1If you have not built libpcap, and your system does not have libpcap 2installed, install libpcap first. Your system might provide a version 3of libpcap that can be installed; if so, to compile tcpdump you might 4need to install a "developer" version of libpcap as well as the 5"run-time" version. You can also install tcpdump.org's version of 6libpcap; see the README file in this directory for the ftp location. 7 8You will need an ANSI C compiler to build tcpdump. The configure script 9will abort if your compiler is not ANSI compliant. If this happens, use 10the generally available GNU C compiler (GCC). 11 12After libpcap has been built (either install it with "make install" or 13make sure both the libpcap and tcpdump source trees are in the same 14directory), run ./configure (a shell script). "configure" will 15determine your system attributes and generate an appropriate Makefile 16from Makefile.in. Now build tcpdump by running "make". 17 18If everything builds ok, su and type "make install". This will install 19tcpdump and the manual entry. Any user will be able to use tcpdump to 20read saved captures. Whether a user will be able to capture traffic 21depends on the OS and the configuration of the system; see the tcpdump 22man page for details. DO NOT give untrusted users the ability to 23capture traffic. If a user can capture traffic, he or she could use 24utilities such as tcpdump to capture any traffic on your net, including 25passwords. 26 27Note that most systems ship tcpdump, but usually an older version. 28Remember to remove or rename the installed binary when upgrading. 29 30If your system is not one which we have tested tcpdump on, you may have 31to modify the configure script and Makefile.in. Please send us patches 32for any modifications you need to make. 33 34Please see "PLATFORMS" for notes about tested platforms. 35 36 37FILES 38----- 39CHANGES - description of differences between releases 40CREDITS - people that have helped tcpdump along 41INSTALL.txt - this file 42LICENSE - the license under which tcpdump is distributed 43Makefile.in - compilation rules (input to the configure script) 44README - description of distribution 45Readme.Win32 - notes on building tcpdump on Win32 systems (with WinPcap) 46VERSION - version of this release 47aclocal.m4 - autoconf macros 48addrtoname.c - address to hostname routines 49addrtoname.h - address to hostname definitions 50ah.h - IPSEC Authentication Header definitions 51appletalk.h - AppleTalk definitions 52ascii_strcasecmp.c - locale-independent case-independent string comparison 53 routines 54atime.awk - TCP ack awk script 55atm.h - ATM traffic type definitions 56bpf_dump.c - BPF program printing routines, in case libpcap doesn't 57 have them 58chdlc.h - Cisco HDLC definitions 59cpack.c - functions to extract packed data 60cpack.h - declarations of functions to extract packed data 61config.guess - autoconf support 62config.h.in - autoconf input 63config.sub - autoconf support 64configure - configure script (run this first) 65configure.in - configure script source 66ether.h - Ethernet definitions 67ethertype.h - Ethernet type value definitions 68extract.h - alignment definitions 69gmpls.c - GMPLS definitions 70gmpls.h - GMPLS declarations 71gmt2local.c - time conversion routines 72gmt2local.h - time conversion prototypes 73install-sh - BSD style install script 74interface.h - globals, prototypes and definitions 75ip.h - IP definitions 76ip6.h - IPv6 definitions 77ipproto.c - IP protocol type value-to-name table 78ipproto.h - IP protocol type value definitions 79l2vpn.c - L2VPN encapsulation value-to-name table 80l2vpn.h - L2VPN encapsulation definitions 81lbl/os-*.h - OS-dependent defines and prototypes 82llc.h - LLC definitions 83machdep.c - machine dependent routines 84machdep.h - machine dependent definitions 85makemib - mib to header script 86mib.h - mib definitions 87missing/* - replacements for missing library functions 88mkdep - construct Makefile dependency list 89mpls.h - MPLS definitions 90nameser.h - DNS definitions 91netdissect.h - definitions and declarations for tcpdump-as-library 92 (under development) 93nfs.h - Network File System V2 definitions 94nfsfh.h - Network File System file handle definitions 95nlpid.c - OSI NLPID value-to-name table 96nlpid.h - OSI NLPID definitions 97ospf.h - Open Shortest Path First definitions 98packetdat.awk - TCP chunk summary awk script 99parsenfsfh.c - Network File System file parser routines 100pcap_dump_ftell.c - pcap_dump_ftell() implementation, in case libpcap 101 doesn't have it 102pcap-missing.h - declarations of functions possibly missing from libpcap 103ppp.h - Point to Point Protocol definitions 104print.c - Top-level routines for protocol printing 105print-*.c - The netdissect printers 106rpc_auth.h - definitions for ONC RPC authentication 107rpc_msg.h - definitions for ONC RPC messages 108send-ack.awk - unidirectional tcp send/ack awk script 109setsignal.c - OS-independent signal routines 110setsignal.h - OS-independent signal prototypes 111slcompress.h - SLIP/PPP Van Jacobson compression (RFC1144) definitions 112smb.h - SMB/CIFS definitions 113smbutil.c - SMB/CIFS utility routines 114stime.awk - TCP send awk script 115tcp.h - TCP definitions 116tcpdump.1 - manual entry 117tcpdump.c - main program 118timeval-operations.h - timeval operations macros 119udp.h - UDP definitions 120util-print.c - utility routines for protocol printers 121vfprintf.c - emulation routine 122win32 - headers and routines for building on Win32 systems 123