aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-04-02Add a new README.developer file for wiretap; it's currently just someGuy Harris2-3/+71
stuff I sent out in a mail message to somebody asking how to add support for a new file format, but hopefully it'll get improved by various contributors over time (hint hint). svn path=/trunk/; revision=7397
2003-04-02We don't use snprintf, so we don't need to include snprintf.h.Guy Harris1-5/+1
svn path=/trunk/; revision=7396
2003-04-02"proto_tree_add_text()" takes printf-style arguments; there's no need toGuy Harris2-16/+10
use snprintf to format a string into a buffer and then supply that string to "proto_tree_add_text()". svn path=/trunk/; revision=7395
2003-04-02Add support for WAN Hello packets.Guy Harris1-21/+96
svn path=/trunk/; revision=7394
2003-04-01From Eric Perie: update to the name for EAP type 15, and some additionalGuy Harris3-2/+13
EAP types. svn path=/trunk/; revision=7393
2003-04-01From Solomon Peachy: add support for the latest stuff defined in theGuy Harris1-3/+15
draft 7.1 of 802.11g, plus a few response codes defined in 802.11b. svn path=/trunk/; revision=7392
2003-04-01From Mike Frisch: NFS_ACL support.Guy Harris4-39/+358
svn path=/trunk/; revision=7391
2003-03-31Add support for Level 1 Hello packets.Guy Harris1-64/+263
Fix a typo. svn path=/trunk/; revision=7390
2003-03-31Fix a typo.Guy Harris1-2/+2
svn path=/trunk/; revision=7389
2003-03-31The units, in non-whizzo-gigabit-pod captures, for hdr.timeunit = 2Guy Harris1-11/+21
aren't 1/1193000.0 second; the code used to use 1/1193180.0 second, but at least one capture appears to have units of somewhere around 1/3579540.0 second. svn path=/trunk/; revision=7388
2003-03-31Add dissector for NetWare Link Services Protocol.Guy Harris5-8/+1409
Socket 0x9001 is for NLSP - it supports LANs as well as WANs, at least as I read the specification. Socket 0x9004 is for "IPX WAN 2". svn path=/trunk/; revision=7387
2003-03-31Don't use hardwired offsets when dissecting the ISIS header - we'reGuy Harris1-8/+8
already advancing "offset" through the header, so use it. svn path=/trunk/; revision=7386
2003-03-31Have separate subtree ett_ values for CLVs with LSP entries and for theGuy Harris1-28/+33
LSP entries themselves. The length and structure of an LSP entry isn't fixed, it depends on the ID length. svn path=/trunk/; revision=7385
2003-03-31The "attached_string" doesn't apply to the attachments, so call itGuy Harris1-4/+4
"supported_string", instead, as it is used to indicate whether partition repair is supported. Fix a typo. svn path=/trunk/; revision=7384
2003-03-31Do the same for dissect_ndr_char_cvstring.Guy Harris1-2/+5
svn path=/trunk/; revision=7383
2003-03-30From Didier Gautheron: bug fix plus a new command decoded.Guy Harris1-17/+68
svn path=/trunk/; revision=7382
2003-03-30From Hannes Gredler:Guy Harris1-40/+163
- TLV 135 cleanup and support for subTLVs - a common IP Reach subTLV dissector which dissects subTLV 1 & 2 [32 & 64 Bit Admin Tags as per draft-ietf-isis-admin-tags-01.txt] - rework IPv6-related TLVs. svn path=/trunk/; revision=7381
2003-03-28Ian Schorr discovered that, for gigabit pod captures, if hdr.timeunit isGuy Harris1-23/+31
2 the time stamps are in units of 1/31250000 seconds rather than nanoseconds - and, by generating Windows Sniffer captures with various hdr.timeunit values, that for all the non-zero values he tested, the time stamps for non-gigabit pod captures are in units of 1/1193000 second. Instead of having a TpS array, just test for the exception value (0 for non-gigabit pod captures, 2 for gigabit pod captures). svn path=/trunk/; revision=7380
2003-03-27Use FT_FRAMENUM for the "Duplicate to the ACK in frame" and "This is anGuy Harris1-3/+3
ACK to the segment in frame" fields, so you can use the "Go To Corresponding Frame" menu item. svn path=/trunk/; revision=7379
2003-03-27From Laurent Rabret: fix bugs in ISIS LSP analyses, addi type blockGuy Harris3-50/+107
filters and display the type block byte in a more standard way (bit fields). svn path=/trunk/; revision=7378
2003-03-27From Olivier Biot: fix quotation of attibute values for the WAPGuy Harris1-50/+50
Provisioning DTD representation. svn path=/trunk/; revision=7377
2003-03-27From Olivier Biot:Guy Harris1-78/+127
* Fix the Extended Method PDU mapping (move code some lines down) * Decode more WSP Parameter entries (now WAP Provisioning Push OK) * First check whether the PDU content for Post, Reply and Push PDUs can be dissected (dissector_try_X function calls), if not then display the PDU data as "Data" in the WSP protocol tree. * Replaced "Unsupported header" by "Undecoded header" for clarity svn path=/trunk/; revision=7376
2003-03-27Enhancement to TCP Sequence AnalysisRonnie Sahlberg1-5/+27
Duplicate ACKs that are detected/suspected are now also flagged with which frame the original ACK was seen in and the dup ack number. This is displayed both in the summary pane as well as in the tree pane. svn path=/trunk/; revision=7375
2003-03-26Use "gboolean" for Boolean variables.Guy Harris1-10/+35
Allocate the per-conversation and per-frame data items from a GMemChunk (which saves memory and CPU time, *and* lets us free all those items quickly - as opposed to not freeing them at all, as had been the case). Don't assume that, just because a conversation for the TCP connection exists, it necessarily has an AJP13 data chunk attached to it; the conversation might have, for example, been created by the TCP sequence number analysis code. svn path=/trunk/; revision=7374
2003-03-26From Graham Bloice: make the RC_VERSION variable in config.nmakeGuy Harris2-8/+8
comma-separated, so that the resources will be built correctly and the version number correctly displayed in the GUI, and make the resources dependent on "config.nmake" so that they're rebuilt if it's changed. svn path=/trunk/; revision=7373
2003-03-26From Olivier Biot: add WSP protocol dissection for extended method PDUs,Guy Harris1-3/+41
and let the Protocol Options header code page and extended methods calls refer to hexadecimal representation as used everywhere else in the WSP dissection code. svn path=/trunk/; revision=7372
2003-03-26Fixed a small bug in tcp sequence number analysis.Ronnie Sahlberg1-7/+9
FIN flag would previously only add one to the sequence number if the FIN packet was empty, i.e. did not carry any payload data. This caused ethereal to incorrectly flag the ACK to such packets (FIN+payload data) to be incorrectly flagged as ACK to previously lost segment. Change the algorithm to always add 1 to the segment length, and thus the sequence number for all packets with teh FIN bit set. svn path=/trunk/; revision=7371
2003-03-26Put in a comment about the "to what code does the configuration fileGuy Harris1-1/+22
directory belong" issue. svn path=/trunk/; revision=7370
2003-03-25Fix up a comment.Guy Harris1-2/+2
svn path=/trunk/; revision=7369
2003-03-25Use "datafiledir" rather than "DATAFILE_DIR" as the name of the variableGuy Harris1-6/+5
in the configure script for the all-variables-expanded version of the data file directory. Don't AC_SUBST "DATAFILE_DIR", as it's not used. Define DATAFILE_DIR in config.h as the all-variables-expanded version of $datadir/ethereal, as that's where the global configuration files such as manuf and the Diameter files are actually installed. svn path=/trunk/; revision=7368
2003-03-25DATAFILE_DIR in the top-level config.h isn't used; don't bother definingGuy Harris1-10/+1
it. (Nothing other than "get_datafile_dir()" should use it - anything that needs to know whether the configuration files are located should use "get_datafile_dir()".) svn path=/trunk/; revision=7367
2003-03-25There's no need to define "etherealconfdir" - we can just useGuy Harris1-6/+5
"pkgdatadir". svn path=/trunk/; revision=7366
2003-03-25From Brad Hards: ACAP support.Guy Harris4-2/+187
svn path=/trunk/; revision=7365
2003-03-25Non-void functions must always return a value; the SID snooping tapGuy Harris1-1/+2
listener isn't a GUI tap, so it should always return 0. svn path=/trunk/; revision=7364
2003-03-25Update FAQ to 2003-03-20Jörg Mayer2-293/+401
svn path=/trunk/; revision=7363
2003-03-25Added SMB option : sid_name_snooping.Ronnie Sahlberg6-6/+289
This feature, when enabled through Edit/preferences/protocols/smb, will look at certain SMB and CIFS related protocols to discover the mapping between SIDs and their Names. For those SIDs whose name has been snooped/discovered ethereal will also add "(<name>)" to the end of the SID when printed in the tree pane through the function dissect_nt_sid(). Currently the feature is not too exciting since the only thing that packet-smb-sidsnooping.c will look at to build this mapping table is replies to the LSA/QueryInfoPolicy infolevel 3 packets and thus discover mappings between a Domain SID and a Domain Name. In the near future this future will be enhanced to also look at more interesting calls such as LSA/LookupSIDs2 and similar. svn path=/trunk/; revision=7362
2003-03-25AIX's BPF, and thus its tcpdump, appears to use 24 as the link-layerGuy Harris2-5/+31
type for loopback devices; map it to DLT_NULL when reading libpcap files with a major version of 2 and a minor version of 2, and when capturing from an "loN" device on AIX. svn path=/trunk/; revision=7361
2003-03-24Fix up the parsing of browser rest messages.Richard Sharpe1-7/+47
svn path=/trunk/; revision=7360
2003-03-23Add support for decoding Intel ANS probes. Thanks go to Intel for providingGerald Combs3-2/+157
protocol information. svn path=/trunk/; revision=7359
2003-03-21From Jeff Morriss fix:Guy Harris1-52/+60
- endianism issues in most multi-octet parameters - the size of pointers to variable and optional parameters in the LUDT and LUDTS messages (ITU only) svn path=/trunk/; revision=7358
2003-03-21Add support for the missing ResetBrowserState announcement inRichard Sharpe1-1/+23
packet-smb-browse.c svn path=/trunk/; revision=7357
2003-03-17change dissect_ndr_wchar_cvstring so that it uses the hf_index the dissector ↵Ronnie Sahlberg1-2/+5
has passed to it and not the generic dcerpc_character_buffer. we need this to be able to filter for various dcerpc related strings such as lsa.domain svn path=/trunk/; revision=7356
2003-03-17Turn SIDs into FT_STRING fields so that we can filter for them usingRonnie Sahlberg1-24/+40
display filters. svn path=/trunk/; revision=7355
2003-03-17Rename hf_smb_sid to the more appropriate hf_smb_search_idRonnie Sahlberg1-8/+8
since we will need hf_smb_sid for the SID string later svn path=/trunk/; revision=7354
2003-03-14From Devin Heitmueller: for packets with an unknown family ID, displayGuy Harris1-2/+2
the family ID in hex in the summary line. svn path=/trunk/; revision=7353
2003-03-14Make sure that we display all the file attributes ...Richard Sharpe1-3/+21
svn path=/trunk/; revision=7352
2003-03-13From Tomas Kukosa - allow a preference name to begin with the stringGuy Harris1-2/+3
that's the name of the module, as long as the prefix doesn't end with "." or "_" (so you can register "tc.tcp.port" or "tc.tcp_port", but not "tc.tc.port" or "tc.tc_port"). svn path=/trunk/; revision=7351
2003-03-12When fixing up old preferences, check the module for the currentGuy Harris1-19/+19
preference by comparing "module->name" against the module, not by checking the first part of the preference name - the preference name might not contain the correct module name, as we've mapped some modules. svn path=/trunk/; revision=7350
2003-03-12From Todd Montgomery: Bring PGM up to date with RFC 3208:Gerald Combs3-6/+479
- checksum checks for all packets (like UDP, IP, TCP, etc.) - this includes adding an option to turn off checking it in the preferences menu (like TCP does). - POLL packets - POLR packets - added PGM options: - OPT_FRAGMENT - OPT_REDIRECT - OPT_NAK_BO_IVL - OPT_NAK_BO_RNG - fixed a minor offset error in SPMs svn path=/trunk/; revision=7349
2003-03-12From Lars Roland: printf fix.Guy Harris1-3/+3
svn path=/trunk/; revision=7348
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-28 10:38:22 +0000