Commit Graph

278 Commits

Author SHA1 Message Date
Guy Harris 625d0088d4 From Teemu Rinta-aho: draft 20 MIPv6 support (now in a file of its own).
svn path=/trunk/; revision=7071
2003-02-04 20:17:01 +00:00
Guy Harris ee3449d08b From Chris Waters: MSN Messenger support.
svn path=/trunk/; revision=7045
2003-01-30 18:49:47 +00:00
Guy Harris ff9fece331 SSH dissector, from Huagang Xie.
svn path=/trunk/; revision=7001
2003-01-25 00:22:50 +00:00
Tim Potter 354a9a8018 packet-dcerpc-nt.c is no longer a dissector so adjust Makefiles
accordingly.

svn path=/trunk/; revision=6996
2003-01-24 05:41:33 +00:00
Guy Harris e120160577 From Dinesh Dutt:
- A new decoder called MDSHDR which decodes the internal header of the
      Cisco MDS switch (this is different from the Boardwalk header).
    - Support for some more new columns as part of FC support.
    - Fixed the decoding of the Special Frame in FCIP.
    - Fixed the decoding of credit management type field in FLOGI/PLOGI frame
      in FC-ELS.

svn path=/trunk/; revision=6974
2003-01-22 06:26:36 +00:00
Ronnie Sahlberg 96a18fb8cf TopTalkers feature for Ethernet/IP/TokenRing
IO-Users is a feature for tethereal that will print statistics on io usage
similar to top talkers in other tools.

It needs to be ported to ethereal with a nice graph sometime later.

try:
-z io,users,ip

see man-page

svn path=/trunk/; revision=6972
2003-01-22 01:24:06 +00:00
Ronnie Sahlberg 48d3d8eb26 SMB RTT statistics for tethereal and ethereal.
SMB RTT statistics are similar to the RTT statistics already supported by ONC-RPC and DCE-RPC.
It will present a table with all seen SMB commands and present the Min/Max and Avg response time in ms.

Transaction2 and NT-Transaction commands are broken out and presented in its own subtables.

tethereal feature is activated with -z smb,rtt    switch
and in ethereal it is activated either through -0z smb,rtt switch or through the Menu.

svn path=/trunk/; revision=6966
2003-01-22 00:40:36 +00:00
Guy Harris 96b2d60763 From Huagang Xie: dissector for MySQL protocol.
svn path=/trunk/; revision=6939
2003-01-19 21:29:10 +00:00
Guy Harris 6de6ff2fb8 From Dinesh Dutt:
- Decoders for the few remaining FC protocols not included in my first
  patch. Included in this list are decoders for FC-CT (common transport),
  Name Server (dNS), Fabric Configuration Server (FCS) and Zone Server
  (FZS).

- Decoder for MDS Debug Port Adapter. MDS Debug Port Adapter (internal
  name was   Boardwalk and this is the file name) is a piece of hardware
  that can be purchased with Cisco's MDS Fibre Channel switches that
  converts FC frames into Ethernet frames.  One end is connected to a
  port on a FC switch and the other end is connected to a FE/GE Ethernet
  port.  The decoder included here decodes the encapsulation header that
  carries information such as SOF/EOF of FC frames.

svn path=/trunk/; revision=6919
2003-01-14 01:17:44 +00:00
Guy Harris 94800ef0fb From Chris Waters: support Tazmen Sniffer Protocol and DLT_TZSP captures
from network-based libpcaps that use that protocol.

svn path=/trunk/; revision=6875
2003-01-08 05:03:54 +00:00
Guy Harris 0551b7030f Add an X.29 dissector.
The Q bit in X.25 doesn't mean "this is QLLC traffic", it's just a "this
packet is special" indication.  Have the X.25 dissector pass as the
"private_data" pointer a pointer to a gboolean indicating whether the Q
bit was set or not.  Replace the "decode non-Q-bit traffic as SNA"
option with a "decode traffic as QLLC/SNA if we didn't see the Call
Request packet and thus don't know what it is" option, which hands
traffic to the QLLC dissector for that traffic.  Have the QLLC dissector
hand traffic to the SNA dissector if the Q bit isn't set.

Arrange that we determine whether the Q bit is set regardless of whether
we're building the protocol tree or not.

If we don't just dissect traffic as QLLC/SNA if we didn't see the Call
Request packet, check not only for 0x45 (as an indication that it's
probably IP), check also for NLPID_ISO8473_CLNP and treat that as an
indication that it's probably OSI CLNP.

svn path=/trunk/; revision=6854
2003-01-06 02:24:57 +00:00
Guy Harris e56b77f4cd Add support for SDLC encapsulation in DOS Sniffer captures; that
includes adding an SDLC dissector.

svn path=/trunk/; revision=6848
2003-01-03 22:31:26 +00:00
Guy Harris 87ed53914b From Jeff Morriss:
make ANSI point codes filterable in MTP3;

	fix a bug in the ANSI SLS dissection;

	have MTP3 store the SI for use by subdissectors;

	add a new MTP3-Management dissector.

Fix Makefile.nmake to include the Wellfleet HDLC dissector.

svn path=/trunk/; revision=6837
2003-01-02 20:44:32 +00:00
Guy Harris 3a92530a52 From Devin Heitmueller: support for decrypting DCERPC conversations
using NTLMSSP version 1.

Show stub data as such for all requests and replies where we can't
dissect the stub data as a request or reply for some DCERPC-based
protocol.

svn path=/trunk/; revision=6825
2002-12-31 08:05:29 +00:00
Gerald Combs 3eec00a008 Fix a typo (cyrpt-md5.obj -> crypt-md5.obj).
svn path=/trunk/; revision=6798
2002-12-18 17:44:54 +00:00
Gerald Combs b287a6d3d9 Rename md5.[ch] to crypt-md5.[ch] to conform with our naming conventions.
svn path=/trunk/; revision=6793
2002-12-17 16:06:54 +00:00
Gerald Combs 9c0d1cbfb7 From James Harris: Decrypt RADIUS user passwords.
The MD5 is copyrighted by L. Peter Deutsch, and released under the same
license as zlib.  It is GPL-compatible, and should NOT have the GPL
applied to it.

svn path=/trunk/; revision=6790
2002-12-17 04:05:25 +00:00
Gerald Combs 1a2492c144 Add packet-ipfc.c to Makefile.nmake.
svn path=/trunk/; revision=6762
2002-12-08 03:59:03 +00:00
Gerald Combs b60b1414c3 From Dinesh Dutt: Add Fibre Channel support, including FCIP, Basic FC
header, Extended Link Service, Interswitch Link Service, FCP, and IPFC.

svn path=/trunk/; revision=6757
2002-12-08 02:32:36 +00:00
Guy Harris dd8f630768 From Devin Heitmueller:
add MD4 and RC4 crypto support;

	use it to decrypt the NT password encryption block in
	UnicodeChangePassword2.

svn path=/trunk/; revision=6727
2002-12-03 00:37:27 +00:00
Ronnie Sahlberg cf6ddd5b77 New protocol: Stub dissector for ClearCase NFS protocol
svn path=/trunk/; revision=6640
2002-11-15 22:45:52 +00:00
Guy Harris 81022063fc Make the list of dissectors match the one for UNIX builds.
svn path=/trunk/; revision=6628
2002-11-14 08:10:51 +00:00
Guy Harris bbb2129ab2 Make "tethereal-tap-register.c" and "ethereal-tap-register.c" depend on
the script that builds them.

svn path=/trunk/; revision=6627
2002-11-14 08:09:35 +00:00
Gerald Combs 2329ea1483 Add tethereal's tap objects to Makefile.nmake's "clean" target.
Instead of setting MIBDIRS in tethereal.c and gtk/main.c, set it in
packet-snmp.c.

svn path=/trunk/; revision=6606
2002-11-10 20:53:06 +00:00
Guy Harris 8ee4a65f76 From Solomon Peachy: support for new "wlancap" 802.11 extra-information
header.

Add overflow checks to "BYTES_ARE_IN_FRAME()", and cast all arguments to
unsigned values (negative values should never be passed) to squelch
compiler warnings.

svn path=/trunk/; revision=6567
2002-11-06 21:49:34 +00:00
Ronnie Sahlberg 7775a0bec5 New tap extension to tethereal: ProtoColInfo
Using this command line option you canb now place any arbitrary display-filter fields on the COL_INFO line.

Assume you want NFS dissector in tethereal to put ALL filehandle hashes (nfs.fh.hash) on COL_INFO.
No worries, just add

-z proto,colinfo,nfs.fh.hash,nfs.fh.hash

as a parameter to tethereal.

Never again do you need to hack tethereal and recompile just because you want some extra info on the COL_INFO line.

svn path=/trunk/; revision=6560
2002-11-04 12:11:01 +00:00
Ronnie Sahlberg b1c157b995 From Jochen Friedrich : Support for the RPL (Remote Program Load) protocol implemented on some NIC bootproms.
svn path=/trunk/; revision=6548
2002-11-02 22:23:16 +00:00
Guy Harris ad9ec1af37 Cygwin doesn't necessarily come with an "sh.exe", so use "$(SH)" rather
than "sh" to run a Bourne-compatible shell in "Makefile.nmake", and
define "SH" to be "bash" in "config.nmake".

svn path=/trunk/; revision=6540
2002-11-01 10:01:21 +00:00
Ronnie Sahlberg cdb4e6929c New tap extension for tethereal : ProtocolHierarchyStatistics.
Similar to what is available on ethereal:/Tools/ProtocolHierarchyStatistics
but this one can handle ALL protocols that tethereal has dissectors for.

Maybe a gtk/gtk2 version of this should replace the existing one in ethereal?


Try -z io,phs   or -z io,phs,<filter>  to test it.

svn path=/trunk/; revision=6532
2002-11-01 05:29:36 +00:00
Ronnie Sahlberg dcc95e010f New tap for tethereal: io statistics that provides frames/bytes counts for frames matching user specified filters.
Try it with
-z io,stat,1,nfs,smb,arp
on a capture containing both nfs, cifs and arp traffic.

svn path=/trunk/; revision=6531
2002-11-01 01:49:40 +00:00
Tim Potter f64906c9b3 Added support for a new DCERPC pipe supported by Windows 2000. It has
something to do with Active Directory and has been named LSA_DS by the
Samba Team.

svn path=/trunk/; revision=6527
2002-11-01 00:42:00 +00:00
Guy Harris 8442ad9a32 From Ronnie Sahlberg: have a registration interface for tap listeners,
and generate the table of stuff to register from tap source files, so
Tethereal doesn't need to know what tap listeners exist.

Get rid of "tap-xxx.h" files, as they're now empty.

Add "tethereal-tap-register.c" to the .cvsignore file, as it's a new
generated file.

Update "Makefile.nmake" to generate "tethereal-tap-register.c".

Clean up "Makefile.am" and "Makefile.nmake" a bit.

svn path=/trunk/; revision=6525
2002-10-31 22:16:01 +00:00
Guy Harris 56f644145e Discard the WTAP_ENCAP_LAPD encapsulation type in favor of a
WTAP_ENCAP_ISDN encapsulation type, which includes a pseudo-header
giving the direction (user-to-network or network-to-user) and the
channel number.

Add a new circuit type, using the ISDN channel number as the circuit ID.

Add an ISDN dissector to put the direction and channel number into the
protocol tree and to call the appropriate dissector for the payload
based on the channel (LAPD for the D channel; V.120, PPP, or data for B
channels, based on some heuristics).

svn path=/trunk/; revision=6521
2002-10-31 07:12:42 +00:00
Guy Harris a71d1d910e From Ronnie Sahlberg: add a tap for statistics for DCERPC interfaces.
svn path=/trunk/; revision=6479
2002-10-23 03:49:13 +00:00
Guy Harris 75ef739627 From Jamie Fournier: AFS 4 UPDATE server support.
Merge two CREDITS entries for Jamie.

svn path=/trunk/; revision=6472
2002-10-22 08:47:46 +00:00
Guy Harris 27df774d0b From Peter Fales: ARCNET support.
Sort the lists of dissectors in the DISSECTOR_SRC macros in
"Makefile.am" and "Makefile.nmake".

svn path=/trunk/; revision=6450
2002-10-18 21:00:01 +00:00
Gerald Combs e0cf132365 Add support for building randpkt under Windows.
svn path=/trunk/; revision=6433
2002-10-16 14:45:27 +00:00
Gerald Combs ec8fd2703a Link to libsnmp under Win32.
In gtk/main.c and tethereal.c set MIBDIRS to <get_program_path()>\snmp\mibs
so that we can drop the MIB files there, instead of the default c:\usr\...
path.

Add NET_SNMP_DIR to config.nmake and modify Makefile.nmake to adjust
CFLAGs, ethereal_LIBS and tethereal_LIBS accordingly.

Define HAVE_UCD_SNMP in config.h.win32.

I tested this by creating c:\program files\ethereal\snmp\mibs and
dropping in the MIB files that come with Net-SNMP.  Ethereal resolved
system.sysDescr.0 to "iso.3.6.1.2.1.1.1.0" under Windows.  Under Linux
it resolved to "SNMPv2-MIB::sysDescr.0".

Ethereal.nsi still needs to be updated.

A compiled version of the Net-SNMP library can be found at

    http://www.ethereal.com/distribution/win32/development/

svn path=/trunk/; revision=6385
2002-10-09 03:07:34 +00:00
Jörg Mayer 37c599b47d Dissector for Novell Distributed Print Services by Greg Morris.
NDPS runs on top of SPX and TCP.

svn path=/trunk/; revision=6323
2002-09-23 17:14:54 +00:00
Ronnie Sahlberg acf0825fdd From Jeff Morriss: New protocol SCCP-Management
svn path=/trunk/; revision=6309
2002-09-20 09:22:46 +00:00
Ronnie Sahlberg 4b82a0c5cb From Jaime Fournier, bugfix for dtsprovider and some error codes for dce122
svn path=/trunk/; revision=6299
2002-09-17 09:38:04 +00:00
Jörg Mayer 365a9e0224 New dissector for the FIX protocol by PC Drew
svn path=/trunk/; revision=6298
2002-09-16 17:49:20 +00:00
Ronnie Sahlberg a7aacfd4f9 From Jaime Fournier: DCE/RPC AFS4INT interface
svn path=/trunk/; revision=6294
2002-09-13 10:36:55 +00:00
Ronnie Sahlberg b0d021db49 From Jaime Fournier: DCE/RCP FLDB interface
svn path=/trunk/; revision=6293
2002-09-13 10:28:54 +00:00
Ronnie Sahlberg 6ee09ff5d8 From Jaime Fournier: DCE/RPC TKN4INT interface
svn path=/trunk/; revision=6292
2002-09-13 10:20:48 +00:00
Ronnie Sahlberg 5e0494b35e From Jaime Fournier: DCE/RPC SECIDMAP interface
svn path=/trunk/; revision=6291
2002-09-13 10:13:03 +00:00
Ronnie Sahlberg 06d24fa447 From Jaime Fournier: DCE/RPC REP_PROC interface
svn path=/trunk/; revision=6290
2002-09-13 10:06:45 +00:00
Ronnie Sahlberg 8abf24da99 From Jaime Fournier: DCE/RPC KRB5RPC interface
svn path=/trunk/; revision=6289
2002-09-13 09:59:21 +00:00
Ronnie Sahlberg ce704ecab3 From Jaime Fournier: DCE/RPC CDS_CLERKSERVER interface
svn path=/trunk/; revision=6285
2002-09-12 09:29:51 +00:00
Ronnie Sahlberg 1caef02b9e From Jaime Fournier: DCE/RPC FTSERVER interface
svn path=/trunk/; revision=6284
2002-09-12 09:19:32 +00:00