aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2003-01-19When dissecting the packet that gave an ICMP error, save the writabilityGuy Harris1-6/+32
state of the columns and the current protocol, and restore them when done. Also, cache BoundsError and, if we get a BoundsError, restore them and then re-throw the BoundsError, so we see a "Short Frame" indication if the frame was cut off by the snapshot length. svn path=/trunk/; revision=6941
2003-01-19Make the DDTP dissector reject packets with an invalid version number.Guy Harris1-8/+17
svn path=/trunk/; revision=6940
2003-01-19From Huagang Xie: dissector for MySQL protocol.Guy Harris5-2/+846
svn path=/trunk/; revision=6939
2003-01-19From Didier Gautheron:Guy Harris1-42/+115
fix a padding issue and a problem where the spec appears to give the size of the AFP session token length incorrectly (changed to match what's captured, not what the spec says); provide more verbose messages in the Info column and decode more parameters for login packets. svn path=/trunk/; revision=6938
2003-01-18Rename OUT_DATE to OUT_TIMESECS, as it can be used for relative time inGuy Harris3-39/+41
seconds as well as for UNIX-style date/time stamps. FT_ABSOLUTE_TIME fields don't have a base, so use BASE_NONE. Make hf_afs_fs_callback_expires an FT_RELATIVE_TIME, as it's a relative time not an absolute UNIX time. svn path=/trunk/; revision=6937
2003-01-17From Marc Milgram: e-mail address update.Guy Harris6-10/+10
svn path=/trunk/; revision=6936
2003-01-16Change name of proto item for UINT16UNI.Tim Potter1-5/+5
Use dissect_ndr_uint32 instead of dissect_doserror() to peek at the RPC error in SpoolssOpenPrinterEx_r. svn path=/trunk/; revision=6935
2003-01-16Clean up some unused variables in dissect_ndr_nt_UNICODE_STRING_str()Tim Potter1-8/+8
Undo change to dissect_doserror() and dissect_ntstatus() made in revision 1.42 as it breaks the display of rpc errors in COL_INFO. svn path=/trunk/; revision=6934
2003-01-16Add "doc/README.tapping" to the list of files that go into the releaseGuy Harris1-1/+2
tarballs. svn path=/trunk/; revision=6933
2003-01-15From Devin Heitmueller: further AIM cleanups, including cleanups ofGuy Harris1-54/+445
Family subtype dissection, and addition of subtypes present in GAIM source but not in Ethereal. svn path=/trunk/; revision=6932
2003-01-15Move the code that associates buttons with filter dialogs, and viceGuy Harris3-35/+21
versa, into "filter_dialog_new()", rather than replicating it in a couple of routines. The return value of "display_filter_construct_cb()" isn't used for anything, it's ignored by most callers and stored but subsequently ignored by io_stat.c; get rid of the return value, and don't bother storing it in io_stat.c. Before destroying a filter dialog box associated with a button being destroyed, break the association. Get rid of an unused variable in io_stat.c. svn path=/trunk/; revision=6931
2003-01-15Add a new routine "filter_button_destroy_cb()", and make it theGuy Harris6-95/+60
"destroy" signal handler for any button that pops up a filter; if the button has a filter dialog box associated with it, it destroys that dialog box. Have the routines that create filter dialog boxes asociate the dialog box with the button that created it, so that if the button is destroyed the filter dialog box can be destroyed as well, and associate the button with the dialog box. This means that if a dialog box has a button to create a filter, we no longer have to have the destroy handler for the dialog box destroy any filters - that'll happen when the button in the dialog box is destroyed as part of the process of destroying the dialog box. Don't make the "Filter" buttons in the io_stat dialog box insensitive if there's already a filter dialog box open - we can have more than one open per dialog box. svn path=/trunk/; revision=6930
2003-01-15Don't have two entries for the official ASAP PPID, have one for it andGuy Harris1-2/+2
one for the old one. svn path=/trunk/; revision=6929
2003-01-15#if 0 out the binary protocol stuff, as there's only a dissector forGuy Harris1-24/+37
text MEGACO. Fix up the preference description strings. svn path=/trunk/; revision=6928
2003-01-14Give it an RCS ID.Guy Harris1-0/+2
svn path=/trunk/; revision=6927
2003-01-14From Christian Falckenberg: beginnings of a MEGACO dissector.Guy Harris25-46/+958
Move SCTP payload protocol IDs to a header file, and get the PPIDs from that header file rather than defining them in dissectors running atop SCTP. Use both the old(?) and official PPID for ASAP. svn path=/trunk/; revision=6926
2003-01-14From Anders Broman: some additional SCTP payload protocol IDs.Guy Harris3-1/+20
svn path=/trunk/; revision=6925
2003-01-14Catch ReportedBoundsError exceptions when dissecting decrypted stubGuy Harris1-5/+19
data, as the error could be due to the decryption being bad, and we should still dissect the authentication data. svn path=/trunk/; revision=6924
2003-01-14We don't know what, in captures with a major version number of 3,Guy Harris1-10/+30
indicates the subtype of an "Internetwork analyzer" capture; we've seen only one such capture, and it was a frame relay capture, so we just wire it to frame relay for now. svn path=/trunk/; revision=6923
2003-01-14Set the length of the L2TP tvbuff based on the length in the L2TPGuy Harris1-13/+21
header, if present. Don't explicitly base the length of the subset we hand to the PPP dissector on the length in the header, as it might not be present; instead, just use -1 for the lengths, as we set the length of our tvbuff if there's a length in the L2TP header. Set the length of the L2TP top-level protocol item for data packets, so it covers the L2TP header but not the packet data. Don't put a padding item into the tree if there's no padding. svn path=/trunk/; revision=6922
2003-01-14Don't copy the entire IP header into a structure, extract stuff from itGuy Harris1-104/+140
as you dissect it, so we can dissect packets that are cut short before the end of an IP header. Check for an IP total length less than the header length. svn path=/trunk/; revision=6921
2003-01-14Add value_string for secure channel type used in ServerAuthenticate2.Tim Potter2-6/+21
svn path=/trunk/; revision=6920
2003-01-14From Dinesh Dutt:Guy Harris13-4/+5396
- Decoders for the few remaining FC protocols not included in my first patch. Included in this list are decoders for FC-CT (common transport), Name Server (dNS), Fabric Configuration Server (FCS) and Zone Server (FZS). - Decoder for MDS Debug Port Adapter. MDS Debug Port Adapter (internal name was Boardwalk and this is the file name) is a piece of hardware that can be purchased with Cisco's MDS Fibre Channel switches that converts FC frames into Ethernet frames. One end is connected to a port on a FC switch and the other end is connected to a FE/GE Ethernet port. The decoder included here decodes the encapsulation header that carries information such as SOF/EOF of FC frames. svn path=/trunk/; revision=6919
2003-01-13Fixed a typo.Michael Tüxen1-2/+2
svn path=/trunk/; revision=6918
2003-01-12From Devin Heitmueller:Guy Harris1-337/+804
* Break up dissection into separate functions * Added families not already present (based on GAIM source code) * Added entries from the "generic" family not already present * Started to break families and subtypes into constants instead of having hardcoded values (signon and generic are done, others in progress) svn path=/trunk/; revision=6917
2003-01-11From Ronald Henderson, when closing IO-Stat window, also close any open ↵Ronnie Sahlberg3-25/+81
Filter dialogs svn path=/trunk/; revision=6916
2003-01-11Add a new "chdlctypes.h" file for Cisco HDLC type values that aren'tGuy Harris6-13/+45
just Ethernet type values. Move the type value for ISO network-layer protocols there, and put the type value for IEEE spanning tree there as well, use that value in the BPDU dissector, and add an item to the CHDLC dissector for it. svn path=/trunk/; revision=6915
2003-01-11Only do stuff to circuits on the first pass.Guy Harris1-13/+20
svn path=/trunk/; revision=6914
2003-01-110x4242 is the Cisco HDLC type value for the spanning tree protocol.Guy Harris1-1/+2
svn path=/trunk/; revision=6913
2003-01-11Do some simple sanity checking of TNS data before dissecting it.Guy Harris1-3/+20
svn path=/trunk/; revision=6912
2003-01-11Fix the copyright notice, give it an RCS ID, and fix the introductoryGuy Harris1-4/+5
comment. svn path=/trunk/; revision=6911
2003-01-11Put Unicode strings into the protocol tree with the appropriate protocolGuy Harris2-51/+14
tree item, not with hf_nt_str. Get rid of hf_nt_str, as it's no longer used. Put ASCII strings into the protocol tree only once. svn path=/trunk/; revision=6910
2003-01-11"hf_nt_str" is of type FT_STRING, so it should be set to an ASCIIGuy Harris1-6/+33
string; set it to the result of the "fake_unicode()" call, not to the raw Unicode string. (Yes, we should have support for strings that don't have 8-bit characters - and somehow handle strings in packets in multiple character sets, e.g. ISO 8859/x and other EUC codes, the Macintosh extended character set, various DOS/Windows code pages, and Unicode - but we don't have it now.) svn path=/trunk/; revision=6909
2003-01-11Get rid of an extra "." at the end of the name of the "nt.str" field.Guy Harris1-2/+2
svn path=/trunk/; revision=6908
2003-01-11Get rid of unused variables.Guy Harris1-3/+2
svn path=/trunk/; revision=6907
2003-01-11From Devin Heitmueller: improve dissection of the AIM signon-reply, theGuy Harris2-3/+108
request-user-info, and the start of the user-info reply. svn path=/trunk/; revision=6906
2003-01-11From Jaime Fournier: extend the packet-dcerpc-krb5rpc dissectors to callGuy Harris1-27/+146
kerberos V. svn path=/trunk/; revision=6905
2003-01-11Put the message type in the Info column.Guy Harris1-4/+14
svn path=/trunk/; revision=6904
2003-01-11Put the correct/incorrect flag after the CRC value, as is done for otherGuy Harris1-3/+3
checksums. svn path=/trunk/; revision=6903
2003-01-11The OAM type and function type are packed into a single byte; set theGuy Harris1-6/+6
length of the entries for them to 1, not 2. svn path=/trunk/; revision=6902
2003-01-11If it doesn't begin with FF 00 it can't be LANE LE Control; if it'sGuy Harris1-5/+29
LANE, claimed to be LE Control, but doesn't begin with FF 00, call it 802.3. svn path=/trunk/; revision=6901
2003-01-11Delete all prs_* functions. Huzzah!Tim Potter2-118/+12
svn path=/trunk/; revision=6900
2003-01-11Finish converting remaining RPCs to ndr routines.Tim Potter1-358/+125
Deleted all the old crufy ndr pointer dissection. Hooray! Next on the hit list is some refactoring of the ndr string routines... svn path=/trunk/; revision=6899
2003-01-11Convert some incidental prs_* calls to dissect_dcerpc_*Tim Potter2-40/+13
equivalents. svn path=/trunk/; revision=6898
2003-01-11Converted some more RPCs to ndr routines.Tim Potter1-240/+22
svn path=/trunk/; revision=6897
2003-01-10In "dissect_spnego_negTokenTarg()", don't assume we've found a GSSAPIGuy Harris1-3/+9
OID value for the protocol being used in a previous packet in the GSSAPI sequence. svn path=/trunk/; revision=6896
2003-01-10Put the traffic type right after the AAL.Guy Harris1-6/+14
Dump unknown AAL purportedly-reassembled data as raw data. svn path=/trunk/; revision=6895
2003-01-10Rename the "version" argument to "process_header_records()" "maj_vers",Guy Harris1-48/+66
as it's the major version number. Try using the first word of "rsvd" to determine whether a capture is an ISDN capture or not in version 1 captures. Version 1 captures look as if they might also have a REC_HEADER2 record - it's longer than the ones in version 4 and 5 captures, but it still appears to have a network subtype in the 5th byte. Get rid of the heuristic that checks for WTAP_ENCAP_ISDN by looking at the packet data; if we fail to recognize an ISDN capture, we should look for stuff in the headers to determine whether the capture is one or not. svn path=/trunk/; revision=6894
2003-01-10It looks as if a value of 0xfa in the second byte of a REC_HEADER2Guy Harris2-52/+49
record might indicate an ISDN capture; treat that as an indication that a capture is an ISDN capture. svn path=/trunk/; revision=6893
2003-01-10Converted enumprinters and enumprinterkey rpc to ndr routines.Tim Potter1-20/+34
svn path=/trunk/; revision=6892