aboutsummaryrefslogtreecommitdiffstats
path: root/packet-nbns.c
AgeCommit message (Collapse)AuthorFilesLines
1999-11-16Replace the ETT_ "enum" members, declared in "packet.h", withGuy Harris1-14/+42
dynamically-assigned "ett_" integer values, assigned by "proto_register_subtree_array()"; this: obviates the need to update "packet.h" whenever you add a new subtree type - you only have to add a call to "proto_register_subtree_array()" to a "register" routine and an array of pointers to "ett_", if they're not already there, and add a pointer to the new "ett_" variable to the array, if they are there; would allow run-time-loaded dissectors to allocate subtree types when they're loaded. svn path=/trunk/; revision=1043
1999-11-08The equivalent, for NBNS, of Brian J. Murrell's DNS patch to putGuy Harris1-374/+417
information about the queries and answers into the COL_INFO column in the summary pane. svn path=/trunk/; revision=991
1999-10-17Add display filters for nbns, nbdgm and nbss protocols.Laurent Deniel1-42/+155
svn path=/trunk/; revision=873
1999-10-07A DNS or NBNS name may contain pointers to other names in the packet; ifGuy Harris1-34/+9
the stuff referred to by those pointers goes past the end of the packet, that's not a reason not to return the length of the DNS or NBNS name itself - you can tag that name even though it's bad. Therefore, "get_dns_name()" should return the length of the part of the name it's looked at even if that name contains a pointer to stuff that goes past the end of the packet. This means you can't check its return value to see if it's negative, and treat it as an error if it is; remove that stuff. Add checks to make sure the type and class fields in an RR don't go past the end of the packet. svn path=/trunk/; revision=781
1999-10-07Add more packet bounds checking to DNS, and add some to NetBIOS-over-TCPGuy Harris1-115/+319
as well. svn path=/trunk/; revision=779
1999-10-03A small fix to the handling of NetBIOS continuation messages where aRichard Sharpe1-1/+2
POSITIVE_SESSION_ACK was treated as a continuation :-( svn path=/trunk/; revision=759
1999-09-03Use "process_netbios_name()", rather than "canonicalize_netbios_name()",Guy Harris1-82/+87
to turn NetBIOS names into a nice printable form. Put the description of NetBIOS name types into places where it fits; have "packet-netbios.c" export a routine to interpret them. svn path=/trunk/; revision=630
1999-08-21Move the code to set "max_data" in "dissect_nbss()" earlier, so thatGuy Harris1-2/+7
it's set before we dissect continuations. svn path=/trunk/; revision=538
1999-08-21This is the code in packet-nbns that handles continuation messages.Richard Sharpe1-1/+25
It checks to see if the packet we have in front of us does not start with one of the four NetBIOS over TCP/IP message types, or if it is a data message, then looks for \0377SMB in the first four bytes ... It seems to work well on one large trace of Samba activity that I have. ` svn path=/trunk/; revision=536
1999-08-18Declare the "packet_info" structure "pi" in "packet.h", rather than in aGuy Harris1-8/+10
bunch of source files. Replace the "payload" field of a "packet_info" structure with "len" and "captured_len" fields, which contain the total packet length and total captured packet length (including all headers) at the current protocol layer (i.e., if a given layer has a length field, and that length field says its shorter than the length we got from the capture, reduce the "pi.len" and "pi.captured_len" values appropriately). Those fields can be used in the future if we add checks to make sure a field we're extracting from a packet doesn't go past the end of the packet, or past the captured part of the packet. Get rid of the additional payload argument to some dissection functions; use "pi.captured_len - offset" instead. Have the END_OF_FRAME macro use "pi.captured_len" rather than "fd->cap_len", so that "dissect the rest of the frame" becomes "dissect the rest of the packet", and doesn't dissect end-of-frame padding such as padding added to make an Ethernet frame 60 or more octets long. (We might want to rename it END_OF_PACKET; if we ever want to label the end-of-frame padding for the benefit of people curious what that extra gunk is, we could have a separate END_OF_FRAME macro that uses "fd->cap_len".) svn path=/trunk/; revision=506
1999-07-29Made the protocol (but not the fields) use the new proto_tree routine,Gilbert Ramirez1-7/+22
allowing users to filter on the existence of these protocols. I also added packet-clip.c to the Nmake makefile. svn path=/trunk/; revision=402
1999-07-07Created a new protocol tree implementation and a new display filterGilbert Ramirez1-124/+114
mechanism that is built into ethereal. Wiretap is now used to read all file formats. Libpcap is used only for capturing. svn path=/trunk/; revision=342
1999-06-01As we may return an error message, rather than a NetBIOS name, fromGuy Harris1-3/+3
"get_nbns_name()", make sure the array into which you put the name is "big enough" - MAXDNAME+4 is more than big enough for those error messages. svn path=/trunk/; revision=299
1999-05-27Correctly handle the case of the root showing up as a name in a DNSGuy Harris1-2/+2
request or reply. (Redid "get_dns_name()" along the lines of the code in the BSD resolver.) Add code to dissect SOA RRs. svn path=/trunk/; revision=297
1999-05-10Pass NBDS packets on to SMB even if we're only generating a summaryGuy Harris1-24/+34
line, so that they show up as SMB packets, rather than NBDS packets, in the summary display. Put SMB at the top level of the decode tree for NBDS packets, as is done for NBSS packets. svn path=/trunk/; revision=270
1999-05-10Decode SMB requests inside NetBIOS Datagram Service packets.Guy Harris1-3/+8
svn path=/trunk/; revision=269
1999-05-10EGCS 1.1's dataflow analysis (and probably that of other versions ofGuy Harris1-2/+2
GCC) isn't sophisticated enough to figure out that "nbss_tree" isn't used if "tree" is null (or doesn't trust it not to change out from under it), so we have to initialize "nbss_tree" to NULL to squelch complaints about it being used but uninitialized. svn path=/trunk/; revision=264
1999-05-09Added initial support for SMB plus most of negprot decode ..Richard Sharpe1-48/+70
svn path=/trunk/; revision=258
1999-04-30Add support for the NetBIOS Session Service.Guy Harris1-31/+178
Improve the descriptions of the NetBIOS Name Service errors a bit. svn path=/trunk/; revision=247
1999-03-23Removed all references to gtk objects from packet*.[ch] files. They nowGilbert Ramirez1-144/+143
reference the protocol tree with struct proto_tree and struct proto_item objects. That way, the packet decoding source code file can be used with non-gtk packet decoders, like a curses-based ethereal, e.g. I also re-arranged some of the information in packet.h to more appropriate places (like other packet-*.[ch] files). svn path=/trunk/; revision=223
1999-01-05Clean up what's displayed for unknown opcodes and unknown rcodes.Guy Harris1-3/+3
svn path=/trunk/; revision=160
1999-01-05Decode the various flag fields in resource records in NBNS replies.Guy Harris1-86/+215
svn path=/trunk/; revision=159
1999-01-04Decode the word containing the opcode, flags, reply code, etc. in DNSGuy Harris1-97/+162
and NBNS requests. Put the opcode in the COL_INFO field for DNS requests (it was already there for NBNS requests). Don't assume a DNS or NBNS request is neatly aligned on a 2-byte boundary (it might not be if, for example, the packet is an FDDI packet). svn path=/trunk/; revision=153
1998-12-04When dissecting DNS or NBNS queries or replies, add the item to the treeGuy Harris1-11/+11
for the queries or replies first, then create and add the subtree and populate it, and, when that's done, set the length of the item appropriately; if you add the subtree later, the subtree's top-level node appears to have level 0, rather than 1 greater than the tree of which it's a subtree, which causes those trees not to print correctly. svn path=/trunk/; revision=122
1998-11-21Take the name-processing part of "get_nbns_name_type_class()" and put itGuy Harris1-33/+34
in "get_nbns_name()", and have "get_nbns_name_type_class()" call it. Use "get_nbns_name()" rather than "get_nbns_name_type_class()" in the NBDS code, as there aren't any type or class fields in an NBDS packet. Show the data in an NBDS datagram as raw data. (We don't have an SMB parser yet.) Don't dissect anything past the header if an NBDS packet is an unknown packet type. svn path=/trunk/; revision=117
1998-11-20Added NetBIOS datagram support (over UDP, as per RFC 1002).Gilbert Ramirez1-1/+162
svn path=/trunk/; revision=111
1998-11-17* Added column formatting functionality.Gerald Combs1-5/+6
* Added check_col(), add_col_str() and add_col_fmt() to replace references to ft->win_info. * Added column prefs handling code. svn path=/trunk/; revision=97
1998-11-12A lengthy patch to add the wiretap library. Wiretap is not used by defaultGilbert Ramirez1-2/+1
because it is still in its infancy, but it can be compiled in optionally. The library exists in its own subdirectory ethereal/wiretap. This patch also edits all the packet-*.c files to remove the #include <pcap.h> line which is unnecessary in these files. In the ethereal code, file.c is the most heavily modified with #ifdef WITH_WIRETAP lines for the optional library. svn path=/trunk/; revision=82
1998-10-15Fix up an "sprintf()" to handle the possibility that the differenceGuy Harris1-3/+3
between two pointers might be a "long" rather than an "int" (on a platform where they're not the same). svn path=/trunk/; revision=59
1998-10-15Show queries as a summary line (as was the case before my DNS checkins)Guy Harris1-6/+13
which can be expanded into a detailed name/type/class description. svn path=/trunk/; revision=58
1998-10-14Use "ip_to_str()" and "ether_to_str()" to extract IP and MAC addressesGuy Harris1-6/+5
from a packet and turn them into character strings in dotted-quad or colonized-sextet form. svn path=/trunk/; revision=57
1998-10-14Tag NetBIOS Name Service-over-UDP packets as "NBNS (UDP)".Guy Harris1-54/+653
Give a detailed display of the innards of NBNS-over-UDP packets. Export some stuff from the DNS decoder for the use of the NBNS decoder (NBNS is DNS-like). Give a more detailed display of the innards of DNS packets as well. Fix a couple of minor NBNS bugs. svn path=/trunk/; revision=55
1998-10-14Added preliminary support for NetBIOS Name Services over IPX and UDP. NoteGilbert Ramirez1-0/+157
that these are two very different implementations of NetBIOS name services and at the protocol level are not similar. I have put the UDP protocol in packet-nbns.c, since it will be a very big module. I have all of rfc 1002 to read and implement. I am planning on putting many different NetBIOS over IPX functions in packet-nbipx.c, however, since there is no RFC or published standard. I have to hack the protocol, and as such, I do not expect it to be as full-featured as the IP-world equivalents. svn path=/trunk/; revision=50
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-22 05:34:15 +0000