aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-08-29Get rid of the EBCDIC stuff in the find dialog - it's not supported yet,Guy Harris4-590/+605
so we shouldn't torment the users by offering it. Check the string type and convert it to an internal representation in the GUI code; have the search code deal only with the internal representation. Save the case-sensitivity flag, and the indication of where string searches look, along with other search parameters. Upper-casify the string, for case-insensitive searches, in the GUI code; don't save the upper-casified string, so it doesn't SHOUT at you when you next pop up a "find" dialog. Convert the hex value string to raw binary data in the GUI code, rather than doing so in the search code. Check that it's a valid string. Connect the signals to the radio buttons after the pointers have been attached to various GUI items - the signal handlers expect some of those pointers to be attached, and aren't happy if they're not. Have "find_packet()" contain a framework for searching, but not contain the matching code; instead, pass it a pointer to a matching routine and an opaque pointer to be passed to the matching routine. Have all the routines that do different types of searching have their own matching routines, and use the common "find_packet()" code, rather than duplicating that code. Search for the Info column by column type, not by name (the user can change the name). When matching on the protocol tree, don't format the entire protocol tree into a big buffer - just have a routine that matches the text representation of a protocol tree item against a string, and, if it finds a match, sets a "we found a match flag" and returns; have that routine not bother doing any more work if that flag is set. (Unfortunately, you can't abort "g_node_children_foreach()" in the middle of a traversal.) Free the generated display filter code after a find-by-display-filter finishes. svn path=/trunk/; revision=8306
2003-08-29From Vincent Jardin: Add support for TeredoGerald Combs5-2/+276
(draft-huitema-v6ops-teredo-00.txt). svn path=/trunk/; revision=8305
2003-08-29Copy the source and destination addresses into a guint32, so that we don'tGerald Combs1-7/+10
bus error on RISC systems. svn path=/trunk/; revision=8304
2003-08-28From Greg Morris: put borders around the options to delimit them andGuy Harris1-23/+94
indicate where they apply, and give tooltips to some of the options. Disable the "Filter:" button unless we're searching with a display filter. Use "Frame data" instead of "Hex" for the option to search the raw frame data, use "Decoded packet" instead of "Decode" for the option to search the strings in the protocol tree display, and use "Packet summary" instead of "Summary" for the option to search the Info column in the packet list display, to make it a bit clearer what's being searched. svn path=/trunk/; revision=8303
2003-08-28Clean up white space.Guy Harris1-10/+10
svn path=/trunk/; revision=8302
2003-08-28Marking packets with the middle mouse button works now with GTK2.Olivier Abad1-2/+1
svn path=/trunk/; revision=8301
2003-08-28Fix signed/unsigned comparison warning.Gilbert Ramirez1-4/+5
svn path=/trunk/; revision=8300
2003-08-28Fix small display bug. we returned the wrong value from ↵Ronnie Sahlberg1-2/+3
dissect_per_choice and it made us display the wrong string sometimes svn path=/trunk/; revision=8299
2003-08-28Update to H.225 when H.245 is tunneled in some octet strings,Ronnie Sahlberg1-11/+37
call the h245 dissector instead of just showing the octet string content as some random hex bytes svn path=/trunk/; revision=8298
2003-08-28update to h245 to decode the county codesRonnie Sahlberg2-2/+206
from anders broman svn path=/trunk/; revision=8297
2003-08-28Update a comment.Guy Harris1-2/+5
svn path=/trunk/; revision=8296
2003-08-28Make "process_reassembled_data()" do the check for fragmentation notGuy Harris8-114/+79
being complete and for fragmentation being trivial (i.e., the packet in question is both the first and last fragment). Have its callers *not* do that check - this lets "process_reassembled_data()" put in the "Reassembled in" item for fragments other than the last fragment. Add a "Reassembled in" field to TDS. svn path=/trunk/; revision=8295
2003-08-28Add a "reassembled in" field.Guy Harris1-2/+31
svn path=/trunk/; revision=8294
2003-08-28It appears that TDS packets do have a sequence number; use that whenGuy Harris1-5/+9
reassembling. svn path=/trunk/; revision=8293
2003-08-28Use "process_reassembled_data()"; this means we get to use common code,Guy Harris1-12/+4
and it means we only dissect the reassembled data for the last frame (so code running through the packet list, and humans clicking on frames, see only one instance of the reassembled data, not multiple instances that might look like retransmissions). svn path=/trunk/; revision=8292
2003-08-28Add an API to let a dissector register a dissector table and field for aGuy Harris2-4/+78
given OUI; the field is used when the PID for that OUI is put into the protocol tree, and the dissector table is used to find a dissector for that PID. Not yet used, thus not yet tested; API is subject to change. (Eventually, several of the cases in the big switch statement in "dissect_llc()" should be handled by registering information for those OUIs.) svn path=/trunk/; revision=8291
2003-08-28From Giles Scott: Nortel/SynOptics Network Management Protocol support.Guy Harris7-4/+340
svn path=/trunk/; revision=8290
2003-08-27Make various lengths unsigned in "dissect_fhandle_data_unknown()", soGuy Harris1-4/+4
lengths > 2^31-1 get handled correctly. svn path=/trunk/; revision=8289
2003-08-27From Yaniv Kaul: fix the dissection of TDS7 login packets, and addGuy Harris1-10/+150
dissection for several fields in that packet. svn path=/trunk/; revision=8288
2003-08-27The Fibre Channel dissector doesn't have any tables in which itGuy Harris1-5/+1
registers itself - it's just imported by name. Get rid of the "create_dissector_handle()" call, as the resulting dissector handle isn't ever used. svn path=/trunk/; revision=8287
2003-08-27Use "GPOINTER_TO_INT()" to convert the return value ofGuy Harris1-2/+2
"gtk_clist_get_row_data()" to an "int", to squelch compiler warnings. svn path=/trunk/; revision=8286
2003-08-27From Richard Urwin:Guy Harris3-100/+117
use Export and Import for the buttons in GTK+ 2.x as well; get rid of a duplicate fclose; other fixes. Update the description of color filters in the Ethereal man page to reflect the change, clean up the formatting (use =item), and add the global and personal color filters files to the FILES section; refer to them as "color filters" files rather than "colorfilters" files, as the FILES section gives the "colorfilters" file name so you don't have to use that as the name. Clean up white space. svn path=/trunk/; revision=8285
2003-08-27Fix a typo.Guy Harris2-2/+2
svn path=/trunk/; revision=8284
2003-08-27update to the talkers popup list.Ronnie Sahlberg1-61/+130
hopefully it will now create the filter for the actual conversation we selected. add EP1 <-> ANY and EP2 <-> ANY fitlers svn path=/trunk/; revision=8283
2003-08-27From Jesper Peterson: fix a typo.Guy Harris1-3/+3
svn path=/trunk/; revision=8282
2003-08-27Include <string.h> to get "strlen()" declared.Guy Harris1-1/+2
svn path=/trunk/; revision=8281
2003-08-27Add a "contains" operator for byte-strings, strings, and tvbuffs (protocols).Gilbert Ramirez27-82/+496
The search uses a naive approach; more work is required to add a Boyer-Moore Search algorithm. svn path=/trunk/; revision=8280
2003-08-27 Updates for the endpoint talkers thingRonnie Sahlberg9-23/+515
The table now has a popup menu with Match display filter Selected EP1 <-> EP2 EP1 --> EP2 EP1 <-- EP2 EP1 --> ANY EP1 <-- ANY EP2 --> ANY EP2 <-- ANY Not Selected ... ... Prepare Display Filter ... Self explanatory. Now the bad news. I set the display filter box in the main window and i call redissect_packet which redissects the packet list but the displayfilter does not take or affect the main window until i click the apply button. Some signal needs to be raised to some object me thinks. Please feel free to fix it if you know what is missing. svn path=/trunk/; revision=8279
2003-08-26From Jesper Peterson:Guy Harris1-4/+7
use WTAP_ENCAP_ATM_PDUS as the default encapsulation for ATM; don't use ULL constants, as not all C compilers that support gint64 support them, and as there's no need to make them ULL constants. svn path=/trunk/; revision=8278
2003-08-26The definition of NonStandardParameter is different between H.225 and H.245Ronnie Sahlberg3-70/+89
Create an alternative NonStandardParameter dissector that matches the definition that H.225 needs. svn path=/trunk/; revision=8277
2003-08-26From Anders Broman, updates and fixes to MEGACORonnie Sahlberg2-231/+337
svn path=/trunk/; revision=8276
2003-08-26Make the option to display the internal PER fields default to FALSERonnie Sahlberg1-2/+2
svn path=/trunk/; revision=8275
2003-08-26Fix macro logic to allow classical resolution even if we have HAVE_GNU_ADNSGerald Combs1-3/+2
defined. svn path=/trunk/; revision=8274
2003-08-26Pass the pointer in the "data" field of the destination address, not aGuy Harris1-2/+2
pointer to that pointer, to "ip_to_str()". svn path=/trunk/; revision=8273
2003-08-26From Jesper Peterson: support for Endace ERF file format.Guy Harris8-6/+538
svn path=/trunk/; revision=8272
2003-08-26From Jesper Peterson:Guy Harris2-0/+5
Extract the FCS decoding section of the PPP_HDLC dissector to allow the CHDLC dissector to use the same routine. The ppp_options used for preferences has been renamed to fcs_options and exported via packet-ppp.h so CHDLC gets a separate (but identical) FCS preference. This means prefs.h has to be included before packet-ppp.h so a couple of ppp related files (packet-{gtp,null,raw,vj}.c) had their includes slightly re-arranged. From me: make the PPP/CHDLC FCS code use "crc32()" to check the 32-bit FCS. svn path=/trunk/; revision=8271
2003-08-26Note that the SCTP CRC-32c is not the same as the AUTODIN/HDLC/802.xGuy Harris1-1/+9
CRC, as it uses a different polynomial. svn path=/trunk/; revision=8270
2003-08-26In "col_set_addr()", don't do anything other than clearing the columnGuy Harris1-1/+3
expression information if the address type is AT_NONE - "address_to_str_buf()" panics if passed an AT_NONE address, as there's nothing sensible one can do with them. (A null string wouldn't be appropriate here, as a dissector might have set the address columns to a string.) svn path=/trunk/; revision=8269
2003-08-26Make the CRC-32 routines take a tvbuff and a length as arguments.Guy Harris5-14/+15
Rename "crc32()" so as not to collide with the one in zlib; rename "crc32_802()" to match. svn path=/trunk/; revision=8268
2003-08-26Fix a typo.Guy Harris1-2/+2
svn path=/trunk/; revision=8267
2003-08-26From Jesper Peterson:Guy Harris11-280/+273
Extract the FCS decoding section of the PPP_HDLC dissector to allow the CHDLC dissector to use the same routine. The ppp_options used for preferences has been renamed to fcs_options and exported via packet-ppp.h so CHDLC gets a separate (but identical) FCS preference. This means prefs.h has to be included before packet-ppp.h so a couple of ppp related files (packet-{gtp,null,raw,vj}.c) had their includes slightly re-arranged. From me: make the PPP/CHDLC FCS code use "crc32()" to check the 32-bit FCS. svn path=/trunk/; revision=8266
2003-08-26Extract the CRC-32 code from the 802.11 dissector into a separate file,Guy Harris6-84/+158
and use it in the Ethernet dissector as well, to check the FCS in Ethernet frames, if present. svn path=/trunk/; revision=8265
2003-08-26Handle snapshot lengths that cut off *part* of the FCS.Guy Harris1-5/+31
svn path=/trunk/; revision=8264
2003-08-26All endpoint talkers table taps use "address_to_str()" as the routine toGuy Harris9-22/+21
use to translate addresses to strings - wire that into "endpoint_talkers_table.c", don't pass the function as an argument to "init_ett_table()". svn path=/trunk/; revision=8263
2003-08-26Use "address_to_str_buf()" to generate column data for non-resolvedGuy Harris1-68/+32
addresses. svn path=/trunk/; revision=8262
2003-08-26Include "osi-utils.h" to define "print_nsap_net_buf()".Guy Harris1-1/+2
svn path=/trunk/; revision=8261
2003-08-26Create an "address_to_str_buf()" routine, called by "address_to_str()",Guy Harris10-135/+186
which fills in a caller-supplied buffer. Create "_buf()" versions of various "to_str" routines for various address types, and create a routine to map SNA FIDs to strings, and use them to finish up "address_to_str_buf()". Get rid of the declaration of "sna_fid_type_4_addr_to_str()" in "packet-sna.h", as that routine has been swallowed up in "sna_fid_to_str()". svn path=/trunk/; revision=8260
2003-08-25From Greg Morris: added support for defragmentation of NDS packets.Guy Harris1-5/+13
svn path=/trunk/; revision=8259
2003-08-25From Greg Morris:Guy Harris1-29/+93
1. Added support for defragmentation of NDS packets 2. The packet signature fixes seemed to never been applied. I have been using this code to dissect reply packets with packet signatures for quite some time and have never experienced any problems with it. Without these changes then reply packets containing signatures will not be decoded properly. It was recommended by Guy to not use public variables to track the signatures but it has been my experience that if signatures are enabled then it is enabled in the whole environment and would be valid for all NCP packets within the trace. I could change this but it would add additional code to build a memory table to track this. If for some reason it is determined to not add this part of the code then I will have to go back and add this table. svn path=/trunk/; revision=8258
2003-08-25From Greg Morris:Guy Harris1-26/+291
1. Added support for defragmentation of NDS packets 2. Moved the run_info_string logic outside of the pinfo->fd->flags->visited because of the dissection of info strings is not processed on subsequent decodes then the find/string/info will not locate info string values. By moving this outside then when the find logic runs a tvb_dissect_new then the info string gets processed again and all data is visible. Otherwise only info column data that is processed by the NCP dissector is visible not any data from ncp2222.py processed by the info string function. svn path=/trunk/; revision=8257