aboutsummaryrefslogtreecommitdiffstats
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2007-04-02Make RX a new style dissector: return 0 if there isn't at least 28 bytes of ↵Jeff Morriss1-0/+3
message or if it receives an unknown Type. Add a check of tvb length to README.developer's cut-n-paste dissector code. svn path=/trunk/; revision=21300
2007-03-31add a small section, that code should be warning freeUlf Lamping1-1/+10
svn path=/trunk/; revision=21291
2007-03-30- new ptvcursor subtrees management functions :Sebastien Tandel1-0/+39
* ptvcursor_push_subtree(), ptvcursor_pop_subtree() for pushing/popping subtrees. Multiple levels of subtrees (256 max.), allocation per 8 levels. * Two new functions creating an item in the tree and pushing a subtree at the same time. These two functions accept an undefined length (SUBTREE_UNDEFINED_LENGTH). The length of the item is set at the next pop. 1) ptvcursor_add_with_subtree 2) ptvcursor_add_text_with_subtree - get rid of potential memory leaks with g_new in ptvcursor_new(). - Documentation of the new ptvcursor functions in README.developer svn path=/trunk/; revision=21276
2007-03-26From Doug Pratley:Stephen Fisher1-4/+29
The purpose of the patch is to provide a new output format (so it is independent of -V): single line record per-packet with the fields chosen by the user, with configuration options to control separator, quoting and whether a header line is printed. It also extends some existing options behaviour (-c and -a:filesize) so that they affect reading a file as well as writing one, so that only the first <n> packets or bytes are read). svn path=/trunk/; revision=21211
2007-03-23From Sake Blok:Stephen Fisher1-2/+5
Fix for bug #491: Unexpected frame.time_delta behavior This patch ... fixes bug 491. It does this by changing the behaviour of the frame.time_delta field so it reflects the delta time between captured packets (tshark already did this). To keep the delta time between displayed packets, the field frame.time_delta_displayed is created. svn path=/trunk/; revision=21154
2007-03-11Fix bug 552:Jeff Morriss1-161/+163
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=552 by enforcing that header fields have names of length > 0. This should fix the display of those fields and also make them filterable (which was the subject of the bug). Abbreviations are (still) optional: if they are empty then the field is not filterable. Update README.developer with this information. Add header field names in several dissectors where they were missing. In packet-arp.c give "packet-storm-detected" a name (as above) but also set it as _GENERATED. Also remove trailing white space from all the files checked in. svn path=/trunk/; revision=21018
2007-03-08from Sake Blok:Ulf Lamping1-10/+21
I have changed the patch according to your suggestions and also changed the doc[book] files accordingly. I tested the patch and it does seem to work fine on my test-system. ULFL: In addition, I've added the en-/disabling to the other (already existing) Copy menu items - some just did nothing, some crashed if nothing was selected. I've also sligthly changed the menu seperators and made both context menus look a bit more identical. svn path=/trunk/; revision=21005
2007-03-05From Richard van der Hoff:Jaap Keuter1-53/+55
I've had a good look at the code in packet-tcp.c, and whilst it's somewhat impenetrable, I've come to the conclusion that it just doesn't support multiple pdus as described. That's not entirely unreasonable in itself; my objection is solely to the fact that README.developer is completely misleading. In fact, even the example dissect_cstr won't work on the tcp dissector, because if you set desegment_len=1 the tcp dissector believes that you know what you are doing and doesn't let you change your mind later. Furthermore, 2.7.2 says that you can set desegment_len=-1; that doesn't work either, because the tcp dissector expects DESEGMENT_ONE_MORE_SEGMENT, which is 0x0fffffff, which is nowhere near -1. In short, I think the relevant section of README.developer needs a rewrite. I attach a patch - comments welcome. svn path=/trunk/; revision=20974
2007-02-19Further cleanup of the documentJaap Keuter1-60/+59
svn path=/trunk/; revision=20855
2007-02-19Fix a couple of spelling mistakesStephen Fisher1-2/+2
svn path=/trunk/; revision=20840
2007-02-14Version 0.10.12 was still Ethereal, not WiresharkJörg Mayer1-1/+1
svn path=/trunk/; revision=20811
2007-02-14From Sebastien Tandel:Stephen Fisher1-2/+6
Here is an updated patch for proto_tree_add_item and the range_string structure. The new macro RVALS() can be used as the macro VALS() in the declaration of your hf_register_info with another structure (range_string). Be aware that you *have to* ORed the value of the field display with BASE_RANGE_STRING constant and it can 'only' be used with FT_(U)INT* types in a header_field_info. svn path=/trunk/; revision=20805
2007-02-13From Sebastien Tandel:Stephen Fisher1-0/+6
Create two new files (ws_strsplit.[ch]) that use GTK2 code to override the buggy g_strsplit() function when compiling for GTK1. Include this work-around function (ws_strsplit) in libwireshark.def. Add notes on usage to README.developer. Include epan/ws_strsplit.h in all files that use g_strsplit(). svn path=/trunk/; revision=20804
2007-02-13Minor cleanup - spelling fixes, formattingStephen Fisher1-25/+25
svn path=/trunk/; revision=20802
2007-01-31Explain what 'base' in 'prefs_register_uint_preference()' is: it's used in ↵Jeff Morriss1-0/+2
'strtoul()' svn path=/trunk/; revision=20636
2007-01-26From Graham Bloice:Jaap Keuter1-1/+1
In the Developers Guide, Section 9.3, Example 9.17. Decompressing data packets for dissection The code calls tvb_set_free_cb() for the newly created next_tvb. This is unnecessary as the call to tvb_set_child_real_data() adds next_tvb to the chained list of tvb, thus ensuring that next_tvb is correctly deleted. In fact when I had the call in, Visual Studio kept breaking deep down in ntdll.dll, probably because of a double free every time the main tvb was deleted. In README.developer, para 2..2.7 The example conversation code doesn't assign the result of conversation_new() back into the conversation variable. svn path=/trunk/; revision=20569
2007-01-18Improve information on building plugins.Jaap Keuter1-10/+19
svn path=/trunk/; revision=20476
2007-01-10Extending true_false_string supportJaap Keuter1-1/+4
- Separate tfs.[ch] - Add larger sample collection - Properly export DATA svn path=/trunk/; revision=20373
2007-01-02Add a WIRESHARK_RUN_FROM_BUILD_DIRECTORY environment variable on UN*X;Guy Harris1-1/+1
if set, and if the program isn't running with additional privileges, it'll treat the directory in which the program is found as the data directory. If, on Windows, the version-number subdirectory of {data directory}\plugins doesn't exist (which is assumed to mean that the program is being run from the build directory), or if, on UN*X, WIRESHARK_RUN_FROM_BUILD_DIRECTORY is set, the plugin directory is the "plugins" subdirectory of the data directory, and all subdirectories of that directory are scanned for plugins, as the "plugins" subdirectory of the build directory contains subdirectories for the plugins; this means that if we're running from the build directory, we'll find the plugins we built in the build tree. When generating the wireshark-filter man page, run tshark with WIRESHARK_RUN_FROM_BUILD_DIRECTORY set, so it uses the plugins from the build to generate the list of filters. svn path=/trunk/; revision=20261
2006-12-20Updated to describe the current state of plugin development.Jaap Keuter1-31/+74
svn path=/trunk/; revision=20180
2006-12-14From Stig Bjorlykke:Stephen Fisher1-1/+1
* Fixed a typo in README.developer svn path=/trunk/; revision=20132
2006-12-07From Francesco Fondelli:Stephen Fisher1-0/+48
I defined a range_string struct. It's like value_string but stores range <-> string pairs. Moreover I wrote rval_to_str(), match_strrval_idx() match_strrval() which are behaving exactly as val_to_str(), match_strval_idx() and match_strval(). svn path=/trunk/; revision=20061
2006-12-05Add a few missing /$(MAKEFLAGS)Bill Meier1-2/+2
svn path=/trunk/; revision=20046
2006-12-05From Douglas Pratley with trivial changes and documentation changes Stephen Fisher2-4/+8
by myself: Corrected patch; epan/column.c and epan/column_utils.c were not included. This one has now been properly tested against a clean checkout of today's code. - New menu option available under view\time display format - New sub-option (e) to -t switch for both wireshark and tshark - Extended recent settings code to handle new value - Did NOT add new explicit epoch time column svn path=/trunk/; revision=20040
2006-11-29Add documentation of the col_set_fence() and col_prepend_fence_fstr() calls. ↵Jeff Morriss1-0/+17
I *think* I got the description of col_prepend_fence_fstr() right. svn path=/trunk/; revision=20015
2006-11-28add description of proto_tree_add_bitmask()Ronnie Sahlberg1-0/+52
svn path=/trunk/; revision=20011
2006-11-26Change to show how to write a 'new style' dissector (that is, one that ↵Jeff Morriss1-27/+54
returns the number of bytes it was able to dissect). I think the Developer's Guide (docbook/) probably needs similar updates but I'm a bit shy about editing XML with good old vi; maybe if I can figure out if I can build the doc in the first place... Also rewrap a few pararaphs that went past 80 columns. svn path=/trunk/; revision=19989
2006-11-21If you're doing TCP reassembly by hand rather than withGuy Harris1-32/+27
tcp_dissect_pdus(), pinfo->desegment_len indicates whether your dissector needs more data from TCP or not - the return value doesn't indicate that. Fix typo. It appears that the Id keyword is one of the case-insensitive ones in the svn:keywords property, so if you set it to "ID" it still expands "$Id$"; it also appears not to expand "$ID$". We use Revision, Date, and Author in the document to indicate the revision, and don't expand Id, so that references to "$Id$" get left alone. Rewrap paragraphs. svn path=/trunk/; revision=19950
2006-11-21Correct comments and examples on get_pdu_len().Jaap Keuter1-6/+6
svn path=/trunk/; revision=19949
2006-11-16Add comments to the indentation style section.Gerald Combs1-11/+18
svn path=/trunk/; revision=19910
2006-11-07Add Yet Another Portability Recommendation.Guy Harris1-0/+8
svn path=/trunk/; revision=19855
2006-10-26Mention the 64-bit-integer accessors.Guy Harris1-5/+8
svn path=/trunk/; revision=19703
2006-10-16- some more cleanupUlf Lamping1-32/+45
- mention the other README files - encode some @ chars to [AT] in mail addresses svn path=/trunk/; revision=19551
2006-10-16fix a typoUlf Lamping1-1/+1
svn path=/trunk/; revision=19550
2006-10-16split the display filter engine doc into it's own fileUlf Lamping2-112/+119
svn path=/trunk/; revision=19549
2006-10-15add a prerequisites section and some minor changesUlf Lamping1-3/+17
svn path=/trunk/; revision=19545
2006-10-14Update FSF address in code templateJaap Keuter1-1/+1
svn path=/trunk/; revision=19531
2006-10-12Cleanup sample code.Jaap Keuter1-109/+114
Cleanup some text and headings. Play trick with keyword so text remains untouched. svn path=/trunk/; revision=19504
2006-09-23change the Win32 build environment, so we can create release zip files ↵Ulf Lamping1-3/+3
without the need of an installer - a feature requested from time to time. When this is matured, we might want to add these zip files (of GTK1 and GTK2 versions) to the released files. config.nmake contains the target INSTALL1_DIR and INSTALL2_DIR. I guess you can retain the previous behaviour by using . for both DIRs, though I never tested this... svn path=/trunk/; revision=19302
2006-09-22Add support for reading from stdin under Windows. Based on a patch sentGerald Combs1-1/+1
in last year by Gianluca Varenni. Add partial support for reading from named pipes (currently disabled). Move utf_8to16() and utf_16to8() to a separate module (unicode-utils.[ch]) so that we don't have to cut and paste code in dumpcap.c. Fix up whitespace. svn path=/trunk/; revision=19291
2006-09-15Use SESSIONNAME instead of CLIENTNAME to try to detect RDP sessions.Gerald Combs1-1/+1
Look for a string that starts with "rdp". This should take care of cases where a default capture filter is set needlessly. Update the docs accordingly. svn path=/trunk/; revision=19236
2006-08-29from Stephen Fisher:Ulf Lamping1-20/+20
"I ran doc/README.developer through a spell checker and conservatively changed misspelled words. Attached is a compressed patch with the corrections." svn path=/trunk/; revision=19070
2006-08-27fix #1063, some leftover typo's: Etheral -> WiresharkUlf Lamping1-1/+1
svn path=/trunk/; revision=19053
2006-08-21Indicate in the synopsis that you can put the capture filter at the endGuy Harris1-0/+1
of the command line without "-f". svn path=/trunk/; revision=18990
2006-08-14rename some structures and defines from the se_tree to the emem_tree prefixRonnie Sahlberg2-17/+17
svn path=/trunk/; revision=18894
2006-08-13"bug" #1013: from Stephen FisherUlf Lamping1-0/+7
add the X --display command line parameter to the documentation svn path=/trunk/; revision=18889
2006-08-10Stephen Fisher:Jörg Mayer1-1/+1
This patch fixes two typos in README.developer svn path=/trunk/; revision=18870
2006-08-10Add some programs to 'see also'Jörg Mayer8-8/+15
svn path=/trunk/; revision=18867
2006-07-27Add duplicate frame detection (and removal) to editcap. (Some switchesGerald Combs1-0/+7
generate duplicate packets when a mirror/SPAN port is misconfigured). svn path=/trunk/; revision=18800
2006-07-18Fixes and updates.Gerald Combs1-8/+8
svn path=/trunk/; revision=18760
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-25 09:51:00 +0000