aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2001-12-03Make "dissector_add()", "dissector_delete()", and "dissector_change()"Guy Harris158-790/+1169
take a dissector handle as an argument, rather than a pointer to a dissector function and a protocol ID. Associate dissector handles with dissector table entries. svn path=/trunk/; revision=4308
2001-12-03Get rid of an unused variable, and fix a comment.Guy Harris1-3/+2
svn path=/trunk/; revision=4307
2001-12-03As you set a conversation dissector by supplying a dissector handleGuy Harris5-24/+20
rather than a function pointer, "dissect_wtp_fromudp()" no longer needs to be global; make it static, register it by name, and have the WSP dissector get the handle by calling "find_dissector()" rather than by constructing its own handle for it. Fix up some attributions. svn path=/trunk/; revision=4306
2001-12-03Rename another routine to get rid of an unnecessary "1" in its name.Guy Harris1-3/+3
svn path=/trunk/; revision=4305
2001-12-03Don't bother saving or restoring "can_desegment" until you actually callGuy Harris1-13/+14
a subdissector. svn path=/trunk/; revision=4304
2001-12-03Rename and re-comment some routines to make it clearer what they do.Guy Harris1-18/+27
svn path=/trunk/; revision=4303
2001-12-02Add a new header file for X.264 transport protocol IDs.Guy Harris3-12/+54
Handle ISO 8602 as a protocol ID on top of X.25. svn path=/trunk/; revision=4302
2001-12-02From John McDermott:Guy Harris3-105/+99
Adds an "Add Expression..." button to the color filter creation dialog. Improve the look of the "Add color to protocols" window. Clean up some ugly code. Give John credit in the AUTHORS file for the coloring stuff. svn path=/trunk/; revision=4301
2001-12-02An NLPID of 1 means T.70 when used as an X.263/ISO 9577 initial protocolGuy Harris6-137/+303
identifier, but means X.29 when used as an X.263/ISO 9577 secondary protocol identifier. Add support for the IPv6 NLPID, and Ethernet type, in more places. Fix up the handling of the user data of a CALL REQUEST packet to more correctly distinguish between user data containing an NLPID and user data containing an X.264/ISO 11570 UN TPDU. If it's an NLPID, use "nlpid_vals" to show its value. Put that user data in a subtree. Create a new "x.25.spi" dissector table, for protocols running atop X.25, rather than having a built-in switch statement, so that other protocols can register themselves by NLPID. svn path=/trunk/; revision=4300
2001-11-30Add support for LocalTalk Link Access Protocol.Guy Harris7-14/+186
Rename WTAP_ENCAP_PRISM to WTAP_ENCAP_PRISM_HEADER, to match DLT_PRISM_HEADER. Add in missing capture support for WTAP_ENCAP_PRISM_HEADER when capturing with "pcap_open_live()" rather than reading the capture from a pipe. svn path=/trunk/; revision=4299
2001-11-30Make "fr_subdissector_table" static - it's not used outside the FrameGuy Harris2-7/+3
Relay dissector. svn path=/trunk/; revision=4298
2001-11-29Add support for OSI CLNP over GRE, as per mail from Mrmcsnoots@aol.com.Guy Harris1-1/+2
svn path=/trunk/; revision=4297
2001-11-29Update from Ronnie Sahlberg:Guy Harris5-14/+65
1. Changes how can_desegment works so that can_desegment is only != 0 for whichever dissector is running immediately on top of whoever offers the can_desegment service. Thus DCERPC needs no special handling to see if it can trust can_desegment (which is currently only available ontop of TCP and not ontop of tcp->nbss->smb). 2. Changes fragment reassembly of transaction smb to only show the defragmented packet for the transaction smb holding the first fragment. To see why, test it with a transaction SMB containing a ~60kb PDU or larger. The old behaviour had approximately quadratic behaviour regarding runtime for dissecting such PDUs. (example: NetShareEnum is a command which can grow really really large if the number of shares and comments are large) svn path=/trunk/; revision=4296
2001-11-29When processing a response, check whether "si->sip" is null before usingGuy Harris1-3/+3
it; it'll be null if the matching request hasn't been seen. svn path=/trunk/; revision=4295
2001-11-28Squelch compiler warnings.Guy Harris1-2/+2
svn path=/trunk/; revision=4294
2001-11-28From Ronnie Sahlberg: track FID values between requesta and responsesGuy Harris1-6/+35
for ReadAndX and WriteAndX. svn path=/trunk/; revision=4293
2001-11-28If a request has already been processed, and we fail to find itsGuy Harris4-144/+123
"smb_saved_info_t" in the table of requests whose replies have been found, don't look it up in the table of requests whose replies have not been found - if the request in question has no reply in the capture, that may find some later frame in the same conversation with the same MID, and we don't need that information anyway - the only reason we *need* that structure is to save information in it for use when processing its reply, and we already did that the first time we processed the request. (The information for the later frame may be bad, e.g. having a null "extra_info" pointer, or having one that points to information for another request.) Arrange that we don't use the pointer to the "smb_saved_info_t" when processing a request except to save information if the request hasn't already been processed, as that pointer may not be valid if the request has already been processed, as per the above. svn path=/trunk/; revision=4292
2001-11-28Updates to transaction reassembly, from Ronnie Sahlberg.Guy Harris3-237/+239
Add some checks for null tvbuff arguments. When dissecting transaction setup, parameters, and data when we couldn't dissect it as a pipe or mailslot transaction, use the reported length of the supplied tvbuff, not the actual length, as the amount of data present. svn path=/trunk/; revision=4291
2001-11-28Support for 802.11+Prism II monitor-mode link-layer headers, fromGuy Harris11-9/+277
Tim Newsham. Add in missing item for WTAP_ENCAP_CISCO_IOS in the Wiretap encapsulation type table. svn path=/trunk/; revision=4290
2001-11-28OSPFv3 checksum fix, from Taisuke Sasaki.Guy Harris3-19/+55
svn path=/trunk/; revision=4289
2001-11-27Add { 0, NULL } terminators to some "value_string" arrays lacking them.Guy Harris4-11/+21
Make some static that don't need to be exported. svn path=/trunk/; revision=4288
2001-11-27When returning the length of the DCE RPC PDU, add 4 if the packet wasGuy Harris1-5/+13
preceded by 4 bytes of zero padding. svn path=/trunk/; revision=4287
2001-11-27Rename the heuristic dissector table "msrpc" to "smb_transact", toGuy Harris2-7/+7
indicate that it's to be used for SMB transactions; a different table, using different dissectors, would be needed for, say, reads and writes over a named pipe, as those are byte streams and SMB transactions are packets, so the dissectors for the first one need to worry about multiple PDUs per segment and desegmentation, while the dissectors for the second one don't - and, in fact, can't do desegmentation stuff. svn path=/trunk/; revision=4286
2001-11-27From Todd Sabin:Guy Harris6-56/+383
o Modifies the dcerpc handoff to subdissectors slightly. It also needs to pass the data representation to the subdissector. Also, if no subdissector is found, it puts a "Stub data" entry in the tree. o Adds optional TCP desegmentation to the dcerpc layer. Note that dcerpc has it's own ability to fragment PDUs. This isn't for dealing with that, but with the case of a single PDU being broken over more than one TCP segment. o Adds a little bit of dissection to packet-dcerpc-epm.c. Mainly just proof of concept for the dcerpc handoff stuff. (Writing this is how I realized the need for the drep.) o Adds packet-dcerpc-ndr.c, which will contain NDR dissection routines for use by subdissectors. Also, support added for multiple PDUs per segment for DCERPC-over-TCP (and, potentially, other byte-stream transports). svn path=/trunk/; revision=4285
2001-11-27Thou shalt not use C++-style comments in C code, for they upset some CGuy Harris3-6/+6
compilers. svn path=/trunk/; revision=4284
2001-11-27Get rid of some code to set "pinfo->current_proto"; let the EtherealGuy Harris3-11/+5
infrastructure do it for the dissectors. Make some WCP dissector routines static. svn path=/trunk/; revision=4283
2001-11-27Reflect the change to "conversation_set_dissector()" to take a dissectorGuy Harris1-9/+34
handle as an argument. svn path=/trunk/; revision=4282
2001-11-27Change "conversation_set_dissector()" to take a dissector handle, ratherGuy Harris26-177/+150
than a pointer to a dissector function, as an argument. This means that the conversation dissector is called through "call_dissector()", so the dissector itself doesn't have to worry about checking whether the protocol is enabled or setting "pinfo->current_proto", so get rid of the code that does that in conversation dissectors. Also, make the conversation dissectors static. Get rid of some direct calls to dissectors; replace them with calls through handles, and, again, get rid of code to check whether a protocol is enabled and set "pinfo->current_proto" where that code isn't needed. Make those dissectors static if they aren't already static. Add a routine "create_dissector_handle()" to create a dissector handle without registering it by name, if the dissector isn't used outside the module in which it's defined. svn path=/trunk/; revision=4281
2001-11-27Remove an extra blank from a data source name.Guy Harris1-2/+10
Added comments, from Ronnie Sahlberg. svn path=/trunk/; revision=4280
2001-11-27Fixes from Ronnie Sahlberg for fragmented transactions - handle nullGuy Harris1-11/+22
tvbuff pointers. svn path=/trunk/; revision=4279
2001-11-27Clarify what the tvbuff handed to a dissector contains (i.e., it's notGuy Harris1-6/+8
the raw frame data, it's the data that the dissector should look at). svn path=/trunk/; revision=4278
2001-11-27Note that LDP is documented in RFC 3036.Guy Harris1-2/+2
svn path=/trunk/; revision=4277
2001-11-27Handle the case of multiple LDP PDUs per TCP segment. (Still needs toGuy Harris1-31/+87
handle the case of more than one TCP segment per LDP PDU....) Fix the handling of some of the length fields. svn path=/trunk/; revision=4276
2001-11-27WCCP capability info dissection bug fix, from Raghu Angadi.Guy Harris3-4/+9
svn path=/trunk/; revision=4275
2001-11-26In "smb_trans_defragment()", quit if "si->sip" is null, as it means weGuy Harris1-1/+12
don't have the frame number of the request, which we use as the ID of the transaction being reassembled. (If we're reassembling a reply, should we not use the frame number of the reply instead? We used to have a hash table to keep track of that, so we might just be able to bring it back....) svn path=/trunk/; revision=4274
2001-11-26Add some comments.Guy Harris1-1/+12
svn path=/trunk/; revision=4273
2001-11-26From Ronnie Sahlberg: reassemble transaction data if transactionGuy Harris1-29/+151
continuations are seen. svn path=/trunk/; revision=4272
2001-11-26This should be the final bit of removing the dissect_data symbolEd Warnicke8-37/+17
from being required by anyone other than packet-data.c. It can now be accessed with call_dissector() with the name "data". dissect_data is now also of dissect_t. svn path=/trunk/; revision=4271
2001-11-26Switched from using CHECK_DISPLAY_AS_DATA to using CHECK_DISPLAY_AS_XEd Warnicke12-24/+41
which also takes a handle as an argument and thus doesn't call dissect_data directly. svn path=/trunk/; revision=4270
2001-11-26Moved from using dissect_data() to using call_dissector()Ed Warnicke38-118/+253
svn path=/trunk/; revision=4269
2001-11-26Added a proto_reg_handoff_frame() function and switched fromEd Warnicke1-2/+9
using dissect_data() to using call_dissector() svn path=/trunk/; revision=4268
2001-11-26Clean up the stuff that creates the pipe protocol subtree; it shouldn'tGuy Harris1-14/+17
fetch the length of "sp_tvb" if "sp_tvb" is null. Fix some comments. svn path=/trunk/; revision=4267
2001-11-26Moved from using dissect_data to using call_dissector()Ed Warnicke6-17/+31
svn path=/trunk/; revision=4266
2001-11-25From Ronnie Sahlberg: fix a check for a null tvbuff pointer to check theGuy Harris1-2/+2
correct pointer. svn path=/trunk/; revision=4265
2001-11-25Moved from using dissect_data to using call_dissector()Ed Warnicke12-41/+69
svn path=/trunk/; revision=4264
2001-11-25Switched from calling dissect_data to using call_dissectorEd Warnicke10-25/+46
svn path=/trunk/; revision=4263
2001-11-25Added hooks to be able to call dissect_data as via a handle.Ed Warnicke1-1/+9
svn path=/trunk/; revision=4262
2001-11-25Remove a duplicate entry from the SAP table, and move an entry in thatGuy Harris1-3/+2
table to the proper sorted location. svn path=/trunk/; revision=4261
2001-11-25Throw in a large pile of additional SAP values.Guy Harris1-43/+223
svn path=/trunk/; revision=4260
2001-11-24Finish removing the pointer to the no-longer-extant global "packet_info"Guy Harris2-5/+2
structure "pi" from the plugin API. svn path=/trunk/; revision=4259
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-10 01:46:43 +0000