aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2006-05-31Rename the main executable to "wireshark", along with more conversions:gerald2-2/+2
ethereal.com -> wireshark.org mailing lists and addresses ETHEREAL -> WIRESHARK Man pages Automake/Autoconf names git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18271 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-31Tethereal/tethereal -> TShark/tshark.gerald1-1/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18268 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-28Ethareal->Wiresharketxrab5-12/+12
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18230 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-23From Martin Mathieson:etxrab2-48/+81
- Many DCT2000 protocols can be embedded within an IP primitive message. Add a heuristic to see if we can find the protocol payload within in IP primitive message, and look for an ethereal dissector matching the DCT2000 protocol name (this is useful for simple protocol testing where no physical links are involved) - Make some more of these protocols (diameter, http, mgcp) findable by name - Adds protocol 'variant' number to stub and dissector - Break the duplicated writing of the stub header out into a separate function git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18212 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-22ethereal->wireshark updatessahlberg5-6/+6
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18206 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-21name changesahlberg4-8/+8
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18197 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-19Squelch some compiler warnings (a time_t might be an int or a long).guy1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18188 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-15GLib 1.2[.x] doesn't have g_sprintf(), it just has g_snprintf(); useguy2-2/+6
that. It also doesn't hae <glib/gprintf.h>, so use that only for GLib 2.0 and later. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18169 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-15Fix some compiler warnings.guy3-5/+79
That requires that we define G_GINT64_MODIFIER ourselves if glib.h doesn't define it for us, as that's what should be used to print 64-bit integral values in any calls that use any of the GLib printf functions (directly or indirectly). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18154 f5534014-38df-0310-8fa8-9805f1628bb7
2006-05-08Basic Encoding Rules (BER) encoded file reading. Not really a packet trace ↵gal6-4/+231
format but still useful for dissecting arbitrary BER/DER ASN.1. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@18110 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-24From Martin Mathieson:etxrab1-23/+46
This patch should hopefully remove any possible buffer overflows in parse_line() as reported by the current Coverity scan. I'm not sure that the error it currently reports is valid (I think its confused by supposing that a condition that is being tested can be true, whereas it can't...), but this patch fixes a number of potential problems remaining in the function. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17979 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-23Fix CID: 150 etxrab1-1/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17968 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-19From Martin Mathieson:etxrab1-0/+17
Fix coverity bugs. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17909 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-19The first item in the network load EIP appears to be the networkguy1-3/+3
utilization, in units of .1%. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17901 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-17From Martin Mathieson:etxrab2-16/+20
These patches: - fix the bounds errors reported by coverity in bug 879 - fix a couple of other potential bounds errors (length checking 1st & 2nd lines in file) - reorder catapult_dct2000_phdr so that normal protocol pseudo-header info is at the start. This means that the stub dissector can avoid the nasty (overlapped) memcpy - a little whitespace fixing git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17886 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-16Get rid of the unused WTAP_ENCAP value - holes in the number space causeguy2-28/+25
ugly printouts for "editcap -T". git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17873 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-16Add some missing little-endianizing.guy1-5/+7
Get rid of some unnecessary casts. Multiply seconds by 10^9, not 10^6, to get nanoseconds. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17872 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-16Add a loop to process TLVs in the file header.guy1-16/+52
Advertise nanosecond resolution. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17871 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-16Move file format definitions to the header file.guy2-155/+216
Put the code to read the packet header and the packet data into routines (which also fixes some places where observer_seek_read() was using the sequential file handle rather than the random file handle), make the packet header reader skip over the TLVs, Do some additional sanity checking. Wiretap supports nanosecond resolution; provide nanosecond resolution time stamps. Rename some structure members to match their purpose (they're TLV counts, not flags). Remove the TLV header from the TLV structures (and eliminate TLV structures if we don't have the contents or they're just a string); if we process them, we'll probably end up reading the header and data separately. Add some information about some of the TLVs in expert information packets. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17870 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-15Sake Blok wrote....jake1-1/+11
I have taken a look at the trace myself and calculated the TpS to be 20000000.0 for this particular trace. If I also discard the start_timestamp like it has been done for other versions of the netxray format, then I get the proper results. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17869 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-15From Martin Mathieson:etxrab1-31/+54
Please find a patch to catapult_dct2000.c: - doesn't use g_hash_table_new_full(), which is missing from earlier versions of glib - fixed a couple of memory leaks - hopefully cast away a few warnings I saw on the fedora and solaris buildbot logs git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17867 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-14from Martin Mathieson: add catapult_dct2000.hulfl1-0/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17866 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-14SVN properties...etxrab2-30/+30
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17863 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-14From Martin Mathieson:etxrab8-2/+1362
patch and new files provide support for Catapult DCT2000 .out files to wiretap and ethereal. This wiretap support (catapult_dct2000.c+h) appends a short header to each packet giving some context, and a corresponding ethereal dissector (packet-catapult-dct2000.c) parses this before passing the real payload onto an existing ethereal dissector (for ethernet, ip, lapd, ppp, frame-relay,...). For now, there is only support for saving dct2000 files in their own format, although I may add support for converting between dct2000 and libpcap later. updated version of these files and patch, now with support for MTP2. Olivier's trace used the ANSI variant - the MTP2 and MTP3 decode fine with the right preferences set (although the ISUP dissector reports a reserved/retired message type). Witha a change to NOT to declare gboolean catapult_dct2000_board_ports_only; as extern as MSVC choked on it. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17862 f5534014-38df-0310-8fa8-9805f1628bb7
2006-04-14Skip non-data records. Fixes bug 767.guy2-18/+63
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17861 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-30From Martin Mathieson:etxrab2-2/+4
wiretap/README.developer - the referenced default seek_read function doesn't exist now wiretap/wtap.c - a "hole" in encap_table was causing the wrong encap value for later types to be looked up (by name) mergecap.c - fix a couple of program name copy+paste errors from editcap.c git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17765 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-29The header will be there, just make sure the date is put in.jake1-1/+3
Coverity bug 148 git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17756 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-27From Martin Warnes:etxrab1-61/+14
> I've attached a fix that cleans up this code, actually since my last > update of this module the particular call in question was fairly > redundant so I just went ahead and removed it and updated the constant > that specifies the maximum possible line length instead. > > Thanks for bring this to my attention. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17737 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-27Fix a possible NULL dereference (bug 827 / CID 145). Add an SVNgerald1-54/+59
ID. Fix up whitespace. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17732 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-22From Mertin Wrnes:etxrab1-455/+545
Following my last submitted patch I did some further investigation on the different types of iSeries Comms Traces, although the field formats are constant, things such as page throws and line spacing vary depending on the tool used to pull the trace form the iSeries spool. This patch should better handle the different formats and more importantly exit in a graceful manner if an unknown format is encountered. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17699 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-17From Martin Warnes:jake1-3/+6
Attached is a fix that addresses a problem reading certain IBM iSeries Communications traces. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17655 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-11Remove an entire horde of off-by-one errors pointed out by Coverity's CID: 83lego1-5/+5
(Coverity finds just one at a time...) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17580 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-09Fix a possible NULL dereference (Coverity CID 33).gerald1-2/+2
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17556 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-08Another off by one error found by coverity (CID 83), using > instead of >= ↵lego1-1/+1
when comparing index against array size. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17521 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-08Coverity's run 14 CID 82.lego1-2/+2
an off by one error (> vs >= in bounds check). git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17520 f5534014-38df-0310-8fa8-9805f1628bb7
2006-03-02From Daniele Orlandi:etxrab3-1/+149
The attached patch adds support for LAPD frames captured using vISDN thru libpcap. The support has already been included in libpcap. The patch adds a new wiretap encapsulation, the necessary glue to decode SLL-encapsulated frames, and some minor change in the LAPD dissector in order to support the remote-to-remote frames captured on the ISDN E-Channel. Please apply ethereal-encap-table.diff before, as it fixes a misalignment in the encapsulation names table. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17450 f5534014-38df-0310-8fa8-9805f1628bb7
2006-02-22Add makefile.nmakeetxrab1-3/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17365 f5534014-38df-0310-8fa8-9805f1628bb7
2006-02-17even if we don't want to close stdout on wtap_dump_close(), we might at ↵ulfl1-1/+4
least try to flush it git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17326 f5534014-38df-0310-8fa8-9805f1628bb7
2006-01-12The attached patch to fix bug 663 allows Ethereal to read Windowsjake1-3/+38
Sniffer V2 format capture files with captyp=5, timeunit=0. The ticks_per_sec for this case apparently is 1e6. Bill Meier git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@17019 f5534014-38df-0310-8fa8-9805f1628bb7
2006-01-07don't claim to be an erf file if it isn't (e.g. if the file_read call fails)ulfl1-1/+1
I don't know if this is the right way to fix it, but it seems at least better than before git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16971 f5534014-38df-0310-8fa8-9805f1628bb7
2006-01-06code cleanup: use "-" for all places, where stdin/stdout is meantulfl1-2/+2
tethereal internally converted the stdout capture filename "-" into "" which doesn't make any real sense and only complicated things. To make things even more confusing, wiretap expected "" for dump output and "-" for offline reading ... git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16962 f5534014-38df-0310-8fa8-9805f1628bb7
2006-01-05Win32: set stdout to binary mode in wtap_dump_fdopen(), so tethereal is also ↵ulfl1-0/+6
able to write capture files to stdout using -w - git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16958 f5534014-38df-0310-8fa8-9805f1628bb7
2005-12-31bugfix to #649: first convert to microseconds, then eventually swap byte ↵ulfl1-1/+1
ordering (not the other way round) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16925 f5534014-38df-0310-8fa8-9805f1628bb7
2005-12-19Add support for Juniper GGSN generated pcap files.lego2-1/+4
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16857 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-27Fail if *any* of the fields in the per-packet header of the first recordguy1-1/+2
aren't sane, rather than requiring them *all* to have invalid values. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16610 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-25From Martin Warnes:etxrab6-1/+805
Add Support for reading of IBM iSeries (AS/400) Comms traces git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16588 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-12minor mkdir bugfix from Gisle Vanemulfl1-2/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16492 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-10Include <unistd.h> if available, to get "close()" declared.guy1-14/+20
Update the big comment to reflect current reality. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16453 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-07The problem wasn't that <sys/stat.h> wasn't being included, the problemguy1-4/+0
was that file_util.h wasn't in the distribution tarball, so it couldn't be included - it handles including <sys/stat.h>. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16423 f5534014-38df-0310-8fa8-9805f1628bb7
2005-11-07add file_util.h so distcheck might workulfl1-0/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@16422 f5534014-38df-0310-8fa8-9805f1628bb7
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-05 18:37:49 +0000