aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-05-23First changes to properly support RFC1964 so that GSSAPI GetMIC and otherRichard Sharpe2-9/+37
tokens can be handled. Really, dissect-spnego-krb5 or whatever, should be renamed to something like dissect-gssapi-tokens or dissect-gssapi-rfc1964 ... svn path=/trunk/; revision=7724
2003-05-23Move the base64_decode() function somewhere where other dissectors canTim Potter3-36/+39
use it. svn path=/trunk/; revision=7723
2003-05-23I don't think there is any such thing as a pointer to a policy handle.Tim Potter1-186/+164
Just dissect them in place. svn path=/trunk/; revision=7722
2003-05-23Fix typo in name of ett for krb5 auth verifier.Tim Potter1-35/+54
svn path=/trunk/; revision=7721
2003-05-23Quieten some unused variable warnings.Tim Potter1-5/+5
svn path=/trunk/; revision=7720
2003-05-23Initialise sid_str in case dissect_nt_sid() can't return a stringTim Potter1-2/+2
representation for the sid. svn path=/trunk/; revision=7719
2003-05-22Remove some accidentally commited debugging strings.Richard Sharpe1-5/+3
svn path=/trunk/; revision=7718
2003-05-22A small fix to NFSv4 to properly decode the secinfo response array, the arrayRichard Sharpe2-5/+14
of secinfo flavors returned. svn path=/trunk/; revision=7717
2003-05-22Put in some missing contributor addresses.Guy Harris1-0/+2
svn path=/trunk/; revision=7716
2003-05-22A small fix to packet-rpc.c noticed by Tony Schene.Richard Sharpe1-1/+2
Fixes a mistake I introduced ... I am still seeing malformed packets on secinfo stuff, which I hope to fix soon. svn path=/trunk/; revision=7715
2003-05-22remove unused include that was added by mistakeRonnie Sahlberg1-2/+1
svn path=/trunk/; revision=7714
2003-05-22Add snooping of sid->domain mapping from POLICY_ACCOUNT_DOMAIN_INFO structuresRonnie Sahlberg2-4/+6
svn path=/trunk/; revision=7713
2003-05-22make dissect_nt_sid() return a sid string that also contains the proper name ↵Ronnie Sahlberg2-5/+11
for the sid. this prettifies some dcerpc interfaces svn path=/trunk/; revision=7712
2003-05-22Rearrange sid snooping a bit.Ronnie Sahlberg2-32/+60
Add snooping of sid->domain mapping for POLICY_DNS_DOMAIN_INFO svn path=/trunk/; revision=7711
2003-05-22 Update with J Bruce Field's changes to support RPCSEC_GSS.Richard Sharpe2-2/+10
svn path=/trunk/; revision=7710
2003-05-21Make one QIP infolevel specify a sid hf field and update the embryonic sid ↵Ronnie Sahlberg3-10/+21
snooping framework to handle the new hw name svn path=/trunk/; revision=7709
2003-05-21Change the interface to dissect_nt_sid so that we can provide a hf field to useRonnie Sahlberg4-18/+26
to describe the sid instead of the default smb.sid one svn path=/trunk/; revision=7708
2003-05-21Change the interface to dissect_ndr_nt_SID to take the extra parameter hf_sidRonnie Sahlberg3-41/+49
if the caller wants something else instead of "smb.sid" svn path=/trunk/; revision=7707
2003-05-21Change the interface to dissect_ndr_nt_PSID to take one extra parameter ↵Ronnie Sahlberg4-24/+31
which if !=-1 is a hf field for the sid to use instead of the default smb.sid one. svn path=/trunk/; revision=7706
2003-05-21If the reported length of the TCP packet is less than the TCP headerGuy Harris2-23/+36
length, we can't get the segment length (although we can at least try to dissect the header). If that's the case, put in Ronnie's "short segment" note. Also, put into the information we pass to TCP taps an indication of whether the segment length is valid or not. svn path=/trunk/; revision=7705
2003-05-21If we're inside an error packet, don't assume we know the length of theGuy Harris1-6/+14
TCP segment, as we might not have the entire segment. svn path=/trunk/; revision=7704
2003-05-21If we were handed a fragmented packet, don't do anything that depends onGuy Harris1-47/+48
knowing the actual length of the packet, as we don't know that length (IP fragments don't contain the length of the full packet - you don't know how big the reassembled packet is until you reassemble it). We don't have to worry about dissecting the TCP header in them, though. svn path=/trunk/; revision=7703
2003-05-21Make dissect_rpc_opaque_data available and allow it to take a dissectionRichard Sharpe3-60/+91
routine ... I am not happy with the signature for it as yet, though. svn path=/trunk/; revision=7702
2003-05-20From Miha Jemec: clean up and simplify the RTP dissector and tap code.Guy Harris3-822/+442
svn path=/trunk/; revision=7701
2003-05-20Lump TCPIPtrace and UCX$TRACE together and add TCPtrace to the mix.Guy Harris4-34/+35
svn path=/trunk/; revision=7700
2003-05-20From Martin Warnes: fix to check the "XXXtrace" part of the per-packetGuy Harris1-98/+121
line, not the "RCV packet" part, so that we recognize files even if they don't have an "RCV packet" line in the first 200 lines. svn path=/trunk/; revision=7699
2003-05-20Do not decode the full tcp header if the reported length is less than 20Ronnie Sahlberg1-3/+18
or the reported tcp header length. This is probably caused either by a very very short capture length or by nmap or someone playing firewall fragment games to the tcp flags field. svn path=/trunk/; revision=7698
2003-05-20Clean "dissect_rpc_opaque_data()" up a bit; for example, there's no needGuy Harris1-18/+13
to do a "proto_tree_add_string_hidden()" to add the string data to the protocol tree, given that we explicitly add it as a non-hidden item (regardless of whether it's string data or binary data). svn path=/trunk/; revision=7697
2003-05-20Fix even more indentation.Guy Harris1-5/+5
svn path=/trunk/; revision=7696
2003-05-20Fix more indentation.Guy Harris1-6/+6
svn path=/trunk/; revision=7695
2003-05-20Fix indentation.Guy Harris1-4/+4
svn path=/trunk/; revision=7694
2003-05-20Timo Sirainen pointed out a few problems with string handling in theGerald Combs1-127/+108
BGP code. Replace many strings with GStrings. svn path=/trunk/; revision=7693
2003-05-19From Martin Warnes: support for VMS UCX$TRACE output in wiretap.Guy Harris7-40/+80
svn path=/trunk/; revision=7692
2003-05-19From Motonori Shindo: update to supportGuy Harris3-11/+11
draft-ietf-idr-bgp-ext-communities rather than draft-ramachandra-bgp-ext-communities, and get rid of unused MAX_SIZE_OF_EXT_COM_NAMES #define. svn path=/trunk/; revision=7691
2003-05-19From Olivier Biot: fix incorrect tvbuff definition in the WTP PDUGuy Harris1-2/+2
concatenation situation. Now the WSP dissector wanting to display the entire PDU will stick to the sub-tvbuff boundaries in the data highlight pane. svn path=/trunk/; revision=7690
2003-05-19Fix a -z io,users,ip calculations bug.Ronnie Sahlberg1-2/+2
stats were calculated for the wrong direction. From Martin Visser svn path=/trunk/; revision=7689
2003-05-19More tvb_get_nstringz0() fixes. Timo Sirainen pointed out that BadGerald Combs11-80/+75
Things can happen if we pass a zero buffer length to tvb_get_nstringz0(). Throw an exception if this happens. In various dissectors make sure the tvb_get_nstringz0()'s buffer length is greater than zero. svn path=/trunk/; revision=7688
2003-05-17Note that the output format list is displayed by the "-h" flag.Gerald Combs1-0/+2
svn path=/trunk/; revision=7687
2003-05-17Add the list of output file format specs to Tethereal's man page.Gerald Combs1-6/+31
At some point we should probably add the list automatically, like we do the filter fields. svn path=/trunk/; revision=7686
2003-05-16Update the tcp sequence analysis to understand and decode properlyRonnie Sahlberg1-2/+16
the rather brilliant keep-alive packets solaris use. Solaris does not do RFC793 keepalives at all, instead they do a quite brilliant workalike that gies them reliable keepalives. svn path=/trunk/; revision=7685
2003-05-16Tap SMB packets before we call the dissecotrs so that even if thereRonnie Sahlberg1-3/+6
is an exception (i.e. short packet) the tap listener will still be alled. svn path=/trunk/; revision=7684
2003-05-16Updates to the TODO list.Guy Harris1-13/+30
svn path=/trunk/; revision=7683
2003-05-16Squelch some compiler complaints.Guy Harris2-4/+4
svn path=/trunk/; revision=7682
2003-05-16Fix a typo.Guy Harris1-2/+2
svn path=/trunk/; revision=7681
2003-05-16Not all platforms have "u_int32_t"; use "guint32" instead.Guy Harris1-2/+2
svn path=/trunk/; revision=7680
2003-05-15Change address for Tony Schene, at his request.Guy Harris2-2/+2
svn path=/trunk/; revision=7679
2003-05-15Implement a ring buffer switch duration:Laurent Deniel7-18/+236
when the new "Rotate capture file every n second(s)" checkbox or the -b <# of file>[:<duration>] argument are used, [t]ethereal will skip to the next ring buffer file if the specified duration has elapsed (even if the specified capture size is not reached). This is useful when you want to have separate capture files per hour or day for instance. I let the autostop filesize parameter mandatory (i.e. the "rotate capture file after n kilobytes") but this could be no longer strictly necessary when that new feature is used ... Another point: it might be interesting to really truncate the file at the switch and not the closure ... According to user comments and my own real case tests, I might plan to enhance this point and others (still ring buffer related) in the future. svn path=/trunk/; revision=7678
2003-05-15From Richard Urwin:Guy Harris9-117/+301
add support for a system-wide color filter file; fix a bug where "read_filters()" didn't close the file handle. Use the "get_datafile_path()" routine he added to construct the pathname of the Diameter directory, the global preferences file, and the manuf file. svn path=/trunk/; revision=7677
2003-05-15From Can Erkin Acar: OpenBSD is now using tcpdump.org-assigned DLT_Guy Harris7-56/+321
value for DLT_PFLOG, and that goes along with a change to the link-layer header for DLT_PFLOG - support both the old and new values and format. svn path=/trunk/; revision=7676
2003-05-15From Laurent Rabret:Guy Harris3-15/+143
fix a bug where bad IPv4 and IPv6 prefix lengths could cause a buffer overflow; check the checksum in LSP packets. svn path=/trunk/; revision=7675
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-24 08:09:17 +0000