diff --git a/net/tcpdump/Makefile b/net/tcpdump/Makefile
index 947a7d936eb3..72ef7be9b8a6 100644
--- a/net/tcpdump/Makefile
+++ b/net/tcpdump/Makefile
@@ -1,58 +1,58 @@
 PORTNAME=	tcpdump
-PORTVERSION=	4.99.3
+PORTVERSION=	4.99.4
 CATEGORIES=	net
 MASTER_SITES=	http://www.tcpdump.org/release/
 
 MAINTAINER=	garga@FreeBSD.org
 COMMENT=	Ubiquitous network traffic analysis tool
 WWW=		https://www.tcpdump.org/
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libpcap.so.1:net/libpcap
 
 USES=		cpe gmake
 
 GNU_CONFIGURE=	yes
 
 PLIST_FILES=	sbin/tcpdump \
 		man/man1/tcpdump.1.gz
 
 UNPRIV_USER?=	tcpdump
 CHROOTDIR?=	/var/run/tcpdump
 
 OPTIONS_DEFINE=	CRYPTO SMB SMI USER CHROOT
 OPTIONS_DEFAULT=	CRYPTO SMB SMI
 
 CHROOT_DESC=	Chroot to /var/run/tcpdump (set CHROOTDIR to change)
 CRYPTO_DESC=	Support IPSEC and TCPMD5
 # This one is intentionally worded this way because the default
 # description implies that tcpdump would not capture SMB, which
 # is not true. It will just not print it if this option is off.
 SMB_DESC=	Support printing SMB information
 SMI_DESC=	Allow MIBs to be loaded on the fly
 USER_DESC=	Drop privileges to dedicated user
 
 CHROOT_CONFIGURE_ON=	--with-chroot=${CHROOTDIR}
 CRYPTO_USES=		ssl
 CRYPTO_CONFIGURE_WITH=	crypto
 SMB_CONFIGURE_ENABLE=	smb
 SMI_LIB_DEPENDS=	libsmi.so:net-mgmt/libsmi
 SMI_CONFIGURE_WITH=	smi
 USER_CONFIGURE_ON=	--with-user=${UNPRIV_USER}
 USER_VARS=		USERS=${UNPRIV_USER} GROUPS=${UNPRIV_USER}
 
 post-patch:
 	@${REINPLACE_CMD} -e 's,sys/capability.h,sys/capsicum.h,' \
 		${WRKSRC}/tcpdump.c
 
 post-configure:
 	@${REINPLACE_CMD} -e "s,\./\.\./${LIBPCAP_FORCE_VER}/libpcap\.a,${LOCALBASE}/lib/libpcap.so.1," \
 		${WRKSRC}/Makefile
 
 do-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/tcpdump ${STAGEDIR}/${PREFIX}/sbin
 	${INSTALL_MAN} ${WRKSRC}/tcpdump.1 ${STAGEDIR}/${MAN1PREFIX}/man/man1
 
 .include <bsd.port.mk>
diff --git a/net/tcpdump/distinfo b/net/tcpdump/distinfo
index 2579f9d9b25b..58432aec732c 100644
--- a/net/tcpdump/distinfo
+++ b/net/tcpdump/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1680290363
-SHA256 (tcpdump-4.99.3.tar.gz) = ad75a6ed3dc0d9732945b2e5483cb41dc8b4b528a169315e499c6861952e73b3
-SIZE (tcpdump-4.99.3.tar.gz) = 1901814
+TIMESTAMP = 1681124583
+SHA256 (tcpdump-4.99.4.tar.gz) = 0232231bb2f29d6bf2426e70a08a7e0c63a0d59a9b44863b7f5e2357a6e49fea
+SIZE (tcpdump-4.99.4.tar.gz) = 1903612