiple LOC records for same EID entry Fixing review issues, adding detailed tests Adding support for verbose outputs Adding RFC information for UDP PORT defination Removing Spaces in type names Print EID record related flags in verbose mode Using tok2str Fixing -Wpedantic issues Negative testcases, Packet structure comments, verbose mode flag printing Printing Map Version Print auth_data, decouple type and xtr_present extraction, handle malformed packets correctly Tests for latest code changes Printing useful info incase not built with IPv6 support
2015-08-15 00:06:52 +08:00
# LISP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
lisp_eid_notify lisp_eid_notify.pcap lisp_eid_notify.out -v
lisp_eid_register lisp_eid_register.pcap lisp_eid_register.out -v
lisp_ipv6_eid lisp_ipv6.pcap lisp_ipv6.out -v
Add test files for pcap invalid versions
2015-10-11 00:22:22 +08:00
# pcap invalid versions (first: version = 1.4 ; second: version = 2.5)
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
pcap-invalid-version-1 pcap-invalid-version-1.pcap pcap-invalid-version-1.out
pcap-invalid-version-2 pcap-invalid-version-2.pcap pcap-invalid-version-2.out
Add test files for pcap-ng invalid versions
2015-10-11 00:54:46 +08:00
Rename two pcapng test files to .pcapng Moreover: Rename 'pcap-ng' to 'pcapng'.
2018-07-14 21:21:31 +08:00
# pcapng invalid version (first: version = 0.1 ; second: version = 1.1)
pcapng-invalid-vers-1 pcapng-invalid-vers-1.pcapng pcapng-invalid-vers-1.out
pcapng-invalid-vers-2 pcapng-invalid-vers-2.pcapng pcapng-invalid-vers-2.out
Add printing function for Generic Protocol Extension for VXLAN and Network Service Header. This code stands for following internet drafts: - VXLAN GPE: draft-ietf-nvo3-vxlan-gpe-01 - NSH: draft-ietf-sfc-nsh-01
2015-11-16 00:24:19 +08:00
add NSH ethertype https://tools.ietf.org/html/draft-ietf-sfc-nsh-12#section-12.1
2017-03-21 04:07:02 +08:00
# NSH tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
nsh nsh.pcap nsh.out
nsh-vvv nsh.pcap nsh-vvv.out -vvv
nsh-over-vxlan-gpe nsh-over-vxlan-gpe.pcap nsh-over-vxlan-gpe.out
nsh-over-vxlan-gpe-v nsh-over-vxlan-gpe.pcap nsh-over-vxlan-gpe-v.out -v
nsh-over-vxlan-gpe-vv nsh-over-vxlan-gpe.pcap nsh-over-vxlan-gpe-vv.out -vv
nsh-over-vxlan-gpe-vvv nsh-over-vxlan-gpe.pcap nsh-over-vxlan-gpe-vvv.out -vvv
Initial support for the REdis Serialization Protocol known as RESP. This commit adds support for RESP as defined in: http://redis.io/topics/protocol. It also supports inline commands and pipelining. Due to the popularity of RESP, numerous services are emerging that use this protocol. You may decode RESP packets on arbitrary ports using the "-T resp" option. Example captures can be found in tests/resp_*. A simple way to test this parser is to start redis-server and then run redis-cli commands such as "redis-cli set key value". Traditionally, redis-cli monitor is used to debug redis. Unfortunately, the "monitor" command can cause significant load on a redis-server in production. This parser may be used as a non-invasive alternative to redis-cli monitor.
2016-01-13 01:32:55 +08:00
# RESP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
resp_1 resp_1_benchmark.pcap resp_1.out
resp_2 resp_2_inline.pcap resp_2.out
resp_3 resp_3_malicious.pcap resp_3.out
Add test for HNCP.
2016-07-29 03:22:31 +08:00
Add two TFTP tests There is one pcap file with two outputs, with/without the '-T tftp' option.
2019-03-10 23:05:26 +08:00
# TFTP tests
tftp tftp.pcap tftp.out
tftp-T tftp.pcap tftp-T.out -T tftp
WHOIS is a plain text protocol, why not decode it. With txtproto_print() this has become trivial. Add a test.
2017-10-08 01:41:42 +08:00
# WHOIS tests
whois whois.pcap whois.out
whois-v whois.pcap whois-v.out -v
Add test for HNCP.
2016-07-29 03:22:31 +08:00
# HNCP tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
hncp hncp.pcap hncp.out -vvv
BFD: Update to print optional authentication field Moreover: Add test files with 'Simple Password', 'Keyed MD5' and 'Meticulous Keyed SHA1' authentications. Update specification from draft to RFC 5881 for BFD_CONTROL_PORT and BFD_ECHO_PORT in udp.h. Add specification RFC 5881 in print-bfd.c.
2016-08-17 17:04:27 +08:00
# BFD tests with authentication fields
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
bfd-raw-auth-simple bfd-raw-auth-simple.pcap bfd-raw-auth-simple.out
bfd-raw-auth-simple-v bfd-raw-auth-simple.pcap bfd-raw-auth-simple-v.out -v
bfd-raw-auth-md5 bfd-raw-auth-md5.pcap bfd-raw-auth-md5.out
bfd-raw-auth-md5-v bfd-raw-auth-md5.pcap bfd-raw-auth-md5-v.out -v
bfd-raw-auth-sha1 bfd-raw-auth-sha1.pcap bfd-raw-auth-sha1.out
bfd-raw-auth-sha1-v bfd-raw-auth-sha1.pcap bfd-raw-auth-sha1-v.out -v
CVE-2016-7974/Check before fetching the IP protocol version. Fixes a heap overflow found with American Fuzzy Lop by Hanno Böck.
2015-07-04 02:19:17 +08:00
# bad packets from Hanno Böck
Don't try to run the DLT_RAW test on OpenBSD. With this change tcpdump passes "make check" on OpenBSD 6.8 AMD64.
2021-03-17 19:49:51 +08:00
# heap-overflow-1 is in non-bsd.tests
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
heap-overflow-2 heap-overflow-2.pcap heap-overflow-2.out -v
heapoverflow-atalk_print heapoverflow-atalk_print.pcap heapoverflow-atalk_print.out -v
Rename a test. It's about the AppleTalk protocol
2021-07-11 02:55:10 +08:00
heapoverflow-atalk_2 heapoverflow-atalk_2.pcap heapoverflow-atalk_2.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
heapoverflow-ppp_hdlc_if_print heapoverflow-ppp_hdlc_if_print.pcap heapoverflow-ppp_hdlc_if_print.out -v
heapoverflow-q933_printq heapoverflow-q933_printq.pcap heapoverflow-q933_printq.out -v
heapoverflow-sl_if_print heapoverflow-sl_if_print.pcap heapoverflow-sl_if_print.out -v
IPv4/IPv6 demux: Rename a printer Rename ip_print_demux() to ip_demux_print(), with _print suffix like in most similar cases. Moreover: Rename a test.
2020-03-08 20:48:42 +08:00
heapoverflow-ip_demux_print heapoverflow-ip_demux_print.pcap heapoverflow-ip_demux_print.out -v
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
heapoverflow-in_checksum heapoverflow-in_checksum.pcap heapoverflow-in_checksum.out -v
heapoverflow-tcp_print heapoverflow-tcp_print.pcap heapoverflow-tcp_print.out -v
gre-heapoverflow-1 gre-heapoverflow-1.pcap gre-heapoverflow-1.out -v
gre-heapoverflow-2 gre-heapoverflow-2.pcap gre-heapoverflow-2.out -v
calm-fast-mac-lookup-heapoverflow calm-fast-mac-lookup-heapoverflow.pcap calm-fast-mac-lookup-heapoverflow.out -v
geonet-mac-lookup-heapoverflow geonet-mac-lookup-heapoverflow.pcap geonet-mac-lookup-heapoverflow.out -v
radiotap-heapoverflow radiotap-heapoverflow.pcap radiotap-heapoverflow.out -v
isoclns-heapoverflow isoclns-heapoverflow.pcap isoclns-heapoverflow.out -v
tcp-auth-heapoverflow tcp-auth-heapoverflow.pcap tcp-auth-heapoverflow.out -v
frf15-heapoverflow frf15-heapoverflow.pcap frf15-heapoverflow.out -v
atm-oam-heapoverflow atm-oam-heapoverflow.pcap atm-oam-heapoverflow.out -v
tcp_header_heapoverflow tcp_header_heapoverflow.pcap tcp_header_heapoverflow.out -v
ipcomp-heapoverflow ipcomp-heapoverflow.pcap ipcomp-heapoverflow.out -v
llc-xid-heapoverflow llc-xid-heapoverflow.pcap llc-xid-heapoverflow.out -v
udp-length-heapoverflow udp-length-heapoverflow.pcap udp-length-heapoverflow.out -v
aarp-heapoverflow-1 aarp-heapoverflow-1.pcap aarp-heapoverflow-1.out -v
aarp-heapoverflow-2 aarp-heapoverflow-2.pcap aarp-heapoverflow-2.out -v
mpls-label-heapoverflow mpls-label-heapoverflow.pcap mpls-label-heapoverflow.out -v
bad-ipv4-version-pgm-heapoverflow bad-ipv4-version-pgm-heapoverflow.pcap bad-ipv4-version-pgm-heapoverflow.out -v
stp-heapoverflow-1 stp-heapoverflow-1.pcap stp-heapoverflow-1.out -v
stp-heapoverflow-2 stp-heapoverflow-2.pcap stp-heapoverflow-2.out -v
stp-heapoverflow-3 stp-heapoverflow-3.pcap stp-heapoverflow-3.out -v
stp-heapoverflow-4 stp-heapoverflow-4.pcap stp-heapoverflow-4.out -v
arp-too-long-tha arp-too-long-tha.pcap arp-too-long-tha.out -v
juniper_header-heapoverflow juniper_header-heapoverflow.pcap juniper_header-heapoverflow.out -v
tftp-heapoverflow tftp-heapoverflow.pcap tftp-heapoverflow.out -v
relts-0x80000000 relts-0x80000000.pcap relts-0x80000000.out -v
CVE-2016-7934,7935,7937/RTP: Fix two segmentation faults Add two test files for these fixes. Add more bounds checks in VAT, RTP and RTCP printers. Moreover: Add and use *_tstr[] strings. Update the output of a test accordingly. Remove spaces before tabs.
2015-11-18 00:12:22 +08:00
CVE-2017-5204/IPv6: fix header printing Add a few checks to ip6_print() to make it stop decoding the IPv6 headers immediately when the header-specific functions signal an error condition. Without this it tried to fetch the next header selector for the next round regardless and could run outside of the allocated packet space on a specially crafted IPv6 packet. Brian Carpenter has demonstrated this for the Hop-by-Hop Options header. Fix that specific case and also the Destination Options and Fragment header processing as those use the same logic.
2017-01-09 09:01:46 +08:00
# bad packets from Brian Carpenter
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
ipv6hdr-heapoverflow ipv6hdr-heapoverflow.pcap ipv6hdr-heapoverflow.out
ipv6hdr-heapoverflow-v ipv6hdr-heapoverflow.pcap ipv6hdr-heapoverflow-v.out -v
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
otv-heapoverflow-1 otv-heapoverflow-1.pcap otv-heapoverflow-1.out
otv-heapoverflow-2 otv-heapoverflow-2.pcap otv-heapoverflow-2.out
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
q933-heapoverflow-2 q933-heapoverflow-2.pcap q933-heapoverflow-2.out
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
atm-heapoverflow atm-heapoverflow.pcap atm-heapoverflow.out -e
CVE-2017-12985/IPv6: Check for print routines returning -1 when running past the end. rt6_print(), ah_print(), and esp_print() return -1 if they run up against the end of the packet while dissecting; if that happens, stop dissecting, don't try to fetch the next header value, because 1) *it* might be past the end of the packet and 2) we won't be using it in any case, as we'll be exiting the loop. Also, change mobility_print() to return -1 if it runs up against the end of the packet, and stop dissecting if it does so. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add tests using the capture files supplied by the reporter(s).
2017-02-04 19:13:18 +08:00
ipv6-next-header-oobr-1 ipv6-next-header-oobr-1.pcap ipv6-next-header-oobr-1.out
ipv6-next-header-oobr-2 ipv6-next-header-oobr-2.pcap ipv6-next-header-oobr-2.out
CVE-2017-12986/IPv6 R.H.: Update to reflect the actual IPv6 RFC. In RFC 1883, the Type 0 routing header had a 1-byte reserved field and a 3-byte strict/loose bit map; in RFC 2460, that changed to a 4-byte reserved field. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter (by making an ND_TCHECK() call check for the presence in the captured data of all 4 bytes of the reserved field; we were printing it as a 4-byte field, so we needed to check for them). Add a test using the capture file supplied by the reporter(s).
2017-02-05 06:06:23 +08:00
ipv6-rthdr-oobr ipv6-rthdr-oobr.pcap ipv6-rthdr-oobr.out
CVE-2017-12987/IEEE 802.11: Fix processing of TIM IE. The arguments to memcpy() were completely wrong. This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by Brian 'geeknik' Carpenter.
2017-02-07 03:24:42 +08:00
ieee802.11_tim_ie_oobr ieee802.11_tim_ie_oobr.pcap ieee802.11_tim_ie_oobr.out
CVE-2017-12899/DECnet: Add another test. This is from Brian Carpenter for the print-decnet bug fix.
2017-03-06 03:28:45 +08:00
decnet-shorthdr-oobr decnet-shorthdr-oobr.pcap decnet-shorthdr-oobr.out
CVE-2017-12896/ISAKMP: Add another test. This is from Brian Carpenter for the print-isakmp bug fix.
2017-03-06 05:00:43 +08:00
isakmp-3948-oobr-2 isakmp-3948-oobr-2.pcap isakmp-3948-oobr-2.out
CVE-2017-13008/IEEE 802.11: Fix TIM bitmap copy to copy from p + offset. offset has already been advanced to point to the bitmap; we shouldn't add the amount to advance again. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add a test using the capture file supplied by the reporter(s). While we're at it, remove some redundant tests - we've already checked, before the case statement, whether we have captured the entire information element and whether the entire information element is present in the on-the-wire packet; in the cases for particular IEs, we only need to make sure we don't go past the end of the IE.
2017-03-07 01:42:49 +08:00
ieee802.11_rates_oobr ieee802.11_rates_oobr.pcap ieee802.11_rates_oobr.out
CVE-2017-13009/IPv6 mobility: Add a bounds check. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add a test using the capture file supplied by the reporter(s). While we're at it: Add a comment giving the RFC for IPv6 mobility headers. Clean up some bounds checks to make it clearer what they're checking, by matching the subsequent EXTRACT_ calls or memcpy. For the binding update, if none of the flag bits are set, don't check the individual flag bits.
2017-03-07 02:13:22 +08:00
ipv6-mobility-header-oobr ipv6-mobility-header-oobr.pcap ipv6-mobility-header-oobr.out
CVE-2017-13010/BEEP: Do bounds checking when comparing strings. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add a test using the capture file supplied by the reporter(s).
2017-03-07 12:12:33 +08:00
beep-oobr beep-oobr.pcap beep-oobr.out
CVE-2017-5204/IPv6: fix header printing Add a few checks to ip6_print() to make it stop decoding the IPv6 headers immediately when the header-specific functions signal an error condition. Without this it tried to fetch the next header selector for the next round regardless and could run outside of the allocated packet space on a specially crafted IPv6 packet. Brian Carpenter has demonstrated this for the Hop-by-Hop Options header. Fix that specific case and also the Destination Options and Fragment header processing as those use the same logic.
2017-01-09 09:01:46 +08:00
CVE-2017-5483/SNMP: improve ASN.1 bounds checks Kamil Frankowicz had found that truncated BE_STR and BE_SEQ ASN.1 elements could lead to an overread, from the source code it looked like other ids could have this problem too. Move the checks introduced in commit 72e501f out of the switch blocks to cover all ids by default. This fixes GH#559 and GH#566.
2017-01-12 21:47:50 +08:00
# bad packets from Kamil Frankowicz
Force -t on in TESTonce. These tests may be performed in an arbitrary time zone, so they *must* run tcpdump with an option to print the time in a time-zone-independent fashion. Force -t on in TESTonce, just as we do for -n, and remove it from TESTLIST and the conditional test scripts.
2017-02-08 02:48:24 +08:00
snmp-heapoverflow-1 snmp-heapoverflow-1.pcap snmp-heapoverflow-1.out
snmp-heapoverflow-2 snmp-heapoverflow-2.pcap snmp-heapoverflow-2.out
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
isoclns-heapoverflow-2 isoclns-heapoverflow-2.pcap isoclns-heapoverflow-2.out -e
isoclns-heapoverflow-3 isoclns-heapoverflow-3.pcap isoclns-heapoverflow-3.out -e
CVE-2017-11108/Fix bounds checking for STP. Check whether the flags are in the captured data before printing them in an MSTP BPDU. Check whether V4 length is in the captured data before fetching it. This fixes a vulnerability discovered by Kamil Frankowicz. Include a test for the "check whether the V4 length is..." fix, using the capture supplied by Kamil Frankowicz.
2017-02-04 07:34:18 +08:00
stp-v4-length-sigsegv stp-v4-length-sigsegv.pcap stp-v4-length-sigsegv.out
CVE-2017-11542/PIMv1: Add a bounds check. This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-08 03:10:04 +08:00
hoobr_pimv1 hoobr_pimv1.pcap hoobr_pimv1.out
CVE-2017-11541: In safeputs(), check the length before checking for a NUL terminator. safeputs() doesn't do packet bounds checking of its own; it assumes that the caller has checked the availability in the packet data of all maxlen bytes of data. This means we should check that we're within the specified limit before looking at the byte. This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-08 03:40:36 +08:00
hoobr_safeputs hoobr_safeputs.pcap hoobr_safeputs.out
CVE-2017-12896/ISAKMP: Do bounds checks in isakmp_rfc3948_print(). This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-04 03:15:34 +08:00
isakmp-rfc3948-oobr isakmp-rfc3948-oobr.pcap isakmp-rfc3948-oobr.out
CVE-2017-12897/ISO CLNS: Use ND_TTEST() for the bounds checks in isoclns_print(). This fixes a buffer over-read discovered by Kamil Frankowicz. Don't pass the remaining caplen - that's too hard to get right, and we were getting it wrong in at least one case; just use ND_TTEST(). Add a test using the capture file supplied by the reporter(s).
2017-02-04 04:24:14 +08:00
isoclns-oobr isoclns-oobr.pcap isoclns-oobr.out
CVE-2017-12898/NFS: Fix bounds checking. Fix the bounds checking for the NFSv3 WRITE procedure to check whether the length of the opaque data being written is present in the captured data, not just whether the byte count is present in the captured data. furthest forward in the packet, not the item before it. (This also lets us eliminate the check for the "stable" argument being present in the captured data; rewrite the code to print that to make it a bit clearer.) Check that the entire ar_stat field is present in the capture. Note that parse_wcc_attr() is called after we've already checked whether the wcc_data is present. Check before fetching the "access" part of the NFSv3 ACCESS results. This fixes a buffer over-read discovered by Kamil Frankowicz. Include a test for the "check before fetching the "access" part..." fix, using the capture supplied by the reporter(s).
2017-02-04 07:14:51 +08:00
nfs-attr-oobr nfs-attr-oobr.pcap nfs-attr-oobr.out
CVE-2017-12899/DECnet: Fix bounds checking. If we're skipping over padding before the *real* flags, check whether the real flags are in the captured data before fetching it. This fixes a buffer over-read discovered by Kamil Frankowicz. Note one place where we don't need to do bounds checking as it's already been done. Add a test using the capture file supplied by the reporter(s).
2017-02-04 07:52:24 +08:00
decnet-oobr decnet-oobr.pcap decnet-oobr.out
CVE-2017-12987/Another test for the TIM IE bug, from Kamil Frankowicz.
2017-02-07 08:16:24 +08:00
oobr_parse_elements oobr_parse_elements.pcap oobr_parse_elements.out
CVE-2017-12992/RIPng: Clean up bounds checking. Do bounds checking as we access items. Scan the list of netinfo6 entries based on the supplied packet length, without taking the captured length into account; let the aforementioned bounds checking handle that. This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-07 19:03:34 +08:00
hoobr_ripng_print hoobr_ripng_print.pcap hoobr_ripng_print.out
CVE-2017-12993/Juniper: Add more bounds checks. This fixes a buffer over-read discovered by Kamil Frankowicz. Add tests using the capture files supplied by the reporter(s).
2017-02-08 02:33:07 +08:00
hoobr_juniper hoobr_juniper.pcap hoobr_juniper.out
hoobr_juniper2 hoobr_juniper2.pcap hoobr_juniper2.out
hoobr_juniper3 hoobr_juniper3.pcap hoobr_juniper3.out
CVE-2017-13004/Juniper: Add a capture file. File from Kamil Frankowicz testing an existing fix. (Same problem, and same fix, as the recent Juniper fixes.)
2017-02-22 17:24:45 +08:00
hoobr_juniper4 hoobr_juniper4.pcap hoobr_juniper4.out
CVE-2017-12902/Zephyr: Add an additional test. File from Kamil Frankowicz.
2017-02-08 02:55:59 +08:00
hoobr_parse_field hoobr_parse_field.pcap hoobr_parse_field.out
CVE-2017-13687/CHDLC: Add a test. This is for the fix made a few commits before, which had no tests. Add a test using the capture file supplied by Kamil Frankowicz.
2017-02-09 02:54:27 +08:00
hoobr_chdlc_print hoobr_chdlc_print.pcap hoobr_chdlc_print.out
Further fix the fix to CVE-2017-5485. 1) Take the length of the NSAP into account. Otherwise, if, in our search of the hash table, we come across a byte string that's shorter than the string we're looking for, we'll search past the end of the string in the hash table. 2) The first byte of the byte string in the table is the length of the NSAP, with the byte *after* that being the first byte of the NSAP, but the first byte of the byte string passed into lookup_nsap() is the first byte of the NSAP, with the length passed in as a separate argument. Do the comparison correctly. This fixes a vulnerability discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s). While we're at it, clean up the fix to lookup_bytestring(): 1) Get rid of an unused structure member and an unused #define. 2) Get rid of an incorrect "+ 1" when calculating the size of the byte array to allocate - that was left over from the NSAP table, where the length was guaranteed to fit in 1 byte and we used the first byte of the array to hold the length of the rest of the array.
2017-02-11 11:52:29 +08:00
hoobr_lookup_nsap hoobr_lookup_nsap.pcap hoobr_lookup_nsap.out
CVE-2017-13725/IPv6 R.H.: Add a capture file. This is from Kamil Frankowicz testing an existing fix. This is a test for the print-rt6.c fix I made after inspecting the code.
2017-02-15 16:37:11 +08:00
hoobr_rt6_print hoobr_rt6_print.pcap hoobr_rt6_print.out
CVE-2017-13001/NFS: Don't copy more data than is in the file handle. Also, put the buffer on the stack; no reason to make it static. (65 bytes isn't a lot.) This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-20 05:56:12 +08:00
hoobr_nfs_printfh hoobr_nfs_printfh.pcap hoobr_nfs_printfh.out
CVE-2017-13002/AODV: Add some missing bounds checks. In aodv_extension() do a bounds check on the extension header before we look at it. This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s). While we're at it, add the RFC number, and check the validity of the length for the Hello extension.
2017-02-20 06:19:32 +08:00
hoobr_aodv_extension hoobr_aodv_extension.pcap hoobr_aodv_extension.out
CVE-2017-13005/NFS: Add two bounds checks before fetching data This fixes a buffer over-read discovered by Kamil Frankowicz. Add a test using the capture file supplied by the reporter(s).
2017-02-23 23:50:18 +08:00
hoobr_nfs_xid_map_enter hoobr_nfs_xid_map_enter.pcap hoobr_nfs_xid_map_enter.out
Add a test from Kamil Frankowicz for the BFD dissector.
2018-07-10 16:07:25 +08:00
hoobr_bfd_print hoobr_bfd_print.pcap hoobr_bfd_print.out
CVE-2017-5483/SNMP: improve ASN.1 bounds checks Kamil Frankowicz had found that truncated BE_STR and BE_SEQ ASN.1 elements could lead to an overread, from the source code it looked like other ids could have this problem too. Move the checks introduced in commit 72e501f out of the switch blocks to cover all ids by default. This fixes GH#559 and GH#566.
2017-01-12 21:47:50 +08:00
CVE-2017-11543/Make sure the SLIP direction octet is valid. Report if it's not, and don't use it as an out-of-bounds index into an array. This fixes a buffer overflow discovered by Wilfried Kirsch. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-18 03:49:04 +08:00
# bad packets from Wilfried Kirsch
slip-bad-direction slip-bad-direction.pcap slip-bad-direction.out -ve
Add test files for a previous fix Fix was: "SLIP: Add some bounds checks" (commit bbe15da782ef74dd29feea6e3ea0f2f7d47b4697) The pcap files were updated to avoid pcap_loop() error messages.
2020-04-30 16:53:18 +08:00
# bad packets from GitHub issues #676 and #677
slip-compressed_sl_print-oobr slip-compressed_sl_print-oobr.pcap slip-compressed_sl_print-oobr.out -e
slip-sliplink_print-oobr slip-sliplink_print-oobr.pcap slip-sliplink_print-oobr.out -e
CVE-2017-12893/SMB/CIFS: Add a bounds check in name_len(). After we advance the pointer by the length value in the buffer, make sure it points to something in the captured data. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-04 08:56:57 +08:00
# bad packets from Otto Airamo and Antti Levomäki
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# one more in smb.tests
CVE-2017-12894/In lookup_bytestring(), take the length of the byte string into account. Otherwise, if, in our search of the hash table, we come across a byte string that's shorter than the string we're looking for, we'll search past the end of the string in the hash table. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-04 10:54:00 +08:00
arp-oobr arp-oobr.pcap arp-oobr.out -vvv -e
CVE-2017-12895/ICMP: Check the availability of data before checksumming it. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add tests using the capture files supplied by the reporter(s).
2017-02-04 12:02:45 +08:00
icmp-cksum-oobr-1 icmp-cksum-oobr-1.pcap icmp-cksum-oobr-1.out -vvv -e
icmp-cksum-oobr-2 icmp-cksum-oobr-2.pcap icmp-cksum-oobr-2.out -vvv -e
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
icmp-cksum-oobr-3 icmp-cksum-oobr-3.pcapng icmp-cksum-oobr-3.out -vvv -e
icmp-cksum-oobr-4 icmp-cksum-oobr-4.pcapng icmp-cksum-oobr-4.out -vvv -e
CVE-2017-12900/Properly terminate all struct tok arrays. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add tests using the capture files supplied by the reporter(s).
2017-02-04 12:43:16 +08:00
tok2str-oobr-1 tok2str-oobr-1.pcap tok2str-oobr-1.out -vvv -e
tok2str-oobr-2 tok2str-oobr-2.pcap tok2str-oobr-2.out -vvv -e
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
#eigrp-tlv-oobr
CVE-2017-12902/Zephyr: Fix bounds checking. Use ND_TTEST() rather than comparing against ndo->ndo_snapend ourselves; it's easy to get the tests wrong. Check for running out of packet data before checking for running out of captured data, and distinguish between running out of packet data (which might just mean "no more strings") and running out of captured data (which means "truncated"). This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-05 10:38:47 +08:00
zephyr-oobr zephyr-oobr.pcap zephyr-oobr.out -vvv -e
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
isakmp-no-none-np isakmp-no-none-np.pcapng isakmp-no-none-np.out -vvv -e
CVE-2017-12988/TELNET: Add a missing bounds check. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-07 07:13:05 +08:00
telnet-iac-check-oobr telnet-iac-check-oobr.pcap telnet-iac-check-oobr.out -vvv -e
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
resp_4_infiniteloop resp_4_infiniteloop.pcapng resp_4_infiniteloop.out -vvv -e
CVE-2017-12995/Check for DNS compression pointers that don't point backwards. This is what BIND 9.11.0-P2 does; it not only detects pointers that loop, as "point backwards" means "point before anything we've processed so far, including what we're processing right now", so the pointer can't point to itself (as that's what we're processing right now). This fixes an infinite loop discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s). Also, add some infinite-pointer-loop captures. More checks should be done. We might, for example, want to make sure the upper 2 bits of the label length/pointer byte are 00 or 11, and that if we encounter a pointer and jump backwards to what we think is a label the label ends before the beginning of the last label we processed, to make sure the pointer doesn't point backwards into the *middle* of a label, and also make sure the entire name is <= 255 bytes long.
2017-02-11 10:52:17 +08:00
dns_fwdptr dns_fwdptr.pcap dns_fwdptr.out -vvv -e
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# isis-areaaddr-oobr-1
# isis-areaaddr-oobr-2
CVE-2017-12998/IS-IS: Check for 2 bytes if we're going to fetch 2 bytes. Probably a copy-and-pasteo. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-14 02:38:04 +08:00
isis-extd-ipreach-oobr isis-extd-ipreach-oobr.pcap isis-extd-ipreach-oobr.out -vvv -e
CVE-2017-12997/LLDP: Don't use an 8-bit loop counter. If you have a for (i = 0; i < N; i++) loop, you'd better make sure that i is big enough to hold N - not N-1, N. The TLV length here is 9 bits long, not 8 bits long, so an 8-bit loop counter will overflow and you can loop infinitely. This fixes an infinite loop discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add tests using the capture files supplied by the reporter(s). Clean up the output a bit while we're at it.
2017-02-14 03:11:42 +08:00
lldp-infinite-loop-1 lldp-infinite-loop-1.pcap lldp-infinite-loop-1.out -vvv -e
lldp-infinite-loop-2 lldp-infinite-loop-2.pcap lldp-infinite-loop-2.out -vvv -e
CVE-2017-12996/PIMv2: Make sure PIM TLVs have the right length. We do bounds checks based on the TLV length, so if the TLV's length is too short, and we don't check for that, we could end up fetching data past the end of the TLV - including past the length of the captured data in the packet. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add tests using the capture files supplied by the reporter(s).
2017-02-14 03:31:25 +08:00
pimv2-oobr-1 pimv2-oobr-1.pcap pimv2-oobr-1.out -vvv -e
pimv2-oobr-2 pimv2-oobr-2.pcap pimv2-oobr-2.out -vvv -e
pimv2-oobr-3 pimv2-oobr-3.pcap pimv2-oobr-3.out -vvv -e
pimv2-oobr-4 pimv2-oobr-4.pcap pimv2-oobr-4.out -vvv -e
CVE-2017-13000/IEEE 802.15.4: Add more bounds checks. While we're at it, add a bunch of macros for the frame control field's subfields, have the reserved frame types show the frame type value, use the same code path for processing source and destination addresses regardless of whether -v was specified (just leave out the addresses in non-verbose mode), and return the header length in all cases. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add tests using the capture files supplied by the reporter(s).
2017-02-18 09:43:10 +08:00
802_15_4-oobr-1 802_15_4-oobr-1.pcap 802_15_4-oobr-1.out -vvv -e
802_15_4-oobr-2 802_15_4-oobr-2.pcap 802_15_4-oobr-2.out -vvv -e
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced by previous fix. We've already advanced the pointer past the PAN ID, if present; it now points to the address, so don't add 2 to it. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-22 05:40:19 +08:00
802_15_4-data 802_15_4-data.pcap 802_15_4-data.out -vvv -e
CVE-2017-13000/IEEE 802.15.4: Fix bug introduced two fixes prior. We've already advanced the pointer past the PAN ID, if present; it now points to the address, so don't add 2 to it. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-22 06:10:15 +08:00
802_15_4_beacon 802_15_4_beacon.pcap 802_15_4_beacon.out -vvv -e
CVE-2017-13003/Clean up the LMP dissector. Do a lot more bounds and length checks. Add a EXTRACT_8BITS() macro, for completeness, and so as not to confuse people into thinking that, to fetch a 1-byte value from a packet, they need to use EXTRACT_16BITS() to fetch a 2-byte value and then use shifting and masking to extract the desired byte. Use that rather than using EXTRACT_16BITS() to fetch a 2-byte value and then shifting and masking to extract the desired byte. Don't treat IPv4 addresses and unnumbered interface IDs the same; the first should be printed as an IPv4 address but the latter should just be printed as numbers. Handle IPv6 addresses in more object types while we're at it. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-20 13:13:25 +08:00
lmpv1_busyloop lmpv1_busyloop.pcap lmpv1_busyloop.out -vvv -e
Rename some tests They were about 'out of bounds read'.
2019-06-24 01:07:25 +08:00
juniper_atm1_oobr juniper_atm1_oobr.pcap juniper_atm1_oobr.out -vvv -e
juniper_es_oobr juniper_es_oobr.pcap juniper_es_oobr.out -vvv -e
CVE-2017-12893/SMB/CIFS: Add a bounds check in name_len(). After we advance the pointer by the length value in the buffer, make sure it points to something in the captured data. This fixes a buffer over-read discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s).
2017-02-04 08:56:57 +08:00
CVE-2017-13006/L2TP: Check whether an AVP's content exceeds the AVP length. It's not good enough to check whether all the data specified by the AVP length was captured - you also have to check whether that length is large enough for all the required data in the AVP. This fixes a buffer over-read discovered by Yannick Formaggio. Add a test using the capture file supplied by the reporter(s).
2017-03-06 11:56:20 +08:00
# bad packets from Yannick Formaggio
l2tp-avp-overflow l2tp-avp-overflow.pcap l2tp-avp-overflow.out -v
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# pktap-heap-overflow
CVE-2017-13014/White Board: Do more bounds checks. This fixes a buffer over-read discovered by Yannick Formaggio. Add a test using the capture file supplied by the reporter(s). While we're at it, print a truncation error if the packets are truncated, rather than just, in effect, ignoring the result of the routines that print particular packet types.
2017-03-17 02:25:40 +08:00
wb-oobr wb-oobr.pcap wb-oobr.out -v
CVE-2017-13006/L2TP: Check whether an AVP's content exceeds the AVP length. It's not good enough to check whether all the data specified by the AVP length was captured - you also have to check whether that length is large enough for all the required data in the AVP. This fixes a buffer over-read discovered by Yannick Formaggio. Add a test using the capture file supplied by the reporter(s).
2017-03-06 11:56:20 +08:00
CVE-2017-13011/Properly check for buffer overflow in bittok2str_internal(). Also, make the buffer bigger. This fixes a buffer overflow discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-16 03:12:21 +08:00
# bad packets from Bhargava Shastry
lldp_asan lldp_asan.pcap lldp_asan.out -v
CVE-2017-13012/ICMP: Add a missing bounds check. Check before fetching the length from the included packet's IPv4 header. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-16 14:45:38 +08:00
extract_read2_asan extract_read2_asan.pcap extract_read2_asan.out -v
CVE-2017-13013/ARP: Fix printing of ARP protocol addresses. If the protocol type isn't ETHERTYPE_IP or ETHERTYPE_TRAIL, or if the protocol address length isn't 4, don't print the address as an IPv4 address. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Update another test file's tcpdump output to reflect this change.
2017-03-17 01:54:31 +08:00
getname_2_read4_asan getname_2_read4_asan.pcap getname_2_read4_asan.out -v
CVE-2017-13015/EAP: Add more bounds checks. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-17 03:02:20 +08:00
eap_extract_read2_asan eap_extract_read2_asan.pcap eap_extract_read2_asan.out -v
CVE-2017-13016/ES-IS: Fix printing of addresses in RD PDUs. Always print the SNPA, and flag it as such; only print it as a MAC address if it's 6 bytes long. Identify the NET as such. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s), modified so the capture files won't be rejected as an invalid capture.
2017-03-22 10:30:48 +08:00
esis_snpa_asan esis_snpa_asan.pcap esis_snpa_asan.out -v
esis_snpa_asan-2 esis_snpa_asan-2.pcap esis_snpa_asan-2.out -v
esis_snpa_asan-3 esis_snpa_asan-3.pcap esis_snpa_asan-3.out -v
esis_snpa_asan-4 esis_snpa_asan-4.pcap esis_snpa_asan-4.out -v
esis_snpa_asan-5 esis_snpa_asan-5.pcap esis_snpa_asan-5.out -v
CVE-2017-13017/DHCPv6: Add a missing option length check. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 10:40:51 +08:00
dhcp6_reconf_asan dhcp6_reconf_asan.pcap dhcp6_reconf_asan.out -v
CVE-2017-13018/PGM: Add a missing bounds check. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 10:49:28 +08:00
pgm_opts_asan pgm_opts_asan.pcap pgm_opts_asan.out -v
CVE-2017-13019: Clean up PGM option processing. Add #defines for option lengths or the lengths of the fixed-length part of the option. Sometimes those #defines differ from what was there before; what was there before was wrong, probably because the option lengths given in RFC 3208 were sometimes wrong - some lengths included the length of the option header, some lengths didn't. Don't use "sizeof(uintXX_t)" for sizes in the packet, just use the number of bytes directly. For the options that include an IPv4 or IPv6 address, check the option length against the length of what precedes the address before fetching any of that data. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 12:49:45 +08:00
pgm_opts_asan_2 pgm_opts_asan_2.pcap pgm_opts_asan_2.out -v
PGM: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-23 06:03:51 +08:00
pgm_opts_asan_3 pgm_opts_asan_3.pcap pgm_opts_asan_3.out -v
CVE-2017-13034/PGM: Add a bounds check. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Move a return to make the code a bit cleaner (i.e., make it more obvious that if we don't have enough of the PGM header, we just print the source and destination IP addresses, mark it as incomplete PGM, and don't try to look at the PGM header).
2017-03-24 05:11:30 +08:00
pgm_group_addr_asan pgm_group_addr_asan.pcap pgm_group_addr_asan.out -v
CVE-2017-13020/VTP: Add some missing bounds checks. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 13:02:41 +08:00
vtp_asan vtp_asan.pcap vtp_asan.out -v
CVE-2017-13020/VTP: Add another test. A capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-23 07:02:48 +08:00
vtp_asan-2 vtp_asan-2.pcap vtp_asan-2.out -v
CVE-2017-13033/VTP: Add more bound and length checks. This fixes a buffer over-read discovered by Bhargava Shastry. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Update another VTP test's .out file for this change. Don't treate a TLV type or length of 0 as invalid; a type of 0 should just be reported as illegal if that type isn't used, and the length is the length of the *value*, not the length of the entire TLV, so if it's zero there won't be an infinite loop. (It's still not *legal*, as the values of all the TLVs we handle are 1 16-bit word long; we added a check for that.) Update some comments while we're at it, to give a new URL for one Cisco page and a non-Cisco URL for another former Cisco page (Cisco's UniverCD pages don't seem to be available any more, and Cisco's robots.txt file didn't allow the Wayback Machine to archive it).
2017-03-24 04:30:56 +08:00
vtp_asan-3 vtp_asan-3.pcap vtp_asan-3.out -v
CVE-2017-13021/ICMP6: Add a missing bounds check. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 14:01:44 +08:00
icmp6_mobileprefix_asan icmp6_mobileprefix_asan.pcap icmp6_mobileprefix_asan.out -v
CVE-2017-13022/IP: Add bounds checks to ip_printroute(). This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-22 14:07:17 +08:00
ip_printroute_asan ip_printroute_asan.pcap ip_printroute_asan.out -v
CVE-2017-13023/IPv6 mobility: Add a bounds check before fetching data This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't cause 'tcpdump: pcap_loop: truncated dump file'
2017-03-22 23:08:25 +08:00
mobility_opt_asan mobility_opt_asan.pcap mobility_opt_asan.out -v
CVE-2017-13024/IPv6 mobility: Add a bounds check before fetching data This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't cause 'tcpdump: pcap_loop: truncated dump file'
2017-03-22 23:27:48 +08:00
mobility_opt_asan_2 mobility_opt_asan_2.pcap mobility_opt_asan_2.out -v
CVE-2017-13025/IPv6 mobility: Add a bounds check before fetching data This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't cause 'tcpdump: pcap_loop: truncated dump file'
2017-03-23 00:07:47 +08:00
mobility_opt_asan_3 mobility_opt_asan_3.pcap mobility_opt_asan_3.out -v
CVE-2017-13024/IPv6 mobility: Add another test for a previous bounds check fix This is another capture file supplied by Bhargava Shastry, modified so the capture file won't cause 'tcpdump: pcap_loop: truncated dump file'
2017-03-23 01:03:24 +08:00
mobility_opt_asan_4 mobility_opt_asan_4.pcap mobility_opt_asan_4.out -v
IPv6 mobility: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-23 05:42:50 +08:00
mobility_opt_asan_5 mobility_opt_asan_5.pcap mobility_opt_asan_5.out -v
IPv6 mobility: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-23 07:07:50 +08:00
mobility_opt_asan_6 mobility_opt_asan_6.pcap mobility_opt_asan_6.out -v
IPv6 mobility: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-24 04:52:40 +08:00
mobility_opt_asan_7 mobility_opt_asan_7.pcap mobility_opt_asan_7.out -v
IPv6 mobility: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-24 10:11:31 +08:00
mobility_opt_asan_8 mobility_opt_asan_8.pcap mobility_opt_asan_8.out -v
CVE-2017-13026/IS-IS: Clean up processing of subTLVs. Add bounds checks, do a common check to make sure we captured the entire subTLV, add checks to make sure the subTLV fits within the TLV. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s), modified so the capture files won't be rejected as an invalid capture. Update existing tests for changes to IS-IS dissector.
2017-03-23 01:59:47 +08:00
isis_stlv_asan isis_stlv_asan.pcap isis_stlv_asan.out -v
isis_stlv_asan-2 isis_stlv_asan-2.pcap isis_stlv_asan-2.out -v
isis_stlv_asan-3 isis_stlv_asan-3.pcap isis_stlv_asan-3.out -v
isis_stlv_asan-4 isis_stlv_asan-4.pcap isis_stlv_asan-4.out -v
CVE-2017-13035/Properly handle IS-IS IDs shorter than a system ID (MAC address). Some of them are variable-length, with a field giving the total length, and therefore they can be shorter than 6 octets. If one is, don't run past the end. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-24 05:37:56 +08:00
isis_sysid_asan isis_sysid_asan.pcap isis_sysid_asan.out -v
CVE-2017-13027/LLDP: Fix a bounds check. The total length of the OID is the OID length plus the length of the OID length itself. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-23 02:21:00 +08:00
lldp_mgmt_addr_tlv_asan lldp_mgmt_addr_tlv_asan.pcap lldp_mgmt_addr_tlv_asan.out -v
CVE-2017-13028/BOOTP: Add a bounds check before fetching data This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't cause 'tcpdump: pcap_loop: truncated dump file'
2017-03-23 02:37:04 +08:00
bootp_asan bootp_asan.pcap bootp_asan.out -v
CVE-2017-13028/BOOTP: Add another test. A capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-23 06:59:23 +08:00
bootp_asan-2 bootp_asan-2.pcap bootp_asan-2.out -v
CVE-2017-13029/PPP: Fix a bounds check, and clean up other bounds checks. For configuration protocol options, use ND_TCHECK() and ND_TCHECK_nBITS() macros, passing them the appropriate pointer argument. This fixes one case where the ND_TCHECK2() call they replace was not checking enough bytes. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-23 02:48:06 +08:00
ppp_ccp_config_deflate_option_asan ppp_ccp_config_deflate_option_asan.pcap ppp_ccp_config_deflate_option_asan.out -v
CVE-2017-13031/Check for the presence of the entire IPv6 fragment header. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Clean up some whitespace in tests/TESTLIST while we're at it.
2017-03-23 05:55:12 +08:00
pim_header_asan pim_header_asan.pcap pim_header_asan.out -v
pim_header_asan-2 pim_header_asan-2.pcap pim_header_asan-2.out -v
pim_header_asan-3 pim_header_asan-3.pcap pim_header_asan-3.out -v
PIM: Add another test. Add a test using the capture file supplied by Bhargava Shastry, modified so the capture file won't be rejected as an invalid capture.
2017-03-24 10:08:06 +08:00
pim_header_asan-4 pim_header_asan-4.pcap pim_header_asan-4.out -v
CVE-2017-13031/Check for the presence of the entire IPv6 fragment header. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Clean up some whitespace in tests/TESTLIST while we're at it.
2017-03-23 05:55:12 +08:00
ip6_frag_asan ip6_frag_asan.pcap ip6_frag_asan.out -v
CVE-2017-13032/RADIUS: Check whether a byte exists before testing its value. Reverse the test in a for loop to test the length before testing whether we have a null byte. This fixes a buffer over-read discovered by Bhargava Shastry. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture. Clean up other length tests while we're at it.
2017-03-23 06:38:02 +08:00
radius_attr_asan radius_attr_asan.pcap radius_attr_asan.out -v
CVE-2017-13036/OSPFv3: Add a bounds check before fetching data This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-24 07:55:18 +08:00
ospf6_decode_v3_asan ospf6_decode_v3_asan.pcap ospf6_decode_v3_asan.out -v
CVE-2017-13037/IP: Add bounds checks when printing time stamp options. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-25 09:42:09 +08:00
ip_ts_opts_asan ip_ts_opts_asan.pcap ip_ts_opts_asan.out -v
CVE-2017-13039/IKEv1: Do more bounds checking. Have ikev1_attrmap_print() and ikev1_attr_print() do full bounds checking, and return null on a bounds overflow. Have their callers check for a null return. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-06-12 12:06:55 +08:00
isakmpv1-attr-oobr isakmpv1-attr-oobr.pcap isakmpv1-attr-oobr.out -v
ISAKMP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release and was fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 396e94ff55a80d554b1fe46bf107db1e91008d6c in 4.9 branch.
2019-10-20 22:14:03 +08:00
isakmp-ikev1_n_print-oobr isakmp-ikev1_n_print-oobr.pcap isakmp-ikev1_n_print-oobr.out -v
LDP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from aa5c6b710dfd8020d2c908d6b3bd41f1da719b3b in 4.9 branch.
2019-10-21 23:21:12 +08:00
ldp-ldp_tlv_print-oobr ldp-ldp_tlv_print-oobr.pcap ldp-ldp_tlv_print-oobr.out -v
ICMP: Add two test capture files These capture files triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap files were updated to avoid pcap_loop() error messages. Update the output of the tests accordingly. Partial update from 1a1bce0526a77b62e41531b00f8bb5e21fd4f3a3 in 4.9 branch.
2019-10-22 00:59:34 +08:00
icmp-icmp_print-oobr-1 icmp-icmp_print-oobr-1.pcap icmp-icmp_print-oobr-1.out -v
icmp-icmp_print-oobr-2 icmp-icmp_print-oobr-2.pcap icmp-icmp_print-oobr-2.out -v
RSVP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from bea2686c296b79609060a104cc139810785b0739 in 4.9 branch.
2019-10-22 15:56:09 +08:00
rsvp-rsvp_obj_print-oobr rsvp-rsvp_obj_print-oobr.pcap rsvp-rsvp_obj_print-oobr.out -v
VRRP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 3de07c772166b7e8e8bb4b9d1d078f1d901b570b in 4.9 branch.
2019-10-22 17:29:55 +08:00
vrrp-vrrp_print-oobr vrrp-vrrp_print-oobr.pcap vrrp-vrrp_print-oobr.out -v
VRRP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from a152aebfd1114376ba266ed30416be596ef9d806 in 4.9 branch.
2019-10-23 01:20:05 +08:00
vrrp-vrrp_print-oobr-2 vrrp-vrrp_print-oobr-2.pcap vrrp-vrrp_print-oobr-2.out -v
BGP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a length check previously added, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 86326e880d31b328a151d45348c35220baa9a1ff in 4.9 branch.
2019-10-22 20:47:11 +08:00
bgp-bgp_capabilities_print-oobr-1 bgp-bgp_capabilities_print-oobr-1.pcap bgp-bgp_capabilities_print-oobr-1.out -v
BGP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a length check previously added, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from e3f3b445e2d20ac5d5b7fcb7559ce6beb55da0c9 in 4.9 branch.
2019-10-23 00:52:47 +08:00
bgp-bgp_capabilities_print-oobr-2 bgp-bgp_capabilities_print-oobr-2.pcap bgp-bgp_capabilities_print-oobr-2.out -v
LMP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks, keep only the relevant packets and avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from d97e94223720684c6aa740ff219e0d19426c2220 in 4.9 branch.
2019-10-23 16:01:48 +08:00
lmp-lmp_print_data_link_subobjs-oobr lmp-lmp_print_data_link_subobjs-oobr.pcap lmp-lmp_print_data_link_subobjs-oobr.out -v
CVE-2017-13042/HNCP: add DHCPv6-Data bounds checks hncp_print_rec() validates each HNCP TLV to be within the declared as well as the on-the-wire packet space. However, dhcpv6_print() in the same file didn't do the same for the DHCPv6 options within the HNCP DHCPv6-Data TLV value, which could cause an out-of-bounds read when decoding an invalid packet. Add missing checks to dhcpv6_print(). This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s).
2017-07-30 01:52:38 +08:00
# The .pcap file is truncated after the 1st packet.
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
hncp_dhcpv6data-oobr hncp_dhcpv6data-oobr.pcap hncp_dhcpv6data-oobr.out -v
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
hncp_dhcpv4data-oobr hncp_dhcpv4data-oobr.pcap hncp_dhcpv4data-oobr.out -v
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
vqp-oobr vqp-oobr.pcap vqp-oobr.out -v
bgp_pmsi_tunnel-oobr bgp_pmsi_tunnel-oobr.pcap bgp_pmsi_tunnel-oobr.out -v
bgp_mvpn_6_and_7_oobr bgp_mvpn_6_and_7_oobr.pcap bgp_mvpn_6_and_7_oobr.out -v
rsvp_fast_reroute-oobr rsvp_fast_reroute-oobr.pcap rsvp_fast_reroute-oobr.out -v
esis_opt_prot-oobr esis_opt_prot-oobr.pcap esis_opt_prot-oobr.out -v
rsvp_uni-oobr-1 rsvp_uni-oobr-1.pcap rsvp_uni-oobr-1.out -v
rsvp_uni-oobr-2 rsvp_uni-oobr-2.pcap rsvp_uni-oobr-2.out -v
rsvp_uni-oobr-3 rsvp_uni-oobr-3.pcap rsvp_uni-oobr-3.out -v
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
rpki-rtr-oobr rpki-rtr-oobr.pcap rpki-rtr-oobr.out -v
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
lldp_8023_mtu-oobr lldp_8023_mtu-oobr.pcap lldp_8023_mtu-oobr.out -v
CVE-2017-13053/BGP: fix VPN route target bounds checks decode_rt_routing_info() didn't check bounds before fetching 4 octets of the origin AS field and could over-read the input buffer, put it right. It also fetched the varying number of octets of the route target field from 4 octets lower than the correct offset, put it right. It also used the same temporary buffer explicitly through as_printf() and implicitly through bgp_vpn_rd_print() so the end result of snprintf() was not what was originally intended. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s).
2017-08-11 20:39:02 +08:00
bgp_vpn_rt-oobr bgp_vpn_rt-oobr.pcap bgp_vpn_rt-oobr.out -v -c1
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
cfm_sender_id-oobr cfm_sender_id-oobr.pcap cfm_sender_id-oobr.out -v
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
isis-extd-isreach-oobr isis-extd-isreach-oobr.pcap isis-extd-isreach-oobr.out -v
CVE-2017-13688/OLSR: Do bounds checks before we fetch data. While we're at it, clean up some other bounds checks, so we check that we have a complete IPv4 message header if it's IPv4 and a complete IPv6 message header if it's IPv6. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add tests using the capture files supplied by the reporter(s).
2017-08-24 10:26:37 +08:00
olsr-oobr-1 olsr-oobr-1.pcap olsr-oobr-1.out -v
olsr-oobr-2 olsr-oobr-2.pcap olsr-oobr-2.out -v
CVE-2017-13689/IKEv1: Fix addr+subnet length check. An IPv6 address plus subnet mask is 32 bytes, not 20 bytes. 16 bytes of IPv6 address, 16 bytes of subnet mask. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s).
2017-08-24 11:45:39 +08:00
ikev1_id_ipv6_addr_subnet-oobr ikev1_id_ipv6_addr_subnet-oobr.pcap ikev1_id_ipv6_addr_subnet-oobr.out -v
CVE-2017-13690/IKEv2: Fix some bounds checks. Use a pointer of the correct type in ND_TCHECK(), or use ND_TCHECK2() and provide the correct length. While we're at it, remove the blank line between some checks and the UNALIGNED_MEMCPY()s they protect. Also, note the places where we print the entire payload. This fixes a buffer over-read discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s).
2017-08-24 12:08:42 +08:00
isakmp-various-oobr isakmp-various-oobr.pcap isakmp-various-oobr.out -v
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
aoe-oobr-1 aoe-oobr-1.pcap aoe-oobr-1.out -v
Remove useless -c options in some test configurations
2019-11-03 00:30:53 +08:00
frf16_magic_ie-oobr frf16_magic_ie-oobr.pcap frf16_magic_ie-oobr.out -v
RX: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release and was fixed in the 4.9.3 release. It was fixed in master branch by commit 4154778a262b4a7449141535a99da4d13b4c8b2e. The pcap file was updated to pass the sanity checks, keep only the relevant packets and avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from c24922e692a52121e853a84ead6b9337f4c08a94 in 4.9 branch.
2019-10-20 21:27:59 +08:00
rx_serviceid_oobr rx_serviceid_oobr.pcap rx_serviceid_oobr.out
BGP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With some previous updates, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 13d52e9c0e7caf7e6325b0051bc90a49968be67f in 4.9 branch.
2019-10-24 20:26:30 +08:00
bgp_mp_reach_nlri-oobr bgp_mp_reach_nlri-oobr.pcap bgp_mp_reach_nlri-oobr.out -v
CVE-2017-13011/Properly check for buffer overflow in bittok2str_internal(). Also, make the buffer bigger. This fixes a buffer overflow discovered by Bhargava Shastry, SecT/TU Berlin. Add a test using the capture file supplied by the reporter(s), modified so the capture file won't be rejected as an invalid capture.
2017-03-16 03:12:21 +08:00
CVE-2017-13038/PPP: Do bounds checking. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add a test using the capture file supplied by Katie Holly.
2017-06-12 09:27:27 +08:00
# bad packets from Katie Holly
mlppp-oobr mlppp-oobr.pcap mlppp-oobr.out
timed: Add three test capture files These capture files triggered a buffer over-read fixed by 6f2cd8cee6372b2d3f4783ce30a603b31839d31f. Two pcap files were updated to pass the sanity checks. Update the outputs of the tests accordingly.
2019-11-05 20:53:14 +08:00
kh-timed-001-oobr kh-timed-001-oobr.pcap kh-timed-001-oobr.out
kh-timed-002-oobr kh-timed-002-oobr.pcap kh-timed-002-oobr.out
kh-timed-004-oobr kh-timed-004-oobr.pcap kh-timed-004-oobr.out
CVE-2017-13038/PPP: Do bounds checking. This fixes a buffer over-read discovered by Brian 'geeknik' Carpenter. Add a test using the capture file supplied by Katie Holly.
2017-06-12 09:27:27 +08:00
CVE-2017-13040/MPTCP: Clean up printing DSS suboption. Do the length checking inline; that means we print stuff up to the point at which we run out of option data. First check to make sure we have at least 4 bytes of option, so we have flags to check. This fixes a buffer over-read discovered by Kim Gwan Yeong. Add a test using the capture file supplied by the reporter(s).
2017-06-13 06:04:18 +08:00
# bad packets from Kim Gwan Yeong
mptcp-dss-oobr mptcp-dss-oobr.pcap mptcp-dss-oobr.out -v
CVE-2017-13041/ICMP6: Add more bounds checks. This fixes a buffer over-read discovered by Kim Gwan Yeong. Add a test using the capture file supplied by the reporter(s).
2017-06-13 13:16:12 +08:00
icmp6_nodeinfo_oobr icmp6_nodeinfo_oobr.pcap icmp6_nodeinfo_oobr.out
CVE-2017-13040/MPTCP: Clean up printing DSS suboption. Do the length checking inline; that means we print stuff up to the point at which we run out of option data. First check to make sure we have at least 4 bytes of option, so we have flags to check. This fixes a buffer over-read discovered by Kim Gwan Yeong. Add a test using the capture file supplied by the reporter(s).
2017-06-13 06:04:18 +08:00
CVE-2017-13049/Rx: add a missing bounds check for Ubik One of the case blocks in ubik_print() didn't check bounds before fetching 32 bits of packet data and could overread past the captured packet data by that amount. This fixes a buffer over-read discovered by Henri Salo from Nixu Corporation. Add a test using the capture file supplied by the reporter(s).
2017-08-05 00:15:07 +08:00
# bad packets from Henri Salo
Update some test capture files These changes avoid some pcap_loop() errors messages like: "tcpdump: pcap_loop: invalid packet capture length X, bigger than snaplen of Y" or "tcpdump: pcap_loop: truncated dump file; tried to read X captured bytes, only got Y" The outputs of the tests are unchanged. Remove the no more useful -c options in the test configurations.
2019-11-03 01:10:11 +08:00
rx_ubik-oobr rx_ubik-oobr.pcap rx_ubik-oobr.out
Babel: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Moreover: Fix an existing length check. Update the output of the test accordingly. Partial update from 12f66f69f7bf1ec1266ddbee90a7616cbf33696b in 4.9 branch.
2019-10-28 23:31:47 +08:00
babel_update_oobr babel_update_oobr.pcap babel_update_oobr.out
CVE-2017-13049/Rx: add a missing bounds check for Ubik One of the case blocks in ubik_print() didn't check bounds before fetching 32 bits of packet data and could overread past the captured packet data by that amount. This fixes a buffer over-read discovered by Henri Salo from Nixu Corporation. Add a test using the capture file supplied by the reporter(s).
2017-08-05 00:15:07 +08:00
OSPFv3: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a bounds check previously added, the problem no longer exists. Thus no fix needed. The pcap file was updated to avoid pcap_loop() error messages. It was rename from pcapng to pcap because it is. Update the output of the test accordingly. Partial update from e01c9bf76740802025c9328901b55ee4a0c49ed6 in 4.9 branch.
2019-10-24 03:24:35 +08:00
# bad packets from Junjie Wang
ospf6_print_lshdr-oobr ospf6_print_lshdr-oobr.pcap ospf6_print_lshdr-oobr.out -vv
ICMP6 RPL: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With the new GET_ macros, the problem no longer exists. Thus no fix needed. The pcap file was updated to avoid pcap_loop() error messages. It was rename from pcapng to pcap because it is. Update the output of the test accordingly. Partial update from d7505276842e85bfd067fa21cdb32b8a2dc3c5e4 in 4.9 branch.
2019-10-24 17:13:16 +08:00
rpl-dao-oobr rpl-dao-oobr.pcap rpl-dao-oobr.out -vv
HNCP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a previous update (511915bef7e4de2f31b8d9f581b4a44b0cfbcf53), the problem no longer exists. Thus no fix needed. The pcap file was renamed from pcapng to pcap because it is. Update the output of the test accordingly. Partial update from 83a412a5275cac973c5841eca3511c766bed778d in 4.9 branch.
2019-10-24 21:13:00 +08:00
hncp_prefix-oobr hncp_prefix-oobr.pcap hncp_prefix-oobr.out -vvv
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# one more in smb.tests
OSPFv3: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a bounds check previously added, the problem no longer exists. Thus no fix needed. The pcap file was updated to avoid pcap_loop() error messages. It was rename from pcapng to pcap because it is. Update the output of the test accordingly. Partial update from e01c9bf76740802025c9328901b55ee4a0c49ed6 in 4.9 branch.
2019-10-24 03:24:35 +08:00
IEEE 802.11: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a previous fix (3f1c4af0012eb36bcf740a7cb83770087b9983d7), the problem no longer exists. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 4846b3c5d0a850e860baf4f07340495d29837d09 in 4.9 branch.
2019-10-24 21:49:49 +08:00
# bad packets from Ryan Ackroyd
ieee802.11_meshhdr-oobr ieee802.11_meshhdr-oobr.pcap ieee802.11_meshhdr-oobr.out -H
DCCP: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release and was fixed in the 4.9.3 release. The problem was fixed in master branch by commit 6df4852ec38a5f7342f35e8d62918f33ace103f8. The pcap file was updated to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 211124b972e74f0da66bc8b16f181f78793e2f66 in 4.9 branch.
2019-10-24 23:23:08 +08:00
dccp_options-oobr dccp_options-oobr.pcap dccp_options-oobr.out -vv
IEEE 802.11: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. With a previous fix (3f1c4af0012eb36bcf740a7cb83770087b9983d7), the problem no longer exists. The pcap file was updated to pass the sanity checks and to avoid pcap_loop() error messages. Update the output of the test accordingly. Partial update from 4846b3c5d0a850e860baf4f07340495d29837d09 in 4.9 branch.
2019-10-24 21:49:49 +08:00
SMB: Add two test capture files These are tests for print-smb.c:print_trans(). These capture files triggered a buffer over-read fixed by 50f375f9f1444e744d6e4b117940f0a7c9dd8c23. The pcap files were updated to avoid pcap_loop() error messages. Update the output of the tests accordingly. Update from 4bfd71eee41a1db0647fa4d434841a51b07ec38a in 4.9 branch.
2019-10-29 17:47:07 +08:00
# bad packets from Philippe Antoine
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# now in smb.tests
CVE-2017-5483/SNMP: improve ASN.1 bounds checks Kamil Frankowicz had found that truncated BE_STR and BE_SEQ ASN.1 elements could lead to an overread, from the source code it looked like other ids could have this problem too. Move the checks introduced in commit 72e501f out of the switch blocks to cover all ids by default. This fixes GH#559 and GH#566.
2017-01-12 21:47:50 +08:00
CVE-2016-7934,7935,7937/RTP: Fix two segmentation faults Add two test files for these fixes. Add more bounds checks in VAT, RTP and RTCP printers. Moreover: Add and use *_tstr[] strings. Update the output of a test accordingly. Remove spaces before tabs.
2015-11-18 00:12:22 +08:00
# RTP tests
# fuzzed pcap
Rename pcapng test files to .pcapng. That makes it clearer which captures are pcap and which are pcapng, and could allow us to, if we're testing with a tcpdump linked with a libpcap that doesn't handle pcapng files, skip the pcapng files.
2018-02-07 10:56:52 +08:00
rtp-seg-fault-1 rtp-seg-fault-1.pcapng rtp-seg-fault-1.out -v -T rtp
rtp-seg-fault-2 rtp-seg-fault-2.pcapng rtp-seg-fault-2.out -v -T rtp
Add a test file for a previous fix Fix was: "Don't overflow the Opaque_Handle buffer."
2016-09-26 17:22:11 +08:00
Add dissector for SSH version exchange
2018-12-23 18:38:17 +08:00
# SSH tests
ssh ssh.pcap ssh.out
Add support for MACsec (IEEE 802.1AE-2006)
2017-05-18 21:47:57 +08:00
# MACsec
Remove '-t' option for MACsec tests like all the other tests.
2021-01-05 22:18:17 +08:00
macsec-encrypted macsec-encrypted.pcap macsec-encrypted.out -e
macsec-changed macsec-changed.pcap macsec-changed.out -e
macsec-integonly macsec-integonly.pcap macsec-integonly.out -e
macsec-snap macsec-snap.pcap macsec-snap.out -e
macsec-short-shorter macsec-short-shorter.pcap macsec-short-shorter.out -e
macsec-short-longer macsec-short-longer.pcap macsec-short-longer.out -e
macsec-short-valid macsec-short-valid.pcap macsec-short-valid.out -e
Merge branch 'master' into macsec
2020-05-28 08:01:23 +08:00
Add a test file for a previous fix Fix was: "Don't overflow the Opaque_Handle buffer."
2016-09-26 17:22:11 +08:00
# NFS tests
Merge branch 'master' into macsec
2020-05-28 08:01:23 +08:00
# fuzzed pcap
Add a test for NFS write verifier cookie in TESTLIST This is a followup to commit 8b9f7d9d76. Moreover: Rename the .pcap file to .pcapng.
2019-02-07 19:36:04 +08:00
nfs-write-verf-cookie nfs-write-verf-cookie.pcapng nfs-write-verf-cookie.out -vv
CVE-2017-12995/Check for DNS compression pointers that don't point backwards. This is what BIND 9.11.0-P2 does; it not only detects pointers that loop, as "point backwards" means "point before anything we've processed so far, including what we're processing right now", so the pointer can't point to itself (as that's what we're processing right now). This fixes an infinite loop discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s). Also, add some infinite-pointer-loop captures. More checks should be done. We might, for example, want to make sure the upper 2 bits of the label length/pointer byte are 00 or 11, and that if we encounter a pointer and jump backwards to what we think is a label the label ends before the beginning of the last label we processed, to make sure the pointer doesn't point backwards into the *middle* of a label, and also make sure the entire name is <= 255 bytes long.
2017-02-11 10:52:17 +08:00
NFS: Fix an undefined behavior at runtime The error was: print-nfs.c:537:2: runtime error: unsigned integer overflow: 4294967295 + 3 cannot be represented in type 'unsigned int' print-nfs.c:541:14: runtime error: unsigned integer overflow: 4294967295 + 3 cannot be represented in type 'unsigned int' Add a test case.
2019-03-18 04:23:07 +08:00
# NFS fuzzed
nfs-seg-fault-1 nfs-seg-fault-1.pcapng nfs-seg-fault-1.out
# NFS invalid
nfs-cannot-pad-32-bit nfs-cannot-pad-32-bit.pcap nfs-cannot-pad-32-bit.out
CVE-2017-12995/Check for DNS compression pointers that don't point backwards. This is what BIND 9.11.0-P2 does; it not only detects pointers that loop, as "point backwards" means "point before anything we've processed so far, including what we're processing right now", so the pointer can't point to itself (as that's what we're processing right now). This fixes an infinite loop discovered by Forcepoint's security researchers Otto Airamo & Antti Levomäki. Add a test using the capture file supplied by the reporter(s). Also, add some infinite-pointer-loop captures. More checks should be done. We might, for example, want to make sure the upper 2 bits of the label length/pointer byte are 00 or 11, and that if we encounter a pointer and jump backwards to what we think is a label the label ends before the beginning of the last label we processed, to make sure the pointer doesn't point backwards into the *middle* of a label, and also make sure the entire name is <= 255 bytes long.
2017-02-11 10:52:17 +08:00
# DNS infinite loop tests
#
# See http://marc.info/?l=tcpdump-workers&m=95552439022555
#
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# dns-zlip-1
# dns-zlip-2
# dns-zlip-3
NTP: Add more test files by Ulrich Windl. Put the new tests at the bottom of the list together with the existing NTP tests to match the not yet merged work by Ulrich better.
2017-09-21 17:16:50 +08:00
# NTP tests
ntp ntp.pcap ntp.out
ntp-v ntp.pcap ntp-v.out -v
ntp-time ntp-time.pcap ntp-time.out
ntp-time--v ntp-time.pcap ntp-time--v.out -v
ntp-time--vv ntp-time.pcap ntp-time--vv.out -vv
ntp-time--vvv ntp-time.pcap ntp-time--vvv.out -vvv
ntp-control ntp-control.pcap ntp-control.out
ntp-control--v ntp-control.pcap ntp-control--v.out -v
ntp-control--vv ntp-control.pcap ntp-control--vv.out -vv
ntp-control--vvv ntp-control.pcap ntp-control--vvv.out -vvv
ntp-mode7 ntp-mode7.pcap ntp-mode7.out
ntp-mode7--v ntp-mode7.pcap ntp-mode7--v.out -v
ntp-mode7--vv ntp-mode7.pcap ntp-mode7--vv.out -vv
ntp-mode7--vvv ntp-mode7.pcap ntp-mode7--vvv.out -vvv
Add a test for the RX/AFS protocol. The .pcap file is from https://wiki.wireshark.org/SampleCaptures, as suggested on the openafs-devel mailing list.
2018-08-04 05:07:51 +08:00
# RX/AFS
rx afs.pcap rx.out
rx-v afs.pcap rx-v.out -v
Add two test files: an empty pcap and an empty pcapng
2018-10-30 04:11:52 +08:00
# Empty pcap/pcapng tests
empty-pcap empty.pcap empty.out
empty-pcapng empty.pcapng empty.out
Add dns-badcookie test case.
2019-02-13 09:19:50 +08:00
# DNS Extended rcode tests
dns-badcookie dns-badcookie.pcap dns-badcookie.out
Add dns-badvers test case.
2019-02-13 09:27:59 +08:00
dns-badvers dns-badvers.pcap dns-badvers.out
Print Protocol ID correctly in Application Priority Table Closes #511
2019-04-12 07:49:33 +08:00
# LLDP
lldp-app-priority lldp-app-priority.pcap lldp-app-priority.out -v
Add support for decoding DNS URI RR (typecode 256, RFC7553)
2019-02-09 16:05:17 +08:00
# DNS URI RR support tests
dns-uri dns-uri.pcap dns-uri.out
Add vsock test case Add a simple vsock packet capture test.
2017-08-23 23:53:10 +08:00
# AF_VSOCK tests
Rename a pcapng test file to .pcapng
2019-04-17 01:30:26 +08:00
vsock-1 vsock-1.pcapng vsock-1.out
Add verbose outputs with -v and -vv for a vsock capture test
2019-04-22 17:25:46 +08:00
vsock-1-v vsock-1.pcapng vsock-1-v.out -v
vsock-1-vv vsock-1.pcapng vsock-1-vv.out -vv
Add a test for ipoib (IP over Infiniband)
2019-04-19 06:18:23 +08:00
#IP over infinband (ipoib)
ipoib ipoib.pcap ipoib.out
IPoIB: Add the output with -e for a capture test
2019-04-23 17:21:30 +08:00
ipoib-e ipoib.pcap ipoib-e.out -e
Add BFD multihop and lag decoding Put back the bfd_port_values, and use it to distinguish between destination ports for RFC5883 multihop and RFC7310 lag sessions. (The destination port is the only difference between these messages.)
2019-04-27 02:03:34 +08:00
# BFD multihop and lag (RFC5883 & 7130)
bfd-multihop bfd-multihop.pcap bfd-multihop.out
bfd-multihop-v bfd-multihop.pcap bfd-multihop-v.out -v
bfd-lag bfd-lag.pcap bfd-lag.out
bfd-lag-v bfd-lag.pcap bfd-lag-v.out -v
BFD: add SBFD support (RFC7880 and RFC7881) Add support for SBFD on UDP port 7784. SBFD is different in that packets from the reflector will be sent with *source* port 7784; in all other BFD mechanisms, it is only the destination port that matters. For SBFD print-udp.c has to check both source and destination port.
2021-02-05 13:10:31 +08:00
bfd-sbfd bfd-sbfd.pcap bfd-sbfd.out
bfd-sbfd-v bfd-sbfd.pcap bfd-sbfd-v.out -v
New ethertype protocol for Arista Networks
2019-05-18 21:18:30 +08:00
# Arista Vendor Specific Tests
arista-ether arista_ether.pcap arista_ether.out
arista-ether-e arista_ether.pcap arista_ether-e.out -e
arista-ether-ev arista_ether.pcap arista_ether-ev.out -ev
Correct the extraction of the TIPC message size field. Closes #771
2019-07-12 21:03:19 +08:00
# TIPC length field test
huge-tipc-messages huge-tipc-messages.pcap huge-tipc-messages.out
sFlow: Add a test capture file This capture file triggered a buffer over-read with the 4.9.2 release fixed in the 4.9.3 release. The problem was fixed in master branch by commit 09822d484b0f26d197a1ea8fdf81ca6e0d698634. Update the output of the test accordingly. Update from b35eb4c1630d2e40a9e25dd873c572e1aec43910 in 4.9 branch.
2019-10-29 23:54:13 +08:00
# CVE-2018-10105 bad packets from Luis Rocha
Mend "make check" on Solaris 9 (Autoconf only). Sun C 5.9 does not support C99. GCC 4.6.4 recognizes -std=gnu99, but does not support the z length modifier in printf(3). In either case 18 tests fail in the following manner: < [...]: domain [length 0 < 12] (invalid) --- > [...]: domain [length 0 < zu] (invalid) Make these tests conditional and disable them when HAVE_NO_PRINTF_Z is defined. Modify the Autoconf leg of the build process to define the macro when printf() does not handle %zu as expected. The CMake leg looks broken on Solaris 9 with 2.8.9 now, so leave it be for now.
2021-07-25 21:29:02 +08:00
# In printf_z.tests:
# sflow_print-segv
SMB: Disable the printer by default Like in 4.9.3 version. This printer needs rework. Move the tests with SMB packets in tests/smb.tests. Add outputs files for the disabled case.
2020-12-19 18:59:32 +08:00
# two more in smb.tests
The ptp (precision time protocol) with UDP as the transport protocol. - the print routines for ptp different ptp messages - test completed for sync message, announce message, delay request message, delay response message and follow up message. - integration of the ptp v2 code with the tcpdump code. Signed-off-by: Partha S. Ghosh <psglinux@gmail.com>
2018-12-14 14:28:36 +08:00
#ptp tests
ptp ptp.pcap ptp.out
Dispatch the PTP ethertype to ptp_print() This implements "IEEE 802.3/Ethernet" mode as described in annex F of the PTP standard. This uses the same format packets, but directly over Ethernet instead of encapsulated in UDP.
2020-02-21 20:32:48 +08:00
ptp_ethernet ptp_ethernet.pcap ptp_ethernet.out -e
LDP: Add some missing bounds checks Replace calls to ipaddr_string()/ip6addr_string() with calls to GET_IPADDR_STRING()/GET_IP6ADDR_STRING() macros performing bounds checking. Fix a regression in 78a4ee82226a3fe19981841dfe24d5e9cb437524. This fixes a buffer over-read in ldp_tlv_print() discovered by Jason Xiaole. Add a test using the capture file supplied by the reporter updated to keep only the packet showing the buffer over-read.
2020-01-19 00:32:36 +08:00
# bad packets from Jason Xiaole
ldp_tlv_print-oobr ldp_tlv_print-oobr.pcap ldp_tlv_print-oobr.out -v
Autosar SOME/IP protocol support
2020-02-18 23:38:16 +08:00
dns: add some additional error checks. If the upper 2 bits of a label/pointer value are 10, treat that as an error. If a name is longer than 255 characters, treat that as an error. This prevents some long loops with malformed packets, as found by Hardik Shah.
2020-11-15 12:34:25 +08:00
# bad packets from Hardik Shah
dns-badlabel dns-badlabel.pcap dns-badlabel.out -vv
IGRP: Fix an OOBR introduced in the prev. change Add missing GET_U_1() wrappers to cover struct igrprte properly again, also deduplicate some code. This fixes a buffer over-read introduced in a recent commit 09b9aad and discovered by Hardik Shah. Add a test using the capture file supplied by the reporter.
2020-12-06 07:24:02 +08:00
igrp-oobr igrp-oobr.pcap igrp-oobr.out -v
dns: add some additional error checks. If the upper 2 bits of a label/pointer value are 10, treat that as an error. If a name is longer than 255 characters, treat that as an error. This prevents some long loops with malformed packets, as found by Hardik Shah.
2020-11-15 12:34:25 +08:00
Autosar SOME/IP protocol support
2020-02-18 23:38:16 +08:00
#someip tests
someip1 someip1.pcap someip1.out
Add newline to the end of the last line.
2020-02-19 18:52:05 +08:00
someip2 someip2.pcap someip2.out
DNS: Add printing the EDNS options (pull request #762)
2019-05-03 22:16:20 +08:00
# EDNS Options
DNS: Update printing the EDNS options and their data with -vv (pull request #808) Format of EDNS options matches format of TCP options.
2019-10-19 03:43:05 +08:00
edns-opts edns-opts.pcap edns-opts.out
edns-opts-v edns-opts.pcap edns-opts-v.out -v
edns-opts-vv edns-opts.pcap edns-opts-vv.out -vv
Add two test files for the unsupported link-layer protocols printer This is a follow-up to commit 25687e1a312a3bb63a6e8d7f0af0210a615e24a8. These files come from the Wireshark menagerie: 0031419.pcap (link type 160) and 5632-Raw_D-BUS.cap (first two packets).
2020-06-12 18:39:43 +08:00
# unsupported link types
unsupported-link-type-160 unsupported-link-type-160.pcap unsupported-link-type-160.out
unsupported-link-type-dbus unsupported-link-type-dbus.pcap unsupported-link-type-dbus.out
Update LSP ping: timestamps are NTP int+fraction During development of LSP ping, the embedded timestamps were changed from struct timeval to NTP time, so update the printer to match the RFC. (Cherry-picked from GH #874.)
2020-09-18 10:01:01 +08:00
# LSP Ping
lsp-ping-timestamp lsp-ping-timestamp.pcap lsp-ping-timestamp.out -vv
lwres: Fix a length check This fix some inconsistent outputs clang versus gcc in 32 bits mode. Add a test file.
2021-09-27 21:43:32 +08:00
# lwres with "extra" bytes
lwres_with_extra lwres_with_extra.pcap lwres_with_extra.out
Initial support to parse QUIC packets.
2021-10-01 09:34:46 +08:00
# QUIC tests
quic_vn quic_vn.pcap quic_vn.out -v
quic_handshake quic_handshake.pcap quic_handshake.out -v
quic_handshake_truncated quic_handshake_truncated.pcap quic_handshake_truncated.out -v
Add a test case for QUIC retry packets.
2021-11-10 05:06:18 +08:00
quic_retry quic_retry.pcap quic_retry.out -v
Initial support to parse QUIC packets.
2021-10-01 09:34:46 +08:00
gquic gquic.pcap gquic.out -v
Reference in New Issue Copy Permalink