|Age||Commit message (Collapse)||Author||Files||Lines|
Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.
Adjust #include lines in files that include packet-*.h
svn path=/trunk/; revision=11410
they have LF at the end of the line on UN*X and CR/LF on Windows;
hopefully this means that if a CR/LF version is checked in on Windows,
the CRs will be stripped so that they show up only when checked out on
Windows, not on UN*X.
svn path=/trunk/; revision=11400
generating strings to put into the printable representation of protocol
tree items into an "isprint.h" header, and include it in some additional
Add bounds checking to one place in the DICOM dissector.
svn path=/trunk/; revision=11356
appear to have 3 extra bytes of stuff before the column name.
svn path=/trunk/; revision=10119
svn path=/trunk/; revision=10082
label each column of a results token;
handle types 35, 38, and 104.
svn path=/trunk/; revision=9992
add dissection of TDS7 results token and login_ack token;
fix a small bug in the login packet dissection;
add partial dissection of a query packet.
svn path=/trunk/; revision=9952
Error tokens (at least in one capture) appear to have a server name in
them; handle that as well. (They also appear to have 3 more bytes of
stuff in them.)
svn path=/trunk/; revision=9551
add parsing of message token (Unicode and regular);
add parsing of error token (Unicode only - do not have a non Unicode
add parsing of done token (only minimal actually);
add parsing of Collation Information structure in Environment
svn path=/trunk/; revision=9550
is "last buffer".
svn path=/trunk/; revision=9503
Note that we've seen weird sequence numbers for login packets.
svn path=/trunk/; revision=9452
being complete and for fragmentation being trivial (i.e., the packet in
question is both the first and last fragment). Have its callers *not*
do that check - this lets "process_reassembled_data()" put in the
"Reassembled in" item for fragments other than the last fragment.
Add a "Reassembled in" field to TDS.
svn path=/trunk/; revision=8295
svn path=/trunk/; revision=8293
and it means we only dissect the reassembled data for the last frame (so
code running through the packet list, and humans clicking on frames, see
only one instance of the reassembled data, not multiple instances that
might look like retransmissions).
svn path=/trunk/; revision=8292
dissection for several fields in that packet.
svn path=/trunk/; revision=8288
a procedure name.
svn path=/trunk/; revision=8214
Info column, to distinguish it from the message with the last buffer in
svn path=/trunk/; revision=8213
suspect refers to stored SQL procedures on the server, not to RPCs in
the traditional sense), and the beginnings of a routine to dissect those
packets (at least as seen in one capture).
Don't use "get_unicode_or_ascii_string()", as it really expects to be
used inside an SMB dissector, and wants arguments like the "bc"
argument. Just use "tvb_fake_unicode()" and "tvb_get_string()",
If we're doing reassembly, and the PDU is split across segment
boundaries, return after setting the desegmentation offset and length,
don't just drive on and dissect the partial PDU.
svn path=/trunk/; revision=8210
null) to the "fragment_items" structure, and don't pass that value into
"process_reassembled_data()", just have it use the value in the
"fragment_items" structure passed to it.
Make "process_reassembled_data()" capable of handling reassembly done by
"fragment_add_seq_check()", and use it in the ATP and 802.11 dissectors;
give them "reassembled_in" fields. Make "process_reassembled_data()"
handle only the case of a completed reassembly (fd_head != NULL) so that
we can use it in those dissectors without gunking the code up too much.
svn path=/trunk/; revision=7513
attempt reassembly of a higher-level packet that includes the
lower-level packet, use "tvb_bytes_exist()" to check whether all the
data that's to be included in the reassembly is available, rather than
by checking whether the packet is short.
Add some checks of that sort that were missing.
Use the reported length of the packet when doing reassembly.
Make the "iphdrlen" field of a "packet_info" structure be the length of
the IP header in bytes, not in 4-byte words.
svn path=/trunk/; revision=7274
list of packets corresponding to a reassembled pdu
svn path=/trunk/; revision=6807
svn path=/trunk/; revision=6752
session; treat all packet type values >= 1 and <= 18 as valid packet
Do standard TCP desegmentation of Netlib buffers, and do reassembly of
TDS messages fragmented over multiple Netlib buffers, rather than doing
the "remember what was in the last TCP segment" stuff; I've seen nothing
to indicate that a TDS message would continue past the last byte of a
"last buffer in request or response" Netlib buffer, and the "remember
what was in the last TCP segment" stuff was complicated and buggy,
perhaps irreparably so ("buggy" as in "crashes").
Make the top-level protocol item for a TDS message be an item for
"proto_tds", and put both the Netlib header and TDS stuff under that
item - that's what Microsoft Network Monitor does.
Get rid of the unused Netlib heuristic subdissector list.
Don't make a new data source for NTLMSSP data in a TDS message - the
data is just a slice of the message, it's not transformed from ASCII hex
to binary, or reassembled, or anything such as that.
Tokens are tokens, not PDUs.
Make the heuristics a bit stronger, to reject packets that are clearly
not TDS packets. Once the heuristics match, make a non-heuristic
dissector the dissector for the conversation.
Quit dissecting the TCP segment (or reassembled data) if we have a
Netlib buffer with a length < 8, as it's not large enough to even have a
svn path=/trunk/; revision=6737
svn path=/trunk/; revision=6674
and the way the packets seem to work (the description of TDS "PDUs"
actually appears to be a description of items in a TDS server reply PDU,
and I rather strongly suspect that you do *not* have multiple TDS PDUs
in a NETLIB packet), as well as to note that Microsoft Network Monitor
2.x appears to dissect some additional stuff.
Note that if I'm correct we can do desegmentation of NETLIB packets and
reassembly of TDS PDUs rather than the current somewhat clumsy handling
of packets split across segment boundaries.
Put the hf_netlib_xxx variables in the order in which they appear in the
NETLIB header, give hf_netlib_type the "packet_type_names" value_string
table as its value_string table, and actually use it when putting the
NETLIB type field into the protocol tree.
Clear out "nl_data" at the beginning of "dissect_netlib()", as there are
code paths where it does not get set. (That's a bit of a hack to try to
clean up a crashing bug - but I can't reproduce the crash on my home
FreeBSD PC, so I don't know whether it fixed the problem or not. If I'm
correct about the way the packets seem to work, the problem can probably
be fixed quite cleanly by tossing out the current split-packet handling
in favor of the reassembly described above.)
svn path=/trunk/; revision=6669
unsigned, and set their size to match the protocol data assigned to
them. Make sure the number of columns read doesn't exceed MAX_COLUMNS.
Explicitly check for integer values > 0. Switch from using memcpy with
tvb_get_ptr to tvb_memcpy. Make indentation consistent.
Add TDS support to randpkt. Most of the generated packets won't pass
the heuristic checks, but enough should make it through to adequately
test the dissector.
svn path=/trunk/; revision=6653
svn path=/trunk/; revision=6351
winapi_cleanup tool written by Patrik Stridvall for the wine
svn path=/trunk/; revision=6117
and where the PDU header has a length field that is the length of the
entire PDU, including the header, thou shalt not try to loop doing that
if thou findest a packet with a length of zero, lest thou spin in an
svn path=/trunk/; revision=6031
- Inserted packet-tds.h This is personal taste because of the many
files in the toplevel directory. Whoever works on this next is
free of course to separate it back out again.
- Removed unused includes sys/types.h, snprintf.h, netinet/in.h
- #if-0 unused function
- Removed duplicate define
- Declared all unused parameters as such
- Changed a // comment into /* */
- ifdef-DEBUG a printf statement
svn path=/trunk/; revision=6025