aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2000-09-27First step in moving core Ethereal routines to libepan.Gilbert Ramirez30-94/+222
svn path=/trunk/; revision=2458
2000-09-23Windows Sniffers appear to write out ATM traces with a network type ofGuy Harris2-3/+10
8, which is NDIS's ATM type. At least one capture appears to have LLC-encapsulated frames in it; for now, we'll map it to WTAP_ENCAP_ATM_RFC1483 - and make Ethereal dissect WTAP_ENCAP_ATM_RFC1483 by handing the frames to "dissect_llc()". While we're at it, we'll have Ethereal panic if handed a Wiretap packet type it doesn't dissect, rather than giving you a rather blank dissection. svn path=/trunk/; revision=2457
2000-09-22Move #included C code from an *.h file to an *.inc file.Gilbert Ramirez3-7/+12
svn path=/trunk/; revision=2456
2000-09-21Make sure to pass the sent/received direction from pppdump.c inGilbert Ramirez17-53/+94
pseudo_header. Use generic "p2p_phdr" instead of "lapd_phdr". Modify toshiba.c and packet-lapd.c to take that into account. Add frame.p2p_dir, a filterable field, 0=sent, 1=recvd Make p2p_dir available in packe_info, as I think it will be needed in VJ COMP and UNCOMP dissection. Rename WTAP_ENCAP_TR to WTAP_ENCAP_TOKEN_RING. Mention pppd-log support in man page. Mention atmsnoop in README. svn path=/trunk/; revision=2455
2000-09-21In "dissect_tcp()", compute the payload length of a TCP segment and useGuy Harris1-5/+9
that value later, rather than computing it several times. svn path=/trunk/; revision=2454
2000-09-21If I ever again have to compute the sequence number of the first byteGuy Harris1-1/+12
after a TCP segment, so I can see what stuff some other segment is ACKing, I'll go crazy. Add a "Next sequence number" field to the TCP dissection, giving exactly that (well, giving exactly that unless the TCP segment is in a fragmented IP datagram, but hopefully those are rare; when we support IP fragment reassembly, we can fix that). svn path=/trunk/; revision=2453
2000-09-20Mention support for reading pppd log files.Gilbert Ramirez2-2/+8
svn path=/trunk/; revision=2452
2000-09-20Give Tethereal a "-l" flag, as tcpdump has, to make the standard outputGuy Harris2-4/+16
line-buffered. svn path=/trunk/; revision=2451
2000-09-19Oh well, get rid of the debug printf's.Gilbert Ramirez1-89/+1
svn path=/trunk/; revision=2450
2000-09-19Add pppdump.obj to win32 makefile.Gilbert Ramirez1-1/+2
svn path=/trunk/; revision=2449
2000-09-19Add support for reading pppd log files in wiretap.Gilbert Ramirez6-5/+735
svn path=/trunk/; revision=2448
2000-09-19Shomiti Surveyor 3.x appears to have changed the version number in theGuy Harris1-3/+9
file header to 4; fortunately, as they appear to put their extensions to snoop into the padding at the end of the record, all their capture files look alike to programs such as snoop and Ethereal that ignore the padding, so we can just treat version 4 just like version 2 (unless and until Brent decides a new snoop format is called for, changes the record header, and picks a version number that's the same as one used by Shomiti). svn path=/trunk/; revision=2447
2000-09-19Move the dlclose() of libsnmp_handle into the libsnmp_handle != NULLGilbert Ramirez1-2/+2
block. svn path=/trunk/; revision=2446
2000-09-17The correct way to check for an error (rather than an EOF) from a failedGuy Harris1-4/+4
attempt to read from a capture file is to check whether the error returned was 0 - if it is, it's an EOF. We no longer guarantee that the data offset supplied will be negative on an error and 0 on an EOF. svn path=/trunk/; revision=2445
2000-09-17Close the handle for the SNMP library after we're done with it - sharedGuy Harris1-7/+11
objects are reference-counted so that won't make it disappear if Ethereal is also linked with it as a shared SNMP library. svn path=/trunk/; revision=2444
2000-09-17Close the handle for the SNMP library after we're done with it - sharedGuy Harris1-1/+2
objects are reference-counted so that won't make it disappear if Ethereal is also linked with it as a shared SNMP library. svn path=/trunk/; revision=2443
2000-09-17libpcap unconditionally includes <net/if.h> on UNIX systems, as that is,Guy Harris3-9/+5
as far as I know, the only way to get IFF_UP, IFF_LOOPBACK, "struct ifreq", and "struct ifconf" defined, and those are required in order to get, via SIOCGIFCONF, the interface list, and to exclude interfaces that aren't up and handle loopback interfaces differently from other interfaces. If we're on UNIX and have libpcap, we should do the same; that way, if the system doesn't have <net/if.h> installed, the compile will fail with an "I can't find <net/if.h>" error, rather than the configure indicating that <net/if.h> can't be found, causing "util.c" not to include it, causing it to fail with complaints about IFF_UP, IFF_LOOPBACK, and various structures not being defined - the former tells you the root cause, the latter doesn't. svn path=/trunk/; revision=2442
2000-09-16Apply the patch for ECN in the IP header fromRichard Sharpe1-9/+19
Ulrich Kiermayr <kie@thp.univie.ac.at> svn path=/trunk/; revision=2441
2000-09-15Code to read capture files from some version of tcpdump from some sortGuy Harris4-110/+316
of Nokia box (firewall) - yep, it's yet *another* mutant libpcap format that didn't change the magic number, sigh.... svn path=/trunk/; revision=2440
2000-09-15Add a "-p" command-line option, and a checkbox in the "CaptureGuy Harris7-47/+179
Preferences" dialog box, to control whether to put the interface in promiscuous mode or not; Debian bug #34376 asked for this. svn path=/trunk/; revision=2439
2000-09-14Corrected startup // shutdown of windows sockets to allow name resolution to ↵Graham Bloice2-2/+18
work svn path=/trunk/; revision=2438
2000-09-14Show CWR and ECN flags in TCP. Ulrich Kiermayr <kie@thp.univie.ac.at>Gilbert Ramirez1-3/+17
svn path=/trunk/; revision=2437
2000-09-14TVBUFF_SUBSET constructor shouldn't die when cleaning up afterGilbert Ramirez1-2/+6
a thrown ReportedBoundsError. svn path=/trunk/; revision=2436
2000-09-14Move BSWAP32 definition from packet-null.c to pint.h. Add moreGilbert Ramirez2-9/+28
macros (from wiretap) to pint.h svn path=/trunk/; revision=2435
2000-09-14Change #include "wtap-int.h" to #include "wtap.h"Gilbert Ramirez1-2/+2
svn path=/trunk/; revision=2434
2000-09-14Move to version 0.8.12Gilbert Ramirez8-28/+32
svn path=/trunk/; revision=2432
2000-09-13Added to ignore Win32 detritusGraham Bloice1-0/+1
svn path=/trunk/; revision=2431
2000-09-13Updated to ignore Win32 detritusGraham Bloice5-0/+19
svn path=/trunk/; revision=2430
2000-09-13Don't put hf_text_only into the tree of filter-able protocols and fields.Gilbert Ramirez1-2/+7
svn path=/trunk/; revision=2429
2000-09-13Use another cleanup function to avoid compiler warning.Gilbert Ramirez1-3/+12
svn path=/trunk/; revision=2428
2000-09-13Throw ReportedBoundsError instead of asserting if reported_length < -1.Gilbert Ramirez3-12/+33
svn path=/trunk/; revision=2427
2000-09-13Add an item for Craig Metz's OSPF patches.Guy Harris1-0/+1
svn path=/trunk/; revision=2426
2000-09-13Changes from Craig Metz to:Guy Harris4-3/+13
decode type 7 LSAs (NSSA AS external); print the LS checksum as a four digit hexadecimal number. svn path=/trunk/; revision=2425
2000-09-12Expand on the item about G_HAVE_GINT64.Guy Harris1-1/+2
svn path=/trunk/; revision=2424
2000-09-12Add support for NetBSD DLT_PPP_SERIAL, which has the value 50, and whichGuy Harris1-1/+55
is, for now, handled as WTAP_ENCAP_PPP (although we may have to split WTAP_ENCAP_PPP into more than one type at some point). svn path=/trunk/; revision=2423
2000-09-12NULL may be defined as something such as "(void *)0", rather than justGuy Harris1-3/+3
as 0, so don't use it in a ":" operator where the other arm of the conditional is integral. svn path=/trunk/; revision=2422
2000-09-12Add a col_get_writable in case there are any deeply embeddedRichard Sharpe1-1/+14
dissectors that need to change the writable status and restore the original status. svn path=/trunk/; revision=2421
2000-09-12Oops, I left off one "-*" in the XLFD description for the font that isGuy Harris1-2/+2
6x13 on most UNIXes (frankly, I think XLFD should have been hidden very deeply in the bowels of most X toolkits, and not even exposed to most programmers, much less to users). svn path=/trunk/; revision=2420
2000-09-12Include <unistd.h> to declare "close()" and "unlink()".Guy Harris1-1/+5
svn path=/trunk/; revision=2419
2000-09-12Fix typos and give more detail on some changes.Guy Harris1-12/+15
svn path=/trunk/; revision=2418
2000-09-12It's "GSList", not "GSlist".Guy Harris1-2/+2
svn path=/trunk/; revision=2417
2000-09-12Also free the GSLists for per-frame data on frames we haven'tGuy Harris1-8/+6
re-dissected on a rescan. svn path=/trunk/; revision=2416
2000-09-12Add news for upcoming 0.8.12Gilbert Ramirez1-0/+105
svn path=/trunk/; revision=2415
2000-09-12This completes the tvbuffication of packet-bxxp.c, in that all the cruft is ↵Richard Sharpe1-33/+165
gone, I think. I also now handle a lot more of the BXXP protocol, and can handle multiple messages within a TCP segment. However, captures from the Linux loopback device confuse things awfully. svn path=/trunk/; revision=2414
2000-09-11On some UNIX platforms, you need to include <sys/types.h> to getGuy Harris1-1/+6
"u_char" defined. svn path=/trunk/; revision=2413
2000-09-11Fix the problem with resetting per-frame state info problems that thereRichard Sharpe1-8/+7
seemed to be ... svn path=/trunk/; revision=2412
2000-09-11Fix build on Win32.Gilbert Ramirez3-3/+13
svn path=/trunk/; revision=2411
2000-09-11Added #include "strutil.h"Gilbert Ramirez1-1/+2
svn path=/trunk/; revision=2410
2000-09-11Move format_text(), get_token_len(), and fine_line_end(), into strutil.cGilbert Ramirez21-214/+296
This keeps tvbuff.c generic; it doesn't have to pull in packet.h and all of it's included files. svn path=/trunk/; revision=2409
2000-09-11We have to free up the per-frame data when we rescan, because we haveRichard Sharpe2-2/+12
called packet_init_proto, which blows away the items the list points to. svn path=/trunk/; revision=2408