aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2004-06-30On at least some platforms, a #define of O_BINARY is needed even ifGuy Harris1-1/+6
<fcntl.h> is included, as <fcntl.h> doesn't define it. svn path=/trunk/; revision=11276
2004-06-29define of O_BINARY not needed, if fcntl.h is includedUlf Lamping1-6/+1
other #include related cleanups svn path=/trunk/; revision=11272
2004-06-16To return an EOF indication, return FALSE from the read routine *AND*Guy Harris1-1/+2
set "*err" to 0, rather than leaving what random value happened to be in "*err" there. svn path=/trunk/; revision=11158
2004-06-07Add an encapsulation type for BACnet MS/TP, and map the newly-assignedGuy Harris3-4/+10
libpcap DLT_ value for BACnet MS/TP to it. svn path=/trunk/; revision=11126
2004-06-01It really helps when you change the default from gtk1 -> gtk2 in the topJörg Mayer1-2/+2
level configure.in to mirror that change in wiretap. Otherwise people who have both versions of glib/gtk installed may see crashes. svn path=/trunk/; revision=11049
2004-04-28From Joe Marcus Clarke: force the standard output to be in binary modeGuy Harris1-3/+6
on Windows. svn path=/trunk/; revision=10717
2004-04-14At last compiling on CygWin works again! Added the missing PCRE and GLIBOlivier Biot1-1/+9
libraries to libftypes. Provide caching of computed configure tests. svn path=/trunk/; revision=10600
2004-04-02From Mark C. Brown: add support for FDDI and Token Ring cards.Guy Harris2-13/+63
Set the file encapsulation the same way it's done for iptrace captures - leave it as "unknown" to start with, and, for each packet we see, set it to the packet's encapsulation type if the file encapsulation type is unknown and set it to "per-packet" if the file encapsulation type is "known" but isn't the type of that packet, so files that have all the same type of packet have that type as the file type and packets that *don't* have all the same type of packet have "per-packet". svn path=/trunk/; revision=10543
2004-04-02From Rolf Fiedler: fix a comment, and fix the code to get the packetGuy Harris1-3/+3
length. svn path=/trunk/; revision=10541
2004-03-30From Albert Chin: "config.h" should come before all other #includes.Guy Harris1-4/+5
svn path=/trunk/; revision=10528
2004-03-27Some aclocal warning fixes during autogen.shJörg Mayer1-4/+4
svn path=/trunk/; revision=10507
2004-03-27From Mark C. Brown: add support for iether (dual-port gigabit) cards inGuy Harris2-2/+4
nettl files. svn path=/trunk/; revision=10501
2004-03-24Fix the CLEANFILES target so both static and shared libraries are cleaned.Olivier Biot1-1/+2
svn path=/trunk/; revision=10475
2004-03-23Add support for DLT_APPLE_IP_OVER_IEEE_1394.Guy Harris3-6/+13
svn path=/trunk/; revision=10446
2004-03-23Clean up the code to check the file type.Guy Harris1-44/+12
svn path=/trunk/; revision=10445
2004-03-19In the read routine, set the 802.11 pseudo-header forGuy Harris1-1/+16
WTAP_ENCAP_PRISM_HEADER, WTAP_ENCAP_IEEE_802_11_WLAN_BSD, and WTAP_ENCAP_IEEE_802_11_WLAN_AVS. In the seek_read routine, set it for all 802.11 types. svn path=/trunk/; revision=10404
2004-03-17"esc_read()" is passed a FILE_T, not a FILE_T * - a FILE_T is a pointerGuy Harris1-3/+3
(a FILE * if zlib isn't used, a gzFile if zlib is used). Use "size_t" for the amount of data to read in "eyesdn_check_file_type()", to squelch signed vs. unsigned warnings. svn path=/trunk/; revision=10392
2004-03-13Make libethereal and libwiretap shared libs.Jörg Mayer1-6/+5
svn path=/trunk/; revision=10368
2004-03-11Add support for DLT_ value 99, as used by the Axent RaptorGuy Harris3-4/+16
firewall/Symantec Enterprise Firewall. Thanks, Axent/Symantec, for not asking us for a DLT_ value and not telling us about the link-layer type. svn path=/trunk/; revision=10361
2004-03-06From Jeff Morriss: delete "ascend-grammar.c" and "ascend-grammar.h" withGuy Harris1-1/+5
"make maintainer-clean", as they're generated files. svn path=/trunk/; revision=10336
2004-03-04Get rid of an out-of-date comment.Guy Harris1-12/+3
We only appear to need autoconf 2.52, not 2.53. svn path=/trunk/; revision=10293
2004-03-03Have "wtap_read()" set "wth->phdr.pkt_encap" to "wth->file_encap",Guy Harris18-37/+37
rather than requiring individual capture file type handlers to do it (unless they're doing per-packet encapsulation, in which case we check to make sure they didn't *leave* it as WTAP_ENCAP_PER_PACKET). svn path=/trunk/; revision=10290
2004-03-03Require autoconf 2.53 and automake 1.6Jörg Mayer1-2/+2
svn path=/trunk/; revision=10287
2004-03-03Set the packet encapsulation value to the file encapsulation.Guy Harris1-1/+2
svn path=/trunk/; revision=10285
2004-02-19A DLT_ value of 13, in a Nokia-format capture, appears to be an ATMGuy Harris1-51/+193
capture of some sort. svn path=/trunk/; revision=10109
2004-02-13Get rid of unused variables and #defines.Guy Harris1-7/+2
svn path=/trunk/; revision=10059
2004-02-12Use "guint8" for 8-bit binary data.Guy Harris1-36/+40
"file_getc()" returns either an 8-bit unsigned value, or -1 for error or EOF; store its return value into an "int", and check for -1 and return -2, in "esc_read()" (rather than checking "file_error()" at the end). Clean up some comments, routine names, and variable names - eyeSDN files are binary, not text. In "parse_eyesdn_packet_data()", handle the case of an EOF from "esc_read()". svn path=/trunk/; revision=10050
2004-02-12Note that 164 is reserved for Juniper chassis-internal meta-informationGuy Harris1-2/+7
(DLT_JUNIPER_MONITOR/LINKTYPE_JUNIPER_MONITOR). Fix a typo. svn path=/trunk/; revision=10046
2004-02-11Map WTAP_ENCAP_IEEE_802_11_WITH_RADIO to DLT_IEEE802_11, for now; weGuy Harris1-4/+29
could probably map it to one of the many different 802.11+radio headers, but we should probably just have *one* Wiretap encapsulation for 802.11, with a radiotap-style list of attributes attached to it. svn path=/trunk/; revision=10041
2004-02-11From Rolf Fiedler: support for reading EyeSDN USB S0 trace files.Guy Harris7-5/+394
svn path=/trunk/; revision=10038
2004-02-09Cast the arguments to <ctype.h> macros to "guchar", to squelchGuy Harris3-15/+16
"subscript has type `char'" warnings and to make the code work correctly if there are characters with the 8th bit set. svn path=/trunk/; revision=10010
2004-02-09Add extra {} to "avoid ambiguous `else'", to quote the GCC warning thatGuy Harris1-3/+3
this squelches. svn path=/trunk/; revision=10009
2004-02-08Move -pedantic back to extra-gcc-flags, as glib generates more warnings than ↵Jörg Mayer1-3/+3
our code svn path=/trunk/; revision=10008
2004-02-07Don't build as shared *and* static by defaultJörg Mayer1-1/+3
svn path=/trunk/; revision=10004
2004-02-07Ignore byproducts of shared lib compilationJörg Mayer1-0/+3
svn path=/trunk/; revision=10003
2004-02-06Whether frames in an AiroPeek V9 802.11 capture have 4 bytes of 0 or anGuy Harris2-19/+48
FCS at the end appears to depend on the network subtype value. svn path=/trunk/; revision=10001
2004-02-06A MediaSubType value of 1 also means 802.11. (Is that what indicatesGuy Harris1-2/+2
whether there's an FCS or not?) svn path=/trunk/; revision=9995
2004-02-06Make sure a packet has one and only one length field, one and only oneGuy Harris1-6/+44
timestamp lower field, and one and only one timestamp lower field. svn path=/trunk/; revision=9994
2004-02-06The time stamps in *Peek V9 files appear to be in nanoseconds from theGuy Harris1-12/+19
Windows FILETIME epoch, i.e. midnight, January 1, 1601. svn path=/trunk/; revision=9993
2004-02-06Ethernet frames appear to have 4 bytes of 0 at the end, at least in theGuy Harris1-5/+20
captures I've seen. svn path=/trunk/; revision=9991
2004-02-06V9 format appears to be used by some versions of EtherPeek, too.Guy Harris2-87/+220
The MediaType field seems to be 0 for the Ethernet captures; however, the MediaSubType field is different. The fields in the header are different - we can't use hard-coded offsets for the fields, we have to process them as a sequence of tag/value items. Rename some routines to use the same naming convention as the V9 open routine rather than the same convention as the V5/V6/V7 read and seek/read routines. svn path=/trunk/; revision=9990
2004-02-06Fix up a comment to note that this is also used for AiroPeek, and usedGuy Harris1-2/+9
only for versions 5, 6, and 7 of the file format. Add another comment explaining why this refers to "etherpeek" even though it's also used for AiroPeek and probably also TokenPeek. svn path=/trunk/; revision=9989
2004-02-06Sort the link-layer type values a little better.Guy Harris1-4/+2
svn path=/trunk/; revision=9987
2004-01-29The DLT_ value 127 is being used for the BSD radio header, and theGuy Harris3-50/+56
current CVS libpcap uses 163 for the AVS radio header (127 was never used for the AVS radio header). Redo the Wiretap encapsulation values for that (and shuffle them to put the 802.11 Wiretap values together). svn path=/trunk/; revision=9904
2004-01-28From Tomas Kukosa: reserve private WTAP_ENCAP values and map them toGuy Harris3-4/+86
reserved private DLT_ values. svn path=/trunk/; revision=9892
2004-01-27Supply a pseudo-header for all 802.11 packets; add an "fcs_len" field toGuy Harris5-49/+67
it, similar to the Ethernet pseudo-header's "fcs_len" field, and use it in the 802.11 dissector. svn path=/trunk/; revision=9884
2004-01-26Fix a compiler warning.Guy Harris1-3/+3
svn path=/trunk/; revision=9867
2004-01-25Don't muck with the Ethernet pseudo-header if we have an 802.11 capture.Guy Harris1-1/+9
svn path=/trunk/; revision=9857
2004-01-25Have the Wiretap open, read, and seek-and-read routines return, inGuy Harris54-409/+564
addition to an error code, an error info string, for WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with "g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed strings returned as the error info string, and change the callers of those routines to, for those errors, put the info string into the printed message or alert box for the error. Add messages for cases where those errors were returned without printing an additional message. Nobody uses the error code from "cf_read()" - "cf_read()" puts up the alert box itself for failures; get rid of the error code, so it just returns a success/failure indication. Rename "file_read_error_message()" to "cf_read_error_message()", as it handles read errors from Wiretap, and have it take an error info string as an argument. (That handles a lot of the work of putting the info string into the error message.) Make some variables in "ascend-grammar.y" static. Check the return value of "erf_read_header()" in "erf_seek_read()". Get rid of an unused #define in "i4btrace.c". svn path=/trunk/; revision=9852
2004-01-24Fix all fixable warningsJörg Mayer7-26/+27
Move addional warnings from extra-gcc-checks to normal compilation flags svn path=/trunk/; revision=9826