aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-12-07Add PCRE support to the Windows build.Gerald Combs8-17/+64
svn path=/trunk/; revision=9185
2003-12-06Check if pinfo->dl_dst.data is not NULL before accessing the data (itOlivier Abad1-1/+2
was NULL in one of my "linux cooked" captures which contains no destination address). svn path=/trunk/; revision=9184
2003-12-06Declaration included the line aboveJörg Mayer1-2/+1
svn path=/trunk/; revision=9183
2003-12-06From Olivier BiotGilbert Ramirez24-61/+508
New "matches" operater in display filter language. Uses PCRE. If a "matches" operator is found in a dfilter while libpcre has not been used to build the binary, then an exception is thrown after using dfilter_fail() to set an apporporiate error message. svn path=/trunk/; revision=9182
2003-12-06slab.h needs to be in libethereal_a_SOURCESGilbert Ramirez1-1/+2
svn path=/trunk/; revision=9181
2003-12-06Add the ability to print packet dissections in PDML (an XML-based format)Gilbert Ramirez13-25/+1229
to tethereal. It could be added to Ethereal, but the GUI changes to allow the user to select PDML as a print format have not been added. Provide a python module (EtherealXML.py) to help parse PDML. Provide a sample app (msnchat) which uses tethereal and EtherealXML.py to reconstruct MSN Chat sessions from packet capture files. It produces a nice HTML report of the chat sessions. Document tethereal's PDML and EtherealXML.py usage in doc/README.xml-output Update tethereal's manpage to reflect the new [-T pdml|ps|text] option svn path=/trunk/; revision=9180
2003-12-06From Jeff Morriss: avoid at least some N^2 behavior when changing theGuy Harris3-7/+49
time stamp format. svn path=/trunk/; revision=9179
2003-12-05"hf_ccsds_secheader" is an FT_BOOLEAN; use "proto_tree_add_boolean()"Guy Harris1-2/+2
for it. svn path=/trunk/; revision=9178
2003-12-05Switch over to Net-SNMP 5.1. A ZIP file of the Net-SNMP 5.1 sources plusGerald Combs3-8/+8
a static Windows library (netsnmp.lib) has been placed at http://www.ethereal.com/distribution/win32/development/ The Net-SNMP documentation recommends against using a DLL at the present time. svn path=/trunk/; revision=9177
2003-12-05We have to parse the SDP packet even if we're not building a protocolGuy Harris1-4/+1
tree, as we might be setting up a conversation. svn path=/trunk/; revision=9176
2003-12-05Subdissectors must be called regardless of whether a protocol tree isGuy Harris1-9/+9
being built. svn path=/trunk/; revision=9175
2003-12-05Subdissectors must be called regardless of whether a protocol tree isGuy Harris1-67/+61
being built. svn path=/trunk/; revision=9174
2003-12-04From some reason, at least on Mac OS X 10.3, the change to have theGuy Harris1-2/+2
protocol tree stuff not use GNodes means that the ASN.1 plugin now needs to be explicitly linked against GLib in order to get access to the GNode routines, otherwise you get errors from the run-time linker. svn path=/trunk/; revision=9173
2003-12-04It turns out the protocol tree parent link was used, so we need it inGuy Harris2-2/+5
our new scheme. svn path=/trunk/; revision=9172
2003-12-04Don't use GNodes for the protocol tree, put the sibling pointer, andGuy Harris8-74/+166
pointers to the first *and* last child, in the "proto_node" structure itself. That saves us one level of indirection and memory allocation, and lets us append to a tree by appending to the last child directly, rather than having to scan through the list of siblings of the first child to find the end of that list. svn path=/trunk/; revision=9171
2003-12-04update to kerberosRonnie Sahlberg1-1/+8
if the kerberos blob contains a krb error, print the error string to COL_INFO svn path=/trunk/; revision=9170
2003-12-04update to ldap.Ronnie Sahlberg1-4/+73
some implementations specify GSSAPI in the bind call. the encapsulation seems to be the same as GSS-SPNEGO so handle it the same way svn path=/trunk/; revision=9169
2003-12-04Add {0, NULL} to the vals_wsp_reason_codes value_string array.Gilbert Ramirez1-1/+3
svn path=/trunk/; revision=9168
2003-12-04Add {0, NULL} to all the value_string arrays.Gilbert Ramirez1-1/+5
svn path=/trunk/; revision=9167
2003-12-04Add {0, NULL} to the reply_table_v5 value_string array.Gilbert Ramirez1-2/+3
svn path=/trunk/; revision=9166
2003-12-04ldp.msg.tlv.returned.msg.ubit needs to be an FT_BOOLEAN field, notGilbert Ramirez1-3/+4
an FT_UINT8, since it is using a true_false_string struct to print its values. Add {0, NULL} to the fec_vc_interfaceparm value_string array. svn path=/trunk/; revision=9165
2003-12-04Add {0, NULL} to the isup_Pass_on_not_possible_indicator_vals andGilbert Ramirez1-1/+3
ISUP_Broadband_narrowband_interworking_indicator_vals value_string arrays. svn path=/trunk/; revision=9164
2003-12-04Add {0, NULL} to end of fc_swils_rscn_addrfmt_val value_string array.Gilbert Ramirez1-1/+2
svn path=/trunk/; revision=9163
2003-12-04Add {0, NULL} to end of fcencap_proto_vals value_string array.Gilbert Ramirez1-1/+2
svn path=/trunk/; revision=9162
2003-12-04In GTK+ 2.x, "gtk_entry_get_text()" returns a "const gchar *"; assignGuy Harris15-31/+32
its value to pointer-to-const variables. svn path=/trunk/; revision=9161
2003-12-03From Felix Fei: GSM MAP support.Guy Harris5-2/+1596
From Michael Lum: Modified for better TCAP separation, fixed EOC handling (a la TCAP). Added parameter parsing (although not dissection or naming). svn path=/trunk/; revision=9160
2003-12-03From Michael Lum: Ethereal tap for ANSI A-interface.Guy Harris7-134/+604
Tweak some Makefile.nmake whitespace. svn path=/trunk/; revision=9159
2003-12-03From Jeff Morriss: add support for WTAP_ENCAP_MTP2 and WTAP_ENCAP_MTP3.Guy Harris2-2/+14
svn path=/trunk/; revision=9158
2003-12-03From Jeff Morriss: add support for libpcap MTP2 and MTP3 captures.Guy Harris4-6/+21
Add a missing entry in "encap_table[]" for Bluetooth H4, and fix some comments. svn path=/trunk/; revision=9157
2003-12-03From Greg Morris: handle the backwards compatibility flag for options 78Guy Harris1-4/+12
and 79. svn path=/trunk/; revision=9156
2003-12-03From Greg Morris: the "File->Save Highlighted" menu item has no icon, soGuy Harris1-4/+4
don't use "ITEM_FACTORY_STOCK_ENTRY()" for it. svn path=/trunk/; revision=9155
2003-12-03"strtoul()" returns a "long", not a "long long".Guy Harris1-2/+2
svn path=/trunk/; revision=9154
2003-12-03Replace two expensive macros with a much simpler mechanismRonnie Sahlberg1-14/+21
to prevent memory leaks due to exceptions. makes my tethereal testcase ~1% faster. svn path=/trunk/; revision=9153
2003-12-03performance updateRonnie Sahlberg3-18/+10
replace tvb_raw_offset() which is essentially a simple assignment and which is called a lot with a macro. this makes my tethereal testcase 2-3% faster. svn path=/trunk/; revision=9152
2003-12-03The "ptr_u" unions no longer have a "next" pointer - they now just haveGuy Harris12-111/+101
one member - or have one that's not used, so get rid of those unions. svn path=/trunk/; revision=9151
2003-12-03Instead of requiring slab-allocated structures to have a "next" pointer,Guy Harris5-27/+38
when adding them to the free list, cast the pointer to the structure to a pointer to a "freed_item_t" which contains the "next" pointer. This reduces the memory requirement for some of those structures, and leaves us free to slab-allocate structures that have a "next" pointer for other reasons. svn path=/trunk/; revision=9150
2003-12-03Update to SMB ReadAndX replies.Ronnie Sahlberg1-9/+13
There might be a 4 (not 2) byte datalen high field. If there is no such field (due to an early dialect being used) these bytes are often 0xff. If these four bytes are all 0xff dont display them in the tree. svn path=/trunk/; revision=9149
2003-12-03Bring it up to date.Guy Harris1-37/+78
svn path=/trunk/; revision=9148
2003-12-02From Didier Gautheron: for each column format type, save the first andGuy Harris5-21/+74
last columns, if any, with that format, and use that to speed up processing of columns with a particular format and checking whether we're displaying a column with a particular format. svn path=/trunk/; revision=9147
2003-12-02From Didier Gautheron: put an "fvalue_t" structure into a "field_info"Guy Harris11-93/+115
structure, rather than separately allocating "fvalue_t"s and having the "field_info" structure point to them - this appears to speed up protocol tree construction a bit. svn path=/trunk/; revision=9146
2003-12-02Check for errors and EOF, and handle them appropriately; don't treat allGuy Harris1-19/+108
errors when reading the header as indications that the file isn't an AiroPeek V9 file. Put in comments nothing some additional checks we should do. svn path=/trunk/; revision=9145
2003-12-02From Martijn Schipper: support for reading AiroPeek files in V9 captureGuy Harris9-6/+330
file format (AiroPeek 2.x). svn path=/trunk/; revision=9144
2003-12-02Tomas Kukosa noted that the TPKT dissector spends a significant amountGuy Harris1-2/+4
of time in "find_protocol_by_id()"; the protocol_t pointer for a protocol doesn't change over time, so get that pointer when the protocol is registered and save it. svn path=/trunk/; revision=9143
2003-12-02From Yaniv Kaul:Guy Harris1-2/+4
1) fix description of Check Point version 5004; 2) add description of Check Point version 5005. svn path=/trunk/; revision=9142
2003-12-02Move the definition of the tvbuff_t structure and friends to tvbuff.hRonnie Sahlberg3-80/+72
so that we can change tvb_get_ds_tvb() into a macro. This function was a single line assignment and was called a lot. This made tethereal ~2.5% faster in one testcase I use. svn path=/trunk/; revision=9141
2003-12-02Use the LSAB_ALLOC and SLAB_FREE macros to allocate/free fvalue_t dataRonnie Sahlberg3-52/+8
svn path=/trunk/; revision=9140
2003-12-02Moving SLAB_ALLOC and SLAB_FREE to its own header fileRonnie Sahlberg2-24/+52
svn path=/trunk/; revision=9139
2003-12-02From Arnaud Jacques: fix a typo, and handle another CheckPoint versionGuy Harris3-2/+6
number. svn path=/trunk/; revision=9138
2003-12-02From Dave Sclarsky:Guy Harris1-39/+21
Correct several problems with zoneset decodes (e.g. the zoneset and zone name lengths do *not* include the pad bytes, so the offset calculation needed to be fixed). Move the decode of zoneset name into the routine "dissect_fcfzs_zoneset", so that it is done in only one place. svn path=/trunk/; revision=9137
2003-12-02Don't call the presentation layer dissector if we don't have a handleGuy Harris1-17/+15
for it. svn path=/trunk/; revision=9136
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-22 16:43:34 +0000