aboutsummaryrefslogtreecommitdiffstats
path: root/packet-dns.c
AgeCommit message (Collapse)AuthorFilesLines
2000-08-18A6 records are now RFC 2874 (not i-d)Jun-ichiro itojun Hagino1-4/+4
svn path=/trunk/; revision=2288
2000-08-13Add the "Edit:Protocols..." feature which currently only implementsLaurent Deniel1-1/+3
the following: It is now possible to enable/disable a particular protocol decoding (i.e. the protocol dissector is void or not). When a protocol is disabled, it is displayed as Data and of course, all linked sub-protocols are disabled as well. Disabling a protocol could be interesting: - in case of buggy dissectors - in case of wrong heuristics - for performance reasons - to decode the data as another protocol (TODO) Currently (if I am not wrong), all dissectors but NFS can be disabled (and dissectors that do not register protocols :-) I do not like the way the RPC sub-dissectors are disabled (in the sub-dissectors) since this could be done in the RPC dissector itself, knowing the sub-protocol hfinfo entry (this is why, I've not modified the NFS one yet). Two functions are added in proto.c : gboolean proto_is_protocol_enabled(int n); void proto_set_decoding(int n, gboolean enabled); and two MACROs which can be used in dissectors: OLD_CHECK_DISPLAY_AS_DATA(index, pd, offset, fd, tree) CHECK_DISPLAY_AS_DATA(index, tvb, pinfo, tree) See also the XXX in proto_dlg.c and proto.c around the new functions. svn path=/trunk/; revision=2267
2000-08-09Add #defines for class values, and use them rather than using theGuy Harris1-5/+14
numeric values. (Also, just for laughs and for completeness, turn the CS class into "csnet", even though it's obsolete and supposedly used only in some examples in obsolete RFCs.) svn path=/trunk/; revision=2240
2000-08-08- improve/fix add_host_nameLaurent Deniel1-1/+6
- add hostname/IP in host hashtable from DNS answers (currently only type A RR). svn path=/trunk/; revision=2228
2000-08-07Allow either old-style (pre-tvbuff) or new-style (tvbuffified)Guy Harris1-3/+3
dissectors to be registered as dissectors for particular ports, registered as heuristic dissectors, and registered as dissectors for conversations, and have routines to be used both by old-style and new-style dissectors to call registered dissectors. Have the code that calls those dissectors translate the arguments as necessary. (For conversation dissectors, replace "find_conversation_dissector()", which just returns a pointer to the dissector, with "old_try_conversation_dissector()" and "try_conversation_dissector()", which actually call the dissector, so that there's a single place at which we can do that translation. Also make "dissector_lookup()" static and, instead of calling it and, if it returns a non-null pointer, calling that dissector, just use "old_dissector_try_port()" or "dissector_try_port()", for the same reason.) This allows some dissectors that took old-style arguments and immediately translated them to new-style arguments to just take new-style arguments; make them do so. It also allows some new-style dissectors not to have to translate arguments before calling routines to look up and call dissectors; make them not do so. Get rid of checks for too-short frames in new-style dissectors - the tvbuff code does those checks for you. Give the routines to register old-style dissectors, and to call dissectors from old-style dissectors, names beginning with "old_", with the routines for new-style dissectors not having the "old_". Update the dissectors that use those routines appropriately. Rename "dissect_data()" to "old_dissect_data()", and "dissect_data_tvb()" to "dissect_data()". svn path=/trunk/; revision=2218
2000-07-21Give a URL that goes directly to the W2K Server documentationGuy Harris1-2/+2
information on WINS and WINS-R records. svn path=/trunk/; revision=2146
2000-07-21Add support for Microsoft's WINS and WINS-R resource records.Guy Harris1-4/+182
svn path=/trunk/; revision=2145
2000-07-18DNSSEC additions/name changes from Jakob Schlyter <jakob@crt.se>.Gerald Combs1-8/+16
svn path=/trunk/; revision=2142
2000-05-31Add routines for adding items to a protocol tree that take arguments ofGuy Harris1-8/+8
a particular type, rather than taking a varargs list, along the lines of the "proto_tree_add_XXX_format()" routines. Replace most calls to "proto_tree_add_item()" and "proto_tree_add_item_hidden()" with calls to those routines. Rename "proto_tree_add_item()" and "proto_tree_add_item_hidden()" to "proto_tree_add_item_old()" and "proto_tree_add_item_hidden_old()", and add new "proto_tree_add_item()" and "proto_tree_add_item_hidden()" routines that don't take the item to be added as an argument - instead, they fetch the argument from the packet whose tvbuff was handed to them, from the offset handed to them. svn path=/trunk/; revision=2031
2000-05-11Add tvbuff class.Gilbert Ramirez1-97/+97
Add exceptions routines. Convert proto_tree_add_*() routines to require tvbuff_t* argument. Convert all dissectors to pass NULL argument ("NullTVB" macro == NULL) as the tvbuff_t* argument to proto_tree_add_*() routines. dissect_packet() creates a tvbuff_t, wraps the next dissect call in a TRY block, will print "Short Frame" on the proto_tree if a BoundsError exception is caught. The FDDI dissector is converted to use tvbuff's. svn path=/trunk/; revision=1939
2000-04-26support A6 packet (IPv6 name resolution).Jun-ichiro itojun Hagino1-3/+20
support AD and CD bit in RFC2535 (DNS security extension) section 6. (seen on packets from BIND9 named) svn path=/trunk/; revision=1890
2000-04-12Catch "loops" in compressed DNS names the same way the BSD DNS resolver,Guy Harris1-5/+21
and BIND, do, by counting the number of characters we look at and, if when we see a pointer, we see we've already looked at as many characters as there are in the DNS packet, we conclude that we're looping. Also, check for pointers that point past the end of the packet (not just past the end of the captured portion of the packet, i.e. cases where we didn't capture all of the packet, but cases where the packet is actually malformed). svn path=/trunk/; revision=1830
2000-04-04Make "make-reg-dotc" generate a "register_all_protocol_handoffs()"Guy Harris1-2/+11
routine, which calls all routines found in the dissector source files with names that match " proto_reg_handoff_[a-z_0-9A-Z]*". Call "register_all_protocol_handoffs()" after calling "register_all_protocols()" - "register_all_protocols()" needs to be called first, so that all protocols can register their fields, because registering a dissector as being called if field "proto.port" is equal to N requires that "proto.port" be a registered field. Give DNS a handoff registration routine, and register its dissector to be called if "udp.port" is UDP_PORT_DNS; remove the registration of DNS from "packet-udp.c", and make "dissect_dns()" static (as nobody else need know that it exists). svn path=/trunk/; revision=1788
2000-03-30"add_rr_to_tree()" is exported from "packet-dns.c" for use by the NBNSGuy Harris1-2/+2
protocol, which is DNS-derived; hopefully, Microsoft won't shovel any more stuff into NBNS (I suspect that they ultimately want to make DNS replace it completely), so it won't pick up stuff such as OPT RRs. As such, we don't need to export "add_opt_rr_to_tree()", so make it static to "packet-dns.c". svn path=/trunk/; revision=1766
2000-03-30add dissector for OPT pseudo-RR, in RFC2671 section 4.Jun-ichiro itojun Hagino1-10/+61
svn path=/trunk/; revision=1765
2000-03-21Create the tree entry for resource records in DNS replies, and add theGuy Harris1-152/+137
record type to the info column, before parsing the reply; add the text for the entry, and any additional information for the info column, in the code that handles the reply. Don't use stuff from the resource record if you ran past the end of the packet. Fix some bit-scanning code. svn path=/trunk/; revision=1736
2000-03-21Add support for TXT and WKS records to the DNS dissector.Guy Harris1-1/+133
Add EIGRP and VINES to the list of protocols "ipprotostr()" knows about. Get rid of the "proto_vals" table in "packet-ip.c" - it's not used, and the two entries it had that weren't in the table in "ipproto.c" have been moved there. svn path=/trunk/; revision=1735
2000-03-12Break proto_tree_add_item_format() into multiple functions:Gilbert Ramirez1-3/+3
proto_tree_add_protocol_format() proto_tree_add_uint_format() proto_tree_add_ipxnet_format() proto_tree_add_ipv4_format() proto_tree_add_ipv6_format() proto_tree_add_bytes_format() proto_tree_add_string_format() proto_tree_add_ether_format() proto_tree_add_time_format() proto_tree_add_double_format() proto_tree_add_boolean_format() If using GCC 2.x, we can check the print-format against the variable args passed in. Regardless of compiler, we can now check at run-time that the field type passed into the function corresponds to what that function expects (FT_UINT, FT_BOOLEAN, etc.) Note that proto_tree_add_protocol_format() does not require a value field, since the value of a protocol is always NULL. It's more intuitive w/o the vestigial argument. Fixed a proto_tree_add_item_format-related bug in packet-isis-hello.c Fixed a variable usage bug in packet-v120.c. (ett_* was used instead of hf_*) Checked in Guy's fix for the function declearation for proto_tree_add_text() and proto_tree_add_notext(). svn path=/trunk/; revision=1713
2000-03-07Fix some "proto_tree_add_text()" calls.Guy Harris1-28/+24
Use "proto_tree_add_notext()" and "proto_tree_set_text()" for some resource records. svn path=/trunk/; revision=1699
2000-01-16Get rid of the include of "util.h" that some dissectors do - it's notGuy Harris1-2/+1
necessary. svn path=/trunk/; revision=1496
1999-12-29Get rid of the "(UDP)" in the DNS protocol string.Guy Harris1-6/+12
If a DNS response got an error, include the error indication in the summary line. svn path=/trunk/; revision=1391
1999-12-07Fixes to highlighting for irc dissector req/resp linesNathan Neulinger1-2/+2
Change to dns dissector to display "Domain Name System (request)" instead of "DNS request" in the proto tree, as it is more in keeping with the style of the other proto tree entries. svn path=/trunk/; revision=1233
1999-11-27Add dissection of RFC 2065 resource records.Guy Harris1-5/+258
svn path=/trunk/; revision=1128
1999-11-27Dissect AAAA resource records.Guy Harris1-2/+23
svn path=/trunk/; revision=1127
1999-11-16Replace the ETT_ "enum" members, declared in "packet.h", withGuy Harris1-22/+37
dynamically-assigned "ett_" integer values, assigned by "proto_register_subtree_array()"; this: obviates the need to update "packet.h" whenever you add a new subtree type - you only have to add a call to "proto_register_subtree_array()" to a "register" routine and an array of pointers to "ett_", if they're not already there, and add a pointer to the new "ett_" variable to the array, if they are there; would allow run-time-loaded dissectors to allocate subtree types when they're loaded. svn path=/trunk/; revision=1043
1999-11-12Add support for HINFO records.Guy Harris1-1/+76
svn path=/trunk/; revision=1019
1999-11-10Fix up the MX record handling.Guy Harris1-18/+21
svn path=/trunk/; revision=993
1999-11-07Brian J. Murrell's patch to put information about the queries andGuy Harris1-194/+260
answers into the COL_INFO column in the summary pane. svn path=/trunk/; revision=988
1999-10-16Add display filters.Laurent Deniel1-16/+67
svn path=/trunk/; revision=857
1999-10-07A DNS or NBNS name may contain pointers to other names in the packet; ifGuy Harris1-5/+13
the stuff referred to by those pointers goes past the end of the packet, that's not a reason not to return the length of the DNS or NBNS name itself - you can tag that name even though it's bad. Therefore, "get_dns_name()" should return the length of the part of the name it's looked at even if that name contains a pointer to stuff that goes past the end of the packet. This means you can't check its return value to see if it's negative, and treat it as an error if it is; remove that stuff. Add checks to make sure the type and class fields in an RR don't go past the end of the packet. svn path=/trunk/; revision=781
1999-10-07Add more packet bounds checking to DNS, and add some to NetBIOS-over-TCPGuy Harris1-143/+260
as well. svn path=/trunk/; revision=779
1999-10-07Fixed the infinite-loop problem in the DNS dissector, at least forGilbert Ramirez1-7/+25
the random packets I generated. I'm not convinced that all the problems are gone. We now: 1. Check that the bytes are indded in the frame before accessing them in dissect_dns_query() and dissect_dns_answer(). If not, we return 0, which means "0-byte increment". 2. Check the return value of the two functions above in dissect_query_records() and dissect_answer_records(), which have loops that call those two functions above. If a 0-byte increment is found, the loop is broken to avoid an infinite loop. svn path=/trunk/; revision=778
1999-09-21Add code to dissect MX and LOC records ("sparc.com" has both).Guy Harris1-1/+107
svn path=/trunk/; revision=694
1999-07-29Made the protocol (but not the fields) use the new proto_tree routine,Gilbert Ramirez1-2/+15
allowing users to filter on the existence of these protocols. I also added packet-clip.c to the Nmake makefile. svn path=/trunk/; revision=402
1999-07-07Created a new protocol tree implementation and a new display filterGilbert Ramirez1-56/+50
mechanism that is built into ethereal. Wiretap is now used to read all file formats. Libpcap is used only for capturing. svn path=/trunk/; revision=342
1999-05-27Correctly handle the case of the root showing up as a name in a DNSGuy Harris1-104/+136
request or reply. (Redid "get_dns_name()" along the lines of the code in the BSD resolver.) Add code to dissect SOA RRs. svn path=/trunk/; revision=297
1999-03-23Removed all references to gtk objects from packet*.[ch] files. They nowGilbert Ramirez1-75/+72
reference the protocol tree with struct proto_tree and struct proto_item objects. That way, the packet decoding source code file can be used with non-gtk packet decoders, like a curses-based ethereal, e.g. I also re-arranged some of the information in packet.h to more appropriate places (like other packet-*.[ch] files). svn path=/trunk/; revision=223
1999-03-22Add #defines for more T_ types.Guy Harris1-15/+187
In the detailed expansion of an RR, give a more detailed description of the RR type, as per Peter Hawkins' suggestion, but leave the record type in the summary line for the RR, along the lines of John McDermott's suggestion. Decode PTR and CNAME RRs. svn path=/trunk/; revision=222
1999-01-28Added guy's time and DHCP patch.Gilbert Ramirez1-2/+3
svn path=/trunk/; revision=177
1999-01-05Clean up what's displayed for unknown opcodes and unknown rcodes.Guy Harris1-3/+3
svn path=/trunk/; revision=160
1999-01-04Decode the word containing the opcode, flags, reply code, etc. in DNSGuy Harris1-32/+114
and NBNS requests. Put the opcode in the COL_INFO field for DNS requests (it was already there for NBNS requests). Don't assume a DNS or NBNS request is neatly aligned on a 2-byte boundary (it might not be if, for example, the packet is an FDDI packet). svn path=/trunk/; revision=153
1998-12-20Back out change that Hannes Boehm said he didn't intend to commit,Guy Harris1-2/+2
replacing "memset(..., 0, ...)" with "bzero(..., ...)" - he asked me to remove the change. svn path=/trunk/; revision=130
1998-12-19Added "Cisco Discovery Protocol" Hookshannes1-2/+2
Added Ethernet Loopback Protocol Type to ethertype.c svn path=/trunk/; revision=129
1998-12-04When dissecting DNS or NBNS queries or replies, add the item to the treeGuy Harris1-10/+11
for the queries or replies first, then create and add the subtree and populate it, and, when that's done, set the length of the item appropriately; if you add the subtree later, the subtree's top-level node appears to have level 0, rather than 1 greater than the tree of which it's a subtree, which causes those trees not to print correctly. svn path=/trunk/; revision=122
1998-11-17* Added column formatting functionality.Gerald Combs1-5/+5
* Added check_col(), add_col_str() and add_col_fmt() to replace references to ft->win_info. * Added column prefs handling code. svn path=/trunk/; revision=97
1998-11-12A lengthy patch to add the wiretap library. Wiretap is not used by defaultGilbert Ramirez1-2/+1
because it is still in its infancy, but it can be compiled in optionally. The library exists in its own subdirectory ethereal/wiretap. This patch also edits all the packet-*.c files to remove the #include <pcap.h> line which is unnecessary in these files. In the ethereal code, file.c is the most heavily modified with #ifdef WITH_WIRETAP lines for the optional library. svn path=/trunk/; revision=82
1998-10-15Show queries as a summary line (as was the case before my DNS checkins)Guy Harris1-6/+13
which can be expanded into a detailed name/type/class description. svn path=/trunk/; revision=58
1998-10-14Use "ip_to_str()" and "ether_to_str()" to extract IP and MAC addressesGuy Harris1-5/+5
from a packet and turn them into character strings in dotted-quad or colonized-sextet form. svn path=/trunk/; revision=57
1998-10-14Tag NetBIOS Name Service-over-UDP packets as "NBNS (UDP)".Guy Harris1-69/+121
Give a detailed display of the innards of NBNS-over-UDP packets. Export some stuff from the DNS decoder for the use of the NBNS decoder (NBNS is DNS-like). Give a more detailed display of the innards of DNS packets as well. Fix a couple of minor NBNS bugs. svn path=/trunk/; revision=55
1998-09-27Merged in a _huge_ patch from Guy Harris. It adds a time stap column,Gerald Combs1-5/+7
generalizes the column printing code, adds a "frame" tree item to the tree view, and fixes a bunch of miscellaneous coding bugs. svn path=/trunk/; revision=31
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-26 08:57:37 +0000