osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity

if the request/response subdissector couldn't be called because of missing bind information, 

add a generated field telling the user and add an expert info entry

This often happens when the capture misses the binding procedure at the beginning of a conversation "capture start too late".

svn path=/trunk/; revision=18687
This commit is contained in:
Ulf Lamping 2006-07-08 14:55:43 +00:00
parent 974c67ec86
commit 78bda25f6d
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
epan/dissectors/packet-dcerpc.c
View File

@ -3465,8 +3465,14 @@ dissect_dcerpc_cn_rqst (tvbuff_t *tvb, gint offset, packet_info *pinfo,
dissect_dcerpc_cn_stub (tvb, offset, pinfo, dcerpc_tree, tree,
hdr, di, &auth_info, alloc_hint,
value->req_frame);
} else
} else {
/* no bind information, simply show stub data */
pi = proto_tree_add_text(dcerpc_tree, tvb, offset, 0, "No bind info for this interface Context ID - capture start too late?");
PROTO_ITEM_SET_GENERATED(pi);
expert_add_info_format(pinfo, pi, PI_UNDECODED, PI_NOTE, "No bind info for interface Context ID:%u (Call ID:%u)",
ctx_id, hdr->call_id);
show_stub_data (tvb, offset, dcerpc_tree, &auth_info, TRUE);
}
}
/* Dissect the verifier */
@ -3594,8 +3600,14 @@ dissect_dcerpc_cn_resp (tvbuff_t *tvb, gint offset, packet_info *pinfo,
dissect_dcerpc_cn_stub (tvb, offset, pinfo, dcerpc_tree, tree,
hdr, di, &auth_info, alloc_hint,
value->rep_frame);
} else
} else {
/* no bind information, simply show stub data */
pi = proto_tree_add_text(dcerpc_tree, tvb, offset, 0, "No bind info for this interface Context ID - capture start too late?");
PROTO_ITEM_SET_GENERATED(pi);
expert_add_info_format(pinfo, pi, PI_UNDECODED, PI_NOTE, "No bind info for interface Context ID:%u (Call ID:%u)",
ctx_id, hdr->call_id);
show_stub_data (tvb, offset, dcerpc_tree, &auth_info, TRUE);
}
}
/* Dissect the verifier */