aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2001-11-12Support for DCE RPC atop SMB, and support for several Microsoft DCE RPCGuy Harris22-5/+1294
services used with SMB, from Tim Potter. svn path=/trunk/; revision=4194
2001-11-12Transaction2 tvbuffified, and support added for many Transaction2 SMBs,Guy Harris2-1302/+4279
from Ronnie Sahlberg. Various other bug fixes, cleanups, and other improvements. svn path=/trunk/; revision=4193
2001-11-11Dissect the NT create option bits. (Well, some of them, anyway.)Guy Harris1-35/+149
svn path=/trunk/; revision=4192
2001-11-10Change from Tim Potter to show the error status in the Info column forGuy Harris1-21/+171
SMBs that got errors. Add some additional access mask bits, and the URL of another spec. svn path=/trunk/; revision=4191
2001-11-09Microsoft calls it "Dfs", not "DFS", perhaps to avoid confusion with theGuy Harris1-6/+6
OSF's DCE DFS (which is completely unrelated to Dfs). svn path=/trunk/; revision=4190
2001-11-09NT Create and X support, from Ronnie Sahlberg.Guy Harris1-7/+280
"#if 0" out an unused routine, pending determination of whether there's any place that would use it. Fix some typos. Display the NT create options in hex, as they appear to be a bitmask. svn path=/trunk/; revision=4189
2001-11-09Remove "text2pcap-scanner.obj" and "tools\lemon\lemon.obj" when a "nmakeGuy Harris2-4/+4
clean" is done. svn path=/trunk/; revision=4188
2001-11-09Fix a couple of comments.Guy Harris1-4/+4
svn path=/trunk/; revision=4187
2001-11-09Fixes from Kazushi Sugyo:Guy Harris4-4/+13
1) print the payload length in AH headers correctly (the field's value is length of the payload, minus 2, divided by 2, so we have to add 2 before multiplying by 2); 2) correctly handle, in an SIOCGIFCONF list, entries whose address has an "sa_len" field less than the size of a "struct sockaddr" (the length of the address in an entry is the maximum of the real length and the size of a "struct sockaddr"). svn path=/trunk/; revision=4186
2001-11-09Put in an XXX note indicating that if we conclude we're using the AIXGuy Harris1-1/+7
libpcap, we may also want to return a flag indicating that we have to map seconds/nanoseconds in the packet header to seconds/microseconds. svn path=/trunk/; revision=4185
2001-11-09Wrap calls to "pcap_datalink()" in a routine that attempts to compensateGuy Harris11-332/+524
for AIX 5.x's non-standard libpcap, where "pcap_datalink()" doesn't return DLT_ values, it returns RFC 1573 ifType values. Put that wrapper, and the routine to get the interface list, in a separate file, for packet-capture utility routines, so not everybody who includes "util.h" needs to include <pcap.h>. Fix up the Wiretap hack for dealing with said incompatibility to use the correct ifType value for Token Ring. svn path=/trunk/; revision=4184
2001-11-09Tvbuffification of SMB print commands, from Ronnie Sahlberg.Guy Harris1-430/+350
Fix up some SMBs I missed when adding the byte-count checks. svn path=/trunk/; revision=4183
2001-11-092^n is 1 << n, not 2 << n.Guy Harris1-2/+2
svn path=/trunk/; revision=4182
2001-11-09From <a.stockmeier[AT]avm.de>: fix the file dialog box code to useGuy Harris2-2/+4
"g_strdup()", not "strdup()" to copy strings. svn path=/trunk/; revision=4181
2001-11-08Print the create flags with 8 hex digits.Guy Harris1-17/+26
Add some checks of the return value of "get_unicode_or_ascii_string_tvb()" - if a null terminator is missing, it might well run past the end of the byte parameters - and add some code to keep the byte count updated so that the right byte count is passed to "get_unicode_or_ascii_string_tvb()". svn path=/trunk/; revision=4180
2001-11-08Put the stuff to handle file data in read and write requests into aGuy Harris1-137/+148
common subroutine. Label the "total data length" field in Write Raw and Write Multiplexed requests as such. Dissect the IPC State/Device State field of Open and X requests and NT Create and X requests ass per the stuff on page 67 of ftp://ftp.microsoft.com/developr/drg/CIFS/dosextp.txt Make a variable that doesn't need to be static not static. svn path=/trunk/; revision=4179
2001-11-08NT Transact dissection, from Ronnie Sahlberg.Guy Harris2-8/+1878
svn path=/trunk/; revision=4178
2001-11-08Allow periods in module names.Gilbert Ramirez1-2/+2
svn path=/trunk/; revision=4177
2001-11-07"dissect_open_print_file_smb()" was defined but not used; put it intoGuy Harris1-2/+2
the appropriate entry in the "dissect[]" table. svn path=/trunk/; revision=4176
2001-11-07MPLS support for handling either IPv4 or IPv6 as the payload protocolGuy Harris3-6/+20
type, from Hamish Moffatt. svn path=/trunk/; revision=4175
2001-11-07Update the URL for Cygwin.Guy Harris1-2/+2
svn path=/trunk/; revision=4174
2001-11-07Expand on the comments about AIX libpcap.Guy Harris1-6/+10
No, Nokia *weren't* kind enough to change the major or minor version number in the capture file when they changed the format, just as they weren't kind enough to change the magic number. svn path=/trunk/; revision=4173
2001-11-07Further tvbuffication from Ronnie Sahlberg.Guy Harris1-2990/+1928
Get rid of a bunch of stuff for which said tvbuffication removes the need. When dissecting byte parameters, make sure you don't consume more bytes than the byte count, and handle captures where the last string in the byte parameters area isn't properly null-terminated (I think I've seen that in packets from various versions of Windows NT). Make various bitfields given as decimal in SMB specs decimal. svn path=/trunk/; revision=4172
2001-11-07code cleanupUwe Girlich1-23/+89
AUTH reply dissector added svn path=/trunk/; revision=4171
2001-11-06IEEE 802.1x, a/k/a EAPOL, and PPP/EAPOL EAP support, from PekkaGuy Harris8-4/+314
Nikander. svn path=/trunk/; revision=4170
2001-11-06AUTH call dissected. It includes XOR encoded user name/passwords. I didUwe Girlich1-2/+142
a decode on the fly. svn path=/trunk/; revision=4169
2001-11-06PCNFSD added for Uwe GirlichUwe Girlich1-0/+1
svn path=/trunk/; revision=4168
2001-11-06PCNFSD dissector file packet-pcnfsd.c added to source listUwe Girlich2-2/+4
svn path=/trunk/; revision=4167
2001-11-06start of a PCNFSD dissector, header fileUwe Girlich1-0/+31
svn path=/trunk/; revision=4166
2001-11-06Start of a PCNFSD dissector as the RPC dissector 150001.Uwe Girlich1-0/+97
svn path=/trunk/; revision=4165
2001-11-06Add in some heuristics to try to detect AIX libpcap format. (This worksGuy Harris3-27/+93
with one capture I've seen, but perhaps that was done with an old version of AIX, and newer versions use a minor version number, in the file, of 4. However, libpcap hasn't used a minor version of 2 for ages, so perhaps AIX hasn't updated their libpcap in ages, and aren't about to do so soon. If they do, let's hope they change the magic number. The capture file in question *does* have the capture length and real length in the old, pre-2.3, order, so it really looks as if it's an old version, rather than IBM trying to be "helpful" by using a different minor version number so that you can distinguish between normal libpcap and AIX libpcap formats.) svn path=/trunk/; revision=4164
2001-11-05From Tom Uijldert: have an non-heuristic UCP dissector, and register itGuy Harris1-17/+50
as a TCP conversation dissector, so that it can be selected in the "Decode As" dialog box. svn path=/trunk/; revision=4163
2001-11-05IPCOMP transformation and ID_IPV4_ADDR_SUBNET for ISAKMP, fromGuy Harris3-2/+29
<a.stockmeier[AT]avm.de>. svn path=/trunk/; revision=4162
2001-11-05Fix the previous change to handle SMBs with tvbuffified dissectors.Guy Harris1-2/+2
svn path=/trunk/; revision=4161
2001-11-05Put andX commands at the same level as the first command.Guy Harris1-2/+4
svn path=/trunk/; revision=4160
2001-11-05Put in some references.Guy Harris1-1/+26
svn path=/trunk/; revision=4159
2001-11-05Further tvbuffication, from Ronnie Sahlberg.Guy Harris1-1333/+770
Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item" calls. svn path=/trunk/; revision=4158
2001-11-05Futher tvbuffification from Ronnie Sahlberg.Guy Harris1-888/+506
Do more sanity checking on DOS dates and times. Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item" calls. Put the word and byte data for untvbuffified SMBs under a subtree just as is done for tvbuffified SMBs. Get rid of some no-longer-used routines. Fix some displays in untvbuffified SMBs to resemble the way those fields are displayed for tvbuffified SMBs. Display timesouts as seconds and milliseconds when they're in units of milliseconds. svn path=/trunk/; revision=4157
2001-11-04SUA dissector, from Michael Tuexen, replacing (and subsuming) the SUAGuy Harris5-335/+2767
Light dissector. svn path=/trunk/; revision=4156
2001-11-04Include "conversation.h", as the plugin API now includes the routines toGuy Harris2-2/+4
create and find conversations. svn path=/trunk/; revision=4155
2001-11-04Further tvbuffication, from Ronnie Sahlberg.Guy Harris1-2288/+1466
Make it possible for a non-tvbuffied dissector for an andX SMB to call a tvbuffified dissector for the andX command, and fix the non-tvbuffified dissectors in question to do so. svn path=/trunk/; revision=4154
2001-11-04CBCP support in PPP, from Motonori Shindo.Guy Harris2-1/+155
svn path=/trunk/; revision=4153
2001-11-04Include protocols for TCP conversation dissectors in the list ofGuy Harris1-1/+2
protocols that can be used to decode stuff. svn path=/trunk/; revision=4152
2001-11-04Declare routines exported to plugins through the plugin API table asGuy Harris2-15/+15
extern, so that "plugin_api_defs.h" works on platforms where you have to use the plugin API table. svn path=/trunk/; revision=4151
2001-11-04Additional routines made available to plugins, from Tomas Kukosa.Guy Harris7-15/+65
svn path=/trunk/; revision=4150
2001-11-04In "plugin_api_defs.h", just doGuy Harris2-161/+145
addr_XXX p_XXX; for all the declarations, to simplify things, as per Tomas Kukosa's suggestion. Fix a couple of comments. svn path=/trunk/; revision=4149
2001-11-04Allow a dissector to register preferences that it no longer supports asGuy Harris8-14/+144
obsolete; we silently ignore attempts to set those in a preferences file, so that we don't spam the user with error messages caused by them having saved preferences in an earlier release that contained those preferences. Make the Diameter and iSCSI dissectors register obsolete preferences. Crash if some code tries to register a preferences module with a name that contains something other than lower-case ASCII letters, numbers, or underscores, or that has already been registered, or if some code tries to register a preference with a name that contains something other than lower-case ASCII letters, numbers, underscores, or periods, or that has already been registered, so that we don't put code like that in a release and have to shovel code into "prefs.c" to fix it up later. (The problem with multiple modules or preferences with the same name should be obvious; the problem with names with blanks, or upper-case letters, or punctuation, is that they're a pain to type on the command line.) svn path=/trunk/; revision=4148
2001-11-04Updates from Mark Burton.Guy Harris1-92/+122
svn path=/trunk/; revision=4147
2001-11-04More tvbuffication, from Ronnie Sahlberg.Guy Harris1-760/+437
When converting DOS-date years to "struct tm" years, add 1980 and subtract 1900, to make it clearer what the conversion involves (DOS-date years are (year - 1980); "struct tm" years are (year - 1900)). svn path=/trunk/; revision=4146
2001-11-03Check for a zero word count in LogoffandX requests and replies.Guy Harris1-37/+45
svn path=/trunk/; revision=4145