Age | Commit message (Collapse) | Author | Files | Lines |
|
in some places use "guint64", on plaforms where it's available,
rather than floating point (we don't yet use it universally, as
we'd have to provide code to do 64-bit arithmetic on
platforms/compilers where 64-bit integral types aren't
supported);
use .838096 microseconds rather than 1 microseconds as the time
stamp units for NetXRay 2.x format, as those capture files seem
to use that time stamp (that's the Sniffer "PC" time stamp;
perhaps when Network Associates assimilated Cinco, they changed
the time stamp units).
svn path=/trunk/; revision=3027
|
|
svn path=/trunk/; revision=3026
|
|
svn path=/trunk/; revision=3025
|
|
in the output of "{ethereal,tethereal} -G", so that it appears only once
in the documentation.
Expand some comments to give more details.
svn path=/trunk/; revision=3024
|
|
can now handle that; this allows us to register both the modulo-8 and
the modulo-128 versions of various X.25 bitfields with "x.25.XXX" names,
which lets us get rid of the "ex.25" protocol stuff completely and use
"x.25" for both modulo-8 and modulo-128 X.25. Do so. (Also, fix up
some cases where we appeared to be using the modulo-8 fields when
dissecting modulo-128 X.25.)
This, in turn, allows us to register the X.25 dissector, as there's now
only one protocol with which it's associated, and make it static and
have it called only through a handle, and to, when registering it with
the "llc.dsap" dissector table, associate it with "proto_x25".
That, in turn, allows us to get rid of the "CHECK_DISPLAY_AS_DATA()"
calls, and the code to set "pinfo->current_proto", in the X.25
dissector.
The code for the display filter expression dialog would, if there are
two fields with the same name registered under a protocol, list both of
them; have it list only one of them - the fields should have the same
type, the same radix, and the same value_string/true_false_string table
if any (if they don't, they're really not the same field...).
svn path=/trunk/; revision=3023
|
|
generally shown), and display port numbers and IP protocol numbers as
unsigned.
svn path=/trunk/; revision=3022
|
|
svn path=/trunk/; revision=3021
|
|
wouldn't actually offer any options to the user.
Make a bunch of routines static that aren't used outside
"decode_as_dlg.c".
Remove the declaration of the nonexistent "decode_as_register_tcpudp()"
routine.
svn path=/trunk/; revision=3020
|
|
dropped packets from the child to the parent.
svn path=/trunk/; revision=3019
|
|
list of packets in real time" capture so that "!" always indicates an
error, with the "!" preceded by a count of characters in the error
message and followed by the text of the error, and so that those error
messages can be sent after the capture has started.
Use that to report capture errors, and errors writing to the capture
file, while the capture is under way.
Use #defines for the message type characters in that protocol.
svn path=/trunk/; revision=3018
|
|
Print the "Capturing on <interface>" message, the running count of
packets captured, and error messages to the standard error in Tethereal,
so that you can pipe the output of a live capture that's printing
packets to a program or script without that script having to worry about
parsing stuff other than dissected packet summaries or details (tcpdump
does the same).
svn path=/trunk/; revision=3017
|
|
capturing; if we succeed, display the packet drops count as the "Drops"
value in the status line and as the "Dropped packets" statistics in the
summary dialog box, otherwise don't display it at all.
In Tethereal, attempt to get the packet statistics from libpcap when
capturing; if we succeed, and if there were any dropped packets, print
out the count of dropped packets when the capture finishes.
svn path=/trunk/; revision=3016
|
|
for exact value matches, but just that the two values are either zero
or non-zero.
svn path=/trunk/; revision=3015
|
|
svn path=/trunk/; revision=3014
|
|
svn path=/trunk/; revision=3013
|
|
svn path=/trunk/; revision=3012
|
|
Report errors when writing or closing a capture file.
Clean up some I/O error messages.
svn path=/trunk/; revision=3011
|
|
svn path=/trunk/; revision=3010
|
|
or new-style dissector for the reply, we can dissect the reply; there
doesn't have to be a new-style dissector.
svn path=/trunk/; revision=3009
|
|
dissector for indirect replies that looks up the call. Use them in the
portmapper/RPCBIND dissector.
svn path=/trunk/; revision=3008
|
|
specified program/version/procedure, and a "rpc_proc_name()" routine to
return the name of a specified program/version/procedure, and make the
callit dissector use those, rather than doing the work itself.
Un-export various routines and declarations that can again be private to
the RPC dissector.
svn path=/trunk/; revision=3007
|
|
Windows where ERROR is #defined by some header file that gets included
by "packet-tftp.c".
svn path=/trunk/; revision=3006
|
|
component of WCCP 2 messages even if the service type is
WCCP2_SERVICE_DYNAMIC, from Simharajan Srishylam.
svn path=/trunk/; revision=3005
|
|
add code to check it - I've no idea what's going on with the other
captures where it's not correct, but those captures have a different
(and apparently incorrect) checksum for packets with the *exact same
contents* (other than the checksum) as the PIM packet in the capture
where the checksum is correct, so perhaps those packets actually had bad
checksums.
svn path=/trunk/; revision=3004
|
|
0; topology change notification frames don't *have* anything past the
BPDU type to fetch.
svn path=/trunk/; revision=3003
|
|
length field rather than an Ethernet type field) into a
"dissect_802_3()" routine.
In that routine, catch exceptions thrown by the IPX or LLC dissector or
dissectors under them, so that the trailer information is added to the
tree even if an exception is thrown (similar to what "ethertype()"
does).
svn path=/trunk/; revision=3002
|
|
the handle has been disabled, return after calling "dissect_data()",
rather than driving on and calling the dissector anyway.
svn path=/trunk/; revision=3001
|
|
fetching anything from the packet, so that if an exception is thrown
those columns don't show something from the previous protocol.
Don't fetch the protocol identifier or protocol version identifier
before you use them.
svn path=/trunk/; revision=3000
|
|
attempt to free the read filter if we don't have a read filter.
svn path=/trunk/; revision=2999
|
|
svn path=/trunk/; revision=2998
|
|
svn path=/trunk/; revision=2997
|
|
order.
svn path=/trunk/; revision=2996
|
|
svn path=/trunk/; revision=2995
|
|
dissection (dissection of V2 CALLIT calls; no V3/V4 stuff or reply
handling yet).
svn path=/trunk/; revision=2994
|
|
widening formal arguments or narrowing variables passed as actual
arguments.
svn path=/trunk/; revision=2993
|
|
information aren't shifted right 4 bytes when put into the protocol
tree; shift left by 4 bytes the values in the value_string table for
them.
A value of 7 means 65535 bytes.
svn path=/trunk/; revision=2992
|
|
(and cause a higher-level "make clean" to stop) if any of the files to
be removed aren't there.
svn path=/trunk/; revision=2991
|
|
to the Vines IP dissector.
svn path=/trunk/; revision=2990
|
|
Use "decode_boolean_bitfield()" to dissect flag bits.
svn path=/trunk/; revision=2989
|
|
remaining NLMv4 requests.
svn path=/trunk/; revision=2988
|
|
Display the message checksum, and check it if possible.
Fix some IPv6 entries to be 16 bytes long, not 4 bytes long.
Make the routine to fetch an IEEE floating point number and turn it into
a "long" take a tvbuff pointer and offset rather than a pointer to data.
svn path=/trunk/; revision=2987
|
|
"Encapsulating Security Payload," and not "Encapsulated Security Payload."
svn path=/trunk/; revision=2986
|
|
svn path=/trunk/; revision=2985
|
|
svn path=/trunk/; revision=2984
|
|
svn path=/trunk/; revision=2983
|
|
svn path=/trunk/; revision=2982
|
|
Fix the handling of one error case.
svn path=/trunk/; revision=2981
|
|
filter files, escape quotes and backslashes so that quotes and
backslashes in filter names work.
svn path=/trunk/; revision=2980
|
|
Add them to EXTRA_DIST in corresponding Makefile.am's so that they
get packaged with the distribution.
svn path=/trunk/; revision=2979
|
|
svn path=/trunk/; revision=2978
|