diff --git a/net/tcpdump/Makefile b/net/tcpdump/Makefile
index 72ef7be9b8a6..f8f726ddd20a 100644
--- a/net/tcpdump/Makefile
+++ b/net/tcpdump/Makefile
@@ -1,58 +1,62 @@
 PORTNAME=	tcpdump
 PORTVERSION=	4.99.4
+PORTREVISION=	1
 CATEGORIES=	net
 MASTER_SITES=	http://www.tcpdump.org/release/
 
+PATCH_SITES=	https://github.com/the-tcpdump-group/tcpdump/commit/
+PATCHFILES=	5c1ecd8c.patch:-p1
+
 MAINTAINER=	garga@FreeBSD.org
 COMMENT=	Ubiquitous network traffic analysis tool
 WWW=		https://www.tcpdump.org/
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libpcap.so.1:net/libpcap
 
 USES=		cpe gmake
 
 GNU_CONFIGURE=	yes
 
 PLIST_FILES=	sbin/tcpdump \
 		man/man1/tcpdump.1.gz
 
 UNPRIV_USER?=	tcpdump
 CHROOTDIR?=	/var/run/tcpdump
 
 OPTIONS_DEFINE=	CRYPTO SMB SMI USER CHROOT
 OPTIONS_DEFAULT=	CRYPTO SMB SMI
 
 CHROOT_DESC=	Chroot to /var/run/tcpdump (set CHROOTDIR to change)
 CRYPTO_DESC=	Support IPSEC and TCPMD5
 # This one is intentionally worded this way because the default
 # description implies that tcpdump would not capture SMB, which
 # is not true. It will just not print it if this option is off.
 SMB_DESC=	Support printing SMB information
 SMI_DESC=	Allow MIBs to be loaded on the fly
 USER_DESC=	Drop privileges to dedicated user
 
 CHROOT_CONFIGURE_ON=	--with-chroot=${CHROOTDIR}
 CRYPTO_USES=		ssl
 CRYPTO_CONFIGURE_WITH=	crypto
 SMB_CONFIGURE_ENABLE=	smb
 SMI_LIB_DEPENDS=	libsmi.so:net-mgmt/libsmi
 SMI_CONFIGURE_WITH=	smi
 USER_CONFIGURE_ON=	--with-user=${UNPRIV_USER}
 USER_VARS=		USERS=${UNPRIV_USER} GROUPS=${UNPRIV_USER}
 
 post-patch:
 	@${REINPLACE_CMD} -e 's,sys/capability.h,sys/capsicum.h,' \
 		${WRKSRC}/tcpdump.c
 
 post-configure:
 	@${REINPLACE_CMD} -e "s,\./\.\./${LIBPCAP_FORCE_VER}/libpcap\.a,${LOCALBASE}/lib/libpcap.so.1," \
 		${WRKSRC}/Makefile
 
 do-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/tcpdump ${STAGEDIR}/${PREFIX}/sbin
 	${INSTALL_MAN} ${WRKSRC}/tcpdump.1 ${STAGEDIR}/${MAN1PREFIX}/man/man1
 
 .include <bsd.port.mk>
diff --git a/net/tcpdump/distinfo b/net/tcpdump/distinfo
index 58432aec732c..8716a5b81324 100644
--- a/net/tcpdump/distinfo
+++ b/net/tcpdump/distinfo
@@ -1,3 +1,5 @@
-TIMESTAMP = 1681124583
+TIMESTAMP = 1694861403
 SHA256 (tcpdump-4.99.4.tar.gz) = 0232231bb2f29d6bf2426e70a08a7e0c63a0d59a9b44863b7f5e2357a6e49fea
 SIZE (tcpdump-4.99.4.tar.gz) = 1903612
+SHA256 (5c1ecd8c.patch) = 1fe70c129bd03674e830728ecc346f5fc9badd45e1856d83b0ca3978a15eaad1
+SIZE (5c1ecd8c.patch) = 1004