1 If you have not built libpcap, and your system does not have libpcap 2 installed, install libpcap first. Your system might provide a version 3 of libpcap that can be installed; if so, to compile tcpdump you might 4 need to install a "developer" version of libpcap as well as the 5 "run-time" version. You can also install tcpdump.org's version of 6 libpcap; see the README file in this directory for the ftp location. 7 8 You will need an ANSI C compiler to build tcpdump. The configure script 9 will abort if your compiler is not ANSI compliant. If this happens, use 10 the generally available GNU C compiler (GCC). 11 12 After libpcap has been built (either install it with "make install" or 13 make sure both the libpcap and tcpdump source trees are in the same 14 directory), run ./configure (a shell script). "configure" will 15 determine your system attributes and generate an appropriate Makefile 16 from Makefile.in. Now build tcpdump by running "make". 17 18 If everything builds ok, su and type "make install". This will install 19 tcpdump and the manual entry. Any user will be able to use tcpdump to 20 read saved captures. Whether a user will be able to capture traffic 21 depends on the OS and the configuration of the system; see the tcpdump 22 man page for details. DO NOT give untrusted users the ability to 23 capture traffic. If a user can capture traffic, he or she could use 24 utilities such as tcpdump to capture any traffic on your net, including 25 passwords. 26 27 Note that most systems ship tcpdump, but usually an older version. 28 Remember to remove or rename the installed binary when upgrading. 29 30 If your system is not one which we have tested tcpdump on, you may have 31 to modify the configure script and Makefile.in. Please send us patches 32 for any modifications you need to make. 33 34 Please see "PLATFORMS" for notes about tested platforms. 35 36 37 FILES 38 ----- 39 CHANGES - description of differences between releases 40 CONTRIBUTING - guidelines for contributing 41 CREDITS - people that have helped tcpdump along 42 INSTALL.txt - this file 43 LICENSE - the license under which tcpdump is distributed 44 Makefile.in - compilation rules (input to the configure script) 45 README - description of distribution 46 Readme.Win32 - notes on building tcpdump on Win32 systems (with WinPcap) 47 VERSION - version of this release 48 aclocal.m4 - autoconf macros 49 addrtoname.c - address to hostname routines 50 addrtoname.h - address to hostname definitions 51 ah.h - IPSEC Authentication Header definitions 52 appletalk.h - AppleTalk definitions 53 ascii_strcasecmp.c - locale-independent case-independent string comparison 54 routines 55 atime.awk - TCP ack awk script 56 atm.h - ATM traffic type definitions 57 bpf_dump.c - BPF program printing routines, in case libpcap doesn't 58 have them 59 chdlc.h - Cisco HDLC definitions 60 cpack.c - functions to extract packed data 61 cpack.h - declarations of functions to extract packed data 62 config.guess - autoconf support 63 config.h.in - autoconf input 64 config.sub - autoconf support 65 configure - configure script (run this first) 66 configure.in - configure script source 67 ether.h - Ethernet definitions 68 ethertype.h - Ethernet type value definitions 69 extract.h - alignment definitions 70 gmpls.c - GMPLS definitions 71 gmpls.h - GMPLS declarations 72 gmt2local.c - time conversion routines 73 gmt2local.h - time conversion prototypes 74 install-sh - BSD style install script 75 interface.h - globals, prototypes and definitions 76 ip.h - IP definitions 77 ip6.h - IPv6 definitions 78 ipproto.c - IP protocol type value-to-name table 79 ipproto.h - IP protocol type value definitions 80 l2vpn.c - L2VPN encapsulation value-to-name table 81 l2vpn.h - L2VPN encapsulation definitions 82 lbl/os-*.h - OS-dependent defines and prototypes 83 llc.h - LLC definitions 84 machdep.c - machine dependent routines 85 machdep.h - machine dependent definitions 86 makemib - mib to header script 87 mib.h - mib definitions 88 missing/* - replacements for missing library functions 89 mkdep - construct Makefile dependency list 90 mpls.h - MPLS definitions 91 nameser.h - DNS definitions 92 netdissect.h - definitions and declarations for tcpdump-as-library 93 (under development) 94 nfs.h - Network File System V2 definitions 95 nfsfh.h - Network File System file handle definitions 96 nlpid.c - OSI NLPID value-to-name table 97 nlpid.h - OSI NLPID definitions 98 ospf.h - Open Shortest Path First definitions 99 packetdat.awk - TCP chunk summary awk script 100 parsenfsfh.c - Network File System file parser routines 101 pcap_dump_ftell.c - pcap_dump_ftell() implementation, in case libpcap 102 doesn't have it 103 pcap-missing.h - declarations of functions possibly missing from libpcap 104 ppp.h - Point to Point Protocol definitions 105 print.c - Top-level routines for protocol printing 106 print-*.c - The netdissect printers 107 rpc_auth.h - definitions for ONC RPC authentication 108 rpc_msg.h - definitions for ONC RPC messages 109 send-ack.awk - unidirectional tcp send/ack awk script 110 setsignal.c - OS-independent signal routines 111 setsignal.h - OS-independent signal prototypes 112 slcompress.h - SLIP/PPP Van Jacobson compression (RFC1144) definitions 113 smb.h - SMB/CIFS definitions 114 smbutil.c - SMB/CIFS utility routines 115 stime.awk - TCP send awk script 116 tcp.h - TCP definitions 117 tcpdump.1 - manual entry 118 tcpdump.c - main program 119 timeval-operations.h - timeval operations macros 120 udp.h - UDP definitions 121 util-print.c - utility routines for protocol printers 122 vfprintf.c - emulation routine 123 win32 - headers and routines for building on Win32 systems 124