aboutsummaryrefslogtreecommitdiffstats
path: root/epan
AgeCommit message (Collapse)AuthorFilesLines
2006-05-05add two missing DCOM Dispatch error codesUlf Lamping1-0/+2
svn path=/trunk/; revision=18097
2006-05-05fix dissection of IDispatch Invoke dissection, if rgdispidNamedArgs array ↵Ulf Lamping1-8/+2
isn't NULL svn path=/trunk/; revision=18096
2006-05-05fix VARIANT BOOL meaningUlf Lamping1-2/+2
svn path=/trunk/; revision=18095
2006-05-04fix spelling: PROFInet -> PROFINETUlf Lamping2-2/+2
svn path=/trunk/; revision=18094
2006-05-04From LEGO fix "Dissector bug, Protocol H248"Anders Broman2-4/+4
svn path=/trunk/; revision=18093
2006-05-04From Menno AndriesseJaap Keuter1-1/+5
By popular request (sort of...) here is a patch for the S5066 dissector to enable TCP port preference. svn path=/trunk/; revision=18092
2006-05-04From: Thomas BoehneJaap Keuter1-0/+1
But since most PLCs now offer to run the protocol directly on TCP, I attached a little patch. svn path=/trunk/; revision=18090
2006-05-04force the AssertionValue type to be displayed as a STRING instead of as hex ↵Ronnie Sahlberg1-17/+17
BYTES. Most of the time AssertionValue will contain an ascii string so make it always display as a string to make the display "correct" most of the time insterad of being "wrong" most of the time. There are situations when AssertionValue contains binary data though and in those cases the display will be "wrong" (but not more wrong than the old dissector anyway) What someone really should do (someone interested in ldap that is) to make it more correct would be to implement a dissector for AssertionValue in the template file and having the dissector check if any of the bytes of the octet string has a value <32 and if so display it in hex as 0x..... It all bytes have values >=32 then it shoudlk display it as a string "... instead. Someone interested in ldap may spend time on this refinement. svn path=/trunk/; revision=18089
2006-05-04from Guenther DeschnerRonnie Sahlberg1-0/+2
Two more Kerberos error codes where it has been witnessed that the payload contains a PA-DATA structure with the magic salt containing an nt status code svn path=/trunk/; revision=18088
2006-05-03col_append_str() instead of col_set_str() by mistake.Anders Broman1-2/+2
svn path=/trunk/; revision=18087
2006-05-03Use the asn2eth generated snmp dissector.Anders Broman2-1607/+2276
svn path=/trunk/; revision=18086
2006-05-03Add dissection of country code if number is in international format and ↵Anders Broman2-0/+175
Number plan is E164. svn path=/trunk/; revision=18085
2006-05-03Fix Bug 916 PurgeMS decoding error in GSM MAP.Anders Broman1-92/+55
Get rid of som unused ASN1 code and some asn2eth warnings. svn path=/trunk/; revision=18084
2006-05-03do some template magic to make ethereal dissect CLDAP RPC again.Ronnie Sahlberg2-52/+456
i dont think it is the optimal way to solve this but it is better than nothing for the time being. svn path=/trunk/; revision=18083
2006-05-03From Paolo Abeni:Anders Broman3-57/+129
authesserre samuel <sauthess@gmail.com> kindly pointed out an issue with session renegotiation in the current ssl decryption code. Encrypted handshake message are decrypted, but the dissector try to interpret the encrypted code. Renegotiation messages are therefore ignored. The attached pcap trace and key can be used to trigger the issue. The attached patch fix the problem storing the decrypted version of encrypted handshake message and dissecting it when available. The patch also fix bad issue with des cipher (alike the issue fixed in my previous post) svn path=/trunk/; revision=18081
2006-05-03From Andrei Emeltchenko:Anders Broman1-5/+26
I attached patch to add preferences in SDP for RTP stream detection. By default SDP decodes RTP stream but now I can disable it. svn path=/trunk/; revision=18080
2006-05-02Fix Bug 913 DateAndTime dissection error in CAMEL CallInfoReportArg Anders Broman1-5/+5
svn path=/trunk/; revision=18079
2006-05-02Do the ESP payload decoding, and pass it to the subdissector, regardlessGuy Harris1-672/+713
of whether we're building a protocol tree or not - you have to call subdissectors in either case. svn path=/trunk/; revision=18078
2006-05-02Makefiles for OMA UserPlane Location Protocol packet dissection..Anders Broman1-0/+2
svn path=/trunk/; revision=18077
2006-05-02Add OMA UserPlane Location Protocol packet dissectorAnders Broman2-0/+3464
svn path=/trunk/; revision=18076
2006-05-02MSVC is picky about assignments in declarations.Anders Broman1-2/+2
svn path=/trunk/; revision=18074
2006-05-02Not all compilers support unnamed struct/union fields withinGuy Harris2-14/+14
structs/unions (GCC supports it "for compatibility with other compilers"; presumably that's not for compatibility with the version of Sun C that rejected it - was that a PCCism?). svn path=/trunk/; revision=18072
2006-05-02Add infrastructure for display filter functions.Gilbert Ramirez26-56/+819
Add upper() and lower() display filter functions for string fields. svn path=/trunk/; revision=18071
2006-05-02implement decryption of and dissection ofRonnie Sahlberg1-4/+190
EncKrbCredPart Packet 18 in sample capture kerberos-Delegation.zip on the wiki contains this structure. svn path=/trunk/; revision=18069
2006-05-02Add newlines to the ends of the files.Guy Harris1-1/+1
svn path=/trunk/; revision=18068
2006-05-01Include <epan/strutil.h> to define g_ascii_isprint() on systems withGuy Harris1-6/+7
GLib 1.2[.x]. svn path=/trunk/; revision=18061
2006-05-01Operation request/result correlation and timing.Graeme Lunt2-71/+247
svn path=/trunk/; revision=18058
2006-05-01Use the asn2eth generated ldap dissector.Anders Broman2-2426/+2442
svn path=/trunk/; revision=18057
2006-05-01Preference to disable BER length sanity check (needed for asn2eth LDAP ↵Graeme Lunt1-6/+13
dissector). svn path=/trunk/; revision=18056
2006-05-01MS KDC sends a PA_DATA with a magic salt containing an nt status code also ↵Ronnie Sahlberg1-2/+2
for ERR_BADOPTION which can be seen in the constrained-delegation.zip capture on the wiki sample captures page. svn path=/trunk/; revision=18055
2006-05-01It's g_strdup_printf(), not g_sprintf_alloc().Guy Harris1-3/+4
Declare "error", and properly terminate a string. svn path=/trunk/; revision=18054
2006-05-01remove a test for NULL we dont need since itlq can not be null here and thus weRonnie Sahlberg1-2/+2
dont need to test for it. this unnecessary test for itlq==NULL was shown by coverity issue 151 svn path=/trunk/; revision=18052
2006-05-01Handle the case where we *can't* determine the pathname in which to findGuy Harris2-46/+104
programs, by reporting it with a dialog box that at least attempts to indicate what the problem is, and by giving up early on running dumpcap. svn path=/trunk/; revision=18051
2006-05-01Have "pdu_store_sequencenumber_of_next_pdu()" return the newly-allocatedGuy Harris1-23/+46
"struct tcp_multisegment_pdu"; that lets it be used in one case where the code in it was duplicated. Make "desegment_tcp()" loop rather than recursing - not all compilers will necessarily recognize the tail recursion. Catch heuristic dissectors that reject a packet but also request (whether deliberately or accidentally) that more data be added. svn path=/trunk/; revision=18050
2006-05-01UDP and SCTP aren't byte-stream protocols, so they don't offer TCP-styleGuy Harris1-3/+106
reassembly. UDP has no notion of reassembly - that's done at the IP layer - and SCTP has its own notions of reassembly which it currently doesn't provide. As such, TCP-style reassembly isn't possible for JXTA-over-UDP or JXTA-over-SCTP. As for TCP, a heuristic dissector for a TCP-based protocol can't request more data if it's rejecting a packet; make it not do so. That should fix the recent buildbot crash, although there are still some reassembly problems with that capture (c05-http-reply-r1.pcap.gz in the menagerie and on the SampleCaptures page of the Wiki) that aren't fixed yet. svn path=/trunk/; revision=18049
2006-04-30Operational Attributes and SyntaxesGraeme Lunt6-73/+1094
svn path=/trunk/; revision=18048
2006-04-30Fix for bug 881. Adding processing of error packet when server greeting is ↵Jaap Keuter1-20/+51
expected. svn path=/trunk/; revision=18047
2006-04-30tcp reassembly updatesRonnie Sahlberg1-216/+69
use tcp_multisegment_pdu and se_tree_lookup32_le() to track pdu boundaries for tcp reassembly just as this structure is used for the same purpose when reassembly is not enabled. get rid of a hashtable and two memchunks we no longer need tcp_segment_table tcp_segment_key_chunk and tcp_segment_address_chunk This makes tcp reassembly work for out-of-order segments as well as when reassembly completes in one segment and when the tail of the segment contains the head of the next pdu which we did not handle before. tcp reassembly should be much better and efficient now modulo introduced regressions. svn path=/trunk/; revision=18046
2006-04-30Constify some stuff, to eliminate compiler warnings and to make a tableGuy Harris1-3/+3
that isn't written const. svn path=/trunk/; revision=18044
2006-04-30No C++/C99 comments, please (GCC warns about them in the SolarisGuy Harris1-3/+3
buildbot build, even though the code is #if 0'ed out). svn path=/trunk/; revision=18043
2006-04-29Add some simple sanity checking of BVLC packets, so if you're unluckyGuy Harris1-15/+27
enough to have a non-BVLC packet from or to port 47808, we're likely to reject it and let another dissector try it. Fixes bug 855 (in which an MS Messenger packet was unlucky enough to have come from that port). Add value_string tables to some fields, and just use proto_tree_add_uint() to add them to the protocol tree, rather than generating our own text for them. svn path=/trunk/; revision=18033
2006-04-29Clean up indentation; use 2-space indentation throughout.Guy Harris1-678/+672
Save the media encoding name in the transport_info_t structure rather than in a global variable. Allocate it with tvb_get_ephemeral_string() so it's released after the packet is completely processed. Do *NOT* assume it's necessarily non-null in decode_sdp_fmtp(), as the code flow doesn't guarantee that to be true. proto_tree_add_string() now suffices for adding a particular SDP item - strings are now displayed "safely", with escaping of non-printable characters done. Update a comment (we no longer have the Big Transfer Vector to allow plugins to call dissector functions in Windows, we have those functions in a DLL). svn path=/trunk/; revision=18031
2006-04-29chrisaudley@yahoo.com:Jörg Mayer1-0/+158
Patch to fix: [Bug 904] FIX protocol dissector missing some message types svn path=/trunk/; revision=18030
2006-04-29A dissector called from tcp_dissect_pdus() has to return void. (If youGuy Harris1-48/+46
want to have a dissector capable of rejecting packets, you need to reject the packet before you call tcp_dissect_pdus() - once you're doing reassembly, etc., it's too late to reject the packet.) svn path=/trunk/; revision=18029
2006-04-28Check Payload type before dissecting fmtp parameters.Anders Broman1-12/+24
svn path=/trunk/; revision=18028
2006-04-28Fix bug 896 by using tcp_dissect_pdus() .Anders Broman1-3/+30
svn path=/trunk/; revision=18027
2006-04-28Fix logic used to test protection under Windows OT. Only initializeGerald Combs1-14/+27
our page size and OS version information once. svn path=/trunk/; revision=18025
2006-04-28 tcp analysis updates to prepare for later tcp reassembly updatesRonnie Sahlberg2-188/+56
now that we have se_tree_lookup32_le we can do the tracking of pdu boundaries much more efficiently. track pdu boundaries by a new tcp_multisegment_pdu structure that is indexed by sequence numbers and let this structure replace the older tcp_next_pdu structure. with se_tree_lookup32_le we no longer need to track segment by segment and can get rid of the two hash tables tcp_pdu_tracking_table tcp_pdu_skipping_table Neither do we need the tree tcp_pdu_time_table anymore so that one is gone as well. remove various other functions that are no longer needed due to removing the structure and the tables/tree this part of the code shoul;d be much more readable now and also a bit faster svn path=/trunk/; revision=18024
2006-04-28Don't change rflags for any properties other thanGuy Harris1-10/+0
IEEE80211_RADIOTAP_FLAGS. svn path=/trunk/; revision=18022
2006-04-27This was completely broken, as the "length" variable actually reflectedGuy Harris1-25/+27
the amount of data left in the radiotap header after the fields we've processed so far, not the total length of the header, so it couldn't be used to skip past the radiotap header and get a tvbuff of the packet data. Fix that. svn path=/trunk/; revision=18020
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-01 14:33:02 +0000