aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2005-11-27Fail if *any* of the fields in the per-packet header of the first recordGuy Harris1-1/+2
aren't sane, rather than requiring them *all* to have invalid values. svn path=/trunk/; revision=16610
2005-11-25From Martin Warnes:Anders Broman6-1/+805
Add Support for reading of IBM iSeries (AS/400) Comms traces svn path=/trunk/; revision=16588
2005-11-12minor mkdir bugfix from Gisle VanemUlf Lamping1-2/+3
svn path=/trunk/; revision=16492
2005-11-10Include <unistd.h> if available, to get "close()" declared.Guy Harris1-14/+20
Update the big comment to reflect current reality. svn path=/trunk/; revision=16453
2005-11-07The problem wasn't that <sys/stat.h> wasn't being included, the problemGuy Harris1-4/+0
was that file_util.h wasn't in the distribution tarball, so it couldn't be included - it handles including <sys/stat.h>. svn path=/trunk/; revision=16423
2005-11-07add file_util.h so distcheck might workUlf Lamping1-0/+1
svn path=/trunk/; revision=16422
2005-11-07You need <sys/stat.h>, if present, to use fstat().Guy Harris1-0/+4
svn path=/trunk/; revision=16416
2005-11-07The standard <dirent.h> routines to rewind and close a directory areGuy Harris1-13/+13
rewinddir() and closedir(). Clean up indentation. svn path=/trunk/; revision=16415
2005-11-07If we're using libz, make file_open() construct the open() flagGuy Harris3-11/+40
argument, rather than requiring the caller to get the open() flag and the fopen() flag in sync. That also means that if we're *not* using libz, it can just be a wrapper around eth_fopen(). We need to include <fcntl.h>, at least on UN*X, to get open() declared and the O_ flags defined. svn path=/trunk/; revision=16409
2005-11-07as mkstemp makes trouble and is only used once in util.c, move definition ↵Ulf Lamping1-3/+0
from file_util.h to util.c for now this hopefully fixes the mkstemp problem svn path=/trunk/; revision=16406
2005-11-06Get rid of CRs and set svn:eol-style to native, so that Windows machinesGuy Harris1-127/+127
get the CRs and UN*X machines don't. Also set svn:keywords to Id to expand RCS IDs. svn path=/trunk/; revision=16405
2005-11-06Obviously, <glib/gstdio.h> is available since GLib version 2.6 only ...Ulf Lamping1-1/+1
svn path=/trunk/; revision=16404
2005-11-06replace *a lot* of file related calls by their GLib counterparts. This is ↵Ulf Lamping8-38/+163
necessary for the switch to GTK 2.6 (at least on WIN32). to do this, I've added file_util.h to wiretap (would file_compat.h be a better name?), and provide compat_macros like eth_open() instead of open(). While at it, move other file related things there, like #include <io.h>, definition of O_BINARY and alike, so it's all in one place. deleted related things from config.h.win32 As of these massive changes, I'm almost certain that this will break the Unix build. I'll keep an eye on the buildbot so hopefully everything is working again soon. svn path=/trunk/; revision=16403
2005-10-26From Mark C Brown, Anders Broman1-1/+1
Small patch correcting nettl.uid to unsigned and adding pduin/pduout as nettl.kind values... svn path=/trunk/; revision=16320
2005-10-24forgot this from the last commitLuis Ontanon1-0/+1
svn path=/trunk/; revision=16297
2005-10-24- packet records with AAL5 Pdus or AAL2 Sdus contain VP/VC and CID info in ↵Luis Ontanon1-109/+201
the packet record, use that instead of the one in the intreface description record. - Fix Timestamps that got broken with nanoseconds. - Add some more disabled code for debugging. svn path=/trunk/; revision=16294
2005-10-22Update URL for Sniffer manual, and expand a comment a bit.Guy Harris1-3/+4
svn path=/trunk/; revision=16285
2005-10-22Add #defines for the DOS Sniffer network types and for various frameGuy Harris2-23/+127
status field bits". Check for "Internetwork analyzer" captures by checking the Sniffer network type, and save that type rather than just an "ATM or not" flag in the private data. svn path=/trunk/; revision=16283
2005-10-18"aalt5_len" in the ATM pseudo-header is not guaranteed to be set to aGuy Harris1-4/+4
non-zero value - it's only set from file formats that provide it in a per-packet header, and only the old DOS Sniffer did so, so it's zero for all other capture types. Instead, check the actual packet data length. Also check it against 16; 14 bytes isn't large enough for a LANE Ethernet frame. svn path=/trunk/; revision=16261
2005-10-13make sure tham when more than one stack file is used each channel uses the ↵Luis Ontanon1-22/+184
right stack file. svn path=/trunk/; revision=16218
2005-10-11From Ignacio GoyretAnders Broman1-2/+2
correct a bug in parsing Lucent/Ascend PPP dumps. Basically, blobs with "PPP-OUT" should be labelled "PPP transmit" while blobs with "PPP-IN" should be labelled "PPP receive". The current code labels them the other way around. packet-ppp.c - Properly decode option to enable ECRTP (it wasn't decoded). - Use the ipv6 knob to control ipv6 decoding (previously, it was using the ipv4 knob). svn path=/trunk/; revision=16194
2005-10-06From Rene Pilz,Anders Broman1-0/+15
In the bssgp an IE was decoded as mobile identity and should be decoded as (p)tmsi only. The patch is attached to this email. It also consists the new atm patch which was send yesterday. svn path=/trunk/; revision=16146
2005-10-04A heuristic that only treats packets that appear to be LANE-encapsulatedGuy Harris1-21/+7
Ethernet packets with a length field as LANE packets, and doesn't do so for packets that appear to be LANE-encapsulated Ethernet packets with a type field, is too weak. Back out that part of the heuristics added in the previous checkin. svn path=/trunk/; revision=16111
2005-10-04From Rene Piltz:Anders Broman1-1/+21
Due to the fact that 3G Signaling appears at an undefined VPI/VCI I added a heuristics (very simple) which should take care of this fact. svn path=/trunk/; revision=16108
2005-09-20From Hannes Gredler:Anders Broman3-1/+26
patch to support 4 additional juniper DLTs. all those are wrappers for exisiting media types augmented with meta-information which gets also displayed using this patch; svn path=/trunk/; revision=15908
2005-09-14added compression support for capture file output. The Save/As dialog now ↵Ulf Lamping5-105/+232
has a checkbox "Compress with gzip" currently limited to Ethereal and all the variants of libpcap filetypes only. We might want to add output compression support to the other tools as well (tethereal, mergecap, ...). We might also want to add support for the other filetypes, but this is only possible if the filetype functions doesn't use special output operations like fseek. One bug is still left: if the input and output filetypes while saving are the same, Ethereal currently optimizes this by simply copy the binary file instead of using wiretap (so it will be faster but it will ignore the compress setting). Don't know a good workaround for this, as I don't know a way to find out if the input file is currently compressed or not. One idea might be to use a heuristic on the filesize (compared to the packet size summmary). Another workaround I see is to remove this optimization, which is of course not the way I like to do it ... svn path=/trunk/; revision=15804
2005-09-09From Bill Meier:Guy Harris2-24/+54
define "timezone" as "gint16", as it can be positive (west of UTC) or negative (east of UTC); update comments to refer to the new names for structure members; say the precision of the time stamps is 1 nanosecond only if the ticks per second is > 10 million; fix the handling of files truncated exactly on a frame boundary. svn path=/trunk/; revision=15739
2005-09-08Fix more problems found by Steve Grubb, along with other changes:Gerald Combs1-0/+1
Camel: Fix an off-by-one error. Don't alloc and free where it's not needed. Remove an unused variable. PPP and K12: Fix memory leaks. svn path=/trunk/; revision=15725
2005-08-30Add support for slightly modified libpcap file format with nanosecond ↵Ulf Lamping5-39/+92
resolution (currently supported by Ethereal only). Support for both read and write was added. The file format stays the same as the common libpcap format, only the lower part of the timestamp field uses nanoseconds instead of microseconds. This file format uses the libpcap magic number 0xa1b23c4d. svn path=/trunk/; revision=15623
2005-08-29Get rid of the old file header definition.Guy Harris1-31/+17
Set the time stamp resolution based on whether the number of ticks per second is > 1 million or not. svn path=/trunk/; revision=15606
2005-08-28From Bill Meier:Guy Harris2-34/+92
1. Use the new (good work!) 'nanosec' precision only for gig pods; 2. Rework 'struct netxray_hdr' to make it (somewhat) easier to maintain and revise: a. Declare known hdr fields such as 'captype' instead of using offsets in 'xxx placeholder' fields. d. Define 'unknown' hdr fields using placeholder names based upon hex-offset in the netxray header record. (This isn't perfect, but I hope it will make things more manageable). 3. Update hdr field info (based upon examination of various capture files): a. Define a hdr field which appears to be 'time-zone' [offset in hours from UTC] for the machine doing the capture. (Maybe this field can eventually be used for Ethereal to display the (local) time as it was at the time of the capture). b. Describe certain hdr fields as being "file offsets" (altho the exact use is still unclear). Update some comments. svn path=/trunk/; revision=15603
2005-08-28Ethereal requires 64-bit integrer support; do the time stampGuy Harris1-12/+10
calculations with integers, which avoids some floating-point inaccuracy. svn path=/trunk/; revision=15602
2005-08-28Get rid of a no-longer-true comment.Guy Harris1-4/+0
svn path=/trunk/; revision=15598
2005-08-26Fix indentation, and fix a comment.Guy Harris1-2/+2
svn path=/trunk/; revision=15545
2005-08-26Ethereal now requires 64-bit integer support, so get rid of the tests ofGuy Harris4-47/+13
G_HAVE_GINT64. Get rid of the floating-point stuff in the Etherpeek Classic file reading code, just use 64-bit integers. Fix up the calculation of the nanoseconds portion of the time stamp. svn path=/trunk/; revision=15544
2005-08-25timestamp display precision:Ulf Lamping28-5/+44
- automatic adjustment depending on file format - manual adjustment through menu items save the setting in the recent file svn path=/trunk/; revision=15534
2005-08-24EVERYTHING IN THE BUILDBOT IS GOING TO BE RED!!! Sorry! Ulf Lamping31-117/+145
I've done more than a day to change the timestamp resolution from microseconds to nanoseconds. As I really don't want to loose those changes, I'm going to check in the changes I've done so far. Hopefully someone else will give me a helping hand with the things left ... What's done: I've changed the timestamp resolution from usec to nsec in almost any place in the sources. I've changed parts of the implementation in nstime.s/.h and a lot of places elsewhere. As I don't understand the editcap source (well, I'm maybe just too tired right now), hopefully someone else might be able to fix this soon. Doing all those changes, we get native nanosecond timestamp resolution in Ethereal. After fixing all the remaining issues, I'll take a look how to display this in a convenient way... As I've also changed the wiretap timestamp resolution from usec to nsec we might want to change the wiretap version number... svn path=/trunk/; revision=15520
2005-08-22Two fixes to tektronix k12 import:Luis Ontanon1-2/+7
- it appears that there are more packet record types other than 0x00010020. accept anything matching 0x00010020/28 as a packet record. - make the stack filename lowercase before comparing it so that capitalization is not an issue. svn path=/trunk/; revision=15513
2005-08-20"ascend-grammar.h" is generated by Bison with a copy of the definitionGuy Harris1-2/+0
of the YYSTYPE structure in "ascend-grammar.c"; the intent is that other files include "ascend-grammar.h" if they need that structure, but that "ascend-grammar.c" not itself include "ascend-grammar.h". If it *does* include it, the compiler complains about YYSTYPE being redefined (even though the two structures are identical). svn path=/trunk/; revision=15478
2005-08-20- Include the .h files in their .c files.Jörg Mayer2-0/+4
- Remove epan/dissectors/packet-sna.h, it isn't used anywhere. svn path=/trunk/; revision=15475
2005-08-20Add -Wmissing-declarations -Wwrite-strings to extra-gcc-flagsJörg Mayer1-1/+1
svn path=/trunk/; revision=15453
2005-08-19Add APIs to Wiretap to return the file of the size as supplied by the OSGuy Harris4-6/+58
(so if the file's gzipped, it's *NOT* the size of the file after uncompressing), and an approximation of the amount of that data read sequentially so far. Use those for various progress bars and the like. Make the fstat() in the Ascend trace reader directly use wth->fd, as it's inside Wiretap; that gets rid of the last caller of wtap_fd() (as we're no longer directly using fstat() or lseek() in Ethereal), so get rid of wtap_fd(). svn path=/trunk/; revision=15437
2005-08-18Try yet another scheme for handling time stamps; realtick isn't alwaysGuy Harris1-44/+146
correct. svn path=/trunk/; revision=15404
2005-08-12From Hannes GredlerAnders Broman3-2/+7
- add support for Multi-Link Frame-Relay (FRF.15) captures taken on Juniper ML-, LS-, AS- PICs. - rework of the common juniper header dissector: test the extension flag (0x80) which indicates that there are meta-information like interface-index, interface-name etc. present - minor bugfix (LSQ L3-proto masks, direction masks were broken) svn path=/trunk/; revision=15316
2005-08-03Don't assume ints are 32 bits. Fixes a recent Buildbot error.Gerald Combs2-15/+16
svn path=/trunk/; revision=15200
2005-08-02Include the .h files into the .c files. That way weJörg Mayer3-0/+3
a) get rid of warnings of type "no previous declaration" and b) make sure that declaration and implementation are in sync. svn path=/trunk/; revision=15168
2005-07-22Fix some warnings (and one of my previous 'fixes')Jörg Mayer3-6/+6
svn path=/trunk/; revision=14997
2005-07-22From Hannes Gredler:Anders Broman3-3/+7
support for support for DLT_JUNIPER_MLPPP svn path=/trunk/; revision=14994
2005-07-22More 'char*' -> 'const char*' warning fixesJörg Mayer2-7/+7
svn path=/trunk/; revision=14986
2005-07-10After doing "make maintainer-clean", "svn status --no-ignore | grep ^I"Jörg Mayer1-1/+6
returned quite a list of files. Add them to MAINTAINERCLEANFILES. Whitespace changes (replace multiple spaces by TABs, in a few cases this needed to be done at the beginning of Makefile lines. svn path=/trunk/; revision=14891
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-22 10:57:18 +0000