aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-08-23Add a dissector table for RTP payload types, and have dissectorsGuy Harris6-80/+108
register themselves in that table rather than exporting their dissectors by name and having the RTP dissector know about particular dissectors for particular payload types. svn path=/trunk/; revision=8215
2003-08-23The FreeTDS TDS document says that the first string in an RPC packet isGuy Harris1-6/+12
a procedure name. svn path=/trunk/; revision=8214
2003-08-23If a Netlib message has "Not last buffer" set, flag it as such in theGuy Harris1-10/+21
Info column, to distinguish it from the message with the last buffer in it. svn path=/trunk/; revision=8213
2003-08-23From Niklas OgrenRonnie Sahlberg1-0/+490
the H263 dissector svn path=/trunk/; revision=8212
2003-08-23From Niklas OgrenRonnie Sahlberg4-3/+17
New Protocol: H.263 called and used by the RTP dissector svn path=/trunk/; revision=8211
2003-08-23Add the packet type name for the "Remote Procedure Call Packet" (which IGuy Harris1-25/+55
suspect refers to stored SQL procedures on the server, not to RPCs in the traditional sense), and the beginnings of a routine to dissect those packets (at least as seen in one capture). Don't use "get_unicode_or_ascii_string()", as it really expects to be used inside an SMB dissector, and wants arguments like the "bc" argument. Just use "tvb_fake_unicode()" and "tvb_get_string()", instead. If we're doing reassembly, and the PDU is split across segment boundaries, return after setting the desegmentation offset and length, don't just drive on and dissect the partial PDU. svn path=/trunk/; revision=8210
2003-08-23From Biot OliverRonnie Sahlberg2-43/+464
Support in SMPP for GSM SMS and GSM CBS. Reassembly of SMPP has also been fixed so that it now works. svn path=/trunk/; revision=8209
2003-08-22Rename "wiretap/file.c" to "wiretap/file_io.c", as some tools, such asGuy Harris3-6/+6
the MS Visual Studio debugger, get confused by two files with the same name being in a program's source, even though they're in different directories. svn path=/trunk/; revision=8208
2003-08-21Sometimes Ethernet captures include an FCS at the end of the packet.Guy Harris4-47/+73
An Ethernet trailer is only needed to pad the packet to 60 bytes of Ethernet header plus payload; if the packet has what appears to be a trailer, and it's 4 or more bytes (i.e., long enough to include an FCS), and the Ethernet frame was claimed to have 64 or more bytes (i.e., it has at least an FCS worth of data more than the minimum 60 bytes), assume that the last 4 bytes of the frame were an FCS. svn path=/trunk/; revision=8207
2003-08-21From Tomas Kukosa: allow subdissectors to be registered forGuy Harris8-104/+277
NonStandardParameter data in the H.245 dissector. svn path=/trunk/; revision=8206
2003-08-21From Lars Roland:Guy Harris4-138/+61
A scrollable GtkCList is used now for both GTK1 and GTK2. Removed "overall" line from statistics table. It is not useful. "Response Time Delay" was renamed into "Service Response Time". Menu Item moved to "Service Response Time" folder. As Ronnie suggested, the active display filter is now used as default statistics filter. svn path=/trunk/; revision=8205
2003-08-21Label the Count field in a Write AndX response as such, rather than asGuy Harris1-15/+25
"Data Length". Fix some low-16-bits-of fields to have "_low", rather than "_high", at the ends of their names. svn path=/trunk/; revision=8204
2003-08-21Align the --with-pcap help message with other help messages.Guy Harris1-2/+2
svn path=/trunk/; revision=8203
2003-08-21Fix up --with messages that include square brackets.Guy Harris1-2/+4
Put --with-plugins on the left margin, as the rest of the messages are. svn path=/trunk/; revision=8202
2003-08-21Note that the "=DIR" argument to "--with-adns" is optional.Guy Harris1-2/+5
svn path=/trunk/; revision=8201
2003-08-21Note that the "=DIR" argument to "--with-ssl" and "--with-adns" isGuy Harris1-3/+9
optional. svn path=/trunk/; revision=8200
2003-08-21Fix up --with messages that include square brackets.Guy Harris1-9/+18
Put --with-plugins on the left margin, as the rest of the messages are. Fix up the description of --with-net-snmp. svn path=/trunk/; revision=8199
2003-08-21The MaxCountHigh field in a READ_ANDX is given as a ULONG, i.e. 32 bits,Guy Harris1-15/+43
in the SNIA CIFS spec, although it's probably a 16-bit MaxCountHigh and a 16-bit reserved field (it's a 32-bit timeout field in an earlier SMB spec). Call the MaxCount and MaxCountHigh fields in a READ_ANDX "Max Count Low" and "Max Count High", rather than "Data Length Low" and "Data Length High". svn path=/trunk/; revision=8198
2003-08-20Don't do a check inside an AC_MSG_CHECKING/AC_MSG_RESULT pair - theGuy Harris1-6/+8
output looks bad if you do. Split the check for "should I check for an SNMP library?" into "should I check for NET-SNMP?" and "should I check for UCD SNMP?" (which makes sense because they're controlled by different configure script options). svn path=/trunk/; revision=8197
2003-08-20The length and offset for large file support for LockingAndX was broken.Ronnie Sahlberg1-7/+54
We treated this as just a normal 64bit integer in LittleEndian format. However, this is actually 2 32 bit integers, each in LittleEndian format but the two 32 bit fields are stored in BigEndian format relative to each other. Since we dont do 64 bit aritmetic I had to convert the field to FT_STRING as well so sorry, no creative len>xxx filters anymore. but at least we present the data in the correct way in the tree pane. We didnt see this one earlier since most locking_andx requests are probably for offset : 0 and length: - Funnily enough it seems that certain popular commercial products have the same bug as ethereal had up until 5 minutes ago. svn path=/trunk/; revision=8196
2003-08-20packet-dcerpc-lsa had some idea that EnumDomainsEx had a funny NDR rep forRichard Sharpe1-3/+4
the array of domain info stuff returned. Removing the offending bit fixed the dissection, at least of a capture we have. svn path=/trunk/; revision=8195
2003-08-19Construct the About box ourselves, so it has the title "About Ethereal"Guy Harris1-9/+60
and doesn't have a message-box-type icon. This might want to be tweaked further, to more closely resemble various desktop environments' About boxes (although what's appropriate might depend on the environment). svn path=/trunk/; revision=8194
2003-08-19Void functions don't return values, even though GCC likes to pretendGuy Harris1-2/+2
that they do. svn path=/trunk/; revision=8193
2003-08-19Update to the Response Time Statistics taps.Ronnie Sahlberg5-5/+36
SMB/FC/ONC-RPC/DCE-RPC now all use the default tap filter string as the same filter string as is used in the main window instead of using a default NULL filter string. The idea is that if you have applied a certain filter to your main window, it is likely that if you want to invoke the response time statistics feature you probably want to do the response time statistics over the same set of packets, i.e. the ones you see in the main window. svn path=/trunk/; revision=8192
2003-08-19Update to the SMB dissector so that the HighLen 16 bit integer is decodedRonnie Sahlberg1-42/+84
instead of as being represented as RESERVED. This updates the ReadAndX and WriteAndX calls and replies. This should really try to keep track of the negotiation of the conversation to make sure we only do it for those sessions where LARGE file io has been negotiated. Currently it does it for all Read/Write AndX calls. It is probably safe to do so since for those clients where this is not supported these bytes are RESERVED and MBZ anyway. svn path=/trunk/; revision=8191
2003-08-19Define GCC_GLIB_CFLAGS as a GCC equivalent of GLIB_CFLAGS, and use itGuy Harris2-3/+6
instead of -I$(GLIB_DIR) when running GCC to generate the xyzzy file, so that the right -I flags are used. svn path=/trunk/; revision=8190
2003-08-18Get plugins/README.interface into the source tarball.Guy Harris1-1/+2
svn path=/trunk/; revision=8189
2003-08-18From Richard Urwin a great enhancement to the color filter dialogue toRonnie Sahlberg9-203/+865
make it possible to import/export color filters svn path=/trunk/; revision=8188
2003-08-18Check in Xass-list, so the CVS tree can be built on Windows withoutGuy Harris5-0/+73
having GCC. Check in updated versions of the other X* files. svn path=/trunk/; revision=8187
2003-08-18From Matthijs Melchior:Guy Harris5-257/+44
move the initialization of the addresses in the plugin interface structure from run-time to link time; don't attempt to rebuild the X* files automatically, just warn that they're out of date and show the command used to rebuild them (not everybody has GCC installed, but it's required in order to rebuild them). Get rid of the checked-in Xepan_plugins.c, as it's no longer generated or used. Fix Makefile.am now that Xepan_plugins.c has been replaced by Xass-list. Give plugin_gen.py an RCS ID. svn path=/trunk/; revision=8186
2003-08-18From Gisle Vanem: MingW declares "rint()" in <math.h> and defines it inGuy Harris2-5/+7
a library, and declares "mode_t" in <sys/types.h>. svn path=/trunk/; revision=8185
2003-08-18From Gisle Vanem: <ws2tcpip.h> is needed for INET6 code in epan/resolv.cGuy Harris3-1/+7
(at least with MingW + gcc 3.3.1). svn path=/trunk/; revision=8184
2003-08-18Add checks for read errors in "read_prefs()".Guy Harris1-7/+25
svn path=/trunk/; revision=8183
2003-08-18From Tony Lindstrom: updates of DHCPV6 dissector toGuy Harris3-110/+274
draft-ietf-dhc-dhcpv6-28, draft-ietf-dhc-dhcpv6-opt-prefix-delegation-04, and draft-ietf-dhc-dhcpv6-opt-dnsconfig-03, and addition of NIS and time configuration option drafts draft-ietf-dhc-dhcpv6-opt-nisconfig-02 and draft-ietf-dhc-dhcpv6-opt-timeconfig-02. svn path=/trunk/; revision=8182
2003-08-18From Greg Morris: SRVLOC-over-TCP support.Guy Harris2-3/+53
svn path=/trunk/; revision=8181
2003-08-18Change a NULL to an empty string in order to appease "[t]ethereal -G fields".Gerald Combs1-2/+2
svn path=/trunk/; revision=8180
2003-08-17Prettifying the RPC and NFS (v3) layer.Ronnie Sahlberg8-99/+635
Add more text to the COL_INFO line as well as the protocol trees for NFS and RPC svn path=/trunk/; revision=8179
2003-08-17Update to SMBRonnie Sahlberg1-16/+16
Change the AndX command fields to only place a filterable field in the tree when smb.cmd is NOT 0xff If smb.cmd is 0xFF just place a text entry in the field instead. This makes it more intuitive for users that try to use filters such as smb.cmd!=0xXY since the filter will no longer behave "unexpectedly" and fail to filter out any of the AndX commands. Yes, they should really use !smb.cmd==0xXY instead but one cant explain this to every single user. I dont think anyone would ever want to filter for smb.cmd==0xFF anyway svn path=/trunk/; revision=8178
2003-08-17Update authors with the author of h225 h245 and the per supportRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=8177
2003-08-17From Erwin Rol:Guy Harris7-12/+18
Update e-mail address. Register the ARP dissector, as the RT-Net dissector tries to find it. svn path=/trunk/; revision=8176
2003-08-17From Shiang-Ming Huang: STUN (RFC 3489) support.Guy Harris5-2/+432
svn path=/trunk/; revision=8175
2003-08-17Sigh. I think I once tried making the last argument to "col_set_str()"Guy Harris1-3/+3
be a "const gchar *", and it ended up being like pulling a thread out of a sweater - more things had to change, which meant still more things had to change, and I might've even run into something that didn't change very well at all. (Or perhaps that was constifying something else.) For now, we just cast away the constness in calls to "col_set_str()"; the column code won't actually overwrite the string. svn path=/trunk/; revision=8174
2003-08-16From Joakim Wiberg: various fixes and cleanups, including fixes toGuy Harris1-456/+618
malformed packets caused by unconnected send and support for connected class 3 data. svn path=/trunk/; revision=8173
2003-08-16From Ronnie Sahlberg: patch to set up conversations to use RTP and RTCPGuy Harris1-10/+49
based on H.245 information. svn path=/trunk/; revision=8172
2003-08-16There's no such function as "delete_giop_user_module()", so don't put itGuy Harris6-7/+1
in the list of exported functions. svn path=/trunk/; revision=8171
2003-08-16Get rid of an unused variable.Guy Harris1-2/+1
svn path=/trunk/; revision=8170
2003-08-16From Alfred Koebler:Guy Harris1-7/+61
add interpretation of chain position; add a preference to interpret the new file format used by fw monitor options -u/-s. svn path=/trunk/; revision=8169
2003-08-16Make the AH and ESP sequence numbers BASE_DEC, since no one objected toGerald Combs1-3/+3
http://www.ethereal.com/lists/ethereal-dev/200308/msg00189.html. svn path=/trunk/; revision=8168
2003-08-15In "dissect_transaction2_request_parameters()", "bc" gets decremented asGuy Harris1-5/+4
we go through the data, so we can't compare it with the current offset minus the starting offset - we should just test, and use, its value directly, as, at the end, it reflects the amount of data left. svn path=/trunk/; revision=8167
2003-08-15Some fixes for UNIX CIFS extensions. There's still a problem in the trans2Tim Potter1-5/+14
find response and we end up displaying malformed frame even though all data has been dissected. svn path=/trunk/; revision=8166