aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2002-12-12Remove an errant space from the name "TippingPoint Technologies, Inc."Gerald Combs2-5/+53
svn path=/trunk/; revision=6782
2002-12-12When dissecting a buffer, use the tvbuff for the buffer, as the offsetGuy Harris1-22/+22
we're using is relative to the beginning of that tvbuff, not relative to the beginning of the containing tvbuff; that also lets us use -1 when in "proto_tree_add_text()" calls when we mean "to the end of the buffer. Fix the comment for one field. svn path=/trunk/; revision=6781
2002-12-11Add support for the new DLT_ value of 127, for the AVS WLAN header.Guy Harris1-2/+3
svn path=/trunk/; revision=6780
2002-12-11From Andreas Trauer: dissect the L2TP AVPs Initial Received LCP CONFREQ,Guy Harris3-31/+43
Last Received LCP CONFREQ, Last Sent LCP CONFREQ, and correct some AVP names. svn path=/trunk/; revision=6779
2002-12-11From Devin Heitmueller:Guy Harris2-31/+24
Minor change to the connection oriented DCE/RPC function calls. Now the offset is provided in the call, instead of having a hard-coded value in each function. Also makes the calling convention consistent with the datagram equivalents for the functions. Didn't do it for dissect_dcerpc_cn_auth() yet, as that is a special case (and I am in the process of restructuring it to make verifier decryption work properly). svn path=/trunk/; revision=6778
2002-12-11From Devin Heitmueller: make the RC4 support stateful.Guy Harris3-18/+52
svn path=/trunk/; revision=6777
2002-12-10- get rid of registering as SUA light upper layer (support for SUA lightMichael Tüxen1-6/+5
will be dropped), RANAP will be an upper layer of SUA. - register as upper layer of SCCP with the ITU assigned subsystem number svn path=/trunk/; revision=6776
2002-12-10From Michal Melerowicz: fix the display of IMSI for operators having aGuy Harris1-7/+23
mobile network code greater than 9. svn path=/trunk/; revision=6775
2002-12-10Fix the formal argument list to "bytestring_to_str()" to match theGuy Harris1-8/+14
changes to the actual argument lists in the calls (putting the byte string length after the byte string pointer). Make the byte string length actually be the length, not the length - 1. Use a #define for the longest byte string it can handle, and put in a "g_assert()" to check the sanity of that length. svn path=/trunk/; revision=6774
2002-12-10Move the handling of the Network_Header for full FC frames into the FCGuy Harris5-237/+277
dissector, and have the LLC dissector register itself as the dissector for IP-over-FC frames, as the payload is just an LLC 802.2 header plus payload for the protocol specified by that header. In the dissector for IP-over-FC as a Wiretap link-layer type, have its top-level item be a protocol item rather than a text item, and don't register it as the dissector for IP-over-FC frames from the FC dissector - it assumes what it's handed includes the Network_Header, but for full FC frames, the FC dissector has already consumed the Network_Header. Move the definitions of the value_string tables out of the header file; most of them are used only in one file, so define them in that file, and for "fc_fc4_val", define it in "packet-fc.c", make it not static, and declare it in "packet-fc.h". Use FALSE, rather than 0, as the last argument to "proto_tree_add_item()" calls that add a big-endian value. Fix one "proto_tree_add_uint()" call that was supposed to be a "proto_tree_add_item()" call. Use "%u", not "%d", to display unsigned values. svn path=/trunk/; revision=6773
2002-12-10Add a new type of column for the circuit ID (Frame Relay DLCI, ISDNGuy Harris3-24/+120
channel number, X.25 logical channel number). Clean up white space and the like, and get rid of unnecessary arguments to "col_set_port()". svn path=/trunk/; revision=6772
2002-12-10From Alfred Koebler: add support for a column for the interface andGuy Harris4-47/+72
direction in Firewall-1 monitor files. svn path=/trunk/; revision=6771
2002-12-09Work around annoying Apple C compiler/linker bug.Guy Harris2-89/+41
"ether_to_str_punct()" no longer deals only with Ethernet-style addresses, as it now takes a length argument, rename it "bytestring_to_str()" - and make it static, as it's not used outside "to_str.c". Get rid of unused "fc_to_str_buf()" routine. svn path=/trunk/; revision=6770
2002-12-09Fix a typo.Gerald Combs1-4/+4
svn path=/trunk/; revision=6769
2002-12-08Clean up a bit, and put "extern" back.Guy Harris1-9/+8
svn path=/trunk/; revision=6768
2002-12-08Add a capture routine for IP-over-FC, and call it from the capture code.Guy Harris4-3/+50
svn path=/trunk/; revision=6767
2002-12-08On UNIX, search for plugins only in the directory in which plugins willGuy Harris1-46/+3
be installed - don't explicitly search "/usr/lib/ethereal/plugins/{version}" or "/usr/local/lib/ethereal/plugins/{version}", so that if there's more than one version of Ethereal installed, we don't end up picking up plugins from the wrong version. svn path=/trunk/; revision=6766
2002-12-08Do LLC handoff from the IP-over-FC dissector the way it's done for otherGuy Harris2-18/+5
protocols using 802.2 LLC. svn path=/trunk/; revision=6765
2002-12-08Get rid of comment from sample dissector.Guy Harris1-20/+2
Get rid of some probably-unnecessary #includes. Register the IP-over-FC dissector as the dissector to call for IP-over-FC captures. svn path=/trunk/; revision=6764
2002-12-08Add packet-ipfc.c to Makefile.nmake.Gerald Combs2-3/+4
svn path=/trunk/; revision=6762
2002-12-08Add packet-ipfc.c and packet-fcbls.h to Makefile.am.Gerald Combs2-2/+5
svn path=/trunk/; revision=6761
2002-12-08Move the advisory notice to the top.Gerald Combs1-8/+8
svn path=/trunk/; revision=6760
2002-12-08Update Dinesh's entry to include FC.Gerald Combs1-0/+1
svn path=/trunk/; revision=6759
2002-12-08Add Fibre Channel entries.Gerald Combs2-6/+8
svn path=/trunk/; revision=6758
2002-12-08From Dinesh Dutt: Add Fibre Channel support, including FCIP, Basic FCGerald Combs24-34/+7501
header, Extended Link Service, Interswitch Link Service, FCP, and IPFC. svn path=/trunk/; revision=6757
2002-12-07Bah. I somehow lost the ChangeLog entries from Nov 1 to today. RecreateGerald Combs2-6/+222
them. Add RCS IDs to ChangeLog and NEWS. svn path=/trunk/; revision=6756
2002-12-07Add make-tapreg-dotc to the distribution.Gerald Combs1-1/+2
svn path=/trunk/; revision=6755
2002-12-07Tidy up for the 0.9.8 releaseGerald Combs2-37/+308
svn path=/trunk/; revision=6754
2002-12-07Add (and remove upon uninstallation) SNMP MIBs.Gerald Combs1-1/+13
svn path=/trunk/; revision=6753
2002-12-07Don't pass a null string pointer to proto_tree_add_text().Gerald Combs1-5/+6
svn path=/trunk/; revision=6752
2002-12-06When we have tretransmissions of TCP for a RPC/(NFS) session weRonnie Sahlberg1-5/+29
often get TCP to collapse multiple RPC PDUs into a MSS TCP segment. This changes the RPC dissector so that it will put one entry on COL_INFO for each PDU in the segment, (as the SMB dissector does for multiple AndX calls in one SMB PDU) and just one entry for the first/last RPC PDU. svn path=/trunk/; revision=6751
2002-12-05Sigh. We really *do* have to check whether a capture is a snoop orGuy Harris3-81/+133
Surveyor capture, as there's one link-layer type that UNICOS/mp snoop treats one way and Shomiti Surveyor treats another way. The only way to check that is to look at the first record to see how much padding it has. svn path=/trunk/; revision=6750
2002-12-05From Fritz Budiyanto: add a missing g_ntohs() for flow_label in theGuy Harris2-2/+3
gtpv0 decoder. svn path=/trunk/; revision=6749
2002-12-05Fix two compiler warningsRonnie Sahlberg1-13/+3
svn path=/trunk/; revision=6748
2002-12-05Fix for DCERPC detection when carried ontop of SMB.Ronnie Sahlberg1-1/+11
If we do not see the TreeConnect call when a TID is connected, we did not know it was a IPC share. If we do not know what kind of share it is we assume it being a normal one and thus read/write data to that share is normal file i/o. Update the dissector so that IF it sees a Transaction SMB carrying PIPE (dcerpc) then we assume that all other read/write to that TID is also DCERPC. I.e. we assume the entire TID is IPC. svn path=/trunk/; revision=6747
2002-12-05It seems pretty clear that a PDU_AUTH3 really is an AUTH3 PDU, and weGuy Harris1-2/+2
know what it is (a PDU for the third stage in a 3-way authentication handshake, as is done with NTLMSSP authentication, for example) - get rid of the question mark after "AUTH3". svn path=/trunk/; revision=6746
2002-12-05Fixed a bug regarding the handling of correlation ids.Michael Tüxen1-6/+6
svn path=/trunk/; revision=6745
2002-12-04Added support for the Implementers Guide.Michael Tüxen1-3/+69
svn path=/trunk/; revision=6744
2002-12-04Some constant for getprinter level 7 decoding.Tim Potter1-1/+7
svn path=/trunk/; revision=6743
2002-12-04Decode getprinter level 7.Tim Potter1-1/+51
svn path=/trunk/; revision=6742
2002-12-04Bump the version to 0.9.8. Update NEWS and ChangeLog to October 24.Gerald Combs5-7/+203
svn path=/trunk/; revision=6741
2002-12-03Include <string.h> so that memcpy() is properly declared.Gerald Combs1-1/+3
svn path=/trunk/; revision=6740
2002-12-03- added RFC 3331 indication to the protocol column entry.Michael Tüxen1-2/+2
svn path=/trunk/; revision=6739
2002-12-03- Updated to RFC 3331 version.Michael Tüxen1-420/+302
- Improved handling of padding bytes. - Some cleanup of the code. svn path=/trunk/; revision=6738
2002-12-03I've seen a capture with a TDS packet type of 18 at the beginning of theGuy Harris1-607/+598
session; treat all packet type values >= 1 and <= 18 as valid packet types. Do standard TCP desegmentation of Netlib buffers, and do reassembly of TDS messages fragmented over multiple Netlib buffers, rather than doing the "remember what was in the last TCP segment" stuff; I've seen nothing to indicate that a TDS message would continue past the last byte of a "last buffer in request or response" Netlib buffer, and the "remember what was in the last TCP segment" stuff was complicated and buggy, perhaps irreparably so ("buggy" as in "crashes"). Make the top-level protocol item for a TDS message be an item for "proto_tds", and put both the Netlib header and TDS stuff under that item - that's what Microsoft Network Monitor does. Get rid of the unused Netlib heuristic subdissector list. Don't make a new data source for NTLMSSP data in a TDS message - the data is just a slice of the message, it's not transformed from ASCII hex to binary, or reassembled, or anything such as that. Tokens are tokens, not PDUs. Make the heuristics a bit stronger, to reject packets that are clearly not TDS packets. Once the heuristics match, make a non-heuristic dissector the dissector for the conversation. Quit dissecting the TCP segment (or reassembled data) if we have a Netlib buffer with a length < 8, as it's not large enough to even have a Netlib header. svn path=/trunk/; revision=6737
2002-12-03Make the fragment item table static and const.Guy Harris1-17/+17
Call the pieces of a multi-frame NetBIOS message fragments, not segments. Fix a typo. svn path=/trunk/; revision=6736
2002-12-03Show all 6 digits of precision in the time stamp column when displayingGuy Harris1-5/+5
absolute time stamps (we were already doing that for relative and delta time stamps). svn path=/trunk/; revision=6735
2002-12-03Cast const pointer arguments to "g_free()" and "g_hash_table_foreach()"Guy Harris2-6/+6
to "gpointer", so that we only get warnings when we turn on the extra GCC warning checks. svn path=/trunk/; revision=6734
2002-12-03Include packet-wlancap.h into the tarballJörg Mayer1-1/+2
svn path=/trunk/; revision=6733
2002-12-03Add compat_macros.h to the tarballJörg Mayer1-1/+2
svn path=/trunk/; revision=6732
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-24 06:51:53 +0000