Age | Commit message (Collapse) | Author | Files | Lines |
|
Here's a patch updating the decoding of write request/responses, decodes the 16
unknown bytes in write requests, decodes the 8 unknown bytes in write responses
and renames length to count as per the SMB2 spec.
svn path=/trunk/; revision=34760
|
|
svn path=/trunk/; revision=34692
|
|
svn path=/trunk/; revision=34227
|
|
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3548 :
Clean up hf fields some more: mostly removing leading and trailing spaces from names and blurbs.
svn path=/trunk/; revision=34165
|
|
SMB2 create context response fix.
svn path=/trunk/; revision=34070
|
|
And it's true, this dissector really needs an overhaul!
svn path=/trunk/; revision=34048
|
|
search attributes, as a 16-bit quantity, with only the bits specified by
section 2.2.1.2.4 of [MS-CIFS]. Use dissect_file_ext_attr() in all
cases where we're dissecting SMB_EXT_FILE_ATTR, as specified by section
2.2.1.2.3 of [MS-CIFS].
svn path=/trunk/; revision=33753
|
|
http://www.wireshark.org/lists/wireshark-dev/200809/msg00075.html
(as referenced in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2907 ) and
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3411 :
Write a new convenience routine for finding a conversation and, if it is not
found, create it. The frame number and addresses are taken from pinfo (as is
the common case).
Use this function in a bunch of dissectors.
svn path=/trunk/; revision=32790
|
|
Subject: [PATCH 2/7] packet-smb2.c: fix handling of compounded
SMB2 PDUs
svn path=/trunk/; revision=31793
|
|
ABSOLUTE_TIME_LOCAL or ABSOLUTE_TIME_UTC, indicating whether to display
the date/time in local time or UTC. (int)ABSOLUTE_TIME_LOCAL ==
(int)BASE_NONE, so there's no source or binary compatiblity issue,
although we might want to eliminate BASE_NONE at some point and have the
BASE_ values used with integral types start at 0, so that you can't
specify BASE_NONE for an integral field.
svn path=/trunk/; revision=31319
|
|
Check sip->extra_info for SMB_EI_NTI before usage.
svn path=/trunk/; revision=31187
|
|
dcerpc helpers
svn path=/trunk/; revision=30288
|
|
svn path=/trunk/; revision=30125
|
|
svn path=/trunk/; revision=29446
|
|
svn path=/trunk/; revision=29345
|
|
svn path=/trunk/; revision=29090
|
|
SMB2 Error Response doesn't decode properly.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3609
svn path=/trunk/; revision=29083
|
|
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
|
|
a protocol tree;
the column values.
This includes stats-tree listeners.
Have the routines to build the packet list, and to retap packets, honor
those requirements. This means that cf_retap_packets() no longer needs
an argument to specify whether to construct the column values or not, so
get rid of that argument.
This also means that there's no need for a tap to have a fake filter
to ensure that the protocol tree will be built, so don't set up a fake
"frame" filter.
While we're at it, clean up some cases where "no filter" was represented
as a null string rather than a null pointer.
Have a routine to return an indication of the number of tap listeners
with filters; use that rather than the global num_tap_filters.
Clean up some indentation and some gboolean vs. gint items.
svn path=/trunk/; revision=28645
|
|
This patch fixes several misspellings/typos in Wireshark SVN revision 28201.
svn path=/trunk/; revision=28227
|
|
svn path=/trunk/; revision=27911
|
|
svn path=/trunk/; revision=26054
|
|
svn path=/trunk/; revision=25378
|
|
update the BREAK dissection
svn path=/trunk/; revision=25371
|
|
FileIdBothDirectoryInfo
svn path=/trunk/; revision=25366
|
|
svn path=/trunk/; revision=25365
|
|
svn path=/trunk/; revision=25364
|
|
svn path=/trunk/; revision=25359
|
|
svn path=/trunk/; revision=25358
|
|
svn path=/trunk/; revision=25355
|
|
svn path=/trunk/; revision=24327
|
|
svn path=/trunk/; revision=24326
|
|
svn path=/trunk/; revision=24325
|
|
svn path=/trunk/; revision=24324
|
|
svn path=/trunk/; revision=24323
|
|
svn path=/trunk/; revision=24322
|
|
svn path=/trunk/; revision=24321
|
|
When offset parameter is 0 replace tvb_bytes_exist() with the faster tvb_length().
On the other hand
if (tvb_bytes_exist(tvb, 0, 20)
is more readable than
if (tvb_length(tvb) >= 20
so only do it in heuristic function
svn path=/trunk/; revision=23412
|
|
- if offset is 0, tvb_length is the same as tvb_length_remaining, just faster.
Replace
- col_append_fstr() with faster col_append_str()
- col_add_str() with col_set_str()
when it's safe
svn path=/trunk/; revision=23252
|
|
svn path=/trunk/; revision=23218
|
|
rename dcerpc_smb_fetch_pol to dcerpc_fetch_polhnd_data and also make
it take an additional parameter to return the "type" of the policy
handle, if such a type was stored.
extend the pol_value structure used to track policy handles to also
store a type to represent what created the policy handle
types could be USER/ALIAS/CONNECT/... etc handles returned from the
SAMR interface
add a new helper function dcerpc_store_polhnd_type()
track policy handles between request/responses for dcerpc
update the samr.cnf file to make the samr dissectors for
SetSecurity/QuerySecurity dissect the specific bits for the security
descriptor correctly based on whether the policy handle refers to a
CONNECT/DOMAIN/USER/ALIAS or GROUP
svn path=/trunk/; revision=22703
|
|
routines and routines using those routines. GLib might use different
modifiers for 64-bit quantities than the platform's C library does.
svn path=/trunk/; revision=21990
|
|
svn path=/trunk/; revision=21860
|
|
improved handling of smb2 errors
svn path=/trunk/; revision=21859
|
|
prettify dissection of multiple chained smb2 pdus in one frame
svn path=/trunk/; revision=21801
|
|
new tvb for it or else the offset/length calculations for where blobs
a next_tvb=tvb_new_subset(tvb, chain_offset, MIN((int)len,
tvb_length_remaining(tvb, off)), len);
re in the packets are wrong.
svn path=/trunk/; revision=21795
|
|
svn path=/trunk/; revision=21794
|
|
patch to find and enhancement of extra_info handling
svn path=/trunk/; revision=21793
|
|
add support for smb2 chaining
rename sessionsetupandz to sessionsetup
svn path=/trunk/; revision=21792
|
|
ioctl data that already exists for smb2
svn path=/trunk/; revision=21713
|