Age | Commit message (Collapse) | Author | Files | Lines |
|
svn path=/trunk/; revision=13238
|
|
an all-space-character string.
Don't use "filter_string" both for the (unfreeable, unmodifiable) value
fetched from the text entry and the new filter expression; use it only
for the former, and make it a "const" pointer to avoid compiler
warnings.
Use a GString to construct the stuff to be added to the new filter
expression - the old code, when appending stuff to the filter expression
in a loop, would leak the pre-append value.
svn path=/trunk/; revision=13237
|
|
add radiobutton to allow saving raw tcpstreams
these radiobuttons should, by someone that uses, this feature be changed into
a menu instead.
svn path=/trunk/; revision=13236
|
|
Get rid of an unused variable.
svn path=/trunk/; revision=13235
|
|
Get rid of an unused variable and two #includes that aren't needed.
svn path=/trunk/; revision=13234
|
|
pointer.
svn path=/trunk/; revision=13233
|
|
- make VoIP Call Analysis work if, called from command line
- should also work now while capturing with packet list
updated in "real time" (to be tested)
- give each tap listener a unique identifier, so ethereal
won't mix them up
- various cleanups
- compile by default
Todo:
- add support for "tap display filter"
- reimplement function to add rtp streams to the call flow.
svn path=/trunk/; revision=13232
|
|
svn path=/trunk/; revision=13231
|
|
svn path=/trunk/; revision=13230
|
|
use strncpy instead
svn path=/trunk/; revision=13229
|
|
svn path=/trunk/; revision=13228
|
|
svn path=/trunk/; revision=13227
|
|
and from Julien Leproust:
fix graph_analysis.c
svn path=/trunk/; revision=13226
|
|
h323 taps support up to 5 messages per packet now.
VoIP call analysis:
- Collect ISUP, SIP and H323 calls from a capture and show them in window with the following info:
- Start and Stop time of the call
- Init
svn path=/trunk/; revision=13225
|
|
svn path=/trunk/; revision=13224
|
|
LSA dissector as well, and declare it in "packet-dcerpc-nt.h".
svn path=/trunk/; revision=13223
|
|
it as such.
Clear the Info column when dissecting cells for an AAL we handle before
dissecting the cell, and set the Info column for OAM cells.
svn path=/trunk/; revision=13222
|
|
packet-redback.c(63) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(64) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(65) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-rmt-fec.c(108) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
svn path=/trunk/; revision=13221
|
|
packet-juniper.c(262) : warning C4761: integral size mismatch in argument; conversion supplied
packet-juniper.c(289) : warning C4761: integral size mismatch in argument; conversion supplied
svn path=/trunk/; revision=13220
|
|
svn path=/trunk/; revision=13219
|
|
sub-dissector(s).
svn path=/trunk/; revision=13218
|
|
svn path=/trunk/; revision=13217
|
|
- remove duplicate fields from VSAs (every defined field in VSAs was set twice)
- dissect radius packet with avplen == 0 (did not decode authenticator when no AVPs were present)
svn path=/trunk/; revision=13216
|
|
the really really old one which is never used
and there is the DCE/RPC one that is used by all windows/cifs implementations.
We used to reserve the protocol name NETLOGON for the old obsolete protocol
and since we can not have two protocols with the same name, called
the current protocol RPC_NETLOGON instead.
that does not exactly make sense.
This renames the old obsolete protocol to SMB_NETLOGON to make way and allow
the real netlogon protocol take the name NETLOGON
svn path=/trunk/; revision=13215
|
|
packet-dcerpc-netlogon
svn path=/trunk/; revision=13214
|
|
svn path=/trunk/; revision=13213
|
|
svn path=/trunk/; revision=13212
|
|
Don't check, in the dissectors for particular Gnutella packets, whether
the packet goes past the end of the tvbuff - let that throw an exception
so unreassembled packets are shown as such.
Clean up indentation.
Boost GNUTELLA_MAX_SNAP_SIZE to 4096 (one Gnutella spec suggests that
packets should be < 4K), and use it to
1) clamp the length of packets (so we don't do huge reassembly
or have problems when the total packet length, including the
header, overflows 32 bits)
and
2) check the length of packets before using tcp_dissect_pdus(),
to distinguish between packets to be reassembled and a
transfer stream.
Pass the correct value to tcp_dissect_pdus() as the header length.
svn path=/trunk/; revision=13211
|
|
svn path=/trunk/; revision=13210
|
|
svn path=/trunk/; revision=13209
|
|
svn path=/trunk/; revision=13208
|
|
change its signature to match the autogenerated signatures.
add a small wrapper function so tha tthe handwritten lsa can still call the
function through dissect_ndr_pointer()
no changes in functionality, essentially just a rename of a function and signature change
svn path=/trunk/; revision=13207
|
|
to make the symbol compatible with an autogenerated LSA dissector.
no changes to the code, just a rename.
svn path=/trunk/; revision=13206
|
|
change the signature slightly.
the signature change is to make it compatilbe with the signatures the idl compiler generates.
svn path=/trunk/; revision=13205
|
|
dissect_ndr_counted_string() but handles an ASCII string instead of a Unicode one.
svn path=/trunk/; revision=13204
|
|
svn path=/trunk/; revision=13203
|
|
dissect_ndr_counted_string
svn path=/trunk/; revision=13202
|
|
Do more, and more careful, AVP length checks.
Use tvb_format_text() to display strings.
Just use "col_add_fstr()" to set the Info column - there's no need to
format into a buffer and then set the column to that buffer.
Make the L2TP dissector a "new-style" dissector and have it reject
packets with an unknown version number - the dissection effect is the
same if no other dissector claims the packet (it just gets displayed as
data), but this allows other dissectors to claim it.
Don't use the length field if the length bit isn't set.
svn path=/trunk/; revision=13201
|
|
If the information that we used to guess the payload type is part of the
payload, don't make it correspond to the "Payload Type" protocol tree
item - it's covered by the dissected payload.
If we don't succeed in guessing the protocol type, just dissect the
payload as data.
svn path=/trunk/; revision=13200
|
|
devices.
svn path=/trunk/; revision=13199
|
|
svn path=/trunk/; revision=13198
|
|
svn path=/trunk/; revision=13197
|
|
broken link in the developer-guide
svn path=/trunk/; revision=13196
|
|
svn path=/trunk/; revision=13195
|
|
svn path=/trunk/; revision=13194
|
|
svn path=/trunk/; revision=13193
|
|
might take a long time, I've provided a progress bar with the option to cancel the operation.
I might later add something like "View/Auto Resize Columns" with a checkbox menu item, so this is done everytime a capture file finished loading. However, I don't know how well this will work together with "Update list of packets in real time" while doing a capture.
svn path=/trunk/; revision=13192
|
|
svn path=/trunk/; revision=13191
|
|
- move mate_packet into packet-mate.c and remove it frome mate.h
- supressed some warnings
svn path=/trunk/; revision=13190
|
|
standard input. Opening it for random access isn't supported; we add a
new error for that.
svn path=/trunk/; revision=13189
|