Age | Commit message (Collapse) | Author | Files | Lines |
|
svn path=/trunk/; revision=9589
|
|
svn path=/trunk/; revision=9588
|
|
Give the appropriate locations for libiconv, gettext, and WinPcap.
Note that the WinPcap package is *not* available from ethereal.com.
Explain a bit more about how to unpack the zip files for development
packages.
svn path=/trunk/; revision=9587
|
|
them u_char.
svn path=/trunk/; revision=9586
|
|
the previous dfilter failed to compile because a closing double-quote
was not provided. Handle that case.
svn path=/trunk/; revision=9585
|
|
dissectors assume a two's-complement machine (we offer our apologies to
those trying to run it on sign-magnitude IBM 7090/7094's and one's
complement Univac/Unisys 11xx machines :-)).
svn path=/trunk/; revision=9584
|
|
number.
svn path=/trunk/; revision=9583
|
|
Use "proto_tree_add_item()" if you don't need the number's value.
svn path=/trunk/; revision=9582
|
|
An array with 256 elements should not be accessed with an index >= 256,
as we do not count as normal people do.
svn path=/trunk/; revision=9581
|
|
svn path=/trunk/; revision=9580
|
|
svn path=/trunk/; revision=9579
|
|
to explicitly destroy menu items when we remove them from the "recent
files" list.
Clean up indentation.
svn path=/trunk/; revision=9578
|
|
capture is read.
"interface_anzahl" is always <= MAX_INTERFACES, so we don't need to
check array indices against MAX_INTERFACES when iterating over all known
interfaces.
svn path=/trunk/; revision=9577
|
|
MAX_INTERFACES interfaces in the list.
Make "found" a gboolean.
svn path=/trunk/; revision=9576
|
|
variables appropriately.
Put in a cast to squelch MSVC++ warnings.
svn path=/trunk/; revision=9575
|
|
svn path=/trunk/; revision=9574
|
|
svn path=/trunk/; revision=9573
|
|
such a value.
svn path=/trunk/; revision=9572
|
|
hold those values.
svn path=/trunk/; revision=9571
|
|
svn path=/trunk/; revision=9570
|
|
make it a "guint", not just a "guint8".
svn path=/trunk/; revision=9569
|
|
"guint", and make the "labnum" variable to which its return value is
assigned a "guint".
"plen" in "decode_prefix_MP()" can have a 16-bit value assigned to it;
make it a "guint", not just a "guint8".
svn path=/trunk/; revision=9568
|
|
dissecting AFP server status - other servers might have different status
formats.
In "dissect_asp_reply_get_status()", put the UTF-8 server name into a
tree, with the length and name in the tree as separate items, and fetch
the length into a 16-bit variable (as it's a 16-bit length in the
packet), as is done in "dissect_dsi_reply_get_status()". (XXX - should
that just be done with an FT_UINT_STRING field, as is done for other
strings?)
Use "tvb_get_string()" to fetch the UTF-8 server name, and set the
length and name from the values we fetched, in both of those routines.
For FT_UINT_STRING fields in "dissect_asp_reply_get_status()" and
"dissect_dsi_reply_get_status()", don't fetch the length separately -
just use the value filled in by "proto_tree_add_item()" (now that a
"proto_item" is no longer opaque, we can do that). That means we don't
have a problem with overflows of the 8-bit "len" variable if the length
is 255.
svn path=/trunk/; revision=9567
|
|
svn path=/trunk/; revision=9566
|
|
svn path=/trunk/; revision=9565
|
|
than an "array" of gbooleans
svn path=/trunk/; revision=9564
|
|
svn path=/trunk/; revision=9563
|
|
default is winpcap version 3 now
svn path=/trunk/; revision=9562
|
|
svn path=/trunk/; revision=9561
|
|
svn path=/trunk/; revision=9560
|
|
Fix his e-mail address.
svn path=/trunk/; revision=9559
|
|
svn path=/trunk/; revision=9558
|
|
svn path=/trunk/; revision=9557
|
|
Fix his e-mail address.
svn path=/trunk/; revision=9556
|
|
svn path=/trunk/; revision=9555
|
|
svn path=/trunk/; revision=9554
|
|
svn path=/trunk/; revision=9553
|
|
the request has no body.
When displaying the body, use the reported length remaining, not the
captured length remaining, as the length.
svn path=/trunk/; revision=9552
|
|
Error tokens (at least in one capture) appear to have a server name in
them; handle that as well. (They also appear to have 3 more bytes of
stuff in them.)
svn path=/trunk/; revision=9551
|
|
add parsing of message token (Unicode and regular);
add parsing of error token (Unicode only - do not have a non Unicode
sample. Anyone?);
add parsing of done token (only minimal actually);
add parsing of Collation Information structure in Environment
Change token.
svn path=/trunk/; revision=9550
|
|
add parsing of message token (Unicode and regular);
add parsing of error token (Unicode only - do not have a non Unicode
sample. Anyone?);
add parsing of done token (only minimal actually);
add parsing of Collation Information structure in Environment
Change token.
svn path=/trunk/; revision=9549
|
|
svn path=/trunk/; revision=9548
|
|
important parameters).
Document the computation of the length field in WTP concatenation after having
looked at a capture with the length field encoded as a WSP uintvar-integer.
Use "common code" for WTP reassembly, by calling process_reassembled_data().
Document the behavior of reassembly as the output of Ethereal differs between
the first and the second pass.
Question: shoud the common reassembly code provide a call-back mechanism to
get access to previously-unreassembled packets that appear to be part of a
reassembled whole, and to be able to update the state and information of
those packets at the time of the reassembly?
svn path=/trunk/; revision=9547
|
|
svn path=/trunk/; revision=9546
|
|
about problems with handling replies.
svn path=/trunk/; revision=9545
|
|
Handle the failure reply from the initial connection request.
"proto_item_append_text()" accepts "printf"-like formats; we don't need
to generate a string with a formatting routine and hand it to
"proto_item_append_text()", so don't do so.
When doing reassembly, the length that should be checked is the length
remaining in the tvbuff, not the length remaining in the packet, and
that length should be fetched with "tvb_ensure_length_remaining()" so
that if we *do* go past the end of the tvbuff we throw the appropriate
exception.
To determine whether a reply is a reply to the initial connection, check
the connection state and "initial connection reply" frame - don't check
the first byte of the message unless we've determined that the message
isn't an initial connection reply (the first byte of the initial
connection reply is the success/failure flag, so it could be 0 or 1).
Display window IDs in hex in replies, as we do in requests.
Fix the masks for Button3, Button4, and Button5 (it's a bitset, not a
button number - more than one mouse button can be down in an event,
although it can be a pain to try to click more than one button at the
same time).
svn path=/trunk/; revision=9544
|
|
Specified Decodes...
svn path=/trunk/; revision=9543
|
|
svn path=/trunk/; revision=9542
|
|
The JFIF dissector processes everything up to the start of scan as the data
thereafter is encoded and I didn't have the time to figure out how it is :)
TODO: fix the WTP dissector so it doesn't hand off unreassembled data to WSP.
svn path=/trunk/; revision=9541
|
|
gets handed off to subdissectors. However nested multipart entities are not
supported yet.
Add more information to the WSP protocol summary line.
Add some more clarifications (comments) in the WSP code.
Skip parsing of URL encoded data if tree is NULL.
svn path=/trunk/; revision=9540
|