aboutsummaryrefslogtreecommitdiffstats
path: root/AUTHORS
AgeCommit message (Collapse)AuthorFilesLines
2011-05-12From Johannes Jochen via ↵Jeff Morriss1-0/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5900 : I have created a dissector for the Multiple MAC Registration Protocol based on the exiting dissector of the Multiple Stream Reservation Protocol (bugzilla id: 4757 ) You can found the documentation of the Protocol here: http://standards.ieee.org/getieee802/download/802.1ak-2007.pdf It's also includes the corrections of the protocol you will found here: http://standards.ieee.org/getieee802/download/802.1Q-2005_Cor1-2008.pdf svn path=/trunk/; revision=37104
2011-05-11Add Tyson Key;Bill Meier1-4/+9
Fix spacing for a few entries; Add back missing blank line before "and by". svn path=/trunk/; revision=37064
2011-05-08Add FT_EUI64 Field TypeAlexis La Goutte1-0/+1
* Remove proto_tree_add_eui64 function from 802.15.4 Dissector * Replace print_eui64/print_eui64 by eui64_to_str/get_eui64_name * Update Documentation (README.dev) * Add new function in libwireshark.def * Support of encoding for tvb_eui64_to_str * Use FT_EUI64 for ICMPv6, CAPWAP, Zbee ... dissector svn path=/trunk/; revision=37015
2011-05-04From Nick Glass via bug #5887: DACP (apple remote) enhancement to DAAPStephen Fisher1-0/+1
dissector. Me: Add Nick to AUTHORS file. svn path=/trunk/; revision=36987
2011-05-03From Tom Brezinski - fix for bug 5869:Guy Harris1-0/+1
This patch incorporates the following fixes from the patch attached to bug 5671 with changes as noted below: 1.) Files where the packet header and packet data are noncontiguous are handled improperly, resulting in read misalignment and ultimately the error message, "Observer: bad record: Invalid magic number 0xXXXXXXXX." This bug is caused by not obeying the packet_entry_header.offset_to_frame field. 2.) Daylight savings time is not properly accounted for in files using local time encoding. 3.) As of Observer/GigaStor v13.10 (bug 5671 incorrectly stated v14), timestamps in the file format changed from local time encoding to GMT encoding. Wiretap has been changed to support reading both formats. Patch submitted with bug 5671 added a separate file type to allow writing local format. This patch does not add the separate file type and always writes GMT. 4.) The wtap_dumper.bytes_dumped field is not being properly incremented as data is written to files. This patch also incorporates the following additional enhancements / fixes not in bug 5671: 1.) Support for reading BFR files which contain Fibre Channel captures. Test file Fibre_Channel_Capture.bfr attached. 2.) Support for modified file header used in upcoming v15. New header file format takes an unused byte from the version string to allow for a larger offset to the first packet to be specified. Test file V15_Lrg_Hdr_Test.bfr is attached, it is also a fuzz test as the number of TLV items given in the header is less then the actual. 3.) It was found that if the number of TLV items given in the header was larger then present it would fail to open the file. Test file V9_Num_TLVs_Too_Big.bfr is attached. svn path=/trunk/; revision=36970
2011-05-02From Peter Paluch via bug #5877: EIGRP dissector enhancement for RS/EOTStephen Fisher1-0/+1
flags Me: Add Peter to AUTHORS file. svn path=/trunk/; revision=36965
2011-04-28From Hans-Christoph Schemmel:Anders Broman1-0/+3
A variant of 3GPP TS 27.010 multiplexing protocol dissector. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5829 svn path=/trunk/; revision=36927
2011-04-25From Loránd Jakab via ↵Jeff Morriss1-1/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5854 : The Locator/ID Separation Protocol [1] is being standardized within the IETF, and it is nearing RFC status (pending security review). I have been maintaining a dissector patch for about a year, see [2]. Feedback received indicates that, among others, it is widely used by the developers of a large router vendor, without issues. In January I submitted the dissector for data plane packets as bug #5602, which was committed as r35615. The patch attached to this bug adds support for dissection of control plane packets. [1] http://tools.ietf.org/html/draft-ietf-lisp [2] http://lisp.ccaba.upc.edu/wireshark/ svn path=/trunk/; revision=36845
2011-04-20Added Vladimir Kazansky for his contribution to bug 5849.Chris Maynard1-0/+1
svn path=/trunk/; revision=36728
2011-04-19Add Xiao Xiangquan to the AUTHORS file ....Bill Meier1-0/+5
svn path=/trunk/; revision=36721
2011-04-18Update Motonori Shindo's email address at the author's request. Fixes bug 5840.Chris Maynard1-1/+2
svn path=/trunk/; revision=36695
2011-04-12From Jakub Zawadzki: speed up random access to gzipped files, as per theGuy Harris1-1/+2
zran.c example in the zlib source. This means that problems in the file's contents might not be reported when a packet is read, as long as there's no problem in the contents of the file up to the last bit of compressed data for the packet; we now check for errors after finishing the sequential read of the file, at least in some programs, so that shouldn't be an issue (the other programs need to be changed to do so as well). This is necessary in order to be able to read all the packets we saw in the sequential pass; it also lets us get a few more packets from truncated files in some cases. svn path=/trunk/; revision=36577
2011-04-08From Juliusz Chroboczek via bug #5812: Dissector for the Babel RoutingStephen Fisher1-0/+1
Protocol (RFC 6126) svn path=/trunk/; revision=36518
2011-04-06Enhancement bug #5796: Add Atheros vendor specific 802.11 IE parsingStephen Fisher1-0/+1
svn path=/trunk/; revision=36502
2011-04-06From Jakub Zawadzki:Guy Harris1-0/+1
file_read(buf, bsize, count, file) macro is compilant with fread function and takes elements count+ size of each element, however to make it compilant with gzread() it always returns number of bytes. In wiretap file_read() this is not really used, file_read is called either with bsize set to 1 or count to 1. Attached patch remove bsize argument from macro. svn path=/trunk/; revision=36491
2011-04-05From Felix Kraemer: fix ↵Jeff Morriss1-0/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5694 : This patch adds the capability to create BACnet statistics trees. Find the respective menu items under 'Statistics->BACnet'. Packets can be sorted by different criteria: - Src/Dst IP adresses - Instance ID - Object Type - Service From me: - Don't use C++/C99-style comments. - Name variables for tick_stat_node() don't need to be static. - Change updateBacnetInfoValue() to require 'data' to be ep_ allocated. Change the couple of calls that did not send in ep_ allocated data to do so. - Change one or two functions to be static. - Do not use (memory-unsafe) g_sprintf(). - Use ep_strconcat() instead of leaking memory with g_strconcat(). - Put back one if(tree) that doesn't appear to do any harm. - Remove variable declarations and #includes from the header file. svn path=/trunk/; revision=36468
2011-03-26From Alexis La Goutte:Jaap Keuter1-0/+1
A patch to add ATM over TCP Dissector. The dissector dissect only the ATMTCP header (VCI, VPI, Payload Length) The data are not yet dissect, it is necessary to add a "UAT" (As with the K12 dissector) to indicate the type (ILMI, AAL, ATM...) of data (based on VCI/VPI) svn path=/trunk/; revision=36354
2011-03-22From Dirk via bug #5771: Add heuristic dissector for images and HTTP Stephen Fisher1-0/+1
Also add to AUTHORS file. svn path=/trunk/; revision=36253
2011-03-20From Roland Knall <rknall [AT] gmail.com>: allow heuristic subdissectorsGuy Harris1-1/+4
for SERCOS III packets. svn path=/trunk/; revision=36214
2011-03-16From Jakub Zawadzki: Annotate Jakub as the author of the JSON dissector.Chris Maynard1-1/+4
svn path=/trunk/; revision=36200
2011-03-07From Martin Kaiser: dissector for DVB-CI (Common Interface)Bill Meier1-0/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5654 From me: - Entry for DVBCI added to wtap.c encap_table_base[]; - Some code simplification with respect to the use of col_...() for COL_INFO; - Certain tests for "enough bytes available" not really needed; - (Other minor tweaks); - #include<stdio.h> not req'd; - Minor reformatting and whitespace cleanup; svn path=/trunk/; revision=36149
2011-02-23From Alexis La Goutte via ↵Jeff Morriss1-1/+3
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5713 : Enhance RIPng * Replace tvb_memcpy/proto_tree_add_text by proto_tree_add_item * Remove dependency to packet-ipv6.h * Remove packet-ripng.h (not needed) Also update AUTHORS file From me: Put a check_col() back and reword (shorten) a couple of the new blurbs. svn path=/trunk/; revision=36033
2011-02-09From Grzegorz Szczytowski:Jaap Keuter1-1/+6
Update of packet-e212.c dissector according to local national regulatory MNC assignment document. www.uke.gov.pl/uke/redir.jsp?place=galleryStats&id=24439 svn path=/trunk/; revision=35889
2011-02-07Fix bug #5657: Update my mail address Stephen Fisher1-1/+1
svn path=/trunk/; revision=35868
2011-01-30From Grzegorz Szczytowski:Anders Broman1-0/+1
Add Bearer Control Mode selection support in gtpv1 dissector. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5634 Sligtly reworked by me: - prefix names with gtp - Use proto_tree_add_item() - remove ref to specific protocol version, as it's probably a mix. - Changed the update to the AUTHORS file. svn path=/trunk/; revision=35699
2011-01-27From Roberto Morro: RSVP dissector enhancementsBill Meier1-1/+7
- add new PROTECTION obj c-type 2 (RFC4872) - add new TLVs for IF_ID (RFC4920) - add Path Key subobj in ERO (RFC5520) - add new ASSOCIATION obj c-type 4 (oif2008.389) - add new LSP_ATTRIBUTES and LSP_REQUIRED_ATTRIBUTES objects (RFC5420) - improved ERROR object dissection and new error values added - ADMIN_STATUS transformed to filter and new flags added - minor fix to conversation (not applied to ACK, SREFRESH and HELLO messages) to resolv displaying of "Unknown session type" string in such messages Moreover, I've deleted some "enum" statements for error values that I thought they were useless since they were used only once throughout the RSVP dissector code. See https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5518 From me: fix two typos. svn path=/trunk/; revision=35681
2011-01-22Add Loránd Jakab; Add two missing left-braces;Bill Meier1-5/+10
svn path=/trunk/; revision=35624
2011-01-05From Steve Huston: add support for AMQP 0-10.Guy Harris1-0/+4
From me: add 0_9 to names for #defines and routines for 0-9, add expert info for the "you ran past the end of the field table" error. svn path=/trunk/; revision=35380
2011-01-05Update the AUTHORS fileAnders Broman1-0/+5
svn path=/trunk/; revision=35371
2011-01-05From Francesco Fondelli:Anders Broman1-0/+1
RSVP: support for Vendor Private objects, RFC 3936 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5468 svn path=/trunk/; revision=35370
2010-12-27From Alexis La Goutte:Anders Broman1-1/+1
ICMPv6 Enhancements : make ICMP option filterable (Part 2) *Merge (and update) FMIPv6 Option with ND Option *Make ICMP option filterable (use proto_tree_add_item..) *Reorder ND Option *Add dissector for RA Flags Extension (RFC5075) *Add dissector for Handover Key Request/Reply (RFC5269) *Add dissector for Handover Assist Info / Mobile Node ID (RFC5271) *Add dissector for DNS Search List (RFC6106 From me removed a c++ style comment and changed to tvb_memcpy(tvb, (guint8 *)&prefix.bytes in a couple of places. svn path=/trunk/; revision=35272
2010-12-07From Andrew Feren via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5377 :Jeff Morriss1-0/+1
Add a bunch of NetFlow/IPFIX extensions from Plixer and ntop. A little cleanup as well. From me: remove duplicate blurbs. svn path=/trunk/; revision=35142
2010-12-01Added Alex Badea for his contribution via bug #4149.Chris Maynard1-0/+1
svn path=/trunk/; revision=35089
2010-11-22From Emil Wojak via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5391 :Jeff Morriss1-0/+4
I'd like to share my enhancements to the TDS dissector with everyone. The list of improvements follows: - nearly complete dissection of RPC calls, - detection and dissection of the ALL_HEADERS rule, - corrected some existing proto_tree fields to support filters, - other minor fixes where the interpretation of data conflicted with the official documentation from MS. I tested the new code on a variety of different TDS captures with many diverse RPC calls. The code compiles and works on 32-bit Linux, I didn't check those changes on other platforms though. From me: - terminate all value_strings - change ++*offset to *offset += 1 (I think that's more readable) - replace all the dissector assertions which could be caused by malformed packets with expert infos - Don't throw ReportedBoundsError when the packets have unexpected data in them, just report an expert info and continue on svn path=/trunk/; revision=35007
2010-11-22From Stephane Bryant via ↵Jeff Morriss1-0/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5358 : This is a dissector for reload framed message: ReLOAD packets can be inserted in frame message, as described in draft-ietf-p2psip-base-10 From me: remove some unnecessary includes. svn path=/trunk/; revision=35005
2010-11-19From Yaniv Kaul via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5366 :Jeff Morriss1-0/+1
Several fixes that make Tight VNC negotiation properly parsed. It was not parsed correctly previously, for multiple reasons. svn path=/trunk/; revision=34976
2010-11-19Add Stéphane Bryant (RELOAD dissector). Since this file accepts UTF-8, put ↵Jeff Morriss1-1/+5
the o-umlaut back in Toralf Förster's name. svn path=/trunk/; revision=34968
2010-11-18From Jon Ellch via bug #5175: Add PPI-GPS protocol dissector patchStephen Fisher1-0/+1
Minor changes by me as detailed in the bug's comment #8. svn path=/trunk/; revision=34956
2010-11-17From Toralf Foerster via ↵Jeff Morriss1-0/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5376 : A dissector for the SAMETIME protocol. From me: no need to include gmodule.h, use only ASCII in the author's name. svn path=/trunk/; revision=34930
2010-11-17From David Katz via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5166 :Jeff Morriss1-0/+4
Add a configuration parameter of the NWG version for WiMAX ASN CP dissector. The format and meaning of TLVs, as well as function types and messages changed between the different NWG versions. Added support for the version number of TLVs in the dictionary xml, its parser, and of course in the packet itself. Added support for the version number of function-types and message-types by extending the value_string structure to contain also a "since" version number. Successfully tested with a live capture and capture file, containing WiMAX ASN packets (full Network entry). Also fuzzed 500 passes successfully. The XML doesn't contain all existing NWG versions, only selected ones. This is a little tedious work to go over all TLVs of each version, so I'll add some newer versions later on. can add a short how-to of adding a new version, for others to use, if needed. svn path=/trunk/; revision=34919
2010-11-17From Slava via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5335 :Jeff Morriss1-0/+1
This patch adds to Wireshark the ability to dissect Infiniband SDP (Socket Direct Protocol) and CM MADs traffic. It also contains various other bug-fixes and enhancements. SDP traffic can be identified automatically (analyzing SDP CM MADs) or manually. SDP, or Sockets Direct Protocol, is a protocol developed by the Infiniband Trade Association which enables existing socket-based applications to transparently utilize the Infiniband capabilities. This patch is submitted on behalf of Mellanox Technologies Ltd. svn path=/trunk/; revision=34918
2010-11-16From Gerhard Gappmeier via ↵Jeff Morriss1-0/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5410 : This patch adds support for displaying OPC UA ExtensionObjects. An ExtensionObject is a mechanism to transport user defined structures as serialized blobs. Some types of ExtensionObjects are already defined by the OPC Foundation's OPC UA Specifications. These types can be implemented by this dissector, because they are well-known. Real user-defined or vendor-defined types are unlikely to be implemented by a passive dissector, because this would require browsing of the UA server's address space to retrieve the type information. Currently only the following types are supported: * DataChangeNotification * EventNotification Others OPC defined types will follow. From me: fix warnings: "format not a string literal and no format arguments" svn path=/trunk/; revision=34906
2010-11-16From Yaniv Kaul via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5400 :Jeff Morriss1-0/+1
The attached patch adds many more DAAP codes to be parsed properly by the DAAP dissector. In addition, it fixes some prints. svn path=/trunk/; revision=34899
2010-10-28From Alexis La Goutte via ↵Jeff Morriss1-0/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5290 : A patch to add support of Mongo Wire Protocol (Used by MongoDB) From me: use ENC_xxx in proto_tree_add_item() calls. svn path=/trunk/; revision=34680
2010-10-25From Jouni Malinen: preliminary version of Wi-Fi P2P (Wi-Fi Direct) dissector.Bill Meier1-0/+2
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5196 From me: Add packet-wifi-p2p.h to Makefile.common DISSECTOR_INCLUDES Add dissectors/packet-wifi-p2p.c to epan/CMakelists.txt svn path=/trunk/; revision=34642
2010-10-25From Thomas Boehne via ↵Jeff Morriss1-1/+4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5324 : The company I work for uses two proprietary protocols, for which I initially developed wireshark plugins. Now we would like to integrate them into the public wireshark repository. I followed the READMEs and converted the plugins into a static dissectors. I cleaned up the code until checkAPI.pl was silent, translated all terms to english and ran randpkt and fuzz-testing for a long time. All that I found was a bug in a different dissector. From me: - Fold the header files into the dissectors - Clean up some memory leaks - Strengthen the heuristics of adwin-config (the TCP heuristics are still pretty weak) - Make packet-adwin.c a "new style" dissector - Use find_or_create_conversation() - Remove most of the check_col()'s svn path=/trunk/; revision=34640
2010-10-22From Lori Tribble: Add vendor identifier dissector access to BACnet Private ↵Bill Meier1-1/+6
Transfer Msgs BACnet has a private transfer service which is vendor specific. The start of each request and response contains the vendor identifier. I've added a way for vendors to provide their own dissectors by registering their vendor identifier. The packet-bacapp.c method fConfirmedPrivateTransfer has been modified to look for a vendor specified dissector. If found it will be run. If not found we default to running the standard dissection included in packet-bacapp.c. I modified the summary column display for private transfer messages so that the summary now displays the Vendor Identifier (V=xx) and the Service Number (SN=xx). https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5250 From me: Rename sub-dissector tablle to "bacapp.vendor_identifier" Change subdissector ui_name to "BACapp Vendor Identifier" svn path=/trunk/; revision=34625
2010-10-21From Srinivasa Pradeep: LDP dissector: Add/update PseudoWire TLV suport.Bill Meier1-0/+4
RFC 4447 describes new TLV called Generalised PWid FEC in LDP messages with the id 0x81. This is related to PsuedoWire setup and maintenance. Related to this, following are the TLVs which are defined in RFC 4447 and RFC 4446. 1. PW Status TLV 2. PW Interface parameters 3. PW Group TLV From me: remove some unused variables; Mark fcn arg as unused. svn path=/trunk/; revision=34606
2010-10-21From Alexis La Goutte via ↵Jeff Morriss1-1/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5325 : It is a rework of PAP PPP dissector - Replace proto_tree_add_text by proto_tree_add_item - add col_append_fstr to show information (Peer-ID, Password...) svn path=/trunk/; revision=34604
2010-10-20From Alexis La Goutte via ↵Jeff Morriss1-0/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5270 : Add dissector for PAPI (Aruba AP Control Protocol), used by Aruba WLAN Controller). There is no documentation on this protocol, the dissector is based on my analysis ... There is also an experimental "debug dissector" (not enable by default) for dissecting the rest of data. Changes by me: - make it a new-style dissector - change the name of the "debug" preference - other minor changes svn path=/trunk/; revision=34587