aboutsummaryrefslogtreecommitdiffstats
path: root/editcap.c
AgeCommit message (Collapse)AuthorFilesLines
2012-10-16Add wtap_pseudo_header union to wtap_pkthdr structure.Jakub Zawadzki1-1/+1
Use pkthdr instead of pseudo_header as argument for dissecting. svn path=/trunk/; revision=45601
2012-10-15From Jim Young:Anders Broman1-1/+3
Have editcap use modulo when calculating filenum component of fileset name . https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7863 svn path=/trunk/; revision=45556
2012-10-09From Bill Parker:Anders Broman1-1/+1
Explicitly declare/cast 'unsigned <variable>' as 'unsigned int <variable>' https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7810 svn path=/trunk/; revision=45418
2012-09-20We always HAVE_CONFIG_H so don't bother checking whether we have it or not.Jeff Morriss1-2/+0
svn path=/trunk/; revision=45015
2012-09-09Make count variable in editcap unsigned, fixes more format stringEvan Huus1-1/+1
mismatches. svn path=/trunk/; revision=44820
2012-07-16Fix a copy+paste error ('capinfos' appearing in error string).Martin Mathieson1-1/+1
svn path=/trunk/; revision=43738
2012-06-15Try to fix pcap-ng - most files created by editcap -c have no IDBAnders Broman1-9/+10
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7350 By using wtap_dump_open_ng() in all places. svn path=/trunk/; revision=43271
2012-03-14Don't free idb_inf in wtap_dump_open_ng(): free it in the callers. This ↵Jeff Morriss1-1/+4
fixes the double-free editcap crashes that the buildbot's been seeing lately. svn path=/trunk/; revision=41542
2012-03-13From Jose Pedro Oliveira:Anders Broman1-1/+3
the shb_userappl value wasn't being changed. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6937 svn path=/trunk/; revision=41530
2012-03-13A modified version of "pcapng: shd_userappl in newly created files"Anders Broman1-0/+5
to only add the name if no name if there yet. Original patch from Jose Pedro Oliveira. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6937 svn path=/trunk/; revision=41524
2012-03-12Free idb_inf and shb_hdr when done.Anders Broman1-0/+2
svn path=/trunk/; revision=41501
2012-03-03Use wtap_dump_open_ng(), so we preserve all the interfaces in pcap-NGGuy Harris1-2/+7
files. svn path=/trunk/; revision=41328
2012-02-24Revert SVN #40866 (which used g_fprintf() in place of fprintf()).Bill Meier1-140/+141
Using g_fprintf() fails (crashes) on Windows because the Windows GLib DLL is linked with (depends upon) MSVCRT while editcap is linked with (depends upon) MSVCR90. IOW: "You can't do that ... (on Windows)" See https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6695 (Comment 2) for some additional information. svn path=/trunk/; revision=41168
2012-02-05From Alexander Koeppe:Anders Broman1-141/+140
Eliminate Mixture of libc and glibc in editcap.c https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6695 svn path=/trunk/; revision=40866
2012-01-23From Michael Mann:Anders Broman1-1/+1
help page update (pcapng is now the default file format). https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6551 svn path=/trunk/; revision=40658
2012-01-15Rename crypt-xxx to xxxJörg Mayer1-1/+1
svn path=/trunk/; revision=40511
2011-12-13Rename WTAP_ERR_BAD_RECORD to WTAP_ERR_BAD_FILE; it really reports anyGuy Harris1-2/+2
form of corruption/bogosity in a file, including in a file header as well as in records in the file. Change the error message wtap_strerror() returns for it to reflect that. Use it for some file header problems for which it wasn't already being used - WTAP_ERR_UNSUPPORTED shouldn't be used for that, it should only be used for files that we have no reason to believe are invalid but that have a version number we don't know about or some other non-link-layer-encapsulation-type value we don't know about. svn path=/trunk/; revision=40175
2011-11-19When reporting "sorry, *this* packet can't be written to a file of thatGuy Harris1-2/+19
type" when writing out a capture file (i.e., writing a per-packet-encapsulation capture to a file type that supports it but doesn't support one of the packet's encapsulations), report the packet number and, when doing this in a merge operation, report the file from which it came. When reporting "sorry, that file can't be written to a file of that type, period", show the file type rather than the input file link-layer type that causes the problem. (We could show both. We could be *really* ambitious and iterate through all possible file types and show the ones that will or at least might work....) file_write_error_message() is documented as handling only UNIX-style errnos, and libwireshark should be usable without libwiretap, so leave it up to its callers to handle Wiretap errors such as WTAP_ERR_SHORT_WRITE. Clean up indentation. svn path=/trunk/; revision=39949
2011-08-09Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5608 :Jeff Morriss1-3/+1
getopt() can/should normally be found in unistd.h, so: - When testing for getopt(), define that we HAVE_GETOPT instead of HAVE_GETOPT_H (to avoid confusion). - Don't attempt to include getopt.h: not all OS's have it (for example, Solaris 9 does not). - (All the places which need getopt already include unistd.h (if we have it).) If this breaks things on some OS, we might need (a real) HAVE_GETOPT_H check. svn path=/trunk/; revision=38437
2011-07-21Remove the snaplen check added in r37633: the change in r37634 makes itJeff Morriss1-6/+0
unnecessary. svn path=/trunk/; revision=38155
2011-07-20Don't sanity-check snaplen against frame length if snaplen is 0.Martin Mathieson1-1/+1
svn path=/trunk/; revision=38132
2011-06-23Prohibited APIs: strncpy -> g_strlcpy.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=37768
2011-06-20Have mergecap, tshark, and editcap write pcap-ng files by default. ThisGerald Combs1-1/+5
is mainly an attempt to fix the currently-broken "test.sh" step on the XP buildbot. If this causes too many problems we might want to have suite-capture.sh:capture_step_snapshot pass "-P" to dumpcap instead. svn path=/trunk/; revision=37736
2011-06-15See if this squelches some compiler warnings.Guy Harris1-2/+2
svn path=/trunk/; revision=37669
2011-06-09Simplify timestamp checking: only check the packet's timestamp ifJeff Morriss1-4/+10
check_startstop is set. Refuse to write packets that do not fit in the file type we're writing. This allows fuzz testing to be done on JPEGs without generating bogus files (with packets bigger than the maximum packet size). This fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6010 . Note that this is only a problem with editcap is run with -T to force the encapsulation type. Maybe this needs a more generic solution (e.g., should this check be done in the wiretap routines?), but at least for now it'll pacify the buildbot. svn path=/trunk/; revision=37633
2011-05-31Handle snaplen before choplen for consistency. Also, if chopping more bytesChris Maynard1-10/+13
than present, just chop all by setting caplen to 0. In all cases, don't touch len. In other words, change incl_len but leave orig_len alone. svn path=/trunk/; revision=37488
2011-05-31When a snaplen is specified using "-s <snaplen", if it's smaller than theChris Maynard1-21/+24
original capture file's snaplen, save the new snaplen in the capture file header so wireshark and capinfos can report it. svn path=/trunk/; revision=37480
2011-05-24Move the Windows argument list conversion code to a common routine.Gerald Combs1-17/+5
svn path=/trunk/; revision=37372
2011-04-12Don't bother to strcpy() an empty string; just set buf[0] = '\0': Coverity 626Chris Maynard1-1/+1
svn path=/trunk/; revision=36601
2011-02-04From Jason Masker (bug 5240):Sake Blok1-10/+16
` Allow editcap to chop from beginning of packet for decapsulation svn path=/trunk/; revision=35832
2011-01-06On Windows, convert all of our command-line arguments from UTF-16 toGerald Combs1-0/+18
UTF-8 where we don't already do so. In Wireshark use g_utf16_to_utf8 instead of utf_16to8. This should fix bug 5520. svn path=/trunk/; revision=35411
2010-12-06Fix various typos and spelling errors.Bill Meier1-1/+1
svn path=/trunk/; revision=35126
2010-11-24Attempt to fix warnings not previously seen with VS2008EE.Chris Maynard1-5/+8
svn path=/trunk/; revision=35024
2010-11-24When listing encapsulation types with -T or file types with -F, sort them.Chris Maynard1-8/+39
svn path=/trunk/; revision=35022
2010-11-16Make editcap -B work like expected: output no packets after the stop time.Sake Blok1-4/+4
Old behavior was to include a packet with a timestamp of 12:00:00.934 if -B "YYYY-MM-DD 12:00:00" was used. svn path=/trunk/; revision=34913
2010-11-01From Jose Pedro Oliveira via ↵Jeff Morriss1-10/+10
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5353 : editcap -h sends 9 lines to stderr and the rest to stdout. This problem affects editcap 1.4.x (branch 1.4) and devel (trunk). How to duplicate: 1) run "editcap -h" 2) run "editcap -h > /dev/null" The attached patch replaces 9 ocurrences of "stderr" by "output" in the usage function. svn path=/trunk/; revision=34742
2010-09-16Turn on ASLR via /DYNAMICBASE and DEP via SetProcessDEPPolicy().Gerald Combs1-7/+7
svn path=/trunk/; revision=34137
2010-06-03Fix a gcc -Wshadow warningBill Meier1-13/+13
svn path=/trunk/; revision=33077
2010-06-02From Jim Young via bug 4331:Gerald Combs1-2/+154
This patch adds a new '-S' option to editcap that will rewrite timestamps of packets to insure that the new capture file is in strict chronological order. This option's primary use case is to fixup the occasional timestamps that have a negative delta time relative to previous packet. This feature is related to (but does not depend on) capinfos enhancement submitted in bug #4315 which helps identify tracefiles with "out-of-order" packets. svn path=/trunk/; revision=33042
2010-05-28Move some code (including the optional objects) into libwsutilJeff Morriss1-7/+7
svn path=/trunk/; revision=33012
2010-01-29Fix various gcc -Wshadow warnings.Bill Meier1-28/+28
svn path=/trunk/; revision=31729
2009-12-29Make edticap behave like the rest of the Wireshark programs where it willStephen Fisher1-64/+71
send normal -h output to stdout so it can be paginated and the usage output to stderr when there was an error in the command arguments. svn path=/trunk/; revision=31388
2009-10-25From Jim Young via bug 4162:Gerald Combs1-0/+10
This patch limits the number of fractional digits used to calculate the fractional component of editcap's -t and -w options. Specifically this patch truncates the fractional component (if any) of the -t and -w options to 6 and 9 respectively. svn path=/trunk/; revision=30698
2009-10-06Invert check for getopt: NEED_GETOPT_H -> HAVE_GETOPT_HStig Bjørlykke1-4/+4
Rename getopt.[ch] -> wsgetopt.[ch] to avoid name collision. svn path=/trunk/; revision=30370
2009-07-22Use "svn info" to fetch the version by default. Fetch the repository path asGerald Combs1-1/+1
well. Add the repository path to the version strings. svn path=/trunk/; revision=29171
2009-06-21Clean up the "available XXX type" messages a bit.Guy Harris1-2/+2
svn path=/trunk/; revision=28793
2009-06-02If no valid packages was found in the input file we write an emptyStig Bjørlykke1-3/+17
header in the output file. This way we at least create a file. svn path=/trunk/; revision=28617
2009-06-02Only call wtap_dump_close() if we have an open file.Stig Bjørlykke1-2/+2
We can have a situation where a file only contains a valid file header without any packages, so this will avoid a crash. svn path=/trunk/; revision=28602
2009-05-23Have fileset_extract_prefix_suffix() print an error message if it fails,Guy Harris1-12/+13
so we don't just exit silently. Don't bother checking the validity of arguments - it shouldn't be passed NULL fprefix or fsuffix arguments in the first place, and isn't passed them. Exit with an exit status of 1 for command-line syntax errors and 2 for file open/close/IO errors. svn path=/trunk/; revision=28458
2009-05-23Fix indentation.Guy Harris1-6/+6
svn path=/trunk/; revision=28457