1If you have not built libpcap, and your system does not have libpcap 2installed, install libpcap first. Your system might provide a version 3of libpcap that can be installed; if so, to compile tcpdump you might 4need to install a "developer" version of libpcap as well as the 5"run-time" version. You can also install tcpdump.org's version of 6libpcap; see the README.md file in this directory for the location. 7 8You will need an ANSI C compiler to build tcpdump. The configure script 9will abort if your compiler is not ANSI compliant. If this happens, use 10the generally available GNU C compiler (GCC). 11 12After libpcap has been built (either install it with "make install" or 13make sure both the libpcap and tcpdump source trees are in the same 14directory), run ./configure (a shell script). "configure" will 15determine your system attributes and generate an appropriate Makefile 16from Makefile.in. Now build tcpdump by running "make". 17 18If everything builds ok, su and type "make install". This will install 19tcpdump and the manual entry. Any user will be able to use tcpdump to 20read saved captures. Whether a user will be able to capture traffic 21depends on the OS and the configuration of the system; see the tcpdump 22man page for details. DO NOT give untrusted users the ability to 23capture traffic. If a user can capture traffic, he or she could use 24utilities such as tcpdump to capture any traffic on your net, including 25passwords. 26 27Note that most systems ship tcpdump, but usually an older version. 28Remember to remove or rename the installed binary when upgrading. 29 30If your system is not one which we have tested tcpdump on, you may have 31to modify the configure script and Makefile.in. Please send us patches 32for any modifications you need to make. 33 34Please see "README.md" for notes about tested platforms. 35 36 37FILES 38----- 39CHANGES - description of differences between releases 40CONTRIBUTING - guidelines for contributing 41CREDITS - people that have helped tcpdump along 42INSTALL.txt - this file 43LICENSE - the license under which tcpdump is distributed 44Makefile.in - compilation rules (input to the configure script) 45README.md - description of distribution 46Readme.Win32 - notes on building tcpdump on Win32 systems (with WinPcap) 47VERSION - version of this release 48aclocal.m4 - autoconf macros 49addrtoname.c - address to hostname routines 50addrtoname.h - address to hostname definitions 51addrtostr.c - address to printable string routines 52addrtostr.h - address to printable string definitions 53ah.h - IPSEC Authentication Header definitions 54appletalk.h - AppleTalk definitions 55ascii_strcasecmp.c - locale-independent case-independent string comparison 56 routines 57atime.awk - TCP ack awk script 58atm.h - ATM traffic type definitions 59bpf_dump.c - BPF program printing routines, in case libpcap doesn't 60 have them 61chdlc.h - Cisco HDLC definitions 62cpack.c - functions to extract packed data 63cpack.h - declarations of functions to extract packed data 64config.guess - autoconf support 65config.h.in - autoconf input 66config.sub - autoconf support 67configure - configure script (run this first) 68configure.ac - configure script source 69ethertype.h - Ethernet type value definitions 70extract.h - alignment definitions 71gmpls.c - GMPLS definitions 72gmpls.h - GMPLS declarations 73install-sh - BSD style install script 74interface.h - globals, prototypes and definitions 75ip.h - IP definitions 76ip6.h - IPv6 definitions 77ipproto.c - IP protocol type value-to-name table 78ipproto.h - IP protocol type value definitions 79l2vpn.c - L2VPN encapsulation value-to-name table 80l2vpn.h - L2VPN encapsulation definitions 81lbl/os-*.h - OS-dependent defines and prototypes 82llc.h - LLC definitions 83machdep.c - machine dependent routines 84machdep.h - machine dependent definitions 85makemib - mib to header script 86mib.h - mib definitions 87missing/* - replacements for missing library functions 88ntp.c - functions to handle ntp structs 89ntp.h - declarations of functions to handle ntp structs 90mkdep - construct Makefile dependency list 91mpls.h - MPLS definitions 92nameser.h - DNS definitions 93netdissect.h - definitions and declarations for tcpdump-as-library 94 (under development) 95nfs.h - Network File System V2 definitions 96nfsfh.h - Network File System file handle definitions 97nlpid.c - OSI NLPID value-to-name table 98nlpid.h - OSI NLPID definitions 99ospf.h - Open Shortest Path First definitions 100packetdat.awk - TCP chunk summary awk script 101parsenfsfh.c - Network File System file parser routines 102pcap-missing.h - declarations of functions possibly missing from libpcap 103ppp.h - Point to Point Protocol definitions 104print.c - Top-level routines for protocol printing 105print-*.c - The netdissect printers 106rpc_auth.h - definitions for ONC RPC authentication 107rpc_msg.h - definitions for ONC RPC messages 108send-ack.awk - unidirectional tcp send/ack awk script 109slcompress.h - SLIP/PPP Van Jacobson compression (RFC1144) definitions 110smb.h - SMB/CIFS definitions 111smbutil.c - SMB/CIFS utility routines 112stime.awk - TCP send awk script 113tcp.h - TCP definitions 114tcpdump.1 - manual entry 115tcpdump.c - main program 116timeval-operations.h - timeval operations macros 117udp.h - UDP definitions 118util-print.c - utility routines for protocol printers 119win32 - headers and routines for building on Win32 systems 120