AgeCommit message (Collapse)AuthorFilesLines
2001-12-09When libtoolizing, *don't* forcibly copy over all the files needed; thatGuy Harris1-2/+2
will override our versions of "config.guess" and "config.sub", which we don't want. (We don't use "--force" with "automake --add-missing".) svn path=/trunk/; revision=4363
2001-12-08Clean up indentation.Guy Harris2-35/+36
svn path=/trunk/; revision=4362
2001-12-08Give the help window a title.Guy Harris1-1/+2
svn path=/trunk/; revision=4361
2001-12-08TCP time-sequence, round-trip time, and throughput graphs, from PavelGuy Harris7-2/+3811
Mores. svn path=/trunk/; revision=4360
2001-12-08Fix white space.Guy Harris1-2/+2
svn path=/trunk/; revision=4359
2001-12-08Attach a descriptive name field type and base to dissector tables; thatGuy Harris28-76/+188
specifies how the selector values used as keys in those tables are to be displayed, and the title to use when displaying the table. Use that information in the code to display the initial and current entries of various dissector tables. Have the dissector for BACnet APDUs register itself by name, and have the BACnet NPDU dissector call it iff the BAC_CONTROL_NET bit isn't set, rather than doing it with a dissector table. svn path=/trunk/; revision=4358
2001-12-08From Darren New: BXXP dissector modified to be a BEEP dissector.Guy Harris6-400/+278
Handle "bxxp." preferences as "beep." preferences. svn path=/trunk/; revision=4357
2001-12-08BACP and BAP support in PPP dissector, from Motonori Shindo.Guy Harris3-6/+565
svn path=/trunk/; revision=4356
2001-12-08Latest "config.guess" and "config.sub" fromGuy Harris2-337/+1945
ftp://ftp.gnu.org/gnu/config/ svn path=/trunk/; revision=4355
2001-12-07Use "-no-cpp-precomp" rather than "-traditional-cpp" on MacOS X, as perGuy Harris3-10/+52
the "The Compiler and Tools" section on http://fink.sourceforge.net/doc/porting/basics.php Do so on MacOS X regardless of whether the compiler is called "gcc" or not, as that page also indicates that the compiler is installed as "cc". svn path=/trunk/; revision=4354
2001-12-07From Tom Uijldert: WSP/MMSE changes to handle multipart-content:Guy Harris4-92/+278
packet-wsp.[ch]: - Proper parameter-dissection - Now handles multipart content - Exports content-type & multipart-dissection - Attach a sub-dissector based on content-type packet-mmse.c: - Dissecting message-content added - Registers with WSP based on content-type. svn path=/trunk/; revision=4353
2001-12-07More NT error codes, from Todd Sabin.Guy Harris1-1/+126
svn path=/trunk/; revision=4352
2001-12-07Dfilter code finds field under *any* parent's subtree, not justGilbert Ramirez2-32/+9
the parent under which the field was registered. This is the *unoptimized* version, to give developers something to use while the optimized version is being created. svn path=/trunk/; revision=4351
2001-12-06From Todd Sabin:Guy Harris6-20/+107
add "dissect_ndr_ctx_hnd()" for dissecting context handles, and use it in various DCERPC dissectors; beef up the MS Security Account Manager dissector. Also, export "NT_errors[]" for use by that dissector. svn path=/trunk/; revision=4350
2001-12-06WTAP_ENCAP_ values are #defined in decimal; display them in decimal.Guy Harris1-2/+2
svn path=/trunk/; revision=4349
2001-12-06From Ronnie Sahlberg: reassemble DCERPC-over-SMB requests as well asGuy Harris1-5/+42
responses. svn path=/trunk/; revision=4348
2001-12-06Handle the case of the initial, or current, dissector handle for aGuy Harris1-3/+9
particular port number being null. svn path=/trunk/; revision=4347
2001-12-06From Motonori Shindo: get rid of "send output to /dev/null" hack inGuy Harris4-17/+9
Ascend/Lucent trace reading code's Flex scanner. svn path=/trunk/; revision=4346
2001-12-06In the SMB dissector, keep a list of all the conversation structuresGuy Harris1-4/+33
and, when we're re-initializing the dissector, free up all the hash tables attached to those structures. svn path=/trunk/; revision=4345
2001-12-06There can be more than one SMB request or response in a frame whenGuy Harris1-16/+64
you're doing NetBIOS-over-TCP (yes, I've seen that, with one response being a Transaction and the other being a Read and X), so the frame number is insufficient as a key in the hash table of matched request/response pairs; use the frame number and the MID. svn path=/trunk/; revision=4344
2001-12-06Remove proto_tree from capture_file and PacketWinData, since theyGilbert Ramirez9-81/+53
already contain a pointer to an epan_dissect_t, which contains the proto_tree. Routines calling epan_dissect_new() do not create their own proto_tree via proto_tree_create_root(); instead, they pass a boolean to epan_dissect_new() telling it whether it should create the root proto_tree. svn path=/trunk/; revision=4343
2001-12-06Don't update the "Save As..." dialog box if it doesn't exist.Guy Harris1-7/+22
Update some comments. svn path=/trunk/; revision=4342
2001-12-06Make the "Save only marked frames" button in the "Save As..." dialog boxGuy Harris5-17/+91
sensitive only if there *are* marked frames. svn path=/trunk/; revision=4341
2001-12-05Update Gilbert's e-mail address.Guy Harris1-2/+2
svn path=/trunk/; revision=4340
2001-12-05The Visual Networks tool that generates capture files that we now canGuy Harris5-10/+10
read is Visual UpTime. svn path=/trunk/; revision=4339
2001-12-05From Taisuke Sasaki: fix the handling of the metric and referenced LSGuy Harris2-6/+6
type fields in OSPFv3 packets. Clean up white space. svn path=/trunk/; revision=4338
2001-12-05Note that Ethereal's and Tethereal's native capture file format isGuy Harris5-48/+54
libpcap format, and say that it's also used by "other tools" (tcpdump and Ethereal/Tethereal aren't the only tools that write captures in that format). Weaken the claim that we read Etherpeek files to say only that we read Etherpeek versions 5, 6, and 7 for Macintosh, so people don't conclude that we read Etherpeek-for-Windows captures (we don't). svn path=/trunk/; revision=4337
2001-12-05Add a heuristic dissector for protocols running atop X.25.Guy Harris1-19/+31
svn path=/trunk/; revision=4336
2001-12-05Support for reassembly of DCERPC over SMB, from Ronnie Sahlberg.Guy Harris5-89/+203
svn path=/trunk/; revision=4335
2001-12-05The data structure for per-packet headers for Mac V5 and V6 EtherpeekGuy Harris1-64/+96
files would put a 32-bit quantity on a 16-bit boundary without padding; this means that many compilers will insert the padding and thus make the structure not match what's in the file. Instead of using a C structure, #define values for the offsets of fields, read the header into an array of bytes, and extract values using the offsets. svn path=/trunk/; revision=4334
2001-12-05From Tim Potter: add the DOS error for "file already exists" on aGuy Harris3-2/+5
rename. svn path=/trunk/; revision=4333
2001-12-05Don't fetch "t2i->info_level" if "t2i" is null.Guy Harris1-20/+22
svn path=/trunk/; revision=4332
2001-12-04In the NetMon capture file reading code, if we get a short read whenGuy Harris3-8/+8
trying to read the frame table, return -1 with "*err" set to WTAP_ERR_SHORT_READ, don't return 0 - we've already decided that the file is a NetMon file, so we shouldn't return a "this isn't a NetMon file" indication, we should return a "this file is too short" error, as that's what the problem is. Fix up the error messages for WTAP_ERR_SHORT_READ to indicate that the read might have gotten cut short in the middle of data other than a packet. svn path=/trunk/; revision=4331
2001-12-04Update the README file to reflect the current list of capture fileGuy Harris1-5/+8
formats we can read (and to put them in the order in which they're mentioned in the man pages, to make it easier to make sure the lists are the same). svn path=/trunk/; revision=4330
2001-12-04Update the manual pages to reflect the addition of support for readingGuy Harris4-32/+36
and writing Visual Networks traffic capture files. svn path=/trunk/; revision=4329
2001-12-04Support for reading Visual Networks traffic capture files, from TomGuy Harris9-10/+723
Nisbet. Make a comment in "wiretap/file.c" clearer, so people know where to put the entries for their capture file type. svn path=/trunk/; revision=4328
2001-12-04From Motonori Shindo: fix Ascend/Lucent trace reading code to handleGuy Harris3-9/+111
later trace formats that have an ASCII dump at the end of the line. svn path=/trunk/; revision=4327
2001-12-04Document ring buffer mode and the "-b" flag.Guy Harris2-0/+38
svn path=/trunk/; revision=4326
2001-12-04When making the "number of ring buffer files" spin button sensitive orGuy Harris1-40/+67
insensitive, make its label sensitive or insensitive too. When "update list of packets in real time" mode is on, make the ring buffer mode toggle button, and the "number of ring buffer files" spin button, insensitive, as ring buffer mode is not supported in "update list of packets in real time" captures. When "update list of packets in real time" mode is off, make the auto-scroll mode button insensitive, as auto-scroll mode is meaningless unless you're doing an "update list of packets in real time" capture. Bundle all the sensitivity setting into a single common routine. Make "ring buffer" two words. svn path=/trunk/; revision=4325
2001-12-04Make the bytes-written information from Wiretap a long, as we allowGuy Harris2-0/+441
files to get that big. From Thomas Wittwer and Matthias Nyffenegger: Support for "ring buffer mode", wherein there's a ring buffer of N capture files; as each capture file reaches its maximum size (the ring buffer works only with a maximum capture file size specified), Ethereal rolls over to the next capture file in the ring buffer, replacing whatever packets might be in it with new packets. svn path=/trunk/; revision=4324
2001-12-04Make the bytes-written information from Wiretap a long, as we allowGuy Harris14-50/+325
files to get that big. From Thomas Wittwer and Matthias Nyffenegger: Support for "ring buffer mode", wherein there's a ring buffer of N capture files; as each capture file reaches its maximum size (the ring buffer works only with a maximum capture file size specified), Ethereal rolls over to the next capture file in the ring buffer, replacing whatever packets might be in it with new packets. svn path=/trunk/; revision=4323
2001-12-04Support for stopping capture at specified capture file size or captureGuy Harris19-52/+984
duration, from Thomas Wittwer and Matthias Nyffenegger. svn path=/trunk/; revision=4322
2001-12-04From Thomas Wittwer: remove unnecessary calls toGuy Harris2-3/+2
"prefs_module_foreach()". svn path=/trunk/; revision=4321
2001-12-04Get rid of some unused variables.Guy Harris1-5/+1
svn path=/trunk/; revision=4320
2001-12-04Add the ISO 8473 CLNP dissector handle to the dissector table for X.25Guy Harris1-1/+2
SPIs. svn path=/trunk/; revision=4319
2001-12-03"ptype" is always set, even if only to PT_NONE; it will be set to PT_TCPGuy Harris1-21/+22
only there's TCP in the current frame and it will be set to PT_UDP only if there's UDP in the current frame. As such, there's no need to check "ipproto" before checking "ptype" - and we should check "ptype" as well as "ipproto" when deciding whether we'll put up a "Decode As" dialog with anything in it. (Not that there's anything other than IPv4 or IPv6 over which we currently dissect TCP or UDP....) svn path=/trunk/; revision=4318
2001-12-03To check whether the current frame contains TCP or UDP traffic, checkGuy Harris1-168/+25
whether the port type is PT_TCP or PT_UDP, don't check the IP protocol type at the network layer (except to check whether it's set at all, to decide whether it's IP/IPv6 - if it's not, the transport isn't TCP or UDP); that way, we don't have to keep track of which IP protocol numbers are being decoded as TCP or UDP. svn path=/trunk/; revision=4317
2001-12-03Update of M2PA support to draft 3, from Michael Tuexen.Guy Harris2-190/+184
svn path=/trunk/; revision=4316
2001-12-03SMPP support, from Tom Uijldert.Guy Harris4-2/+2219
svn path=/trunk/; revision=4315
2001-12-03Remove the no-longer-extant "conv_dissector_add()" from the list ofGuy Harris5-11/+13
plugin APIs, and add the new "dissector_add_handle()". Add an entry in the dissector table structure for "create_dissector_handle". svn path=/trunk/; revision=4314