aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-sflow.c
AgeCommit message (Collapse)AuthorFilesLines
2012-08-10Use val_to_str_const() where appropriate;wmeier1-10/+10
Also (for a few files): - create/use some extended value strings; - remove unneeded #include files; - remove unneeded variable initialization; - re-order fcns slightly so prefs_reg_handoff...() at end, etc git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@44438 f5534014-38df-0310-8fa8-9805f1628bb7
2012-06-28Update FSF address - part II.darkjames1-1/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@43538 f5534014-38df-0310-8fa8-9805f1628bb7
2012-06-20Use separate filters for the RTT found on a SACK and the RTT found on amorriss1-39/+39
DATA chunk: having them in both places is helpful when looking at the messages but having them separate is helpful when graphing the RTTs. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@43406 f5534014-38df-0310-8fa8-9805f1628bb7
2011-11-08packet_info's in_error_pkt is now a bitfield like in_gre_pkt.cmaynard1-3/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39764 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-27Fix proto_tree_add_item( encoding args;wmeier1-2/+2
Do whitespace cleanup (for a few files). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39640 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-21For proto_tree_add_item(..., proto_xxx, ...)use ENC_NA as the encoding arg.wmeier1-2/+2
Also: remove trailing whitespace for a number of files. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39503 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-16Do some conversions of proto_tree_add_item() 'encoding' arg.wmeier1-3/+3
(previously missed). 57 FT_BOOLEAN: FALSE-->ENC_BIG_ENDIAN 31 FT_BOOLEAN: TRUE-->ENC_LITTLE_ENDIAN 10 FT_BYTES: ENC_BIG_ENDIAN-->ENC_NA 1 FT_BYTES: ENC_LITTLE_ENDIAN-->ENC_NA 21 FT_BYTES: FALSE-->ENC_NA 2 FT_BYTES: TRUE-->ENC_NA 2 FT_IPXNET: ENC_BIG_ENDIAN-->ENC_NA 6 FT_IPv6: ENC_BIG_ENDIAN-->ENC_NA 1 FT_IPv6: FALSE-->ENC_NA 6 FT_NONE: ENC_BIG_ENDIAN-->ENC_NA 19 FT_NONE: FALSE-->ENC_NA 3 FT_NONE: TRUE-->ENC_NA 1 FT_STRING: ENC_BIG_ENDIAN-->ENC_ASCII|ENC_NA 1 FT_STRING: ENC_LITTLE_ENDIAN-->ENC_ASCII|ENC_NA 5 FT_STRING: FALSE-->ENC_ASCII|ENC_NA 1 FT_STRING: TRUE-->ENC_ASCII|ENC_NA 4 FT_STRINGZ: ENC_NA-->ENC_ASCII|ENC_NA 8 FT_STRINGZ: FALSE-->ENC_ASCII|ENC_NA 1 FT_INT32: FALSE-->ENC_BIG_ENDIAN 1 FT_INT32: TRUE-->ENC_LITTLE_ENDIAN 11 FT_UINT8: 0-->ENC_BIG_ENDIAN 111 FT_UINT8: FALSE-->ENC_BIG_ENDIAN 17 FT_UINT8: TRUE-->ENC_LITTLE_ENDIAN 1 FT_UINT16: 0-->ENC_BIG_ENDIAN 68 FT_UINT16: FALSE-->ENC_BIG_ENDIAN 18 FT_UINT16: TRUE-->ENC_LITTLE_ENDIAN 4 FT_UINT24: FALSE-->ENC_BIG_ENDIAN 70 FT_UINT32: FALSE-->ENC_BIG_ENDIAN 1 FT_UINT32: TRUE-->ENC_LITTLE_ENDIAN 4 FT_UINT64: FALSE-->ENC_BIG_ENDIAN 1 FT_UINT64: TRUE-->ENC_LITTLE_ENDIAN 1 FT_UINT_STRING: FALSE-->ENC_ASCII|ENC_BIG_ENDIAN git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39442 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-10 Convert 'encoding' parameter of certain proto_tree_add_item() calls in ↵wmeier1-4/+4
non-autogenerated epan/dissectors: Specifically: Replace FALSE|0 and TRUE|1 by ENC_BIG_ENDIAN|ENC_LITTLE_ENDIAN as the encoding parameter for proto_tree_add_item() calls which directly reference an item in hf[] which has a type of: FT_BOOLEAN FT_IPv4 FT_EUI64 FT_GUID FT_UINT_STRING Also: For type FT_ITv6 use ENC_NA. (This was missed in SVN #39260) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39328 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-06Convert 'encoding' parameter of certain proto_tree_add_item() calls in ↵wmeier1-132/+132
non-autogenerated epan/dissectors: Specifically: Replace FALSE|0 and TRUE|1 by ENC_BIG_ENDIAN|ENC_LITTLE_ENDIAN as the encoding parameter for proto_tree_add_item() calls which directly reference an item in hf[] which has a type of: FT_UINT8 FT_UINT16 FT_UINT24 FT_UINT32 FT_UINT64 FT_INT8 FT_INT16 FT_INT24 FT_INT32 FT_INT64 FT_FLOAT FT_DOUBLE git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39288 f5534014-38df-0310-8fa8-9805f1628bb7
2011-10-04Use ENC_NA as encoding for proto_tree_add_item() calls which directly ↵wmeier1-1/+1
reference an hf item (in hf[] with types: FT_NONE FT_BYTES FT_IPV6 FT_IPXNET FT_OID Note: Encoding field set to ENC_NA only if the field was previously TRUE|FALSE|ENC_LITTLE_ENDIAN|ENC_BIG_ENDIAN git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@39260 f5534014-38df-0310-8fa8-9805f1628bb7
2011-08-08From Andrew Feren via bug 6219: Offset calculated incorrectly for sFlow ↵cmaynard1-3/+3
extended data. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@38419 f5534014-38df-0310-8fa8-9805f1628bb7
2011-03-12Improve r36177 per Guy's suggestion at bug #5746 to always call thesfisher1-7/+1
PPP-over-HDLC dissector since it will do the check for us to see if the HDLC framing is present or not. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@36178 f5534014-38df-0310-8fa8-9805f1628bb7
2011-03-12Handle PPP in HDLC framing. Fixes bug 5746.cmaynard1-1/+7
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@36177 f5534014-38df-0310-8fa8-9805f1628bb7
2010-12-20Rename the routines that handle dissector tables with unsigned integerguy1-2/+2
keys to have _uint in their names, to match the routines that handle dissector tables with string keys. (Using _port can confuse people into thinking they're intended solely for use with TCP/UDP/etc. ports when, in fact, they work better for things such as Ethernet types, where the binding of particular values to particular protocols are a lot stronger.) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@35224 f5534014-38df-0310-8fa8-9805f1628bb7
2010-12-06Fix various typos and spelling errors.wmeier1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@35126 f5534014-38df-0310-8fa8-9805f1628bb7
2010-11-12Getting wrong addr_type from the packet is not a dissector bug.stig1-2/+0
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@34847 f5534014-38df-0310-8fa8-9805f1628bb7
2010-11-11From Andrew Feren:etxrab1-143/+131
sflow decode error for some extended formats. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5379 git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@34840 f5534014-38df-0310-8fa8-9805f1628bb7
2010-10-08Restore pinfo->private_data after an exception was thrown by a subdissector.morriss1-22/+21
This is necessary in case a subdissector had changed it but was unable to restore it (due to the exception). Remove check_col(). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@34436 f5534014-38df-0310-8fa8-9805f1628bb7
2010-09-24(Refining the regexp...) Replace blurbs that match the name (case ↵morriss1-2/+2
insensitive) with NULL. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@34230 f5534014-38df-0310-8fa8-9805f1628bb7
2010-09-23Replace blurbs that match the name (case insensitive) with NULL.morriss1-34/+34
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@34227 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-16Various relatively small changes:wmeier1-82/+63
- #include stdio, stdlib, string not req'd. - Use less generic macro names for a few defines. - Fix some gcc -Wshadow warnings. - Use the "standard idiom" for handling port preferences; (Doing port add/delete via a registered_init routine is not req'd). - fix a typo. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31900 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-10Add SVN Id tagmorriss1-6/+8
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31855 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-09Don't trust the length field in a V5 sample to be valid.guy1-0/+2
This appears to fix bug 4473. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31846 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-09Do all the missing dissectors the same way.guy1-9/+20
Oh, and there's no dissector registered as "atm" - and, if there were, it probably wouldn't be able to handle AAL5 packets by themselves, as you'd probably have to supply pseudo-header information (where does the VPI/VCI come from, for example?). This fixes bug 4471. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31845 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-09Another BASE_NONE.etxrab1-1/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31839 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-08Terminate a value_string, and get rid of a non-ASCII character.guy1-1/+2
(No ligatures, please.) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31837 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-08flag two unusued arguments with _U_ to prevent a compiler warningsahlberg1-1/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31836 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-08Fix field base.etxrab1-6/+6
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31833 f5534014-38df-0310-8fa8-9805f1628bb7
2010-02-08From Yi Yu:etxrab1-1963/+3281
Enhanced sFlow dissector. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3543 git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31832 f5534014-38df-0310-8fa8-9805f1628bb7
2010-01-03Use different abbrev for IPv4 and IPv6 address.stig1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31433 f5534014-38df-0310-8fa8-9805f1628bb7
2009-08-09Don't guard col_set_str (COL_PROTOCOL) with col_checkkrj1-2/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@29340 f5534014-38df-0310-8fa8-9805f1628bb7
2009-06-30Add some length checks. Fixes bug 3567.gerald1-4/+22
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@28897 f5534014-38df-0310-8fa8-9805f1628bb7
2009-06-18From Kovarththanan Rajaratnam via bug 3548:stig1-11/+11
(1) Trailing/leading spaces are removed from 'name's/'blurb's (2) Duplicate 'blurb's are replaced with NULL (3) Empty ("") 'blurb's are replaced with NULL (4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME, FT_PROTOCOL, FT_STRING and FT_STRINGZ field types (5) Only allow non-zero value for 'display' if 'bitmask' is non-zero git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@28770 f5534014-38df-0310-8fa8-9805f1628bb7
2009-05-01From Reinhard Speyerer:jake1-1/+1
This patch fixes several misspellings/typos in Wireshark SVN revision 28201. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@28225 f5534014-38df-0310-8fa8-9805f1628bb7
2009-04-07Use some default true_false_string's.wmeier1-6/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@27983 f5534014-38df-0310-8fa8-9805f1628bb7
2009-03-08From Peter (bug 3314):stig1-4/+4
Fixed some 'longjmp' issues. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@27654 f5534014-38df-0310-8fa8-9805f1628bb7
2009-01-13Minor changes related to reg_handoff_ & proto_register_wmeier1-4/+5
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@27225 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-02From Jim Young (bug 3092):stig1-1/+1
The attached patch changes the label for the sflow.fs.seqno from "Sequence number:" to "Sample sequence number:". This change helps differentiate this particular item from the sflow.sequence_number which also uses the label of "Sequence number:". git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26902 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-02- Make sure we hanlde arrays with length 0 correctly.jmayer1-11/+18
- Trivial warning (shadowed variable) fix. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26900 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-01Initialize sample_enterprise.stig1-0/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26895 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-01- Add some detail infos to the parent treesjmayer1-39/+63
- Improve decoding of the enterprise/type field - Remove some unused code git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26894 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-01Attempt to fix build errors.stig1-21/+23
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26892 f5534014-38df-0310-8fa8-9805f1628bb7
2008-12-01The good:jmayer1-504/+1084
- Implement the beginnings of sflow5 support. - Get rid if the inconsistencies regarding return values: Always return the offset. - Make more elements filterable - Make the naming of elements more consistent (not finished) - To see what's missing have a look at the TODO section at the beginning of the file and search for XXX in the code. The not so good: - Only tested with a single sample trace. No extended/expanded data in that trace. - This patch hopefully doesn't break sflow4 support, but I didn't have any traces to test with, so please test. - The names of many filters have changed to make things more consistent. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26891 f5534014-38df-0310-8fa8-9805f1628bb7
2008-09-02Minor cleanup (mostly related to proto_reg_handoff...)wmeier1-6/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@26121 f5534014-38df-0310-8fa8-9805f1628bb7
2008-07-09From Motonori Shindo:jake1-0/+100
Currently, sFlow dissector only recongnizes "Header" as the packet data type. This patch enhances it to support "IPv4" and "IPv6" packet data type. This patch seems to work well against sFlow packets exported from AlaxalA switch. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@25688 f5534014-38df-0310-8fa8-9805f1628bb7
2008-04-12From Andrew Ferren (big 2434):sake1-1/+1
While borrowing code from an other dissector I have worked on I realized I previously "borrowed" a comment and typo. Here's a fix. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@24928 f5534014-38df-0310-8fa8-9805f1628bb7
2008-03-05From Andrew Feren :etxrab1-25/+203
Decoding extended gateway information not implemented for sFlow git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@24565 f5534014-38df-0310-8fa8-9805f1628bb7
2008-02-07Removed even more "statement not reached" warnings.stig1-3/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@24286 f5534014-38df-0310-8fa8-9805f1628bb7
2007-10-19From Andrew Feren:sake1-17/+93
sFlow datagrams can contain sampled headers from conversations on the network. Often it is convenient to have wireshark dissect these payload headers, but doing so can also have undesirable side effects. Dissected payload headers may match filters looking for header fields that also happen to occur in the payload. This can cause surprising results. Also TCP analysis will almost always flag errors on sampled headers. They are, after all, just a sample and many sequence numbers are sure to be missing. There is probably a more general way to resolve these issues, but adding preferences to enable/disable tcp analysis and dissection of sampled headers will be a good start. This will make it possible to examine the details of sampled headers if desired or to disable dissection if the side effects of dissecting sampled headers cause issues. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@23230 f5534014-38df-0310-8fa8-9805f1628bb7
2007-10-11From Andrew Feren:stig1-12/+89
Add preference to allow user to configure the port(s) to use when identifying sFlow. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@23153 f5534014-38df-0310-8fa8-9805f1628bb7