aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2006-05-21name changeRonnie Sahlberg4-8/+8
svn path=/trunk/; revision=18197
2006-05-19Squelch some compiler warnings (a time_t might be an int or a long).Guy Harris1-2/+2
svn path=/trunk/; revision=18188
2006-05-15GLib 1.2[.x] doesn't have g_sprintf(), it just has g_snprintf(); useGuy Harris2-2/+6
that. It also doesn't hae <glib/gprintf.h>, so use that only for GLib 2.0 and later. svn path=/trunk/; revision=18169
2006-05-15Fix some compiler warnings.Guy Harris3-5/+79
That requires that we define G_GINT64_MODIFIER ourselves if glib.h doesn't define it for us, as that's what should be used to print 64-bit integral values in any calls that use any of the GLib printf functions (directly or indirectly). svn path=/trunk/; revision=18154
2006-05-08Basic Encoding Rules (BER) encoded file reading. Not really a packet trace ↵Graeme Lunt6-4/+231
format but still useful for dissecting arbitrary BER/DER ASN.1. svn path=/trunk/; revision=18110
2006-04-24From Martin Mathieson:Anders Broman1-23/+46
This patch should hopefully remove any possible buffer overflows in parse_line() as reported by the current Coverity scan. I'm not sure that the error it currently reports is valid (I think its confused by supposing that a condition that is being tested can be true, whereas it can't...), but this patch fixes a number of potential problems remaining in the function. svn path=/trunk/; revision=17979
2006-04-23Fix CID: 150 Anders Broman1-1/+1
svn path=/trunk/; revision=17968
2006-04-19From Martin Mathieson:Anders Broman1-0/+17
Fix coverity bugs. svn path=/trunk/; revision=17909
2006-04-19The first item in the network load EIP appears to be the networkGuy Harris1-3/+3
utilization, in units of .1%. svn path=/trunk/; revision=17901
2006-04-17From Martin Mathieson:Anders Broman2-16/+20
These patches: - fix the bounds errors reported by coverity in bug 879 - fix a couple of other potential bounds errors (length checking 1st & 2nd lines in file) - reorder catapult_dct2000_phdr so that normal protocol pseudo-header info is at the start. This means that the stub dissector can avoid the nasty (overlapped) memcpy - a little whitespace fixing svn path=/trunk/; revision=17886
2006-04-16Get rid of the unused WTAP_ENCAP value - holes in the number space causeGuy Harris2-28/+25
ugly printouts for "editcap -T". svn path=/trunk/; revision=17873
2006-04-16Add some missing little-endianizing.Guy Harris1-5/+7
Get rid of some unnecessary casts. Multiply seconds by 10^9, not 10^6, to get nanoseconds. svn path=/trunk/; revision=17872
2006-04-16Add a loop to process TLVs in the file header.Guy Harris1-16/+52
Advertise nanosecond resolution. svn path=/trunk/; revision=17871
2006-04-16Move file format definitions to the header file.Guy Harris2-155/+216
Put the code to read the packet header and the packet data into routines (which also fixes some places where observer_seek_read() was using the sequential file handle rather than the random file handle), make the packet header reader skip over the TLVs, Do some additional sanity checking. Wiretap supports nanosecond resolution; provide nanosecond resolution time stamps. Rename some structure members to match their purpose (they're TLV counts, not flags). Remove the TLV header from the TLV structures (and eliminate TLV structures if we don't have the contents or they're just a string); if we process them, we'll probably end up reading the header and data separately. Add some information about some of the TLVs in expert information packets. svn path=/trunk/; revision=17870
2006-04-15Sake Blok wrote....Jaap Keuter1-1/+11
I have taken a look at the trace myself and calculated the TpS to be 20000000.0 for this particular trace. If I also discard the start_timestamp like it has been done for other versions of the netxray format, then I get the proper results. svn path=/trunk/; revision=17869
2006-04-15From Martin Mathieson:Anders Broman1-31/+54
Please find a patch to catapult_dct2000.c: - doesn't use g_hash_table_new_full(), which is missing from earlier versions of glib - fixed a couple of memory leaks - hopefully cast away a few warnings I saw on the fedora and solaris buildbot logs svn path=/trunk/; revision=17867
2006-04-14from Martin Mathieson: add catapult_dct2000.hUlf Lamping1-0/+1
svn path=/trunk/; revision=17866
2006-04-14SVN properties...Anders Broman2-30/+30
svn path=/trunk/; revision=17863
2006-04-14From Martin Mathieson:Anders Broman8-2/+1362
patch and new files provide support for Catapult DCT2000 .out files to wiretap and ethereal. This wiretap support (catapult_dct2000.c+h) appends a short header to each packet giving some context, and a corresponding ethereal dissector (packet-catapult-dct2000.c) parses this before passing the real payload onto an existing ethereal dissector (for ethernet, ip, lapd, ppp, frame-relay,...). For now, there is only support for saving dct2000 files in their own format, although I may add support for converting between dct2000 and libpcap later. updated version of these files and patch, now with support for MTP2. Olivier's trace used the ANSI variant - the MTP2 and MTP3 decode fine with the right preferences set (although the ISUP dissector reports a reserved/retired message type). Witha a change to NOT to declare gboolean catapult_dct2000_board_ports_only; as extern as MSVC choked on it. svn path=/trunk/; revision=17862
2006-04-14Skip non-data records. Fixes bug 767.Guy Harris2-18/+63
svn path=/trunk/; revision=17861
2006-03-30From Martin Mathieson:Anders Broman2-2/+4
wiretap/README.developer - the referenced default seek_read function doesn't exist now wiretap/wtap.c - a "hole" in encap_table was causing the wrong encap value for later types to be looked up (by name) mergecap.c - fix a couple of program name copy+paste errors from editcap.c svn path=/trunk/; revision=17765
2006-03-29The header will be there, just make sure the date is put in.Jaap Keuter1-1/+3
Coverity bug 148 svn path=/trunk/; revision=17756
2006-03-27From Martin Warnes:Anders Broman1-61/+14
> I've attached a fix that cleans up this code, actually since my last > update of this module the particular call in question was fairly > redundant so I just went ahead and removed it and updated the constant > that specifies the maximum possible line length instead. > > Thanks for bring this to my attention. svn path=/trunk/; revision=17737
2006-03-27Fix a possible NULL dereference (bug 827 / CID 145). Add an SVNGerald Combs1-54/+59
ID. Fix up whitespace. svn path=/trunk/; revision=17732
2006-03-22From Mertin Wrnes:Anders Broman1-455/+545
Following my last submitted patch I did some further investigation on the different types of iSeries Comms Traces, although the field formats are constant, things such as page throws and line spacing vary depending on the tool used to pull the trace form the iSeries spool. This patch should better handle the different formats and more importantly exit in a graceful manner if an unknown format is encountered. svn path=/trunk/; revision=17699
2006-03-17From Martin Warnes:Jaap Keuter1-3/+6
Attached is a fix that addresses a problem reading certain IBM iSeries Communications traces. svn path=/trunk/; revision=17655
2006-03-11Remove an entire horde of off-by-one errors pointed out by Coverity's CID: 83Luis Ontanon1-5/+5
(Coverity finds just one at a time...) svn path=/trunk/; revision=17580
2006-03-09Fix a possible NULL dereference (Coverity CID 33).Gerald Combs1-2/+2
svn path=/trunk/; revision=17556
2006-03-08Another off by one error found by coverity (CID 83), using > instead of >= ↵Luis Ontanon1-1/+1
when comparing index against array size. svn path=/trunk/; revision=17521
2006-03-08Coverity's run 14 CID 82.Luis Ontanon1-2/+2
an off by one error (> vs >= in bounds check). svn path=/trunk/; revision=17520
2006-03-02From Daniele Orlandi:Anders Broman3-1/+149
The attached patch adds support for LAPD frames captured using vISDN thru libpcap. The support has already been included in libpcap. The patch adds a new wiretap encapsulation, the necessary glue to decode SLL-encapsulated frames, and some minor change in the LAPD dissector in order to support the remote-to-remote frames captured on the ISDN E-Channel. Please apply ethereal-encap-table.diff before, as it fixes a misalignment in the encapsulation names table. svn path=/trunk/; revision=17450
2006-02-22Add makefile.nmakeAnders Broman1-3/+3
svn path=/trunk/; revision=17365
2006-02-17even if we don't want to close stdout on wtap_dump_close(), we might at ↵Ulf Lamping1-1/+4
least try to flush it svn path=/trunk/; revision=17326
2006-01-12The attached patch to fix bug 663 allows Ethereal to read WindowsJaap Keuter1-3/+38
Sniffer V2 format capture files with captyp=5, timeunit=0. The ticks_per_sec for this case apparently is 1e6. Bill Meier svn path=/trunk/; revision=17019
2006-01-07don't claim to be an erf file if it isn't (e.g. if the file_read call fails)Ulf Lamping1-1/+1
I don't know if this is the right way to fix it, but it seems at least better than before svn path=/trunk/; revision=16971
2006-01-06code cleanup: use "-" for all places, where stdin/stdout is meantUlf Lamping1-2/+2
tethereal internally converted the stdout capture filename "-" into "" which doesn't make any real sense and only complicated things. To make things even more confusing, wiretap expected "" for dump output and "-" for offline reading ... svn path=/trunk/; revision=16962
2006-01-05Win32: set stdout to binary mode in wtap_dump_fdopen(), so tethereal is also ↵Ulf Lamping1-0/+6
able to write capture files to stdout using -w - svn path=/trunk/; revision=16958
2005-12-31bugfix to #649: first convert to microseconds, then eventually swap byte ↵Ulf Lamping1-1/+1
ordering (not the other way round) svn path=/trunk/; revision=16925
2005-12-19Add support for Juniper GGSN generated pcap files.Luis Ontanon2-1/+4
svn path=/trunk/; revision=16857
2005-11-27Fail if *any* of the fields in the per-packet header of the first recordGuy Harris1-1/+2
aren't sane, rather than requiring them *all* to have invalid values. svn path=/trunk/; revision=16610
2005-11-25From Martin Warnes:Anders Broman6-1/+805
Add Support for reading of IBM iSeries (AS/400) Comms traces svn path=/trunk/; revision=16588
2005-11-12minor mkdir bugfix from Gisle VanemUlf Lamping1-2/+3
svn path=/trunk/; revision=16492
2005-11-10Include <unistd.h> if available, to get "close()" declared.Guy Harris1-14/+20
Update the big comment to reflect current reality. svn path=/trunk/; revision=16453
2005-11-07The problem wasn't that <sys/stat.h> wasn't being included, the problemGuy Harris1-4/+0
was that file_util.h wasn't in the distribution tarball, so it couldn't be included - it handles including <sys/stat.h>. svn path=/trunk/; revision=16423
2005-11-07add file_util.h so distcheck might workUlf Lamping1-0/+1
svn path=/trunk/; revision=16422
2005-11-07You need <sys/stat.h>, if present, to use fstat().Guy Harris1-0/+4
svn path=/trunk/; revision=16416
2005-11-07The standard <dirent.h> routines to rewind and close a directory areGuy Harris1-13/+13
rewinddir() and closedir(). Clean up indentation. svn path=/trunk/; revision=16415
2005-11-07If we're using libz, make file_open() construct the open() flagGuy Harris3-11/+40
argument, rather than requiring the caller to get the open() flag and the fopen() flag in sync. That also means that if we're *not* using libz, it can just be a wrapper around eth_fopen(). We need to include <fcntl.h>, at least on UN*X, to get open() declared and the O_ flags defined. svn path=/trunk/; revision=16409
2005-11-07as mkstemp makes trouble and is only used once in util.c, move definition ↵Ulf Lamping1-3/+0
from file_util.h to util.c for now this hopefully fixes the mkstemp problem svn path=/trunk/; revision=16406
2005-11-06Get rid of CRs and set svn:eol-style to native, so that Windows machinesGuy Harris1-127/+127
get the CRs and UN*X machines don't. Also set svn:keywords to Id to expand RCS IDs. svn path=/trunk/; revision=16405
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-26 14:36:03 +0000