aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2004-01-07The year in a LANalyzer capture's trace summary record is a 2-byte yearGuy Harris1-7/+5
number. svn path=/trunk/; revision=9583
2004-01-06Packet data is an array of "guint8"s, not an array of "char"s; declareGuy Harris3-11/+9
variables appropriately. Put in a cast to squelch MSVC++ warnings. svn path=/trunk/; revision=9575
2004-01-05 removed some MSVC warnings (level 3)Ulf Lamping8-19/+19
svn path=/trunk/; revision=9558
2003-12-31For WTAP_ENCAP_ETHERNET, you have to fill in the "eth.fcs_len" member ofGuy Harris1-1/+12
the pseudo-header; these captures don't appear to have an FCS in them, so set that member to 0. svn path=/trunk/; revision=9502
2003-12-29From Neils Koot:Guy Harris2-82/+298
add the ability to read Ethernet captures; add the ability to read hex-only dumps. svn path=/trunk/; revision=9468
2003-12-29Make all the byte arrays for writing out stuff "guint8" rather thanGuy Harris1-11/+11
"gint8" - there's no reason for them to be signed, and making them signed can cause compiler warnings if a value won't fit in 8 bits if sign-extended. svn path=/trunk/; revision=9467
2003-12-28removed some MSVC warnings (warning level 2)Ulf Lamping1-3/+3
svn path=/trunk/; revision=9459
2003-12-24Add -pedantic to --with-extra-gcc-checksJörg Mayer1-2/+2
svn path=/trunk/; revision=9443
2003-12-23removed some MSVC warnings (conversions between double/float and int)Ulf Lamping1-3/+3
svn path=/trunk/; revision=9422
2003-12-21removed some MSVC warnings (moved pcap.h before glib.h)Ulf Lamping1-2/+5
svn path=/trunk/; revision=9393
2003-12-21libpcap.c:1777: warning: implicit declaration of function htonsJörg Mayer1-2/+2
svn path=/trunk/; revision=9388
2003-12-19Add some additional sanity checking.Guy Harris1-1/+10
svn path=/trunk/; revision=9360
2003-12-18Add support for a link-layer type value of 143 as DOCSIS in libpcapGuy Harris1-1/+3
captures. svn path=/trunk/; revision=9350
2003-12-18From Jan Kiszka: IrDA support.Guy Harris3-9/+163
svn path=/trunk/; revision=9345
2003-12-18WildPackets' EtherHelp appears to write EtherPeek-compatible files,Guy Harris1-1/+15
except that the 0x80 bit is turned on in the file version number field. Turn that bit off before processing that field. svn path=/trunk/; revision=9342
2003-12-17Fix more "CPPLAGS" typoes.Guy Harris1-3/+3
svn path=/trunk/; revision=9310
2003-12-11prevent MSVC warning:Ulf Lamping2-15/+15
"warning C4761: Gr��enkonflikt im Argument. Konvertierung vorgenommen" -> size conflict in argument, conversion done svn path=/trunk/; revision=9244
2003-12-03From Jeff Morriss: add support for libpcap MTP2 and MTP3 captures.Guy Harris4-6/+21
Add a missing entry in "encap_table[]" for Bluetooth H4, and fix some comments. svn path=/trunk/; revision=9157
2003-12-03"strtoul()" returns a "long", not a "long long".Guy Harris1-2/+2
svn path=/trunk/; revision=9154
2003-12-02Check for errors and EOF, and handle them appropriately; don't treat allGuy Harris1-19/+108
errors when reading the header as indications that the file isn't an AiroPeek V9 file. Put in comments nothing some additional checks we should do. svn path=/trunk/; revision=9145
2003-12-02From Martijn Schipper: support for reading AiroPeek files in V9 captureGuy Harris7-6/+324
file format (AiroPeek 2.x). svn path=/trunk/; revision=9144
2003-12-01It's RedHat, not Red Hat.Richard Sharpe1-2/+2
svn path=/trunk/; revision=9126
2003-11-25"file_seek()" sets "*err" - we don't have to set it ourselves.Guy Harris1-13/+4
The same is true of "parse_cosine_rec_hdr()". svn path=/trunk/; revision=9079
2003-11-25"file_seek()" sets "*err" - there's no need to set it ourselves. ItGuy Harris1-15/+7
returns -1 on errors, so just check for that. svn path=/trunk/; revision=9078
2003-11-18From Olivier Biot: add a "--enable-profile-build" flag to request thatGuy Harris1-1/+17
"-pg" binaries be built. svn path=/trunk/; revision=9001
2003-11-11From Brian Ginsbach: fix handling of IRIX and UNICOS/mp snoop capturesGuy Harris1-3/+3
on loopback interfaces. svn path=/trunk/; revision=8945
2003-11-07Let people configure whether to build with Zlib or not solely byGuy Harris2-7/+9
controlling whether ZLIB_DIR is defined or not in config.nmake. svn path=/trunk/; revision=8911
2003-11-06From Scott Emberley: support for writing Network Instruments ObserverGuy Harris5-27/+188
files. svn path=/trunk/; revision=8900
2003-11-04Sigh. Some snoop files have 6 bytes of padding; assume the file is aGuy Harris1-29/+77
snoop file unless it has enoguh padding to hold a Shomiti trailer record. (DEAR SUN MICROSYSTEMS: PLEASE DO NOT STUFF 16 OR MORE BYTES OF PADDING INTO A SNOOP PACKET. THANK YOU. HAVE A NICE DAY.) Add a little paranoia about the record and captured data lengths. svn path=/trunk/; revision=8883
2003-11-01The time in Observer files is in nanoseconds since midnight, January 1,Guy Harris2-18/+46
2000, 00:00:00 *local* time. The amount to add to that is just the UNIX time stamp value for that point in time; get it with "mktime()". svn path=/trunk/; revision=8854
2003-10-31Temporarily get rid of the "struct tm" in "struct observer_time", andGuy Harris2-2/+8
get rid of the reference to its "tm_gmtoff" member - there are platforms on which Ethereal runs that don't have "tm_gmtoff" in "struct tm". If the time stamp in the packets is nanoseconds since midnight 2001-01-01 *local* time, we'd need to compute the offset between that and midnight 2000-01-01 GMT, and adjust the time with that. svn path=/trunk/; revision=8842
2003-10-31From Scott Emberley: support for reading Network Instruments version 9Guy Harris7-6/+393
capture files. svn path=/trunk/; revision=8840
2003-10-30The quantities in the hcidump header are little-endian, not big-endian.Guy Harris1-5/+5
svn path=/trunk/; revision=8831
2003-10-30From Marcel Holtmann: support for reading Linux Bluez Bluetooth stackGuy Harris7-8/+205
"hcidump -w" traces. Note that Jesper Peterson contributed support for reading Endace ERF files. svn path=/trunk/; revision=8824
2003-10-25Add a new WTAP_ENCAP_CHDLC_WITH_PHDR type, to distinguish Cisco HDLCGuy Harris4-14/+18
captures with packet direction information from captures without it. Use them appropriately. svn path=/trunk/; revision=8780
2003-10-24Move the version number checking for libpcap files, to see whether toGuy Harris2-22/+62
swap the "captured length" and "length" fields, to the open-file code; store a tri-state (definitely swapped, definitely not swapped, maybe swapped) value in the per-capture-file-format information for libpcap format, and use that when processing packets. svn path=/trunk/; revision=8774
2003-10-24The capture tools for DGUX has swapped the included/original packet lengths ↵Ronnie Sahlberg1-1/+10
of the frame header. they specify the pcap version as 543.0 svn path=/trunk/; revision=8772
2003-10-10Give every Makefile.nmake file a "distclean" rule, and have "distclean"Guy Harris1-3/+6
recurse into subdirectories doing "nmake -f Makefile.nmake distclean". Have "nmake -f Makefile.nmake clean" not remove stuff that "make clean" doesn't remove (such as Flex/Bison output and config.h files) - and have "nmake -f Makefile.nmake distclean" remove stuff that "make distclean" removes, including "tethereal-tap-register.c" and "ethereal-tap-register.c". svn path=/trunk/; revision=8672
2003-10-03Use #ifndef HAVE_UNISTD_H instead of #ifdef _WIN32Jörg Mayer1-2/+2
svn path=/trunk/; revision=8603
2003-10-03From Graham Bloice: define YY_NO_UNISTD_H on Win32, so that if Flex wasGuy Harris1-1/+5
a UNIX version generating code that, by default, assumes you have <unistd.h> (as might be the case with recent versions of Cygwin, which I assume *does* supply <unistd.h>), but you're building on a platform that lacks <unistd.h> (e.g., building with MSVC++ or MinGW), you can still compile. svn path=/trunk/; revision=8602
2003-10-01Have a pseudo-header for Ethernet packets, giving the size of the FCS -Guy Harris1-1/+0
0 means "there is no FCS in the packet data", 4 means "there is an FCS in the packet data", -1 means "I don't know whether there's an FCS in the packet data, guess based on the packet size". Assume that Ethernet encapsulated inside other protocols has no FCS, by having the "eth" dissector assume that (and not check for an Ethernet pseudo-header). Have "ethertype()" take an argument giving the FCS size; pass 0 when appropriate. Fix up Wiretap routines to set the pseudo-header. This means we no longer use the "generic" seek-and-read routine, so get rid of it. svn path=/trunk/; revision=8578
2003-10-01Have a pseudo-header for Ethernet packets, giving the size of the FCS -Guy Harris17-173/+529
0 means "there is no FCS in the packet data", 4 means "there is an FCS in the packet data", -1 means "I don't know whether there's an FCS in the packet data, guess based on the packet size". Assume that Ethernet encapsulated inside other protocols has no FCS, by having the "eth" dissector assume that (and not check for an Ethernet pseudo-header). Have "ethertype()" take an argument giving the FCS size; pass 0 when appropriate. Fix up Wiretap routines to set the pseudo-header. This means we no longer use the "generic" seek-and-read routine, so get rid of it. svn path=/trunk/; revision=8574
2003-09-28It appears that, at least for gigabit pod captures, there are time stampGuy Harris1-21/+52
differences between versions 002.001 and 002.002. svn path=/trunk/; revision=8563
2003-09-24From packet steve: update to give the correct name for "file_access.c",Guy Harris1-6/+21
and add a discussion of how data_offset works. svn path=/trunk/; revision=8535
2003-09-19From Jesper Peterson: add support for AAL5 records in ERF files,Guy Harris1-18/+57
treating them as PDUs with an AAL5 trailer. svn path=/trunk/; revision=8493
2003-09-04Put in a note telling people how to add a new libpcap encapsulationGuy Harris1-1/+47
type, and telling them how it should *NOT* be done, i.e. you should ask tcpdump-workers for a new DLT_ value, you should not just pick a value on your own, and you should especially not reuse a value that's already in use! Put in comments about reserved values in the current CVS libpcap. svn path=/trunk/; revision=8367
2003-08-26From Jesper Peterson:Guy Harris1-4/+7
use WTAP_ENCAP_ATM_PDUS as the default encapsulation for ATM; don't use ULL constants, as not all C compilers that support gint64 support them, and as there's no need to make them ULL constants. svn path=/trunk/; revision=8278
2003-08-26From Jesper Peterson: support for Endace ERF file format.Guy Harris8-6/+538
svn path=/trunk/; revision=8272
2003-08-23Use "file_access.c", not "file_io.c", as the latter is already in use inGuy Harris3-6/+6
a not-yet-ready-for-prime-time project of mine (fast random access to gzipped files, plus an mechanism to allow support for other forms of compression). svn path=/trunk/; revision=8221
2003-08-22Rename "wiretap/file.c" to "wiretap/file_io.c", as some tools, such asGuy Harris3-6/+6
the MS Visual Studio debugger, get confused by two files with the same name being in a program's source, even though they're in different directories. svn path=/trunk/; revision=8208
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-23 02:45:32 +0000