diff --git a/tcpdump-3.9.7.tar.bz2 b/tcpdump-3.9.7.tar.bz2
deleted file mode 100644
index 5cc933b..0000000
--- a/tcpdump-3.9.7.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3273f483853c81d98f2885abd26fe6bf09bdde86dbca0952e8906df6c6de3b33
-size 713188
diff --git a/tcpdump-3.9.7-aliasing.diff b/tcpdump-3.9.8-aliasing.diff
similarity index 100%
rename from tcpdump-3.9.7-aliasing.diff
rename to tcpdump-3.9.8-aliasing.diff
diff --git a/tcpdump-3.9.7-autoconf.diff b/tcpdump-3.9.8-autoconf.diff
similarity index 100%
rename from tcpdump-3.9.7-autoconf.diff
rename to tcpdump-3.9.8-autoconf.diff
diff --git a/tcpdump-3.9.7-juniper.diff b/tcpdump-3.9.8-juniper.diff
similarity index 100%
rename from tcpdump-3.9.7-juniper.diff
rename to tcpdump-3.9.8-juniper.diff
diff --git a/tcpdump-3.9.7-prototypes.diff b/tcpdump-3.9.8-prototypes.diff
similarity index 100%
rename from tcpdump-3.9.7-prototypes.diff
rename to tcpdump-3.9.8-prototypes.diff
diff --git a/tcpdump-3.9.7-uninitialized.diff b/tcpdump-3.9.8-uninitialized.diff
similarity index 100%
rename from tcpdump-3.9.7-uninitialized.diff
rename to tcpdump-3.9.8-uninitialized.diff
diff --git a/tcpdump-3.9.8.tar.bz2 b/tcpdump-3.9.8.tar.bz2
new file mode 100644
index 0000000..d2caf88
--- /dev/null
+++ b/tcpdump-3.9.8.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ca14a7f76cfeba4a90e14e03a4de66147a640126820fff7354ff354fd58d4819
+size 773959
diff --git a/tcpdump.changes b/tcpdump.changes
index 307b3de..9378a48 100644
--- a/tcpdump.changes
+++ b/tcpdump.changes
@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Tue Jan  8 18:04:02 CET 2008 - prusnak@suse.cz
+
+- updated to 3.9.8
+  * Rework ARP printer
+  * Rework OSPFv3 printer
+  * Add support for Frame-Relay ARP
+  * Decode DHCP Option 121 (RFC 3442 Classless Static Route)
+  * Decode DHCP Option 249 (MS Classless Static Route) the same as Option 121
+  * TLV: Add support for Juniper .pcap extensions
+  * Print EGP header in new-world-order style
+  * Converted print-isakmp.c to NETDISSECT
+  * Moved AF specific stuff into af.h
+  * Test subsystem now table driven, and saves outputs and diffs to one place
+  * Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted
+    libpcap files on an OS other than where the file was generated
+
 -------------------------------------------------------------------
 Thu Jul 26 16:03:44 CEST 2007 - prusnak@suse.cz
 
diff --git a/tcpdump.spec b/tcpdump.spec
index ae28cbd..95b368d 100644
--- a/tcpdump.spec
+++ b/tcpdump.spec
@@ -1,7 +1,7 @@
 #
-# spec file for package tcpdump (Version 3.9.7)
+# spec file for package tcpdump (Version 3.9.8)
 #
-# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
 # This file and all modifications and additions to the pristine
 # package are under the same license as the package itself.
 #
@@ -12,12 +12,12 @@
 
 Name:           tcpdump
 BuildRequires:  libpcap-devel libsmi openssl-devel
-Version:        3.9.7
+Version:        3.9.8
 Release:        1
-Autoreqprov:    on
+AutoReqProv:    on
 License:        BSD 3-Clause
 Group:          Productivity/Networking/Diagnostic
-URL:            http://www.tcpdump.org/
+Url:            http://www.tcpdump.org/
 Summary:        A Packet Sniffer
 Source:         %{name}-%{version}.tar.bz2
 Source1:        %{name}-qeth
@@ -72,6 +72,20 @@ rm -rf $RPM_BUILD_ROOT
 %{_sbindir}/*
 
 %changelog
+* Tue Jan 08 2008 - prusnak@suse.cz
+- updated to 3.9.8
+  * Rework ARP printer
+  * Rework OSPFv3 printer
+  * Add support for Frame-Relay ARP
+  * Decode DHCP Option 121 (RFC 3442 Classless Static Route)
+  * Decode DHCP Option 249 (MS Classless Static Route) the same as Option 121
+  * TLV: Add support for Juniper .pcap extensions
+  * Print EGP header in new-world-order style
+  * Converted print-isakmp.c to NETDISSECT
+  * Moved AF specific stuff into af.h
+  * Test subsystem now table driven, and saves outputs and diffs to one place
+  * Require <net/pfvar.h> for pf definitions - allows reading of pflog formatted
+  libpcap files on an OS other than where the file was generated
 * Thu Jul 26 2007 - prusnak@suse.cz
 - updated to 3.9.7
   * NFS: Print unsigned values as such