aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2005-02-01add packet-sdp.hLars Roland3-1/+33
and from Julien Leproust: fix graph_analysis.c svn path=/trunk/; revision=13226
2005-02-01From Alejandro Vaquero:Lars Roland29-318/+4264
h323 taps support up to 5 messages per packet now. VoIP call analysis: - Collect ISUP, SIP and H323 calls from a capture and show them in window with the following info: - Start and Stop time of the call - Init svn path=/trunk/; revision=13225
2005-02-01Add some comments noting issues with some of the items in here.Guy Harris1-0/+14
svn path=/trunk/; revision=13224
2005-02-01Move "dissect_nt_GUID()" into "packet-dcerpc-nt.c", as it's used by theGuy Harris3-15/+23
LSA dissector as well, and declare it in "packet-dcerpc-nt.h". svn path=/trunk/; revision=13223
2005-02-01If the VCI and payload type indicate that a cell is an OAM cell, dissectGuy Harris1-2/+30
it as such. Clear the Info column when dissecting cells for an AAL we handle before dissecting the cell, and set the Info column for OAM cells. svn path=/trunk/; revision=13222
2005-02-01removed MSVC warnings:Ulf Lamping2-4/+4
packet-redback.c(63) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data packet-redback.c(64) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data packet-redback.c(65) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data packet-rmt-fec.c(108) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data svn path=/trunk/; revision=13221
2005-02-01removed MSVC warnings:Ulf Lamping1-2/+2
packet-juniper.c(262) : warning C4761: integral size mismatch in argument; conversion supplied packet-juniper.c(289) : warning C4761: integral size mismatch in argument; conversion supplied svn path=/trunk/; revision=13220
2005-01-31Prepare for handling of different versions of the protocol.Anders Broman3-15/+18
svn path=/trunk/; revision=13219
2005-01-31Put application context OID in pinfo->private data to be used by ↵Anders Broman1-1/+4
sub-dissector(s). svn path=/trunk/; revision=13218
2005-01-31Update som valuse stringsAnders Broman1-34/+172
svn path=/trunk/; revision=13217
2005-01-31From LEGO:Anders Broman1-4/+1
- remove duplicate fields from VSAs (every defined field in VSAs was set twice) - dissect radius packet with avplen == 0 (did not decode authenticator when no AVPs were present) svn path=/trunk/; revision=13216
2005-01-31there are two NETLOGON protocolsRonnie Sahlberg1-79/+79
the really really old one which is never used and there is the DCE/RPC one that is used by all windows/cifs implementations. We used to reserve the protocol name NETLOGON for the old obsolete protocol and since we can not have two protocols with the same name, called the current protocol RPC_NETLOGON instead. that does not exactly make sense. This renames the old obsolete protocol to SMB_NETLOGON to make way and allow the real netlogon protocol take the name NETLOGON svn path=/trunk/; revision=13215
2005-01-31call dissect_ndr_uuit_t directly and avoid a dependency on ↵Ronnie Sahlberg2-6/+6
packet-dcerpc-netlogon svn path=/trunk/; revision=13214
2005-01-31support H.248 BER over SCTP PPID 7Ronnie Sahlberg2-191/+195
svn path=/trunk/; revision=13213
2005-01-31From Florian Lohoff: Redback SmartEdge SE400/800 tcpdump disassembly.Guy Harris6-1/+163
svn path=/trunk/; revision=13212
2005-01-31Add a URL for Gnutella specs.Guy Harris2-76/+82
Don't check, in the dissectors for particular Gnutella packets, whether the packet goes past the end of the tvbuff - let that throw an exception so unreassembled packets are shown as such. Clean up indentation. Boost GNUTELLA_MAX_SNAP_SIZE to 4096 (one Gnutella spec suggests that packets should be < 4K), and use it to 1) clamp the length of packets (so we don't do huge reassembly or have problems when the total packet length, including the header, overflows 32 bits) and 2) check the length of packets before using tcp_dissect_pdus(), to distinguish between packets to be reassembled and a transfer stream. Pass the correct value to tcp_dissect_pdus() as the header length. svn path=/trunk/; revision=13211
2005-01-30add dissection of three new flags in the security descriptorRonnie Sahlberg1-0/+33
svn path=/trunk/; revision=13210
2005-01-30Add OID:s to old dissector, for comparison reasons.Anders Broman1-0/+38
svn path=/trunk/; revision=13209
2005-01-30In case of "faulty" BER tag:s return tvb = NULLAnders Broman1-0/+1
svn path=/trunk/; revision=13208
2005-01-30rename lsa_dissect_LSA_SECURITY_DESCRIPTOR to lsa_dissect_sec_desc_bufRonnie Sahlberg3-28/+47
change its signature to match the autogenerated signatures. add a small wrapper function so tha tthe handwritten lsa can still call the function through dissect_ndr_pointer() no changes in functionality, essentially just a rename of a function and signature change svn path=/trunk/; revision=13207
2005-01-30rename lsa_dissect_LSA_SECURITY_DESCRIPTOR_data to lsa_dissect_sec_desc_buf_dataRonnie Sahlberg3-7/+7
to make the symbol compatible with an autogenerated LSA dissector. no changes to the code, just a rename. svn path=/trunk/; revision=13206
2005-01-30rename lsa_dissect_POLICY_DNS_DOMAIN_INFO to lsa_dissect_DnsDomainInfo and ↵Ronnie Sahlberg3-7/+9
change the signature slightly. the signature change is to make it compatilbe with the signatures the idl compiler generates. svn path=/trunk/; revision=13205
2005-01-30add a new dissect_ndr_counted_ascii_string() that mimics ↵Ronnie Sahlberg2-0/+70
dissect_ndr_counted_string() but handles an ASCII string instead of a Unicode one. svn path=/trunk/; revision=13204
2005-01-30Byte arrays are byte arrays, not strings.Guy Harris1-1/+49
svn path=/trunk/; revision=13203
2005-01-30change dissect_ndr_counted_byte_array to be more consistent with ↵Ronnie Sahlberg3-4/+4
dissect_ndr_counted_string svn path=/trunk/; revision=13202
2005-01-29Add the I-D name for L2TPv3 to a comment.Guy Harris1-358/+381
Do more, and more careful, AVP length checks. Use tvb_format_text() to display strings. Just use "col_add_fstr()" to set the Info column - there's no need to format into a buffer and then set the column to that buffer. Make the L2TP dissector a "new-style" dissector and have it reject packets with an unknown version number - the dissection effect is the same if no other dissector claims the packet (it just gets displayed as data), but this allows other dissectors to claim it. Don't use the length field if the length bit isn't set. svn path=/trunk/; revision=13201
2005-01-29Put the dissection of the payload at the top level.Guy Harris1-32/+46
If the information that we used to guess the payload type is part of the payload, don't make it correspond to the "Payload Type" protocol tree item - it's covered by the dissected payload. If we don't succeed in guessing the protocol type, just dissect the payload as data. svn path=/trunk/; revision=13200
2005-01-29Treat the command opcodes as SBC-2 for CD-ROMs as well as for blockGuy Harris1-0/+1
devices. svn path=/trunk/; revision=13199
2005-01-29Use the 64-bit integer fetch routines to support 64-bit NDR integers.Guy Harris8-72/+28
svn path=/trunk/; revision=13198
2005-01-29Mark unused arguments as such.Guy Harris1-1/+1
svn path=/trunk/; revision=13197
2005-01-29various versioning related things (like using the svn version number), fix a ↵Ulf Lamping4-17/+29
broken link in the developer-guide svn path=/trunk/; revision=13196
2005-01-29add links to wiki example pages (Capture/Display Filters and Coloring Rules)Ulf Lamping4-4/+32
svn path=/trunk/; revision=13195
2005-01-29Add some notes about stuff discovered by Ken Mann.Guy Harris1-1/+11
svn path=/trunk/; revision=13194
2005-01-29only add 4 bytes to the pdu length IFF header digest/crc32 is actually used.Ronnie Sahlberg1-3/+25
svn path=/trunk/; revision=13193
2005-01-29Add a new menu item "View/Resize Columns" to, well, resize columns. As this ↵Ulf Lamping3-2/+83
might take a long time, I've provided a progress bar with the option to cancel the operation. I might later add something like "View/Auto Resize Columns" with a checkbox menu item, so this is done everytime a capture file finished loading. However, I don't know how well this will work together with "Update list of packets in real time" while doing a capture. svn path=/trunk/; revision=13192
2005-01-28use MATE (not mate) for protocol name and protocol treeUlf Lamping1-2/+2
svn path=/trunk/; revision=13191
2005-01-28A new patch for mate from Luis Ontanon:Lars Roland3-13/+19
- move mate_packet into packet-mate.c and remove it frome mate.h - supressed some warnings svn path=/trunk/; revision=13190
2005-01-28From Yoshihiro Oyama: support "-" as a file name, referring to theGuy Harris4-4/+44
standard input. Opening it for random access isn't supported; we add a new error for that. svn path=/trunk/; revision=13189
2005-01-28From Yoshihiro Oyama: get rid of _U_s in prototype declarations thatGuy Harris1-1/+1
lack variable names. svn path=/trunk/; revision=13188
2005-01-28From Yoshihiro Oyama: include the names of all the IrDA plugin's .oGuy Harris1-0/+1
files in the ENABLE_STATIC plugin_ldadd list. (This one was missing from the previous checkin.) svn path=/trunk/; revision=13187
2005-01-28From Yoshihiro Oyama: include the names of all the IrDA plugin's .oGuy Harris2-0/+2
files in the ENABLE_STATIC plugin_ldadd list. svn path=/trunk/; revision=13186
2005-01-28we need a dissect_ndr_uint64() that dissects an NDR hyperRonnie Sahlberg2-0/+25
svn path=/trunk/; revision=13185
2005-01-28older MS DCE/RPC interfaces often use a construct that is to be treated as a ↵Ronnie Sahlberg8-23/+28
64 bit integer but in reality is a struct containing 2 32bit integers. this construct is aligned on 4 byte boundaries in ndr and NOT 8 bytes as a real uint64 (== hyper) would be. rename the existing dissect_ndr_uint64 ro dissect_ndr_duint32 (double uint32) to make it reflect better the alignment of the type. svn path=/trunk/; revision=13184
2005-01-28add a macro for aligning NDR datastreams to 8 byte boundariesRonnie Sahlberg1-0/+9
svn path=/trunk/; revision=13183
2005-01-27We use the range utilities regardless of whether we're built withGuy Harris1-1/+1
libpcap or not. svn path=/trunk/; revision=13182
2005-01-27Fix a problem with building with libpcap disabled.Guy Harris1-3/+5
svn path=/trunk/; revision=13181
2005-01-26add another REPORT_DISSECTOR_BUG() call, if tfi->tree_type is existing and ↵Ulf Lamping1-0/+6
not in valid range. Question remains: Is it safe to continue in that case? svn path=/trunk/; revision=13180
2005-01-26if there must be an unknown version message, use hex instead of decimal to ↵Ulf Lamping1-1/+1
print the unknown version number svn path=/trunk/; revision=13179
2005-01-26if there must be an "unknown transport" message, at least print the ↵Ulf Lamping1-1/+1
transport name svn path=/trunk/; revision=13178
2005-01-26bugfix of crash_00001_20050124142515.cap: dissector packet-daap.c displayed ↵Ulf Lamping1-0/+1
[Dissector Bug] as it dissected a length field and used it without checking it first. use tvb_ensure_bytes_exist() before using this length value, so [Malformed Packet] will be displayed svn path=/trunk/; revision=13177
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-27 18:00:35 +0000