aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-04-08Get rid of unused "ddp_dissector_table" variable.Guy Harris1-14/+16
For replies, correctly put the frame number of the corresponding request into the protocol tree; don't put it in as if it were the XID. That means we don't need to pass the XID as an argument to "dissect_ndps_reply()". svn path=/trunk/; revision=7419
2003-04-08Move the definition of the structure constructed for each SPXGuy Harris4-79/+95
transmission (and shared by all retransmissions), and passed to SPX subdissectors, to "packet-ipx.h", and use the same structure in the SPX dissector and the NDPS dissector. Set up conversations and those structures without checking whether we've seen the packet before or not; just check whether we find the conversation before creating a new one, and check whether we find a structure for the packet before creating a new one. Pass it to the subdissector regardless of whether we've seen the packet before or not, and check it in the NDPS dissector regardless of whether we've seen it before or not. Don't store a "retransmission" flag in the structure - the initial transmission and the retransmissions all share a single data structure, but they don't all have the same value for the "retransmission" flag, and you can tell whether a packet is a retransmission or not by comparing its frame number with the frame number from the structure; if they're different, it's a retransmission. svn path=/trunk/; revision=7418
2003-04-08From Greg Morris: update the introductory comment, add defragmentationGuy Harris2-974/+7041
support, fix various bugs, and finish up the NDPS decodes. svn path=/trunk/; revision=7417
2003-04-08From Greg Morris: update the introductory comment, fix the handlingGuy Harris1-6/+9
of the completion code, and tweak the description of continuation fragments. svn path=/trunk/; revision=7416
2003-04-08From Greg Morris: update the introductory comment.Guy Harris1-1/+5
svn path=/trunk/; revision=7415
2003-04-08From Greg Morris: update the introductory comment, and flag SPXGuy Harris1-6/+185
retransmissions in the Info column. svn path=/trunk/; revision=7414
2003-04-08From Greg Morris: update the introductory comment.Guy Harris1-1/+5
svn path=/trunk/; revision=7413
2003-04-08From Greg Morris: level 2 oplock support, add additional error codes,Guy Harris1-6/+10
fix the "Delete a File or Subdirectory" item. svn path=/trunk/; revision=7412
2003-04-07Update to reflect the fact that you *HAVE* to have a Windows version ofGuy Harris1-8/+24
Flex in order to build Ethereal, as the UNIX version generates files that unconditionally include <unistd.h> and thus don't build on Windows. svn path=/trunk/; revision=7411
2003-04-07Get rid of the other Flex output files, so that they get rebuilt onGuy Harris1-1/+3
Windows. svn path=/trunk/; revision=7410
2003-04-06Choosing the lower-numbered socket in an IPX packet as the first one toGuy Harris1-17/+30
try as a port number doesn't always give the right answer, as you might have a name query packet from an SMB-over-IPX server, meaning it's from IPX_SOCKET_NWLINK_SMB_SERVER to IPX_SOCKET_NWLINK_SMB_NAMEQUERY, and, unfortunately, IPX_SOCKET_NWLINK_SMB_SERVER is less than IPX_SOCKET_NWLINK_SMB_NAMEQUERY and it'll now be dissected as an SMB packet rather than an NMPI name query packet. So if the higher-numbered socket is IPX_SOCKET_NWLINK_SMB_NAMEQUERY, we just try that, we don't try the other port. svn path=/trunk/; revision=7409
2003-04-06From emre: add a "Filter out this stream" button to the "Follow TCPGuy Harris3-3/+65
Stream" window, which adds "and !(<filter for the stream>)" to the display filter in effect before the stream was followed, removing that stream from the display. svn path=/trunk/; revision=7408
2003-04-06Add a dissector for the IPX WAN protocol. "IPX WAN 2" is just someGuy Harris5-6/+473
compatible additions to the RFC 1362 IPX WAN protocol, so call it "IPX WAN", not "IPX WAN 2". svn path=/trunk/; revision=7407
2003-04-06We use nothing from "nlpid.h", so we don't need to include it.Guy Harris1-2/+1
svn path=/trunk/; revision=7406
2003-04-05Separate the scan for the BGP header from the scan through the BGPGuy Harris2-143/+282
packets, and mark any stuff before the first BGP header as continuation data. Make the main loop for dissecting the BGP packets similar to the loop in "tcp_dissect_pdus()" (if "tcp_dissect_pdus()" took a starting offset as an argument, we could use it), so that it handles a BGP header split between TCP segments. svn path=/trunk/; revision=7405
2003-04-03Clean up white space.Guy Harris1-78/+75
Don't include "packet-smb-common.h", as there's nothing in it we use. svn path=/trunk/; revision=7404
2003-04-03Add some additional fields to SMB-over-IPX dissection, as per whatGuy Harris1-6/+26
NetMon 2.x does. svn path=/trunk/; revision=7403
2003-04-03Add support for SMB-over-IPX.Guy Harris1-28/+78
svn path=/trunk/; revision=7402
2003-04-03When dissecting specific rights, pass a name string down so theTim Potter5-37/+54
proto item says "foo specific rights" instead of just "specific rights". svn path=/trunk/; revision=7401
2003-04-03From Laurent Rabret: add support for Multi Topology Reachable IPv4Guy Harris2-68/+197
Prefixes and Multi Topology Reachable IPv6 Prefixes from draft-ietf-isis-wg-multi-topology-06. svn path=/trunk/; revision=7400
2003-04-03Add an extra argument to get_unicode_string() to optionallyTim Potter3-17/+41
pass back string data. Start adding some COL_INFO tidbits for NETLOGON PDC query and PDC query response. svn path=/trunk/; revision=7399
2003-04-03Add an extra argument to get_ms_string() so we can optionally passTim Potter3-29/+28
back the value of the string to the caller. svn path=/trunk/; revision=7398
2003-04-02Add a new README.developer file for wiretap; it's currently just someGuy Harris2-3/+71
stuff I sent out in a mail message to somebody asking how to add support for a new file format, but hopefully it'll get improved by various contributors over time (hint hint). svn path=/trunk/; revision=7397
2003-04-02We don't use snprintf, so we don't need to include snprintf.h.Guy Harris1-5/+1
svn path=/trunk/; revision=7396
2003-04-02"proto_tree_add_text()" takes printf-style arguments; there's no need toGuy Harris2-16/+10
use snprintf to format a string into a buffer and then supply that string to "proto_tree_add_text()". svn path=/trunk/; revision=7395
2003-04-02Add support for WAN Hello packets.Guy Harris1-21/+96
svn path=/trunk/; revision=7394
2003-04-01From Eric Perie: update to the name for EAP type 15, and some additionalGuy Harris3-2/+13
EAP types. svn path=/trunk/; revision=7393
2003-04-01From Solomon Peachy: add support for the latest stuff defined in theGuy Harris1-3/+15
draft 7.1 of 802.11g, plus a few response codes defined in 802.11b. svn path=/trunk/; revision=7392
2003-04-01From Mike Frisch: NFS_ACL support.Guy Harris4-39/+358
svn path=/trunk/; revision=7391
2003-03-31Add support for Level 1 Hello packets.Guy Harris1-64/+263
Fix a typo. svn path=/trunk/; revision=7390
2003-03-31Fix a typo.Guy Harris1-2/+2
svn path=/trunk/; revision=7389
2003-03-31The units, in non-whizzo-gigabit-pod captures, for hdr.timeunit = 2Guy Harris1-11/+21
aren't 1/1193000.0 second; the code used to use 1/1193180.0 second, but at least one capture appears to have units of somewhere around 1/3579540.0 second. svn path=/trunk/; revision=7388
2003-03-31Add dissector for NetWare Link Services Protocol.Guy Harris5-8/+1409
Socket 0x9001 is for NLSP - it supports LANs as well as WANs, at least as I read the specification. Socket 0x9004 is for "IPX WAN 2". svn path=/trunk/; revision=7387
2003-03-31Don't use hardwired offsets when dissecting the ISIS header - we'reGuy Harris1-8/+8
already advancing "offset" through the header, so use it. svn path=/trunk/; revision=7386
2003-03-31Have separate subtree ett_ values for CLVs with LSP entries and for theGuy Harris1-28/+33
LSP entries themselves. The length and structure of an LSP entry isn't fixed, it depends on the ID length. svn path=/trunk/; revision=7385
2003-03-31The "attached_string" doesn't apply to the attachments, so call itGuy Harris1-4/+4
"supported_string", instead, as it is used to indicate whether partition repair is supported. Fix a typo. svn path=/trunk/; revision=7384
2003-03-31Do the same for dissect_ndr_char_cvstring.Guy Harris1-2/+5
svn path=/trunk/; revision=7383
2003-03-30From Didier Gautheron: bug fix plus a new command decoded.Guy Harris1-17/+68
svn path=/trunk/; revision=7382
2003-03-30From Hannes Gredler:Guy Harris1-40/+163
- TLV 135 cleanup and support for subTLVs - a common IP Reach subTLV dissector which dissects subTLV 1 & 2 [32 & 64 Bit Admin Tags as per draft-ietf-isis-admin-tags-01.txt] - rework IPv6-related TLVs. svn path=/trunk/; revision=7381
2003-03-28Ian Schorr discovered that, for gigabit pod captures, if hdr.timeunit isGuy Harris1-23/+31
2 the time stamps are in units of 1/31250000 seconds rather than nanoseconds - and, by generating Windows Sniffer captures with various hdr.timeunit values, that for all the non-zero values he tested, the time stamps for non-gigabit pod captures are in units of 1/1193000 second. Instead of having a TpS array, just test for the exception value (0 for non-gigabit pod captures, 2 for gigabit pod captures). svn path=/trunk/; revision=7380
2003-03-27Use FT_FRAMENUM for the "Duplicate to the ACK in frame" and "This is anGuy Harris1-3/+3
ACK to the segment in frame" fields, so you can use the "Go To Corresponding Frame" menu item. svn path=/trunk/; revision=7379
2003-03-27From Laurent Rabret: fix bugs in ISIS LSP analyses, addi type blockGuy Harris3-50/+107
filters and display the type block byte in a more standard way (bit fields). svn path=/trunk/; revision=7378
2003-03-27From Olivier Biot: fix quotation of attibute values for the WAPGuy Harris1-50/+50
Provisioning DTD representation. svn path=/trunk/; revision=7377
2003-03-27From Olivier Biot:Guy Harris1-78/+127
* Fix the Extended Method PDU mapping (move code some lines down) * Decode more WSP Parameter entries (now WAP Provisioning Push OK) * First check whether the PDU content for Post, Reply and Push PDUs can be dissected (dissector_try_X function calls), if not then display the PDU data as "Data" in the WSP protocol tree. * Replaced "Unsupported header" by "Undecoded header" for clarity svn path=/trunk/; revision=7376
2003-03-27Enhancement to TCP Sequence AnalysisRonnie Sahlberg1-5/+27
Duplicate ACKs that are detected/suspected are now also flagged with which frame the original ACK was seen in and the dup ack number. This is displayed both in the summary pane as well as in the tree pane. svn path=/trunk/; revision=7375
2003-03-26Use "gboolean" for Boolean variables.Guy Harris1-10/+35
Allocate the per-conversation and per-frame data items from a GMemChunk (which saves memory and CPU time, *and* lets us free all those items quickly - as opposed to not freeing them at all, as had been the case). Don't assume that, just because a conversation for the TCP connection exists, it necessarily has an AJP13 data chunk attached to it; the conversation might have, for example, been created by the TCP sequence number analysis code. svn path=/trunk/; revision=7374
2003-03-26From Graham Bloice: make the RC_VERSION variable in config.nmakeGuy Harris2-8/+8
comma-separated, so that the resources will be built correctly and the version number correctly displayed in the GUI, and make the resources dependent on "config.nmake" so that they're rebuilt if it's changed. svn path=/trunk/; revision=7373
2003-03-26From Olivier Biot: add WSP protocol dissection for extended method PDUs,Guy Harris1-3/+41
and let the Protocol Options header code page and extended methods calls refer to hexadecimal representation as used everywhere else in the WSP dissection code. svn path=/trunk/; revision=7372
2003-03-26Fixed a small bug in tcp sequence number analysis.Ronnie Sahlberg1-7/+9
FIN flag would previously only add one to the sequence number if the FIN packet was empty, i.e. did not carry any payload data. This caused ethereal to incorrectly flag the ACK to such packets (FIN+payload data) to be incorrectly flagged as ACK to previously lost segment. Change the algorithm to always add 1 to the segment length, and thus the sequence number for all packets with teh FIN bit set. svn path=/trunk/; revision=7371
2003-03-26Put in a comment about the "to what code does the configuration fileGuy Harris1-1/+22
directory belong" issue. svn path=/trunk/; revision=7370