aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2012-02-26Make it possible to edit capture commentsAnders Broman6-10/+103
svn path=/trunk/; revision=41193
2012-02-26[Automatic manuf, services and enterprise-numbers update for 2012-02-26]Gerald Combs3-11/+189
svn path=/trunk/; revision=41190
2012-02-26From Robin Seggelmann: Add support for RFC 6520.Michael Tüxen4-9/+324
From me: Some cleanup Initial work was done by Denis Jaeger and Lukas Scharlau, but the code got rewritten by Robin. svn path=/trunk/; revision=41189
2012-02-26For LANalyzer files, make the "File type name" be the file comment.Guy Harris2-7/+46
Display the file comment in the Summary dialog. svn path=/trunk/; revision=41188
2012-02-26Suppress invalid or non-meaningful statistics - for example, withoutGuy Harris5-155/+296
time stamps on all packets in a set, you can't determine the start and end time of the packets in the set (even one timestampless packet throws the determination off - was that packet before the first time-stamped or after the last time-stamped packet, or between them?). svn path=/trunk/; revision=41187
2012-02-26Don't show time stamp-based information if we don't have it (now that weGuy Harris1-36/+105
know whether packets - or "packets" - have time stamps). Show the time stamp order as "Unknown" if we don't have enough information to determine whether it's certainly in order or out of order (XXX - we should do that if we have only one packet that has a time stamp). svn path=/trunk/; revision=41186
2012-02-25Add a presence flag field to the packet information structure filled inGuy Harris48-105/+248
by Wiretap, to indicate whether certain fields in that structure actually have data in them. Use the "time stamp present" flag to omit showing time stamp information for packets (and "packets") that don't have time stamps; don't bother working very hard to "fake" a time stamp for data files. Use the "interface ID present" flag to omit the interface ID for packets that don't have an interface ID. We don't use the "captured length, separate from packet length, present" flag to omit the captured length; that flag might be present but equal to the packet length, and if you want to know if a packet was cut short by a snapshot length, comparing the values would be the way to do that. More work is needed to have wiretap/pcapng.c properly report the flags, e.g. reporting no time stamp being present for a Simple Packet Block. svn path=/trunk/; revision=41185
2012-02-25From Jose Pedro Oliveira: pcapio is writing the if_speed value in the ↵Anders Broman1-1/+1
IDB_TSRESOL optiones svn path=/trunk/; revision=41184
2012-02-24As suggested by multipleinterfaces in ↵Jeff Morriss1-6/+7
http://ask.wireshark.org/questions/9194/can-i-recover-a-discarded-capture : Add the location of the temporary file on Windows 7. svn path=/trunk/; revision=41183
2012-02-24Revisit https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3161Jeff Morriss2-2/+6
and r39501: Setting _XOPEN_SOURCE to 600 is only allowed on Solaris 10 if the compiler is set to C99 mode. Conversely (and as reported in the bug), simply defining it (but with no value) is not allowed if the compiler *is* compiling to C99. So, don't define _XOPEN_SOURCE at all on Solaris. Keep defining it as 600 on other OS's as (also) requested in that bug. Maybe there's a cleaner way to do this but all of this is a "trickery" mess anyway... svn path=/trunk/; revision=41182
2012-02-24g_fprintf() & g_vfprintf() should not be used....Bill Meier1-0/+4
svn path=/trunk/; revision=41181
2012-02-24CVARSDLL hasn't been used (is undefined) for a while....Bill Meier15-25/+25
svn path=/trunk/; revision=41180
2012-02-24Fix a typo and revert previous.Anders Broman2-2/+2
svn path=/trunk/; revision=41179
2012-02-24Fix a typo.Anders Broman1-1/+1
svn path=/trunk/; revision=41178
2012-02-24From Martin Kaiser:Anders Broman1-2/+0
Get rid of an unused variable. svn path=/trunk/; revision=41177
2012-02-24From Irene Ruengeler: Always show snaplen.Michael Tüxen1-5/+1
svn path=/trunk/; revision=41176
2012-02-24From Irene Ruengeler: Fix a bug where the interfaceMichael Tüxen1-11/+14
names are not shown during capturing. svn path=/trunk/; revision=41175
2012-02-24From Irene Ruengeler: Whitespace changes.Michael Tüxen1-2/+2
svn path=/trunk/; revision=41174
2012-02-24From Martin Kaiser via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6838Alexis La Goutte1-0/+47
Support HDCP version 1 over I2c the attached patch adds support for HDCP version 1. This is the authentication that runs between your DVD/Bluray player and your TV when they're connected via an HDMI cable. svn path=/trunk/; revision=41173
2012-02-24From Martin Kaiser via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6838Alexis La Goutte3-85/+420
Support HDCP version 1 over I2c the attached patch adds support for HDCP version 1. This is the authentication that runs between your DVD/Bluray player and your TV when they're connected via an HDMI cable. svn path=/trunk/; revision=41172
2012-02-24From Robert Shade: Mobile IP NVSE (RFC3115) Decoding ↵Anders Broman1-1/+46
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6868 svn path=/trunk/; revision=41171
2012-02-24From Mark Cottrell: Attempting to view an RTP stream analysis graph causes ↵Anders Broman1-4/+2
program exit. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6866 svn path=/trunk/; revision=41170
2012-02-24From Josip Medved: Diameter dictionary has few invalid gavp definitions ↵Anders Broman3-9/+18
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6867 svn path=/trunk/; revision=41169
2012-02-24Revert SVN #40866 (which used g_fprintf() in place of fprintf()).Bill Meier1-140/+141
Using g_fprintf() fails (crashes) on Windows because the Windows GLib DLL is linked with (depends upon) MSVCRT while editcap is linked with (depends upon) MSVCR90. IOW: "You can't do that ... (on Windows)" See https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6695 (Comment 2) for some additional information. svn path=/trunk/; revision=41168
2012-02-23Add SHB info to SummaryAnders Broman3-0/+33
svn path=/trunk/; revision=41167
2012-02-23From Pascal Quantin [NAS EPS] Update Configuration Protocol description in ↵Anders Broman1-1/+1
PCO IE https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6865 svn path=/trunk/; revision=41166
2012-02-23No debug output, please.Michael Tüxen1-1/+1
svn path=/trunk/; revision=41165
2012-02-23Fix the handling of snaplen.Michael Tüxen1-7/+5
While there fix some whitespace issues. svn path=/trunk/; revision=41164
2012-02-23Have the used interfaces show up if number of interfaces > 0.Anders Broman3-31/+49
(pcapng file). svn path=/trunk/; revision=41163
2012-02-23From Dirk Leinenbach:Anders Broman1-1/+1
Follow TCP IPv6 - wrong hostname. #BACKPORT https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6861 svn path=/trunk/; revision=41162
2012-02-23Fix a 3GPP specification error.Anders Broman2-2/+3
svn path=/trunk/; revision=41161
2012-02-23As discussed with Anders: Only write a single ISB at the end. ProivdeMichael Tüxen1-31/+14
start/end time in the ISBs. svn path=/trunk/; revision=41160
2012-02-23interface id is 32-bit, not 64-bit.Michael Tüxen1-2/+2
svn path=/trunk/; revision=41159
2012-02-23From Kundok Park:Anders Broman1-1/+21
new_packet_list: crash in add_byte_views from decrypted zigbee data The cause of the crash I saw was that the add_byte_views() function in main_proto_draw.c relies on output from previous dissector run while the function may eventually trigger dissector to run again which wipes out the previous output. The patch copies the output of the dissector before calling add_byte_tab() so that even when add_byte_tab() updates the dissector output, the loop continues with previous dissector output. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5130 svn path=/trunk/; revision=41158
2012-02-23From Steve Magnani:Anders Broman1-5/+92
USB: Add dissection for Interface Association descriptor. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6842 svn path=/trunk/; revision=41157
2012-02-23From Tyson Key:Anders Broman1-7/+3
Clean up redundant Data handlers in the CCID dissector. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6860 svn path=/trunk/; revision=41156
2012-02-23Move 'static' qualifier before 'const' in a couple of places. I didn'tMartin Mathieson1-2/+2
know it mattered, but gcc warns. svn path=/trunk/; revision=41155
2012-02-23Mark some unused parameters. Still getting other warnings...Martin Mathieson1-8/+8
svn path=/trunk/; revision=41154
2012-02-23Do a check of the block total length in pcapng_read_unknown_block().Guy Harris1-15/+8
That means we don't need to do the block length check in pcapng_read_block(); each block type reader, including the one for unknown block types, does a check that's as stringent as that block length check or more stringent, which means any block whose length is less than the minimum will fail with the same error in both cases. Fix the message for a too-short NRB. svn path=/trunk/; revision=41152
2012-02-23From Tyson Key:Anders Broman1-2/+37
Support for switching USB CCID PC_to_RDR_XfrBlock payload dissectors https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6853 svn path=/trunk/; revision=41151
2012-02-23From Yaniv Kaul:Anders Broman1-43/+98
Enhance the Spice dissector - small additional dissections. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6857 svn path=/trunk/; revision=41150
2012-02-23From Lei Chen:Anders Broman5-8/+252
a patch to support decode FDD_CELL_INFORMATION of "UTRAN FDD Description" in packet-gsm_rlcmac.c https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6856 svn path=/trunk/; revision=41149
2012-02-23From Jeff Morriss:Anders Broman1-2/+2
H223: Buildbot crash output: fuzz-2012-01-25-22599.pcap https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6768 svn path=/trunk/; revision=41148
2012-02-23From Josip Medved: Add 3GPP AVP 1506 and 1507Anders Broman1-0/+6
svn path=/trunk/; revision=41146
2012-02-22Fix typo introduced by previous checkin.Guy Harris1-1/+1
svn path=/trunk/; revision=41145
2012-02-22Added aplications and one AVP from Josip MedvedAnders Broman1-2/+10
svn path=/trunk/; revision=41144
2012-02-22Add sanity checks to make sure the claimed block size is big enough to:Guy Harris1-43/+240
1) contain the block length fields and block type field; 2) contain that plus the fixed-length portion of the block; 3) for blocks that have a variable-length portion other than the options, contain that variable-length portion. Fixes a crash we're seeing with a bad pcap-NG file in the Wireshark menagerie (7799-lastPacketWithoutComment.pcapng - the last packet's block length is 128, but it claims to have 98 bytes of packet data, which requires a 132-byte block). Clean up white space (use 8-space tabs). svn path=/trunk/; revision=41143
2012-02-22From Josip Medved:Anders Broman1-1/+1
In line 4722 of dictionary.xml file there is comment: <-- Requesting-Node-Type is from old (v8.1.0 - v8.2.0) versions of 29.272. --> This is not a valid XML comment and that line should read: <!-- Requesting-Node-Type is from old (v8.1.0 - v8.2.0) versions of 29.272. --> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6858 svn path=/trunk/; revision=41141
2012-02-22Grr forgot debug flag - again.Anders Broman1-1/+1
svn path=/trunk/; revision=41140
2012-02-22Whitespace cleanup: Convert 4 space tabs to spaces ...Bill Meier1-2326/+2326
svn path=/trunk/; revision=41139