aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap
AgeCommit message (Collapse)AuthorFilesLines
2005-09-20From Hannes Gredler:Anders Broman3-1/+26
patch to support 4 additional juniper DLTs. all those are wrappers for exisiting media types augmented with meta-information which gets also displayed using this patch; svn path=/trunk/; revision=15908
2005-09-14added compression support for capture file output. The Save/As dialog now ↵Ulf Lamping5-105/+232
has a checkbox "Compress with gzip" currently limited to Ethereal and all the variants of libpcap filetypes only. We might want to add output compression support to the other tools as well (tethereal, mergecap, ...). We might also want to add support for the other filetypes, but this is only possible if the filetype functions doesn't use special output operations like fseek. One bug is still left: if the input and output filetypes while saving are the same, Ethereal currently optimizes this by simply copy the binary file instead of using wiretap (so it will be faster but it will ignore the compress setting). Don't know a good workaround for this, as I don't know a way to find out if the input file is currently compressed or not. One idea might be to use a heuristic on the filesize (compared to the packet size summmary). Another workaround I see is to remove this optimization, which is of course not the way I like to do it ... svn path=/trunk/; revision=15804
2005-09-09From Bill Meier:Guy Harris2-24/+54
define "timezone" as "gint16", as it can be positive (west of UTC) or negative (east of UTC); update comments to refer to the new names for structure members; say the precision of the time stamps is 1 nanosecond only if the ticks per second is > 10 million; fix the handling of files truncated exactly on a frame boundary. svn path=/trunk/; revision=15739
2005-09-08Fix more problems found by Steve Grubb, along with other changes:Gerald Combs1-0/+1
Camel: Fix an off-by-one error. Don't alloc and free where it's not needed. Remove an unused variable. PPP and K12: Fix memory leaks. svn path=/trunk/; revision=15725
2005-08-30Add support for slightly modified libpcap file format with nanosecond ↵Ulf Lamping5-39/+92
resolution (currently supported by Ethereal only). Support for both read and write was added. The file format stays the same as the common libpcap format, only the lower part of the timestamp field uses nanoseconds instead of microseconds. This file format uses the libpcap magic number 0xa1b23c4d. svn path=/trunk/; revision=15623
2005-08-29Get rid of the old file header definition.Guy Harris1-31/+17
Set the time stamp resolution based on whether the number of ticks per second is > 1 million or not. svn path=/trunk/; revision=15606
2005-08-28From Bill Meier:Guy Harris2-34/+92
1. Use the new (good work!) 'nanosec' precision only for gig pods; 2. Rework 'struct netxray_hdr' to make it (somewhat) easier to maintain and revise: a. Declare known hdr fields such as 'captype' instead of using offsets in 'xxx placeholder' fields. d. Define 'unknown' hdr fields using placeholder names based upon hex-offset in the netxray header record. (This isn't perfect, but I hope it will make things more manageable). 3. Update hdr field info (based upon examination of various capture files): a. Define a hdr field which appears to be 'time-zone' [offset in hours from UTC] for the machine doing the capture. (Maybe this field can eventually be used for Ethereal to display the (local) time as it was at the time of the capture). b. Describe certain hdr fields as being "file offsets" (altho the exact use is still unclear). Update some comments. svn path=/trunk/; revision=15603
2005-08-28Ethereal requires 64-bit integrer support; do the time stampGuy Harris1-12/+10
calculations with integers, which avoids some floating-point inaccuracy. svn path=/trunk/; revision=15602
2005-08-28Get rid of a no-longer-true comment.Guy Harris1-4/+0
svn path=/trunk/; revision=15598
2005-08-26Fix indentation, and fix a comment.Guy Harris1-2/+2
svn path=/trunk/; revision=15545
2005-08-26Ethereal now requires 64-bit integer support, so get rid of the tests ofGuy Harris4-47/+13
G_HAVE_GINT64. Get rid of the floating-point stuff in the Etherpeek Classic file reading code, just use 64-bit integers. Fix up the calculation of the nanoseconds portion of the time stamp. svn path=/trunk/; revision=15544
2005-08-25timestamp display precision:Ulf Lamping28-5/+44
- automatic adjustment depending on file format - manual adjustment through menu items save the setting in the recent file svn path=/trunk/; revision=15534
2005-08-24EVERYTHING IN THE BUILDBOT IS GOING TO BE RED!!! Sorry! Ulf Lamping31-117/+145
I've done more than a day to change the timestamp resolution from microseconds to nanoseconds. As I really don't want to loose those changes, I'm going to check in the changes I've done so far. Hopefully someone else will give me a helping hand with the things left ... What's done: I've changed the timestamp resolution from usec to nsec in almost any place in the sources. I've changed parts of the implementation in nstime.s/.h and a lot of places elsewhere. As I don't understand the editcap source (well, I'm maybe just too tired right now), hopefully someone else might be able to fix this soon. Doing all those changes, we get native nanosecond timestamp resolution in Ethereal. After fixing all the remaining issues, I'll take a look how to display this in a convenient way... As I've also changed the wiretap timestamp resolution from usec to nsec we might want to change the wiretap version number... svn path=/trunk/; revision=15520
2005-08-22Two fixes to tektronix k12 import:Luis Ontanon1-2/+7
- it appears that there are more packet record types other than 0x00010020. accept anything matching 0x00010020/28 as a packet record. - make the stack filename lowercase before comparing it so that capitalization is not an issue. svn path=/trunk/; revision=15513
2005-08-20"ascend-grammar.h" is generated by Bison with a copy of the definitionGuy Harris1-2/+0
of the YYSTYPE structure in "ascend-grammar.c"; the intent is that other files include "ascend-grammar.h" if they need that structure, but that "ascend-grammar.c" not itself include "ascend-grammar.h". If it *does* include it, the compiler complains about YYSTYPE being redefined (even though the two structures are identical). svn path=/trunk/; revision=15478
2005-08-20- Include the .h files in their .c files.Jörg Mayer2-0/+4
- Remove epan/dissectors/packet-sna.h, it isn't used anywhere. svn path=/trunk/; revision=15475
2005-08-20Add -Wmissing-declarations -Wwrite-strings to extra-gcc-flagsJörg Mayer1-1/+1
svn path=/trunk/; revision=15453
2005-08-19Add APIs to Wiretap to return the file of the size as supplied by the OSGuy Harris4-6/+58
(so if the file's gzipped, it's *NOT* the size of the file after uncompressing), and an approximation of the amount of that data read sequentially so far. Use those for various progress bars and the like. Make the fstat() in the Ascend trace reader directly use wth->fd, as it's inside Wiretap; that gets rid of the last caller of wtap_fd() (as we're no longer directly using fstat() or lseek() in Ethereal), so get rid of wtap_fd(). svn path=/trunk/; revision=15437
2005-08-18Try yet another scheme for handling time stamps; realtick isn't alwaysGuy Harris1-44/+146
correct. svn path=/trunk/; revision=15404
2005-08-12From Hannes GredlerAnders Broman3-2/+7
- add support for Multi-Link Frame-Relay (FRF.15) captures taken on Juniper ML-, LS-, AS- PICs. - rework of the common juniper header dissector: test the extension flag (0x80) which indicates that there are meta-information like interface-index, interface-name etc. present - minor bugfix (LSQ L3-proto masks, direction masks were broken) svn path=/trunk/; revision=15316
2005-08-03Don't assume ints are 32 bits. Fixes a recent Buildbot error.Gerald Combs2-15/+16
svn path=/trunk/; revision=15200
2005-08-02Include the .h files into the .c files. That way weJörg Mayer3-0/+3
a) get rid of warnings of type "no previous declaration" and b) make sure that declaration and implementation are in sync. svn path=/trunk/; revision=15168
2005-07-22Fix some warnings (and one of my previous 'fixes')Jörg Mayer3-6/+6
svn path=/trunk/; revision=14997
2005-07-22From Hannes Gredler:Anders Broman3-3/+7
support for support for DLT_JUNIPER_MLPPP svn path=/trunk/; revision=14994
2005-07-22More 'char*' -> 'const char*' warning fixesJörg Mayer2-7/+7
svn path=/trunk/; revision=14986
2005-07-10After doing "make maintainer-clean", "svn status --no-ignore | grep ^I"Jörg Mayer1-1/+6
returned quite a list of files. Add them to MAINTAINERCLEANFILES. Whitespace changes (replace multiple spaces by TABs, in a few cases this needed to be done at the beginning of Makefile lines. svn path=/trunk/; revision=14891
2005-07-08Make nettl file header items containing strings "gchar", to squelchGuy Harris1-5/+5
signed vs. unsigned compiler warnings. svn path=/trunk/; revision=14873
2005-07-05Replace Chris Lydick by Robert Long as Author of the Sniffer 2.003 support patchJörg Mayer1-1/+1
svn path=/trunk/; revision=14862
2005-07-02Chris Lydick: Support for Sniffer 2.003 files.Jörg Mayer2-1/+10
Modified to match the current codebase. svn path=/trunk/; revision=14832
2005-06-30make reading of observer files work againRonnie Sahlberg1-1/+11
for some reason we have forgotten to skip the initial (always 8?) bytes prior to the start of the frame. svn path=/trunk/; revision=14822
2005-06-17- Write rf5 files (I don't think tektronix software will be able to read ↵Luis Ontanon4-6/+267
these, ethereal does) - change k12.atm.vci and k12.atm.vpi into atm.vci and atm.vpi svn path=/trunk/; revision=14682
2005-06-16Note that the WAN_CAPTYPE value of 4 can correspond to Cisco HDLCGuy Harris1-0/+14
traffic as well as Frame Relay traffic, and give some information about the cruft found in the xxc field of the header for one CHDLC and one FR capture. svn path=/trunk/; revision=14659
2005-06-16third and last(?) iteration on the import routines for tektronix 32bit rf5 ↵Luis Ontanon2-326/+217
files. Now the import is correct even for large files. I found out when and where the "junk" was inserted. svn path=/trunk/; revision=14646
2005-06-13use a helper dissector to show k12 files.Luis Ontanon2-263/+255
svn path=/trunk/; revision=14621
2005-06-10Fixed indentation and removed control characters, in an attempt to ↵Luis Ontanon1-29/+27
understand why windows fail to compile. svn path=/trunk/; revision=14607
2005-06-10Initial checkin of the 32 bit tektronix k12 binary format (rf5)Luis Ontanon6-3/+592
There is still much to do, but at the very least it can import files allowing the user to choose which protocols handle the diferent sources. svn path=/trunk/; revision=14606
2005-06-04Fix some more leaks in error returns from open routines (if the open canGuy Harris3-14/+27
fail after the private data is allocated, you have to free the private data). The file header in nettl files is 128 bytes - use a #define for it, and also a #define for the magic number size. svn path=/trunk/; revision=14553
2005-05-30From Steve Grubb: Fix a memory leak. Fixes part of bug 217.Gerald Combs1-0/+1
svn path=/trunk/; revision=14500
2005-05-17From Mark C Brown,:Anders Broman3-133/+88
Fixes for LAP-B (SX25L2) and X.25 (SX25L3) nettl trace records. svn path=/trunk/; revision=14385
2005-05-13Add WTAP_GCOM_TIE1 and WTAP_GCOM_SERIAL forGilbert Ramirez2-1/+7
Oolan Zimmer <ethereal@gcom.com> svn path=/trunk/; revision=14362
2005-05-11From Hannes GredlerRonnie Sahlberg3-3/+12
support for Juniper PPPOE encapsulation svn path=/trunk/; revision=14346
2005-05-02- Add support for libpcap files for MTP2 with a per packet headerMichael Tüxen3-5/+127
indicating the direction, narrowband/broadband, and interface number. - Add support to display the direction and interface number. - Add support to packet-mtp2.c to use the broadband/narrowband indication. svn path=/trunk/; revision=14265
2005-04-07updating Mark C Browns informationRonnie Sahlberg3-1/+7
svn path=/trunk/; revision=14025
2005-04-03Fix up the table of encapsulation type strings to match the new set ofGuy Harris1-4/+19
encapsulation types. svn path=/trunk/; revision=14007
2005-04-03Make editcap use wtap_read(); that eliminates the last user ofGuy Harris11-40/+8
wtap_loop(), so eliminate wtap_loop(). svn path=/trunk/; revision=14006
2005-04-01From Mark C Brown NETTL updatesRonnie Sahlberg4-49/+125
svn path=/trunk/; revision=13999
2005-03-20"*p++" doesn't affect what "p" points to; it only affects "p" itself,Guy Harris1-2/+0
and is equivalent to just "p++". If "p" isn't used after that, "*p++" does nothing whatsoever, and can just be removed. svn path=/trunk/; revision=13818
2005-03-18from Thierry MartinRonnie Sahlberg1-0/+1
fix a bug in 5view reader due to an uninitialized variable svn path=/trunk/; revision=13804
2005-03-01The DBS Etherwatch file handler does look for a magic number (the wordGuy Harris1-1/+1
"ETHERWATCH"). svn path=/trunk/; revision=13567
2005-02-24Minor fixesJörg Mayer1-3/+17
svn path=/trunk/; revision=13498
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-28 03:11:42 +0000