Commit Graph

12765 Commits

Author SHA1 Message Date
Bill Meier 97e1e5bc85 Fix a few proto_tree_add_item() encoding args.
svn path=/trunk/; revision=39514
2011-10-23 17:11:39 +00:00
Bill Meier 2f9dfbce45 (Trivial) Whitespace cleanup.
svn path=/trunk/; revision=39513
2011-10-23 17:10:59 +00:00
Bill Meier 6d96a16932 Fix a few proto_tree_add_item() encoding args manually.
Some whitespace cleanup.

svn path=/trunk/; revision=39507
2011-10-21 14:33:43 +00:00
Jaap Keuter 152afe273e Fix for bug 6449:
Last RTPS2 submessage could have zero as octets_to_next_header.

From me: coding style unused parameters.

svn path=/trunk/; revision=39506
2011-10-21 08:32:10 +00:00
Bill Meier 739e233871 Fix two proto_tree_add_item() encoding args not handled by fix-encoding-arg.
svn path=/trunk/; revision=39505
2011-10-21 02:54:58 +00:00
Bill Meier 794757ae8f For proto_tree_add_item(..., proto_xxx, ...)use ENC_NA as the encoding arg.
Also: remove trailing whitespace for a number of files.

svn path=/trunk/; revision=39503
2011-10-21 02:10:19 +00:00
Jeff Morriss 449d732485 Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5221 :
Don't assume that the Called party number has digits: it may not, especially
in protocols like INAP.

Rearrange the (pre-existing) no-digits check when dissecting Calling addresses
so we don't pass the empty address to taps.

svn path=/trunk/; revision=39502
2011-10-21 01:50:25 +00:00
Gerald Combs 0c83f1655a From Huzaifa Sidhpurwala: Fix a null pointer dereference.
svn path=/trunk/; revision=39500
2011-10-20 23:46:04 +00:00
Alexis La Goutte 9434d2ea03 FromThomas Buchanan via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6467
Add Binary JSON (BSON) decoding support to Mongo packet dissector

Implement BSON spec to correctly see BSON document type and not in Bytes format...

The specification for BSON can be found at http://bsonspec.org/

The decoding is not entirely complete, there are still potential enhancements to provide more information about a couple of data types, but it greatly enhances visibility into these packet types.

From me :
* Fix warning from fix-encoding-args.pl script.

svn path=/trunk/; revision=39499
2011-10-20 20:45:34 +00:00
Jaap Keuter 151acb8fa1 Fix for bug 6469:
Retrieve the fill bits in the correct amount and from the correct place.

svn path=/trunk/; revision=39494
2011-10-20 17:49:19 +00:00
Alexis La Goutte 2df3cbd8eb Fix Dead Store (Dead assignement/Dead increment) Warning found by Clang
svn path=/trunk/; revision=39493
2011-10-20 16:09:58 +00:00
Bill Meier 54716c768a Use ENC_NA as proto_tree_add_item() encoding arg for FT_ETHER hf[] field type.
svn path=/trunk/; revision=39491
2011-10-20 14:36:14 +00:00
Bill Meier 05b50ef697 Fix a typo.
svn path=/trunk/; revision=39489
2011-10-20 14:11:32 +00:00
Bill Meier d65261d344 Use ENC_NA as proto_tree_add_item() encoding arg for FT_ETHER hf[] field type.
(Some minor whitespace cleanup).

svn path=/trunk/; revision=39488
2011-10-20 14:07:54 +00:00
Guy Harris a03cc7137b As bug 3954 notes, nowhere does RFC 3954 indicate that a system or
interface scope is always 4 bytes.  For that matter, nowhere does it
indicate that the scopes have any particular interpretation except as a
sequence of octets.

Get rid of the checks for a length of 4, and make ScopeSystem an
FT_BYTES.  If, by *convention*, they're usually IPv4 or IPv6 addresses,
somebody can throw in code to display them as such if they happen to be
4 or 16 bytes, respectively.  Leave ScopeInterface as an integer for
now, in case, by convention, they're interface indices, but still leave
the length check out.

Fixes bug 3954.

svn path=/trunk/; revision=39485
2011-10-20 02:38:40 +00:00
Jeff Morriss db8bf387c8 From András Veres-Szentkirályi via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6426 :
The current MySQL dissector ignored the execute parameters as metadata is
needed from previous packets to decode the fields. I added the necessary code
to store these in conn_data and developed dissector for all fields I could
reproduce on the network.

This also fixes a memory leak by moving the stmts structure (the pointer to
which is stored in se_allocated memory) into se_trees.

From me: use se_tree_create_non_persistent() so the entire tree is forgotten when
the se_ memory goes away.  Also some reformatting.

svn path=/trunk/; revision=39483
2011-10-20 01:55:04 +00:00
Bill Meier 33f6f89401 Specify ENC_TIME_TIMESPEC for a proto_tree_add_item() encoding arg for a field with type FT_ABSOLUTE_TIME.
svn path=/trunk/; revision=39482
2011-10-19 23:24:52 +00:00
Alexis La Goutte 3f5cf478f4 Fix Dead Store (Dead assignement/Dead increment) Warning found by Clang
svn path=/trunk/; revision=39481
2011-10-19 21:55:08 +00:00
Alexis La Goutte 8d21b886f7 From Martin Kaiser via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6463
dissector for HDCP (High bandwidth Digital Content Protection)

HDCP can run on top of TCP, there's no fixed port number assigned. I created a heuristic dissector that's disabled by default and can be enabled by setting a preference (similar to the hilscher dissector). The idea behind this is that some HDCP messages are hard to recognize (e.g. one byte message id + 8 random bytes). Having the dissector enabled at all times may generate false positives.

svn path=/trunk/; revision=39480
2011-10-19 21:52:31 +00:00
Alexis La Goutte fc68bea2b9 Copy/Paste is a devil...
svn path=/trunk/; revision=39479
2011-10-19 21:29:02 +00:00
Alexis La Goutte f03f4de4c5 From pascl via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6465
New Protocol Submission for MVRP (Multiple VLAN Registration Protocol)

New dissector submission for Multiple VLAN Registration Protocol (MVRP) defined in 802.1ak Standard, section 11. MVRP is used to to dynamically create and update Dynamic VLAN Registration Entries.

From me :
* Fix error from fix-encodings-args script
* Add Modeline information
* Added packet-mrp-mvrp.c to CMakeLists.txt


svn path=/trunk/; revision=39477
2011-10-19 21:19:08 +00:00
Bill Meier d2170c5b99 Use ENC_... instead of locally defined NSIP_LITTLE_ENDIAN for proto_tree_add_item() encoding arg.
svn path=/trunk/; revision=39476
2011-10-19 20:58:36 +00:00
Bill Meier d7aabb730a Fix several benign instances wherein proto_tree_add_[uint|boolean]() was intended rather than proto_tree_add_item().
svn path=/trunk/; revision=39475
2011-10-19 20:32:21 +00:00
Bill Meier d9d97688a3 Manually fix a proto_tree_add_item() encoding arg.
svn path=/trunk/; revision=39474
2011-10-19 20:29:36 +00:00
Bill Meier ff9b00ff56 use consistent indentation.
svn path=/trunk/; revision=39473
2011-10-19 20:28:08 +00:00
Anders Broman 24a011d8db Let subdissectors have a stab at the packet even if it's cut short.
svn path=/trunk/; revision=39472
2011-10-19 17:59:47 +00:00
Stephen Fisher 082938900c Fix Coverity ID #1288: UNUSED_VALUE in spotlight_dissect_query_loop:
"returned_pointer: Pointer ... is never used" due to break and end 
of function after the switch block.


svn path=/trunk/; revision=39470
2011-10-19 16:15:53 +00:00
Stephen Fisher 20ae7e93d5 Fix Coverity ID 1300: UNUSED_VALUE in dissect_spotlight: "returned_pointer
is never used" because of the return -1 at the end of this if block.
Removed item_toc = assignment and fixed indentation.


svn path=/trunk/; revision=39469
2011-10-19 16:08:13 +00:00
Bill Meier f1b784b474 More conversions of proto_tree_add_item() 'encoding' arg
svn path=/trunk/; revision=39467
2011-10-19 15:04:44 +00:00
Alexis La Goutte c4471ccf69 From pascl via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6464
MRP-MSRP: Missing error descriptions (error code 17, 18 and 19)

Multiple Stream Reservation Protocol (MSRP) defines 19 failures codes in 802.1Qat (table 35-6). Actual packet-mrp-msrp.c only defines the first 16 failures codes.

svn path=/trunk/; revision=39465
2011-10-19 06:44:44 +00:00
Jeff Morriss a413376abc From Pascal Quantin via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6468 :
The attached patch fixes a memory corruption of the ep_allocated buffer when
building the decoded bitmap.

From me: some reformatting.

svn path=/trunk/; revision=39464
2011-10-19 00:37:52 +00:00
Alexis La Goutte 9d46a65bfd Fix Dead Store (Dead assignement/Dead increment) Warning found by Clang
packet-btamp.c:xxx:y: warning: Value stored to 'offset' is never read (x14)

svn path=/trunk/; revision=39463
2011-10-18 23:21:15 +00:00
Jeff Morriss cc4fe5789b Add an expert info if we found the checksum to be bad.
Add the checksum info to the tree even when !tree so that the expert_info
summary... "icon"... in the lower-left corner is correct.

svn path=/trunk/; revision=39460
2011-10-18 16:13:12 +00:00
Stig Bjørlykke cc182a8bad Added support for User-Agent.
Fixed finding line end for content type parameters.

svn path=/trunk/; revision=39459
2011-10-18 16:06:17 +00:00
Jeff Morriss 56981d384d From Dirk Jagdmann via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6450 :
Several updates to the DCE/RPC dissector:

- changed the variable name "ndr64_uuid" to "uuid_ndr64" to make it similar the
the other UUID variable names. Minor changes to the UUID names.

- changes the UUID name for the 32bit NDR to describe that. In the DCE/RPC
standard this UUID is described as "Version 1.1 network data representation
protocol", but this is an unnecessarily long name and it's the only 32bit
version defined for DCE/RPC anyway. The new name "32bit NDR" is similar to the
changed name for the 64bit NDR.

- added an UUID for "bind time feature negotiation" found with Microsoft PDUs.

- added an UUID for "asynchonous MAPI". Of course this UUID/name should be
added to the MAPI dissector, but the MAPI dissector is generated C code from
Samba/OpenChange pidl sources. Eventually those might get updated. An
alternative would be to create a new file to specifically register UUIDs used
in the DCE/RPC context.

- when the g_hash_table_insert() function is used, I've removed the code to
lookup and remove the key, as g_hash_table_insert() is doing that internally
(or more precise, it is overwriting the old value).

- in the dissector function for Bind and BindAck, I now print all context items
into COL_INFO and not just the first one.

- added a new value for Bind results, used by Microsoft products. (The
"Negotiate ACK" is used with the "bind time feature negotiation" UUID)

svn path=/trunk/; revision=39455
2011-10-18 01:51:01 +00:00
Jeff Morriss bd128abe64 From Roberto Morro via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6451 :
The patch fixes a bug in the PCEP Objective Function (OF) object tree
visualization (it didn't recognize the object and showed it as "Unknown
object").

Also fixes a small bug.

From me: remove a couple of unnecessary includes.

svn path=/trunk/; revision=39454
2011-10-18 01:27:01 +00:00
Jeff Morriss 431332092d From Daniel via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6461 :
Register the USB dissector by name.

svn path=/trunk/; revision=39453
2011-10-18 01:05:57 +00:00
Chris Maynard 49fed7ed0d Display filter name cleanup.
svn path=/trunk/; revision=39452
2011-10-18 00:49:16 +00:00
Bill Meier a6e35df202 Do some more conversions of proto_tree_add_item() 'encoding' arg
(previously missed).

svn path=/trunk/; revision=39451
2011-10-18 00:39:20 +00:00
Bill Meier cca6984ab9 Do some more conversions of proto_tree_add_item() 'encoding' arg
(previously missed).

svn path=/trunk/; revision=39450
2011-10-18 00:17:48 +00:00
Chris Maynard 3a64aed966 Fixup some display filter names.
svn path=/trunk/; revision=39449
2011-10-17 23:59:32 +00:00
Chris Maynard c553e708a2 Cleanup AFP Version display filter name.
svn path=/trunk/; revision=39448
2011-10-17 23:58:25 +00:00
Bill Meier 43efae210b Remove #if 0'd code which appears to duplicate existing code
svn path=/trunk/; revision=39447
2011-10-17 22:23:11 +00:00
Alexis La Goutte 097e9bb397 Enhance BGP Capability message
* Make field filterable 
* Use expert info to display a wrong length
* Remove duplicate code for type and length

svn path=/trunk/; revision=39446
2011-10-17 18:19:18 +00:00
Bill Meier 293049dfba Do some conversions of proto_tree_add_item() 'encoding' arg.
(previously missed).

    57   FT_BOOLEAN:       FALSE-->ENC_BIG_ENDIAN
    31   FT_BOOLEAN:       TRUE-->ENC_LITTLE_ENDIAN

    10   FT_BYTES:         ENC_BIG_ENDIAN-->ENC_NA
     1   FT_BYTES:         ENC_LITTLE_ENDIAN-->ENC_NA
    21   FT_BYTES:         FALSE-->ENC_NA
     2   FT_BYTES:         TRUE-->ENC_NA

     2   FT_IPXNET:        ENC_BIG_ENDIAN-->ENC_NA

     6   FT_IPv6:          ENC_BIG_ENDIAN-->ENC_NA
     1   FT_IPv6:          FALSE-->ENC_NA

     6   FT_NONE:          ENC_BIG_ENDIAN-->ENC_NA
    19   FT_NONE:          FALSE-->ENC_NA
     3   FT_NONE:          TRUE-->ENC_NA

     1   FT_STRING:        ENC_BIG_ENDIAN-->ENC_ASCII|ENC_NA
     1   FT_STRING:        ENC_LITTLE_ENDIAN-->ENC_ASCII|ENC_NA
     5   FT_STRING:        FALSE-->ENC_ASCII|ENC_NA
     1   FT_STRING:        TRUE-->ENC_ASCII|ENC_NA

     4   FT_STRINGZ:       ENC_NA-->ENC_ASCII|ENC_NA
     8   FT_STRINGZ:       FALSE-->ENC_ASCII|ENC_NA

     1   FT_INT32:         FALSE-->ENC_BIG_ENDIAN
     1   FT_INT32:         TRUE-->ENC_LITTLE_ENDIAN

    11   FT_UINT8:         0-->ENC_BIG_ENDIAN
   111   FT_UINT8:         FALSE-->ENC_BIG_ENDIAN
    17   FT_UINT8:         TRUE-->ENC_LITTLE_ENDIAN
     1   FT_UINT16:        0-->ENC_BIG_ENDIAN
    68   FT_UINT16:        FALSE-->ENC_BIG_ENDIAN
    18   FT_UINT16:        TRUE-->ENC_LITTLE_ENDIAN
     4   FT_UINT24:        FALSE-->ENC_BIG_ENDIAN
    70   FT_UINT32:        FALSE-->ENC_BIG_ENDIAN
     1   FT_UINT32:        TRUE-->ENC_LITTLE_ENDIAN
     4   FT_UINT64:        FALSE-->ENC_BIG_ENDIAN
     1   FT_UINT64:        TRUE-->ENC_LITTLE_ENDIAN

     1   FT_UINT_STRING:   FALSE-->ENC_ASCII|ENC_BIG_ENDIAN


svn path=/trunk/; revision=39442
2011-10-16 23:38:49 +00:00
Guy Harris 0bef3129f3 Have to include packet-lcsap.h, so it gets put into the source tarball.
svn path=/trunk/; revision=39441
2011-10-16 18:34:45 +00:00
Anders Broman 6231e52968 From Jouni Malinen:
Reassemble GAS Query Response if needed.

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6443

svn path=/trunk/; revision=39440
2011-10-16 17:29:12 +00:00
Anders Broman 44eb67d3c7 From Donnie Savage:
EIGRP dissector cleanup.

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6459

svn path=/trunk/; revision=39438
2011-10-16 17:21:19 +00:00
Anders Broman 56c3bd0686 From Pascal Quantin.
LTE Positioning Protocol dissector

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6460

svn path=/trunk/; revision=39436
2011-10-16 16:02:26 +00:00
Bill Meier 20106e28de Update 2 generated ASN1 *.[hc] files after recent work done by Jeff Morriss;
The only change in each file is in a comment showing the asn2wrs cmd used to build that file.


svn path=/trunk/; revision=39431
2011-10-15 20:41:07 +00:00