Age | Commit message (Collapse) | Author | Files | Lines |
|
Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.
Adjust #include lines in files that include packet-*.h
files.
svn path=/trunk/; revision=11410
|
|
they have LF at the end of the line on UN*X and CR/LF on Windows;
hopefully this means that if a CR/LF version is checked in on Windows,
the CRs will be stripped so that they show up only when checked out on
Windows, not on UN*X.
svn path=/trunk/; revision=11400
|
|
svn path=/trunk/; revision=11055
|
|
header is 2 bits of sampling mode and 14 bits of sample rate, not 16
bits of sample rate.
svn path=/trunk/; revision=11054
|
|
template, rather than allocating a fixed table of 64 entries (and
possibly overflowing that table).
Clear out the hash table of template entries, freeing all the allocated
arrays, when a new capture is opened.
svn path=/trunk/; revision=10356
|
|
According to the V9 documentation at the first of those URLs, the length
field in a data flowset includes the lengths of the flowset ID and
length fields, so subtract that before calling "dissect_v9_data()" - and
don't call "dissect_v9_data()" if the length isn't positive after that's
done.
Don't bother checking whether there's data in the tvbuff in the loop
that dissects V9 data flowsets - if there isn't, we *want* an exception
to be thrown, as that's a short or malformed frame. Do, however, make
sure we have at least as much data left in the flowset as the template
claims should be there - otherwise, we have padding, not a record.
Display that padding as such.
Make the length argument to "dissect_v9_data()" unsigned, so that we
don't get compiler warnings when comparing it with the unsigned "length"
field of a template.
If we don't find the template for a data flowset, just show the data as
such.
svn path=/trunk/; revision=7306
|
|
1. Make NetFlow UDP port user configurable
2. Cache v9 templates
3. Decode v9 data
svn path=/trunk/; revision=7270
|
|
svn path=/trunk/; revision=7127
|
|
svn path=/trunk/; revision=6381
|
|
Cast the argument to "ip_to_str()" to eliminate a compiler warning.
svn path=/trunk/; revision=6376
|
|
Remove packet-netflow.h, since it is no longer needed.
svn path=/trunk/; revision=6314
|
|
o Added support for v1 and v7
o Use proto_tree_add_item() instead of proto_tree_add_text() to
enable filtering. Thanks sahlberg AT optushome.com.au for
pointing that out.
svn path=/trunk/; revision=6236
|
|
svn path=/trunk/; revision=6206
|
|
svn path=/trunk/; revision=6200
|
|
svn path=/trunk/; revision=6178
|