aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2002-08-22Fix the comment before "CMP_ADDRESS()" to reflect reality ("memcmp()"Guy Harris1-3/+3
isn't guaranteed to return 0, 1, or -1, it returns *some* positive number, not necessarily 1, if the first argument is greater than the second, and *some* negative number, not necessarily -1, if the first argument is less than the second). svn path=/trunk/; revision=6063
2002-08-22Put the top-level item for an NT access mask into the protocol tree withGuy Harris1-3/+2
"proto_tree_add_uint()" and the hfindex passed to us, rather than as a text item. That means it has the name our caller gave to it, and that it's a filterable field. svn path=/trunk/; revision=6062
2002-08-22Display NetBIOS names in standard NetBIOS-name style if they have theGuy Harris1-3/+19
right length, and display them with an error indication and using "format_text()" if they're not ("format_text()" deals with the string not being null-terminated, and handles non-printable characters). svn path=/trunk/; revision=6061
2002-08-22From Andy Hood: in the AODV6 dissector, rename "ext_t" to "aodv6_ext_t",Guy Harris2-21/+35
as "ext_t" is defined by a system header file on AIX. Get rid of the bitfields in "struct aodv_rrep" and "rrep_t", as some compilers don't allow any type other than "int" or "unsigned int" for bitfields (so "guint8" won't work), and as there's no guarantee of the order of bitfields in a structure. Make "rreq", "rrep", and "rerr" local to "dissect_aodv()" and "dissect_aodv6()", as they're not used outside them. Add a protocol tree item for the prefix size field in AODV and AODV6 replies. svn path=/trunk/; revision=6060
2002-08-22Fix the type of "spoolss_specific_rights()" to match the curentGuy Harris1-4/+2
definition of "nt_access_mask_fn_t". svn path=/trunk/; revision=6059
2002-08-22First part of support for Thursby's Mac extenstions from CIFS2002.Richard Sharpe1-2/+189
svn path=/trunk/; revision=6058
2002-08-22Some cleanups and fixes from Guy:Tim Potter5-46/+23
- combine proto_tree_add_text() and proto_tree_append_text() calls in the access mask dissector - make the specific access bits dissector functions return void instead of an offset I think Samba has the create user reply wrong. There is perhaps a uint32 marked as unknown that shouldn't be there. Removing this parses all the captures I have. svn path=/trunk/; revision=6057
2002-08-21Create a subtree with an item "tcp.analysis.flags" to keep allRonnie Sahlberg1-20/+35
tcp sequence number analysis flags, such as retransmission , lost-segment, etc to make it easier to search for all these conditions. svn path=/trunk/; revision=6056
2002-08-21Added some NT access mask constants.Tim Potter1-5/+34
svn path=/trunk/; revision=6055
2002-08-21Call dissect_nt_access_mask() instead of dissect_ndr_uint32()Tim Potter6-35/+743
svn path=/trunk/; revision=6054
2002-08-21Added a NT access mask dissector. The breaks the permission bits up intoTim Potter2-2/+372
generic, standard and specific mode bits. A protocol dissector can pass in it's own function for dissecting the specific mode bits, if known. svn path=/trunk/; revision=6053
2002-08-21Moved the generic true_false_string saying "Set", "Not set" intoTim Potter9-46/+16
epan/packet.c It was cut and pasted into seven other dissectors! svn path=/trunk/; revision=6052
2002-08-21Make a common routine for dissecting GSS-API tokens, and call it forGuy Harris1-4/+9
GSS-API tokens in RPCSEC_GSS_INIT and RPCSEC_GSS_CONTINUE_INIT arguments and results. svn path=/trunk/; revision=6051
2002-08-21Note that, as we now have a GSS-API token dissector, we should perhapsGuy Harris1-1/+7
call that for GSS-API tokens in ONC RPC calls. svn path=/trunk/; revision=6050
2002-08-21Added GSS-API and SPNEGO dissectors to MakefilesTim Potter2-2/+7
svn path=/trunk/; revision=6049
2002-08-21A dissector for SPNEGO (rfc2478). This is a sub-dissector for GSS-API usedTim Potter1-0/+91
in Windows 2000/XP authentication. It's pretty skeletal at the moment. More work required. svn path=/trunk/; revision=6048
2002-08-21A dissector for GSS-API (rfc2078). This is used by Windows 2000/XP whenTim Potter2-0/+265
the extended security bit is set. svn path=/trunk/; revision=6047
2002-08-21Put the volume identification in quotes, so it doesn't look stupid whenGuy Harris1-2/+2
it's empty. svn path=/trunk/; revision=6046
2002-08-21Display volume tags as per SMC-2.Guy Harris1-7/+28
svn path=/trunk/; revision=6045
2002-08-21Added a few new infromation levels for the share structs basedRonnie Sahlberg1-1/+294
on samba sources. svn path=/trunk/; revision=6044
2002-08-21Handle Read Block Position replies.Guy Harris1-25/+191
Display the additional sense code+qualifier in an element in Read Element Status symbolically. svn path=/trunk/; revision=6043
2002-08-21Handle mode pages differently depending on the type of device (some modeGuy Harris1-180/+1187
page codes are used in different ways in different devices, e.g. 0x10). Handle commands and mode pages for media changer devices (and move some commands from the "sequential device" category to the "media changer" category, where SSC-2 and SMC-2 put them). Add some missing SPC commands (not present in SPC-2). Handle some additional SSC-2 commands. Fix some other bugs. svn path=/trunk/; revision=6042
2002-08-21Dissect udp port 389 which is connectionless LDAP as implemented byTim Potter1-1/+3
Microsoft. It would be nice if this proto was called CLDAP in the protocol field - maybe later. svn path=/trunk/; revision=6041
2002-08-21Update ChangeLog and NEWS files for the 0.9.6 release.Gerald Combs2-66/+74
svn path=/trunk/; revision=6039
2002-08-20Use the new dissector API, and check whether the magic number andGuy Harris1-13/+35
protocol version is OK and reject the packet if it's not, so that we don't grab all packets on port 8116 even if they're, for example, ONC RPC packets. Fix some typos. Get rid of C++-style comments. svn path=/trunk/; revision=6038
2002-08-20From Anand Narwani: fix an infinite recursion issue when decodingGuy Harris1-1/+10
Concatenated frames which contain 0 length PDU docsis frames. svn path=/trunk/; revision=6037
2002-08-20From Anand Narwani: add a missing "-static.o" file.Guy Harris1-1/+2
svn path=/trunk/; revision=6036
2002-08-20Have "dissect_scsi_cdb()" take an argument that's a SCSI device type,Guy Harris4-60/+146
for the benefit of dissectors such as the NDMP dissector that can at least supply a reasonable guess for the device type; more than one type of device can be opened on the same host over NDMP, so the scheme currently used by the SCSI dissector to remember device types in INQUIRY replies won't work. Have the iSCSI dissector supply SCSI_DEV_UNKNOWN, and have the NDMP dissector supply SCSI_DEV_SMC for NDMP_SCSI_EXECUTE_CDB (under the assumption that it's operating on a media changer) and supply SCSI_DEV_SSC for NDMP_TAPE_EXECUTE_CDB (under the assumption that it's operating on a tape device). Fix memory leaks in the SCSI dissector. Fix the dissectors for the SSC READ(6) and WRITE(6) CDBs to dissect the transfer length as a 24-bit quantity. svn path=/trunk/; revision=6035
2002-08-20Add -S option to tethereal. It is the equivalent to Ethereals displayJörg Mayer2-7/+21
packets in real time feature. svn path=/trunk/; revision=6034
2002-08-20From Yaniv Kaul:Guy Harris1-12/+119
1. Add parsing of group description attribute (donno why it was missed so far). 2. Enumeration of # of transforms and # of payloads (just makes it easier to look at). 3. Parsing of Vendor ID: 3.1 Identify several vendors' Vendor ID string (Microsoft, CyberGuard, SafeNet, Check Point at the moment) - if anyone has more VendorID strings, I'd be more than happy to add them. 3.2 Identify Vendor ID string of draft_ietf_ipsec_nat_t_ike_03 (NAT traversal RFC draft). 3.3 Further parsing of Check Point's Vendor ID string, to include Check Point product and version. If anyone has other vendors' parsing knowledge, again, I'd be happy to add it. svn path=/trunk/; revision=6033
2002-08-20Regularize the format of the "(size)" tags - the SCSI specs appear notGuy Harris1-219/+411
to put a space between the command name and the tag, and we weren't doing that for all tags, so let's just get rid of the space. Keep track of the device type and command type separately for commands. Remember device types when we see an INQUIRY *response*, not a request, and save the device type bits, rather than saving some random bit from the INQUIRY *request* as the device type. This means we have to dissect the INQUIRY response payload even if we're not building a protocol tree; do so. Put in a comment noting that the source and destination address are not sufficient as a key to use for the device type, as a given network-layer entity may have more than one SCSI device (and connections aren't good enough, either). Put the code to dissect MODE SELECT and MODE SENSE block descriptors into a common routine. Have that routine dissect more than one block descriptor. Have it take the device type and the "long LBA" flag as arguments, so that it can correctly dissect the block descriptors. Handle READ(6) and WRITE(6) on sequential devices. Get rid of "dissect_scsi()" - it's not used. svn path=/trunk/; revision=6032
2002-08-20If thou art dissecting a protocol that can have multiple PDUs per frameGuy Harris1-1/+4
and where the PDU header has a length field that is the length of the entire PDU, including the header, thou shalt not try to loop doing that if thou findest a packet with a length of zero, lest thou spin in an infinite loop. svn path=/trunk/; revision=6031
2002-08-20Forgot the RPMS directory in the .cvsignore.Jörg Mayer1-0/+1
svn path=/trunk/; revision=6030
2002-08-20Small cleanups to the rpm building process:Jörg Mayer2-3/+6
- Don't fail if the intermediate directories BUILD, SOURCE, SRPMS already exist. - Add these directories to .cvsignore. svn path=/trunk/; revision=6029
2002-08-20Add the FAQ to the packages.Jörg Mayer3-3/+6
svn path=/trunk/; revision=6028
2002-08-20Small script to create the plain text version of the FAQ.Jörg Mayer1-0/+26
svn path=/trunk/; revision=6027
2002-08-19Add Brian Bruns as the author of the tds dissector.Jörg Mayer2-0/+5
svn path=/trunk/; revision=6026
2002-08-19Add new dissector by Brian Bruns for the TDS protocol with theJörg Mayer3-2/+1120
following changes: - Inserted packet-tds.h This is personal taste because of the many files in the toplevel directory. Whoever works on this next is free of course to separate it back out again. - Removed unused includes sys/types.h, snprintf.h, netinet/in.h - #if-0 unused function - Removed duplicate define - Declared all unused parameters as such - Changed a // comment into /* */ - ifdef-DEBUG a printf statement svn path=/trunk/; revision=6025
2002-08-19Fixups after replacement of ethereal.nsi.in by ethereal.nsiJörg Mayer2-2/+1
svn path=/trunk/; revision=6024
2002-08-19Add a plain text version of the FAQ to the source package.Jörg Mayer2-1/+1287
svn path=/trunk/; revision=6023
2002-08-19dissect LLMNR (formerly known as mDNS) on tcp/udp port 5353.Jun-ichiro itojun Hagino1-1/+5
svn path=/trunk/; revision=6022
2002-08-19Add COMMON_FILES_GNU definition.Gerald Combs1-1/+3
svn path=/trunk/; revision=6021
2002-08-19From Ulf Lamping:Gerald Combs2-24/+27
Generalize paths and get rid of sed-dependent ethereal.nsi.in. Remove ethereal.nsi.in, and re-add ethereal.nsi with Ulf's changes. Modify Makefile.nmake to use it. Note: You'll have to add "COMMON_FILES_GNU" path to your config.nmake that points to a directory with all of Ethereal's required DLLs. Be obnixious and set "SetShellVarContext all" so that we install for every user, like most standard Windows apps. svn path=/trunk/; revision=6020
2002-08-19Fix the reporting of the "PS" bit in SCSI mode pages.Guy Harris1-90/+259
For unknown mode pages, make the "Unknown Page" tree item not include the page code and length, as those were put into the tree already - have it just include the contents of the page. For MODE SELECT, use the supplied payload length rather than the mode data length, as the mode data length is reserved in MODE SELECT (it's implied by the total data length; in MODE SENSE, the CDB contains the buffer size, but the target can return fewer bytes than that, so the mode data length is meaningful). Add additional checks of the remaining data length when parsing MODE SELECT and MODE SENSE, and fix up the checks that were there already. The density code comes *before* the number of blocks in a block descriptor, and the number of blocks and block length are 3 bytes long for both the 6-byte and 10-byte versions of MODE SELECT and MODE SENSE. svn path=/trunk/; revision=6019
2002-08-19When processing "i" and "a" tags, check only whether we've seen an "m"Guy Harris1-22/+9
tag or not - if we haven't, "i" is "session info" and "a" is "session attribute", and if we have, "i" is "media title" and "a" is "media attribute". svn path=/trunk/; revision=6018
2002-08-19Limit the parameter and data tvbuffs to the actual number of bytes ofGuy Harris1-6/+9
parameter and data, so the LANMAN RAP pipe dissector, for example, doesn't get confused and think there is an auxiliary data descriptor in the parameters when there isn't. Note that in at least one Negotiate Protocol reply it looks as if a Unicode domain name might've been aligned. svn path=/trunk/; revision=6017
2002-08-18Tweak the Solaris/SVR4 packaging a bit. Change "make install-strip" toGerald Combs2-3/+11
"make install"; even though the resulting files are huge it's probably better to have the debugging symbols intact. Set file and directory permissions in /usr/local to match those in /usr. svn path=/trunk/; revision=6016
2002-08-18If the length of a string is zero, don't put it into the protocol tree.Guy Harris1-31/+53
Handle the case where "get_unicode_or_ascii_string()" returns a null pointer (which can be the case if the length supplied is zero, which we check for as per the above, but can also be the case for a Unicode string if the length supplied is 1 byte). Fix a call to "proto_tree_add_uint()" that was presumably supposed to be a call to "proto_tree_add_item()". svn path=/trunk/; revision=6015
2002-08-18From Bill Studenmund: fix handling of SCSI mode sense.Guy Harris3-8/+16
Fix Yasuhiro Shirasaki's e-mail address, and [AT]ify Vassilii Khachaturov's address. svn path=/trunk/; revision=6014
2002-08-18From Yaniv Kaul:Guy Harris1-50/+55
1. Proper extraction of data from packet (removed bad tvb_get_ptr() and casting the resulting pointer to a structure method). 2. Printout of Initator and Responder cookies (per request from VPNC organization). svn path=/trunk/; revision=6013
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-15 16:49:58 +0000