aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap/wtap.c
AgeCommit message (Collapse)AuthorFilesLines
2010-12-19Prepare for handling DLT_IPV4 and DLT_IPV6.Jaap Keuter1-1/+7
svn path=/trunk/; revision=35223
2010-10-20From Hadriel Kaplan: IPFIX file format support.Bill Meier1-0/+3
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5242 svn path=/trunk/; revision=34576
2010-09-22Very old versions of libz (such as the one that comes with Solaris 10) don't ↵Jeff Morriss1-0/+2
have gzclearerr(). Check for that function and only use it if we have it. svn path=/trunk/; revision=34187
2010-07-30Define WTAP_ENCAP_IEEE802_15_4_NOFCS, for use in file formats that don'tGuy Harris1-1/+4
include the FCS, and use it for the Daintree SNA file format. While we're at it, explicitly check to make sure the purported packet length gives it at least one byte of packet data, and fix some print formats to use %u for unsigned values. svn path=/trunk/; revision=33678
2010-07-19Initial support for Network Monitor 802.11 radio header.Guy Harris1-1/+4
svn path=/trunk/; revision=33583
2010-07-18Add an entry in encap_table_base for SocketCAN.Guy Harris1-1/+3
svn path=/trunk/; revision=33578
2010-05-10Fix non-libz build.Martin Mathieson1-1/+1
svn path=/trunk/; revision=32734
2010-05-07Zlib has an officially-sanctioned way of clearing EOF when we're tailingGerald Combs1-8/+9
a file. Use it. svn path=/trunk/; revision=32716
2010-05-07EOF in zlib 1.2.5 seems to be sticky. When we're tailing a file and weGerald Combs1-0/+12
reach EOF, zlib's file handle seems to stay at EOF even when more data is appended to the file. Add a check for 1.2.5 which calls gzseek in order to unset EOF. Fixes bugs 4708 and 4748. svn path=/trunk/; revision=32715
2010-03-28From Robert Bullen: give the Bluetooth-H4-with-Linux-pseudo-headerGuy Harris1-1/+1
encapsulation a name different from the no-pseudo-header H4 encapsulation. svn path=/trunk/; revision=32321
2010-02-26Move the definitions of all the private data structures out ofGuy Harris1-0/+3
wtap-int.h, and change the unions of pointers to those private data structures into just void *'s. Have the generic wtap close routine free up the private data, rather than the type-specific close routine, just as the wtap_dumper close routine does for its private data. Get rid of close routines that don't do anything any more. svn path=/trunk/; revision=32015
2009-12-03Added missing WTAP_ENCAP_DPNSS and WTAP_ENCAP_PACKETLOGGER to encap_table_base[]Stig Bjørlykke1-2/+8
Fixed some comments. svn path=/trunk/; revision=31160
2009-12-03From Petr Sumbera via bug 4284:Stig Bjørlykke1-1/+4
Added support for Solaris IPNET layer From me: Some code cleanup in packet-ipnet.c Added packet-ipnet.c to CMakeFiles.txt Added WTAP_ENCAP_IPNET to encap_table_base[] svn path=/trunk/; revision=31159
2009-10-17From Marton Nemeth:Stig Bjørlykke1-1/+4
Add the ability to open JPEG/JFIF files directly. From me: Some code cleanup + add new file to cmake. svn path=/trunk/; revision=30588
2009-08-23From kahou:Jaap Keuter1-2/+5
Add Fibre Channel Delimiter Dissector for Fibre Channel FC2. svn path=/trunk/; revision=29531
2009-07-16From Kahou via bug 3739:Stig Bjørlykke1-0/+3
New DLT value is added for Fibre Channel FC2. svn path=/trunk/; revision=29115
2009-06-16Support per packet dumping in wtap_encap_string() and wtap_encap_short_string().Stig Bjørlykke1-5/+9
svn path=/trunk/; revision=28752
2009-06-01From Ravi Kondamuru via bug 3457: Stig Bjørlykke1-1/+8
Add support to read citrix netscaler capture file format. From me: - Renamed packet-ns.c to packet-nstrace.c - Rewrote to not use "goto" in netscaler.c - Moved dissecting of coreid svn path=/trunk/; revision=28564
2009-01-07From Duncan Salerno:Jaap Keuter1-0/+3
Added LAPDm protocol dissector, GSM Um layer, and wiretap support for dct3trace captures, generated by gammu (many available at http://wiki.thc.org/gsm). svn path=/trunk/; revision=27176
2008-12-23Handle the new DLT_USB_LINUX_MMAP link-layer type.Guy Harris1-1/+4
svn path=/trunk/; revision=27099
2008-11-27Added support for open TNEF files directly.Stig Bjørlykke1-1/+4
No we can decode those winmail.dat files. svn path=/trunk/; revision=26864
2008-11-20From yami:Jaap Keuter1-5/+6
The code in wiretap/wtap.c is not right. Because g_array_append_val should accept a value of type 'struct encap_type_info' rather than a pointer to this type. svn path=/trunk/; revision=26816
2008-11-16From Max Filippov:Anders Broman1-1/+4
patch to support IEE802.15.4 non-ASK PHY. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2906 svn path=/trunk/; revision=26792
2008-08-12From Alexey Neyman:Anders Broman1-1/+4
Implement dissector for IPMB (DLT_IPMB_LINUX, 209). svn path=/trunk/; revision=25986
2008-05-22Move the file utility functions from wiretap to libwsutil so thatJeff Morriss1-2/+2
libwireshark (and the plugins using those functions) do not depend on wiretap on Windows. While doing that, rename the eth_* functions to ws_*. svn path=/trunk/; revision=25354
2008-04-24Expand and clean up the descriptions of the new WTAP_ENCAP values.Guy Harris1-6/+6
svn path=/trunk/; revision=25163
2008-04-23The constants are there, now they need real names.Jaap Keuter1-1/+22
svn path=/trunk/; revision=25159
2008-03-05From Owen Kirby :Anders Broman1-1/+4
IEEE 802.15.4 dissector and DLT_ type. svn path=/trunk/; revision=24564
2008-02-25Add support for DLT_IPMB (199). The dissector for these packets is in ↵Jeff Morriss1-0/+9
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1970 (pending review) svn path=/trunk/; revision=24463
2008-02-03More rewrite of prohibited APIs (sprintf, strcpy, strcat).Stig Bjørlykke1-2/+2
svn path=/trunk/; revision=24258
2007-12-16From Fulko Hew:Stig Bjørlykke1-0/+3
1/ patches to support the libpcap/SITA format 'WTAP_ENCAP_SITA'. 2/ patches to the LAPB dissector to accept MLP (Multi-link protocol) (although MLP dissection has _not_ been added (yet)). 3/ New protocol dissectors for: a) SITA's WAN layer 0 status header, b) An airline protocol ALC, c) An airline (and other industry) protocol UTS. These patches are submitted as a set since the new protocol dissectors are not useful without the libpcap/SITA related changes, and there is no point in having those changes without the additional dissectors. This fixes bug/enhancement 2016. svn path=/trunk/; revision=23885
2007-10-16From Paolo Abeni via bug 1751:Jeff Morriss1-0/+3
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1751 The patch adds support to wiretap for a new libpcap DLT for bluetooth captures. This DLT carries the direction information, which now can be displayed correctly. The hci H4 dissector is updated to handle also the newly introduced wtap encap. svn path=/trunk/; revision=23208
2007-10-08From Florent DROUIN:Anders Broman1-1/+4
This is a replacement of the existing decoding of ERF files (Extensible Record Format from Endace). For the decoding of the ERF files, according to the "type of record" given in the ERF header, several decoders can be used. Up to now, the decoder is determined according to an environment variable, or with a kind of heuristic. And, all the treatment is done during the file extraction. The new architecture, will separate the ERF file decoding, and the ERF record decoding. The ERF records will be decoded with a specific dissector. This dissector can be configured with options, to replace the environment variable. http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1839 svn path=/trunk/; revision=23092
2007-07-12From Jim Paris:Jaap Keuter1-1/+4
The encap_table_base in wcap.c is missing an entry. This causes e.g. "dumpcap -i usb3 -L" to output: Data link types (use option -y to set): USB_LINUX (MPEG) svn path=/trunk/; revision=22292
2007-06-13Add support for PPI (the Per-Packet Information header), described atGerald Combs1-7/+10
http://www.cacetech.com/documents/PPI_Header_format_1.0.pdf . svn path=/trunk/; revision=22094
2007-05-04Add a plugin interface to wiretap.Luis Ontanon1-2/+39
So far I've done only regression testing (the new functionality and what's in wtap-plugins.c has not yet being tested). it is a first step in the way to have lua opening files. svn path=/trunk/; revision=21686
2007-03-22From Shaun JackmanRonnie Sahlberg1-1/+4
Wiretap support to read MPEG files svn path=/trunk/; revision=21112
2007-01-01From Mark C. Brown:Jaap Keuter1-2/+5
HP-UX 11.31 will add a new nettl trace subsystem, NS_LS_TELNET (ID=267). NS_LS_TELNET is just raw telnet data. There is no layer 2/3/4 headers, so there's just the HP-UX nettl record header followed directly by the TCP payload for a telnet connection. Thus the need for a new wiretap encapsulation type... svn path=/trunk/; revision=20253
2006-11-27Add Wiretap encapsulation type for IEEE 802.16 MAC Common Part Sublayer,Guy Harris1-0/+3
for which a DLT_ value and LINKTYPE_ value have just been assigned. svn path=/trunk/; revision=20003
2006-11-05change all file offsets from long to gint64 so we can - theoretically - ↵Ulf Lamping1-2/+2
handle files > 2GB correct. Please distclean Win32 builds! svn path=/trunk/; revision=19814
2006-10-10From Paolo AbeniRonnie Sahlberg1-0/+3
USB dissector svn path=/trunk/; revision=19480
2006-08-17From Hannes Gredler:Anders Broman1-0/+3
A patch that adds support for dissection of libpcap DLT_JUNIPER_VP frames. In addition i have fixed also the indent for DLT_JUNIPER_GGSN. svn path=/trunk/; revision=18940
2006-05-08Basic Encoding Rules (BER) encoded file reading. Not really a packet trace ↵Graeme Lunt1-0/+3
format but still useful for dissecting arbitrary BER/DER ASN.1. svn path=/trunk/; revision=18110
2006-04-16Get rid of the unused WTAP_ENCAP value - holes in the number space causeGuy Harris1-3/+0
ugly printouts for "editcap -T". svn path=/trunk/; revision=17873
2006-04-14From Martin Mathieson:Anders Broman1-0/+3
patch and new files provide support for Catapult DCT2000 .out files to wiretap and ethereal. This wiretap support (catapult_dct2000.c+h) appends a short header to each packet giving some context, and a corresponding ethereal dissector (packet-catapult-dct2000.c) parses this before passing the real payload onto an existing ethereal dissector (for ethernet, ip, lapd, ppp, frame-relay,...). For now, there is only support for saving dct2000 files in their own format, although I may add support for converting between dct2000 and libpcap later. updated version of these files and patch, now with support for MTP2. Olivier's trace used the ANSI variant - the MTP2 and MTP3 decode fine with the right preferences set (although the ISUP dissector reports a reserved/retired message type). Witha a change to NOT to declare gboolean catapult_dct2000_board_ports_only; as extern as MSVC choked on it. svn path=/trunk/; revision=17862
2006-03-30From Martin Mathieson:Anders Broman1-0/+3
wiretap/README.developer - the referenced default seek_read function doesn't exist now wiretap/wtap.c - a "hole" in encap_table was causing the wrong encap value for later types to be looked up (by name) mergecap.c - fix a couple of program name copy+paste errors from editcap.c svn path=/trunk/; revision=17765
2006-03-02From Daniele Orlandi:Anders Broman1-0/+9
The attached patch adds support for LAPD frames captured using vISDN thru libpcap. The support has already been included in libpcap. The patch adds a new wiretap encapsulation, the necessary glue to decode SLL-encapsulated frames, and some minor change in the LAPD dissector in order to support the remote-to-remote frames captured on the ISDN E-Channel. Please apply ethereal-encap-table.diff before, as it fixes a misalignment in the encapsulation names table. svn path=/trunk/; revision=17450
2005-11-06replace *a lot* of file related calls by their GLib counterparts. This is ↵Ulf Lamping1-9/+2
necessary for the switch to GTK 2.6 (at least on WIN32). to do this, I've added file_util.h to wiretap (would file_compat.h be a better name?), and provide compat_macros like eth_open() instead of open(). While at it, move other file related things there, like #include <io.h>, definition of O_BINARY and alike, so it's all in one place. deleted related things from config.h.win32 As of these massive changes, I'm almost certain that this will break the Unix build. I'll keep an eye on the buildbot so hopefully everything is working again soon. svn path=/trunk/; revision=16403
2005-09-20From Hannes Gredler:Anders Broman1-0/+11
patch to support 4 additional juniper DLTs. all those are wrappers for exisiting media types augmented with meta-information which gets also displayed using this patch; svn path=/trunk/; revision=15908
2005-08-24EVERYTHING IN THE BUILDBOT IS GOING TO BE RED!!! Sorry! Ulf Lamping1-0/+6
I've done more than a day to change the timestamp resolution from microseconds to nanoseconds. As I really don't want to loose those changes, I'm going to check in the changes I've done so far. Hopefully someone else will give me a helping hand with the things left ... What's done: I've changed the timestamp resolution from usec to nsec in almost any place in the sources. I've changed parts of the implementation in nstime.s/.h and a lot of places elsewhere. As I don't understand the editcap source (well, I'm maybe just too tired right now), hopefully someone else might be able to fix this soon. Doing all those changes, we get native nanosecond timestamp resolution in Ethereal. After fixing all the remaining issues, I'll take a look how to display this in a convenient way... As I've also changed the wiretap timestamp resolution from usec to nsec we might want to change the wiretap version number... svn path=/trunk/; revision=15520
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-22 21:59:35 +0000