Commit Graph

5942 Commits

Author SHA1 Message Date
Jörg Mayer 6bad27d387 Add new dissector by Brian Bruns for the TDS protocol with the
following changes:

- Inserted packet-tds.h This is personal taste because of the many
  files in the toplevel directory. Whoever works on this next is
  free of course to separate it back out again.
- Removed unused includes sys/types.h, snprintf.h, netinet/in.h
- #if-0 unused function
- Removed duplicate define
- Declared all unused parameters as such
- Changed a // comment into /* */
- ifdef-DEBUG a printf statement

svn path=/trunk/; revision=6025
2002-08-19 21:33:29 +00:00
Jörg Mayer bcf1b43dee Fixups after replacement of ethereal.nsi.in by ethereal.nsi
svn path=/trunk/; revision=6024
2002-08-19 21:29:53 +00:00
Jörg Mayer f77acd189f Add a plain text version of the FAQ to the source package.
svn path=/trunk/; revision=6023
2002-08-19 21:22:57 +00:00
Jun-ichiro itojun Hagino ae47e6ed2e dissect LLMNR (formerly known as mDNS) on tcp/udp port 5353.
svn path=/trunk/; revision=6022
2002-08-19 16:02:45 +00:00
Gerald Combs 42427f21a7 Add COMMON_FILES_GNU definition.
svn path=/trunk/; revision=6021
2002-08-19 15:55:43 +00:00
Gerald Combs 6565c486b9 From Ulf Lamping:
Generalize paths and get rid of sed-dependent ethereal.nsi.in.

Remove ethereal.nsi.in, and re-add ethereal.nsi with Ulf's changes.
Modify Makefile.nmake to use it.

Note:  You'll have to add "COMMON_FILES_GNU" path to your config.nmake
that points to a directory with all of Ethereal's required DLLs.

Be obnixious and set "SetShellVarContext all" so that we install for
every user, like most standard Windows apps.

svn path=/trunk/; revision=6020
2002-08-19 15:48:28 +00:00
Guy Harris c1c4eef87d Fix the reporting of the "PS" bit in SCSI mode pages.
For unknown mode pages, make the "Unknown Page" tree item not include
the page code and length, as those were put into the tree already - have
it just include the contents of the page.

For MODE SELECT, use the supplied payload length rather than the mode
data length, as the mode data length is reserved in MODE SELECT (it's
implied by the total data length; in MODE SENSE, the CDB contains the
buffer size, but the target can return fewer bytes than that, so the
mode data length is meaningful).

Add additional checks of the remaining data length when parsing MODE
SELECT and MODE SENSE, and fix up the checks that were there already.

The density code comes *before* the number of blocks in a block
descriptor, and the number of blocks and block length are 3 bytes long
for both the 6-byte and 10-byte versions of MODE SELECT and MODE SENSE.

svn path=/trunk/; revision=6019
2002-08-19 13:06:43 +00:00
Guy Harris a57f7e942a When processing "i" and "a" tags, check only whether we've seen an "m"
tag or not - if we haven't, "i" is "session info" and "a" is "session
attribute", and if we have, "i" is "media title" and "a" is "media
attribute".

svn path=/trunk/; revision=6018
2002-08-19 12:57:12 +00:00
Guy Harris 1ae796de00 Limit the parameter and data tvbuffs to the actual number of bytes of
parameter and data, so the LANMAN RAP pipe dissector, for example,
doesn't get confused and think there is an auxiliary data descriptor in
the parameters when there isn't.

Note that in at least one Negotiate Protocol reply it looks as if a
Unicode domain name might've been aligned.

svn path=/trunk/; revision=6017
2002-08-19 10:53:21 +00:00
Gerald Combs c85e945784 Tweak the Solaris/SVR4 packaging a bit. Change "make install-strip" to
"make install"; even though the resulting files are huge it's probably better
to have the debugging symbols intact.  Set file and directory permissions in
/usr/local to match those in /usr.

svn path=/trunk/; revision=6016
2002-08-18 20:42:13 +00:00
Guy Harris 868c88686f If the length of a string is zero, don't put it into the protocol tree.
Handle the case where "get_unicode_or_ascii_string()" returns a null
pointer (which can be the case if the length supplied is zero, which we
check for as per the above, but can also be the case for a Unicode
string if the length supplied is 1 byte).

Fix a call to "proto_tree_add_uint()" that was presumably supposed to be
a call to "proto_tree_add_item()".

svn path=/trunk/; revision=6015
2002-08-18 20:33:47 +00:00
Guy Harris 0f3a02c956 From Bill Studenmund: fix handling of SCSI mode sense.
Fix Yasuhiro Shirasaki's e-mail address, and [AT]ify Vassilii
Khachaturov's address.

svn path=/trunk/; revision=6014
2002-08-18 19:59:40 +00:00
Guy Harris d487e4f968 From Yaniv Kaul:
1. Proper extraction of data from packet (removed bad
	   tvb_get_ptr() and casting the resulting pointer to a
	   structure method).

	2. Printout of Initator and Responder cookies (per request from
	   VPNC organization).

svn path=/trunk/; revision=6013
2002-08-18 19:19:46 +00:00
Guy Harris 14cff7ceba From Vassilii Khachaturov: put protocol blurbs into tables generated
with the "-G fields" flag.

In the scripts to process that output, handle FT_UINT64, FT_INT64, and
FT_UINT_STRING.

svn path=/trunk/; revision=6012
2002-08-18 19:08:30 +00:00
Gerald Combs 50dfd3eb31 From ENDOH Akira:
- displaying PPP datalink layer protocol names based on iana database:
    http://www.iana.org/assignments/ppp-numbers
- dissecting MPLSCP and CDPCP
- dissecting CDP over PPP

svn path=/trunk/; revision=6011
2002-08-18 15:30:38 +00:00
Ronnie Sahlberg 17e72016ac Changed two ulong REF pointers to just calle the uint32 dissector
directly instead of through a top level ref pointer
and changed the hf field to the proper one.

svn path=/trunk/; revision=6010
2002-08-18 07:24:42 +00:00
Ronnie Sahlberg d8d551c7ed Fix some incorrect poitner types. From Jean-Francois Micouleau
svn path=/trunk/; revision=6009
2002-08-18 07:18:55 +00:00
Ronnie Sahlberg a1c846ba48 Reverted part of the previous patch. It seemed we found a few too many
packets to display the ACK data for.

svn path=/trunk/; revision=6008
2002-08-17 22:26:00 +00:00
Michael Tüxen d38d643891 Fixed a typo in the table and reformatted it..
svn path=/trunk/; revision=6007
2002-08-17 18:38:41 +00:00
Gerald Combs 5a579fc0b5 Bump the version number to 0.9.6. Update the ChangeLog. Add rough
release notes to NEWS.

svn path=/trunk/; revision=6006
2002-08-17 17:53:33 +00:00
Tim Potter 9def43e0be Ronnie, I think you forgot to commit this file.
svn path=/trunk/; revision=6005
2002-08-17 03:24:43 +00:00
Ronnie Sahlberg 986d3d4a03 Added new function name LogonSamLogonEx
svn path=/trunk/; revision=6004
2002-08-17 00:45:03 +00:00
Ronnie Sahlberg 4d4df14ace Fixed incorrect NDR pointer type in Authenticate3
svn path=/trunk/; revision=6003
2002-08-17 00:35:46 +00:00
Tim Potter a8030c39d9 Convert some of the all caps names to more friendly names.
svn path=/trunk/; revision=6002
2002-08-16 22:24:07 +00:00
Ronnie Sahlberg 12a0b53183 Fixed bug not handling FIN pakcets properly.
Fixed another tiny bug where it would forget to check ACKs outside the window
sometimes.

svn path=/trunk/; revision=6001
2002-08-16 20:59:18 +00:00
Guy Harris c58356d62a Updates from Motonori Shindo.
svn path=/trunk/; revision=6000
2002-08-16 00:41:39 +00:00
Guy Harris 346fbdbc39 LDP VC FEC dissection fix, from Motonori Shindo.
svn path=/trunk/; revision=5999
2002-08-15 19:04:16 +00:00
Guy Harris e31383db8e From Jian Yu:
a small fix for displaying unrecognized capabilities;

	ORF support (draft-ietf-idr-route-filter-06.txt).

svn path=/trunk/; revision=5998
2002-08-15 18:52:04 +00:00
Jörg Mayer c8d296e8ca Add AC_LIBTOOL_DLOPEN back, because older automake/autoconf versions
don't include it automatically. This needs to go before AC_PROG_LIBTOOL
to avoid warnings with newer versions.

svn path=/trunk/; revision=5997
2002-08-15 12:10:56 +00:00
Tim Potter ffa66bc078 Don't free a tvb that we add as a new data source. The NTLMSSP over
HTTP now works a treat!

Thanks again to Guy for the tip.

svn path=/trunk/; revision=5996
2002-08-14 23:34:20 +00:00
Guy Harris d939032a24 From Tomas Kukosa: add some more routines to the plugin API.
While we're at it, add "extern" to a bunch of function declaration the
preceding change *didn't* require to have the "extern" added.

svn path=/trunk/; revision=5995
2002-08-14 19:18:20 +00:00
Guy Harris eada2368f4 CPHA support, from Yaniv Kaul.
svn path=/trunk/; revision=5994
2002-08-14 18:48:16 +00:00
Jörg Mayer e8a4485af4 Sort .cvsignore alphabetically and add libtool where missing.
svn path=/trunk/; revision=5993
2002-08-14 14:45:54 +00:00
Jörg Mayer cd5eb3cb8e Replace usage of AC_PROG_RANLIB which is deprecated for newer versions
of autoconf by AM_PROG_LIBTOOL

svn path=/trunk/; revision=5992
2002-08-14 14:42:42 +00:00
Tim Potter 51e4328d8e Fixed memory leak in creation of new tvb for ntlmssp data.
Call tvb_set_child_real_data_tvbuff() and add_new_data_source() to fix
the display problem when dissecting ntlmssp over http packets.  It
works better now, but for some reason the ntlmssp challenge packet is
still not displayed correctly.

Thanks to Guy for the tips.

svn path=/trunk/; revision=5991
2002-08-14 00:40:14 +00:00
Guy Harris da901e7434 Not all compilers allow labels that don't have a statement following
them.  Put a "break;" statement after a case label that didn't have it.

svn path=/trunk/; revision=5990
2002-08-13 18:12:11 +00:00
Guy Harris 8098166c75 "base64_decode()" returns a "size_t", so make the variable to which that
return value is assigned a "size_t".  (For some reason, the file fails
to compile with MSVC++ 6.0, due to "ssize_t" not being defined, if it's
an "ssize_t", but works if it's a "size_t".)

svn path=/trunk/; revision=5989
2002-08-13 09:10:02 +00:00
Guy Harris deb5c457a2 Get rid of a commented-out #include.
svn path=/trunk/; revision=5988
2002-08-13 09:03:23 +00:00
Tim Potter 5770e384a0 The unknown uint32 in create user2 reply is an access granted mask.
Assign some names to policy handles generated by open/create domain/user/group.

svn path=/trunk/; revision=5987
2002-08-13 07:59:33 +00:00
Guy Harris 053891e609 On Win32:
don't show "Command" and "File" as printer options, show
	"Printer" and "File";

	don't show the command to be used for printing.

svn path=/trunk/; revision=5986
2002-08-13 07:54:37 +00:00
Tim Potter a82851086b Display the protocol name for the UUID in the COL_INFO field if we
know it.  This reduces clutter in the top pane considerably.

svn path=/trunk/; revision=5985
2002-08-13 07:25:36 +00:00
Tim Potter c81559ffa3 Oops - forgot to remove debugging printf.
svn path=/trunk/; revision=5984
2002-08-13 05:38:04 +00:00
Tim Potter 510b3b73d7 Call the NTLMSSP dissector when we detect NTLMSSP over HTTP. This is
somewhat documented at http://www.innovation.ch/java/ntlm.html and
other places.

Ethereal handles it nicely, although the hex dump pane gets confused
because we create a new tvb containing base64 decoded data from the
HTTP header.  The hex dump thinks we are still looking at the data
from the packet.  I'm not sure how to fix this.

svn path=/trunk/; revision=5983
2002-08-13 05:36:02 +00:00
Guy Harris 77bb2477ba Get rid of the "vpi" and "vci" arguments to "atm_guess_traffic_type()",
have it get that information from the pseudo-header instead, and set the
VPI and VCI fields in the pseudo-header before calling it.

Don't call it for non-ATM NetMon captures.

svn path=/trunk/; revision=5982
2002-08-13 03:32:57 +00:00
Guy Harris 8616a33765 Use "atm_guess_traffic_type()" to guess the ATM traffic type for ATM
NetMon captures.

svn path=/trunk/; revision=5981
2002-08-13 03:26:30 +00:00
Ronnie Sahlberg 159e4ff083 Added server name to negprot reply and fixed a pointer deferral problem.
svn path=/trunk/; revision=5980
2002-08-13 02:14:39 +00:00
Guy Harris c67f736679 The name "interface" causes compilation problems with MSVC++; use
"interface_name" instead.

svn path=/trunk/; revision=5979
2002-08-11 22:34:55 +00:00
Ronnie Sahlberg 93164e3978 Changed some incorrect pointer types. MS interfaces seems never to use PTR
pointers.

svn path=/trunk/; revision=5978
2002-08-11 14:08:08 +00:00
Guy Harris 5c4e8e546d Add a terminator to the ntlmssp_message_types list.
svn path=/trunk/; revision=5977
2002-08-10 23:16:37 +00:00
Guy Harris 2cfb231081 From Devin Heitmueller: dissect NTLMSSP authentication messages, and handle
the flags field in NTLMSSP messages as a 32-bit field.

Make "get_unicode_or_ascii_string()" take a "Unicode or not" flag rather
than a "packet_info *" as an argument, make it not static, and move it
to "packet-smb-common.c", so that it can be used by the SMB dissector
and the NTLMSSP dissector.  Also get rid of some _U_'s that are applied
to arguments that are, in fact, used.

svn path=/trunk/; revision=5976
2002-08-10 21:15:37 +00:00