$Id: ChangeLog,v 1.33 2003/12/13 00:55:10 gerald Exp $ 2003-12-13 00:38 gerald * Makefile.am: Add packet-isup.h as well. 2003-12-13 00:22 gerald * Makefile.am: Add packet-ansi_map.h to the distribution. 2003-12-12 23:47 obiot * packet-smpp.c: Always dissect a sm_submit otherwise reassembly of short messages does not work. 2003-12-12 23:35 obiot * packet-wbxml.c: Move info column update code outside of if (tree). 2003-12-12 23:23 guy * packet-dns.c: Add some checks to make sure we're not running past the end of the RR we're dissecting. (Some RR's still don't do that check, as they don't maintain an "rr_len" variable, and as "get_dns_name()" doesn't do any length checking.) That obviates the need for having "compute_key_id()" check the length, as we won't even get to calling it if the RR is too short. Have it still do a check for sanity, but just abort if the check fails, and have it return -1 if the algorithm is unsupported. Don't bother processing T_CERT RRs if we're not building a protocol tree, don't fetch data from a T_CERT RR until we put it into the tree, and fix the bug that change found, namely that we were using the wrong variable in the "val_to_str()" call for the certificate type. 2003-12-12 22:19 guy * packet-ses.c, packet-ses.h: From Yuriy Sidelnikov: if the first SPDU in a TSDU has a type of 1 or 2, treat it specially - a type of 1 means GIVE_TOKENS, not DATA_TRANSFER, in that case. 2003-12-12 21:17 guy * packet-pim.c: From Hannes Gredler: display the PIM hello option values in brackets after the option name; in the LAN prune delay option dissector: put the top-level item for the option into the PIM options tree rather than the PIM main tree; calculate the correct LAN prune delay and display it in units of milliseconds; calculate the correct override interval and display it in units of milliseconds; fix the offset and length calculation. 2003-12-12 19:55 guy * AUTHORS, packet-ansi_a.c, packet-ansi_a.h, packet-ansi_map.c, packet-ansi_map.h, packet-isup.c, packet-isup.h, gtk/Makefile.am, gtk/Makefile.nmake, gtk/ansi_map_stat.c, gtk/isup_stat.c: From Michael Lum: Fix point code display. Add taps for ANSI MAP and ISUP statistics. 2003-12-12 16:06 gerald * README.win32: Switch from gettext 0.13 to 0.12.1. 2003-12-12 02:50 gerald * gtk/: dlg_utils.c, main.c: In "dlg_window_new()" check to see if "top_level" has been initialized, as is the case for the spawned capture process. 2003-12-11 21:23 ulfl * packet-afp.c, packet-bssap.c, packet-cops.c, packet-esis.c, packet-gsm_sms.c, packet-isakmp.c, packet-osi-options.c, gtk/dcerpc_stat.c, plugins/docsis/packet-tlv.c, plugins/docsis/packet-vendor.c, wiretap/erf.c, wiretap/lanalyzer.c: prevent MSVC warning: "warning C4761: Größenkonflikt im Argument. Konvertierung vorgenommen" -> size conflict in argument, conversion done 2003-12-11 18:38 guy * packet-dns.c: Have "compute_key_id()" return different values for different errors, and have its caller put an entry into the tree for "we don't support the algorithm" (the "RR too short" error is a "can't happen"). 2003-12-11 18:37 guy * epan/configure.in: Add "/usr/local/include" in case the PCRE header file is there. 2003-12-11 08:54 ulfl * packet-dns.c: replaced type u_int32_t by glib's guint32 (to satisfy MSVC) 2003-12-11 01:13 guy * tethereal.c: Fix a typo. 2003-12-10 23:21 gerald * README.win32, packaging/nsis/ethereal.nsi: Update the Windows environment to GLib 2.2.3 and GTK+ 1.3.0-20030717. This requires replacing libintl-1.dll from the libintl package (which is no longer used) with intl.dll from intl.dll from the gettext package. 2003-12-10 22:52 gram * print.c: Analyzer's PDML will be changed to start the packet offset (the "pos" field) at 0 instead of 1. This works better for Ethereal, as our offsets start at 0. Change the "geninfo" pseudo-protocol to use pos="0" instead of pos="1". 2003-12-10 22:38 obiot * epan/dfilter/Makefile.nmake: PCRE support requires $(PCRE_CFLAGS) in CFLAGS. 2003-12-10 22:27 obiot * tap-wspstat.c: WSP status code is hexadecimal. 2003-12-10 21:50 gerald * config.nmake, configure.in, epan/configure.in: Bump the version to 0.10.0. It could be (and has been) argued that the last release should have been 0.10.0. 2003-12-10 21:21 guy * gtk/gsm_a_stat.c: Oops, I checked the wrong tap into CVS somehow. 2003-12-10 21:12 gerald * epan/ftypes/: ftypes-int.h, ftypes.h: Make the _pcre_tuple_t struct internal. 2003-12-10 19:35 guy * packet-dns.c: From David Fort: compute and display the key ID in a DNS KEY RR, if possible. 2003-12-10 19:26 guy * packet-isup.c: From Anders Broman: add CIC to Info column. 2003-12-10 19:21 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-igap.c, packet-igap.h, packet-igmp.c: From Akira Endoh: IGAP support. 2003-12-10 19:21 guy * packet-isakmp.c: Squelch a compiler warning. 2003-12-10 19:05 ulfl * packaging/nsis/ethereal.nsi: added some more uninstall info and offering only removal of program (instead of modify/repair) 2003-12-10 10:47 guy * packet-isakmp.c: Check whether the packet length is less than the length of the packet header, and give up if it is. 2003-12-09 23:45 obiot * gtk/tcp_graph.c: Mark parameter data as unused in callback_create_help(). 2003-12-09 23:15 obiot * epan/ftypes/Makefile.nmake: Internal PCRE field type for efficient RE parsing in dfilters. 2003-12-09 23:02 obiot * epan/: ftypes/Makefile.am, ftypes/ftype-pcre.c, ftypes/ftype-string.c, ftypes/ftypes.c, ftypes/ftypes.h, dfilter/semcheck.c: Internal PCRE field type for efficient RE parsing in dfilters. 2003-12-09 22:41 ulfl * file.c, gtk/main.h, gtk/menu.c: print system enhanced, more print ranges and expanded states 2003-12-09 22:27 ulfl * print.c: print system enhanced, more print ranges and expanded states 2003-12-09 22:21 ulfl * print.h, tethereal.c, gtk/print_dlg.c: print system enhanced, more print ranges and expanded states 2003-12-09 22:04 ulfl * print.h: print system enhanced, more print ranges and expanded states 2003-12-09 18:49 guy * Makefile.am, Makefile.nmake, packet-gsm_a.c, packet-gsm_a.h, tap-ansi_astat.c, tap-gsm_astat.c, gtk/Makefile.am, gtk/Makefile.nmake, gtk/ansi_a_stat.c, gtk/gsm_a_stat.c: From Michael Lum: new taps for GSM A-interface; fixes for ANSI A-interface taps. 2003-12-09 06:48 guy * column.c, column.h, file.c, ui_util.h, epan/column-utils.c, epan/column_info.h, gtk/main.c, gtk/packet_list.c: Don't automatically size the columns - that's expensive in large captures, as it has to compute the width of an auto-resizing column in every row. Just pick fixed widths for the columns (and tune the width of the "Protocol" column so that it's not narrower than the column title). 2003-12-09 05:56 gram * tethereal.c, doc/README.xml-output, doc/tethereal.pod, tools/msnchat: -Tpdml and -Tps force -V. Thus, -V is no longer required when using -Tpdml. Eventually, -Tps will not force -V, and will print summaries when -V is not selected. However, work still has to be done there. 2003-12-09 05:10 guy * packet-radius.c: Add a new attribute type RADIUS_IP6_ADDRESS for IPv6 addresses. Put in a note explaining the enum for those types. From Rui Carmo: add all 3GPP VSA's. 2003-12-09 05:06 guy * epan/: resolv.c, to_str.c, to_str.h: Add "ip6_to_str_buf()", by analogy to "ip_to_str_buf()". 2003-12-09 00:52 guy * packet-ansi_637.c: From Michael Lum: fix incorrect switch values which resulted in NULL strings being passed to ..._add_text(). 2003-12-09 00:12 guy * packet-tcp.c: As per Didier Gautheron, dissect TCP options regardless of whether we're building a protocol tree, so the Info column is set correctly. 2003-12-08 23:40 guy * packet-alcap.c, packet-ansi_637.c, packet-ansi_683.c, packet-ansi_a.c, packet-ansi_map.c, packet-gsm_a.c, packet-gsm_map.c, packet-gsm_sms.c, epan/to_str.c, epan/to_str.h: Get rid of the private "my_decode_bitfield_value()" a number of dissectors had. Instead, rename it "other_decode_bitfield_value()", put it in "epan/to_str.c", and make "decode_bitfield_value()" use it. 2003-12-08 22:28 guy * Makefile.nmake: Add a "doc" target, as per Ulf Lamping's comment. 2003-12-08 22:24 guy * doc/ethereal-filter.pod.template: Note the types of fields for which the "contains" operator is available. Always capitalize the names "Ethereal" and "Tethereal" (we don't capitalize the command names, however, as they're all-lower-case). Note that you can find out from the GUI whether Ethereal was built with the PCRE library or not. Fix a typo. 2003-12-08 21:57 guy * print.c: "proto_construct_dfilter_string()" can return a null pointer, e.g. for protocol tree fields that don't have values and that are zero-length. Combine the "if (fi->hfinfo->type != FT_PROTOCOL && fi->length > 0)" stuff to show the raw value into the previous "if". 2003-12-08 21:36 guy * AUTHORS, packet-mtp3.c, packet-mtp3.h, packet-sccp.c, epan/packet_info.h, epan/to_str.c: From Michael Lum: support an AT_SS7PC address type for SS7 point codes, and set the direction in pinfo for SS7 packets based on source and destination addresses. 2003-12-08 20:58 guy * packet-dcerpc.c: From Jamie Fournier: don't show UNKUUID information for fragments for known dissectors. 2003-12-08 20:50 guy * packet-srvloc.c: From Greg Morris: ecode the attribute structure instead of reporting a really long undecoded string. 2003-12-08 20:43 guy * packaging/nsis/ethereal.nsi: From Lars Roland: fix a typo. 2003-12-08 20:42 guy * packaging/nsis/Makefile.nmake: From Lars Roland: fix the NSIS Makefile to handle PCRE. 2003-12-08 20:40 guy * packet-isis-clv.c, packet-isis-clv.h, packet-isis-hello.c, packet-isis-hello.h, packet-isis-lsp.c, packet-isis-lsp.h, packet-isis-snp.c, packet-isis-snp.h: From Hannes Gredler: - unify the IS-IS CLV space IS-IS uses a unified CLV space across all Level and PDU Types there is no need to define PDU- and Level- Specific CLV Types; - clean up Authentication CLV TLV #10 is the official supported TLV for carrying authentication information- todays code displays TLV #10 as non-standard which is wrong; also the notion of "Domain" "Authentication" and "Link" password has disappeared from contemporary routing SW; - add IP Authentication CLV dissector this CLV is depreciated - however it is using different semantics than TLV #10 so we need a dedicated dissector; - add Checksum CLV dissector add support for RFC 3358 Checksum CLVs majority of code re-used from the LSP checksum verification dissector. 2003-12-08 20:37 obiot * packet-wsp.c, packet-mmse.c, packet-wbxml.c: Get rid of the integer media type dissector table in WSP, WBXML and MMSE. 2003-12-08 20:36 guy * packet-dsi.c: From Didier Gautheron: check packet format in get_dsi_pdu_len. 2003-12-08 20:36 guy * packet-afp.c: From Didier Gautheron: add offset and size parameters in info colum for read and write commands. 2003-12-08 20:25 guy * packet-sip.c: From Anders Broman: Call subdissectors regardless of whether we're building a protocol tree or not. Use the "media_type" dissector table to hand off to subdissectors, rather than wiring in SDP. Put the message body into a subtree of the SIP tree rather than at the top level. 2003-12-08 19:25 ulfl * gtk/menu.c: moved "File->Save Highlighted Data" to "File->Export->Raw Packet Data" 2003-12-08 17:54 ulfl * doc/ethereal.pod: updated to reflect the menu redesign changes 2003-12-08 17:49 ulfl * gtk/menu.c: removed seperator between the two print menuitems 2003-12-07 19:09 obiot * AUTHORS: Update address of Johan Feyaerts. Dfilter matches operator. 2003-12-07 18:32 obiot * doc/ethereal-filter.pod.template: Clarify dfilter syntax (mainly the implicit exists operator), add subsections in syntax section, add description of new "contains" operator (and inform that it is only available if libpcre has been linked in). 2003-12-07 18:09 obiot * packet-mmse.c, packet-wbxml.c, packet-wsp.c: Remove the literal WSP content type dissector table, and replace it with the "media_type" table defined in the HTTP dissector. 2003-12-07 09:43 oabad * gtk/main.c: Update various set_menu_object_data() calls to reflect recent menu hierarchy changes. This avoids a crash when selecting "Folow TCP stream" from the "Analyze" menu. 2003-12-07 03:46 guy * packet-sdp.c: Register the SDP dissector with the media_type dissector table with its media type. 2003-12-07 03:34 guy * packet-http.c: Use a cleanup handler to free the Content-Type header value, so it gets freed even if we throw an exception after processing the Content-Type header but before we call a subdissector. 2003-12-07 03:21 guy * packet-http.c: Change the name of the variable holding the dissector table pointer to match the previous checkin. 2003-12-07 03:17 guy * packet-http.c, packet-mmse.c: Rename the "http.content_type" dissector table to "media_type", as it's for use in any dissector that uses Internet media types. 2003-12-07 02:42 guy * packet-nt-sonmp.c: Only check the destination address if it's AT_ETHER; otherwise, there's no guarantee that "data[5]" exists or can be interpreted in that fashion. 2003-12-07 02:26 guy * packet-ssl.c: From Devin Heitmueller: include the AES ciphersuites from RFC 3268. 2003-12-07 02:23 guy * doc/tethereal.pod: Put the "-V" flag in boldface, so pod2man doesn't whine. 2003-12-07 00:04 gerald * Makefile.nmake, README.win32, config.h.win32, config.nmake, epan/Makefile.nmake, epan/config.h.win32, epan/ftypes/Makefile.nmake, packaging/nsis/ethereal.nsi: Add PCRE support to the Windows build. 2003-12-06 19:26 oabad * packet-nt-sonmp.c: Check if pinfo->dl_dst.data is not NULL before accessing the data (it was NULL in one of my "linux cooked" captures which contains no destination address). 2003-12-06 19:14 jmayer * packet-mtp3mg.c: Declaration included the line above 2003-12-06 16:35 gram * Makefile.am, acinclude.m4, configure.in, util.c, epan/acinclude.m4, epan/configure.in, epan/dfilter/dfvm.c, epan/dfilter/dfvm.h, epan/dfilter/gencode.c, epan/dfilter/grammar.lemon, epan/dfilter/scanner.l, epan/dfilter/semcheck.c, epan/dfilter/sttype-test.c, epan/dfilter/sttype-test.h, epan/ftypes/ftype-bytes.c, epan/ftypes/ftype-double.c, epan/ftypes/ftype-integer.c, epan/ftypes/ftype-ipv4.c, epan/ftypes/ftype-none.c, epan/ftypes/ftype-string.c, epan/ftypes/ftype-time.c, epan/ftypes/ftype-tvbuff.c, epan/ftypes/ftypes.c, epan/ftypes/ftypes.h: From Olivier Biot New "matches" operater in display filter language. Uses PCRE. If a "matches" operator is found in a dfilter while libpcre has not been used to build the binary, then an exception is thrown after using dfilter_fail() to set an apporporiate error message. 2003-12-06 06:22 gram * epan/Makefile.am: slab.h needs to be in libethereal_a_SOURCES 2003-12-06 06:09 gram * Makefile.am, packet-frame.c, packet-frame.h, print.c, print.h, tethereal.c, doc/README.xml-output, doc/tethereal.pod, epan/proto.c, epan/proto.h, tools/EtherealXML.py, tools/Makefile.am, tools/msnchat: Add the ability to print packet dissections in PDML (an XML-based format) to tethereal. It could be added to Ethereal, but the GUI changes to allow the user to select PDML as a print format have not been added. Provide a python module (EtherealXML.py) to help parse PDML. Provide a sample app (msnchat) which uses tethereal and EtherealXML.py to reconstruct MSN Chat sessions from packet capture files. It produces a nice HTML report of the chat sessions. Document tethereal's PDML and EtherealXML.py usage in doc/README.xml-output Update tethereal's manpage to reflect the new [-T pdml|ps|text] option 2003-12-06 04:05 guy * file.c, ui_util.h, gtk/packet_list.c: From Jeff Morriss: avoid at least some N^2 behavior when changing the time stamp format. 2003-12-05 22:33 guy * packet-ccsds.c: "hf_ccsds_secheader" is an FT_BOOLEAN; use "proto_tree_add_boolean()" for it. 2003-12-05 16:00 gerald * Makefile.nmake, README.win32, config.nmake: Switch over to Net-SNMP 5.1. A ZIP file of the Net-SNMP 5.1 sources plus a static Windows library (netsnmp.lib) has been placed at http://www.ethereal.com/distribution/win32/development/ The Net-SNMP documentation recommends against using a DLL at the present time. 2003-12-05 09:34 guy * packet-sdp.c: We have to parse the SDP packet even if we're not building a protocol tree, as we might be setting up a conversation. 2003-12-05 09:33 guy * packet-isup.c: Subdissectors must be called regardless of whether a protocol tree is being built. 2003-12-05 09:25 guy * plugins/mgcp/packet-mgcp.c: Subdissectors must be called regardless of whether a protocol tree is being built. 2003-12-04 22:37 guy * plugins/asn1/Makefile.am: From some reason, at least on Mac OS X 10.3, the change to have the protocol tree stuff not use GNodes means that the ASN.1 plugin now needs to be explicitly linked against GLib in order to get access to the GNode routines, otherwise you get errors from the run-time linker. 2003-12-04 19:53 guy * epan/: proto.c, proto.h: It turns out the protocol tree parent link was used, so we need it in our new scheme. 2003-12-04 10:59 guy * file.c, print.c, proto_hier_stats.c, tap-protohierstat.c, epan/proto.c, epan/proto.h, gtk/proto_draw.c, gtk/rtp_analysis.c: Don't use GNodes for the protocol tree, put the sibling pointer, and pointers to the first *and* last child, in the "proto_node" structure itself. That saves us one level of indirection and memory allocation, and lets us append to a tree by appending to the last child directly, rather than having to scan through the list of siblings of the first child to find the end of that list. 2003-12-04 08:15 sahlberg * packet-kerberos.c: update to kerberos if the kerberos blob contains a krb error, print the error string to COL_INFO 2003-12-04 08:13 sahlberg * packet-ldap.c: update to ldap. some implementations specify GSSAPI in the bind call. the encapsulation seems to be the same as GSS-SPNEGO so handle it the same way 2003-12-04 06:02 gram * packet-wsp.c: Add {0, NULL} to the vals_wsp_reason_codes value_string array. 2003-12-04 05:59 gram * packet-wlancap.c: Add {0, NULL} to all the value_string arrays. 2003-12-04 05:57 gram * packet-socks.c: Add {0, NULL} to the reply_table_v5 value_string array. 2003-12-04 05:55 gram * packet-ldp.c: ldp.msg.tlv.returned.msg.ubit needs to be an FT_BOOLEAN field, not an FT_UINT8, since it is using a true_false_string struct to print its values. Add {0, NULL} to the fec_vc_interfaceparm value_string array. 2003-12-04 05:47 gram * packet-isup.c: Add {0, NULL} to the isup_Pass_on_not_possible_indicator_vals and ISUP_Broadband_narrowband_interworking_indicator_vals value_string arrays. 2003-12-04 05:40 gram * packet-fcswils.c: Add {0, NULL} to end of fc_swils_rscn_addrfmt_val value_string array. 2003-12-04 05:38 gram * packet-fcip.c: Add {0, NULL} to end of fcencap_proto_vals value_string array. 2003-12-04 00:45 guy * filters.c, filters.h, gtk/dcerpc_stat.c, gtk/endpoint_talkers_table.c, gtk/fc_stat.c, gtk/filter_prefs.c, gtk/find_dlg.c, gtk/h225_counter.c, gtk/h225_ras_srt.c, gtk/ldap_stat.c, gtk/mgcp_stat.c, gtk/prefs_dlg.c, gtk/rpc_stat.c, gtk/service_response_time_table.c, gtk/smb_stat.c: In GTK+ 2.x, "gtk_entry_get_text()" returns a "const gchar *"; assign its value to pointer-to-const variables. 2003-12-03 23:54 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-gsm_map.c, doc/ethereal.pod: From Felix Fei: GSM MAP support. From Michael Lum: Modified for better TCAP separation, fixed EOC handling (a la TCAP). Added parameter parsing (although not dissection or naming). 2003-12-03 23:46 guy * AUTHORS, packet-ansi_a.c, packet-ansi_a.h, tap-ansi_astat.c, gtk/Makefile.am, gtk/Makefile.nmake, gtk/ansi_a_stat.c: From Michael Lum: Ethereal tap for ANSI A-interface. Tweak some Makefile.nmake whitespace. 2003-12-03 22:50 guy * packet-mtp2.c, packet-mtp3.c: From Jeff Morriss: add support for WTAP_ENCAP_MTP2 and WTAP_ENCAP_MTP3. 2003-12-03 22:40 guy * wiretap/: AUTHORS, libpcap.c, wtap.c, wtap.h: From Jeff Morriss: add support for libpcap MTP2 and MTP3 captures. Add a missing entry in "encap_table[]" for Bluetooth H4, and fix some comments. 2003-12-03 20:01 guy * packet-bootp.c: From Greg Morris: handle the backwards compatibility flag for options 78 and 79. 2003-12-03 19:59 guy * gtk/menu.c: From Greg Morris: the "File->Save Highlighted" menu item has no icon, so don't use "ITEM_FACTORY_STOCK_ENTRY()" for it. 2003-12-03 19:47 guy * wiretap/airopeek9.c: "strtoul()" returns a "long", not a "long long". 2003-12-03 10:14 sahlberg * epan/tvbuff.c: Replace two expensive macros with a much simpler mechanism to prevent memory leaks due to exceptions. makes my tethereal testcase ~1% faster. 2003-12-03 09:50 sahlberg * epan/: proto.c, tvbuff.c, tvbuff.h: performance update replace tvb_raw_offset() which is essentially a simple assignment and which is called a lot with a macro. this makes my tethereal testcase 2-3% faster. 2003-12-03 09:28 guy * packet-ncp2222.inc, print.c, proto_hier_stats.c, tap-protohierstat.c, epan/proto.c, epan/proto.h, epan/ftypes/ftypes.c, epan/ftypes/ftypes.h, gtk/main.c, gtk/menu.c, gtk/prefs_dlg.c, gtk/rtp_analysis.c: The "ptr_u" unions no longer have a "next" pointer - they now just have one member - or have one that's not used, so get rid of those unions. 2003-12-03 08:53 guy * epan/: proto.c, proto.h, slab.h, ftypes/ftypes.c, ftypes/ftypes.h: Instead of requiring slab-allocated structures to have a "next" pointer, when adding them to the free list, cast the pointer to the structure to a pointer to a "freed_item_t" which contains the "next" pointer. This reduces the memory requirement for some of those structures, and leaves us free to slab-allocate structures that have a "next" pointer for other reasons. 2003-12-03 08:43 sahlberg * packet-smb.c: Update to SMB ReadAndX replies. There might be a 4 (not 2) byte datalen high field. If there is no such field (due to an early dialect being used) these bytes are often 0xff. If these four bytes are all 0xff dont display them in the tree. 2003-12-03 07:46 guy * README.linux: Bring it up to date. 2003-12-02 23:14 guy * file.c, tethereal.c, epan/column-utils.c, epan/column_info.h, gtk/main.c: From Didier Gautheron: for each column format type, save the first and last columns, if any, with that format, and use that to speed up processing of columns with a particular format and checking whether we're displaying a column with a particular format. 2003-12-02 21:15 guy * packet-ncp2222.inc, packet-smb-sidsnooping.c, tap-iostat.c, epan/proto.c, epan/proto.h, epan/dfilter/dfvm.c, epan/ftypes/ftypes.c, epan/ftypes/ftypes.h, gtk/io_stat.c, gtk/main.c, gtk/rtp_analysis.c: From Didier Gautheron: put an "fvalue_t" structure into a "field_info" structure, rather than separately allocating "fvalue_t"s and having the "field_info" structure point to them - this appears to speed up protocol tree construction a bit. 2003-12-02 20:27 guy * wiretap/airopeek9.c: Check for errors and EOF, and handle them appropriately; don't treat all errors when reading the header as indications that the file isn't an AiroPeek V9 file. Put in comments nothing some additional checks we should do. 2003-12-02 19:37 guy * AUTHORS, doc/ethereal.pod, wiretap/AUTHORS, wiretap/Makefile.am, wiretap/Makefile.nmake, wiretap/airopeek9.c, wiretap/airopeek9.h, wiretap/file_access.c, wiretap/wtap.h: From Martijn Schipper: support for reading AiroPeek files in V9 capture file format (AiroPeek 2.x). 2003-12-02 18:50 guy * packet-tpkt.c: Tomas Kukosa noted that the TPKT dissector spends a significant amount of time in "find_protocol_by_id()"; the protocol_t pointer for a protocol doesn't change over time, so get that pointer when the protocol is registered and save it. 2003-12-02 18:35 guy * packet-isakmp.c: From Yaniv Kaul: 1) fix description of Check Point version 5004; 2) add description of Check Point version 5005. 2003-12-02 10:23 sahlberg * epan/: proto.c, tvbuff.c, tvbuff.h: Move the definition of the tvbuff_t structure and friends to tvbuff.h so that we can change tvb_get_ds_tvb() into a macro. This function was a single line assignment and was called a lot. This made tethereal ~2.5% faster in one testcase I use. 2003-12-02 09:47 sahlberg * epan/: proto.c, ftypes/ftypes.c, ftypes/ftypes.h: Use the LSAB_ALLOC and SLAB_FREE macros to allocate/free fvalue_t data 2003-12-02 09:11 sahlberg * epan/: proto.c, slab.h: Moving SLAB_ALLOC and SLAB_FREE to its own header file 2003-12-02 09:05 guy * AUTHORS, packet-isakmp.c, doc/ethereal.pod: From Arnaud Jacques: fix a typo, and handle another CheckPoint version number. 2003-12-02 06:06 guy * packet-fcfzs.c: From Dave Sclarsky: Correct several problems with zoneset decodes (e.g. the zoneset and zone name lengths do *not* include the pad bytes, so the offset calculation needed to be fixed). Move the decode of zoneset name into the routine "dissect_fcfzs_zoneset", so that it is done in only one place. 2003-12-02 05:53 guy * packet-ses.c: Don't call the presentation layer dissector if we don't have a handle for it. 2003-12-02 02:58 guy * packet-bssap.c, packet-tcap.c: From Michael Lum: don't register the handoff routine for dissectors as a preference change callback if the ports they register on aren't preferences. 2003-12-01 23:41 guy * epan/value_string.c, epan/value_string.h, plugins/plugin_api_list.c, plugins/Xass-list, plugins/Xplugin_api.c, plugins/Xplugin_api.h, plugins/Xplugin_api_decls.h, plugins/Xplugin_table.h: From Tomas Kukosa: add "decode_enumerated_bitfield_shifted()", which is like "decode_enumerated_bitfield()" but handles value_string tables containing values as they appear in the bitfield rather than as they appear in the item containing the bitfield. 2003-12-01 23:26 guy * packet-m2ua.c: From Michael Lum: add a preference setting to specify the parameter tag for "Protocol Data 1", as it changed between draft 7 and RFC 3331. 2003-12-01 23:05 guy * Makefile.am, Makefile.nmake, packet-ansi_a.c, packet-ansi_a.h, packet-bssap.c, tap-ansi_astat.c: From Michael Lum: add a message statistics tap for ANSI A interface for Tethereal; fix the BSSAP, BSMAP, and DTAP interface dissectors to call subdissectors even if no protocol tree is being built. 2003-12-01 22:25 guy * packet-ranap.c: From Michael Lum: add a heuristic RANAP dissector, for use atop SCCP, as the SCCP dissector currently doesn't support conversations to be given dissectors. 2003-12-01 20:27 gerald * util.c: Don't automatically fill in a capture filter if CLIENTNAME is set to "Console". 2003-12-01 17:25 gerald * README.win32: Updates for new zlib. 2003-12-01 17:19 gerald * packaging/nsis/ethereal.nsi: Switch from zlib.dll to zlib1.dll. 2003-12-01 17:17 gerald * config.nmake: Switch to the new (and official) zlib DLL from www.gzip.org. 2003-12-01 06:59 sharpe * wiretap/file_access.c: It's RedHat, not Red Hat. 2003-12-01 02:01 guy * gtk/: file_dlg.c, file_dlg.h, print_dlg.c, proto_draw.c: "select_file_cb()" only needs a title, not a "construct_args_t" - "construct_args_t" is for use with filter dialogs, and the members other than the title apply only to filter dialogs. Have "select_file_cb()" actually use the title supplied to it. 2003-12-01 01:57 sharpe * gtk/menu.c: Fix the accelerator issue ... 2003-11-30 23:05 guy * gtk/proto_draw.c: Not all platforms have - in particular, Windows doesn't. If you're using "open()", "close()", "read()", "write()", etc., you should include on Windows. 2003-11-30 18:01 sharpe * gtk/proto_draw.c: Fix some warnings in proto_draw.c 2003-11-30 04:40 sharpe * gtk/menu.c: Rename that to Save Highlighted with Ctl-H as the accellerator. 2003-11-30 04:37 sharpe * gtk/menu.c: Add Save Selected as a menu item in the File Menu. This still has a way to go, though, because the menu item should be greyed out until something is Highlighted. 2003-11-30 04:21 sharpe * gtk/: color_dlg.c, file_dlg.c, file_dlg.h, menu.c, print_dlg.c, proto_draw.c, toolbar.c: Move print_file_cb out of gtk/print_dlg.c and into gtk/file_dlg.c and rename it to select_file_cb to reflect its function. While this cleans things up a bit, I am still not happy because now filter_prefs.h must be included before file_dlg.h just to get construct_args_t. 2003-11-29 12:34 jmayer * doc/README.tapping: Fix two small typos 2003-11-29 06:15 sharpe * gtk/menu.c: Properly capitalize the string for the menu item. 2003-11-29 06:09 sharpe * gtk/: file_dlg.h, menu.c, print_dlg.c, proto_draw.c: Add an entry in the byte_view pane that allows the user to save the highlighted data to a file. This allows the user to select some stuff, and analyse it with external tools, and is very useful for quickly prototying dissectors etc. This works by retrieving the info that is needed to define where the selected region is. It puts up a dialog box that asks for the file to save in. However, it is an ugly hack, because it reuses print_file_cb, while print_file_cb should be moved into file_dlg.c. It also needs to have some warning dialogs put up in error cases. Finally, it would be good to be able to select a region in the byte_view, which you can do with click and drag, and then have a menu item to save the selected bytes. 2003-11-29 03:55 guy * AUTHORS, packet-gtp.c, doc/ethereal.pod: From melerski [AT] poczta.onet.pl: fix a problem with unknown IEs. 2003-11-28 19:13 ulfl * gtk/menu.c: renamed frame to packet in all GUI elements moved "Enabled Protocols" and such from "View" to "Analyze" toplevel menu 2003-11-28 19:02 ulfl * gtk/goto_dlg.c: renamed frame to packet in all GUI elements 2003-11-28 19:00 ulfl * gtk/capture_info_dlg.c: use dlg_window_new instead of gtk_window_new 2003-11-28 18:59 ulfl * gtk/: toolbar.c, find_dlg.c: renamed frame to packet in all GUI elements 2003-11-28 00:44 ulfl * gtk/capture_info_dlg.c: label changed from "Portions" to "% of total" as suggested by Guy 2003-11-28 00:13 ulfl * gtk/main.c: using dlg_utils.c functions to catch the ESC key to close the dialog 2003-11-28 00:07 ulfl * gtk/: supported_protos_dlg.c, plugins_dlg.c: using dlg_utils.c functions to catch the ESC key to close the dialog 2003-11-27 23:25 ulfl * gtk/help_dlg.c: using dlg_utils.c functions to catch the ESC key to close the dialog 2003-11-27 22:29 guy * print.c: "representation", in an "item_label_t", is now an array, not a pointer, so "fi->rep->representation" can't be null. 2003-11-27 22:15 guy * tap-rpcstat.c, tap-wspstat.c: Fix comments to correctly refer to the "-z" option. 2003-11-27 22:14 guy * tap-rpcstat.c: From Michael Lum: fix the usage message to refer to "-z", not "-Z". 2003-11-27 22:12 guy * gtk/main.c: Show the -z flag in the usage message. 2003-11-27 22:04 guy * tethereal.c: From Michael Lum: fix the usage message to say "-z", not "-Z". 2003-11-27 21:20 guy * AUTHORS, packet-rtp-events.c, doc/ethereal.pod: From Arsen Chaloyan: fix offsets in "proto_tree_add" calls. 2003-11-27 21:09 guy * etypes.h, packet-ethertype.c, plugins/rtnet/packet-rtnet.c: From Erwin Rol: RTCFG support. Add in a URL to the RTNET home page. 2003-11-27 21:02 guy * packet-dns.c: From David Fort: fix to previous patch. 2003-11-27 20:34 ulfl * gtk/menu.c: Redesign of the whole menu structure, to be more intuitive to the user and conforms somewhat better to the Gnome Human Interface Guideline 2003-11-27 17:18 ulfl * print.c: bugfix: removed access violation when using "File/Print Packet". The label_ptr could be NULL, when calling function print_line 2003-11-27 00:22 ulfl * gtk/help_dlg.c: using text files from help dir, to display the help texts. the "dynamic protocol fields" are already moved to gtk/supported_protos_dlg.c 2003-11-27 00:17 ulfl * help/: capture_filters.h, display_filters.h, faq.h, overview.h, well_known.h: Added this intermediate files, until a Makfile.am is available for unix systems 2003-11-26 23:23 guy * AUTHORS, packet-dns.c, doc/ethereal.pod: From David Fort: DNS DSS RR support. 2003-11-26 12:22 sahlberg * epan/: proto.c, proto.h: Speed updates create generic macros for allocating/freeing structures. remove one more slow GMemChunk and replace it with a simple linked list ~4% speed improvement in my tests. the allocated data is never freed. this may be a problem if ethereal is ever supported on a platform lacking resource tracking but makes the implementation faster and simpler. 2003-11-26 02:58 guy * AUTHORS, packet-giop.c, doc/ethereal.pod: From Patrick Kursawe: rename "getline()" so it doesn't collide with the "getline()" declared in with recent versions of glibc. Fix a typo in the AUTHORS file. 2003-11-26 02:54 guy * pcap-util.c: From Jaime Fournier: fix a typo. 2003-11-25 20:26 guy * AUTHORS, packet-ucp.c, doc/ethereal.pod: From Reinhard Speyerer: handle 10-digit UCP dates, which lack a seconds value. 2003-11-25 20:02 guy * epan/proto.c: As with fvalue_t, so with field_info and item_label - the individual items aren't individually g_mallocated and can't be g_freed, only the chunks can. 2003-11-25 19:25 guy * epan/ftypes/ftypes.c: Individual fvalue_t's aren't individually allocated with "g_malloc()", so they can't be freed with "g_free()"; keep a list of the chunks of "fvalue_t"s, which are whare are allocated with "g_malloc()", so we can free them all. 2003-11-25 18:02 guy * packet-sip.c: From Anders Broman: add more SIP headers, and the PUBLISH method. 2003-11-25 14:16 sahlberg * epan/proto.c: replace free_node_field_info with a macro since it is only called from one other place in the code and this reduces one unnecessary function call overhead. and it makes ethereal ~1% faster. 2003-11-25 14:11 sahlberg * epan/proto.c: rename FREE_FIELD_INFO to FIELD_INFO_FREE for consistency 2003-11-25 14:10 sahlberg * epan/proto.c: create a FIELD_INFO_NEW for consistency 2003-11-25 14:07 sahlberg * file.c, print.c, epan/proto.c, epan/proto.h, gtk/proto_draw.c: remove another slow GMemChunk from ethereal making ethereal a little bit faster 2003-11-25 13:23 sahlberg * epan/proto.c: change free_field_info to FREE_FIELD_INFO to indicate it is a macro and not a function 2003-11-25 13:20 sahlberg * epan/proto.c, epan/dfilter/dfvm.c, epan/ftypes/ftype-ipv4.c, epan/ftypes/ftype-string.c, epan/ftypes/ftypes-int.h, epan/ftypes/ftypes.c, epan/ftypes/ftypes.h, gtk/dfilter_expr_dlg.c: fvalue_free() is one of the most called functions. This function is also very small, so small that teh overhead for the actual function call and return is likely to be a significant part of its execution time. change it into a macro and make it thus slightly faster by eliminating the function call overhead. 2003-11-25 08:50 sahlberg * epan/ftypes/: ftypes.c, ftypes.h: Change the handling of temporary allocation of fvalue_t structures to be faster. Use a similar technique as was used in epan/proto.c to speed up the field_info allocation/deallocation routines 2003-11-25 08:19 guy * packet-dcerpc.c: From Jaime Fournier: show the RPC version of the unknown interface in the Info column. 2003-11-25 08:10 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-dcerpc-budb.c, packet-dcerpc-epm4.c, packet-dcerpc-icl_rpc.c, packet-dcerpc-rs_prop_acct.c: From Jamie Fournier: DCE RPC EPM version 4 support, and stub support for BUDB, ICL RPC, and RS_PROP_ACCT DCE RPC-based protocols. 2003-11-25 05:58 guy * wiretap/cosine.c: "file_seek()" sets "*err" - we don't have to set it ourselves. The same is true of "parse_cosine_rec_hdr()". 2003-11-25 05:56 guy * wiretap/network_instruments.c: "file_seek()" sets "*err" - there's no need to set it ourselves. It returns -1 on errors, so just check for that. 2003-11-25 00:21 guy * ipproto.h: Fix a typo. 2003-11-24 23:46 guy * packet-ccsds.c: Eliminate compiler warnings. 2003-11-24 22:11 guy * packet-ncp2222.inc, print.c, proto_hier_stats.c, tap-protohierstat.c, epan/proto.c, epan/proto.h, gtk/main.c, gtk/menu.c, gtk/prefs_dlg.c, gtk/rtp_analysis.c: Make the recent epan/proto.{c,h} change compile. 2003-11-24 21:42 guy * ipproto.c, ipproto.h, packet-mip6.c: Preserve 62 as an (old) IP protocol type for mobility headers. 2003-11-24 21:12 sahlberg * epan/: proto.c, proto.h: performance enhancement to proto.c Removed the GMemChunk used to allocate/free field_info structures and used a free list to store the freed structs until they are allocated again. Ethereal will allocate more field_info structs as it needs to but never free them. Instead the are just placed in a cheap and fast free list so that if we want to use the struct again, this will be fast. This affects the speed of the two functions alloc_field_info() that should be slightly faster now free_field_info() that was replaced with a 2 line macro. All in all my testing suggests that ethereal is 2-3% faster with this patch. 2003-11-24 17:41 ulfl * Makefile.nmake: bugfix: corrected clean and distclean targets 2003-11-24 00:34 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-ccsds.c, doc/ethereal.pod: From Scott Hovis :CCSDS (Consultative Committee for Space Data Systems) support. 2003-11-24 00:05 guy * packet-isup.c: From Anders Broman: fix dissection of GRS/GRA messages. 2003-11-23 23:42 guy * Makefile.nmake: Include the BFD dissector when building with MSVC++. 2003-11-23 22:00 gerald * AUTHORS, Makefile.am, packet-bfd.c: From Hannes Gredler: Add support for Bi-directional Fault Detection (BFD). 2003-11-22 12:02 jmayer * packet-radius.c: - Bugfix: Passworddecoding should only be done for attribute 2, but not for VSA 2 - Fixme comment about length handling added - Cleanup: Setting a variable to the right type removes the necessity for casts. 2003-11-22 11:12 sahlberg * packet-h245.c: Change the way signalType is dissected to be compatible with and dissect the packets from Martin R and Paul H. I still think ethereal was correct before this patch and that this patch is not compatible with teh standard. Anyway, that doesnt matter much. With this patch ethereal will dissect the packets properly. Time to study x691 again. 2003-11-22 08:35 guy * ipproto.h, packet-ipv6.h: From Martti Kuparinen: use correct values for Mobile IPv6. 2003-11-22 04:41 sahlberg * epan/proto.c: As per Guys suggestion, continue optimizing proto.c to macroize it and make it even faster 2003-11-21 22:18 guy * packet-smpp.c: From Olivier Biot: fix up the description of the "port_number_udh_means_wsp" preference. 2003-11-21 22:00 guy * packet-wsp.c: From Olivier Biot: * Fix the WSP dissector so a Quoted-string with extraneous trailing quote is displayed without duplicated final quote, and issue a warning in the protocol tree. * Remove the Openwave x-up-proxy-client-id header decoding as it was incorrectly decoded as a text string, and process it with the default Openwave header parser. * Fix byte highlighting of some WSP parameters. * Rename the WSP parameter filter names so they don't all refer to content_type. 2003-11-21 21:58 guy * packet-wbxml.c, epan/packet.c, epan/packet_info.h: From Olivier Biot: * Add a "match_string" field to the "packet_info" structure, saving the string value that matched in a string dissector lookup, by analogy to "match_port" - this was required for dissection with token rendering of WBXML content when no public ID was given (e.g. Nokia/Ericsson OTA provisioning data). * Add support for textual content type based WBXML token mapping. * Add extra WBXML public identifiers. * Add the Nokia/Ericsson OTA provisioning (version 7) token definitions. * Inform the user when a content-type based token match is found. 2003-11-21 21:33 guy * AUTHORS, packet-dcerpc-srvsvc.c, doc/ethereal.pod: From Eric Wedel: fix dissection of NetServerDiskEnum reply. 2003-11-21 19:24 guy * gtk/rtp_stream.c: From Lars Ruoff: use the pointer to the RTP payload, rather than extracting the data from the frame directly. 2003-11-21 14:58 sahlberg * epan/: proto.c, proto.h: Performance fix In the GPROF logs proto_registrar_get_nth() used to take anything between 2.5 and 5.5% of the time. Replace the GLIB array with a handroleld one for one of the private structures. the function should now be virtually zero cost and thus ethereal should be 2.5-5.5% faster on those traces. anyone that wants to, please rerun GPROF with this fix and see what has changed. 2003-11-21 08:40 guy * packet-dcerpc-epm.c: A "handle_t" as the first argument to a call doesn't seem to be sent over the wire, at least in the DCE RPC 1.1 code. That suggests that the first 24 bytes of a Map request are the UUID pointer that the EPM IDL says should be there, not a context handle. 2003-11-21 08:33 guy * pcap-util.c: Maybe the problem is that the compilers used on AIX weren't defining "AIX", and that code was never compiled. Libpcap uses "_AIX" to conditionally compile in the extra AIX BPF support; we'll do the same. 2003-11-21 08:30 guy * pcap-util.c: Pass "strncmp()" the right number of arguments. (Why hasn't anybody reported this as a problem when compiling on AIX? Doesn't any compiler complain that "strncmp()" isn't being passed enough arguments? GCC sure did in a test program I built on FreeBSD 3.4....) 2003-11-21 04:01 guy * packet-dcerpc.c: From Jamie Fournier: add the UUID to the Info column for datagram calls. 2003-11-21 02:57 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-dcerpc-rs_plcy.c: From Jamie Fournier: DCERPC RS_PLCY support. 2003-11-21 02:48 guy * packet-dcerpc-ndr.c, packet-dcerpc.h: The 32-bit integer at the beginning of a context_handle is called "context_handle_attributes" in the DCE RPC 1.1 "nbase.idl". Rename our structure member accordingly. Note in a comment that we should perhaps display a context_handle as the attributes and UUID. Use "proto_tree_add_item()", not "proto_tree_add_bytes()", to put the context handle raw data into the protocol tree. 2003-11-20 23:34 guy * packet-rtp.c, packet-rtp.h, gtk/Makefile.am, gtk/Makefile.nmake, gtk/rtp_stream.c, gtk/rtp_stream.h, gtk/rtp_stream_dlg.c: From Lars Roland: - added a pointer to raw rtp data to _rtp_info that can be used by taps; - RTP packets are passed to the tap queue only if they are not error packets (so that you don't need to filter out ICMP packets) - use that pointer in rtp_stream, so it handles packets with padding, and should handle RTP packets fragmented across lower-level packets - moved rtp_stream from tap sources to normal files (prevents on-start-up registration of the rtp_stream tap listener) - rtp_stream tap gets registered/unregistered with the "RTP Streams" dialog box i.e. the tap is registered as long as the dialog box is open. Alternatively, it is de-/registered on demand if RTP Analysis is called directly on a packet. - rtp_stream tap listener no longer uses a filter in dissection ` and does not need to have a proto tree being built. (performance increase) - fixed: RTP Streams list will get updated in real time if the dialog box is open while a redissection takes place. 2003-11-20 23:21 guy * packet-dcerpc-srvsvc.c: #if 0-out some no-longer-used routines. Use #if 0/#endif rather than comments to remove the code that used to refer to those routines - it's a bit more robust in the presence of comments (there aren't currently any, but, just in case somebody adds them...). 2003-11-20 22:50 guy * packet-wbxml.c: From Olivier Biot: add support for media type "application/x-prov.syncset+wbxml". 2003-11-20 22:38 guy * packet-sip.c: From Martin Mathieson: - Add some summary info to REGISTER requests and responses - Tidy up whitespace a little 2003-11-20 22:24 guy * packet-wbxml.c: From Olivier Biot: * Fix an incorrectly #ifdef'ed return introduced by the previous patch * Remove the parsed_length parameter from the function signature of the tag and attribute dissectors - have it return the parsed length, instead * Throw ReportedBoundsError exceptions if we run past the end of the tvbuff, rather than putting a special entry in * Produce consistent and extensive debug logging (enabled by defining DEBUG_wbxml) * Get rid of the dozens of "#ifdef DEBUG ... #endif" constructs for debug logging 2003-11-20 19:05 guy * epan/osi-utils.c: From Hannes Gredler: "print_system_id()" should call "print_system_id_buf()", not "print_nsap_net_buf()". (What idiot made *that* mistake? :-)) 2003-11-20 14:29 nneul * AUTHORS: update proto list 2003-11-20 06:43 sharpe * packet-dcerpc-srvsvc.c: Clean up some IDL and remove some structures that Windows of all flavors does not understand. SHARE_INFO_1004, 1005, 1006, 1007, and 1501 seem not to be understood by any, and it can screw up dissections. 2003-11-20 05:20 guy * epan/proto.c: Use "tvb_get_string()" in "proto_tree_set_string_tvb()" - it won't leak memory if it throws an exception, as it checks whether the entire string is in the tvbuff *before* allocating a buffer for it, and that also means that if the length is absurdly large, an exception will be thrown, rather than the memory allocation failing. 2003-11-20 05:04 guy * epan/resolv.c: On Mac OS X, disable the alarm/longjmp stuff for timing out name resolution queries - it runs a significant risk of crashing applications that do that. 2003-11-20 04:28 gerald * AUTHORS, doc/ethereal.pod: Update Jakob Schlyter's address. 2003-11-19 22:55 guy * packet-wbxml.c: From Olivier Biot: fix the WBXML dissector in cases where dissection is interrupted because of a short frame or packets not being reassembled, and provide additional debug logging. 2003-11-19 22:13 nneul * Makefile.am, Makefile.nmake, packet-sebek.c: Add dissector for the SEBEK kernel read() data capture and/or rootkit tool used as part of the HoneyNet project. Info at: http://project.honeynet.org/tools/sebek/ 2003-11-19 21:24 guy * packet-wsp.c: From Olivier Biot: correct (and document) the offset computation in the parameter() and parameter_value_q() functions. From Loïc Minier: - a copy-paste with a missing replacement; - content-disposition uses parameters not q-values; - missing "+" for the calculation of parameter-offsets; - white-space cleanup; - comment fixes. 2003-11-19 09:58 guy * packet-isis-lsp.c, packet-isis-lsp.h: Fix the ATT bit definitions. 2003-11-19 09:49 guy * packet-cpfi.c: Get rid of unused variables. 2003-11-19 09:43 guy * packet-wsp.c: From Olivier Biot: get rid of no-longer-used routines. 2003-11-19 09:32 sahlberg * packet-tcp.c: Update to TCP, when we see a SYN|ACK packetm reset base_ack to the current ACK-1 so that it looks right when doing relative sequence numbers. I.e. SEQ : seq==0 ack==0 SEQ|ACK seq==0 ack==1 ACK seq==1 ack==1 This looks much more correct. This change also fixes the problem reported to ethereal-dev recently with "Follow TCP Stream" dropping the first character of the stream. 2003-11-19 07:13 sharpe * packet-dcerpc-wkssvc.c: Fix some IDL ... 2003-11-19 04:30 guy * packet-fcswils.c: From Dave Sclarsky: fix the offset for the Node WWN. 2003-11-19 04:26 guy * packet-cpfi.c: Get rid of some unused arguments and variables. Clean up the handling of the footer, so that it works even with short frames. 2003-11-19 04:05 guy * packet-cpfi.c: "uint" preferences should be "guint"s, not "int"s. 2003-11-19 04:02 guy * packet-cpfi.c: Fix a typo. 2003-11-19 04:00 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-cpfi.c, doc/ethereal.pod: From Dave Sclarsky: CPFI support. 2003-11-19 03:53 guy * packet-smb-browse.c, packet-smb-logon.c, packet-smb-mailslot.c: "dissect_mailslot_browse()", "dissect_mailslot_lanman()", and "dissect_smb_logon()" always return TRUE, so just get rid of their return value. "call_dissector()" automatically calls the data dissector if the protocol for the dissector being called is disabled, so we don't have to check its result and call the data dissector if it returns 0. 2003-11-19 02:58 guy * packet-mmse.c: Register the MMSE dissector with the "http.content_type" dissector table, rathe than as a heuristic subdissector of HTTP. 2003-11-19 01:50 guy * gtk/supported_protos_dlg.c: Use "OK" for the "OK" button, as we do elsewhere. 2003-11-19 01:45 guy * packet-wsp.c: From Olivier Biot: Implement quoted-string parsing by appending the closing quote to the string value. If the quoted-string value does not start with a quote, dissection resumes but a warning is displayed. Textual headers are assumed to be 0x00 terminated (otherwise we have a malformed packet or a short frame). The Trailer header is also dissected now, and the charset parameter dissection has been rewritten. The Content-ID header dissector was registered at the place of the Trailer dissector; this has also been fixed. 2003-11-19 01:39 guy * packet-ansi_map.c: From Michael Lum: fix param_digits() subtree for "Nature of Number". 2003-11-19 00:10 ulfl * gtk/gui_prefs.c: redraw supported_protos dialog, if GUI prefs changed 2003-11-19 00:04 ulfl * gtk/menu.c: added supported_protos menu item 2003-11-19 00:02 ulfl * gtk/Makefile.am: added supported_protos_dlg 2003-11-19 00:01 ulfl * gtk/Makefile.nmake: added supported_protos_dlg.obj 2003-11-18 23:56 ulfl * gtk/: supported_protos_dlg.c, supported_protos_dlg.h: seperated "supported protocols and protocol fields" dialog, coming from help_dlg.c/.h 2003-11-18 23:40 ulfl * Makefile.nmake: generate "static" help content 2003-11-18 23:11 ulfl * help/: capture_filters.txt, convert-include.sh, Makefile.nmake, display_filters.txt, faq.txt, overview.txt, well_known.txt: "static content" and make environment of redesigned online help 2003-11-18 19:56 guy * packet-bootp.c: From Greg Morris: dissect the RFC 2610 DHCP options for SLP; dissect Novell-specific options 85, 86, and 87. 2003-11-18 19:46 guy * packet-tcp.c: From Lars Roland: the window size passed to "tcp_analyze_sequence_number()" is a "guint32", as it might be scaled - make the arugment a "guint32" as well. 2003-11-18 19:36 guy * plugins/: Xass-list, Xplugin_api.c, Xplugin_api.h, Xplugin_api_decls.h, Xplugin_table.h: Get rid of the second "col_set_fence()" entry. 2003-11-18 19:34 guy * plugins/plugin_api_list.c: The second of the "col_set_fence()" entries is the one that should've been removed; that way, the ordinals of existing entries in the function vector is preserved. 2003-11-18 19:31 guy * plugins/Makefile.nmake: From Lars Roland: put missing "enttec" into "all" list. 2003-11-18 19:29 ulfl * gtk/capture_dlg.c: removed MSVC compiler warnings 2003-11-18 19:28 guy * packet-ntp.c: From Matthias Drochner: extensions need only be a multiple of 4 bytes in length, not 8 bytes; put in a missing increment of "offset". 2003-11-18 19:27 ulfl * gtk/print_dlg.c: removed unused vars 2003-11-18 19:26 ulfl * plugins/plugin_api_list.c: col_set_fence occurs twice, removed one appearance 2003-11-18 19:20 guy * epan/filesystem.h: From Tomas Kukosa: add "extern"s so that the plugin API stuff works. 2003-11-18 19:20 ulfl * packet-sdp.c: includes changed, to be working with MSVC also 2003-11-18 19:18 ulfl * plugins/rdm/Makefile.nmake: corrected cut and paste errors, makefile was unchanged copied from rtnet 2003-11-18 08:59 guy * plugins/: Xass-list, Xplugin_api.c, Xplugin_api.h, Xplugin_api_decls.h, Xplugin_table.h: Add "col_get_writable()", "col_set_writable()", and "col_set_fence()" to the plugin API list. 2003-11-18 08:58 guy * plugins/Xplugin_table.h: Export "protocol_t" as an opaque type. Make "proto_is_protocol_enabled()" and "proto_get_protocol_short_name()" take a "protocol_t *" as an argument, so they don't have to look up the "protocol_t" - this will probably speed them up considerably, and they're called on almost every dissector handoff. Get rid of a number of "proto_is_protocol_enabled()" calls that aren't necessary (dissectors called through handles, including those called through dissector tables, or called as heuristic dissectors, aren't even called if their protocol isn't enabled). Change some direct dissector calls to go through handles. 2003-11-18 08:55 guy * plugins/plugin_api_list.c: Add "col_get_writable()", "col_set_writable()", and "col_set_fence()" to the plugin API list. 2003-11-18 08:13 guy * configure.in, epan/configure.in, wiretap/configure.in: From Olivier Biot: add a "--enable-profile-build" flag to request that "-pg" binaries be built. 2003-11-18 08:04 guy * packet-http.c: Content-Type values are case-insensitive; force them to lower case (subdissectors must register their Content-Type values as all-lower-case). Don't include parameters in the value we look up in the Content-Type subdissector table. 2003-11-18 07:49 guy * packet-http.c: Add an "http.content_type" dissector table, Process the Content-Type header, and, if one is found, look up its value in the aforementioned dissector table. 2003-11-18 07:08 guy * packet-ses.c: Handle concatenated SPDUs. Handle the Serial Number parameter. 2003-11-18 06:31 guy * config.guess, config.sub: Latest config.guess and config.sub from http://savannah.gnu.org/projects/config/ 2003-11-18 06:06 ulfl * gtk/capture_info_dlg.c: removed MSVC warnings 2003-11-18 04:19 gerald * doc/ethereal.pod: Document the capture filter changes that were just checked in. 2003-11-18 04:16 gerald * util.c, util.h, gtk/main.c: Check the environment variables SSH_CONNECTION, SSH_CLIENT, REMOTEHOST, DISPLAY, and CLIENTNAME (in that order). If any of them are set, create a capture filter that excludes their traffic and set it as the default. The longer filters should be efficient without being overly long; they may need some tweaking. 2003-11-18 00:46 ulfl * gtk/toolbar.c: removed some warnings 2003-11-17 22:56 sahlberg * epan/to_str.c: updates to ip_to_str[_buf]() to make them faster. This functin was in a recent profiling run the fifth most expensive function. It consumed ~3.5% of the total cpu in that run. Using a static table this function is now just over twice as fast as previously. My testrun calling it 10.000.000 times in a loop changed the execution time from ~17.3s ro ~8.2s If this test was representative for the speedup and if ~3.5 in the profile run was representative for normal cases this should make ethereal ~1.8% faster. Woohoo. (low hanging fruit) 2003-11-17 22:34 guy * plugins/: acn/Makefile.am, artnet/Makefile.am, asn1/Makefile.am, gryphon/Makefile.am, mgcp/Makefile.am, pcli/Makefile.am, rtnet/Makefile.am: Fix the copyright notices (Gerald has the copyright on Ethereal). 2003-11-17 22:31 guy * plugins/giop/Makefile.am: Tweak the introductory comment. 2003-11-17 22:29 guy * plugins/: enttec/.cvsignore, rdm/.cvsignore: Fix the .cvsignore files. 2003-11-17 22:26 guy * plugins/rdm/packet-rdm.c: From Erwin Rol: check the checksum in RDM packets. 2003-11-17 22:09 guy * configure.in: From Loïc Minier: append $(EXEEXT) to the names of binaries, so that the configure script generates the right executable image file names on Cygwin. 2003-11-17 21:52 guy * packet-sdp.c: From Lars Roland: use the c= and m= information to set up conversations to use RTP/RTCP. 2003-11-17 20:57 guy * AUTHORS, Makefile.am, configure.in, packaging/nsis/Makefile.nmake, packaging/nsis/ethereal.nsi, plugins/Makefile.am, plugins/Makefile.nmake, plugins/artnet/ChangeLog, plugins/artnet/moduleinfo.h, plugins/artnet/packet-artnet.c, plugins/enttec/.cvsignore, plugins/enttec/AUTHORS, plugins/enttec/COPYING, plugins/enttec/ChangeLog, plugins/enttec/INSTALL, plugins/enttec/Makefile.am, plugins/enttec/Makefile.nmake, plugins/enttec/NEWS, plugins/enttec/moduleinfo.h, plugins/enttec/packet-enttec.c, plugins/rdm/.cvsignore, plugins/rdm/AUTHORS, plugins/rdm/COPYING, plugins/rdm/Makefile.am, plugins/rdm/Makefile.nmake, plugins/rdm/moduleinfo.h, plugins/rdm/packet-rdm.c: From Erwin Rol: initial ENTTEC support and RDM support. 2003-11-17 20:00 guy * gtk/capture_info_dlg.c: Not all compilers allow array/structure/union members of automatic variables to be initialized to non-constant values (C89 says that "All the expressions in an initializer for an object that has static storage duration or in an initializer list for an object that has aggregate or union type shall be constant expressions"; presumably the intent of the former was to avoid run-time initialization and of the latter was to let the initialization be done by copying from a compile-time-created blob of memory), so we have to initialize "info->counts" by hand. 2003-11-17 19:40 guy * capture.c: Fix a typo. 2003-11-17 18:23 ulfl * etypes.h, packet-ethertype.c: added ETHERTYPE_PROFINET 2003-11-17 00:27 guy * gtk/capture_info_dlg.c: "capture()" takes a "struct pcap_stat *" argument, so you need to include before including "capture.h". Include "dlg_utils.h" to declare "dlg_set_cancel()". 2003-11-17 00:26 guy * capture.c: Get rid of a no-longer-used variable. 2003-11-16 23:17 guy * Makefile.am, disabled_protos.c, packet-alcap.c, packet-ansi_637.c, packet-ansi_683.c, packet-ansi_a.c, packet-ansi_map.c, packet-atalk.c, packet-clnp.c, packet-dcerpc.c, packet-dcerpc.h, packet-dvmrp.c, packet-fcip.c, packet-giop.c, packet-giop.h, packet-gsm_a.c, packet-gsm_sms.c, packet-gssapi.c, packet-gssapi.h, packet-iscsi.c, packet-mrdisc.c, packet-msnip.c, packet-pim.c, packet-ppp.c, packet-rpc.c, packet-rpc.h, packet-smb-browse.c, packet-smb-browse.h, packet-smb-logon.c, packet-smb-logon.h, packet-smb-mailslot.c, packet-smb-pipe.c, packet-snmp.c, packet-tpkt.c, prefs.c, epan/packet.c, epan/proto.c, epan/proto.h, gtk/dfilter_expr_dlg.c, gtk/help_dlg.c, gtk/proto_dlg.c, plugins/plugin_api_list.c: Export "protocol_t" as an opaque type. Make "proto_is_protocol_enabled()" and "proto_get_protocol_short_name()" take a "protocol_t *" as an argument, so they don't have to look up the "protocol_t" - this will probably speed them up considerably, and they're called on almost every dissector handoff. Get rid of a number of "proto_is_protocol_enabled()" calls that aren't necessary (dissectors called through handles, including those called through dissector tables, or called as heuristic dissectors, aren't even called if their protocol isn't enabled). Change some direct dissector calls to go through handles. 2003-11-16 23:11 sahlberg * AUTHORS, Makefile.am, Makefile.nmake, h225-persistentdata.c, h225-persistentdata.h, packet-h225.c, packet-h225.h, tap-h225rassrt.c, doc/ethereal.pod, doc/tethereal.pod, gtk/Makefile.am, gtk/Makefile.nmake, gtk/h225_ras_srt.c: From Lars Roland Service Response times for H225 RAS 2003-11-16 22:33 sahlberg * packet-h450.c: Bugfix for h450. The hf field we give to dissect_per_object_string is a FT_STRING and not a FT_BYTES. This caused ethereal to abort with an assert failure. This fixes the issue that Keith French recently brought up in his mailing to ethereal-users 2003-11-15 23:58 guy * packet-wsp.c: From Olivier Biot: fix the offset for the Encoding-Version header in the general form. 2003-11-15 23:48 guy * gtk/menu.c: From Michael Lum: add hotkeys for Protocols and Preferences. 2003-11-15 11:46 ulfl * gtk/menu.c: GTK2 specific: use some Ethereal specific stock icons generated in toolbar.c 2003-11-15 11:44 ulfl * gtk/: toolbar.c, toolbar.h: handlebar removed, GTK2 specific: generate some Ethereal specific stock icons and use them in the toolbar 2003-11-15 11:39 ulfl * config.nmake: added gdk_pixbuf to GTK2 specific libs to link (needed in toolbar.c) 2003-11-15 10:06 ulfl * file.c: removed no longer used gtk includes 2003-11-15 08:53 ulfl * gtk/capture_info_dlg.c: seperated capture dialog from capture.c and put into new gtk/capture_info_dlg.c, added some tiny bars, that will indicate the percentage, added ESC key handler and use of GTK_STOCK button 2003-11-15 08:50 ulfl * gtk/capture_dlg.c: added "#include " to be able to include "capture.h" 2003-11-15 08:47 ulfl * capture.c, capture.h, gtk/Makefile.am, gtk/Makefile.nmake: seperated capture dialog from capture.c and put into new gtk/capture_info_dlg.c 2003-11-14 21:18 guy * capture.c: When it comes to whether to use "select()" or not, even if you're building in Cygwin's pretend-it's-UNIX environment, we need to treat the platform as Windows. Get rid of the BSD #define - just check for the platforms on which we mustn't use "select()". 2003-11-14 19:20 guy * doc/README.developer: Fix the stuff that talks about adding to DISSECTOR_SOURCES to talk about adding to DISSECTOR_SRC instead, and update it to mention "Makefile.nmake" in the first instance. 2003-11-14 18:59 guy * packet-gprs-ns.c: From Josef Korelus: update the offset after decoding an IE. 2003-11-14 10:11 guy * packet-null.c: Fix the heuristics so that they recognize Linux DLT_NULL headers. 2003-11-14 02:07 guy * packet-sip.c: Add support for the compact form of headers. 2003-11-14 01:35 guy * packet-tcap.c: From Michael Lum: fix up handling of ABORT package. 2003-11-14 01:27 guy * packet-wap.c: From Olivier Biot: fix the debugging output of "tvb_get_guintvar()". 2003-11-13 23:44 guy * packet-wsp.c: From Olivier Biot: use "g_strdup_printf()" to generate dynamically-allocated sprintf output. 2003-11-13 23:38 guy * packet-eapol.c, packet-isup.c, packet-ldp.c, packet-m2ua.c, epan/proto.c: Require that field names contain only alphanumerics, "-", "_", and ".". Fix the names that contained other characters. 2003-11-13 23:13 guy * packet-dcerpc.c: From Jaime Fournier: get rid of space in field name. 2003-11-13 20:53 sahlberg * packet-tcp.c: Change the gboolean controlling whether to use TCP Sequence Number Analysis and TCP Relative Sequence Numbers to default to ENABLED instead of DISABLED. These features do not consume that much memory or CPU but will greatly enhance the feature set of ethereal. Make it enabled by default so also those that never venture into the preferences dialog will benefit from it. 2003-11-13 08:22 sahlberg * file.c, doc/ethereal.pod: For Time Reference frames reset the counter for CulmulativeBytes. This makes the CulmulativeBytes field make more sense since if we want something to be a TimeReference frame it is likely that we also want to measure BOTH time and number of bytes (==culmulative bytes) until the event we are looking at. 2003-11-13 08:16 sahlberg * packet-ip.c: Change the strings shown for ICMP TTL exceeded to match the wording in the standard 2003-11-13 05:08 gerald * packet-wsp.c: We can't pass NULLs to proto_tree_add_text(). Replace a bunch of occurrences of match_strval() with val_to_str() so that we don't throw an assertion. These changes fix a problem with a file from Martin Dubovsky; otherwise they haven't been heavily tested. 2003-11-12 23:17 guy * plugins/docsis/packet-docsis.c: From Anand Narwani: fix bitmask for Active Grants field. 2003-11-12 22:44 guy * packet-wsp.c: From Olivier Biot: implement the TE header decoding; fix the exported add_content_type function; reimplement the header parameter dissection so the parameters also show up in the related header. 2003-11-12 21:22 guy * packet-tzsp.c: From Chris Waters: * Better decoding of TZSP header. * Handle unknown tags in packet. * Removed encapsulation types which are not actually supported. * Added tags for original length and sensor address. * Fix signedness of some fields. Get rid of unused "hf_tzsp_reserved" variable. Use -1 rather than "tvb_length(tvb)" when constructing the top-level protocol tree item, and set the length if we have payload that we dissect separately. Have "add_option_info()" take a starting offset, rather than constructing a subset tvbuff for it. Clean up indentation. 2003-11-12 20:44 guy * AUTHORS, packet-ntp.c, doc/ethereal.pod: From Matthias Drochner: support for mode 6 and mode 7 control packets and NTP4 autokey extension data. 2003-11-12 19:04 ulfl * gtk/print_dlg.c: completely redesigned print dialog layout, to be more obvious to the user 2003-11-12 18:48 gerald * file.c: Remove MAX_DECODE_BUFFER_SIZE; it's no longer used. 2003-11-12 09:00 guy * packet-dcerpc.c: Put stub data back where it was in the tree before. 2003-11-12 08:58 guy * packet-smb.c: If what remains of the SMB byte count exceeds the data left in the tvbuff, show what's left as extra byte parameters - don't act as if there aren't any extra byte parameters. 2003-11-11 20:49 guy * packet-null.c, wiretap/snoop.c: From Brian Ginsbach: fix handling of IRIX and UNICOS/mp snoop captures on loopback interfaces. 2003-11-11 20:33 guy * packet-ses.c: Add parameter length checking. 2003-11-11 20:11 guy * packet-rsvp.c: From Mohammad Hanif: fix dissection of RSVP DETOUR object code. 2003-11-11 20:08 guy * image/toolbar/capture_24.xpm, image/toolbar/cfilter_24.xpm, image/toolbar/dfilter_24.xpm, image/toolbar/stock_close_24.xpm, image/toolbar/stock_colorselector_24.xpm, image/toolbar/stock_help_24.xpm, image/toolbar/stock_jump_to_24.xpm, image/toolbar/stock_open_24.xpm, image/toolbar/stock_preferences_24.xpm, image/toolbar/stock_print_24.xpm, image/toolbar/stock_refresh_24.xpm, image/toolbar/stock_right_arrow_24.xpm, image/toolbar/stock_save_24.xpm, image/toolbar/stock_search_24.xpm, image/toolbar/stock_stop_24.xpm, plugins/asn1/moduleinfo.h: Get rid of carriage returns in source files. 2003-11-11 19:24 guy * packet-tcp.c: Make the declaration of "process_tcp_payload()" match the definition. 2003-11-11 19:23 guy * packet-tacacs.c: "tacplus_pref_cb()" takes no arguments, not an unspecified list of arguments. 2003-11-11 18:25 guy * config.nmake: Get rid of GLib 1.3 support - current versions of GTK+ 1.3 require GLib 2.0, and earlier versions are sufficiently buggy that we don't want to support them. 2003-11-11 13:59 ulfl * gtk/print_mswin.c: added some print dialog flags, to disable some unsupported print features (e.g. selection of pages from X to Y) 2003-11-11 08:29 guy * AUTHORS, Makefile.am, Makefile.nmake, packet-ses.c, packet-ses.h, doc/ethereal.pod: From Yuriy Sidelnikov: ISO 8327-1 Session Protocol support. 2003-11-11 06:10 guy * plugins/: plugin_api_list.c, Xass-list, Xplugin_api.c, Xplugin_api.h, Xplugin_api_decls.h, Xplugin_table.h: Add "asn1_id_decode1()" to the list of exported functions. 2003-11-11 05:54 guy * packet-ansi_map.c: From Michael Lum: Minor improvements. Added IEI level decoding of cdma2000 Handoff * IOS data parameters. 2003-11-11 05:51 guy * packet-ansi_a.c: From Michael Lum: Change P_xxx to ANSI_A_E_xxx. Fix decoding of some parameters. Fix initialization of ett array. 2003-11-11 05:23 guy * gtk/gui_prefs.c: The user interface preference page has only 9 rows in the GTK+ 2.x version. 2003-11-11 05:09 guy * gtk/gui_prefs.c: Create the last two items in the GUI preferences page's first column the same way the other items are created - in order, going down the page, and using "pos++" as the table position. 2003-11-10 22:31 guy * packet-ansi_a.c: From Albert Chin: on HP-UX 11.00 (and possibly 10.20 and perhaps some versions of Digital/Tru64 UNIX) drags in , which drags in , which defines P_SID in ways that cause this not to compile. Use P_MY_SID instead. 2003-11-10 21:42 guy * packet-h225.c: From Martin Regner: "aliasAddress", in an EndPoint sequence, is a sequence of aliasAddresses. Don't update the Info or Protocol columns in a pdu_item. 2003-11-10 20:22 guy * packet-dcerpc-epm.c: From Yaniv Kaul: 1. Add dissection of inquiry type (rpc_c_ep_all_elts / rpc_c_ep_match_by_if / rpc_c_ep_match_by_obj / rpc_c_ep_match_by_both). 2. The version field seems incorrect to me - I believe it is usually should be version 2.0, not 0.2. I suspect that the insertion of version information to the hash table is also wrong, (and the get for the version should have used _letohl() ) - but I did not change it. 3. Clean up some white space. 2003-11-10 20:15 guy * packet-ansi_a.c: From Albert Chin: dynamically allocate the "ett" array - some compilers (such as at least one older version of the HP C compiler) can't cope with constant expressions that involve the "?" operator, it appears; they think it's not a constant expression. Also, as Albert notes, there's no reason for "ett" to be static here. 2003-11-10 08:14 sahlberg * packet-q931.c: The Q.931 dissector never checked whether the codeset variable was set to a reasonable value or not. This was problematic and caused crashes since this variable is used as an index into an array where we grab a pointer (which is later dereferenced). Dereferencing that pointer will have surprising effects. Usually crashes. Update Q.931 to verify sanity of the codeset variable everytime it gets set. 2003-11-10 08:02 sahlberg * packet-smb.c: Bugfix for ethereal crashes If the ByteCount field in the SMB PDU spanned beyond the end of the packet because the packet was short or because the BC field was corrupted and contained garbade data then the tree item for the command (the subtree just after the SMBHeader subtree) would describe data continuing beyond the end of the packet. If we selected one such tree in the dissect pane and used Prepare/Match Selected this would cause the filter build thing to try to access data beyod the end of the packet and ethereal would dump core. Change the END_OF_SMB macro so that it shrinks bc so that bc never describes data beyond the end of the packet. 2003-11-10 07:44 sahlberg * packet-ldap.c, gtk/dcerpc_stat.c: Not all LDAP PDUs are aligned to the start of a TCP segment. If we failed to dissect the GSS-SPNEGO blob it probably means that the segment is somewhere in the middle of an LDAP PDU. Just bail out and stop dissecting the PDU instead of aborting ethereal completely using g_assert() since this is not really a pathological error, its just something that can and will happen normally. 2003-11-09 22:57 guy * asn1.c, asn1.h: Fix the type of the "integer" argument to "asn1_uint32_value_decode()", as per a note by Michael Lum. 2003-11-09 22:55 guy * AUTHORS, packet-rtcp.c, packet-rtp.c, doc/ethereal.pod: From Martin Mathieson: display the bitfields for - the first 2 bytes of RTP headers - the first byte of RTCP report. 2003-11-09 22:49 guy * packet-ansi_map.c: From Michael Lum: add the ability to put parameter data at the end of the parameter name so that the user doesn't have to open the parameter subtree to see the most important data. Use "%u", not "%d", to print unsigned quantities. Get rid of includes of (we're not loading any code at run-time in the dissector itself), and and (we shouldn't need either of those). 2003-11-09 22:41 guy * packet-gsm_a.c: From Michael Lum get rid of non-portable "%N$" constructs in printf formats. Use "%u", not "%d", to print unsigned quantities. Get rid of includes of (we're not loading any code at run-time in the dissector itself), and and (we shouldn't need either of those). 2003-11-09 22:32 guy * packet-ansi_a.c: Remove accidentally-inserted letter. 2003-11-09 22:30 guy * packet-ansi_a.c: From Michael Lum: Fix some incorrect bit shifts. Get rid of non-portable "%N$" constructs in printf formats. Use "%u", not "%d", to print unsigned quantities. 2003-11-09 22:15 guy * plugins/asn1/packet-asn1.c: From Albert Chin: the HP-UX 10.20 C compiler doesn't allow typedef enum _foo foo; enum _foo { ... }; You have to define the enum before using it in a typedef. (If I had my ANSI C89 standard handy, I could say whether that was legal ANSI C or not.) 2003-11-09 22:13 guy * packet-bssgp.c: From Albert Chin: get rid of null statements outside of function bodies (that's what the ";" in int foo(...) { ... }; is). 2003-11-09 19:53 guy * packet-dcerpc-dcom.h: From Albert Chin: get rid of C++ comments. 2003-11-09 01:36 guy * prefs.c: From Gisle Vanem: Copy the "gui_fileopen_*" fields in "copy_prefs()". Fix a typo in "free_prefs()". 2003-11-08 05:47 guy * packet-tcp.c, packet-tcp.h: Have "decode_tcp_ports()" handle only the handoff to a subdissector - and have it return TRUE if we succeeded, FALSE otherwise - and have an internal "process_tcp_payload()" routine handle the (TCP-specific) PDU tracking and sequence number analysis, with an argument to indicate whether it should do that or not (i.e., whether it's being handed a TCP segment or reassembled data). 2003-11-08 00:09 guy * AUTHORS, packet-rsvp.c, doc/ethereal.pod: From Mohammad Hanif: correct and enhance support for RSVP FAST_REROUTE and DETOUR objects (source: draft-ietf-mpls-rsvp-lsp-fastreroute-03.txt); support an RSVP SESSION_OBJECT object with ctype = 1. This object contains resource affinities (source: RFC 3209). 2003-11-08 00:02 guy * packet-msproxy.c, packet-socks.c, packet-tcp.c, packet-tcp.h: "decode_tcp_ports()" is for use by protocols that proxy transport-layer packets/sessions, e.g. MSProxy and SOCKS. It should not cause any of the TCP-specific stuff such as sequence number analysis or PDU tracking to be done. (Actually, MSProxy and SOCKS should offer desegmentation services *themselves* and do their *own* PDU tracking, rather than just passing stuff on to "decode_tcp_ports()", but that's another matter.) Make "tcp_tree" once again be a local variable to "dissect_tcp()", and pass it as an argument to those functions that use it. 2003-11-07 23:27 guy * Makefile.nmake, config.h.win32, config.nmake, wiretap/Makefile.nmake, wiretap/config.h.win32: Let people configure whether to build with Zlib or not solely by controlling whether ZLIB_DIR is defined or not in config.nmake. 2003-11-07 23:26 guy * gtk/Makefile.nmake: Nothing here should require zlib.h, so we shouldn't need to do "/I$(ZLIB_DIR)". 2003-11-07 20:23 guy * packet-wsp.c: From Olivier Biot: implement the Range, Content-Range and Content-Disposition headers. 2003-11-07 20:07 guy * packet-wsp.c: From Olivier Biot: add dissection for the Content-Base headeer. 2003-11-07 08:50 guy * packet-fcels.c, packet-fcels.h: From Dinesh Dutt: - Added support for displaying support for Multicast/Broadcast supported bits in *LOGI common service params - Removed restriction for "Random Relative Offset" & its alternate to be in PLOGI or PDISC only. Some HBAs set it even in FLOGI. 2003-11-07 08:47 guy * packet-fcsp.c: From Dinesh Dutt: - Added support for decoding related to Security in *LOGI service params - Added support for new LS_RJT code for authentication failure - Brought packet-fcsp.c up-to-date with FC-SP rev 1.2 2003-11-07 05:26 sahlberg * Makefile.am, Makefile.nmake, packet-kpasswd.c: New protocol: MS Kpasswd (RFC3244) KPasswd is partially dissected for UDP. It would be very useful if someone added dissection of the asn.1 encoded AP_REQ and the KRB-PRIV blobs. I dont think I will add those. 2003-11-07 04:03 sahlberg * packet-ldap.c: In some captures we might have already established and BOUND LDAP session where GSS-SPNEGO is used. If we havent seen the BIND call ethereal would assume it is vanilla non-GSS-SPNEGO LDAP and would fail to decode the packet. Add heuristics to the LDAP dissector so that IF the first 4 bytes of the LDAP PDU looks like ity could be a length field and IF the fifth byte has the value 0x60 then assume what we have is GSS-SPNEGO and assume this and all further commands on this session is GSS-SPNEGO as well. 2003-11-07 03:47 guy * packet-http.c: Make a field for the Content-Type entity header, and give it an EH_ value so it can be handled specially (with a string dissector table so that subdissectors can register for particular content types). 2003-11-07 01:29 guy * gtk/: menu.c, toolbar.c, toolbar.h: "File->Open" should be available whether or not we have a captue file open. The toolbar equivalent should *not* be available if we have an "Update list of packets in real time" capture running. The toolbar "Save" button should not be available if we don't have an unsaved capture file. 2003-11-06 23:02 guy * gtk/menu.c: Make Shift+Control+S an accelerator for "Save As...", as per the GNOME HIG. 2003-11-06 22:45 guy * wiretap/: file_access.c, netmon.c, network_instruments.c, network_instruments.h, wtap-int.h: From Scott Emberley: support for writing Network Instruments Observer files. 2003-11-06 09:52 guy * doc/README.plugins: Note that not all OSes on which Ethereal runs can support plugins. Note that you have to modify plugins/Makefile.nmake. Fix "plugin/" to "plugins/". Update the sample Makefile.am and Makefile.nmake to match the current state of affairs. 2003-11-06 09:47 guy * doc/README.developer: Warn people not to use the "numbered argument" feature that many UNIX printf's implement. 2003-11-06 09:32 guy * plugins/acn/packet-acn.c: From Erwin Rol: fix some switched fields. 2003-11-06 09:28 guy * packet-sccp.c: From Michael Lum: have the SCCP dissector register itself by name. 2003-11-06 09:18 sahlberg * packet-ldap.c, packet-tcp.c: Update to LDAP and TCP LDAP messages that span multiple segments will throw an exception unless we have reassembly enabled. Update TCP so that IF an exception was thrown that we still pick up any hints provided by the subdissector about where the next PDU starts. Update LDAP so that it will rpovide hints to TCP about where the next LDAP PDU starts in the sequence number space. Thus now ethereal can find and dissect LDAP PDUs that starts somewhere in the middle of a TCP segment. 2003-11-06 09:13 guy * packet-dcerpc.c: Update a comment. Catch another case where we need to check for a null decrypted_tvb. 2003-11-06 09:05 guy * plugins/: acn/Makefile.nmake, artnet/Makefile.nmake, asn1/Makefile.nmake, docsis/Makefile.nmake, gryphon/Makefile.nmake, lwres/Makefile.nmake, megaco/Makefile.nmake, mgcp/Makefile.nmake, pcli/Makefile.nmake, rtnet/Makefile.nmake: Use "$(OBJECTS)" whenever a complete list of .obj files appears, rather than repeating the list from the setting of OBJECTS. 2003-11-06 08:54 guy * packet-http.c: Add a mechanism to handle various entity headers, allowing their (string) values to be put into the protocol tree as fields and allowing some headers to get special treatment, and use it for Authorization, Proxy-Authorization, WWW-Authenticate, and Proxy-Authenticate. 2003-11-06 08:51 sahlberg * packet-tcp.c: Fix for TCP. If we have short or malformed PDUs in protocols above TCP this will generate an exception and thus some of the stateful things such as keeping track of and printing the tcp analysis data will be shourcutted and not called. Add a wrapper around the call to the subdissectors above TCP so that if an exception is generated we will still catch it and explicitely call tcp_print_sequence_number_analysis() so that also short packets are handled well. 2003-11-06 07:44 sahlberg * packet-dcerpc.c: Bugfix for dcerpc parsing of encrypted short packets. Sometimes if we cant decrypt a DCERPC packet decrypted_tvb is NULL. do not pass a NULL pointer to show_stub_data() since this will dump core. 2003-11-05 20:19 guy * packet-ansi_a.c: Get rid of includes of (we're not loading any code at run-time in the dissector itself), and and (we shouldn't need either of those, and they might be responsible for dragging in on Digital UNIX - that header defines P_SID in a way that conflicts with our definition). 2003-11-05 20:10 guy * plugins/acn/packet-acn.c: Update from Erwin Rol. 2003-11-05 20:10 guy * packet-ldap.c: A "GHashFunc()" returns a "guint", not a "gint". 2003-11-05 09:04 sahlberg * gtk/ldap_stat.c: the LDAP service response time dialog 2003-11-05 09:04 sahlberg * packet-ldap.c, packet-ldap.h, doc/ethereal.pod, gtk/Makefile.am, gtk/Makefile.nmake, gtk/service_response_time_table.c: update for LDAP measure the response time for some LDAP commands and add a service response time dialog for it 2003-11-05 04:23 guy * packet-wtp.c: From Olivier Biot: have a separate subtree ett_ value for concatenated PDUs. 2003-11-04 22:14 guy * wiretap/snoop.c: Sigh. Some snoop files have 6 bytes of padding; assume the file is a snoop file unless it has enoguh padding to hold a Shomiti trailer record. (DEAR SUN MICROSYSTEMS: PLEASE DO NOT STUFF 16 OR MORE BYTES OF PADDING INTO A SNOOP PACKET. THANK YOU. HAVE A NICE DAY.) Add a little paranoia about the record and captured data lengths. 2003-11-04 21:44 guy * packet-isakmp.c: Get rid of all the UDP-encapsulated IPSec stuff. draft-ietf-ipsec-udp-encaps-06 says "The UDP port numbers are the same as used by IKE traffic, as defined in [Kiv05]", and "[Kiv05]" is draft-ietf-ipsec-nat-t-ike-05, which has been superseded by draft-ietf-ipsec-nat-t-ike-07; the latter appears to imply that it goes over port 4500, not port 500. We already have a draft-ietf-ipsec-udp-encaps-06 dissector for port 4500 (packet-ipsec-udp.c), and it's not entirely clear to me how, if draft-ietf-ipsec-udp-encaps-06 traffic *did* go over port 500, you'd distinguish it from regular ISAKMP traffic. 2003-11-04 20:33 guy * gtk/prefs_dlg.c: Skip the check for the module if a page doesn't have a module. 2003-11-04 20:22 guy * gtk/prefs_dlg.c: Clean up the way we find the properties page for a given protocol somewhat; this fixes a bug wherein we were assuming all modules necessarily had preference pages (they won't, if the only preferences for the module are obsolete preferences). 2003-11-04 19:47 guy * packet-wsp.c: From Olivier Biot: * Extra headers: Encoding-Version, WWW-Authenticate, Proxy-Authenticate * Fix memory allocate/free in header parsing functions & macros * Add missing "ok = TRUE" for some header parsing functions * Header subfields all share the same subtree identifier (more intuitive) * Get rid of unused header fields and subtrees * Some whitespace changes 2003-11-04 18:37 guy * plugins/asn1/packet-asn1.c, plugins/gryphon/packet-gryphon.c, AUTHORS, doc/ethereal.pod: From Masaki Chikama: fix static compilation of "generic ASN.1" and Gryphon plugins. 2003-11-04 16:44 gerald * plugins/asn1/packet-asn1.c: #ifdef out "#include ", so that --disable-ethereal works again. 2003-11-04 08:16 guy * packet-http.c: If we've already constructed a subset tvbuff, don't construct an identical one and throw away the first one.