aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2006-09-29From: Rolf Fiedler Jaap Keuter1-3/+4
So far Wireshark complained about channel 129, now it gets a little further and then complains about channel 128. Solution: Open up all channel from 128 up. svn path=/trunk/; revision=19358
2006-09-28From Rolf Fiedler:Jaap Keuter1-2/+2
I am the author of the eyesdn wiretap module. Recently we added ATM support to our trace format. We used channel id 129 for that, so far only 0 for D channel and 1-30 for bearer channels had been in use. svn path=/trunk/; revision=19353
2006-09-12Get rid of a compiler warning.Gerald Combs1-8/+9
svn path=/trunk/; revision=19224
2006-09-05For DCT2000, show better transport info:Martin Mathieson2-0/+7
- for FP over AAL2, add CID to AAL tree - for IPPRIM protocols, show IPV4 addresses in src & dst columns svn path=/trunk/; revision=19156
2006-09-05propset, add $Id: $ and copyright headersJörg Mayer1-0/+23
svn path=/trunk/; revision=19150
2006-09-05OK, as I haven't had any negative feedback, I'm adding my workJörg Mayer1-0/+40
to use cmake as a build system. It's in no way complete, I'd just like others to be able to participate in playing with cmake and to document what I'm doing. Please read the README.cmake for what can be done right now. svn path=/trunk/; revision=19149
2006-09-04Partial implementation of UMTS FP. Currently only works with Catapult ↵Martin Mathieson2-13/+7
DCT2000 format files, as need extra information about packet when decoding. There are a few TODOs (notably E-DCH channels), but the current version gives OK coverage. svn path=/trunk/; revision=19130
2006-08-18Rework some of the header processing, to handle some additional nettlGuy Harris1-238/+239
files, and to clean the code up a bit - and incorporate some fixes to the rework, and other fixes, from Mark C. Brown. svn path=/trunk/; revision=18945
2006-08-17From Hannes Gredler:Anders Broman3-2/+8
A patch that adds support for dissection of libpcap DLT_JUNIPER_VP frames. In addition i have fixed also the indent for DLT_JUNIPER_GGSN. svn path=/trunk/; revision=18940
2006-08-07Wasn't allocating big enough frame buffer!Martin Mathieson1-5/+8
svn path=/trunk/; revision=18848
2006-08-02- Removes last traces of 'board ports only' preference (other than marking ↵Martin Mathieson1-59/+90
it as an obselete preference) - Add a preference to try to find messages within sctp primitive messages (tries renaming of known mismatches) - Add outhdr to stub protocol (getting ready for IuB FP) svn path=/trunk/; revision=18818
2006-07-26The nettl_file_hdr structure has a fixed format, as it's an on-disk dataGuy Harris1-19/+16
structure. Instead of making the host_name field bigger, make the thing we put in it smaller. Use that structure when reading files as well as when writing them. svn path=/trunk/; revision=18796
2006-07-26postadal@suse.cz:Jörg Mayer1-1/+1
Bufferoverflow caused by ethereal->wireshark rename (ws is 1 char longer). http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1015 svn path=/trunk/; revision=18794
2006-07-04Fix indentation.Guy Harris1-14/+14
svn path=/trunk/; revision=18657
2006-07-04Don't test a variable in a loop if its value never changes.Guy Harris1-8/+5
Get rid of arguments and #defines that are no longer used as a result of the previous change. svn path=/trunk/; revision=18656
2006-06-23add file extension information (filter "*.pcap;*.cap" and default extension ↵Ulf Lamping3-155/+199
".pcap") to wiretap sort file types in alphabetical order, but keep the libpcap like entries at the start svn path=/trunk/; revision=18562
2006-06-23Remove definition of catapult_dct2000_board_ports_only, as per mail fromGuy Harris1-2/+0
Martin Mathieson. svn path=/trunk/; revision=18551
2006-06-22hopefully, the win32 buildbot will compile again :-(Ulf Lamping1-1/+1
svn path=/trunk/; revision=18541
2006-06-20Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variableGerald Combs2-0/+7
definition in the Catapult DCT2000 code. svn path=/trunk/; revision=18524
2006-06-17fix coverity "bug" 184 (false positive)Ronnie Sahlberg1-2/+1
the contract for wiretap ..._read() functions are that the *err pointer MUST always be provided as a valid pointer and not a NULL pointer. ber.c contained a spurios and redundant check for the pointer being non-NULL wich triggered coverity to detect this as a false positive. this redundant test if the pointer is NULL has been revoved. svn path=/trunk/; revision=18492
2006-06-14From Martin Mathieson:Anders Broman1-0/+4
Skips variant string bytes of dct2000 header when finding real packet data to dump. svn path=/trunk/; revision=18458
2006-06-11From Martin Mathieson:Anders Broman1-12/+9
This patch: - treats the variant field as a variable-length string field. This is needed for some of the more complicated protocols where the variant number of the embedded protocol is also represented - the patch to Makefile.am was not applied from http://www.wireshark.org/lists/wireshark-dev/200606/msg00009.html svn path=/trunk/; revision=18427
2006-06-06Ethereal -> WiresharkGerald Combs6-15/+15
svn path=/trunk/; revision=18369
2006-05-31Rename the main executable to "wireshark", along with more conversions:Gerald Combs2-2/+2
ethereal.com -> wireshark.org mailing lists and addresses ETHEREAL -> WIRESHARK Man pages Automake/Autoconf names svn path=/trunk/; revision=18271
2006-05-31Tethereal/tethereal -> TShark/tshark.Gerald Combs1-1/+1
svn path=/trunk/; revision=18268
2006-05-28Ethareal->WiresharkAnders Broman5-12/+12
svn path=/trunk/; revision=18230
2006-05-23From Martin Mathieson:Anders Broman2-48/+81
- Many DCT2000 protocols can be embedded within an IP primitive message. Add a heuristic to see if we can find the protocol payload within in IP primitive message, and look for an ethereal dissector matching the DCT2000 protocol name (this is useful for simple protocol testing where no physical links are involved) - Make some more of these protocols (diameter, http, mgcp) findable by name - Adds protocol 'variant' number to stub and dissector - Break the duplicated writing of the stub header out into a separate function svn path=/trunk/; revision=18212
2006-05-22ethereal->wireshark updatesRonnie Sahlberg5-6/+6
svn path=/trunk/; revision=18206
2006-05-21name changeRonnie Sahlberg4-8/+8
svn path=/trunk/; revision=18197
2006-05-19Squelch some compiler warnings (a time_t might be an int or a long).Guy Harris1-2/+2
svn path=/trunk/; revision=18188
2006-05-15GLib 1.2[.x] doesn't have g_sprintf(), it just has g_snprintf(); useGuy Harris2-2/+6
that. It also doesn't hae <glib/gprintf.h>, so use that only for GLib 2.0 and later. svn path=/trunk/; revision=18169
2006-05-15Fix some compiler warnings.Guy Harris3-5/+79
That requires that we define G_GINT64_MODIFIER ourselves if glib.h doesn't define it for us, as that's what should be used to print 64-bit integral values in any calls that use any of the GLib printf functions (directly or indirectly). svn path=/trunk/; revision=18154
2006-05-08Basic Encoding Rules (BER) encoded file reading. Not really a packet trace ↵Graeme Lunt6-4/+231
format but still useful for dissecting arbitrary BER/DER ASN.1. svn path=/trunk/; revision=18110
2006-04-24From Martin Mathieson:Anders Broman1-23/+46
This patch should hopefully remove any possible buffer overflows in parse_line() as reported by the current Coverity scan. I'm not sure that the error it currently reports is valid (I think its confused by supposing that a condition that is being tested can be true, whereas it can't...), but this patch fixes a number of potential problems remaining in the function. svn path=/trunk/; revision=17979
2006-04-23Fix CID: 150 Anders Broman1-1/+1
svn path=/trunk/; revision=17968
2006-04-19From Martin Mathieson:Anders Broman1-0/+17
Fix coverity bugs. svn path=/trunk/; revision=17909
2006-04-19The first item in the network load EIP appears to be the networkGuy Harris1-3/+3
utilization, in units of .1%. svn path=/trunk/; revision=17901
2006-04-17From Martin Mathieson:Anders Broman2-16/+20
These patches: - fix the bounds errors reported by coverity in bug 879 - fix a couple of other potential bounds errors (length checking 1st & 2nd lines in file) - reorder catapult_dct2000_phdr so that normal protocol pseudo-header info is at the start. This means that the stub dissector can avoid the nasty (overlapped) memcpy - a little whitespace fixing svn path=/trunk/; revision=17886
2006-04-16Get rid of the unused WTAP_ENCAP value - holes in the number space causeGuy Harris2-28/+25
ugly printouts for "editcap -T". svn path=/trunk/; revision=17873
2006-04-16Add some missing little-endianizing.Guy Harris1-5/+7
Get rid of some unnecessary casts. Multiply seconds by 10^9, not 10^6, to get nanoseconds. svn path=/trunk/; revision=17872
2006-04-16Add a loop to process TLVs in the file header.Guy Harris1-16/+52
Advertise nanosecond resolution. svn path=/trunk/; revision=17871
2006-04-16Move file format definitions to the header file.Guy Harris2-155/+216
Put the code to read the packet header and the packet data into routines (which also fixes some places where observer_seek_read() was using the sequential file handle rather than the random file handle), make the packet header reader skip over the TLVs, Do some additional sanity checking. Wiretap supports nanosecond resolution; provide nanosecond resolution time stamps. Rename some structure members to match their purpose (they're TLV counts, not flags). Remove the TLV header from the TLV structures (and eliminate TLV structures if we don't have the contents or they're just a string); if we process them, we'll probably end up reading the header and data separately. Add some information about some of the TLVs in expert information packets. svn path=/trunk/; revision=17870
2006-04-15Sake Blok wrote....Jaap Keuter1-1/+11
I have taken a look at the trace myself and calculated the TpS to be 20000000.0 for this particular trace. If I also discard the start_timestamp like it has been done for other versions of the netxray format, then I get the proper results. svn path=/trunk/; revision=17869
2006-04-15From Martin Mathieson:Anders Broman1-31/+54
Please find a patch to catapult_dct2000.c: - doesn't use g_hash_table_new_full(), which is missing from earlier versions of glib - fixed a couple of memory leaks - hopefully cast away a few warnings I saw on the fedora and solaris buildbot logs svn path=/trunk/; revision=17867
2006-04-14from Martin Mathieson: add catapult_dct2000.hUlf Lamping1-0/+1
svn path=/trunk/; revision=17866
2006-04-14SVN properties...Anders Broman2-30/+30
svn path=/trunk/; revision=17863
2006-04-14From Martin Mathieson:Anders Broman8-2/+1362
patch and new files provide support for Catapult DCT2000 .out files to wiretap and ethereal. This wiretap support (catapult_dct2000.c+h) appends a short header to each packet giving some context, and a corresponding ethereal dissector (packet-catapult-dct2000.c) parses this before passing the real payload onto an existing ethereal dissector (for ethernet, ip, lapd, ppp, frame-relay,...). For now, there is only support for saving dct2000 files in their own format, although I may add support for converting between dct2000 and libpcap later. updated version of these files and patch, now with support for MTP2. Olivier's trace used the ANSI variant - the MTP2 and MTP3 decode fine with the right preferences set (although the ISUP dissector reports a reserved/retired message type). Witha a change to NOT to declare gboolean catapult_dct2000_board_ports_only; as extern as MSVC choked on it. svn path=/trunk/; revision=17862
2006-04-14Skip non-data records. Fixes bug 767.Guy Harris2-18/+63
svn path=/trunk/; revision=17861
2006-03-30From Martin Mathieson:Anders Broman2-2/+4
wiretap/README.developer - the referenced default seek_read function doesn't exist now wiretap/wtap.c - a "hole" in encap_table was causing the wrong encap value for later types to be looked up (by name) mergecap.c - fix a couple of program name copy+paste errors from editcap.c svn path=/trunk/; revision=17765
2006-03-29The header will be there, just make sure the date is put in.Jaap Keuter1-1/+3
Coverity bug 148 svn path=/trunk/; revision=17756