aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2001-11-27Rename the heuristic dissector table "msrpc" to "smb_transact", toGuy Harris2-7/+7
indicate that it's to be used for SMB transactions; a different table, using different dissectors, would be needed for, say, reads and writes over a named pipe, as those are byte streams and SMB transactions are packets, so the dissectors for the first one need to worry about multiple PDUs per segment and desegmentation, while the dissectors for the second one don't - and, in fact, can't do desegmentation stuff. svn path=/trunk/; revision=4286
2001-11-27From Todd Sabin:Guy Harris6-56/+383
o Modifies the dcerpc handoff to subdissectors slightly. It also needs to pass the data representation to the subdissector. Also, if no subdissector is found, it puts a "Stub data" entry in the tree. o Adds optional TCP desegmentation to the dcerpc layer. Note that dcerpc has it's own ability to fragment PDUs. This isn't for dealing with that, but with the case of a single PDU being broken over more than one TCP segment. o Adds a little bit of dissection to packet-dcerpc-epm.c. Mainly just proof of concept for the dcerpc handoff stuff. (Writing this is how I realized the need for the drep.) o Adds packet-dcerpc-ndr.c, which will contain NDR dissection routines for use by subdissectors. Also, support added for multiple PDUs per segment for DCERPC-over-TCP (and, potentially, other byte-stream transports). svn path=/trunk/; revision=4285
2001-11-27Thou shalt not use C++-style comments in C code, for they upset some CGuy Harris3-6/+6
compilers. svn path=/trunk/; revision=4284
2001-11-27Get rid of some code to set "pinfo->current_proto"; let the EtherealGuy Harris3-11/+5
infrastructure do it for the dissectors. Make some WCP dissector routines static. svn path=/trunk/; revision=4283
2001-11-27Reflect the change to "conversation_set_dissector()" to take a dissectorGuy Harris1-9/+34
handle as an argument. svn path=/trunk/; revision=4282
2001-11-27Change "conversation_set_dissector()" to take a dissector handle, ratherGuy Harris26-177/+150
than a pointer to a dissector function, as an argument. This means that the conversation dissector is called through "call_dissector()", so the dissector itself doesn't have to worry about checking whether the protocol is enabled or setting "pinfo->current_proto", so get rid of the code that does that in conversation dissectors. Also, make the conversation dissectors static. Get rid of some direct calls to dissectors; replace them with calls through handles, and, again, get rid of code to check whether a protocol is enabled and set "pinfo->current_proto" where that code isn't needed. Make those dissectors static if they aren't already static. Add a routine "create_dissector_handle()" to create a dissector handle without registering it by name, if the dissector isn't used outside the module in which it's defined. svn path=/trunk/; revision=4281
2001-11-27Remove an extra blank from a data source name.Guy Harris1-2/+10
Added comments, from Ronnie Sahlberg. svn path=/trunk/; revision=4280
2001-11-27Fixes from Ronnie Sahlberg for fragmented transactions - handle nullGuy Harris1-11/+22
tvbuff pointers. svn path=/trunk/; revision=4279
2001-11-27Clarify what the tvbuff handed to a dissector contains (i.e., it's notGuy Harris1-6/+8
the raw frame data, it's the data that the dissector should look at). svn path=/trunk/; revision=4278
2001-11-27Note that LDP is documented in RFC 3036.Guy Harris1-2/+2
svn path=/trunk/; revision=4277
2001-11-27Handle the case of multiple LDP PDUs per TCP segment. (Still needs toGuy Harris1-31/+87
handle the case of more than one TCP segment per LDP PDU....) Fix the handling of some of the length fields. svn path=/trunk/; revision=4276
2001-11-27WCCP capability info dissection bug fix, from Raghu Angadi.Guy Harris3-4/+9
svn path=/trunk/; revision=4275
2001-11-26In "smb_trans_defragment()", quit if "si->sip" is null, as it means weGuy Harris1-1/+12
don't have the frame number of the request, which we use as the ID of the transaction being reassembled. (If we're reassembling a reply, should we not use the frame number of the reply instead? We used to have a hash table to keep track of that, so we might just be able to bring it back....) svn path=/trunk/; revision=4274
2001-11-26Add some comments.Guy Harris1-1/+12
svn path=/trunk/; revision=4273
2001-11-26From Ronnie Sahlberg: reassemble transaction data if transactionGuy Harris1-29/+151
continuations are seen. svn path=/trunk/; revision=4272
2001-11-26This should be the final bit of removing the dissect_data symbolEd Warnicke8-37/+17
from being required by anyone other than packet-data.c. It can now be accessed with call_dissector() with the name "data". dissect_data is now also of dissect_t. svn path=/trunk/; revision=4271
2001-11-26Switched from using CHECK_DISPLAY_AS_DATA to using CHECK_DISPLAY_AS_XEd Warnicke12-24/+41
which also takes a handle as an argument and thus doesn't call dissect_data directly. svn path=/trunk/; revision=4270
2001-11-26Moved from using dissect_data() to using call_dissector()Ed Warnicke38-118/+253
svn path=/trunk/; revision=4269
2001-11-26Added a proto_reg_handoff_frame() function and switched fromEd Warnicke1-2/+9
using dissect_data() to using call_dissector() svn path=/trunk/; revision=4268
2001-11-26Clean up the stuff that creates the pipe protocol subtree; it shouldn'tGuy Harris1-14/+17
fetch the length of "sp_tvb" if "sp_tvb" is null. Fix some comments. svn path=/trunk/; revision=4267
2001-11-26Moved from using dissect_data to using call_dissector()Ed Warnicke6-17/+31
svn path=/trunk/; revision=4266
2001-11-25From Ronnie Sahlberg: fix a check for a null tvbuff pointer to check theGuy Harris1-2/+2
correct pointer. svn path=/trunk/; revision=4265
2001-11-25Moved from using dissect_data to using call_dissector()Ed Warnicke12-41/+69
svn path=/trunk/; revision=4264
2001-11-25Switched from calling dissect_data to using call_dissectorEd Warnicke10-25/+46
svn path=/trunk/; revision=4263
2001-11-25Added hooks to be able to call dissect_data as via a handle.Ed Warnicke1-1/+9
svn path=/trunk/; revision=4262
2001-11-25Remove a duplicate entry from the SAP table, and move an entry in thatGuy Harris1-3/+2
table to the proper sorted location. svn path=/trunk/; revision=4261
2001-11-25Throw in a large pile of additional SAP values.Guy Harris1-43/+223
svn path=/trunk/; revision=4260
2001-11-24Finish removing the pointer to the no-longer-extant global "packet_info"Guy Harris2-5/+2
structure "pi" from the plugin API. svn path=/trunk/; revision=4259
2001-11-24Update the Makefile.nmake files to reflect the move of "int-64bit.c" toGuy Harris2-3/+3
the "epan" subdirectory. Include "strptime.obj" in the list of object files used to build "text2pcap.exe". svn path=/trunk/; revision=4258
2001-11-24Assume that a.stockmeier[AT]avm.de, a/k/a "stocki", is the AndreasGuy Harris2-2/+2
Stockmeier listed as the contact in http://www.isi.edu/in-notes/iana/assignments/enterprise-numbers for the private enterprise number 872, with the e-mail address "stocki@avm-berlin.de". svn path=/trunk/; revision=4257
2001-11-24Fix to text2pcap to handle colons after offset field, from GordonGuy Harris2-2/+3
McKinney. svn path=/trunk/; revision=4256
2001-11-24Assorted changes from Ronnie Sahlberg:Guy Harris3-24/+162
Add a few small functions to reassemble.c to cope with protocols where the total length of defragmented PDUs are specified in the first fragment (all previous uses of reassembly has been for PDUs where the last fragment is signalled by a flag in the header for the last fragment). Add a few small functions to reassemble.c to abort-and-delete defragmentation of PDUs and also detect IF a PDU is currently being defragmented. (Useful for PDUs where the "unique" identifier is rather ununique, or may be reused often enough so it can be a problem for Ethereal.) Change where NT Cancel presents its Cancelation-to output, and makes the three trans secondary requests also output similar information. svn path=/trunk/; revision=4255
2001-11-24Fix the usage message and man page for text2pcap.Guy Harris2-13/+19
svn path=/trunk/; revision=4254
2001-11-24If a non-option command-line argument is specified to Ethereal, treat itGuy Harris3-5/+42
as the pathname of a capture file to be read. If more than one such option is specified, print a usage message. Fix the documentation of the "-r" option to Ethereal and Tethereal. svn path=/trunk/; revision=4253
2001-11-24Support for time stamping packets in text2pcap, from Gordon McKinney.Guy Harris5-10/+171
svn path=/trunk/; revision=4252
2001-11-24Fix the return value of a routine.Guy Harris1-2/+2
svn path=/trunk/; revision=4251
2001-11-24If the expected "next offset" doesn't match the offset we read, it mayGuy Harris1-18/+36
merely mean that we mistakenly treated stuff from the text-dump part of the file we're reading as if it were hex byte data (e.g., if the first non-white-space part of the text dump was a 2-digit hex number). If the offset we read is less than the expected next offset, assume that's the problem, and throw away enough extra bytes to make the offset we read the expected next offset. "getopt()" will never, for any option that the "getopt()" string says takes an argument, leave "optarg" null; if no argument was specified, it'll return an error, so there's no need to check for a null "optarg". svn path=/trunk/; revision=4250
2001-11-24Treat a bunch of digits followed by a newline differently from a bunchGuy Harris1-2/+4
of digits followed by a blank or tab, so that we recognize the newline as an end-of-line. svn path=/trunk/; revision=4249
2001-11-22Moved int-64bit.{c,h} into epan/Ed Warnicke6-10/+10
svn path=/trunk/; revision=4248
2001-11-21Remove the pointer to the global packet_info from the table ofGilbert Ramirez3-8/+3
pointers used for plugins on win32. svn path=/trunk/; revision=4247
2001-11-21Remove the global packet_info called "pi". Dissectors now onlyGilbert Ramirez18-136/+93
access their own "pinfo". A packet_info is stored in epan_dissect_t, which is created for the dissection of a single packet. GUI functions which need to access the packet_info of the currently selected packet used to use "pi"; now they use cfile.edt->pi. cfile's "edt" member is the epan_dissect_t of the currently-selected packet. The functionality of blank_packetinfo() was moved into dissect_packet(), as that's the only place that called blank_packetinfo(), after a spurious call to blank_packetinfo() was removed from packet_list_select_cb(). svn path=/trunk/; revision=4246
2001-11-21If we have to worry about subdissectors changing the "packet_info"Guy Harris6-73/+6
structure, we may have to worry about it in more places than the places that *used* to set "pi.len" and "pi.captured_len", so there's no point in just saving and restoring it there. We'll remove those saves/restores, and worry about saves and restores when we find a problem. svn path=/trunk/; revision=4245
2001-11-21Discard stuff in "smb.h" not used by the dissectors, and replace theGuy Harris2-517/+97
#defines for SMB commands with ones that use the names from the SNIA CIFS spec. Use those #define values rather than hardcoded values in various places that check for specific commands. svn path=/trunk/; revision=4244
2001-11-21Support for Transaction Secondary and Transaction2 Secondary, fromGuy Harris1-3/+12
Ronnie Sahlberg. svn path=/trunk/; revision=4243
2001-11-21Rename the "packet-msrpc-XXX.[ch]" files to "packet-dcerpc-XXX.[ch]", asGuy Harris18-152/+152
per Todd Sabin's suggestion. svn path=/trunk/; revision=4242
2001-11-21Get rid of some unused variables.Guy Harris12-76/+27
svn path=/trunk/; revision=4241
2001-11-21Get rid of some unused variables.Guy Harris3-5/+5
svn path=/trunk/; revision=4240
2001-11-21Get rid of some unused variables.Guy Harris4-14/+4
svn path=/trunk/; revision=4239
2001-11-21Fix an earlier typo of mine.Guy Harris1-2/+2
svn path=/trunk/; revision=4238
2001-11-20Get rid of "tvb_compat()"; it's no longer needed (the one remaining callGuy Harris3-24/+4
to it returns data that's no longer used). svn path=/trunk/; revision=4237