Scott Langley - 2007-05-12

Note that the version of tcpick from Debian 0.2.1-3 incorporates several fixes that are not available from in SourceForge version.  These fixes make tcpick run much more reliably in my experience.

You can get the Debian version here:

  http://packages.debian.org/unstable/net/tcpick

as source code and build it for other distributions, as well.

In that case, you need to download the files:
 
  tcpick_0.2.1.orig.tar.gz
  tcpick_0.2.1-3.diff.gz

and apply the patches in tcpick_0.2.1-3.diff.gz to the original source in tcpick_0.2.1.orig.tar.gz before you build it.

Here is the list of included fixes from the Debian changelog:

tcpick (0.2.1-3) unstable; urgency=high

  * src/write.c: temporary patch to fix CVE-2006-0048 (Closes: Bug#360571)
    As upstream is not responsive, I have written this one-line patch.
    With the option -yP, tcpick shows data contained in the captured packets.
    For some packets, tcpick computes a negative buffer length, which is used
    in a while (buffer length) {} loop to display the packet content. When the
    buffer length is negative, the loop never ends, and tcpick segfaults after
    a while.
    This patch tests if the computed buffer length is negative before using
    it, and set it to 0 in this case.

-- Cédric Delfosse <cedric@debian.org>  Fri, 14 Apr 2006 20:59:07 +0200

tcpick (0.2.1-2) unstable; urgency=low

  * Patch to make it run on ppc, thanks to Alan Curry (Closes: Bug#327327)
  * Patch to fix segfault on 64 bit architecture, thanks to Dann Frazier
    (Closes: Bug#326927)
  * Patch to fix a double free that make tcpick CPU loops (Closes: Bug#319864)