Commit Graph

7439 Commits

Author SHA1 Message Date
Guy Harris 30dbf20866 From Laurent Rabret: fix bugs in ISIS LSP analyses, addi type block
filters and display the type block byte in a more standard way (bit
fields).

svn path=/trunk/; revision=7378
2003-03-27 19:42:33 +00:00
Guy Harris d85fbe9cdb From Olivier Biot: fix quotation of attibute values for the WAP
Provisioning DTD representation.

svn path=/trunk/; revision=7377
2003-03-27 19:23:10 +00:00
Guy Harris b9ed0197a5 From Olivier Biot:
* Fix the Extended Method PDU mapping (move code some lines down)
* Decode more WSP Parameter entries (now WAP Provisioning Push OK)
* First check whether the PDU content for Post, Reply and Push PDUs
  can be dissected (dissector_try_X function calls), if not then
  display the PDU data as "Data" in the WSP protocol tree.
* Replaced "Unsupported header" by "Undecoded header" for clarity

svn path=/trunk/; revision=7376
2003-03-27 19:15:28 +00:00
Ronnie Sahlberg eb5be58c63 Enhancement to TCP Sequence Analysis
Duplicate ACKs that are detected/suspected are now also flagged
with which frame the original ACK was seen in and the dup ack number.

This is displayed both in the summary pane as well as in the tree pane.

svn path=/trunk/; revision=7375
2003-03-27 09:40:27 +00:00
Guy Harris b16cdbc696 Use "gboolean" for Boolean variables.
Allocate the per-conversation and per-frame data items from a GMemChunk
(which saves memory and CPU time, *and* lets us free all those items
quickly - as opposed to not freeing them at all, as had been the case).

Don't assume that, just because a conversation for the TCP connection
exists, it necessarily has an AJP13 data chunk attached to it; the
conversation might have, for example, been created by the TCP sequence
number analysis code.

svn path=/trunk/; revision=7374
2003-03-26 21:47:34 +00:00
Guy Harris 458e915b90 From Graham Bloice: make the RC_VERSION variable in config.nmake
comma-separated, so that the resources will be built correctly and the
version number correctly displayed in the GUI, and make the resources
dependent on "config.nmake" so that they're rebuilt if it's changed.

svn path=/trunk/; revision=7373
2003-03-26 20:17:42 +00:00
Guy Harris 7a5e0860a2 From Olivier Biot: add WSP protocol dissection for extended method PDUs,
and let the Protocol Options header code page and extended methods calls
refer to hexadecimal representation as used everywhere else in the WSP
dissection code.

svn path=/trunk/; revision=7372
2003-03-26 19:45:21 +00:00
Ronnie Sahlberg 886cbe2321 Fixed a small bug in tcp sequence number analysis.
FIN flag would previously only add one to the sequence number if the
FIN packet was empty, i.e. did not carry any payload data.

This caused ethereal to incorrectly flag the ACK to such packets
(FIN+payload data) to be incorrectly flagged as
ACK to previously lost segment.

Change the algorithm to always add 1 to the segment length, and thus the sequence number for all packets with teh FIN bit set.

svn path=/trunk/; revision=7371
2003-03-26 08:00:24 +00:00
Guy Harris 9f3902270e Put in a comment about the "to what code does the configuration file
directory belong" issue.

svn path=/trunk/; revision=7370
2003-03-26 00:34:27 +00:00
Guy Harris 4fb9c1866b Fix up a comment.
svn path=/trunk/; revision=7369
2003-03-25 23:46:04 +00:00
Guy Harris 97f273f044 Use "datafiledir" rather than "DATAFILE_DIR" as the name of the variable
in the configure script for the all-variables-expanded version of the
data file directory.

Don't AC_SUBST "DATAFILE_DIR", as it's not used.

Define DATAFILE_DIR in config.h as the all-variables-expanded version of
$datadir/ethereal, as that's where the global configuration files such
as manuf and the Diameter files are actually installed.

svn path=/trunk/; revision=7368
2003-03-25 23:37:54 +00:00
Guy Harris 170b802890 DATAFILE_DIR in the top-level config.h isn't used; don't bother defining
it.  (Nothing other than "get_datafile_dir()" should use it - anything
that needs to know whether the configuration files are located should
use "get_datafile_dir()".)

svn path=/trunk/; revision=7367
2003-03-25 23:35:30 +00:00
Guy Harris a0753c2fd7 There's no need to define "etherealconfdir" - we can just use
"pkgdatadir".

svn path=/trunk/; revision=7366
2003-03-25 23:33:38 +00:00
Guy Harris 1ca0a752aa From Brad Hards: ACAP support.
svn path=/trunk/; revision=7365
2003-03-25 22:30:19 +00:00
Guy Harris 5ea0610a8a Non-void functions must always return a value; the SID snooping tap
listener isn't a GUI tap, so it should always return 0.

svn path=/trunk/; revision=7364
2003-03-25 19:52:56 +00:00
Jörg Mayer a0b0489617 Update FAQ to 2003-03-20
svn path=/trunk/; revision=7363
2003-03-25 19:22:56 +00:00
Ronnie Sahlberg cec5c81ac3 Added SMB option : sid_name_snooping.
This feature, when enabled through Edit/preferences/protocols/smb,
will look at certain SMB and CIFS related protocols to discover the
mapping between SIDs and their Names.

For those SIDs whose name has been snooped/discovered ethereal will
also add "(<name>)" to the end of the SID when printed in the tree pane
through the function dissect_nt_sid().

Currently the feature is not too exciting since the only thing that packet-smb-sidsnooping.c will look at to build this mapping table is
replies to the LSA/QueryInfoPolicy infolevel 3  packets and thus
discover mappings between a Domain SID and a Domain Name.
In the near future this future will be enhanced to also look at more interesting calls such as LSA/LookupSIDs2 and similar.

svn path=/trunk/; revision=7362
2003-03-25 09:41:42 +00:00
Guy Harris 2fecf91a17 AIX's BPF, and thus its tcpdump, appears to use 24 as the link-layer
type for loopback devices; map it to DLT_NULL when reading libpcap files
with a major version of 2 and a minor version of 2, and when capturing
from an "loN" device on AIX.

svn path=/trunk/; revision=7361
2003-03-25 06:04:54 +00:00
Richard Sharpe cb0461411d Fix up the parsing of browser rest messages.
svn path=/trunk/; revision=7360
2003-03-24 16:49:10 +00:00
Gerald Combs 9e6bc56904 Add support for decoding Intel ANS probes. Thanks go to Intel for providing
protocol information.

svn path=/trunk/; revision=7359
2003-03-23 19:32:19 +00:00
Guy Harris e086394a98 From Jeff Morriss fix:
- endianism issues in most multi-octet parameters
	- the size of pointers to variable and optional parameters in the LUDT
	and LUDTS messages (ITU only)

svn path=/trunk/; revision=7358
2003-03-21 23:05:25 +00:00
Richard Sharpe dbbfc76654 Add support for the missing ResetBrowserState announcement in
packet-smb-browse.c

svn path=/trunk/; revision=7357
2003-03-21 05:28:04 +00:00
Ronnie Sahlberg b8e3c33edb change dissect_ndr_wchar_cvstring so that it uses the hf_index the dissector has passed to it and not the generic dcerpc_character_buffer.
we need this to be able to filter for various dcerpc related strings such as lsa.domain

svn path=/trunk/; revision=7356
2003-03-17 09:42:12 +00:00
Ronnie Sahlberg 3cde372091 Turn SIDs into FT_STRING fields so that we can filter for them using
display filters.

svn path=/trunk/; revision=7355
2003-03-17 09:02:49 +00:00
Ronnie Sahlberg a86693c355 Rename hf_smb_sid to the more appropriate hf_smb_search_id
since we will need hf_smb_sid for the SID string later

svn path=/trunk/; revision=7354
2003-03-17 08:28:56 +00:00
Guy Harris a3eec5e9c9 From Devin Heitmueller: for packets with an unknown family ID, display
the family ID in hex in the summary line.

svn path=/trunk/; revision=7353
2003-03-14 21:50:19 +00:00
Richard Sharpe daea30c214 Make sure that we display all the file attributes ...
svn path=/trunk/; revision=7352
2003-03-14 00:46:54 +00:00
Guy Harris 283afef806 From Tomas Kukosa - allow a preference name to begin with the string
that's the name of the module, as long as the prefix doesn't end with
"." or "_" (so you can register "tc.tcp.port" or "tc.tcp_port", but not
"tc.tc.port" or "tc.tc_port").

svn path=/trunk/; revision=7351
2003-03-13 18:17:59 +00:00
Guy Harris 9de14cd339 When fixing up old preferences, check the module for the current
preference by comparing "module->name" against the module, not by
checking the first part of the preference name - the preference name
might not contain the correct module name, as we've mapped some modules.

svn path=/trunk/; revision=7350
2003-03-12 19:45:52 +00:00
Gerald Combs 588b90738a From Todd Montgomery: Bring PGM up to date with RFC 3208:
- checksum checks for all packets (like UDP, IP, TCP, etc.)
                - this includes adding an option to turn off checking
                  it in the preferences menu (like TCP does).
        - POLL packets
        - POLR packets
        - added PGM options:
                - OPT_FRAGMENT
                - OPT_REDIRECT
                - OPT_NAK_BO_IVL
                - OPT_NAK_BO_RNG
        - fixed a minor offset error in SPMs

svn path=/trunk/; revision=7349
2003-03-12 04:04:15 +00:00
Guy Harris 833a75caf7 From Lars Roland: printf fix.
svn path=/trunk/; revision=7348
2003-03-12 00:36:22 +00:00
Guy Harris ce39f410b8 From Anders Broman: put the message type in the Info column regardless
of whether a protocol tree is being built or not.

svn path=/trunk/; revision=7347
2003-03-12 00:27:00 +00:00
Guy Harris 6239c6f014 From Anders Broman: fix the names of some fields.
svn path=/trunk/; revision=7346
2003-03-12 00:23:52 +00:00
Guy Harris a601fa2a1c From Andreas Sikkema: remove epan\dfilter\scanner.c, so that it gets
rebuilt on Windows - the UNIX version might include <unistd.h>, which
doesn't work on Windows, so you need to get rid of any UNIX-built
versions.

svn path=/trunk/; revision=7345
2003-03-12 00:11:09 +00:00
Guy Harris ab84d8be6e Change the version messages to put the "compiled with" stuff on a
separate line, and to put the "running with" info on a separate line
from that, to make the output narrower.

svn path=/trunk/; revision=7344
2003-03-12 00:07:46 +00:00
Guy Harris 50899dad38 When registering a string preference, if the value of the preference is
NULL, convert it to a copy of a null string, otherwise replace it with a
copy of the string, so that we know that the variable for the preference
always points to a string that can be freed.

That also obviates the need to worry about a null-pointer value for a
preference variable when checking to see whether a preference has changed.

When checking for a string preference not being set, check for an empty
string, not a null pointer - the above code turns null pointers into
pointers to empty strings, *and* the GUI code does (and always did!) the
same.

svn path=/trunk/; revision=7343
2003-03-11 23:14:42 +00:00
Guy Harris 569e74a1f3 When registering a string preference, if the value of the preference is
NULL, convert it to a copy of a null string, otherwise replace it with a
copy of the string, so that we know that the variable for the preference
always points to a string that can be freed.

That also obviates the need to worry about a null-pointer value for a
preference variable when checking to see whether a preference has changed.

When checking for a string preference not being set, check for an empty
string, not a null pointer - the above code turns null pointers into
pointers to empty strings, *and* the GUI code does (and always did!) the
same.

svn path=/trunk/; revision=7342
2003-03-11 22:51:52 +00:00
Ronnie Sahlberg 88959c985c Fixed two small bugs in tap_rtp.c
1, specify a tap filter that ignores all ICMP packets
2, specify a tap filter that only matches the same conversation ip/udp
as the selected packet.

svn path=/trunk/; revision=7341
2003-03-11 08:46:26 +00:00
Gerald Combs 75b26f8da3 MSVC++ didn't care for having const ints in its hf subarray indices. Use
#defines instead.

svn path=/trunk/; revision=7339
2003-03-11 01:48:55 +00:00
Gerald Combs 9f3e11091b Update for 0.9.11.
svn path=/trunk/; revision=7338
2003-03-11 00:26:53 +00:00
Gerald Combs 656eb2b35c Bump the version to 0.9.11. Let's hope the goat's blood and hastily carved
idol is enough for the CVS gods.

svn path=/trunk/; revision=7337
2003-03-11 00:12:39 +00:00
Guy Harris cc77e8abe9 From Stefan Wenk: filterable header fields in SIP dissector.
svn path=/trunk/; revision=7336
2003-03-10 22:33:26 +00:00
Guy Harris 97e701ce15 From Albert Chin: get rid of some C++ comments in C89 code.
svn path=/trunk/; revision=7335
2003-03-10 19:58:47 +00:00
Gerald Combs b01ee2624c Obscure more email addresses.
svn path=/trunk/; revision=7334
2003-03-10 04:29:13 +00:00
Gerald Combs 30385ffeaf Fix some perldoc warnings and obscure email addresses.
svn path=/trunk/; revision=7333
2003-03-10 04:27:01 +00:00
Guy Harris cdd02dca54 Use SCSI_DEV_BITS for the bits in the peripheral qualifier/peripheral
device type byte used for the device type.

svn path=/trunk/; revision=7332
2003-03-10 02:18:19 +00:00
Guy Harris 2a848c34ad Have the "Save voice data as..." button in the RTP analysis dialog box
pop up a file selection box with the save options, rather than a dialog
box with the save options, a file name, and a button to click to get the
file selection box.

svn path=/trunk/; revision=7331
2003-03-10 02:09:29 +00:00
Jörg Mayer 9281a04064 Pointer <--> int converions cause warnings on ia64.
Modified a patch originally contained in the SuSE distro
to do the conversions via glib macros.

svn path=/trunk/; revision=7330
2003-03-10 02:06:33 +00:00
Laurent Deniel dc01cb646b - conversation_get_protocol_data -> conversation_get_proto_data
- miscellaneous typos corrected

svn path=/trunk/; revision=7329
2003-03-09 22:00:26 +00:00
Jörg Mayer 52487949b5 Remove used parameter pinfo from dissect_ser
svn path=/trunk/; revision=7328
2003-03-09 03:19:03 +00:00