aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
1999-07-20Fix a comment.Guy Harris1-2/+2
svn path=/trunk/; revision=369
1999-07-20Fix some typos.Guy Harris1-20/+21
Make the descriptions of all options full sentences (if an option sets XXX, describe it as "Sets XXX" rather than just "XXX"); some were, some weren't. Note that "-f" sets the *capture* filter expression. Don't say that Ethereal can read only "libpcap"-format files; it can read other formats (using "wiretap" to read capture files is no longer an option, it's what Ethereal always uses). svn path=/trunk/; revision=368
1999-07-20"doc/ethereal.pod" is no longer a source file - it's generated from theGuy Harris2-3/+2
output of "ethereal -G" and "doc/ethereal.pod.template". Make "ethereal.1" depend on "ethereal" and "doc/ethereal.pod.template", rather than on "doc/ethereal.pod", so that it can be built even if you don't have "doc/ethereal.pod". svn path=/trunk/; revision=367
1999-07-20Converted some IPX fields to the new proto_tree functions.Gilbert Ramirez1-12/+34
svn path=/trunk/; revision=366
1999-07-17Added just enough fields to TCP to support "Follow TCP Stream". It works now.Gilbert Ramirez9-38/+119
Added the protocol IDs for ipx and IGMP, but not their fields. svn path=/trunk/; revision=365
1999-07-15Modified the proto_register_field_array usage again. Thanks to Guy'sGilbert Ramirez19-136/+483
suggestion, this new method using a static array should use less memory and be faster. It also has a nice side-effect of making the source-code more readble, IMHO. Changed the print routines to look for protocol proto_data instead of looking at the text label as they did before, hoping that the data hex dump field item starts with "Data (". Added the -G keyword to ethereal to make it dump a glossary of display filter keywords to stdout and exit. This data is then formatted with the doc/dfilter2pod perl program to pod format, which is combined with doc/ethereal.pod.template to create doc/ethereal.pod, from which the ethereal manpage is created. This way we can keep the manpage up-to-date with a list of fields that can be filtered on. svn path=/trunk/; revision=364
1999-07-13Use HAVE_LIBPCAP, not HAVE_PCAP - we define the former, not the latter.Guy Harris1-3/+3
svn path=/trunk/; revision=363
1999-07-13When printing a packet, do it from the protocol tree, not from the GTK+Guy Harris3-117/+132
tree constructed from the protocol tree: 1) The value of "level" field of GTK+ tree items appears to depend on various random things - see a change I made to "packet-dns.c" a while ago, to change the order in which items were put in the tree, so that DNS trees printed with correct indentation - and, right now, we appear to be doing *something* wrong, as some packets I printed from one file here had randomly bogus indentation; I could probably track the problem down and fix it, but that might just hold us until we accidentally do something *else* wrong by GTK+'s lights. The new code provides its own tree level as it goes. 2) The new code is independent of GTK+, so it could be used with other toolkits, or with non-GUI variants of Ethereal. 3) This may make it easier to add a "Print..." menu item to let the user print packets other than the currently selected packet. Make the internal routines used to print the packet static. For the "Print Packet" menu item, put up a message box if they haven't yet selected a packet. svn path=/trunk/; revision=362
1999-07-13Look for <sys/socket.h>, not <sys/socket>.Guy Harris3-5/+5
svn path=/trunk/; revision=361
1999-07-13Since ethereal is now dependent on GTK+-1.2.x (because of proto_tree andGilbert Ramirez11-341/+20
display filter code, which uses features in GLIB-1.2.x), I removed the vestigial code supporting old 1.0.x and 1.1.x GTK+ versions. svn path=/trunk/; revision=360
1999-07-13Added support for compiling on win32 with Visual C and 'nmake'. It compiles,Gilbert Ramirez53-338/+788
but does not link. Perhaps someone who understands the MS tools can help out. I made it link a few months ago, but with different version of glib/gtk+. I can't remember how I made it link. Most of the compatibility issues were resolved with adding #ifdef HAVE_UNISTD_H the the source code. Please be sure to add this to all future code. svn path=/trunk/; revision=359
1999-07-12Fixed packet.h for good.Gilbert Ramirez1-33/+90
svn path=/trunk/; revision=358
1999-07-12Some more updates. Now have open_andx decoded mostly ... Still some funniesRichard Sharpe2-797/+668
and some difficult things. I should not have blown away any of Gilbert's stuff this time around ... Hope not anyway ... svn path=/trunk/; revision=357
1999-07-12Don't claim that display filters have "tcpdump" filter syntax, as theyGuy Harris1-6/+6
no longer do. (Leave a placeholder comment; the syntax should perhaps be described here.) Update the example filter to match current reality. Note that the <Return> and <Enter> keys, when typed in the display filter field, cause the filter to be applied. svn path=/trunk/; revision=356
1999-07-11When you hit <Return> in the text entry box for the display filter,Guy Harris3-39/+90
apply the filter (if it isn't invalid). Apply the filter by clearing the Clist that shows packet summary lines and scanning through the list of all packets and adding to the Clist those that match the filter. Get rid of "if (dfilter_proto_tree)" test in "load_cap_file()"; "dfilter_proto_tree" is always FALSE, and all the test does is keep us from doing a "gtk_clist_freeze()" of the packet list, and we don't want to do that (we don't want the packet to be updated until we're done reading in the file). Get rid of "dfilter_proto_tree", as it's no longer used. Move the test that checks whether the display filter matches the current packet to "add_packet_to_packet_list()"; this allows us to run "dissect_packet()" only once - if we have a display filter, we generate the summary info *and* the protocol tree in the same call, using the summary info to make the packet list item and the protocol tree when checking the display filter. In "dfilter_compile()", destroy "*p_dfcode" if it's not NULL, so we don't leak memory. svn path=/trunk/; revision=355
1999-07-11The previous checkins were based on versions of the file prior toGuy Harris2-328/+366
Gilbert's new protocol-tree code (and to a bunch of other changes); put all the missing changes back in. svn path=/trunk/; revision=354
1999-07-10More decoding of fields. Now handle enumerated fields, but still haveRichard Sharpe2-298/+933
problems with single bit fields when declared as an enumerated field. It shows an unknown ... Damn ... Can't see what the problem is. svn path=/trunk/; revision=353
1999-07-09Add back in the note about GNU "make", "flex", and "bison"/BerkeleyGuy Harris1-2/+15
"yacc" being required. svn path=/trunk/; revision=352
1999-07-09Added the ability to create a read-only ethereal, i.e., one thatGilbert Ramirez14-186/+247
doesn't link with libpcap, so no packet captures can be made. The "--disable-pcap" option has been added to the configure script. Docs have been updated. And the string buffer size in the simple_dialog() has been doubled so that Johan's e-mail address in the "About" dialogue window doesn't get chopped off. svn path=/trunk/; revision=351
1999-07-08Declare "dissect_radius()" here.Guy Harris1-1/+2
svn path=/trunk/; revision=350
1999-07-08"pntohl()" doesn't actually return a "long" (or an "unsigned long"), itGuy Harris1-3/+3
returns a "guint32", which is an "unsigned int" on all platforms Glib supports, so print what it returns with "%u", not "%lu". svn path=/trunk/; revision=349
1999-07-08Added Johan's RADIUS dissector, finally. I modified it to fit in with theGilbert Ramirez15-399/+750
new proto_tree routines. I also removed the check for lex and yacc from wiretap's configure script. The IP dissector now uses proto_register_field_array(). svn path=/trunk/; revision=348
1999-07-08Put the XOR logic in place, where previously I had left an inclusive-ORGilbert Ramirez1-8/+10
place-holder. Also removed the printf() telling the world that the parser found some punctuation. svn path=/trunk/; revision=347
1999-07-08Documented the proto_register_field_array() function, and convertedGilbert Ramirez3-86/+46
the registration functions in packet-fddi.c and packet-eth.c to this new registration method. svn path=/trunk/; revision=346
1999-07-08Fixed the byte_range implementation, and removed some of the C-styleGilbert Ramirez2-319/+29
operators that I had thrown in at the last moment. Sorry! But I'm trying to get rid of those embarrassing shift/reduce and reduce/reduce warnings. I also removed wiretap/wiretap.c, which is no longer needed. svn path=/trunk/; revision=345
1999-07-07"const"ifty some function arguments and structure members, and "#if 0"Guy Harris4-18/+20
out the declaration of a variable used only by "#if 0"ed out code, to eliminate some compiler warnings. svn path=/trunk/; revision=344
1999-07-07Removed old #include's.Gilbert Ramirez1-3/+1
svn path=/trunk/; revision=343
1999-07-07Created a new protocol tree implementation and a new display filterGilbert Ramirez102-5475/+5499
mechanism that is built into ethereal. Wiretap is now used to read all file formats. Libpcap is used only for capturing. svn path=/trunk/; revision=342
1999-07-07From Jason Lango <jal@netapp.com>, a fix to a long-standing problemGuy Harris2-7/+8
(which could cause core dumps in "Follow TCP Stream") - "check_fragments()" was, when deleting a TCP segment at the beginning of the list of segments, setting "src[index]" to point to the next segment, not "frags[index]". "src[index]" is the source IP address, not a pointer to a fragment. Also, make some routines not used outside "follow.c" static. svn path=/trunk/; revision=341
1999-07-07Add support for RTSP (RFC 2326) over TCP, and SDP (RFC 2327) insideGuy Harris8-14/+446
RTSP, from Jason Lango <jal@netapp.com>. svn path=/trunk/; revision=340
1999-07-06"pntohl()" doesn't actually return a "long" (or an "unsigned long"), itGuy Harris1-3/+3
returns a "guint32", which is an "unsigned int" on all platforms Glib supports, so print what it returns with "%u", not "%lu". svn path=/trunk/; revision=339
1999-07-04Include <sys/types.h> before including <netinet/in.h> - you have to doGuy Harris1-0/+1
that on FreeBSD, at least. svn path=/trunk/; revision=338
1999-07-04Note that non-GNU "make"s appear not to be able to build Ethereal, andGuy Harris1-0/+13
that you need "flex" and either "bison" or Berkeley "yacc". (XXX - should notes such as this go in some other file, e.g. INSTALL? I discovered the "flex" and "bison"/byacc requirement on a Solaris 7 system, but it's probably a problem on other commercial UNIXes, as well, so it probably doesn't belong in, say, "README.solaris".) svn path=/trunk/; revision=337
1999-07-04In GTK+ 1.0[.x], "gtk_window_set_position()" was calledGuy Harris1-1/+5
"gtk_window_position()", so use "gtk_window_position()" if we're using GTK+ 1.0[.x]. svn path=/trunk/; revision=336
1999-07-01Fixed a small problem that would have prevented Ethereal from compiling.Richard Sharpe2-4/+4
svn path=/trunk/; revision=335
1999-06-28Added some more, auto-generated decoding to packet-smb.c.Richard Sharpe1-3/+1051
Hope it is all OK. This is getting interesting. svn path=/trunk/; revision=334
1999-06-25When checking to see if a packet is of a given type by checking theGuy Harris1-25/+14
source and destination port numbers, check both port numbers against the specified port, rather than checking the lower of the two port numbers against the specified port, just in case you happen to either have 1) the port number for that type being high enough that you can get client sockets using it or 2) client sockets using it for some other reason. svn path=/trunk/; revision=333
1999-06-25If WITH_WIRETAP is defined, don't define variables used only ifGuy Harris1-1/+5
WITH_WIRETAP isn't defined. svn path=/trunk/; revision=332
1999-06-25In my haste to get rid of the compilation warning, I converted theGilbert Ramirez1-2/+2
pointer to a signed int instead of an unsigned int. In my testing the code still worked, but it's better to do the conversion correctly. svn path=/trunk/; revision=331
1999-06-24Added Ashok's Match Selected functionality, and changes to move etherealGilbert Ramirez12-121/+220
to version 0.6.3. svn path=/trunk/; revision=330
1999-06-24 If the "Cancel" button is clicked in the "Display Options"Guy Harris1-1/+29
window, revert the timestamp type display option to the value it had before that window was popped up, undoing any changes applied with the "Apply" button. If "Display/Options" is selected while there's a "Display Options" window active, don't pop up another "Display Options" window (we really should, if that's done, switch the input focus to the existing "Display Options" window, if possible). svn path=/trunk/; revision=329
1999-06-23Finally! Got rid of compilation warning about converting pointer to intGilbert Ramirez1-2/+2
in line 198. svn path=/trunk/; revision=328
1999-06-22Added an "apply" button to the display option gui, so we can try newGilbert Ramirez1-3/+33
timestamp display w/o having the display option GUI disappear. svn path=/trunk/; revision=327
1999-06-22Added Aaron Hillegass' summary dialogue. We're ignoring the problem withGilbert Ramirez17-129/+556
NetMon statistic packets for now. We might fix that problem with wiretap, either filtering out those packets, and/or providing the summary information through a new wiretap API. svn path=/trunk/; revision=326
1999-06-22Update the display if the "command-line-specified" time format isGuy Harris5-52/+163
changed by updating those columns showing the time in the "command-line-specified" format, not by redoing the entire packet list display; that way, the display continues to show the same packets and any packet the user selected remains selected. (It's also less work to do that - you don't have to re-dissect the packet.) Turn "redisplay_packets()" into "filter_packets()", and do some other cleanups. svn path=/trunk/; revision=325
1999-06-21Found some erroneous usages of gtk_signal_connect_object. I always wonderedGilbert Ramirez5-72/+52
why I had to swap fields (data = w) in some of the callback functions when I added support for gtk+-1.1. Because of the use of gtk_signal_connect_object, the wrong value was being sent to the callback function. We were just lucky that with gtk+-1.0 it worked. gtk_signal_connect_object is for use with callbacks that take one argument. gtk_signal_connect is for use with callbacks that take two arguments. svn path=/trunk/; revision=324
1999-06-21Added "0x" to a couple of proto_tree_add_item printf-style labels thatGilbert Ramirez1-3/+3
were printing values in hex. The lack of "0x" in fron of the hex numbers made me think the values were decimal, causing me to waste a bit of time during debugging. svn path=/trunk/; revision=323
1999-06-21Added a paragraph explaining that the SNMP decode in ethereal usesGilbert Ramirez1-0/+11
either the UCD or CMU SNMP library. Also documented the fact that SNMP support in ethereal can be disabled with the "--disable-snmp" option to 'configure'. svn path=/trunk/; revision=322
1999-06-19Update the man page to reflect the "Capture/Start" and "Display/Options"Guy Harris1-1/+13
menu items. svn path=/trunk/; revision=321
1999-06-19Update a comment.Guy Harris1-6/+6
svn path=/trunk/; revision=320