aboutsummaryrefslogtreecommitdiffstats
path: root/follow.c
AgeCommit message (Collapse)AuthorFilesLines
2002-12-02Don't cast away constness, and fix variable and structure memberguy1-3/+3
qualifiers as necessary to ensure that we don't have to. "strcmp()", "strcasecmp()", and "memcmp()" don't return booleans; don't test their results as if they did. Use "guint8", not "guchar", for a pointer to (one or more) 8-bit bytes. Update Michael Tuexen's e-mail address. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6726 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-28Removed trailing whitespaces from .h and .c files using thejmayer1-28/+28
winapi_cleanup tool written by Patrik Stridvall for the wine project. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6117 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-02Replace the types from sys/types.h and netinet/in.h by their glib.hjmayer1-15/+11
equivalents for the toplevel directory. The removal of winsock2.h will hopefully not cause any problems under MSVC++, as those files using struct timeval still include wtap.h, which still includes winsock2.h. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5932 f5534014-38df-0310-8fa8-9805f1628bb7
2002-02-28In follow.c, initialize data_out_file to NULL, as it used togram1-2/+2
be initialized in gtk/follow_dlg.c In gtk/follow_dlg.c, declare data_out_file as 'extern'. In tethereal.c, no longer define 'data_out_file', as the storage for it is now in follow.c. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@4830 f5534014-38df-0310-8fa8-9805f1628bb7
2002-01-21Include files from the "epan" directory and subdirectories thereof withguy1-4/+3
"epan/..." pathnames, so as to avoid collisions with header files in any of the directories in which we look (e.g., "proto.h", as some other package has its own "proto.h" file which it installs in the top-level include directory). Don't add "-I" flags to search "epan", as that's no longer necessary (and we want includes of "epan" headers to fail if the "epan/" is left out, so that we don't re-introduce includes lacking "epan/"). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@4586 f5534014-38df-0310-8fa8-9805f1628bb7
2001-05-24Fix to TCP reassembly code for retransmitted data, from Edgar Iglesias.guy1-1/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@3447 f5534014-38df-0310-8fa8-9805f1628bb7
2000-08-24Do not malloc a TCP fragment for a packet that does not contain data.deniel1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@2364 f5534014-38df-0310-8fa8-9805f1628bb7
2000-08-11- add ipv6.addr for the source and destination addresses (like ipv4)deniel1-21/+43
- implement the TCP follow feature for TCP over IPv6 git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@2258 f5534014-38df-0310-8fa8-9805f1628bb7
2000-08-09In TCP Follow window, allow the optional showing of:gram1-6/+22
Entire Conversation Client -> Server packets Server -> Client packets Have "Save As" button work as a "Print to File" button; it asks for a filename and uses the same routine that "Print" uses to save the file. What you see in the window is what you get in the file. So, you can get any of the above conversations/soliloquies combined with: ASCII EBCDIC Hex Dump git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@2232 f5534014-38df-0310-8fa8-9805f1628bb7
2000-08-03Add a "Save As" feature to the TCP Follow dialogue, to save the streamgram1-2/+2
file to a user-specified file. Move the file-copy routine in save_cap_file() to an indepenent function in file.c (copy_binary_file()) so that follow_dlg.c can use it. Remove #include "follow.h" from the C files that don't need it. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@2200 f5534014-38df-0310-8fa8-9805f1628bb7
2000-07-07Use "progdlg_t *" rather than "void *" as the handle for a progressguy1-3/+3
dialog box; that lets us do some type-checking, but we can still typedef it to an incompletely-defined structure to hide the implementation details from the caller. Make "create_progress_dlg()" take, as an argument, the title to put in the "stop the operation" button, and use "Stop" rather than "Cancel" if stopping the operation doesn't undo all the work it's done. Thaw the clist if we break out of a "read the file" operation, as we freeze it before the operation. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@2121 f5534014-38df-0310-8fa8-9805f1628bb7
2000-03-12In the TCP stream following code, we don't use the time stamp field inguy1-13/+20
the stuff we write to the temporary file, so don't bother writing it. Keep track of the two sides of the TCP stream by keeping track of the source address *and* port, so that we correctly handle connections between two ports on the same machine. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@1712 f5534014-38df-0310-8fa8-9805f1628bb7
1999-12-10Remove unnecessary gtk-related #includes.gram1-3/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@1274 f5534014-38df-0310-8fa8-9805f1628bb7
1999-12-02Remove the check for cs->dlen > 0. We want to log the first (zero length)gerald1-4/+1
packet, since that tells us the direction of the connection. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@1178 f5534014-38df-0310-8fa8-9805f1628bb7
1999-11-28Add code to colorize TCP streams.gerald1-12/+26
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@1131 f5534014-38df-0310-8fa8-9805f1628bb7
1999-11-18Clean up some ANSI C nits pointed out by "gcc -pedantic".guy1-3/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@1060 f5534014-38df-0310-8fa8-9805f1628bb7
1999-10-22Generalize the "ip_src" and "ip_dst" members of the "packet_info"guy1-10/+18
structure to "dl_src"/"dl_dst", "net_src"/"net_dst", and "src"/"dst" addresses, where an address is an address type, an address length in bytes, and a pointer to that many bytes. "dl_{src,dst}" are the link-layer source/destination; "net_{src,dst}" are the network-layer source/destination; "{src,dst}" are the source/destination from the highest of those two layers that we have in the packet. Add a port type to "packet_info" as well, specifying whether it's a TCP or UDP port. Don't set the address and port columns in the dissector functions; just set the address and port members of the "packet_info" structure. Set the columns in "fill_in_columns()"; this means that if we're showing COL_{DEF,RES,UNRES}_SRC" or "COL_{DEF,RES,UNRES}_DST", we only generate the string from "src" or "dst", we don't generate a string for the link-layer address and then overwrite it with a string for the network-layer address (generating those strings costs CPU). Add support for "conversations", where a "conversation" is (at present) a source and destination address and a source and destination port. (In the future, we may support "conversations" above the transport layer, e.g. a TFTP conversation, where the first packet goes from the client to the TFTP server port, but the reply comes back from a different port, and all subsequent packets go between the client address/port and the server address/new port, or an NFS conversation, which might include lock manager, status monitor, and mount packets, as well as NFS packets.) Currently, all we support is a call that takes the source and destination address/port pairs, looks them up in a hash table, and: if nothing is found, creates a new entry in the hash table, and assigns it a unique 32-bit conversation ID, and returns that conversation ID; if an entry is found, returns its conversation ID. Use that in the SMB and AFS code to keep track of individual SMB or AFS conversations. We need to match up requests and replies, as, for certain replies, the operation code for the request to which it's a reply doesn't show up in the reply - you have to find the request with a matching transaction ID. Transaction IDs are per-conversation, so the hash table for requests should include a conversation ID and transaction ID as the key. This allows SMB and AFS decoders to handle IPv4 or IPv6 addresses transparently (and should allow the SMB decoder to handle NetBIOS atop other protocols as well, if the source and destination address and port values in the "packet_info" structure are set appropriately). In the "Follow TCP Connection" code, check to make sure that the addresses are IPv4 addressses; ultimately, that code should be changed to use the conversation code instead, which will let it handle IPv6 transparently. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@909 f5534014-38df-0310-8fa8-9805f1628bb7
1999-09-09More shuffling of GTK-related files to gtk subdirectory.gram1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@635 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-31Fix TCP follow stream feature:deniel1-2/+19
- call reset_tcp_reassembly before build_follow_filter - modify reassemble_tcp so that packet validity is checked before processing it. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@410 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-31Remove srcip and destip from packet_info since it is not safe to affectdeniel1-3/+6
string pointer from the result of ip_to_str (statically allocated string). Use the ip_src and the new field ip_dst in follow.c to build a correct string display filter. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@408 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-17Added just enough fields to TCP to support "Follow TCP Stream". It works now.gram1-3/+3
Added the protocol IDs for ipx and IGMP, but not their fields. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@365 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-13Added support for compiling on win32 with Visual C and 'nmake'. It compiles,gram1-1/+3
but does not link. Perhaps someone who understands the MS tools can help out. I made it link a few months ago, but with different version of glib/gtk+. I can't remember how I made it link. Most of the compatibility issues were resolved with adding #ifdef HAVE_UNISTD_H the the source code. Please be sure to add this to all future code. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@359 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-07Created a new protocol tree implementation and a new display filtergram1-1/+2
mechanism that is built into ethereal. Wiretap is now used to read all file formats. Libpcap is used only for capturing. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@342 f5534014-38df-0310-8fa8-9805f1628bb7
1999-07-07From Jason Lango <jal@netapp.com>, a fix to a long-standing problemguy1-4/+7
(which could cause core dumps in "Follow TCP Stream") - "check_fragments()" was, when deleting a TCP segment at the beginning of the list of segments, setting "src[index]" to point to the next segment, not "frags[index]". "src[index]" is the source IP address, not a pointer to a fragment. Also, make some routines not used outside "follow.c" static. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@341 f5534014-38df-0310-8fa8-9805f1628bb7
1999-06-25In my haste to get rid of the compilation warning, I converted thegram1-2/+2
pointer to a signed int instead of an unsigned int. In my testing the code still worked, but it's better to do the conversion correctly. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@331 f5534014-38df-0310-8fa8-9805f1628bb7
1999-06-23Finally! Got rid of compilation warning about converting pointer to intgram1-2/+2
in line 198. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@328 f5534014-38df-0310-8fa8-9805f1628bb7
1999-03-23Fixes to the TCP reassembly code to correctly handle too shortdeniel1-8/+34
caplen or incomplete data (avoid crashes or erroneous display). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@227 f5534014-38df-0310-8fa8-9805f1628bb7
1998-12-17A patch spread across many files to let Ethereal compile under GTK+-1.1.x.gram1-1/+3
Tests for GTK versions are done during compilation, not during "./configure". The big problems have been taken care of in this patch (functional change in the packet clist and conversion of menu_factory to item_factory), but plenty of smaller problems with dialogue boxes abound. I have fixed a small problem with file_open*(), but have left 2 comments in just in case I'm not going about this the right way. Can someone verify? git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@127 f5534014-38df-0310-8fa8-9805f1628bb7
1998-10-28Use "memcpy()" rather than "bcopy()", to eliminate one "gcc -Wall"guy1-2/+2
warning. (We use "memcpy()" everywhere else.) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@73 f5534014-38df-0310-8fa8-9805f1628bb7
1998-10-10* OSPF alignment fixes (Gerald)gerald1-1/+9
* FDDI support (Laurent, Guy) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@36 f5534014-38df-0310-8fa8-9805f1628bb7
1998-09-27Merged in a _huge_ patch from Guy Harris. It adds a time stap column,gerald1-3/+4
generalizes the column printing code, adds a "frame" tree item to the tree view, and fixes a bunch of miscellaneous coding bugs. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@31 f5534014-38df-0310-8fa8-9805f1628bb7
1998-09-17* Added Mike Hall's TCP reconstruction code.gerald1-0/+197
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@10 f5534014-38df-0310-8fa8-9805f1628bb7