aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2005-07-11Dissect some more fieldsAnders Broman3-7/+240
svn path=/trunk/; revision=14896
2005-07-10Just pass &cfile to select_tcpip_session(); we don't need to passGuy Harris1-17/+16
cfile.current_frame to it separately. Note that we shouldn't ever get a "Selected packet isn't a TCP segment" error any more; we can now handle all link layers. Give a little more detail in the message shown if there's *more than one* TCP header in the packet. svn path=/trunk/; revision=14895
2005-07-10Fix some comment typos.Guy Harris1-2/+2
Don't regenerate the packet list when generating the TCP stream graph - it won't be changing; just redissect and run the tap. svn path=/trunk/; revision=14894
2005-07-10Put the data (print job contents) in LPD requests under the LPD protocolGuy Harris1-3/+3
item, rather than making it a top-level item. svn path=/trunk/; revision=14893
2005-07-10Get rid of an unused argument.Guy Harris1-5/+5
svn path=/trunk/; revision=14892
2005-07-10After doing "make maintainer-clean", "svn status --no-ignore | grep ^I"Jörg Mayer41-81/+236
returned quite a list of files. Add them to MAINTAINERCLEANFILES. Whitespace changes (replace multiple spaces by TABs, in a few cases this needed to be done at the beginning of Makefile lines. svn path=/trunk/; revision=14891
2005-07-10For packets flagged as RetransmissionRonnie Sahlberg1-0/+73
calculate RTO as the delta between the retransmitted frame and the last previous frame seen for this session (in the same direction). while this is technically not the RTO this delta is in most cases more important/useful than the tru RTO anyway since this measure represents the amount of thiime that the link went idle while waiting for an RTO. It would be nice with a statistics tap for TCP where one couls see, seeion by session : Length in time of the session. Total bytes transferred Number of retransmissions Time spent waiting for an RTO Time spent waiting for an RTO in % of the total time. svn path=/trunk/; revision=14890
2005-07-10It works reasonably well with extensive testing so here goes :Ronnie Sahlberg1-249/+304
tcp-graph has been modified to extract tcp data from a TAP instead of reading and parsing directly from the capture file. This makes tcp graph work for any type of capture and for any transport. In the future someone with access to captures with TCP over something over TCP to add a dialog where the user can specify WHICH of the multiple TCP sessions to graph. svn path=/trunk/; revision=14889
2005-07-09MSVC: fix some guint64 related compiler errorsUlf Lamping1-6/+12
strange enough, MSVC cannot convert from guint64 to float, so cast guint64 -> gint64 -> float However, even gint64 might be big enough to prevent us from an overflow :-) svn path=/trunk/; revision=14888
2005-07-09MSVC: fix some guint64 related compiler warnings, could someone please ↵Ulf Lamping2-2/+6
review my comment(s), I don't think it's currently implemented correct svn path=/trunk/; revision=14887
2005-07-09Make a bunch of items in encryption code arrays of guint8, and make someGuy Harris4-21/+21
pointers either "void *" or "guint8 *", to reduce the level of compiler warnings (the data in question is largely binary in those cases). svn path=/trunk/; revision=14886
2005-07-09Fix up a bunch of arguments to "dissect_ber_identifier()" to match itsGuy Harris19-86/+118
current signature ("class" is a "gint8 *", not a "guint8 *", and "tag" is a "gint32 *", not a "guint32 *"). Re-generate the dissectors from the ASN.1 and the .cnf files in the cases where the arguments were fixed in a .cnf file. Give some dissectors the right svn:keywords and svn:eol-style settings. svn path=/trunk/; revision=14885
2005-07-09Squelch various signed vs. unsigned warnings by:Guy Harris29-86/+80
making pointers to byte data be "guint8 *" rather than "char *", and making buffers holding byte data arrays of "guint8" rather than arrays of "char"; making pointers to text strings "char *" rather than "guchar *"; appropriately casting pointers (cast to "guint8 *" when passing to routines expecting "guint8 *" or when assigning to "guint8 *"); making port-number preferences "guint"; making enum preferences "gint"; making hf_ variables "int". Clean up white space. svn path=/trunk/; revision=14884
2005-07-09MAC addresses are arrays of bytes, not strings; make the destination MACGuy Harris1-4/+3
address an array of guint8 - that squelches some compiler warnings. Use -1 rather than tvb_length(tvb) to make the item for LWAPP go to the end of the tvbuff. svn path=/trunk/; revision=14883
2005-07-09Find the BitTorrent dissector immediately after registering it, and saveGuy Harris1-15/+16
the handle, rather than finding it every time we need it. Just make a guint8 array with the BitTorrent magic string length followed by the string, and use "tvb_memeql()" to test against that - it handles checking to make sure there's enough data in the tvbuff (if not, it returns -1 as a "no match" indication) and then checks all of the first 20 bytes in one operation. Clean up white space. svn path=/trunk/; revision=14882
2005-07-09Use "tvb_get_string()" rather than duplicating its functionality byGuy Harris1-10/+4
hand. Use "g_strdup()" rather than duplicating its functionality by hand. Make the magic number an array of "guint8", as "tvb_memeql()" expects a pointer to "guint8". svn path=/trunk/; revision=14881
2005-07-08checksum messages: use "[correct]" instead of "(correct)" and other "alike" ↵Ulf Lamping19-66/+71
messages svn path=/trunk/; revision=14880
2005-07-08Update the EDG screenshots to reflect the latest Ethereal GUI changesUlf Lamping27-1/+1
svn path=/trunk/; revision=14879
2005-07-08Add some missing IMPLICIT tags, and use FN_PARS directive.Anders Broman2-102/+1767
Add disection of some RR elements and command Handover. svn path=/trunk/; revision=14878
2005-07-08Add some missing IMPLICIT tags, and use FN_PARS directive.Anders Broman3-13/+13
svn path=/trunk/; revision=14877
2005-07-08Fix a crash reported by Jeff Morris.Michael Tüxen1-1/+2
svn path=/trunk/; revision=14876
2005-07-08Make the counters in the summary 64-bit, so they don't overflow onGuy Harris2-6/+6
Really Big Captures. svn path=/trunk/; revision=14875
2005-07-08Get rid of most unused arguments and variables (including some that areGuy Harris1-48/+32
set but not used). (Leave "pi" around so the warning acts as a reminder that the tap structure stuff needs a cleanup - currently, the tap structures aren't freed; perhaps the new memory allocation scheme proposed by Ronnie could be used for tap structures.) Have "ac_istrace()" return NOT_ACTRACE for apparently non-actrace packets and return the packet type for actrace packets, so that we don't need a global variable for the packet type. Make "actrace_udp_port" unsigned to squelch a signed vs. unsigned warning. Use "col_set_str()" rather than "col_add_str()" when setting the Protocol column. We don't recognized packets as CAS packets unless they're 48 bytes long, so we don't need to test whether they're 48 bytes long in the CAS packet dissection code. Use the reported length, not the captured length, when doing length checks. svn path=/trunk/; revision=14874
2005-07-08Make nettl file header items containing strings "gchar", to squelchGuy Harris1-5/+5
signed vs. unsigned compiler warnings. svn path=/trunk/; revision=14873
2005-07-07make the packets/bytes counters 64bit integers to not wrap when using really ↵Ronnie Sahlberg4-38/+38
large captures. setting packet counter to 64bit is overkill but makes it consistent with the very similar bytes counter. svn path=/trunk/; revision=14872
2005-07-07Make sure "which" is present before we verify our tools. Add "env" toGerald Combs4-2/+6
the list of programs to check. Make sure our python scripts start with "#!/usr/bin/env python" as recommended at http://www.python.org/doc/faq/library.html#how-do-i-make-a-python-script-executable-on-unix svn path=/trunk/; revision=14871
2005-07-07Add parlay.dll and tango.dll to the installer.Anders Broman2-0/+4
svn path=/trunk/; revision=14870
2005-07-07avoid few warnings from asn2eth compilerTomas Kukosa2-3/+1
svn path=/trunk/; revision=14869
2005-07-07Squelch a compiler pointer vs. integer warning - NULL is for pointers,Guy Harris1-1/+1
'\0' is for characters. svn path=/trunk/; revision=14868
2005-07-07Add a cast to SET_ADDRESS() to squelch GCC4 "differ in signedness"Guy Harris2-7/+3
warnings. Use SET_ADDRESS in the VOIP calls code, rather than explicitly filling in "pstn_add". svn path=/trunk/; revision=14867
2005-07-07Explicitly initialize all the elements of a voip_calls_tapinfo_t, toGuy Harris1-1/+1
squelch a compiler warning. svn path=/trunk/; revision=14866
2005-07-06Fix a spelling error.Guy Harris1-2/+2
svn path=/trunk/; revision=14865
2005-07-06more usage of #.FN_PARS directive and usage of DEFAULT_BODY parameterTomas Kukosa2-41/+41
svn path=/trunk/; revision=14864
2005-07-06- #.FN_PARS implemented for BOOLEANTomas Kukosa1-13/+12
- user defined body #.FN_BODY can be combined with default body using DEFAULT_BODY parameter (see e.g. H.225) svn path=/trunk/; revision=14863
2005-07-05Replace Chris Lydick by Robert Long as Author of the Sniffer 2.003 support patchJörg Mayer1-1/+1
svn path=/trunk/; revision=14862
2005-07-05fix *several* dissector bugs, found by private fuzz-testsUlf Lamping1-1/+43
svn path=/trunk/; revision=14861
2005-07-05new directives #.PDU_NEW and #.REGISTER_NEW creating and registering PDU ↵Tomas Kukosa1-16/+32
dissectors with new_dissector_t prototype svn path=/trunk/; revision=14860
2005-07-05Call proto_tree_add_guid_hidden() for an FT_GUID value. Fixes bugs 274,Gerald Combs3-4/+4
276, and 277. svn path=/trunk/; revision=14859
2005-07-05Don't crash if we're handed a zero-length fragment. Fixes bug 272. AlthoughGerald Combs1-2/+3
we don't crash now, we still don't handle zero-length fragments correctly. svn path=/trunk/; revision=14858
2005-07-05more usage of #.FN_PARSTomas Kukosa1-8/+5
svn path=/trunk/; revision=14857
2005-07-05- #.FN_PARS support for ENUMERATED typeTomas Kukosa1-27/+27
- cleanup unused parameters for some methods svn path=/trunk/; revision=14856
2005-07-05GUID lowercase form seems to be preferredTomas Kukosa1-1/+1
svn path=/trunk/; revision=14855
2005-07-05Add application/vnd.wv.csp.xmlAnders Broman1-0/+1
svn path=/trunk/; revision=14854
2005-07-05Add application/vnd.wv.csp.xmlAnders Broman1-0/+1
svn path=/trunk/; revision=14853
2005-07-05From Alejandro VaqueroAnders Broman5-44/+118
- avoid the clist of the calls dlg to be refreshed multiple times when first appear. - destroy the Graph window when the data is not valid anymore. - fixes an H245 packet count error - resizing the Graph windows when is displayed (up to 5 columns). With a change to leave static voip_calls_tapinfo_t the_tapinfo_struct = {0, NULL, 0, NULL, 0, 0, 0, 0, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0}; alone. svn path=/trunk/; revision=14852
2005-07-05From : David FrasconeAnders Broman1-2/+26
These minor changes fix some errors, and add some messages to the LWAPP dissector. svn path=/trunk/; revision=14851
2005-07-05From Ainsley Pereira:Anders Broman1-1/+2
If you have an RTP stream in which the first packet is duplicated, and has the marker bit set, then the RTP stream analysis will try to pad silence into a temporary file from 0 upto whatever the RTP timestamp is (which is enough to fill up my disk...). The patch fixes this misbehaviour. svn path=/trunk/; revision=14850
2005-07-04Add dissection of BSS-MAP elements and a fix to dissect Tele and Bearer ↵Anders Broman2-4/+50
service again. svn path=/trunk/; revision=14849
2005-07-04Add dissection of BSS-MAP elements and a fix to dissect Tele and Bearer ↵Anders Broman3-128/+291
service again. svn path=/trunk/; revision=14848
2005-07-04usage of FT_GUID field type in H.225 dissectorTomas Kukosa2-7/+8
svn path=/trunk/; revision=14847