aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2002-12-08On UNIX, search for plugins only in the directory in which plugins willGuy Harris1-46/+3
be installed - don't explicitly search "/usr/lib/ethereal/plugins/{version}" or "/usr/local/lib/ethereal/plugins/{version}", so that if there's more than one version of Ethereal installed, we don't end up picking up plugins from the wrong version. svn path=/trunk/; revision=6766
2002-12-08Do LLC handoff from the IP-over-FC dissector the way it's done for otherGuy Harris2-18/+5
protocols using 802.2 LLC. svn path=/trunk/; revision=6765
2002-12-08Get rid of comment from sample dissector.Guy Harris1-20/+2
Get rid of some probably-unnecessary #includes. Register the IP-over-FC dissector as the dissector to call for IP-over-FC captures. svn path=/trunk/; revision=6764
2002-12-08Add packet-ipfc.c to Makefile.nmake.Gerald Combs2-3/+4
svn path=/trunk/; revision=6762
2002-12-08Add packet-ipfc.c and packet-fcbls.h to Makefile.am.Gerald Combs2-2/+5
svn path=/trunk/; revision=6761
2002-12-08Move the advisory notice to the top.Gerald Combs1-8/+8
svn path=/trunk/; revision=6760
2002-12-08Update Dinesh's entry to include FC.Gerald Combs1-0/+1
svn path=/trunk/; revision=6759
2002-12-08Add Fibre Channel entries.Gerald Combs2-6/+8
svn path=/trunk/; revision=6758
2002-12-08From Dinesh Dutt: Add Fibre Channel support, including FCIP, Basic FCGerald Combs24-34/+7501
header, Extended Link Service, Interswitch Link Service, FCP, and IPFC. svn path=/trunk/; revision=6757
2002-12-07Bah. I somehow lost the ChangeLog entries from Nov 1 to today. RecreateGerald Combs2-6/+222
them. Add RCS IDs to ChangeLog and NEWS. svn path=/trunk/; revision=6756
2002-12-07Add make-tapreg-dotc to the distribution.Gerald Combs1-1/+2
svn path=/trunk/; revision=6755
2002-12-07Tidy up for the 0.9.8 releaseGerald Combs2-37/+308
svn path=/trunk/; revision=6754
2002-12-07Add (and remove upon uninstallation) SNMP MIBs.Gerald Combs1-1/+13
svn path=/trunk/; revision=6753
2002-12-07Don't pass a null string pointer to proto_tree_add_text().Gerald Combs1-5/+6
svn path=/trunk/; revision=6752
2002-12-06When we have tretransmissions of TCP for a RPC/(NFS) session weRonnie Sahlberg1-5/+29
often get TCP to collapse multiple RPC PDUs into a MSS TCP segment. This changes the RPC dissector so that it will put one entry on COL_INFO for each PDU in the segment, (as the SMB dissector does for multiple AndX calls in one SMB PDU) and just one entry for the first/last RPC PDU. svn path=/trunk/; revision=6751
2002-12-05Sigh. We really *do* have to check whether a capture is a snoop orGuy Harris3-81/+133
Surveyor capture, as there's one link-layer type that UNICOS/mp snoop treats one way and Shomiti Surveyor treats another way. The only way to check that is to look at the first record to see how much padding it has. svn path=/trunk/; revision=6750
2002-12-05From Fritz Budiyanto: add a missing g_ntohs() for flow_label in theGuy Harris2-2/+3
gtpv0 decoder. svn path=/trunk/; revision=6749
2002-12-05Fix two compiler warningsRonnie Sahlberg1-13/+3
svn path=/trunk/; revision=6748
2002-12-05Fix for DCERPC detection when carried ontop of SMB.Ronnie Sahlberg1-1/+11
If we do not see the TreeConnect call when a TID is connected, we did not know it was a IPC share. If we do not know what kind of share it is we assume it being a normal one and thus read/write data to that share is normal file i/o. Update the dissector so that IF it sees a Transaction SMB carrying PIPE (dcerpc) then we assume that all other read/write to that TID is also DCERPC. I.e. we assume the entire TID is IPC. svn path=/trunk/; revision=6747
2002-12-05It seems pretty clear that a PDU_AUTH3 really is an AUTH3 PDU, and weGuy Harris1-2/+2
know what it is (a PDU for the third stage in a 3-way authentication handshake, as is done with NTLMSSP authentication, for example) - get rid of the question mark after "AUTH3". svn path=/trunk/; revision=6746
2002-12-05Fixed a bug regarding the handling of correlation ids.Michael Tüxen1-6/+6
svn path=/trunk/; revision=6745
2002-12-04Added support for the Implementers Guide.Michael Tüxen1-3/+69
svn path=/trunk/; revision=6744
2002-12-04Some constant for getprinter level 7 decoding.Tim Potter1-1/+7
svn path=/trunk/; revision=6743
2002-12-04Decode getprinter level 7.Tim Potter1-1/+51
svn path=/trunk/; revision=6742
2002-12-04Bump the version to 0.9.8. Update NEWS and ChangeLog to October 24.Gerald Combs5-7/+203
svn path=/trunk/; revision=6741
2002-12-03Include <string.h> so that memcpy() is properly declared.Gerald Combs1-1/+3
svn path=/trunk/; revision=6740
2002-12-03- added RFC 3331 indication to the protocol column entry.Michael Tüxen1-2/+2
svn path=/trunk/; revision=6739
2002-12-03- Updated to RFC 3331 version.Michael Tüxen1-420/+302
- Improved handling of padding bytes. - Some cleanup of the code. svn path=/trunk/; revision=6738
2002-12-03I've seen a capture with a TDS packet type of 18 at the beginning of theGuy Harris1-607/+598
session; treat all packet type values >= 1 and <= 18 as valid packet types. Do standard TCP desegmentation of Netlib buffers, and do reassembly of TDS messages fragmented over multiple Netlib buffers, rather than doing the "remember what was in the last TCP segment" stuff; I've seen nothing to indicate that a TDS message would continue past the last byte of a "last buffer in request or response" Netlib buffer, and the "remember what was in the last TCP segment" stuff was complicated and buggy, perhaps irreparably so ("buggy" as in "crashes"). Make the top-level protocol item for a TDS message be an item for "proto_tds", and put both the Netlib header and TDS stuff under that item - that's what Microsoft Network Monitor does. Get rid of the unused Netlib heuristic subdissector list. Don't make a new data source for NTLMSSP data in a TDS message - the data is just a slice of the message, it's not transformed from ASCII hex to binary, or reassembled, or anything such as that. Tokens are tokens, not PDUs. Make the heuristics a bit stronger, to reject packets that are clearly not TDS packets. Once the heuristics match, make a non-heuristic dissector the dissector for the conversation. Quit dissecting the TCP segment (or reassembled data) if we have a Netlib buffer with a length < 8, as it's not large enough to even have a Netlib header. svn path=/trunk/; revision=6737
2002-12-03Make the fragment item table static and const.Guy Harris1-17/+17
Call the pieces of a multi-frame NetBIOS message fragments, not segments. Fix a typo. svn path=/trunk/; revision=6736
2002-12-03Show all 6 digits of precision in the time stamp column when displayingGuy Harris1-5/+5
absolute time stamps (we were already doing that for relative and delta time stamps). svn path=/trunk/; revision=6735
2002-12-03Cast const pointer arguments to "g_free()" and "g_hash_table_foreach()"Guy Harris2-6/+6
to "gpointer", so that we only get warnings when we turn on the extra GCC warning checks. svn path=/trunk/; revision=6734
2002-12-03Include packet-wlancap.h into the tarballJörg Mayer1-1/+2
svn path=/trunk/; revision=6733
2002-12-03Add compat_macros.h to the tarballJörg Mayer1-1/+2
svn path=/trunk/; revision=6732
2002-12-03Values in Microsoft protocols that don't have their byte order specifiedGuy Harris1-57/+64
by DCE RPC are usually little-endian; fix a bunch of "proto_tree_add_item()" calls (most are for byte-array or string fields, so the byte order doesn't make a difference, but one is a number). Put an item into the protocol tree for the encrypted NT password block. Mallocate the buffer for the Unicode version of the password, rather than assuming it'll fit in 256 bytes. "g_malloc()" never returns NULL - it either allocates memory or aborts - so don't check for a mallocation failure. Don't try to decrypt the NT password block if we don't have a password. svn path=/trunk/; revision=6731
2002-12-03Gcc was afraid that hs_tree might be used uninitialized. It wasn't, butJörg Mayer1-2/+3
silence the warning anyway. svn path=/trunk/; revision=6730
2002-12-03Update FAQJörg Mayer1-145/+191
svn path=/trunk/; revision=6729
2002-12-03Update manuf fileJörg Mayer1-7/+65
svn path=/trunk/; revision=6728
2002-12-03From Devin Heitmueller:Guy Harris8-14/+479
add MD4 and RC4 crypto support; use it to decrypt the NT password encryption block in UnicodeChangePassword2. svn path=/trunk/; revision=6727
2002-12-02Don't cast away constness, and fix variable and structure memberGuy Harris32-200/+204
qualifiers as necessary to ensure that we don't have to. "strcmp()", "strcasecmp()", and "memcmp()" don't return booleans; don't test their results as if they did. Use "guint8", not "guchar", for a pointer to (one or more) 8-bit bytes. Update Michael Tuexen's e-mail address. svn path=/trunk/; revision=6726
2002-12-02Make the format argument to the "col_XXX_fstr()" routines, and the "str"Guy Harris3-18/+18
argument to "col_append_str()", const pointers; they're not modified by the routines in question. svn path=/trunk/; revision=6725
2002-12-02"dfilter_compile()" doesn't modify the string pointed to by its firstGuy Harris2-4/+4
argument; make it a const pointer. svn path=/trunk/; revision=6724
2002-12-02Get rid of some no-longer-used routines; there are other routines thatGuy Harris2-215/+3
have taken their places. svn path=/trunk/; revision=6723
2002-12-02From Olivier Biot: show the packet sequence number and the "MissingGuy Harris1-3/+3
Packets" value in the WTP header in decimal, not hex. svn path=/trunk/; revision=6722
2002-12-02Update Michael Tuexen's e-mail address.Guy Harris2-2/+2
svn path=/trunk/; revision=6721
2002-12-02Cast the result of "tvb_get_ptr()" to a "const char *", not a "char *".Guy Harris1-3/+3
svn path=/trunk/; revision=6720
2002-12-02Don't discard the constness of arguments to GHashTable functions.Guy Harris1-4/+4
svn path=/trunk/; revision=6719
2002-12-02"ip6_to_str()" takes a const pointer as an argument, so you don't haveGuy Harris1-4/+4
to cast away the constness of pointers passed to it. svn path=/trunk/; revision=6718
2002-12-02Get rid of a no-longer-used variable.Guy Harris1-5/+1
svn path=/trunk/; revision=6717
2002-12-02From Jason House: MSVC++ doesn't like cases with no statements, so addGuy Harris1-1/+5
break statements. svn path=/trunk/; revision=6716