the ANK patches applied to tcpdump change the behaviour of a few options, and add new options, without documenting. -a is overloaded -- it will cause an ascii dump to be generated in the patch referenced above i chose to change this flag to -A and document it in the manpage. -n specified only once will still convert port numbers to names, it needs to be specified twice to get behaviour like stock tcpdump i documented this in the manpage. the stock tcpdump default is to enable promiscuous mode, and -p disables it. the ANK tcpdump by default does not have promiscuous mode enabled, and -p will enable it. i documented this difference. i didn't choose to document the new -X, -R or -b flags; i'm not totally sure what they're there for. thanks -dean
I didn't see a patch attached, so here goes one of my own. It documents the changes in man page and in tcpdump source. Hopefully this will clear up the documentation mess a bit.
Created attachment 1002 [details] proposed documentation change
Fixed (your patch applied) in tcpdump-3.4-22. Thanks *very* much for the patch.