Commit graph

1345 commits

Author SHA1 Message Date
Alexis La Goutte
2e9f0857f6 Fix tshark doc (ip.src==1.2.3.4) is not a valid filter for ICMPv6 trafic ;)
svn path=/trunk/; revision=36582
2011-04-12 13:30:43 +00:00
Chris Maynard
5abfa49525 Add conversation tracking and tshark tap support to ICMPv6. Fixes bug 5810.
TODO: Add a Wireshark tap or look into possibly using the stats tree instead.
Also, like ICMP, the ICMPv6 payload appears to carry the sender's timestamp, so
it might be possible to make use of this information to estimate the total SRT.
(See bug 5770 for more details.)

svn path=/trunk/; revision=36561
2011-04-11 17:42:01 +00:00
Chris Maynard
9e34d13ff4 Add computation of median and change standard deviation calculation to "sample"
standard deviation.  Split statistics output onto 2 lines.

svn path=/trunk/; revision=36501
2011-04-06 19:48:11 +00:00
Bill Meier
9121c18590 IMHO capinfos, when finished processing, should exit with an error status
if an error occurred while processing.
E.G.,: For the default (no -C option):
  'capinfos invalid.xxx' or 'capinfos a.pcap invalid.xxx c.pcap'
 should exit with an error status
  (after processing all the input args) if there is an error for invalid.xxx.

With this fix, I expect fuzz-test.sh (and list_protos_in_cap.sh
and presumably other scripts) will work a bit more as as expected.


svn path=/trunk/; revision=36487
2011-04-06 01:41:03 +00:00
Chris Maynard
595e5e1c1d Add ICMP tap support, and add a tshark tap to measure such things as:
* Number of ICMP echo requests, replies, lost replies and percent loss.
  * Min, Max, Average SRT (Service Response Time), and standard deviation.
(This is my first tap, so hopefully I didn't miss something, but we'll see ...)
TODO: Add a Wireshark tap.


svn path=/trunk/; revision=36480
2011-04-05 20:21:59 +00:00
Bill Meier
f8ce3da390 Add some info as to the determination of the length of a FT_STRINGZ item.
Add a note not leaving trailing whitespace on a line.

svn path=/trunk/; revision=36434
2011-04-01 20:48:56 +00:00
Gerald Combs
941666d525 Add "-z hosts", which dumps name resolution information in hosts format.
svn path=/trunk/; revision=36372
2011-03-27 16:06:03 +00:00
Gerald Combs
fcf51fc73b Add initial pcapng name resolution record support. Wireshark has read
support; TShark has read+write support. Additionally TShark can read a
"hosts" file and write those records to a capture file.

This uses "struct addrinfo" in many places and probably won't compile on
some platforms.

svn path=/trunk/; revision=36318
2011-03-24 22:47:57 +00:00
Chris Maynard
feb1d468d8 From: http://www.wireshark.org/lists/wireshark-dev/201103/msg00157.html
Change RTT references to SRT.
(tshark.pod could use a description for -z afp,srt and -z camel,srt)

svn path=/trunk/; revision=36297
2011-03-23 20:00:13 +00:00
Jeff Morriss
9a4457ef4f Add README.heuristic to the source distribution
svn path=/trunk/; revision=36205
2011-03-17 13:18:27 +00:00
Chris Maynard
25d68e6c5b Disallow invalid char's in the filename passed to idl2wrs. Fixes bug 1129.
svn path=/trunk/; revision=35944
2011-02-14 01:44:15 +00:00
Jeff Morriss
fddb50a582 Document that proto_tree_add_bytes_format() and
proto_tree_add_bytes_format_value() may be given a NULL value_ptr.


svn path=/trunk/; revision=35907
2011-02-10 22:57:50 +00:00
Jeff Morriss
69b78fc118 Document that NTP times can be added with proto_tree_add_item().
svn path=/trunk/; revision=35884
2011-02-09 02:43:10 +00:00
Sake Blok
b723ee91a0 From Jason Masker (bug 5240):
`
Allow editcap to chop from beginning of packet for decapsulation


svn path=/trunk/; revision=35832
2011-02-04 21:09:55 +00:00
Jaap Keuter
a3611f713e Sharpen the description of preference names.
svn path=/trunk/; revision=35671
2011-01-26 21:20:09 +00:00
Jeff Morriss
4eb43096b1 From Alexis La Goutte via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5603 :
Following the discussion on the dev mailing list about ett_ value in subtree
http://www.wireshark.org/lists/wireshark-dev/201101/msg00039.html

a small to update the Readme Developer Guide !

svn path=/trunk/; revision=35610
2011-01-21 17:08:35 +00:00
Chris Maynard
116d67e164 Add tvb_get_[n|le]toh[40|48|56]() accessors. Addresses bug 5082.
svn path=/trunk/; revision=35538
2011-01-14 19:02:38 +00:00
Anders Broman
c2cefb1e10 Document and export:
tvb_bcd_dig_to_ep_str();

svn path=/trunk/; revision=35499
2011-01-12 07:25:34 +00:00
Jeff Morriss
0c4e881911 Introduce, and start using, tvb_get_const_stringz(). This function returns a
pointer to a NULL-terminated string in the TVB.  It is no safer than dissectors
which call tvb_get_strsize() and then tvb_get_ptr() but it makes it clear that
this usage of tvb_get_ptr() is safe.

This function is slightly more efficient than tvb_get_ephemeral_stringz()--but
only as long as we're not using composite TVBs.

svn path=/trunk/; revision=35493
2011-01-12 02:25:08 +00:00
Stephen Fisher
1d4c01023b State in the developer documentation that the tvb_fake_unicode() and
tvb_get_ephemeral_fake_unicode() functions have been superceded by
tvb_get_unicode_string() and tvb_get_ephemeral_unicode_string() respectivey.


svn path=/trunk/; revision=35349
2011-01-03 19:37:13 +00:00
Stephen Fisher
159b55ad12 Document new tvb_get_unicode_string() and tvb_get_ephemeral_string()
functions.


svn path=/trunk/; revision=35345
2011-01-03 18:33:02 +00:00
Stephen Fisher
4f5ccc00f8 Introduce new function called tvb_get_ephemeral_unicode_stringz(), which
is a unicode (UTF-16) version of tvb_get_ephemeral_stringz().  It scans
a tvbuff for a UTF-16 string and converts it to UTF-8 upon return.


svn path=/trunk/; revision=35253
2010-12-23 17:59:34 +00:00
Jaap Keuter
fc4d25fcc4 Allow for NULL preference descriptions.
svn path=/trunk/; revision=35242
2010-12-22 06:25:33 +00:00
Guy Harris
a8bc4a0d13 Rename the routines that handle dissector tables with unsigned integer
keys to have _uint in their names, to match the routines that handle
dissector tables with string keys.  (Using _port can confuse people into
thinking they're intended solely for use with TCP/UDP/etc. ports when,
in fact, they work better for things such as Ethernet types, where the
binding of particular values to particular protocols are a lot
stronger.)

svn path=/trunk/; revision=35224
2010-12-20 05:35:29 +00:00
Bill Meier
cd5544679a Revert SVN #35214 based upon comments in the Wireshark-dev list.
http://www.wireshark.org/lists/wireshark-dev/201012/msg00206.html

svn path=/trunk/; revision=35218
2010-12-18 17:55:06 +00:00
Bill Meier
160bee8c16 The Styleguide section has been moved to the Wireshark Developer's Guide.
svn path=/trunk/; revision=35214
2010-12-17 20:55:45 +00:00
Bill Meier
2798debd90 Update the "Following Conversations" section to use se_alloc() instead of GMemChunks.
Also: add information about the conversation_set_dissector() function.

svn path=/trunk/; revision=35185
2010-12-14 14:23:27 +00:00
Sake Blok
bd8c1e7a3a ... and update the documentation too :-)
svn path=/trunk/; revision=35144
2010-12-07 11:59:15 +00:00
Gerald Combs
40af498b36 We don't include a comprehensive display filter reference; don't say we
do.

svn path=/trunk/; revision=35079
2010-11-30 17:46:09 +00:00
Stephen Fisher
d381b5dea4 From OKANO Takayoshi via bug #5442: Fix typos in documentation
svn path=/trunk/; revision=35038
2010-11-27 16:51:24 +00:00
Jaap Keuter
3232869503 Make some updates to describe the newer features.
svn path=/trunk/; revision=34964
2010-11-19 00:05:38 +00:00
Jaap Keuter
b310bbf4d0 Small clarification.
svn path=/trunk/; revision=34921
2010-11-17 07:29:40 +00:00
Sake Blok
9cf1d89732 Make editcap -B work like expected: output no packets after the stop time.
Old behavior was to include a packet with a timestamp of 12:00:00.934 if -B "YYYY-MM-DD 12:00:00" was used.


svn path=/trunk/; revision=34913
2010-11-16 20:22:20 +00:00
Chris Maynard
6cab1663e8 Fixed typos.
svn path=/trunk/; revision=34817
2010-11-09 03:30:55 +00:00
Chris Maynard
86db02c22e Fixed typos.
svn path=/trunk/; revision=34816
2010-11-09 03:20:15 +00:00
Chris Maynard
fae0f7d74a Fixed typos.
svn path=/trunk/; revision=34815
2010-11-09 02:50:29 +00:00
Bill Meier
2041f87240 Add some info about extended value string to section 1.7.1
svn path=/trunk/; revision=34621
2010-10-22 15:00:37 +00:00
Jeff Morriss
d14bdd492e Add IPFIX_RECORDS_TO_CHECK to the environment variable section.
svn path=/trunk/; revision=34590
2010-10-20 18:00:25 +00:00
Gerald Combs
1cd0689882 Revision 27919 added the ability to feed a libpcap-formatted file to
rawshark but broke the ability to feed it live packets with a
pcap_pkthdr prefix on some 64-bit architectures.

Add a "-p" flag which lets us explicitly handle file-based or
memory-based packet record headers.

svn path=/trunk/; revision=34522
2010-10-15 16:05:06 +00:00
Bill Meier
15851701e8 Rework "extended value strings":
- Allow direct access when a range of values begins with a value other than 0;
- Provide value_string_ext_new() for creating extended value strings at runtime;
- Do access to value_string_ext members via a macro (all but value_string.c);
- Update documentation.

svn path=/trunk/; revision=34514
2010-10-14 17:50:35 +00:00
Gerald Combs
0c2f1829e1 NEARLY → OVER.
svn path=/trunk/; revision=34311
2010-10-01 15:25:38 +00:00
Jeff Morriss
7d20440ff0 Introduce 2 new environment variables: WIRESHARK_EP_VERIFY_POINTERS and
WIRESHARK_SE_VERIFY_POINTERS that control whether or not we verify if a given
pointer is ep_ or se_ allocated, respectively.

Turn the behavior off by default for speed reasons (the speed difference isn't
huge, but...).

Turn the behavior on when fuzz testing.

Document these two new variables in the man pages.

svn path=/trunk/; revision=34046
2010-09-02 18:02:06 +00:00
Gerald Combs
607b228df6 Add ws_load_library and ws_module_open, which respectively call
LoadLibrary and g_module_open only for the program directory and system
directory on Windows. Use them to replace a bunch of LoadLibrary and
g_module_open calls. Use the extension ".dll" for all the DLLs that we
load. Add comments about DLL loading in Python.

svn path=/trunk/; revision=33924
2010-08-25 20:30:59 +00:00
Jeff Morriss
2a0128c258 Document what prefs_register_string_preference() does with your value pointer.
svn path=/trunk/; revision=33873
2010-08-21 03:54:55 +00:00
Bill Meier
432cfde19c Remove an incorrect line of code from the proto_reg_hanoff prototype.
svn path=/trunk/; revision=33790
2010-08-12 20:05:41 +00:00
Guy Harris
f0bb5f4c9a Fix grammaro, indent example code.
svn path=/trunk/; revision=33641
2010-07-27 01:19:06 +00:00
Guy Harris
9f4c3409b2 Tell people to be careful about loops like
for (guint8 = 0; guint8 < guint; guint8++)

(one of which recently caused an infinite loop with a fuzzed packet in
the buildbot).

svn path=/trunk/; revision=33639
2010-07-27 01:06:10 +00:00
Gerald Combs
31a8e4498a Don't clean wireshark-filter.pod. It's not generated any more.
svn path=/trunk/; revision=33540
2010-07-15 17:12:18 +00:00
Gerald Combs
69df102b4e Don't include the filter list (which is now over 16MB) in the
wireshark-filter man page. Point to other sources for the list instead.

svn path=/trunk/; revision=33539
2010-07-15 16:18:13 +00:00
Sake Blok
e10147fb73 Add an option to print the first, the last or all occurrences of each field
(when using tshark -T fields)


svn path=/trunk/; revision=33529
2010-07-14 21:53:57 +00:00