Calling proto_tree_add_int_format() with a unsigned value can cause dissection
failure. Correctly switched to proto_tree_add_uint_format().
svn path=/trunk/; revision=26827
1) do more work when tree is NULL, otherwise data desegmentation doesn't work.
2) set desegment_len to DESEGMENT_ONE_MORE_SEGMENT rather than 1 when searching
for end of line.
3) set frame_data->pdu_type for STARTTLS cmd and use se_alloc0 rather than
se_alloc
4) restore pinfo can_desegment to saved_can_desegment or ssl can't desegment
packets.
5) move TLS call before searching for cmd. It doesn't deal with rejected TLS
negotation. Not hard to do but I haven't a capture, it anyone can share one.
svn path=/trunk/; revision=26826
Add support for TightVNC extensions to the VNC dissector.
It has the following changes:
- Dissect TightVNC negotiation (tunneling, basic authentication, capabilities).
- Dissect X cursor encoding.
- Dissect POINTER_POS encoding.
- Dissect the general form of Tight rectangles.
- Dissect Tight image data (basic compression, JPEG, gradient).
- Handle LastRect encoding.
- Fix some always-true conditions.
- Some code cleanups.
svn path=/trunk/; revision=26825
I have restructured the old code, pushed both IPv4 and IPv6 into the same
codepath and put each OLSR message into a subtree of it's own.
In addition to this the new dissector supports the custom message types of the
NRL-OLSR and Olsr.org implementation (the custom messages are used for
linkquality support and nameservices). The optional messages can be switched of
in the OLSR preferences page.
svn path=/trunk/; revision=26823
The code in wiretap/wtap.c is not right. Because g_array_append_val should accept a value
of type 'struct encap_type_info' rather than a pointer to this type.
svn path=/trunk/; revision=26816
I've extended the AIM dissector with the information available from http://dev.aol.com/aim/oscar .
I've verified most of the additions by sniffing my iChat (OSX 10.4) data traffic.
svn path=/trunk/; revision=26813
This patch allows the ModbusTCP dissector (packet-mbtcp.c) to decode ModbusUDP packets. Essentially this is the same packets over UDP instead of TCP.
ModbusUDP isn't an official part of the ModbusTCP specification but used by several vendors.
svn path=/trunk/; revision=26812
Do not let the generated TCP Analysis Flags get all TCP bytes.
Point the hidden TCP Segment Len to the header length byte.
svn path=/trunk/; revision=26806