aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2008-02-16Cast secs and nsecs correct.Stig Bjørlykke1-19/+19
Fixed some indentation. svn path=/trunk/; revision=24353
2008-02-16Change if_tsaccur to if_tsresol and change timestamp reading/writingStephen Fisher1-19/+50
routines to correctly follow the clarified PcapNg standard document. svn path=/trunk/; revision=24349
2008-02-12Add a cast.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=24307
2008-02-10Do the time calculations with 64-bit integers, rather than in floatingGuy Harris2-53/+111
point, so we don't have issues with numbers not being exactly representable; that makes it less likely that the change described below will change a time stamp if it's not fixing the time stamp (i.e., if time_day is 0). The Sniffer manual "Expert Sniffer(R) Network Analyzer Operations, Release 5.50" says that a frame2_rec has a time stamp with an 8-bit time_high field and an 8-bit time_day field. Interpreting the time stamp that way fixes the time stamps in at least some captures; see, for example, bug 2251. Fix/update some comments (for example, the Sniffer documentation is no longer at that URL). svn path=/trunk/; revision=24296
2008-02-09Fix (Sun) compiler warnings as reported by David Kirkby: Part 1Bill Meier3-21/+22
svn path=/trunk/; revision=24295
2008-02-07Removed some "statement not reached" warnings.Stig Bjørlykke2-5/+0
svn path=/trunk/; revision=24282
2008-02-07Corrected some types.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=24280
2008-02-04Added btsnoop.hStig Bjørlykke1-0/+1
svn path=/trunk/; revision=24269
2008-02-03From Shane Kearns (bug 2237):Stig Bjørlykke5-2/+353
Added support for Symbian OS btsnoop. The bluetooth HCI layer in Symbian OS can be configured to log all packets to a file. The log format, "btsnoop" is based on the RFC1761 "snoop" format - but differences in the header make it incompatible. The btsnoop format supports logging of these formats: "H1" (raw HCI packets without framing) "H4" (HCI UART packets including packet type header) "H5" (HCI 3 wire UART packets including framing) "BCSP" (HCI bluecore serial protocol including framing) "H1" and "H4" are section numbers in the original v1 bluetooth specifications, but still used colloquially - wireshark's existing support for Linux bluez HCI logs uses the "H4" name. In practice, the "H1" format is used for H5,BCSP and USB HCI logs, as the HCI packet logs are mainly useful for debugging higher layers, bluetooth profiles and bluetooth applications. From me: Deleted some unused prototypes. Mark an unused parameter. svn path=/trunk/; revision=24263
2008-02-03More rewrite of prohibited APIs (sprintf, strcpy, strcat).Stig Bjørlykke4-7/+7
svn path=/trunk/; revision=24258
2008-01-26g_warning -> pcapng_debug and "switch it off" as default, so normal users ↵Ulf Lamping1-65/+77
won't be annoyed by debug messages svn path=/trunk/; revision=24198
2008-01-24s/%ll/%" G_GINT64_MODIFIER "/gJeff Morriss2-3/+3
svn path=/trunk/; revision=24181
2008-01-24Fixed some more malloc -> g_malloc, free -> g_free, strdup -> g_strdup.Stig Bjørlykke1-3/+3
svn path=/trunk/; revision=24180
2008-01-22Use WTAP_MAX_PACKET_SIZE in place of 65535 in sanity check for snap lenStephen Fisher1-1/+1
(although they are the same value right now) svn path=/trunk/; revision=24159
2008-01-21as we have BSWAP64() now, at least read 64bit section_length (but currently ↵Ulf Lamping1-3/+6
unused) svn path=/trunk/; revision=24149
2008-01-20Introduce BSWAP64() and use it in the pcapng codeStephen Fisher2-5/+13
svn path=/trunk/; revision=24142
2008-01-19Make it compile on Win32 ;-)Ulf Lamping1-4/+4
svn path=/trunk/; revision=24141
2008-01-19Make it compile on OSX.Stig Bjørlykke1-4/+4
svn path=/trunk/; revision=24140
2008-01-19various enhancements:Ulf Lamping1-156/+436
- read simple packet block - read various options - jump over unknown block types - more sanity checks svn path=/trunk/; revision=24139
2008-01-18decode IDB options (if_tsaccur and if_fcslen)Ulf Lamping2-24/+134
svn path=/trunk/; revision=24133
2008-01-18Add link to pcap-ng format specification and use #defines for hex values ofStephen Fisher1-18/+27
block types. svn path=/trunk/; revision=24128
2008-01-17Add support for DLT_SCCP (SCCP without MTP2, MTP3, or any pseudo-header).Jeff Morriss2-37/+39
svn path=/trunk/; revision=24119
2008-01-14Fix seek reading by adding the size of the block length at the end of theStephen Fisher1-1/+1
block to the data offset. svn path=/trunk/; revision=24083
2008-01-13some minor updatesUlf Lamping1-4/+3
svn path=/trunk/; revision=24082
2008-01-13Add svn:eol-style native and svn:keywords IdStephen Fisher2-1017/+1017
svn path=/trunk/; revision=24081
2008-01-13Make pcapng.c compile on Unix (with gcc)Stephen Fisher1-6/+8
svn path=/trunk/; revision=24080
2008-01-13add very experimental support for pcapng "PCAP Next Generation Dump File ↵Ulf Lamping7-1/+1040
Format" - this is incomplete and buggy, be careful! svn path=/trunk/; revision=24079
2008-01-10Get rid of extra blank lines at the end of the file.Guy Harris1-2/+0
svn path=/trunk/; revision=24054
2008-01-10Use WTAP_ENCAP_ERF as the file encapsulation, as that's what we'dGuy Harris1-38/+9
otherwise use as the per-packet encapsulation. The close routine does nothing; get rid of it - you don't *need* a close routine (by default, the subtype_close pointer is null, which means that nothing per-file-type is done when the file is closed). Make the code to handle the length fields in the ERF header common, rather than copying it to each group of record types. svn path=/trunk/; revision=24053
2008-01-09From Florent Drouin:Jeff Morriss1-14/+41
fix http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1727 (pppd format file incorrectly detected as being an ERF file) by: The file_seek() call has been replaced by a call to file_read(), so, when the end of the file is reached and the current record is truncated, we have got an error. This solves the problem of bad file format detection. Additionaly, the ERF heuristic has been improved. svn path=/trunk/; revision=24051
2007-12-28more buffer functionsTomas Kukosa2-0/+18
svn path=/trunk/; revision=23956
2007-12-27export more buffer functions from wiretapTomas Kukosa1-0/+3
svn path=/trunk/; revision=23952
2007-12-17_SOURCE has magic meaning and isn't to be used by non-wizards.Jörg Mayer2-2/+2
Aka: Newer autofoo tools broke because of the _SOURCE ending. svn path=/trunk/; revision=23904
2007-12-16From Fulko Hew:Stig Bjørlykke3-0/+172
1/ patches to support the libpcap/SITA format 'WTAP_ENCAP_SITA'. 2/ patches to the LAPB dissector to accept MLP (Multi-link protocol) (although MLP dissection has _not_ been added (yet)). 3/ New protocol dissectors for: a) SITA's WAN layer 0 status header, b) An airline protocol ALC, c) An airline (and other industry) protocol UTS. These patches are submitted as a set since the new protocol dissectors are not useful without the libpcap/SITA related changes, and there is no point in having those changes without the additional dissectors. This fixes bug/enhancement 2016. svn path=/trunk/; revision=23885
2007-12-16From Marton Nemeth:Stig Bjørlykke1-1/+1
Error message when capturing too short WTAP_ENCAP_USB_LINUX type packets contains a copy-paste typo. From me: Fix some addresses in AUTHORS. svn path=/trunk/; revision=23882
2007-12-08wtap_process_pcap_packet() is gone; remove it from the list of exportedGuy Harris1-1/+0
functions. svn path=/trunk/; revision=23806
2007-12-08Add .. to the directory in which to look for headers, just as is doneGuy Harris1-1/+2
with automake/autoconf, so we pick up config.h. svn path=/trunk/; revision=23805
2007-12-08Get rid of wtap_process_pcap_packet(); it's no longer used. Get rid ofGuy Harris4-252/+0
no-longer-needed wiretap/wtap-capture.h. Clean up wiretap/libwiretap.vcproj (note: this isn't going to scale, if it has to contain a list of all the files, as most committers will be editing only Makefile.common files). svn path=/trunk/; revision=23803
2007-12-07Delete the *right* config.h.win32.Guy Harris2-61/+1
Copy the MSVC++-version-checking stuff from it into the top-level config.h.win32, and try to set up config.nmake so that MSC_VER_REQUIRED is defined in all Makefiles that include config.nmake. svn path=/trunk/; revision=23802
2007-12-07HAVE_PCAP_H is no longer defined; just use HAVE_LIBPCAP.Guy Harris1-4/+4
Fix indentation. svn path=/trunk/; revision=23798
2007-12-07Run runlex.sh from the tools directory. Get rid of the extra copy inGuy Harris2-15/+3
the top-level directory. Don't build config.h in the wiretap directory - it now uses config.h from the top-level directory. Get rid of the template config.h.win32 in that directory. Get rid of files that are no longer in the wiretap directory or are no longer constructed in that directory. svn path=/trunk/; revision=23797
2007-12-07Get rid of configure in wiretap. Finally!Jörg Mayer7-1203/+0
svn path=/trunk/; revision=23795
2007-12-07Get rid of 8-bit charcters in the example ETHERWATCH output - they canGuy Harris1-11/+15
cause gastric distress to at least som eversions of MSVC, and possibly other compilers. svn path=/trunk/; revision=23790
2007-11-30first steps to support MSVC 2008 Express EditionUlf Lamping1-4/+4
svn path=/trunk/; revision=23691
2007-11-28Fixes for Windows build w/o ZLIB Bill Meier1-2/+4
svn path=/trunk/; revision=23651
2007-11-27Add support for showing wireless LAN info (signal strength / rate / channel)Stephen Fisher1-4/+22
in Wireshark when reading CommView files. Also write out these values when coming from a file format with encapsulation type 802.11 with radio. svn path=/trunk/; revision=23617
2007-11-27fix mpa_... problemsUlf Lamping1-4/+13
svn path=/trunk/; revision=23616
2007-11-26Get rid of the global data structures populated by wiretap/mpeg-audio butJeff Morriss2-32/+56
used by the mpeg-audio dissector: instead keep the data inside the wiretap module and add accessor functions. I think this should fix http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1677 and anyway it's cleaner. svn path=/trunk/; revision=23612
2007-11-26Get rid of C++/C99 style comments--not all compilers support themJeff Morriss1-27/+27
svn path=/trunk/; revision=23608
2007-11-26Change %G to %Y for year in strftime() so it works on Windows also (%G is an ↵Stephen Fisher1-6/+6
extension found at least on OS X). Also change from 4 to 5 bytes in each strftime() to allow space for the NULL terminator with 4 character outputs. svn path=/trunk/; revision=23595
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-23 02:15:43 +0000