Commit graph

991 commits

Author SHA1 Message Date
Guy Harris
1a7b3ec143 From Susanne Edlund: filter on NRI values in BSSGP.
svn path=/trunk/; revision=13595
2005-03-05 04:58:13 +00:00
Guy Harris
001b5aaba6 From Chris Waters: correct an error with the decoding of signal
strength information in 802.11 captures.

svn path=/trunk/; revision=13594
2005-03-05 01:03:22 +00:00
Guy Harris
5ba3adf134 Omit some stuff when building without a Kerberos library, as it's unused
if you don't have a Kerberos library to do decryption.

svn path=/trunk/; revision=13593
2005-03-05 01:00:15 +00:00
Michael Tüxen
10edbd81c3 Enable details in protocol tree by default like TCP and UDP.
svn path=/trunk/; revision=13592
2005-03-05 00:51:33 +00:00
Lars Roland
e434150f99 fix kerberos dissector for those having no kerberos decryption
svn path=/trunk/; revision=13591
2005-03-05 00:21:46 +00:00
Ronnie Sahlberg
413deb9130 from Carlos Pignataro
update MPLS to support MPLS Echo



svn path=/trunk/; revision=13590
2005-03-04 22:32:06 +00:00
Ronnie Sahlberg
7671b98bac make kpasswd privide subdissectors to handle the user-data field for the KRB_PRIV structure for kpasswd requests and replies.
decrypt and behold the new password in plaintext in all its glory
(given you have the keytab with the old one of course)


svn path=/trunk/; revision=13586
2005-03-04 13:39:15 +00:00
Ronnie Sahlberg
6fec8dca5f some authentication stuff from metze
svn path=/trunk/; revision=13584
2005-03-04 12:28:00 +00:00
Ronnie Sahlberg
2f4cb22585 make ethereal able to decrypt KRB_PRIV which kpasswd uses
svn path=/trunk/; revision=13583
2005-03-04 12:21:40 +00:00
Ronnie Sahlberg
bb77a3224f the unknown stuff in the decrypted blobs in mapi are just uninitialized buffer padding so dont show them in the decode tree
svn path=/trunk/; revision=13582
2005-03-04 11:08:03 +00:00
Luis Ontanon
5ef5e77434 From Francisco Alcoba,
do not look for data blocks in ACK packets


svn path=/trunk/; revision=13581
2005-03-03 13:59:52 +00:00
Guy Harris
fa7eb4fdeb From Anders Broman: fix a fault in the CODEC LIST routine where offset
was wrongly calculated, and clean up some other miscellaneous stuff.

svn path=/trunk/; revision=13580
2005-03-03 10:23:29 +00:00
Guy Harris
8ff4e8160e Oops, forgot packet-idp.h.
svn path=/trunk/; revision=13579
2005-03-03 09:36:19 +00:00
Guy Harris
0de93bd590 From Yuriy Sidelnikov: correctly display User Information
field in release request/response PDu if the Reason field
is absent.

svn path=/trunk/; revision=13578
2005-03-03 08:54:00 +00:00
Guy Harris
282080e26d Add support for what appears to be 3Com's scheme for encapsulating XNS
over Token Ring (and presumably other link layers using 802.2 LLC), and
for the XNS IDP and SPP protocols.

svn path=/trunk/; revision=13577
2005-03-03 08:34:48 +00:00
Guy Harris
439a65b82f Use "tvb_get_string()" to fetch strings from the packet, rather than
filling up a fixed-length buffer.

Add a bunch of length checks.

Clean up indentation.

svn path=/trunk/; revision=13574
2005-03-02 21:08:47 +00:00
Anders Broman
7cb9e36324 Present diameter time as UTC time rather than the local time zone of the machine running Ethereal is at.
Insert a comment that time before 1970 will not be presented properly.

svn path=/trunk/; revision=13573
2005-03-02 20:16:18 +00:00
Guy Harris
e84c3d927c Handle the CRC correctly:
don't do it if we don't have the entire packet, including the
	CRC value;

	fetch the CRC value from the packet with tvb_get_letoh24(),
	and compare that against the computed CRC, rather than comparing
	the computed CRC (presumably in host byte order) with the
	little-endian CRC in the packet (that doesn't work if host byte
	order is big-endian).

svn path=/trunk/; revision=13571
2005-03-02 00:21:33 +00:00
Guy Harris
bb7d0d43e8 Set the svn:keywords and svn:eol-style properties appropriately, and
give it an RCS ID.

svn path=/trunk/; revision=13568
2005-03-01 21:47:54 +00:00
Luis Ontanon
ecea5fac96 In packets with more than one req/resp the items of all the req/resp subtrees always pointed to the offset of the first req/resp.
svn path=/trunk/; revision=13564
2005-03-01 11:37:26 +00:00
Ronnie Sahlberg
175815e0fe If errorrecoverylevel==0 is used and the A bit is clear in a DataIn PDU
the iscsi layer will not hold the LUN value (it is reserved)
so we need to remember if from the initial Command PDU.

make the LUN reporting work for errorrecoverylevel==0 targets


svn path=/trunk/; revision=13563
2005-03-01 10:09:53 +00:00
Guy Harris
dfc51396ee Show NTP times correctly.
svn path=/trunk/; revision=13562
2005-03-01 06:32:56 +00:00
Guy Harris
fc96a5d5f3 Show NTP times in a fashion more similar to that used for other times.
svn path=/trunk/; revision=13561
2005-03-01 06:04:31 +00:00
Guy Harris
cfb9cf0129 Show NTP times correctly.
svn path=/trunk/; revision=13560
2005-03-01 06:03:08 +00:00
Luis Ontanon
88ffe08066 even if unharmful, this was simply ugly.
change

do {
 if (i == 0) break;
 ...
} while (i);

for a propper

while(i) {
 ...
}


svn path=/trunk/; revision=13557
2005-02-28 22:39:03 +00:00
Luis Ontanon
d018dcf663 few changes to http
- stat_infos are mantained in a GPtrArray to avoid leaking and overwriting them
- added http_host and request_uri to http_info_value_t 


svn path=/trunk/; revision=13555
2005-02-28 22:27:24 +00:00
Anders Broman
aae42374bc Change the RADIUS ATTRIBUTES for some 3GPP AVP:s to display them as (UTF8)Strings, also
added some more AVP:s from a later spec.

svn path=/trunk/; revision=13554
2005-02-28 20:51:23 +00:00
Anders Broman
3167213f5d Undo change of return (addVendor(atoi(id), code, name)); as it wasn't correct.
svn path=/trunk/; revision=13553
2005-02-28 20:49:34 +00:00
Anders Broman
e09fcce637 Correct presentation of IMSI digits and highlight correct bytes.
svn path=/trunk/; revision=13552
2005-02-28 20:48:23 +00:00
Guy Harris
daf2a17826 Add a link to an RX spec, and ask whether the Epoch really should be
dissected as a UN*X time.

svn path=/trunk/; revision=13551
2005-02-28 19:47:46 +00:00
Guy Harris
6421106005 Fix capitalization.
svn path=/trunk/; revision=13549
2005-02-28 09:21:59 +00:00
Anders Broman
e18e3db225 Avoid trying to display a time before 00:00:00 UTC, January 1, 1970 as it currently will be displayed wrongly.
svn path=/trunk/; revision=13542
2005-02-27 21:33:32 +00:00
Luis Ontanon
36833b76d8 From Stefano Pettini
1) added _U_ tags in RMT dissectors to suppress "unused parameter" warnings.

2) added a dissector_add_handle("ip.udp", ip_handle) to IP dissector, to
allow the following chain of protocols: IP over UDP over IP. It seems
uncommon, but it's used by implementations of experimental protocols
(e.g. TCP-XM) that run a userspace IP stack (e.g. lwIP) over UDP. The
dissector of IP over UDP must be enabled explicitly using the "decode
as..." window.



svn path=/trunk/; revision=13540
2005-02-27 20:26:55 +00:00
Guy Harris
5639b87daf The Kerberos-over-UDP dissector can decide not to dissect packets, so it
needs to be a new-style dissector and explicitly reject them so that
other dissectors can pick them up.

svn path=/trunk/; revision=13528
2005-02-26 00:14:22 +00:00
Guy Harris
c68bde2e82 The Kerberos 4 dissector is now a dissector that can reject packets, so
register it with "new_register_dissector".

svn path=/trunk/; revision=13527
2005-02-25 23:47:21 +00:00
Ronnie Sahlberg
9087bf8e45 start dissecting serviceactionin16
svn path=/trunk/; revision=13523
2005-02-25 23:03:24 +00:00
Michael Tüxen
a88d115a38 Show prot numbers in protocol tree, if wanted. Suggested by Jeff Morris.
svn path=/trunk/; revision=13518
2005-02-25 21:03:48 +00:00
Michael Tüxen
22012f92d0 Add higher SI values.
svn path=/trunk/; revision=13517
2005-02-25 20:33:28 +00:00
Ronnie Sahlberg
7f86cffa58 add support to call krb4 for suspected krb4 stuff soming in on udp port 88
weirdo krb4 implementations apparently do this.


svn path=/trunk/; revision=13516
2005-02-25 11:38:56 +00:00
Ronnie Sahlberg
4a338216da pinfo->private_data was a quite subptimal idea
change the decodeas for dcerpc so that it actually works again for dcerpc over smb



svn path=/trunk/; revision=13515
2005-02-25 10:30:21 +00:00
Anders Broman
3d0fbb8c63 Dissect MTP3 with service indicator 14 as H248.
svn path=/trunk/; revision=13505
2005-02-24 22:36:26 +00:00
Anders Broman
58c8e8a720 From Ben Turner:
Vendors were not being parsed properly from the XML diameter dictionary.

svn path=/trunk/; revision=13504
2005-02-24 22:35:10 +00:00
Jörg Mayer
761804b15e Add some minor Cisco proprietary stuff (hostname, network-eap)
svn path=/trunk/; revision=13495
2005-02-24 07:19:42 +00:00
Guy Harris
cb1e20b79c Clean up white space.
"decode_boolean_bitfield()" returns a "const char *" - don't cast it to
a "gchar *" and modify what it points to.  Instead, just use
"other_decode_bitfield_value()".

svn path=/trunk/; revision=13494
2005-02-24 05:45:15 +00:00
Guy Harris
2b4bd5d16a Not everything that uses "capture_eth()" includes "capture.h" (the ATM
dissector, for one).

svn path=/trunk/; revision=13493
2005-02-24 05:42:51 +00:00
Anders Broman
b7b5db354e fix some asn2eth warnings
svn path=/trunk/; revision=13486
2005-02-23 23:14:42 +00:00
Anders Broman
544d47560a Add dissection of packet tdmc
svn path=/trunk/; revision=13484
2005-02-23 23:12:48 +00:00
Ronnie Sahlberg
fbf762bda5 update asn2eth and all generated dissectors to new dissect_ber_boolean that takes a implicit_tag parameter
svn path=/trunk/; revision=13479
2005-02-23 08:57:47 +00:00
Ronnie Sahlberg
55bd0f9bbb fix printout of length of ndmp pdu
svn path=/trunk/; revision=13478
2005-02-23 08:38:18 +00:00
Gerald Combs
105e5bd617 Add request URI and Version fields. Add a question about fixing a memory leak.
svn path=/trunk/; revision=13475
2005-02-23 05:47:17 +00:00
Ulf Lamping
3cc6dc3b90 fix usage of "if(tree) {" to display the right things, even if no coloring rule is set
svn path=/trunk/; revision=13471
2005-02-22 20:25:23 +00:00
Ulf Lamping
76c32eb945 added IEEE 802.1 Link Layer Discovery Protocol (LLDP) to the ethertypes, but sorry, no dissector (yet?)
svn path=/trunk/; revision=13460
2005-02-21 20:19:15 +00:00
Ulf Lamping
2f836c20a8 fix a typo: lenght -> length
This seems to be a "more common" typo, fixed it 13 times throughout the code ...

svn path=/trunk/; revision=13452
2005-02-20 22:36:34 +00:00
Jörg Mayer
ecce686381 Add packet-rdt.h to DISSECTOR_INCLUDES
svn path=/trunk/; revision=13436
2005-02-20 04:17:17 +00:00
Luis Ontanon
bec15c6a45 modify eol-style property
svn path=/trunk/; revision=13434
2005-02-20 01:58:29 +00:00
Luis Ontanon
f18141e49b From Martin Mathielson
RDT (Realplayer Data Protocol) dissector and patch RTSP to create RDT conversations

svn path=/trunk/; revision=13431
2005-02-19 22:43:38 +00:00
Ronnie Sahlberg
99507223d9 usage of tcp_dissect_pdu is broken
comment it out to stop it from dumping core.
jxta people will have to fix this properly later.



svn path=/trunk/; revision=13426
2005-02-18 21:19:01 +00:00
Luis Ontanon
1e8a726aad do not prototype capture_eth() unless capture.h has being included
svn path=/trunk/; revision=13425
2005-02-18 20:19:52 +00:00
Ronnie Sahlberg
84f16e153c minor prettification
svn path=/trunk/; revision=13421
2005-02-17 20:56:47 +00:00
Ronnie Sahlberg
93e2089ed2 pass lun (and status) to scsi subdissector so we can filter
on scsi.lun   and prettify the summary line a bit.

ndmp still needs some work to track luns between commands
and fcp needs verification it works for volumesetaddressing.



svn path=/trunk/; revision=13420
2005-02-17 12:07:45 +00:00
Anders Broman
60ffea9d7a Add some of the anytime operations.
svn path=/trunk/; revision=13418
2005-02-16 22:44:15 +00:00
Ronnie Sahlberg
d525ccb6f9 preparations for autogenerated ms dcerpc interfaces
make it possible to prettify SIDs and control how and where their string representation should be shown in the summary line and the tree
similar to how counted_strings prettification can be controlled


svn path=/trunk/; revision=13413
2005-02-16 11:31:56 +00:00
Ronnie Sahlberg
8851ebc541 mark the frame opened/closed fields for policy handles as GENERATED fields
svn path=/trunk/; revision=13412
2005-02-16 10:25:00 +00:00
Ronnie Sahlberg
237a5e197c add simple check that if a hf_rename field has not been referenced by the idl/cnf files then it is likely the conformance file has become stale and needs updating. abort with an error message.
svn path=/trunk/; revision=13411
2005-02-16 10:11:26 +00:00
Ronnie Sahlberg
1d8e70b969 add extra sanity check.
dont match a request with a reply that came earlier in the trace or SRT will
look funny :-)



svn path=/trunk/; revision=13409
2005-02-16 00:19:52 +00:00
Ronnie Sahlberg
e8a4830bad new protocol from Giles Scott : Retix spanning tree protocol
svn path=/trunk/; revision=13408
2005-02-15 21:01:51 +00:00
Guy Harris
17f296c66f Add the missing packet-dcerpc-budb.h to the list of header files, so it
goes into the source tarball.

svn path=/trunk/; revision=13405
2005-02-15 01:42:39 +00:00
Guy Harris
bfb29e9e84 Fix some compiler warnings (at least one of which is for a real problem).
svn path=/trunk/; revision=13404
2005-02-14 22:07:26 +00:00
Guy Harris
6616a3770c Make the "maintainer-clean" rules get rid of some additional generated
files.  Do this with GENERATED_HEADER_FILES, GENERATED_C_FILES, and
GENERATED_FILES macros in Makefile.common files, along the lines of what
wiretap/Makefile.common has.

Clean up "*~" files with "make clean" rather than only "make distclean"
in some additional places.

Add "maintainer-clean" rules to the Makefile.nmake files, paralelling
the ones in the automake-generated Makefile.in files, using the
GENERATED_FILES macros from Makefile.common files.  In some cases, move
the cleanup of files from "make distclean" to "make maintainer-clean",
and in other cases, put in a comment indicating why we're not doing that
(because some files that are distributed in the source tarballs, namely
Flex output, were built with a UN*X Flex and won't compile on Windows,
so we get rid of them with "make distclean" so you can clean up stuff
that *has* to be re-generated for Windows).

Clean up some *CLEANFILES definitions - get rid of ones that no longer
apply as files were moved or that add to the definition a name that's
already there.

svn path=/trunk/; revision=13402
2005-02-14 20:33:57 +00:00
Ronnie Sahlberg
b4b5a4776f add machinegenerated full dissector for dcedfs BUDB protocol
svn path=/trunk/; revision=13401
2005-02-14 19:56:11 +00:00
Ronnie Sahlberg
48ffe7c894 make idl-lite compiler handle varying arrays
svn path=/trunk/; revision=13400
2005-02-14 19:46:03 +00:00
Ronnie Sahlberg
1c644d6ff7 add support for varying arrays
svn path=/trunk/; revision=13399
2005-02-14 19:43:34 +00:00
Ronnie Sahlberg
9378b4f6b4 in sack options only look for tcp session metadata if both tcp_analysis and tcp_relative preferences are set. relative depends on analysis
svn path=/trunk/; revision=13398
2005-02-14 19:34:59 +00:00
Anders Broman
f687d089de Add some more V3 opcodes
svn path=/trunk/; revision=13396
2005-02-14 16:20:58 +00:00
Anders Broman
f19ce95547 From :Tim Endean correct conditions for a while loop.
svn path=/trunk/; revision=13395
2005-02-14 08:21:14 +00:00
Luis Ontanon
1704803382 From Venna, Nagarjuna:
add support for RTCP-XR as specified in RFC 3611 

svn path=/trunk/; revision=13390
2005-02-13 03:41:44 +00:00
Anders Broman
d685e466d9 Add a part of the previous patch that didn't apply.
svn path=/trunk/; revision=13388
2005-02-12 21:36:56 +00:00
Anders Broman
df00c9604f GMM/SM:
- Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft

svn path=/trunk/; revision=13387
2005-02-12 21:35:01 +00:00
Anders Broman
37a96cbad0 From Rene Pilz :
BSSGP:
   - Does not dissect the LLC-PDU twice

LLC:
- Add CRC calculation to differ between ciphered and non-ciphered packets without taking care about the encryption bit.
This solves crashes when the option "ignore ciphere bit" was activated


GMM/SM:
   - Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft)

svn path=/trunk/; revision=13386
2005-02-12 21:20:38 +00:00
Anders Broman
e42caa3d55 From Rene Pilz :
BSSGP:
   - Does not dissect the LLC-PDU twice

LLC:
- Add CRC calculation to differ between ciphered and non-ciphered packets without taking care about the encryption bit.
This solves crashes when the option "ignore ciphere bit" was activated


GMM/SM:
   - Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft)

svn path=/trunk/; revision=13385
2005-02-12 21:20:01 +00:00
Anders Broman
00d977fa41 Dissect Return error and some more operationcodes.
svn path=/trunk/; revision=13384
2005-02-11 22:44:09 +00:00
Gerald Combs
4acd84cd85 From Nicolas Dichtel via Vincent Jardin:
Print a couple of missing fields.

svn path=/trunk/; revision=13379
2005-02-10 16:24:12 +00:00
Guy Harris
a82419745d Add a hack to set "reversed" and "circuit" in code paths where it wasn't
getting set.  The hack needs to be replaced by code that does the right
thing.

Fix indentation.

svn path=/trunk/; revision=13374
2005-02-10 08:07:44 +00:00
Guy Harris
5ae67eb010 Remove an extra /*, some unused variables, and an unneeded include (INAP
currently has no taps).

svn path=/trunk/; revision=13371
2005-02-10 03:19:59 +00:00
Lars Roland
338bda08bd clean up makefiles.
especially /trunk/Makefile.nmake doesn't have to include
/trunk/epan/Makefile.common anymore.

svn path=/trunk/; revision=13368
2005-02-10 01:26:19 +00:00
Lars Roland
ec9ca01616 Move the following files from /trunk to /trunk/epan:
asn1.[ch]
follow.[ch]
ptvcursor.[ch]
reassemble.[ch]
xmlstub.[ch]

fix #include statements accordingly.

svn path=/trunk/; revision=13366
2005-02-09 23:38:00 +00:00
Anders Broman
e8f8e851c0 From Tim Endean: INAP dissector.
svn path=/trunk/; revision=13364
2005-02-09 22:35:49 +00:00
Anders Broman
60e1e4cd04 Fix dissection of some opcodes etc.
svn path=/trunk/; revision=13361
2005-02-09 21:55:55 +00:00
Guy Harris
8f265808fb From Deepak Jain: add support for some Cisco L2TPv3 AVPs, always show
the numerical value of the pseudowire type, and show the Remote End ID
AVP as text rather than binary data.

svn path=/trunk/; revision=13359
2005-02-09 09:25:54 +00:00
Lars Roland
186683631f use "guint" instead of "uint".
"uint" is not available on Windows

svn path=/trunk/; revision=13357
2005-02-08 21:12:54 +00:00
Guy Harris
83c47dc3d6 From Jon Ringle: add a preference to allow packets with an RTP version
of 0 to be dissected as STUN packets, to support dissecting of
application that follow the ICE methodology described in
draft-ietf-mmusic-ice-03.

Remove some extra spaces at the end of tags for preferences.

svn path=/trunk/; revision=13356
2005-02-08 20:54:08 +00:00
Lars Roland
fe83d6527b Move h225-persistentdata.[ch] to epan,
as its code is linked into libethereal.dll.

svn path=/trunk/; revision=13354
2005-02-08 19:36:20 +00:00
Anders Broman
b956a7c0a8 From LEGO
patch adding few more fields to RADIUS (I and O Packets and Octets)

svn path=/trunk/; revision=13351
2005-02-08 18:51:27 +00:00
Anders Broman
35be3172ce From : Susanne Edlund
patch for NSIP to fix a bug in packet SNS_DELETE.

svn path=/trunk/; revision=13350
2005-02-08 18:50:05 +00:00
Jörg Mayer
243a2b832e In case we have an unknown vendor tag, just decode the vendor from
manuf.

svn path=/trunk/; revision=13339
2005-02-07 15:55:13 +00:00
Anders Broman
2a9f29ce77 From Alejandro Vaquero :
Find attached a patch for "Voip analysis" to get the LRQ/LCF/LRJ messages included in the H323 calls for Gatekeeper to Gatekeeper configurations

svn path=/trunk/; revision=13337
2005-02-07 08:57:47 +00:00
Anders Broman
f0b6a60d55 Re-commit the asn2eth based gsm-map dissector, hopfully it'll work better now.
svn path=/trunk/; revision=13305
2005-02-05 14:24:26 +00:00
Anders Broman
84d4f0e508 From Alejandro Vaquero:
a patch that to shows the RTP streams in the Graph. Now 
using an RTP tap (not using the rtp_stream).

svn path=/trunk/; revision=13300
2005-02-05 11:08:24 +00:00
Michael Tüxen
04a154ec0a Add detection of zero checksum.
svn path=/trunk/; revision=13294
2005-02-04 22:39:48 +00:00
Gerald Combs
d7ad33dc51 Fix a couple of distcheck problems:
Update conversation_new and find_conversation in plugin_api_list.c and
associated files.

Add packet-dcerpc-butc.h to the distribution.

svn path=/trunk/; revision=13288
2005-02-04 15:22:25 +00:00