| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
According to the V9 documentation at the first of those URLs, the length
field in a data flowset includes the lengths of the flowset ID and
length fields, so subtract that before calling "dissect_v9_data()" - and
don't call "dissect_v9_data()" if the length isn't positive after that's
done.
Don't bother checking whether there's data in the tvbuff in the loop
that dissects V9 data flowsets - if there isn't, we *want* an exception
to be thrown, as that's a short or malformed frame. Do, however, make
sure we have at least as much data left in the flowset as the template
claims should be there - otherwise, we have padding, not a record.
Display that padding as such.
Make the length argument to "dissect_v9_data()" unsigned, so that we
don't get compiler warnings when comparing it with the unsigned "length"
field of a template.
If we don't find the template for a data flowset, just show the data as
such.
svn path=/trunk/; revision=7306
|
|
1. Make NetFlow UDP port user configurable
2. Cache v9 templates
3. Decode v9 data
svn path=/trunk/; revision=7270
|
|
svn path=/trunk/; revision=7127
|
|
svn path=/trunk/; revision=6381
|
|
Cast the argument to "ip_to_str()" to eliminate a compiler warning.
svn path=/trunk/; revision=6376
|
|
Remove packet-netflow.h, since it is no longer needed.
svn path=/trunk/; revision=6314
|
|
o Added support for v1 and v7
o Use proto_tree_add_item() instead of proto_tree_add_text() to
enable filtering. Thanks sahlberg AT optushome.com.au for
pointing that out.
svn path=/trunk/; revision=6236
|
|
svn path=/trunk/; revision=6206
|
|
svn path=/trunk/; revision=6200
|
|
svn path=/trunk/; revision=6178
|
