aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap/README
AgeCommit message (Collapse)AuthorFilesLines
2006-06-06Ethereal -> WiresharkGerald Combs1-1/+1
svn path=/trunk/; revision=18369
2006-05-31Rename the main executable to "wireshark", along with more conversions:Gerald Combs1-1/+1
ethereal.com -> wireshark.org mailing lists and addresses ETHEREAL -> WIRESHARK Man pages Automake/Autoconf names svn path=/trunk/; revision=18271
2006-05-22ethereal->wireshark updatesRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=18206
2006-04-14From Martin Mathieson:Anders Broman1-0/+11
patch and new files provide support for Catapult DCT2000 .out files to wiretap and ethereal. This wiretap support (catapult_dct2000.c+h) appends a short header to each packet giving some context, and a corresponding ethereal dissector (packet-catapult-dct2000.c) parses this before passing the real payload onto an existing ethereal dissector (for ethernet, ip, lapd, ppp, frame-relay,...). For now, there is only support for saving dct2000 files in their own format, although I may add support for converting between dct2000 and libpcap later. updated version of these files and patch, now with support for MTP2. Olivier's trace used the ANSI variant - the MTP2 and MTP3 decode fine with the right preferences set (although the ISUP dissector reports a reserved/retired message type). Witha a change to NOT to declare gboolean catapult_dct2000_board_ports_only; as extern as MSVC choked on it. svn path=/trunk/; revision=17862
2004-07-18Set the svn:eol-style property on all text files to "native", so thatGuy Harris1-1/+1
they have LF at the end of the line on UN*X and CR/LF on Windows; hopefully this means that if a CR/LF version is checked in on Windows, the CRs will be stripped so that they show up only when checked out on Windows, not on UN*X. svn path=/trunk/; revision=11400
2002-05-22Updated NS_LS_DRIVER to work with both pre-HPUX11 and HPUX11.Ronnie Sahlberg1-1/+7
Added support for NS_LS_TCP, NS_LS_UDP, NS_LS_LOOPBACK, NS_LS_ICMP and unnamed subsystem 0xb9 (which contains ethernet headers in my captures frames). However, NS_LS_ICMP will not be dissected since we dont have a RAW_ICMP wiretap encapsulation type. Updated decoding of usec timestamp for HPUX11 since HPUX11 has 0.1us resolution for the scalar in this field. YMMV but all these ones works for me from nettl traces from HPUX11. svn path=/trunk/; revision=5523
2001-11-13Hopefully the last time I have to change my e-mail address.Gilbert Ramirez1-2/+2
svn path=/trunk/; revision=4199
2001-10-19DBS Etherwatch wiretap module, from Marc Milgram.Guy Harris1-1/+6
svn path=/trunk/; revision=4042
2001-10-18VMS TCPIPtrace wiretap module, from Marc Milgram.Guy Harris1-1/+13
Update the lists of known capture file formats in the Tethereal, editcap, and mergecap man pages to match the current list (as found in the Ethereal man page). svn path=/trunk/; revision=4039
2000-11-22Change Ethereal homepage URL from etheral.zing.org to www.ethereal.com.Gilbert Ramirez1-2/+2
svn path=/trunk/; revision=2696
2000-09-20Mention support for reading pppd log files.Gilbert Ramirez1-1/+6
svn path=/trunk/; revision=2452
2000-08-22More mention of csids support in wiretap.Gilbert Ramirez1-1/+4
svn path=/trunk/; revision=2335
2000-08-04Mention IDSN4BSD's i4btrace utility as a supported trace file format.Gilbert Ramirez1-1/+6
svn path=/trunk/; revision=2203
2000-06-08Document the fact that we can now read compressed Sniffer files.Gilbert Ramirez1-14/+16
svn path=/trunk/; revision=2047
2000-02-19Note that one can probably symbolically request that nettl log incomingGuy Harris1-1/+5
and outgoing PDUs, rather than specifying a numerical mask with pduin and pduout (0x30000000). svn path=/trunk/; revision=1649
2000-02-17Add support for raw IP nettl captures.Olivier Abad1-2/+12
Update the nettl section in wiretap/README, and give sample commands to make captures on HP-UX. svn path=/trunk/; revision=1642
1999-11-26Update documentation about iptrace version support.Gilbert Ramirez1-26/+24
svn path=/trunk/; revision=1118
1999-11-11Change my e-mail address to the forwarding address my *alma mater*Guy Harris1-2/+2
provides. "Every problem in computer science can be solved by adding a layer of indirection." svn path=/trunk/; revision=1008
1999-10-31Add a module to wiretap to be able to read trace files from Toshiba'sGilbert Ramirez1-2/+19
line of ISDN routers. Much like the ascend reader, this module reads an ASCII hex dump of trace data. Rearranged the order in which wiretap tries trace files, to keep the ASCII-readers (ascend and toshiba) at the end, and put the binary-readers (everything else) at the front of the list. If a telnet session of and ascend trace or toshiba trace were captured near the beginning of another trace, wiretap might think the trace was ascend or toshiba if it tried that module first. Fixed the way wtap_seek_read() selects functions to call. It was using the encap type instead of the file type. We got lucky because WTAP_ENCAP_ASCEND == WTAP_FILE_ASCEND svn path=/trunk/; revision=952
1999-08-20Note that we now have the ability to read Ethernet and X.25 capturesGuy Harris1-1/+6
from RADCOM WAN/LAN Analyzers. (BTW, the previous checkin also removed the comments about the hack wherein we pretended that ATM Sniffer captures were really Ethernet, Token-Ring, or RFC 1483 captures, given that said hack was itself removed.) svn path=/trunk/; revision=526
1999-08-20Remove the stuff about filters in Wiretap, as that capability wasGuy Harris1-21/+6
removed when a more powerful display filtering mechanism was added to Ethereal. svn path=/trunk/; revision=525
1999-03-28Jun-ichiro's IPv6 patch is merged in with ethereal and now uses the newGilbert Ramirez1-9/+5
proto*() functions. The configure script tries to use ipv6 name resolution if it knows the type of ipv6 stack the user has (this can be avoided with the --disable-ipv6 switch) Additionally, the configure script now deals with wiretap better. If the user doesn't want to compile wiretap, the wiretap is never visited. A few unnecessary #includes were removed from some wiretap files, and a CPP macro was moved from bpf.c to wtap.h. svn path=/trunk/; revision=229
1999-03-01It turns out that the first of the unknown fields in the NetXRay headerGuy Harris1-5/+4
appears to be the UNIX "time_t" when the capture started, so use that to figure out the time when a packet was captured. svn path=/trunk/; revision=204
1999-03-01Fix a typo, and note that we can read Token Ring captures from SnifferGuy Harris1-6/+6
Basic/Windows Sniffer Pro. svn path=/trunk/; revision=200
1999-03-01Added display filters to wiretap.Gilbert Ramirez1-6/+14
svn path=/trunk/; revision=198
1999-02-20Update to reflect support for NetXRay format.Guy Harris1-10/+19
svn path=/trunk/; revision=195
1999-01-30Correct and expand the discussion of ATM Sniffer captures.Guy Harris1-4/+17
svn path=/trunk/; revision=179
1999-01-27Added token-ring support to netmon.cGilbert Ramirez1-3/+4
svn path=/trunk/; revision=176
1999-01-21Added news about Guy's netmon addition.Gilbert Ramirez1-1/+6
svn path=/trunk/; revision=174
1999-01-02I made sure to note that wiretap only supports iptrace 2.0 files so far.Gilbert Ramirez1-6/+7
iptrace 1.0 is not supported yet. svn path=/trunk/; revision=146
1999-01-02Added the iptrace (AIX's packet-capture tool) file format to wiretap.Gilbert Ramirez1-9/+23
This necessitated a change in ethereal because iptrace supports multi-NIC packet capturing, including multi-datalink-type capturing. svn path=/trunk/; revision=145
1998-11-21The Sniffer-reading code now checks to make sure that it is tryingGilbert Ramirez1-3/+6
to read an uncompressed Sniffer file. svn path=/trunk/; revision=118
1998-11-15Add support to wiretap for reading Sun "snoop" capture files.Guy Harris1-11/+11
That requires that, in the packet-reading loop, we pass to the callback routine the offset in the file of a packet's data, because we can no longer compute that offset by subtracting the size of the captured packet data from the offset in the file after the data was read - "snoop" may stick padding in after the packet data to align packet headers on 4-byte boundaries. Doing that required that we arrange that we do that for "libpcap" capture files as well; the cleanest way to do that was to write our own code for reading "libpcap" capture files, rather than using the "libpcap" code to do it. Make "wtap_dispatch_cb()" and "pcap_dispatch_cb()" static to "file.c", as they're not used elsewhere. If we're using wiretap, don't define in "file.h" stuff used only when we're not using wiretap. Update the wiretap README to reflect Gilbert's and my recent changes. Clean up some memory leaks in "wiretap/lanalyzer.c" and "wiretap/ngsniffer.c", where the capture-file-format-specific data wasn't freed if the open failed. svn path=/trunk/; revision=91
1998-11-12I added the LANalzyer file format to wiretap. I cleaned up some code in theGilbert Ramirez1-0/+31
wiretap functions to be more generic and therefore allow an easier integration of more packet-capture file types. I also put in all the GPL copyrights in the wiretap code. svn path=/trunk/; revision=83
1998-11-12A lengthy patch to add the wiretap library. Wiretap is not used by defaultGilbert Ramirez1-0/+30
because it is still in its infancy, but it can be compiled in optionally. The library exists in its own subdirectory ethereal/wiretap. This patch also edits all the packet-*.c files to remove the #include <pcap.h> line which is unnecessary in these files. In the ethereal code, file.c is the most heavily modified with #ifdef WITH_WIRETAP lines for the optional library. svn path=/trunk/; revision=82