Age | Commit message (Collapse) | Author | Files | Lines |
|
svn path=/trunk/; revision=10038
|
|
add the ability to read Ethernet captures;
add the ability to read hex-only dumps.
svn path=/trunk/; revision=9468
|
|
Add a missing entry in "encap_table[]" for Bluetooth H4, and fix some
comments.
svn path=/trunk/; revision=9157
|
|
file format (AiroPeek 2.x).
svn path=/trunk/; revision=9144
|
|
capture files.
svn path=/trunk/; revision=8840
|
|
"hcidump -w" traces.
Note that Jesper Peterson contributed support for reading Endace ERF
files.
svn path=/trunk/; revision=8824
|
|
svn path=/trunk/; revision=8272
|
|
agents.
svn path=/trunk/; revision=8093
|
|
svn path=/trunk/; revision=7692
|
|
Following fixes for nettl (HP-UX):
1) Fixed 11.X timestamp issue
there is no difference in 10.X/11.X timestamps, so no
need to shift 11.X timestamps
2) Fixed NS_LS_DRIVER trace record handling
now works rather than throwing "...network type that
Ethereal doesn't support" error
3) Fixed handling of traces with sliced packets (nettl -m xx)
now uses correct packet and capture lengths
4) Additional ethernet card support
now handles btlan[1,3-6],gelan,igelan,intl100 driver
trace records
svn path=/trunk/; revision=7642
|
|
svn path=/trunk/; revision=6936
|
|
svn path=/trunk/; revision=6166
|
|
svn path=/trunk/; revision=5922
|
|
svn path=/trunk/; revision=5771
|
|
Added support for NS_LS_TCP, NS_LS_UDP, NS_LS_LOOPBACK, NS_LS_ICMP and
unnamed subsystem 0xb9 (which contains ethernet headers in my captures frames).
However, NS_LS_ICMP will not be dissected since we dont have a
RAW_ICMP wiretap encapsulation type.
Updated decoding of usec timestamp for HPUX11 since HPUX11 has 0.1us
resolution for the scalar in this field.
YMMV but all these ones works for me from nettl traces from HPUX11.
svn path=/trunk/; revision=5523
|
|
Nisbet.
Make a comment in "wiretap/file.c" clearer, so people know where to put
the entries for their capture file type.
svn path=/trunk/; revision=4328
|
|
svn path=/trunk/; revision=4199
|
|
svn path=/trunk/; revision=4042
|
|
Update the lists of known capture file formats in the Tethereal,
editcap, and mergecap man pages to match the current list (as found in
the Ethereal man page).
svn path=/trunk/; revision=4039
|
|
wasn't involved with).
svn path=/trunk/; revision=3311
|
|
in some places use "guint64", on plaforms where it's available,
rather than floating point (we don't yet use it universally, as
we'd have to provide code to do 64-bit arithmetic on
platforms/compilers where 64-bit integral types aren't
supported);
use .838096 microseconds rather than 1 microseconds as the time
stamp units for NetXRay 2.x format, as those capture files seem
to use that time stamp (that's the Sniffer "PC" time stamp;
perhaps when Network Associates assimilated Cinco, they changed
the time stamp units).
svn path=/trunk/; revision=3027
|
|
svn path=/trunk/; revision=2859
|
|
From Daniel Thompson <daniel.thompson@st.com>
svn path=/trunk/; revision=2748
|
|
svn path=/trunk/; revision=2335
|
|
unreliable).
svn path=/trunk/; revision=2019
|
|
Mayer, and yours truly.
svn path=/trunk/; revision=2002
|
|
svn path=/trunk/; revision=1158
|
|
provides. "Every problem in computer science can be solved by adding a
layer of indirection."
svn path=/trunk/; revision=1008
|
|
line of ISDN routers. Much like the ascend reader, this module reads an
ASCII hex dump of trace data.
Rearranged the order in which wiretap tries trace files, to keep the
ASCII-readers (ascend and toshiba) at the end, and put the binary-readers
(everything else) at the front of the list. If a telnet session of
and ascend trace or toshiba trace were captured near the beginning of
another trace, wiretap might think the trace was ascend or toshiba if it
tried that module first.
Fixed the way wtap_seek_read() selects functions to call. It was using
the encap type instead of the file type. We got lucky because
WTAP_ENCAP_ASCEND == WTAP_FILE_ASCEND
svn path=/trunk/; revision=952
|
|
capture file code.
Add Ashok Narayanan to the list of contributors; he added the code to
read compressed files.
svn path=/trunk/; revision=880
|
|
RADCOM WAN/LAN Analyzer capture files is his.
svn path=/trunk/; revision=527
|
|
svn path=/trunk/; revision=112
|
|
because it is still in its infancy, but it can be compiled in optionally.
The library exists in its own subdirectory ethereal/wiretap. This patch also
edits all the packet-*.c files to remove the #include <pcap.h> line which is
unnecessary in these files. In the ethereal code, file.c is the most heavily
modified with #ifdef WITH_WIRETAP lines for the optional library.
svn path=/trunk/; revision=82
|