aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2001-02-13Changes from Chris Jepeway toGuy Harris3-41/+111
in some places use "guint64", on plaforms where it's available, rather than floating point (we don't yet use it universally, as we'd have to provide code to do 64-bit arithmetic on platforms/compilers where 64-bit integral types aren't supported); use .838096 microseconds rather than 1 microseconds as the time stamp units for NetXRay 2.x format, as those capture files seem to use that time stamp (that's the Sniffer "PC" time stamp; perhaps when Network Associates assimilated Cinco, they changed the time stamp units). svn path=/trunk/; revision=3027
2001-02-13Updates from Neil Hunter.Guy Harris10-2225/+2501
svn path=/trunk/; revision=3026
2001-02-13Changes to correctly decode BOOTP option 82, from Greg Kilfoyle.Guy Harris3-4/+49
svn path=/trunk/; revision=3025
2001-02-12If there are multiple fields with the same name, list only one of themGuy Harris3-10/+32
in the output of "{ethereal,tethereal} -G", so that it appears only once in the documentation. Expand some comments to give more details. svn path=/trunk/; revision=3024
2001-02-12If you register more than one field with the same name, the dfilter codeGuy Harris6-217/+145
can now handle that; this allows us to register both the modulo-8 and the modulo-128 versions of various X.25 bitfields with "x.25.XXX" names, which lets us get rid of the "ex.25" protocol stuff completely and use "x.25" for both modulo-8 and modulo-128 X.25. Do so. (Also, fix up some cases where we appeared to be using the modulo-8 fields when dissecting modulo-128 X.25.) This, in turn, allows us to register the X.25 dissector, as there's now only one protocol with which it's associated, and make it static and have it called only through a handle, and to, when registering it with the "llc.dsap" dissector table, associate it with "proto_x25". That, in turn, allows us to get rid of the "CHECK_DISPLAY_AS_DATA()" calls, and the code to set "pinfo->current_proto", in the X.25 dissector. The code for the display filter expression dialog would, if there are two fields with the same name registered under a protocol, list both of them; have it list only one of them - the fields should have the same type, the same radix, and the same value_string/true_false_string table if any (if they don't, they're really not the same field...). svn path=/trunk/; revision=3023
2001-02-12Display Ethernet protocol types in hex, not decimal (that's how they'reGuy Harris1-5/+5
generally shown), and display port numbers and IP protocol numbers as unsigned. svn path=/trunk/; revision=3022
2001-02-11"Off-hoke"? What had I been smoking when I typed that?Guy Harris1-2/+2
svn path=/trunk/; revision=3021
2001-02-11Inactivate the "Decode As" menu item if the "Decode As" dialog boxGuy Harris3-15/+28
wouldn't actually offer any options to the user. Make a bunch of routines static that aren't used outside "decode_as_dlg.c". Remove the declaration of the nonexistent "decode_as_register_tcpudp()" routine. svn path=/trunk/; revision=3020
2001-02-11In an "Update list of packets in real time" capture, pass the number ofGuy Harris1-4/+27
dropped packets from the child to the parent. svn path=/trunk/; revision=3019
2001-02-11Change the protocol between the parent and child processes in an "UpdateGuy Harris1-40/+89
list of packets in real time" capture so that "!" always indicates an error, with the "!" preceded by a count of characters in the error message and followed by the text of the error, and so that those error messages can be sent after the capture has started. Use that to report capture errors, and errors writing to the capture file, while the capture is under way. Use #defines for the message type characters in that protocol. svn path=/trunk/; revision=3018
2001-02-11Report failures of "pcap_stats()", as tcpdump does.Guy Harris2-9/+27
Print the "Capturing on <interface>" message, the running count of packets captured, and error messages to the standard error in Tethereal, so that you can pipe the output of a live capture that's printing packets to a program or script without that script having to worry about parsing stuff other than dissected packet summaries or details (tcpdump does the same). svn path=/trunk/; revision=3017
2001-02-11In Ethereal, attempt to get the packet statistics from libpcap whenGuy Harris10-45/+113
capturing; if we succeed, display the packet drops count as the "Drops" value in the status line and as the "Dropped packets" statistics in the summary dialog box, otherwise don't display it at all. In Tethereal, attempt to get the packet statistics from libpcap when capturing; if we succeed, and if there were any dropped packets, print out the count of dropped packets when the capture finishes. svn path=/trunk/; revision=3016
2001-02-11Make boolean equality/inequality tests smarter; they don't testGilbert Ramirez1-7/+34
for exact value matches, but just that the two values are either zero or non-zero. svn path=/trunk/; revision=3015
2001-02-11Add rule for dftest.exeGilbert Ramirez1-1/+18
svn path=/trunk/; revision=3014
2001-02-11Remove unused variable and add copyright and RCS ID.Gilbert Ramirez1-2/+23
svn path=/trunk/; revision=3013
2001-02-10Updates from Alexandre P. Ferreira.Guy Harris1-66/+132
svn path=/trunk/; revision=3012
2001-02-10Check for errors when writing a capture file.Guy Harris3-39/+167
Report errors when writing or closing a capture file. Clean up some I/O error messages. svn path=/trunk/; revision=3011
2001-02-09Further NFSV4 updates from Mike Frisch.Guy Harris1-331/+815
svn path=/trunk/; revision=3010
2001-02-09When dissecting an indirect call reply, if either there's an old-styleGuy Harris1-2/+2
or new-style dissector for the reply, we can dissect the reply; there doesn't have to be a new-style dissector. svn path=/trunk/; revision=3009
2001-02-09For indirect RPC calls, remember the call information, and add aGuy Harris3-26/+247
dissector for indirect replies that looks up the call. Use them in the portmapper/RPCBIND dissector. svn path=/trunk/; revision=3008
2001-02-09Make a "dissect_rpc_indir_call()" routine to dissect arguments to aGuy Harris3-70/+100
specified program/version/procedure, and a "rpc_proc_name()" routine to return the name of a specified program/version/procedure, and make the callit dissector use those, rather than doing the work itself. Un-export various routines and declarations that can again be private to the RPC dissector. svn path=/trunk/; revision=3007
2001-02-09Add "TFTP_" before the packet type names, to avoid compiler warnings onGuy Harris1-20/+20
Windows where ERROR is #defined by some header file that gets included by "packet-tftp.c". svn path=/trunk/; revision=3006
2001-02-09Change to include Service ID field in dissection of Service InfoGuy Harris3-2/+15
component of WCCP 2 messages even if the service type is WCCP2_SERVICE_DYNAMIC, from Simharajan Srishylam. svn path=/trunk/; revision=3005
2001-02-08On at least one capture, the PIM checksum appears to be correct, soGuy Harris1-16/+52
add code to check it - I've no idea what's going on with the other captures where it's not correct, but those captures have a different (and apparently incorrect) checksum for packets with the *exact same contents* (other than the checksum) as the PIM packet in the capture where the checksum is correct, so perhaps those packets actually had bad checksums. svn path=/trunk/; revision=3004
2001-02-08Don't fetch any of the fields past the BPDU type if the BPDU type isn'tGuy Harris1-7/+18
0; topology change notification frames don't *have* anything past the BPDU type to fetch. svn path=/trunk/; revision=3003
2001-02-08Pull a lot of common code for handling 802.3 frames (i.e., frames with aGuy Harris6-144/+203
length field rather than an Ethernet type field) into a "dissect_802_3()" routine. In that routine, catch exceptions thrown by the IPX or LLC dissector or dissectors under them, so that the trailer information is added to the tree even if an exception is thrown (similar to what "ethertype()" does). svn path=/trunk/; revision=3002
2001-02-08In "call_dissector()", if the protocol for the dissector referred to byGuy Harris1-1/+2
the handle has been disabled, return after calling "dissect_data()", rather than driving on and calling the dissector anyway. svn path=/trunk/; revision=3001
2001-02-08Set the Protocol column, and clear the Info column, before we startGuy Harris1-8/+11
fetching anything from the packet, so that if an exception is thrown those columns don't show something from the previous protocol. Don't fetch the protocol identifier or protocol version identifier before you use them. svn path=/trunk/; revision=3000
2001-02-08If we failed to open a capture file specified by the "-r" flag, don'tGuy Harris1-2/+3
attempt to free the read filter if we don't have a read filter. svn path=/trunk/; revision=2999
2001-02-07Updates from Mike Frisch.Guy Harris1-126/+238
svn path=/trunk/; revision=2998
2001-02-07Add in the various payload type definitions from RFC 1890.Guy Harris1-17/+46
svn path=/trunk/; revision=2997
2001-02-06The "short name" and "filter name" were reversed; put them in the rightGuy Harris1-2/+2
order. svn path=/trunk/; revision=2996
2001-02-06Add support for dissecting V3 CALLIT and V4 BCAST/INDIRECT calls.Guy Harris1-4/+4
svn path=/trunk/; revision=2995
2001-02-06Tvbuffify the portmap/rpcbind dissector, and implement part of CALLITGuy Harris3-136/+201
dissection (dissection of V2 CALLIT calls; no V3/V4 stuff or reply handling yet). svn path=/trunk/; revision=2994
2001-02-05Fix up some MSVC complaints about (narrowing) type conversions byGuy Harris5-10/+10
widening formal arguments or narrowing variables passed as actual arguments. svn path=/trunk/; revision=2993
2001-02-05Maximum frame size values in the second byte of the routing controlGuy Harris1-9/+10
information aren't shifted right 4 bytes when put into the protocol tree; shift left by 4 bytes the values in the value_string table for them. A value of 7 means 65535 bytes. svn path=/trunk/; revision=2992
2001-02-04Add a "-f" flag to the "rm", so that "make clean" won't get an errorGuy Harris1-1/+1
(and cause a higher-level "make clean" to stop) if any of the files to be removed aren't there. svn path=/trunk/; revision=2991
2001-02-04Pass the correct tvbuff from the Vines Fragmentation Protocol dissectorGuy Harris1-2/+2
to the Vines IP dissector. svn path=/trunk/; revision=2990
2001-02-04L3PIDs are Ethertypes; display them as such.Guy Harris1-14/+16
Use "decode_boolean_bitfield()" to dissect flag bits. svn path=/trunk/; revision=2989
2001-02-04Add support for replies to NLMv3 SHARE and UNSHARE requests and to theGuy Harris1-14/+56
remaining NLMv4 requests. svn path=/trunk/; revision=2988
2001-02-04Tvbuffify the RSVP dissector.Guy Harris3-934/+715
Display the message checksum, and check it if possible. Fix some IPv6 entries to be 16 bytes long, not 4 bytes long. Make the routine to fetch an IEEE floating point number and turn it into a "long" take a tvbuff pointer and offset rather than a pointer to data. svn path=/trunk/; revision=2987
2001-02-03As pointed out by Aaron C. Springer (and according to RFC 1827), it'sGerald Combs1-2/+2
"Encapsulating Security Payload," and not "Encapsulated Security Payload." svn path=/trunk/; revision=2986
2001-02-03Tvbuffify the Oracle TNS dissector.Guy Harris1-82/+72
svn path=/trunk/; revision=2985
2001-02-03Use "pinfo", not "pi", to get packet info.Guy Harris1-4/+4
svn path=/trunk/; revision=2984
2001-02-03Tvbuffify the IRC dissector.Guy Harris1-54/+51
svn path=/trunk/; revision=2983
2001-02-03Use "dfilter_apply_edt()" rather than "dfilter_apply()".Guy Harris1-10/+7
svn path=/trunk/; revision=2982
2001-02-03Increment the line number for every line seen.Guy Harris1-12/+11
Fix the handling of one error case. svn path=/trunk/; revision=2981
2001-02-03Allow filter names and expressions of arbitrary length, and, in theGuy Harris1-30/+170
filter files, escape quotes and backslashes so that quotes and backslashes in filter names work. svn path=/trunk/; revision=2980
2001-02-02Add Makefile.nmake files for new subdirs.Gilbert Ramirez10-24/+144
Add them to EXTRA_DIST in corresponding Makefile.am's so that they get packaged with the distribution. svn path=/trunk/; revision=2979
2001-02-01Catch any exception thrown by accessing the tvbuff.Gilbert Ramirez1-3/+10
svn path=/trunk/; revision=2978