Bill Meier
794757ae8f
For proto_tree_add_item(..., proto_xxx, ...)use ENC_NA as the encoding arg.
...
Also: remove trailing whitespace for a number of files.
svn path=/trunk/; revision=39503
2011-10-21 02:10:19 +00:00
Gerald Combs
583ac864c0
Enable GeoIP lookups by default. Don't add GeoIP subtrees if we didn't
...
find any databases.
svn path=/trunk/; revision=39363
2011-10-11 17:57:09 +00:00
Bill Meier
4e57694d4a
Convert 'encoding' parameter of certain proto_tree_add_item() calls in non-autogenerated epan/dissectors:
...
Specifically: Replace FALSE|0 and TRUE|1 by ENC_BIG_ENDIAN|ENC_LITTLE_ENDIAN as
the encoding parameter for proto_tree_add_item() calls which directly reference
an item in hf[] which has a type of:
FT_UINT8
FT_UINT16
FT_UINT24
FT_UINT32
FT_UINT64
FT_INT8
FT_INT16
FT_INT24
FT_INT32
FT_INT64
FT_FLOAT
FT_DOUBLE
svn path=/trunk/; revision=39288
2011-10-06 03:35:44 +00:00
Stig Bjørlykke
1becef31f0
Use IPv4 as protocol name, to align with IPv6.
...
svn path=/trunk/; revision=37070
2011-05-12 10:27:02 +00:00
Jakub Zawadzki
38c2f2a151
Cleanup: replace sizeof(arr)/sizeof(arr[0]) with shorter array_length(arr)
...
svn path=/trunk/; revision=36986
2011-05-04 19:32:35 +00:00
Chris Maynard
ba9dc9f45f
Make ip.fragments an FT_BYTES field so a PDML Export will display the bytes in
...
the value="..." attribute. Fixes bug 1520.
svn path=/trunk/; revision=36378
2011-03-28 14:53:35 +00:00
Stig Bjørlykke
a07fff3b15
Corrected hack for TAPA by checking for "not IPv4".
...
Coverity 343.
svn path=/trunk/; revision=36244
2011-03-22 10:12:07 +00:00
Stig Bjørlykke
84bc28bd6a
Introduce "Fragment count" filter element for all protocols doing reassembly.
...
svn path=/trunk/; revision=35705
2011-01-30 21:01:07 +00:00
Guy Harris
158e9a3dae
Clean up indentation.
...
svn path=/trunk/; revision=35257
2010-12-23 21:22:55 +00:00
Guy Harris
a8bc4a0d13
Rename the routines that handle dissector tables with unsigned integer
...
keys to have _uint in their names, to match the routines that handle
dissector tables with string keys. (Using _port can confuse people into
thinking they're intended solely for use with TCP/UDP/etc. ports when,
in fact, they work better for things such as Ethernet types, where the
binding of particular values to particular protocols are a lot
stronger.)
svn path=/trunk/; revision=35224
2010-12-20 05:35:29 +00:00
Stig Bjørlykke
8b21f50474
Added hint about "TCP segmentation offload" when IP length == 0.
...
Added expert info item for bogus IP length.
Added hint about "IP checksum offload" for invalid IP checksum.
Describe TSO in the preference setting.
svn path=/trunk/; revision=34830
2010-11-10 13:49:55 +00:00
Bill Meier
9675740701
Use value_string_ext fcns to access certain value_string arrays;
...
Sort several value_string arrays to be in ascending order.
Also: Minor whitespace cleanup.
svn path=/trunk/; revision=34766
2010-11-03 22:08:49 +00:00
Jaap Keuter
694383d4a8
From Simon Leinen:
...
The IP Timestamp Option (RFC 781) has three variants. One (flag=0) just stores
a sequence timestamps in the option, but the other two (flag=1 and flag=3)
store alternate IP addresses and timestamps.
From me:
Mark option full when offset (pointer) is set to one, as per RFC 781.
svn path=/trunk/; revision=34750
2010-11-02 08:48:06 +00:00
Gerald Combs
0e64b1749c
Enable "Support packet-capture from IP TSO-enabled hardware" by default.
...
Like checksum offloading this seems to be common on modern systems.
svn path=/trunk/; revision=34383
2010-10-05 16:32:12 +00:00
Stig Bjørlykke
2d93bc5e9a
Make "4 NOP in a row" work again after changing the NOP name for TCP and IP
...
in revisions 34095 and 34097.
svn path=/trunk/; revision=34134
2010-09-16 12:29:22 +00:00
Stig Bjørlykke
894941e532
Only check for 4 NOP in a row within a uint32 boundary.
...
svn path=/trunk/; revision=34100
2010-09-10 21:24:32 +00:00
Stig Bjørlykke
f2e302eee0
Follow TCP and expand description for "NOP" and "EOL" options to "No-Operation (NOP)"
...
and "End of Options List (EOL)" respectively.
svn path=/trunk/; revision=34097
2010-09-10 16:48:00 +00:00
Stig Bjørlykke
aca8a4d989
Update dsfield ECN according to RFC3168.
...
svn path=/trunk/; revision=34092
2010-09-10 11:16:29 +00:00
Stig Bjørlykke
e71daa1fc1
Revert revision 33780, because the checksum is only calculated
...
from the header and not the content.
svn path=/trunk/; revision=34080
2010-09-08 13:38:47 +00:00
Stig Bjørlykke
dfb24f48d8
From Chris Maynard via bug 5105:
...
IP should not compute the header checksum if within an error packet
such as ICMP.
svn path=/trunk/; revision=33780
2010-08-12 06:26:21 +00:00
Stig Bjørlykke
8aaa5b8ec7
Added description of ECT and ECN-CE, added TFS for the bit values
...
and some item cleanup.
svn path=/trunk/; revision=33313
2010-06-24 11:37:03 +00:00
Jaap Keuter
8bba8bf460
Fix for bug 4888:
...
Restore setting DSCP column value, when relevant.
svn path=/trunk/; revision=33270
2010-06-20 18:24:25 +00:00
Stig Bjørlykke
1069c8dccf
Added an expert info for "4 NOP in a row" in IP and TCP.
...
svn path=/trunk/; revision=33265
2010-06-20 16:22:51 +00:00
Stig Bjørlykke
d051e79a81
Revert back to the old Flags entry.
...
Add number of bits used for Flags in the description.
svn path=/trunk/; revision=33264
2010-06-20 16:17:10 +00:00
Gerald Combs
1bac7c2610
From Chris Maynard via bug 4014:
...
This trivial patch merely displays the ICMP ID and sequence # in the Info
column.
svn path=/trunk/; revision=33056
2010-06-02 18:13:00 +00:00
Anders Broman
2b90c98a1a
Use value_string_ext for ip protocol.
...
svn path=/trunk/; revision=32914
2010-05-22 22:04:18 +00:00
Anders Broman
3c51d54e83
Fix:
...
packet-ip.c:1311: warning: 'field_tree' may be used uninitialized in this function
svn path=/trunk/; revision=32635
2010-05-02 17:02:11 +00:00
Anders Broman
d528b62777
From Jakub Zawadzki:
...
patch for ip.flags (using proto_tree_add_bits_item).
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4413
svn path=/trunk/; revision=32633
2010-05-02 15:36:44 +00:00
Bill Meier
09764dd969
Remove unneeded #include <stdio.h>
...
svn path=/trunk/; revision=32367
2010-04-03 21:55:23 +00:00
Jaap Keuter
6e795990fb
The evil bit IS a security issue.... ;)
...
svn path=/trunk/; revision=31915
2010-02-18 20:58:04 +00:00
Jaap Keuter
c084355412
From Chris Maynard:
...
Take into account PIM protocol specifics with regards to TTL when colorizing packets.
svn path=/trunk/; revision=31807
2010-02-05 22:39:14 +00:00
Stig Bjørlykke
47e732e29e
Changed "reassembled_length" -> "reassembled.length".
...
svn path=/trunk/; revision=31776
2010-02-03 08:47:15 +00:00
Stig Bjørlykke
88b72356ad
Introduce "Reassembled length" filter element for all protocols doing
...
reassembly.
svn path=/trunk/; revision=31767
2010-02-02 16:01:52 +00:00
Bill Meier
e49599c588
Fix Bug #4177 : Analyze ! Expert... doesn't show IP "Bad Checksum" errors.
...
svn path=/trunk/; revision=31471
2010-01-08 23:53:46 +00:00
Stephen Fisher
c5fdb8edae
From Chris Maynard via bug #4287 : Display IP protocol number in decimal
...
instead of hexadecimal.
svn path=/trunk/; revision=31165
2009-12-03 19:10:43 +00:00
Stig Bjørlykke
005049bebb
Changed hf_ip_proto to use ipproto_val[].
...
Removed some unneeded includes.
svn path=/trunk/; revision=31017
2009-11-19 15:30:06 +00:00
Jaap Keuter
324b7484d9
Implement RFC 3514.
...
svn path=/trunk/; revision=30926
2009-11-10 21:46:14 +00:00
Jaap Keuter
03730e3bc1
From Filipe David Borba Manana:
...
Since it was named Ethereal and up to today, Wireshark wrongly parses
the IPv4 header flags field:
* it considers it as a 4 bits wide field - according to RFC 791 its a 3 bits
wide field (first 3 bits of the 6th octect of the IPv4 header).
* if for example the DF bit is set, Wireshark displays the flag value as 0x04
(0100) when it should be 0x02 (010), idem for the MF flag.
Attached to this bug report, you can find a patch to fix the issue.
svn path=/trunk/; revision=30855
2009-11-07 11:24:05 +00:00
Anders Broman
88bb44a51e
From Jakub Zawadzki:
...
Cleanup dissector code - use proper memory functions.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4164
svn path=/trunk/; revision=30691
2009-10-25 11:43:30 +00:00
Jörg Mayer
8bd7ebc6a1
- Fix for bug 3965 as reported by Ivan Sy <ivan_jr@yahoo.com>
...
mDNS and LLMNR also deviate from the TTL=1 for 224.0.0.0/24
- Fix two warnings about removing const by casting.
svn path=/trunk/; revision=29644
2009-08-31 22:34:25 +00:00
Kovarththanan Rajaratnam
51ca1739ae
Custom columfication:
...
* Deprecate COL_DSCP_VALUE (IP DSCP Value). Use ip.dsfield
svn path=/trunk/; revision=29518
2009-08-23 11:12:12 +00:00
Kovarththanan Rajaratnam
8b515e9340
Switch a bunch of dissectors over to using tvb_new_subset_remaining()
...
svn path=/trunk/; revision=29446
2009-08-16 12:36:22 +00:00
Gerald Combs
842d1be224
Fix the build.
...
svn path=/trunk/; revision=29363
2009-08-10 15:33:54 +00:00
Jörg Mayer
1e7031f1c0
Ivan Sy <ivan_jr@yahoo.com> via bug 3814
...
TTL-Check for local network group addresses: Normally the
only valid TTL is 1. Add a check for VRRP and GLBP, where
the only valid TTL is 255.
Me: change the logic so the funtion returns the valid ttl
instead of true/false.
svn path=/trunk/; revision=29362
2009-08-10 14:55:47 +00:00
Anders Broman
0b0ff6cdcf
Get rid of check_col() in some of the more frequently used dissectors.
...
svn path=/trunk/; revision=29170
2009-07-22 21:33:47 +00:00
Stig Bjørlykke
046a329a66
Split packet-ip into packet-ip and packet-icmp.
...
Some cleanup in handles and ett entries.
svn path=/trunk/; revision=29035
2009-07-09 11:32:50 +00:00
Jörg Mayer
c43391cd08
Currently, the expert code notifies if a packet is addressed
...
to 224.0.0.x with a TTL>1. Some protocols (notably VRRP and GLBP)
send out a TTL of 255 and thus cause a notice. That should be fixed,
so for now: Add a FIXME about that.
svn path=/trunk/; revision=29024
2009-07-08 15:29:37 +00:00
Stig Bjørlykke
4d8dd01e8e
Changed flags_set_truth -> tfs_set_notset
...
svn path=/trunk/; revision=28989
2009-07-07 14:54:15 +00:00
Stig Bjørlykke
85c8e31574
From Kovarththanan Rajaratnam via bug 3548:
...
More header_field_info cleanup.
From me:
Don't fix the empty name for hf_nisplus_dummy.
svn path=/trunk/; revision=28792
2009-06-21 18:45:56 +00:00
Stig Bjørlykke
b228488bc0
From Kovarththanan Rajaratnam via bug 3548:
...
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00