Commit Graph

12 Commits

Author SHA1 Message Date
Tim Potter 6d6dce305d Change each DCERPC dissector to pass in a hf value on initialisation
for a value_string that corresponds to that dissectors opnums.  Pass
in -1 if no such table is available.

svn path=/trunk/; revision=5749
2002-06-24 00:03:18 +00:00
Ronnie Sahlberg 4c7dd2df0b Fixed bug in MAPI
If we had unreassebled DCERPC PDUs but had
decryption of MAPI enabled we would try to read too much data from the
tvbuff and ethereal would later dump core.

svn path=/trunk/; revision=5673
2002-06-15 22:24:31 +00:00
Guy Harris 392a7dfc04 Get rid of the "data_src" member of the "frame_data" structure; put it
in the "packet_info" structure instead, as we don't need a pointer for
every single frame in the capture file, just for each frame for which we
currently have an open "epan_dissect_t".

svn path=/trunk/; revision=5614
2002-06-04 07:03:57 +00:00
Tim Potter 501daf1770 Removed some trailing commas from various DCERPC dissectors.
svn path=/trunk/; revision=5604
2002-05-31 00:31:13 +00:00
Ronnie Sahlberg 259903dc66 Changed toplevel REF pointer dissection to create a subtree. Not creating a subtree was a design mistake which caused ugliness in the unicode string str dissector and in other places.
Dissectors will temporarily have less pretty output for topleve ref pointers until their output is retuned.

svn path=/trunk/; revision=5573
2002-05-27 09:50:58 +00:00
Ronnie Sahlberg 762981c66a Fix for bug when displaying selected item in hexpanel. 2 bytes too many were
highlited.

svn path=/trunk/; revision=5562
2002-05-25 11:26:30 +00:00
Guy Harris 3e001f70da Throw in a cast to squelch a compiler complaint ("unsigned short" +
"int" constant becomes "int", and comparing that with "unsigned int"
gives a "signed vs. unsigned comparison" warning, even though the "int"
constant in question is positive).

svn path=/trunk/; revision=5559
2002-05-25 10:25:27 +00:00
Ronnie Sahlberg e8a006b280 Some additional decoding of the decrypted MAPI PDU in opcode:2.
Length byte and some sort of trailer identified.

svn path=/trunk/; revision=5558
2002-05-25 09:19:45 +00:00
Ronnie Sahlberg 5887e9a997 MAPI new option. New option to decrypt the MAPI opnum 2 payload.
svn path=/trunk/; revision=5557
2002-05-25 08:41:12 +00:00
Ronnie Sahlberg 96da8b00b7 MAPI Logoff function fully decoded.
Ha, if the other functions are as
easy to figure out i will be a happy boy.

svn path=/trunk/; revision=5533
2002-05-23 12:48:28 +00:00
Ronnie Sahlberg c33e33fb7e Additions to the MAPI dissector. Function 02 for MAPI.
The function request/call are dissected but the main body of the function
in/out parameters consists of a unidimensional conformant and varying array of bytes which content is encrypted/obfuscated.
Whoever can tell me how to decrypt/unobfuscate these bytes will get
a case of VB next time in Sydney.

svn path=/trunk/; revision=5532
2002-05-23 12:23:29 +00:00
Ronnie Sahlberg c01a2aa70b Added stub for MS Exchange MAPI protocol.
If anyone has a better name they are welcome to change it.
Perhaps we can now remove the packet-mapi.c dissector.

svn path=/trunk/; revision=5530
2002-05-23 10:00:19 +00:00