Commit Graph

8987 Commits

Author SHA1 Message Date
Ronnie Sahlberg 0bf28e51af Change the handling of temporary allocation of fvalue_t structures to be faster.
Use a similar technique as was used in epan/proto.c to speed up the field_info
allocation/deallocation routines

svn path=/trunk/; revision=9082
2003-11-25 08:50:38 +00:00
Guy Harris 186bd3bab6 From Jaime Fournier: show the RPC version of the unknown interface in
the Info column.

svn path=/trunk/; revision=9081
2003-11-25 08:19:33 +00:00
Guy Harris ff797aaf4a From Jamie Fournier: DCE RPC EPM version 4 support, and stub support for
BUDB, ICL RPC, and RS_PROP_ACCT DCE RPC-based protocols.

svn path=/trunk/; revision=9080
2003-11-25 08:10:57 +00:00
Guy Harris e3f791ebea "file_seek()" sets "*err" - we don't have to set it ourselves.
The same is true of "parse_cosine_rec_hdr()".

svn path=/trunk/; revision=9079
2003-11-25 05:58:56 +00:00
Guy Harris 6939f62da0 "file_seek()" sets "*err" - there's no need to set it ourselves. It
returns -1 on errors, so just check for that.

svn path=/trunk/; revision=9078
2003-11-25 05:56:16 +00:00
Guy Harris ff9ac52735 Fix a typo.
svn path=/trunk/; revision=9077
2003-11-25 00:21:06 +00:00
Guy Harris 9c8b8819b8 Eliminate compiler warnings.
svn path=/trunk/; revision=9076
2003-11-24 23:46:06 +00:00
Guy Harris 122dd3959c Make the recent epan/proto.{c,h} change compile.
svn path=/trunk/; revision=9075
2003-11-24 22:11:55 +00:00
Guy Harris 2e94fc8139 Preserve 62 as an (old) IP protocol type for mobility headers.
svn path=/trunk/; revision=9074
2003-11-24 21:42:13 +00:00
Ronnie Sahlberg fa1ee7667b performance enhancement to proto.c
Removed the GMemChunk used to allocate/free field_info structures
and used a free list to store the freed structs until they are allocated again.

Ethereal will allocate more field_info structs as it needs to but never free them. Instead the are just placed in a cheap and fast free list so that if we
want to use the struct again, this will be fast.

This affects the speed of the two functions
alloc_field_info() that should be slightly faster now
free_field_info() that was replaced with a 2 line macro.

All in all  my testing suggests that ethereal is 2-3% faster with this patch.

svn path=/trunk/; revision=9073
2003-11-24 21:12:10 +00:00
Ulf Lamping a24a6b7a37 bugfix: corrected clean and distclean targets
svn path=/trunk/; revision=9072
2003-11-24 17:41:33 +00:00
Guy Harris 0367782acf From Scott Hovis :CCSDS (Consultative Committee for Space Data Systems)
support.

svn path=/trunk/; revision=9071
2003-11-24 00:34:13 +00:00
Guy Harris b0e8631b55 From Anders Broman: fix dissection of GRS/GRA messages.
svn path=/trunk/; revision=9070
2003-11-24 00:05:09 +00:00
Guy Harris 794858f6bf Include the BFD dissector when building with MSVC++.
svn path=/trunk/; revision=9069
2003-11-23 23:42:46 +00:00
Gerald Combs 807458f7e1 From Hannes Gredler: Add support for Bi-directional Fault Detection (BFD).
svn path=/trunk/; revision=9068
2003-11-23 22:00:48 +00:00
Jörg Mayer 56e66f0293 - Bugfix: Passworddecoding should only be done for attribute 2, but
not for VSA 2
- Fixme comment about length handling added
- Cleanup: Setting a variable to the right type removes the necessity
          for casts.

svn path=/trunk/; revision=9067
2003-11-22 12:02:49 +00:00
Ronnie Sahlberg 058e84ff14 Change the way signalType is dissected to be
compatible with and dissect the packets from Martin R and Paul H.

I still think ethereal was correct before this patch and that
this patch is not compatible with teh standard.
Anyway, that doesnt matter much. With this patch ethereal will dissect the packets properly.
Time to study x691 again.

svn path=/trunk/; revision=9066
2003-11-22 11:12:19 +00:00
Guy Harris 262f77330a From Martti Kuparinen: use correct values for Mobile IPv6.
svn path=/trunk/; revision=9065
2003-11-22 08:35:45 +00:00
Ronnie Sahlberg ac1608f3c6 As per Guys suggestion, continue optimizing proto.c to macroize it
and make it even faster

svn path=/trunk/; revision=9064
2003-11-22 04:41:31 +00:00
Guy Harris 6768aefac8 From Olivier Biot: fix up the description of the
"port_number_udh_means_wsp" preference.

svn path=/trunk/; revision=9063
2003-11-21 22:18:30 +00:00
Guy Harris 05ad6d03d4 From Olivier Biot:
* Fix the WSP dissector so a Quoted-string with extraneous
	  trailing quote is displayed without duplicated final quote, and
	  issue a warning in the protocol tree.
	* Remove the Openwave x-up-proxy-client-id header decoding as it
	  was incorrectly decoded as a text string, and process it with
	  the default Openwave header parser.
	* Fix byte highlighting of some WSP parameters.
	* Rename the WSP parameter filter names so they don't all refer to
	  content_type.

svn path=/trunk/; revision=9062
2003-11-21 22:00:25 +00:00
Guy Harris 364261f0ad From Olivier Biot:
* Add a "match_string" field to the "packet_info" structure,
	  saving the string value that matched in a string dissector
	  lookup, by analogy to "match_port" - this was required for
	  dissection with token rendering of WBXML content when no public
	  ID was given (e.g. Nokia/Ericsson OTA provisioning data).
	* Add support for textual content type based WBXML token
	  mapping.
	* Add extra WBXML public identifiers.
	* Add the Nokia/Ericsson OTA provisioning (version 7) token
	  definitions.
	* Inform the user when a content-type based token match is found.

svn path=/trunk/; revision=9061
2003-11-21 21:58:55 +00:00
Guy Harris 8796847f64 From Eric Wedel: fix dissection of NetServerDiskEnum reply.
svn path=/trunk/; revision=9060
2003-11-21 21:33:44 +00:00
Guy Harris 50917e1ead From Lars Ruoff: use the pointer to the RTP payload, rather than
extracting the data from the frame directly.

svn path=/trunk/; revision=9059
2003-11-21 19:24:00 +00:00
Ronnie Sahlberg 7eef1914e0 Performance fix
In the GPROF logs proto_registrar_get_nth() used to take anything between 2.5 and 5.5% of the time.

Replace the GLIB array with a handroleld one for one of the private structures.

the function should now be virtually zero cost
and thus ethereal should be 2.5-5.5% faster on those traces.

anyone that wants to, please rerun GPROF with this fix and see what has changed.

svn path=/trunk/; revision=9058
2003-11-21 14:58:49 +00:00
Guy Harris 809cc0c765 A "handle_t" as the first argument to a call doesn't seem to be sent
over the wire, at least in the DCE RPC 1.1 code.

That suggests that the first 24 bytes of a Map request are the UUID
pointer that the EPM IDL says should be there, not a context handle.

svn path=/trunk/; revision=9057
2003-11-21 08:40:00 +00:00
Guy Harris 27fdd16f4e Maybe the problem is that the compilers used on AIX weren't defining
"AIX", and that code was never compiled.  Libpcap uses "_AIX" to
conditionally compile in the extra AIX BPF support; we'll do the same.

svn path=/trunk/; revision=9056
2003-11-21 08:33:49 +00:00
Guy Harris 23c4738618 Pass "strncmp()" the right number of arguments. (Why hasn't anybody
reported this as a problem when compiling on AIX?  Doesn't any compiler
complain that "strncmp()" isn't being passed enough arguments?  GCC sure
did in a test program I built on FreeBSD 3.4....)

svn path=/trunk/; revision=9055
2003-11-21 08:30:40 +00:00
Guy Harris 7cca92712d From Jamie Fournier: add the UUID to the Info column for datagram calls.
svn path=/trunk/; revision=9054
2003-11-21 04:01:48 +00:00
Guy Harris 38ec601ae7 From Jamie Fournier: DCERPC RS_PLCY support.
svn path=/trunk/; revision=9053
2003-11-21 02:57:01 +00:00
Guy Harris a041d6bf9f The 32-bit integer at the beginning of a context_handle is called
"context_handle_attributes" in the DCE RPC 1.1 "nbase.idl".  Rename our
structure member accordingly.

Note in a comment that we should perhaps display a context_handle as the
attributes and UUID.

Use "proto_tree_add_item()", not "proto_tree_add_bytes()", to put the
context handle raw data into the protocol tree.

svn path=/trunk/; revision=9052
2003-11-21 02:48:11 +00:00
Guy Harris 9687947b5f From Lars Roland:
- added a pointer to raw rtp data to _rtp_info that can be used by
	  taps;

	- RTP packets are passed to the tap queue only if they are not
	  error packets (so that you don't need to filter out ICMP
	  packets)

	- use that pointer in rtp_stream, so it handles packets with
	  padding, and should handle RTP packets fragmented across
	  lower-level packets

	- moved rtp_stream from tap sources to normal files
	  (prevents on-start-up registration of the rtp_stream tap
	  listener)

	- rtp_stream tap gets registered/unregistered with the "RTP
	  Streams" dialog box
	  i.e. the tap is registered as long as the dialog box is open.
	  Alternatively, it is de-/registered on demand if RTP Analysis is
	  called directly on a packet.

	- rtp_stream tap listener no longer uses a filter in dissection
`	  and does not need to have a proto tree being built.
	  (performance increase)

	- fixed: RTP Streams list will get updated in real time if the
	  dialog box is open while a redissection takes place.

svn path=/trunk/; revision=9051
2003-11-20 23:34:31 +00:00
Guy Harris bb0b226ca6 #if 0-out some no-longer-used routines.
Use #if 0/#endif rather than comments to remove the code that used to
refer to those routines - it's a bit more robust in the presence of
comments (there aren't currently any, but, just in case somebody adds
them...).

svn path=/trunk/; revision=9050
2003-11-20 23:21:19 +00:00
Guy Harris 7005a5f725 From Olivier Biot: add support for media type
"application/x-prov.syncset+wbxml".

svn path=/trunk/; revision=9049
2003-11-20 22:50:56 +00:00
Guy Harris 530d993a6b From Martin Mathieson:
- Add some summary info to REGISTER requests and responses
	- Tidy up whitespace a little

svn path=/trunk/; revision=9048
2003-11-20 22:38:33 +00:00
Guy Harris e4080b8a02 From Olivier Biot:
* Fix an incorrectly #ifdef'ed return introduced by the previous
	  patch
	* Remove the parsed_length parameter from the function signature
	  of the tag and attribute dissectors - have it return the
	  parsed length, instead
	* Throw ReportedBoundsError exceptions if we run past the end of
	  the tvbuff, rather than putting a special entry in
	* Produce consistent and extensive debug logging (enabled by
	  defining DEBUG_wbxml)
	* Get rid of the dozens of "#ifdef DEBUG ... #endif" constructs
	  for debug logging

svn path=/trunk/; revision=9047
2003-11-20 22:24:15 +00:00
Guy Harris f42de5c9b2 From Hannes Gredler: "print_system_id()" should call
"print_system_id_buf()", not "print_nsap_net_buf()".  (What idiot made
*that* mistake? :-))

svn path=/trunk/; revision=9046
2003-11-20 19:05:40 +00:00
Nathan Neulinger 137b1e31e9 update proto list
svn path=/trunk/; revision=9045
2003-11-20 14:29:44 +00:00
Richard Sharpe 08f50a17ce Clean up some IDL and remove some structures that Windows of all flavors
does not understand. SHARE_INFO_1004, 1005, 1006, 1007, and 1501 seem not
to be understood by any, and it can screw up dissections.

svn path=/trunk/; revision=9044
2003-11-20 06:43:51 +00:00
Guy Harris 92b2d0f796 Use "tvb_get_string()" in "proto_tree_set_string_tvb()" - it won't leak
memory if it throws an exception, as it checks whether the entire string
is in the tvbuff *before* allocating a buffer for it, and that also
means that if the length is absurdly large, an exception will be thrown,
rather than the memory allocation failing.

svn path=/trunk/; revision=9043
2003-11-20 05:20:17 +00:00
Guy Harris 1581057cc4 On Mac OS X, disable the alarm/longjmp stuff for timing out name
resolution queries - it runs a significant risk of crashing applications
that do that.

svn path=/trunk/; revision=9042
2003-11-20 05:04:57 +00:00
Gerald Combs 6d5751b6e7 Update Jakob Schlyter's address.
svn path=/trunk/; revision=9041
2003-11-20 04:28:13 +00:00
Guy Harris 674c756e6d From Olivier Biot: fix the WBXML dissector in cases where dissection is
interrupted because of a short frame or packets not being reassembled,
and provide additional debug logging.

svn path=/trunk/; revision=9040
2003-11-19 22:55:27 +00:00
Nathan Neulinger 403a9fd3f5 Add dissector for the SEBEK kernel read() data capture and/or rootkit tool
used as part of the HoneyNet project.

Info at:
http://project.honeynet.org/tools/sebek/

svn path=/trunk/; revision=9039
2003-11-19 22:13:29 +00:00
Guy Harris 49af7e1586 From Olivier Biot:
correct (and document) the offset computation in the parameter()
	and parameter_value_q() functions.

From Lo�c Minier:

	- a copy-paste with a missing replacement;
	- content-disposition uses parameters not q-values;
	- missing "+" for the calculation of parameter-offsets;
	- white-space cleanup;
	- comment fixes.

svn path=/trunk/; revision=9038
2003-11-19 21:24:19 +00:00
Guy Harris 6341212165 Fix the ATT bit definitions.
svn path=/trunk/; revision=9037
2003-11-19 09:58:37 +00:00
Guy Harris 5e28ce7e6c Get rid of unused variables.
svn path=/trunk/; revision=9036
2003-11-19 09:49:00 +00:00
Guy Harris 3fe5ef9396 From Olivier Biot: get rid of no-longer-used routines.
svn path=/trunk/; revision=9035
2003-11-19 09:43:29 +00:00
Ronnie Sahlberg a07a627e3f Update to TCP, when we see a SYN|ACK packetm reset base_ack to the current ACK-1 so that it looks right when doing relative sequence numbers.
I.e. SEQ :    seq==0  ack==0
     SEQ|ACK  seq==0  ack==1
     ACK      seq==1  ack==1

This looks much more correct.

This change also fixes the problem reported to ethereal-dev
recently with "Follow TCP Stream" dropping the first character of the stream.

svn path=/trunk/; revision=9034
2003-11-19 09:32:04 +00:00
Richard Sharpe 2b01591a52 Fix some IDL ...
svn path=/trunk/; revision=9033
2003-11-19 07:13:01 +00:00