Commit Graph

5522 Commits

Author SHA1 Message Date
Tim Potter 501daf1770 Removed some trailing commas from various DCERPC dissectors.
svn path=/trunk/; revision=5604
2002-05-31 00:31:13 +00:00
Guy Harris 1504346601 SMB 0x31 is "Close And Tree Disconnect", not "Close And Tree Discover",
and it looks like "Close" (it's a close that also disconnects the tree
used for the SMB).

svn path=/trunk/; revision=5603
2002-05-30 11:29:38 +00:00
Ronnie Sahlberg ebdfa84dee From KevinM, fixes for the L2TP protocol. Incorrect display filter names.
svn path=/trunk/; revision=5602
2002-05-30 10:09:27 +00:00
Ronnie Sahlberg 7f798e68ee Fixed bug when dissectors forgot to eat the array headers for conformant_run==1
resulting in an assert to abort ethereal.
It shows that the assers worked and that it will find bugs and not allow the dissectors to misdissect the packets.

svn path=/trunk/; revision=5601
2002-05-30 10:06:58 +00:00
Guy Harris 531cb17873 From Albert Chin: fix various non-GCC compiler warnings.
svn path=/trunk/; revision=5600
2002-05-30 08:34:19 +00:00
Guy Harris ca03167c44 Don't pass "tvb_reported_length_remaining(tvb, offset)" as the fourth
argument to "tvb_new_subset()" - just use -1 if the subset tvbuff is to
run to the end of the parent tvbuff.

svn path=/trunk/; revision=5599
2002-05-30 05:26:05 +00:00
Guy Harris 8ec09e1441 Don't pass "tvb_reported_length_remaining(tvb, offset)" as the fourth
argument to "tvb_new_subset()" - just use -1 if the subset tvbuff is to
run to the end of the parent tvbuff.

svn path=/trunk/; revision=5598
2002-05-30 02:04:43 +00:00
Guy Harris 4401f1433f Don't pass "tvb_reported_length_remaining(tvb, offset)" as the fourth
argument to "tvb_new_subset()" - just use -1 if the subset tvbuff is to
run to the end of the parent tvbuff.

svn path=/trunk/; revision=5597
2002-05-30 01:56:55 +00:00
Guy Harris b5f0786318 Don't assume that just because a purported font name begins with "-"
it's an XLFD font name.

svn path=/trunk/; revision=5596
2002-05-30 00:44:50 +00:00
Tim Potter 1852e00c8a Removed debugging fprintf calls.
svn path=/trunk/; revision=5595
2002-05-30 00:20:32 +00:00
Guy Harris dc4106b0b1 From Martin Gignac: fix Sender-Visibility field to use the right
value_string table.

Clean up capitalization.

svn path=/trunk/; revision=5594
2002-05-29 22:52:55 +00:00
Guy Harris f2880aad6b AODV6 support, from Antti Tuominen.
svn path=/trunk/; revision=5593
2002-05-29 21:32:23 +00:00
Guy Harris 2a8dfde425 Display unsigned quantities with "%u".
svn path=/trunk/; revision=5592
2002-05-29 19:55:55 +00:00
Guy Harris a6b22a6bec Update the item on turning off name resolution to mention the "-N" flag
and the preference item.

svn path=/trunk/; revision=5591
2002-05-29 19:16:40 +00:00
Guy Harris 0feb7affba Java RMI protocol support, from Michael Stiller.
svn path=/trunk/; revision=5590
2002-05-29 18:52:28 +00:00
Guy Harris 4403c56558 Put the raw data items at the top level in the protocol tree, as was the
case before recent changes.

Just use -1 as the last argument to "tvb_new_subset()" if the subset
tvbuff is to run to the end of the parent tvbuff.

svn path=/trunk/; revision=5589
2002-05-29 08:55:28 +00:00
Guy Harris 20a92d3ffc From Michal Melerowicz:
Fixed TFT decoding and processing PPP payload inside of GTP
	protocol conf options

That change also put all GTP preferences under a "gtp" heading; put in
another hack so that your old "gtpv0" and "gtpv1" settings are recognized.

svn path=/trunk/; revision=5588
2002-05-29 07:35:55 +00:00
Guy Harris fbb370078f From Jochen Friedrich: RFC 2353 SNA-over-LLC-over-UDP support, and RFC 2043
SNA-over-PPP and SNA-over-LLC-over-PPP support.

svn path=/trunk/; revision=5587
2002-05-29 03:08:02 +00:00
Gerald Combs ee0bdc5751 From Olivier Dreux: Add PPP support to GTP.
svn path=/trunk/; revision=5586
2002-05-29 03:07:02 +00:00
Guy Harris 7d72c3c429 Check for EtherPeek files before checking for pppdump files; the
EtherPeek heuristic is a bit stronger, and there's at least one
EtherPeek capture that gets misidentified as a pppdump capture if you
check for pppdump captures first.

svn path=/trunk/; revision=5585
2002-05-29 02:19:49 +00:00
Guy Harris 2e936ea423 Fail somewhat more gracefully when confronted with a bad file.
svn path=/trunk/; revision=5584
2002-05-29 02:11:57 +00:00
Guy Harris 12bc4ef56d Add an item from UNI 3.0.
Fix a typo.

svn path=/trunk/; revision=5583
2002-05-28 23:29:25 +00:00
Guy Harris 363dc049c2 Streaming mode is 0x02, not 0x00.
svn path=/trunk/; revision=5582
2002-05-28 23:25:15 +00:00
Guy Harris 49fe4e742c From Joerg Mayer: dissect both the BOOTP server and client ports as
bootp/DHCP, to handle PXE clients that send BOOTP requests to
destination ports other than 67.

svn path=/trunk/; revision=5581
2002-05-28 20:08:09 +00:00
Ronnie Sahlberg 34a484d0d8 DCERPC Browser protocol updates. Dissection completed of all functions and structures for DCERPC Browser protocol used by windows hosts.
Dissector dissects all types, all structs and all functions. However, the names of scalars, aggregates and functions are not known and have to be filled in later when users report what the fields actually means.

The dissector also contains the entire IDL definition which can be extracted by running
cat packet-dcerpc-browser.c | grep IDL | sed -e "s/.*IDL//g" >browser.idl

Please keep the idl definitions updated when changing this file.

svn path=/trunk/; revision=5580
2002-05-28 13:59:20 +00:00
Ronnie Sahlberg 6bb75ed7dd Dissection of some functions and structure for dcerpc browser protocol.
svn path=/trunk/; revision=5579
2002-05-28 13:08:07 +00:00
Ronnie Sahlberg dbe5dc5fa7 Added skeleton dissector for DCERPC Browser protocol
svn path=/trunk/; revision=5578
2002-05-28 12:07:59 +00:00
Ronnie Sahlberg 7a5c795f50 More dissection of EPM. Tower and tower floors dissected. (partially)
svn path=/trunk/; revision=5577
2002-05-28 11:45:56 +00:00
Guy Harris 586e97727f Add support for old NetXRay format.
svn path=/trunk/; revision=5576
2002-05-28 02:39:15 +00:00
Guy Harris 7d85ca00df Clean up the data structures for the color filter code a bit. The old
"colfilter" structure contained items of use only when the colorizing
dialog was up, so make the items in it private to "gtk/color_dlg.c".
Make the "Edit" and "Delete" buttons sensitive only when a row is
selected, and make the "Up" and "Down" buttons sensitive only when a row
is selected *and* that row has somewhere to move in the specified
direction.

svn path=/trunk/; revision=5575
2002-05-27 22:00:37 +00:00
Guy Harris 8f65a5b2e3 From Kari Heikkila: fix for WTP PDUs not containing user data.
svn path=/trunk/; revision=5574
2002-05-27 20:33:25 +00:00
Ronnie Sahlberg 259903dc66 Changed toplevel REF pointer dissection to create a subtree. Not creating a subtree was a design mistake which caused ugliness in the unicode string str dissector and in other places.
Dissectors will temporarily have less pretty output for topleve ref pointers until their output is retuned.

svn path=/trunk/; revision=5573
2002-05-27 09:50:58 +00:00
Richard Sharpe 1303868b7d Account for hidden share types in share_types.
svn path=/trunk/; revision=5572
2002-05-27 04:11:06 +00:00
Guy Harris 31fe776a02 Get rid of an unused variable.
svn path=/trunk/; revision=5571
2002-05-26 21:32:39 +00:00
Guy Harris e86f7667f8 From Heikki Vatiainen: clarify, in the Ethereal man page, how to remove
noise from the packet trace display.

Propagate those changes to the Tethereal man page.

svn path=/trunk/; revision=5570
2002-05-26 21:18:17 +00:00
Ronnie Sahlberg b4f0142c07 Added dissecton of the Map command for EPM
svn path=/trunk/; revision=5569
2002-05-26 10:51:06 +00:00
Guy Harris 37c5eef9cb Put back the stuff to dissect the last 2 bytes of
TRANS2_SET_FILE_INFORMATION parameters as reserved.

Change/add comments to reflect information from Microsoft Networks SMB
File Sharing Protocol Extensions Version 3.0, Document Version 1.11,
July 19, 1990.

svn path=/trunk/; revision=5568
2002-05-26 09:47:47 +00:00
Guy Harris 130b2e755a Fix "dissect_unknown()" to properly step through the word and byte
parameters.

svn path=/trunk/; revision=5567
2002-05-26 01:42:48 +00:00
Guy Harris 83dde747ff Put in some additional information from:
Microsoft Networks SMB File Sharing Protocol Extensions Version
	2.0, Document Version 3.3, November 7, 1988;

	Microsoft Networks SMB File Sharing Protocol Extensions Version
	3.0, Document Version 1.11, July 19, 1990.

svn path=/trunk/; revision=5566
2002-05-26 01:30:05 +00:00
Gilbert Ramirez 5b06245f6c Fix indentation of bitfield-checking code so that all variables
contained within a bitfield are properly registered.

svn path=/trunk/; revision=5565
2002-05-25 13:57:19 +00:00
Guy Harris 2789f4512f If, when trying to get the length of an NCP-over-TCP PDU, we don't see
the right magic number at the beginning of the chunk of data, return the
amount of data remaining as the length, rather than trusting the random
word that follows to be a length usable for desegmentation.

svn path=/trunk/; revision=5564
2002-05-25 12:44:06 +00:00
Guy Harris e2a33ae644 Add messaging SMBs.
Fix a typo.

svn path=/trunk/; revision=5563
2002-05-25 12:33:59 +00:00
Ronnie Sahlberg 762981c66a Fix for bug when displaying selected item in hexpanel. 2 bytes too many were
highlited.

svn path=/trunk/; revision=5562
2002-05-25 11:26:30 +00:00
Guy Harris d46b0ee96d Fix the bit value for "Last Access" in the ExtendedInfo bitmask, and add
the bit for "64 Bit File Sizes".

svn path=/trunk/; revision=5561
2002-05-25 11:18:15 +00:00
Guy Harris 8eb3068408 Remove XXX comments for issues that were dealt with.
svn path=/trunk/; revision=5560
2002-05-25 10:26:28 +00:00
Guy Harris 3e001f70da Throw in a cast to squelch a compiler complaint ("unsigned short" +
"int" constant becomes "int", and comparing that with "unsigned int"
gives a "signed vs. unsigned comparison" warning, even though the "int"
constant in question is positive).

svn path=/trunk/; revision=5559
2002-05-25 10:25:27 +00:00
Ronnie Sahlberg e8a006b280 Some additional decoding of the decrypted MAPI PDU in opcode:2.
Length byte and some sort of trailer identified.

svn path=/trunk/; revision=5558
2002-05-25 09:19:45 +00:00
Ronnie Sahlberg 5887e9a997 MAPI new option. New option to decrypt the MAPI opnum 2 payload.
svn path=/trunk/; revision=5557
2002-05-25 08:41:12 +00:00
Ronnie Sahlberg 1f5cebd9fd Fix a bug for dcerpc. If we do not have reassembly of fragments enabled, only call the subdissector for the first fragment.
svn path=/trunk/; revision=5556
2002-05-25 08:37:44 +00:00
Guy Harris b3cb9fddbd Get rid of the routine to dissect LANE topology change frames, as
there's nothing in them past the flags.

svn path=/trunk/; revision=5555
2002-05-25 07:40:11 +00:00