Commit graph

7432 commits

Author SHA1 Message Date
Ronnie Sahlberg
886cbe2321 Fixed a small bug in tcp sequence number analysis.
FIN flag would previously only add one to the sequence number if the
FIN packet was empty, i.e. did not carry any payload data.

This caused ethereal to incorrectly flag the ACK to such packets
(FIN+payload data) to be incorrectly flagged as
ACK to previously lost segment.

Change the algorithm to always add 1 to the segment length, and thus the sequence number for all packets with teh FIN bit set.

svn path=/trunk/; revision=7371
2003-03-26 08:00:24 +00:00
Guy Harris
9f3902270e Put in a comment about the "to what code does the configuration file
directory belong" issue.

svn path=/trunk/; revision=7370
2003-03-26 00:34:27 +00:00
Guy Harris
4fb9c1866b Fix up a comment.
svn path=/trunk/; revision=7369
2003-03-25 23:46:04 +00:00
Guy Harris
97f273f044 Use "datafiledir" rather than "DATAFILE_DIR" as the name of the variable
in the configure script for the all-variables-expanded version of the
data file directory.

Don't AC_SUBST "DATAFILE_DIR", as it's not used.

Define DATAFILE_DIR in config.h as the all-variables-expanded version of
$datadir/ethereal, as that's where the global configuration files such
as manuf and the Diameter files are actually installed.

svn path=/trunk/; revision=7368
2003-03-25 23:37:54 +00:00
Guy Harris
170b802890 DATAFILE_DIR in the top-level config.h isn't used; don't bother defining
it.  (Nothing other than "get_datafile_dir()" should use it - anything
that needs to know whether the configuration files are located should
use "get_datafile_dir()".)

svn path=/trunk/; revision=7367
2003-03-25 23:35:30 +00:00
Guy Harris
a0753c2fd7 There's no need to define "etherealconfdir" - we can just use
"pkgdatadir".

svn path=/trunk/; revision=7366
2003-03-25 23:33:38 +00:00
Guy Harris
1ca0a752aa From Brad Hards: ACAP support.
svn path=/trunk/; revision=7365
2003-03-25 22:30:19 +00:00
Guy Harris
5ea0610a8a Non-void functions must always return a value; the SID snooping tap
listener isn't a GUI tap, so it should always return 0.

svn path=/trunk/; revision=7364
2003-03-25 19:52:56 +00:00
Jörg Mayer
a0b0489617 Update FAQ to 2003-03-20
svn path=/trunk/; revision=7363
2003-03-25 19:22:56 +00:00
Ronnie Sahlberg
cec5c81ac3 Added SMB option : sid_name_snooping.
This feature, when enabled through Edit/preferences/protocols/smb,
will look at certain SMB and CIFS related protocols to discover the
mapping between SIDs and their Names.

For those SIDs whose name has been snooped/discovered ethereal will
also add "(<name>)" to the end of the SID when printed in the tree pane
through the function dissect_nt_sid().

Currently the feature is not too exciting since the only thing that packet-smb-sidsnooping.c will look at to build this mapping table is
replies to the LSA/QueryInfoPolicy infolevel 3  packets and thus
discover mappings between a Domain SID and a Domain Name.
In the near future this future will be enhanced to also look at more interesting calls such as LSA/LookupSIDs2 and similar.

svn path=/trunk/; revision=7362
2003-03-25 09:41:42 +00:00
Guy Harris
2fecf91a17 AIX's BPF, and thus its tcpdump, appears to use 24 as the link-layer
type for loopback devices; map it to DLT_NULL when reading libpcap files
with a major version of 2 and a minor version of 2, and when capturing
from an "loN" device on AIX.

svn path=/trunk/; revision=7361
2003-03-25 06:04:54 +00:00
Richard Sharpe
cb0461411d Fix up the parsing of browser rest messages.
svn path=/trunk/; revision=7360
2003-03-24 16:49:10 +00:00
Gerald Combs
9e6bc56904 Add support for decoding Intel ANS probes. Thanks go to Intel for providing
protocol information.

svn path=/trunk/; revision=7359
2003-03-23 19:32:19 +00:00
Guy Harris
e086394a98 From Jeff Morriss fix:
- endianism issues in most multi-octet parameters
	- the size of pointers to variable and optional parameters in the LUDT
	and LUDTS messages (ITU only)

svn path=/trunk/; revision=7358
2003-03-21 23:05:25 +00:00
Richard Sharpe
dbbfc76654 Add support for the missing ResetBrowserState announcement in
packet-smb-browse.c

svn path=/trunk/; revision=7357
2003-03-21 05:28:04 +00:00
Ronnie Sahlberg
b8e3c33edb change dissect_ndr_wchar_cvstring so that it uses the hf_index the dissector has passed to it and not the generic dcerpc_character_buffer.
we need this to be able to filter for various dcerpc related strings such as lsa.domain

svn path=/trunk/; revision=7356
2003-03-17 09:42:12 +00:00
Ronnie Sahlberg
3cde372091 Turn SIDs into FT_STRING fields so that we can filter for them using
display filters.

svn path=/trunk/; revision=7355
2003-03-17 09:02:49 +00:00
Ronnie Sahlberg
a86693c355 Rename hf_smb_sid to the more appropriate hf_smb_search_id
since we will need hf_smb_sid for the SID string later

svn path=/trunk/; revision=7354
2003-03-17 08:28:56 +00:00
Guy Harris
a3eec5e9c9 From Devin Heitmueller: for packets with an unknown family ID, display
the family ID in hex in the summary line.

svn path=/trunk/; revision=7353
2003-03-14 21:50:19 +00:00
Richard Sharpe
daea30c214 Make sure that we display all the file attributes ...
svn path=/trunk/; revision=7352
2003-03-14 00:46:54 +00:00
Guy Harris
283afef806 From Tomas Kukosa - allow a preference name to begin with the string
that's the name of the module, as long as the prefix doesn't end with
"." or "_" (so you can register "tc.tcp.port" or "tc.tcp_port", but not
"tc.tc.port" or "tc.tc_port").

svn path=/trunk/; revision=7351
2003-03-13 18:17:59 +00:00
Guy Harris
9de14cd339 When fixing up old preferences, check the module for the current
preference by comparing "module->name" against the module, not by
checking the first part of the preference name - the preference name
might not contain the correct module name, as we've mapped some modules.

svn path=/trunk/; revision=7350
2003-03-12 19:45:52 +00:00
Gerald Combs
588b90738a From Todd Montgomery: Bring PGM up to date with RFC 3208:
- checksum checks for all packets (like UDP, IP, TCP, etc.)
                - this includes adding an option to turn off checking
                  it in the preferences menu (like TCP does).
        - POLL packets
        - POLR packets
        - added PGM options:
                - OPT_FRAGMENT
                - OPT_REDIRECT
                - OPT_NAK_BO_IVL
                - OPT_NAK_BO_RNG
        - fixed a minor offset error in SPMs

svn path=/trunk/; revision=7349
2003-03-12 04:04:15 +00:00
Guy Harris
833a75caf7 From Lars Roland: printf fix.
svn path=/trunk/; revision=7348
2003-03-12 00:36:22 +00:00
Guy Harris
ce39f410b8 From Anders Broman: put the message type in the Info column regardless
of whether a protocol tree is being built or not.

svn path=/trunk/; revision=7347
2003-03-12 00:27:00 +00:00
Guy Harris
6239c6f014 From Anders Broman: fix the names of some fields.
svn path=/trunk/; revision=7346
2003-03-12 00:23:52 +00:00
Guy Harris
a601fa2a1c From Andreas Sikkema: remove epan\dfilter\scanner.c, so that it gets
rebuilt on Windows - the UNIX version might include <unistd.h>, which
doesn't work on Windows, so you need to get rid of any UNIX-built
versions.

svn path=/trunk/; revision=7345
2003-03-12 00:11:09 +00:00
Guy Harris
ab84d8be6e Change the version messages to put the "compiled with" stuff on a
separate line, and to put the "running with" info on a separate line
from that, to make the output narrower.

svn path=/trunk/; revision=7344
2003-03-12 00:07:46 +00:00
Guy Harris
50899dad38 When registering a string preference, if the value of the preference is
NULL, convert it to a copy of a null string, otherwise replace it with a
copy of the string, so that we know that the variable for the preference
always points to a string that can be freed.

That also obviates the need to worry about a null-pointer value for a
preference variable when checking to see whether a preference has changed.

When checking for a string preference not being set, check for an empty
string, not a null pointer - the above code turns null pointers into
pointers to empty strings, *and* the GUI code does (and always did!) the
same.

svn path=/trunk/; revision=7343
2003-03-11 23:14:42 +00:00
Guy Harris
569e74a1f3 When registering a string preference, if the value of the preference is
NULL, convert it to a copy of a null string, otherwise replace it with a
copy of the string, so that we know that the variable for the preference
always points to a string that can be freed.

That also obviates the need to worry about a null-pointer value for a
preference variable when checking to see whether a preference has changed.

When checking for a string preference not being set, check for an empty
string, not a null pointer - the above code turns null pointers into
pointers to empty strings, *and* the GUI code does (and always did!) the
same.

svn path=/trunk/; revision=7342
2003-03-11 22:51:52 +00:00
Ronnie Sahlberg
88959c985c Fixed two small bugs in tap_rtp.c
1, specify a tap filter that ignores all ICMP packets
2, specify a tap filter that only matches the same conversation ip/udp
as the selected packet.

svn path=/trunk/; revision=7341
2003-03-11 08:46:26 +00:00
Gerald Combs
75b26f8da3 MSVC++ didn't care for having const ints in its hf subarray indices. Use
#defines instead.

svn path=/trunk/; revision=7339
2003-03-11 01:48:55 +00:00
Gerald Combs
9f3e11091b Update for 0.9.11.
svn path=/trunk/; revision=7338
2003-03-11 00:26:53 +00:00
Gerald Combs
656eb2b35c Bump the version to 0.9.11. Let's hope the goat's blood and hastily carved
idol is enough for the CVS gods.

svn path=/trunk/; revision=7337
2003-03-11 00:12:39 +00:00
Guy Harris
cc77e8abe9 From Stefan Wenk: filterable header fields in SIP dissector.
svn path=/trunk/; revision=7336
2003-03-10 22:33:26 +00:00
Guy Harris
97e701ce15 From Albert Chin: get rid of some C++ comments in C89 code.
svn path=/trunk/; revision=7335
2003-03-10 19:58:47 +00:00
Gerald Combs
b01ee2624c Obscure more email addresses.
svn path=/trunk/; revision=7334
2003-03-10 04:29:13 +00:00
Gerald Combs
30385ffeaf Fix some perldoc warnings and obscure email addresses.
svn path=/trunk/; revision=7333
2003-03-10 04:27:01 +00:00
Guy Harris
cdd02dca54 Use SCSI_DEV_BITS for the bits in the peripheral qualifier/peripheral
device type byte used for the device type.

svn path=/trunk/; revision=7332
2003-03-10 02:18:19 +00:00
Guy Harris
2a848c34ad Have the "Save voice data as..." button in the RTP analysis dialog box
pop up a file selection box with the save options, rather than a dialog
box with the save options, a file name, and a button to click to get the
file selection box.

svn path=/trunk/; revision=7331
2003-03-10 02:09:29 +00:00
Jörg Mayer
9281a04064 Pointer <--> int converions cause warnings on ia64.
Modified a patch originally contained in the SuSE distro
to do the conversions via glib macros.

svn path=/trunk/; revision=7330
2003-03-10 02:06:33 +00:00
Laurent Deniel
dc01cb646b - conversation_get_protocol_data -> conversation_get_proto_data
- miscellaneous typos corrected

svn path=/trunk/; revision=7329
2003-03-09 22:00:26 +00:00
Jörg Mayer
52487949b5 Remove used parameter pinfo from dissect_ser
svn path=/trunk/; revision=7328
2003-03-09 03:19:03 +00:00
Gerald Combs
628be571bd From Markus Friedl: Remove duplicate code in packet-ssh.c.
svn path=/trunk/; revision=7327
2003-03-08 22:15:41 +00:00
Laurent Deniel
96a5616ada The SMPP dissector has a too light heuristic and
it wrongly decodes non SMPP packets.
Check that the overall PDU size is not greater
than 64K before accepting to decode the packet.
Check at least valid as of SMPP v3.4 issue 1.2.

svn path=/trunk/; revision=7326
2003-03-08 14:21:15 +00:00
Jörg Mayer
642d094419 Ruediger Oertel <ro@suse.de>
Fix invalid preprocessor token pasting.

svn path=/trunk/; revision=7325
2003-03-08 11:43:54 +00:00
Guy Harris
4d46ba0a27 If we have <windows.h>, we need to include it to declare OSVERSIONINFO.
Fix some typos.

Put the build number after the "szCSDVersion" value; on NT, that makes
it show up as "Windows {NT x.y,2000,XP,etc.} Service Pack N, build N",
and on OT, it might make it show up as "Windows {95,98,Me} X, build N",
where "X" might be "A" or "B" or something such as that.  (We might want
to omit the space before "szCSDVersion" on Windows OT - I think the
"right" name might be something like "Windows 95B", but I'm not sure.)

svn path=/trunk/; revision=7324
2003-03-08 11:15:49 +00:00
Guy Harris
ad8856029b WTAP_ENCAP_ENC was, in fact, intended for use for DLT_ENC, so just
rename WTAP_ENCAP_ENC0 to WTAP_ENCAP_ENC.

un-#if 0 out the code to handle the value 109 for DLT_ENC, as I've just
checked in support for DLT_ENC in tcpdump.org libpcap and tcpdump, which
maps DLT_ENC to 109 in the file header.

Give packet-enc.c an RCS ID.

svn path=/trunk/; revision=7323
2003-03-08 09:11:53 +00:00
Guy Harris
c6f038a787 Treat the Peripheral Qualifier field the same way we treat the
Peripheral Device Type field, i.e. as a registered field that's a
bitfield with a value_string table.  Give it the correct bitmask.

Fix up some device type names, and add some additional ones from the 25
July 2002 SPC-3 draft.

Correctly adjust the length of the LUN list in the Report LUNs response
(subtract 8 from the payload length before comparing, don't subtract 8
from the resulting length after comparing and adjusting), and rename the
variable to reflect the fact that it's a length in bytes, not a number
of LUNs.

svn path=/trunk/; revision=7322
2003-03-08 08:02:20 +00:00
Guy Harris
0b1702c359 The time deltas are for AFS, not ONC RPC.
svn path=/trunk/; revision=7321
2003-03-08 07:27:41 +00:00