1 If you have not built libpcap, and your system does not have libpcap 2 installed, install libpcap first. Your system might provide a version 3 of libpcap that can be installed; if so, to compile tcpdump you might 4 need to install a "developer" version of libpcap as well as the 5 "run-time" version. You can also install tcpdump.org's version of 6 libpcap; see the README file in this directory for the ftp location. 7 8 You will need an ANSI C compiler to build tcpdump. The configure script 9 will abort if your compiler is not ANSI compliant. If this happens, use 10 the generally available GNU C compiler (GCC). 11 12 After libpcap has been built (either install it with "make install" or 13 make sure both the libpcap and tcpdump source trees are in the same 14 directory), run ./configure (a shell script). "configure" will 15 determine your system attributes and generate an appropriate Makefile 16 from Makefile.in. Now build tcpdump by running "make". 17 18 If everything builds ok, su and type "make install". This will install 19 tcpdump and the manual entry. Any user will be able to use tcpdump to 20 read saved captures. Whether a user will be able to capture traffic 21 depends on the OS and the configuration of the system; see the tcpdump 22 man page for details. DO NOT give untrusted users the ability to 23 capture traffic. If a user can capture traffic, he or she could use 24 utilities such as tcpdump to capture any traffic on your net, including 25 passwords. 26 27 Note that most systems ship tcpdump, but usually an older version. 28 Remember to remove or rename the installed binary when upgrading. 29 30 If your system is not one which we have tested tcpdump on, you may have 31 to modify the configure script and Makefile.in. Please send us patches 32 for any modifications you need to make. 33 34 Please see "PLATFORMS" for notes about tested platforms. 35 36 37 FILES 38 ----- 39 CHANGES - description of differences between releases 40 CREDITS - people that have helped tcpdump along 41 INSTALL.txt - this file 42 LICENSE - the license under which tcpdump is distributed 43 Makefile.in - compilation rules (input to the configure script) 44 README - description of distribution 45 Readme.Win32 - notes on building tcpdump on Win32 systems (with WinPcap) 46 VERSION - version of this release 47 aclocal.m4 - autoconf macros 48 addrtoname.c - address to hostname routines 49 addrtoname.h - address to hostname definitions 50 ah.h - IPSEC Authentication Header definitions 51 appletalk.h - AppleTalk definitions 52 ascii_strcasecmp.c - locale-independent case-independent string comparison 53 routines 54 atime.awk - TCP ack awk script 55 atm.h - ATM traffic type definitions 56 bpf_dump.c - BPF program printing routines, in case libpcap doesn't 57 have them 58 chdlc.h - Cisco HDLC definitions 59 cpack.c - functions to extract packed data 60 cpack.h - declarations of functions to extract packed data 61 config.guess - autoconf support 62 config.h.in - autoconf input 63 config.sub - autoconf support 64 configure - configure script (run this first) 65 configure.in - configure script source 66 ether.h - Ethernet definitions 67 ethertype.h - Ethernet type value definitions 68 extract.h - alignment definitions 69 gmpls.c - GMPLS definitions 70 gmpls.h - GMPLS declarations 71 gmt2local.c - time conversion routines 72 gmt2local.h - time conversion prototypes 73 install-sh - BSD style install script 74 interface.h - globals, prototypes and definitions 75 ip.h - IP definitions 76 ip6.h - IPv6 definitions 77 ipproto.c - IP protocol type value-to-name table 78 ipproto.h - IP protocol type value definitions 79 l2vpn.c - L2VPN encapsulation value-to-name table 80 l2vpn.h - L2VPN encapsulation definitions 81 lbl/os-*.h - OS-dependent defines and prototypes 82 llc.h - LLC definitions 83 machdep.c - machine dependent routines 84 machdep.h - machine dependent definitions 85 makemib - mib to header script 86 mib.h - mib definitions 87 missing/* - replacements for missing library functions 88 mkdep - construct Makefile dependency list 89 mpls.h - MPLS definitions 90 nameser.h - DNS definitions 91 netdissect.h - definitions and declarations for tcpdump-as-library 92 (under development) 93 nfs.h - Network File System V2 definitions 94 nfsfh.h - Network File System file handle definitions 95 nlpid.c - OSI NLPID value-to-name table 96 nlpid.h - OSI NLPID definitions 97 ospf.h - Open Shortest Path First definitions 98 packetdat.awk - TCP chunk summary awk script 99 parsenfsfh.c - Network File System file parser routines 100 pcap_dump_ftell.c - pcap_dump_ftell() implementation, in case libpcap 101 doesn't have it 102 pcap-missing.h - declarations of functions possibly missing from libpcap 103 ppp.h - Point to Point Protocol definitions 104 print.c - Top-level routines for protocol printing 105 print-*.c - The netdissect printers 106 rpc_auth.h - definitions for ONC RPC authentication 107 rpc_msg.h - definitions for ONC RPC messages 108 send-ack.awk - unidirectional tcp send/ack awk script 109 setsignal.c - OS-independent signal routines 110 setsignal.h - OS-independent signal prototypes 111 slcompress.h - SLIP/PPP Van Jacobson compression (RFC1144) definitions 112 smb.h - SMB/CIFS definitions 113 smbutil.c - SMB/CIFS utility routines 114 stime.awk - TCP send awk script 115 tcp.h - TCP definitions 116 tcpdump.1 - manual entry 117 tcpdump.c - main program 118 timeval-operations.h - timeval operations macros 119 udp.h - UDP definitions 120 util-print.c - utility routines for protocol printers 121 vfprintf.c - emulation routine 122 win32 - headers and routines for building on Win32 systems 123