Commit graph

991 commits

Author SHA1 Message Date
Ulf Lamping
3cc6dc3b90 fix usage of "if(tree) {" to display the right things, even if no coloring rule is set
svn path=/trunk/; revision=13471
2005-02-22 20:25:23 +00:00
Ulf Lamping
76c32eb945 added IEEE 802.1 Link Layer Discovery Protocol (LLDP) to the ethertypes, but sorry, no dissector (yet?)
svn path=/trunk/; revision=13460
2005-02-21 20:19:15 +00:00
Ulf Lamping
2f836c20a8 fix a typo: lenght -> length
This seems to be a "more common" typo, fixed it 13 times throughout the code ...

svn path=/trunk/; revision=13452
2005-02-20 22:36:34 +00:00
Jörg Mayer
ecce686381 Add packet-rdt.h to DISSECTOR_INCLUDES
svn path=/trunk/; revision=13436
2005-02-20 04:17:17 +00:00
Luis Ontanon
bec15c6a45 modify eol-style property
svn path=/trunk/; revision=13434
2005-02-20 01:58:29 +00:00
Luis Ontanon
f18141e49b From Martin Mathielson
RDT (Realplayer Data Protocol) dissector and patch RTSP to create RDT conversations

svn path=/trunk/; revision=13431
2005-02-19 22:43:38 +00:00
Ronnie Sahlberg
99507223d9 usage of tcp_dissect_pdu is broken
comment it out to stop it from dumping core.
jxta people will have to fix this properly later.



svn path=/trunk/; revision=13426
2005-02-18 21:19:01 +00:00
Luis Ontanon
1e8a726aad do not prototype capture_eth() unless capture.h has being included
svn path=/trunk/; revision=13425
2005-02-18 20:19:52 +00:00
Ronnie Sahlberg
84f16e153c minor prettification
svn path=/trunk/; revision=13421
2005-02-17 20:56:47 +00:00
Ronnie Sahlberg
93e2089ed2 pass lun (and status) to scsi subdissector so we can filter
on scsi.lun   and prettify the summary line a bit.

ndmp still needs some work to track luns between commands
and fcp needs verification it works for volumesetaddressing.



svn path=/trunk/; revision=13420
2005-02-17 12:07:45 +00:00
Anders Broman
60ffea9d7a Add some of the anytime operations.
svn path=/trunk/; revision=13418
2005-02-16 22:44:15 +00:00
Ronnie Sahlberg
d525ccb6f9 preparations for autogenerated ms dcerpc interfaces
make it possible to prettify SIDs and control how and where their string representation should be shown in the summary line and the tree
similar to how counted_strings prettification can be controlled


svn path=/trunk/; revision=13413
2005-02-16 11:31:56 +00:00
Ronnie Sahlberg
8851ebc541 mark the frame opened/closed fields for policy handles as GENERATED fields
svn path=/trunk/; revision=13412
2005-02-16 10:25:00 +00:00
Ronnie Sahlberg
237a5e197c add simple check that if a hf_rename field has not been referenced by the idl/cnf files then it is likely the conformance file has become stale and needs updating. abort with an error message.
svn path=/trunk/; revision=13411
2005-02-16 10:11:26 +00:00
Ronnie Sahlberg
1d8e70b969 add extra sanity check.
dont match a request with a reply that came earlier in the trace or SRT will
look funny :-)



svn path=/trunk/; revision=13409
2005-02-16 00:19:52 +00:00
Ronnie Sahlberg
e8a4830bad new protocol from Giles Scott : Retix spanning tree protocol
svn path=/trunk/; revision=13408
2005-02-15 21:01:51 +00:00
Guy Harris
17f296c66f Add the missing packet-dcerpc-budb.h to the list of header files, so it
goes into the source tarball.

svn path=/trunk/; revision=13405
2005-02-15 01:42:39 +00:00
Guy Harris
bfb29e9e84 Fix some compiler warnings (at least one of which is for a real problem).
svn path=/trunk/; revision=13404
2005-02-14 22:07:26 +00:00
Guy Harris
6616a3770c Make the "maintainer-clean" rules get rid of some additional generated
files.  Do this with GENERATED_HEADER_FILES, GENERATED_C_FILES, and
GENERATED_FILES macros in Makefile.common files, along the lines of what
wiretap/Makefile.common has.

Clean up "*~" files with "make clean" rather than only "make distclean"
in some additional places.

Add "maintainer-clean" rules to the Makefile.nmake files, paralelling
the ones in the automake-generated Makefile.in files, using the
GENERATED_FILES macros from Makefile.common files.  In some cases, move
the cleanup of files from "make distclean" to "make maintainer-clean",
and in other cases, put in a comment indicating why we're not doing that
(because some files that are distributed in the source tarballs, namely
Flex output, were built with a UN*X Flex and won't compile on Windows,
so we get rid of them with "make distclean" so you can clean up stuff
that *has* to be re-generated for Windows).

Clean up some *CLEANFILES definitions - get rid of ones that no longer
apply as files were moved or that add to the definition a name that's
already there.

svn path=/trunk/; revision=13402
2005-02-14 20:33:57 +00:00
Ronnie Sahlberg
b4b5a4776f add machinegenerated full dissector for dcedfs BUDB protocol
svn path=/trunk/; revision=13401
2005-02-14 19:56:11 +00:00
Ronnie Sahlberg
48ffe7c894 make idl-lite compiler handle varying arrays
svn path=/trunk/; revision=13400
2005-02-14 19:46:03 +00:00
Ronnie Sahlberg
1c644d6ff7 add support for varying arrays
svn path=/trunk/; revision=13399
2005-02-14 19:43:34 +00:00
Ronnie Sahlberg
9378b4f6b4 in sack options only look for tcp session metadata if both tcp_analysis and tcp_relative preferences are set. relative depends on analysis
svn path=/trunk/; revision=13398
2005-02-14 19:34:59 +00:00
Anders Broman
f687d089de Add some more V3 opcodes
svn path=/trunk/; revision=13396
2005-02-14 16:20:58 +00:00
Anders Broman
f19ce95547 From :Tim Endean correct conditions for a while loop.
svn path=/trunk/; revision=13395
2005-02-14 08:21:14 +00:00
Luis Ontanon
1704803382 From Venna, Nagarjuna:
add support for RTCP-XR as specified in RFC 3611 

svn path=/trunk/; revision=13390
2005-02-13 03:41:44 +00:00
Anders Broman
d685e466d9 Add a part of the previous patch that didn't apply.
svn path=/trunk/; revision=13388
2005-02-12 21:36:56 +00:00
Anders Broman
df00c9604f GMM/SM:
- Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft

svn path=/trunk/; revision=13387
2005-02-12 21:35:01 +00:00
Anders Broman
37a96cbad0 From Rene Pilz :
BSSGP:
   - Does not dissect the LLC-PDU twice

LLC:
- Add CRC calculation to differ between ciphered and non-ciphered packets without taking care about the encryption bit.
This solves crashes when the option "ignore ciphere bit" was activated


GMM/SM:
   - Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft)

svn path=/trunk/; revision=13386
2005-02-12 21:20:38 +00:00
Anders Broman
e42caa3d55 From Rene Pilz :
BSSGP:
   - Does not dissect the LLC-PDU twice

LLC:
- Add CRC calculation to differ between ciphered and non-ciphered packets without taking care about the encryption bit.
This solves crashes when the option "ignore ciphere bit" was activated


GMM/SM:
   - Dissect detach_type now correctly ( fixed by Miklos Szurdi )
   - Dissect timer correctly ( fixed by Miklos Szurdi )
   - Update SM causes for Release 6 ( Miklos Szurdi )
   - Update service_type for Release 6 ( Miklos Szurdi )
   - Rearange pco code like Guy Harris has suggested ( Guy Harris )
   - reimplement dissection of IPv4 and IPv6 addresses
   - Fix offset in pdp_addr
   - Fix offset in Traffic Flow Template (tft)

svn path=/trunk/; revision=13385
2005-02-12 21:20:01 +00:00
Anders Broman
00d977fa41 Dissect Return error and some more operationcodes.
svn path=/trunk/; revision=13384
2005-02-11 22:44:09 +00:00
Gerald Combs
4acd84cd85 From Nicolas Dichtel via Vincent Jardin:
Print a couple of missing fields.

svn path=/trunk/; revision=13379
2005-02-10 16:24:12 +00:00
Guy Harris
a82419745d Add a hack to set "reversed" and "circuit" in code paths where it wasn't
getting set.  The hack needs to be replaced by code that does the right
thing.

Fix indentation.

svn path=/trunk/; revision=13374
2005-02-10 08:07:44 +00:00
Guy Harris
5ae67eb010 Remove an extra /*, some unused variables, and an unneeded include (INAP
currently has no taps).

svn path=/trunk/; revision=13371
2005-02-10 03:19:59 +00:00
Lars Roland
338bda08bd clean up makefiles.
especially /trunk/Makefile.nmake doesn't have to include
/trunk/epan/Makefile.common anymore.

svn path=/trunk/; revision=13368
2005-02-10 01:26:19 +00:00
Lars Roland
ec9ca01616 Move the following files from /trunk to /trunk/epan:
asn1.[ch]
follow.[ch]
ptvcursor.[ch]
reassemble.[ch]
xmlstub.[ch]

fix #include statements accordingly.

svn path=/trunk/; revision=13366
2005-02-09 23:38:00 +00:00
Anders Broman
e8f8e851c0 From Tim Endean: INAP dissector.
svn path=/trunk/; revision=13364
2005-02-09 22:35:49 +00:00
Anders Broman
60e1e4cd04 Fix dissection of some opcodes etc.
svn path=/trunk/; revision=13361
2005-02-09 21:55:55 +00:00
Guy Harris
8f265808fb From Deepak Jain: add support for some Cisco L2TPv3 AVPs, always show
the numerical value of the pseudowire type, and show the Remote End ID
AVP as text rather than binary data.

svn path=/trunk/; revision=13359
2005-02-09 09:25:54 +00:00
Lars Roland
186683631f use "guint" instead of "uint".
"uint" is not available on Windows

svn path=/trunk/; revision=13357
2005-02-08 21:12:54 +00:00
Guy Harris
83c47dc3d6 From Jon Ringle: add a preference to allow packets with an RTP version
of 0 to be dissected as STUN packets, to support dissecting of
application that follow the ICE methodology described in
draft-ietf-mmusic-ice-03.

Remove some extra spaces at the end of tags for preferences.

svn path=/trunk/; revision=13356
2005-02-08 20:54:08 +00:00
Lars Roland
fe83d6527b Move h225-persistentdata.[ch] to epan,
as its code is linked into libethereal.dll.

svn path=/trunk/; revision=13354
2005-02-08 19:36:20 +00:00
Anders Broman
b956a7c0a8 From LEGO
patch adding few more fields to RADIUS (I and O Packets and Octets)

svn path=/trunk/; revision=13351
2005-02-08 18:51:27 +00:00
Anders Broman
35be3172ce From : Susanne Edlund
patch for NSIP to fix a bug in packet SNS_DELETE.

svn path=/trunk/; revision=13350
2005-02-08 18:50:05 +00:00
Jörg Mayer
243a2b832e In case we have an unknown vendor tag, just decode the vendor from
manuf.

svn path=/trunk/; revision=13339
2005-02-07 15:55:13 +00:00
Anders Broman
2a9f29ce77 From Alejandro Vaquero :
Find attached a patch for "Voip analysis" to get the LRQ/LCF/LRJ messages included in the H323 calls for Gatekeeper to Gatekeeper configurations

svn path=/trunk/; revision=13337
2005-02-07 08:57:47 +00:00
Anders Broman
f0b6a60d55 Re-commit the asn2eth based gsm-map dissector, hopfully it'll work better now.
svn path=/trunk/; revision=13305
2005-02-05 14:24:26 +00:00
Anders Broman
84d4f0e508 From Alejandro Vaquero:
a patch that to shows the RTP streams in the Graph. Now 
using an RTP tap (not using the rtp_stream).

svn path=/trunk/; revision=13300
2005-02-05 11:08:24 +00:00
Michael Tüxen
04a154ec0a Add detection of zero checksum.
svn path=/trunk/; revision=13294
2005-02-04 22:39:48 +00:00
Gerald Combs
d7ad33dc51 Fix a couple of distcheck problems:
Update conversation_new and find_conversation in plugin_api_list.c and
associated files.

Add packet-dcerpc-butc.h to the distribution.

svn path=/trunk/; revision=13288
2005-02-04 15:22:25 +00:00
Guy Harris
84dadf4eee From Dominique Bastien: marker and OAM slow protocol support.
Fix his e-mail address.

svn path=/trunk/; revision=13287
2005-02-04 10:48:03 +00:00
Ronnie Sahlberg
b1d285c375 use a bitmap for the restore flags so the dissection is prettier
svn path=/trunk/; revision=13282
2005-02-04 05:26:51 +00:00
Ronnie Sahlberg
4fead805d5 initial checkin of modified idl file for autogenerating the BUTC interface
svn path=/trunk/; revision=13281
2005-02-04 04:58:03 +00:00
Ronnie Sahlberg
975a76b44f check in new directory for the files for autogenerating dcerpc interfaces
and the prototype idl compiler.

this is not ready for wide use yet but is useful with a svn area where we can sync our changes to the compiler.



svn path=/trunk/; revision=13280
2005-02-04 04:37:47 +00:00
Ronnie Sahlberg
e95485ff81 add support for varying strings in addition to conformant and varying strings that we already support
svn path=/trunk/; revision=13278
2005-02-04 04:02:36 +00:00
Ronnie Sahlberg
1461455adc update BUTC and fill in all (bar one) dissectors
svn path=/trunk/; revision=13277
2005-02-04 02:17:29 +00:00
Jörg Mayer
cf16ab5a13 Yaniv Kaul
Attached patch simplifies a very complex 'if' statement in packet-fw1.c
        and generally streamlines the code.


svn path=/trunk/; revision=13273
2005-02-03 23:42:06 +00:00
Jörg Mayer
94a6f0cc48 Yaniv Kaul:
Attached please find a small performance optimization to packet-ip.c,
        which removes multiple redundant calls to tvb_get_ptr().

Changed srt_addr and dst_addr from char to guchar

svn path=/trunk/; revision=13272
2005-02-03 23:35:57 +00:00
Jörg Mayer
9c638f9e7e Motonori Shindo:
Please find attached a small patch for CoSine L2 debug dissector. The
code used to incorrectly select the first 4 octets in the tvbuff. This
patch fixes this problem.

svn path=/trunk/; revision=13271
2005-02-03 23:24:08 +00:00
Jörg Mayer
326165db2b ncisco Alcoba:
Do not add target address if the packet is a Request. According to the RFC,
        target addresses in requests have no meaning


svn path=/trunk/; revision=13269
2005-02-03 22:52:20 +00:00
Anders Broman
915e63ae18 Add dissection of some more packages.
svn path=/trunk/; revision=13265
2005-02-03 21:57:42 +00:00
Anders Broman
72468bb0e5 From Francisco Alcoba:
Patch for graphing ISUP calls. It shows the type of message, 
in the first one the calling and called numbers, and in the second the SPs 
and CIC; in releases it shows the cause value.

svn path=/trunk/; revision=13263
2005-02-03 21:51:35 +00:00
Jörg Mayer
103ced271d Jon Ringle: bug fix to the stun ERROR-CODE dissecting
svn path=/trunk/; revision=13260
2005-02-03 21:11:46 +00:00
Lars Roland
627918aecb Small fix for h225 dissector as suggested by Tomas Kukosa
svn path=/trunk/; revision=13257
2005-02-03 16:22:08 +00:00
Anders Broman
acb8eef002 Add an OID
svn path=/trunk/; revision=13255
2005-02-03 06:54:55 +00:00
Ulf Lamping
69f2ac18a9 bugfix: the EOT flag detection in a COTP data TPDU was using little endian, although it's big endian in the packet.
some other minor output enhancements

svn path=/trunk/; revision=13247
2005-02-02 21:13:52 +00:00
Anders Broman
851ecd2ac4 From Jon Ringle:
1) Added a setup_frame parameter to conversation_t
2) Used the conversation_t next to maintain a list of conversations with the 
same src/dest tuple but different setup_frame number.
3) Changed the signature of find_conversation() and conversation_new() to pass 
in the frame number.
4) Adjusted packet-sdp to select RTP conversation if both m=audio and m=image 
are present, and T.38 conversation if only m=image is present. I expect that 
RTP/T.38 dissecting to be better, but I don't have a way to generate T.38 
packets.

svn path=/trunk/; revision=13243
2005-02-02 20:07:03 +00:00
Michael Tüxen
03b78c062f Add mtp3.pc as suggested by Luis Ontanon.
Cleanups

svn path=/trunk/; revision=13241
2005-02-02 13:37:04 +00:00
Ronnie Sahlberg
ecdd9999b1 the old netlogon protocol is now called smb_netlogon
svn path=/trunk/; revision=13230
2005-02-01 23:33:04 +00:00
Ronnie Sahlberg
9d2157c031 g_strlcpy does not exist in gtk 1.2
use strncpy instead


svn path=/trunk/; revision=13229
2005-02-01 23:30:18 +00:00
Anders Broman
6e4f24c0d9 Improve handling of pinfo->private_data
svn path=/trunk/; revision=13228
2005-02-01 22:57:22 +00:00
Lars Roland
2614749268 add packet-sdp.h
and from Julien Leproust:
fix graph_analysis.c

svn path=/trunk/; revision=13226
2005-02-01 14:00:25 +00:00
Lars Roland
197ceddab1 From Alejandro Vaquero:
h323 taps support up to 5 messages per packet now.

VoIP call analysis:
      - Collect ISUP, SIP and H323 calls from a capture and show them in window with the following info:
      - Start and Stop time of the call
      - Init

svn path=/trunk/; revision=13225
2005-02-01 12:12:35 +00:00
Guy Harris
db69eb8c13 Add some comments noting issues with some of the items in here.
svn path=/trunk/; revision=13224
2005-02-01 11:11:15 +00:00
Guy Harris
17e0d15df3 Move "dissect_nt_GUID()" into "packet-dcerpc-nt.c", as it's used by the
LSA dissector as well, and declare it in "packet-dcerpc-nt.h".

svn path=/trunk/; revision=13223
2005-02-01 05:21:08 +00:00
Guy Harris
5dd0ecbbcc If the VCI and payload type indicate that a cell is an OAM cell, dissect
it as such.

Clear the Info column when dissecting cells for an AAL we handle before
dissecting the cell, and set the Info column for OAM cells.

svn path=/trunk/; revision=13222
2005-02-01 05:19:53 +00:00
Ulf Lamping
970594e453 removed MSVC warnings:
packet-redback.c(63) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(64) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(65) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-rmt-fec.c(108) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data

svn path=/trunk/; revision=13221
2005-02-01 00:52:38 +00:00
Ulf Lamping
89ee9a7290 removed MSVC warnings:
packet-juniper.c(262) : warning C4761: integral size mismatch in argument; conversion supplied
packet-juniper.c(289) : warning C4761: integral size mismatch in argument; conversion supplied

svn path=/trunk/; revision=13220
2005-02-01 00:51:42 +00:00
Anders Broman
a960b72f5f Put application context OID in pinfo->private data to be used by sub-dissector(s).
svn path=/trunk/; revision=13218
2005-01-31 21:38:56 +00:00
Anders Broman
d9614f8c40 Update som valuse strings
svn path=/trunk/; revision=13217
2005-01-31 21:37:11 +00:00
Anders Broman
f2c5299014 From LEGO:
- remove duplicate fields from VSAs (every defined field in VSAs was set twice)
 - dissect radius packet with avplen == 0 (did not decode authenticator when no AVPs were present)

svn path=/trunk/; revision=13216
2005-01-31 21:36:31 +00:00
Ronnie Sahlberg
22c81aa543 there are two NETLOGON protocols
the really really old one which is never used
and there is the DCE/RPC one that is used by all windows/cifs implementations.

We used to reserve the protocol name NETLOGON for the old obsolete protocol
and since we can not have two protocols with the same name, called
the current protocol RPC_NETLOGON instead.

that does not exactly make sense.


This renames the old obsolete protocol to SMB_NETLOGON  to make way and allow
the real netlogon protocol take the name NETLOGON



svn path=/trunk/; revision=13215
2005-01-31 09:56:42 +00:00
Ronnie Sahlberg
d3beff7c6a call dissect_ndr_uuit_t directly and avoid a dependency on packet-dcerpc-netlogon
svn path=/trunk/; revision=13214
2005-01-31 09:43:07 +00:00
Ronnie Sahlberg
262d2b36c8 support H.248 BER over SCTP PPID 7
svn path=/trunk/; revision=13213
2005-01-31 03:31:13 +00:00
Guy Harris
467ece8920 From Florian Lohoff: Redback SmartEdge SE400/800 tcpdump disassembly.
svn path=/trunk/; revision=13212
2005-01-31 03:03:02 +00:00
Guy Harris
e2089f3d82 Add a URL for Gnutella specs.
Don't check, in the dissectors for particular Gnutella packets, whether
the packet goes past the end of the tvbuff - let that throw an exception
so unreassembled packets are shown as such.

Clean up indentation.

Boost GNUTELLA_MAX_SNAP_SIZE to 4096 (one Gnutella spec suggests that
packets should be < 4K), and use it to

	1) clamp the length of packets (so we don't do huge reassembly
	   or have problems when the total packet length, including the
	   header, overflows 32 bits)

and

	2) check the length of packets before using tcp_dissect_pdus(),
	   to distinguish between packets to be reassembled and a
	   transfer stream.

Pass the correct value to tcp_dissect_pdus() as the header length.

svn path=/trunk/; revision=13211
2005-01-31 00:28:02 +00:00
Ronnie Sahlberg
a43da7a4ff add dissection of three new flags in the security descriptor
svn path=/trunk/; revision=13210
2005-01-30 23:15:10 +00:00
Anders Broman
7578a81982 Add OID:s to old dissector, for comparison reasons.
svn path=/trunk/; revision=13209
2005-01-30 18:00:48 +00:00
Anders Broman
a4db2eb570 In case of "faulty" BER tag:s return tvb = NULL
svn path=/trunk/; revision=13208
2005-01-30 17:48:18 +00:00
Ronnie Sahlberg
bb7160249d rename lsa_dissect_LSA_SECURITY_DESCRIPTOR to lsa_dissect_sec_desc_buf
change its signature to match the autogenerated signatures.

add a small wrapper function so tha tthe handwritten lsa can still call the
function through dissect_ndr_pointer()

no changes in functionality,  essentially just a rename of a function and signature change


svn path=/trunk/; revision=13207
2005-01-30 13:00:35 +00:00
Ronnie Sahlberg
7fc663c738 rename lsa_dissect_LSA_SECURITY_DESCRIPTOR_data to lsa_dissect_sec_desc_buf_data
to make the symbol compatible with an autogenerated LSA dissector.

no changes to the code, just a rename.


svn path=/trunk/; revision=13206
2005-01-30 12:38:38 +00:00
Ronnie Sahlberg
ae9fe25e4f rename lsa_dissect_POLICY_DNS_DOMAIN_INFO to lsa_dissect_DnsDomainInfo and change the signature slightly.
the signature change is to make it compatilbe with the signatures the idl compiler generates.


svn path=/trunk/; revision=13205
2005-01-30 12:21:17 +00:00
Ronnie Sahlberg
95b0d123ba add a new dissect_ndr_counted_ascii_string() that mimics dissect_ndr_counted_string() but handles an ASCII string instead of a Unicode one.
svn path=/trunk/; revision=13204
2005-01-30 11:56:37 +00:00
Guy Harris
cdaf516b8b Byte arrays are byte arrays, not strings.
svn path=/trunk/; revision=13203
2005-01-30 03:43:03 +00:00
Ronnie Sahlberg
0431c0c49f change dissect_ndr_counted_byte_array to be more consistent with dissect_ndr_counted_string
svn path=/trunk/; revision=13202
2005-01-30 02:52:25 +00:00
Guy Harris
87bf383873 Add the I-D name for L2TPv3 to a comment.
Do more, and more careful, AVP length checks.

Use tvb_format_text() to display strings.

Just use "col_add_fstr()" to set the Info column - there's no need to
format into a buffer and then set the column to that buffer.

Make the L2TP dissector a "new-style" dissector and have it reject
packets with an unknown version number - the dissection effect is the
same if no other dissector claims the packet (it just gets displayed as
data), but this allows other dissectors to claim it.

Don't use the length field if the length bit isn't set.

svn path=/trunk/; revision=13201
2005-01-29 23:45:53 +00:00
Guy Harris
152e6819a2 Put the dissection of the payload at the top level.
If the information that we used to guess the payload type is part of the
payload, don't make it correspond to the "Payload Type" protocol tree
item - it's covered by the dissected payload.

If we don't succeed in guessing the protocol type, just dissect the
payload as data.

svn path=/trunk/; revision=13200
2005-01-29 22:21:09 +00:00
Guy Harris
5084ff9f37 Treat the command opcodes as SBC-2 for CD-ROMs as well as for block
devices.

svn path=/trunk/; revision=13199
2005-01-29 20:56:20 +00:00
Guy Harris
75e4d0a2ce Use the 64-bit integer fetch routines to support 64-bit NDR integers.
svn path=/trunk/; revision=13198
2005-01-29 20:39:14 +00:00
Ronnie Sahlberg
995a967894 only add 4 bytes to the pdu length IFF header digest/crc32 is actually used.
svn path=/trunk/; revision=13193
2005-01-29 04:44:40 +00:00
Ronnie Sahlberg
0c00534dd1 we need a dissect_ndr_uint64() that dissects an NDR hyper
svn path=/trunk/; revision=13185
2005-01-28 09:37:47 +00:00
Ronnie Sahlberg
610da77693 older MS DCE/RPC interfaces often use a construct that is to be treated as a 64 bit integer but in reality is a struct containing 2 32bit integers.
this construct is aligned on 4 byte boundaries in ndr and NOT
8 bytes as a real uint64 (== hyper) would be.


rename the existing dissect_ndr_uint64  ro  dissect_ndr_duint32  (double uint32) to make it reflect better the alignment of the type.



svn path=/trunk/; revision=13184
2005-01-28 09:29:49 +00:00
Ronnie Sahlberg
289fd317a0 add a macro for aligning NDR datastreams to 8 byte boundaries
svn path=/trunk/; revision=13183
2005-01-28 09:12:40 +00:00
Ulf Lamping
751d2ebfce if there must be an unknown version message, use hex instead of decimal to print the unknown version number
svn path=/trunk/; revision=13179
2005-01-26 23:14:54 +00:00
Ulf Lamping
a5def37d6d if there must be an "unknown transport" message, at least print the transport name
svn path=/trunk/; revision=13178
2005-01-26 23:13:36 +00:00
Ulf Lamping
6fe12c02b5 bugfix of crash_00001_20050124142515.cap: dissector packet-daap.c displayed [Dissector Bug] as it dissected a length field and used it without checking it first.
use tvb_ensure_bytes_exist() before using this length value, so [Malformed Packet] will be displayed

svn path=/trunk/; revision=13177
2005-01-26 22:37:04 +00:00
Ulf Lamping
f92d7df152 bugfix of crash_00026_20050124150108.cap: three places with possible write behind the end of fixed arrays
used g_malloc instead of a fixed array

svn path=/trunk/; revision=13176
2005-01-26 22:24:42 +00:00
Anders Broman
a4a33b58e7 Fix a typo leading to no conversation set up for RTCP
svn path=/trunk/; revision=13174
2005-01-26 20:06:09 +00:00
Guy Harris
e80d808690 Add "applications/soap+xml" as a text media type.
svn path=/trunk/; revision=13172
2005-01-25 20:53:27 +00:00
Anders Broman
2fd03d5baf Make the sub system number (ssn) settings preferences.
svn path=/trunk/; revision=13170
2005-01-24 20:41:19 +00:00
Ulf Lamping
777f729958 the methods from these interfaces were missing the DCOM this/that header and therefore were missdissected
svn path=/trunk/; revision=13168
2005-01-24 19:30:07 +00:00
Guy Harris
bfcea09863 Add support for reassembly of Gnutella packets that cross TCP segment
boundaries.

svn path=/trunk/; revision=13165
2005-01-24 01:20:14 +00:00
Guy Harris
1dcecc733a Get rid of an extra space after the edge value of a SACK item if
relative sequence numbers aren't being used.

svn path=/trunk/; revision=13164
2005-01-24 00:18:13 +00:00
Ronnie Sahlberg
5b33d550a6 needs an ALIGN_TO_2_BYTES to make the idl compiler happy
svn path=/trunk/; revision=13162
2005-01-22 19:56:12 +00:00
Anders Broman
f9021bcb6a Handle some more op codes.
svn path=/trunk/; revision=13159
2005-01-21 22:46:14 +00:00
Anders Broman
92691ce697 Fixed bugs with conversations and t35
svn path=/trunk/; revision=13158
2005-01-21 22:45:20 +00:00
Ulf Lamping
13e90b72b3 use col_set_fence for COL_INFO, if multiple DCE/RPC requests/responses are in one (TCP)PDU. I've used " # " as the delimiter string, BTW: do we have an "official" one yet?
svn path=/trunk/; revision=13149
2005-01-20 19:26:24 +00:00
Ronnie Sahlberg
91548c85da SACK prettyfication
svn path=/trunk/; revision=13141
2005-01-20 13:19:11 +00:00
Ronnie Sahlberg
85c7eb84fd make TCP SACK option handle relative sequence numbers
svn path=/trunk/; revision=13140
2005-01-20 12:29:11 +00:00
Tomas Kukosa
5978eebab0 NonStandardData and TunnelledProtocol reimplemented and tested
H225 dissector regenerated with new asn2eth version

svn path=/trunk/; revision=13139
2005-01-20 12:16:53 +00:00
Guy Harris
b6f0632323 Free the chunk of reassembled DNP data iff there was a CRC error;
otherwise, we're using it in a tvbuff and shouldn't free it (even if the
next level of reassembly isn't complete, so that al_tvb is ultimately
null).

svn path=/trunk/; revision=13134
2005-01-20 09:44:29 +00:00
Guy Harris
3060dc91b6 Squelch some compiler warnings.
svn path=/trunk/; revision=13133
2005-01-20 07:58:23 +00:00
Guy Harris
b799112fdd Make some routines static that aren't used outside this module.
Use "guint16" instead of "u_int16_t", "guint8" instead of "u_int8_t",
and "guint" instead of "u_int", to handle platforms lacking the latter
types.  Make "ppp_heuristic_guess()" reeturn a Boolean, as it just
returns a "yes or no" answer.

svn path=/trunk/; revision=13132
2005-01-20 07:02:08 +00:00
Guy Harris
c4c4dd4715 Back out the asn2eth-generated GSM MAP dissector for now, at Anders
Broman's request, as it has a number of problems.

svn path=/trunk/; revision=13131
2005-01-20 06:22:20 +00:00
Guy Harris
36e8efcbca From Hannes Gredler: support for Juniper's DLT_JUNIPER_ATM{1,2} values.
svn path=/trunk/; revision=13130
2005-01-20 05:40:56 +00:00
Guy Harris
b8e743ada9 From Jean-Baptiste Marchand: stub dissectors for rras and pnp MSRPC
interfaces.

svn path=/trunk/; revision=13129
2005-01-20 05:06:38 +00:00
Guy Harris
c04a9a4180 There's no guaranteee that "req_resp_hdrs_do_reassembly()" gets called
only at the beginning of a tvbuff, so it needs an argument that's the
starting offset in the tvbuff.

svn path=/trunk/; revision=13128
2005-01-20 04:37:03 +00:00
Guy Harris
2b7ca484ac From Ruud Linders: support short names in multipart headers; SIP-T
requires this.

svn path=/trunk/; revision=13127
2005-01-20 01:26:34 +00:00
Ulf Lamping
39a6232a8d try to defragment DCE/RPC fragments (simply one after the other), if alloc_hint is zero
svn path=/trunk/; revision=13126
2005-01-19 23:41:07 +00:00
Anders Broman
d80fae9ab9 Attempt to reimplement "non standard data/parameter" and "tunnelled
protocol"

svn path=/trunk/; revision=13123
2005-01-19 22:44:09 +00:00
Gerald Combs
561fbc8b25 Add a field called "frame.protocols" which shows the protocols present
in the frame.   The filter "frame.protocols contains ip:icmp:ip" could
be used to find any ICMP packets containing IP headers.

Clean up whitespace.

svn path=/trunk/; revision=13118
2005-01-19 04:49:29 +00:00
Ulf Lamping
b5ee55d468 slightly improve dissection of complex_ping response
svn path=/trunk/; revision=13113
2005-01-18 20:44:11 +00:00
Guy Harris
e2ba7ba242 Add packet-h450.h to the list of header files.
svn path=/trunk/; revision=13107
2005-01-18 02:29:14 +00:00
Lars Roland
c2435429a1 Fix a small bug in h245.cnf.
All h.323 related statistics should work now in the same way as they did before the h323 dissectors were generated.

svn path=/trunk/; revision=13105
2005-01-17 23:42:22 +00:00
Guy Harris
4f81f615b0 Use -1 rather than tvb_length() to create a protocol tree item that runs
to the end of the tvbuff.

Don't return a value from "dissect_h4501()" - the value isn't used, and
"dissect_h4501()" is registered with "register_dissector()", so it's not
supposed to return a value.

svn path=/trunk/; revision=13104
2005-01-17 23:26:45 +00:00
Anders Broman
eee54467b1 Reinsert h450 dissection
svn path=/trunk/; revision=13100
2005-01-17 22:30:31 +00:00
Anders Broman
232ab9d158 Export q931_protocol_discriminator_vals
svn path=/trunk/; revision=13098
2005-01-17 22:26:33 +00:00
Anders Broman
f6fe109fc7 If a string of zero length is encountered offset still needs to be advanced(?)
svn path=/trunk/; revision=13097
2005-01-17 22:25:36 +00:00
Lars Roland
5a483e3abe From Anders Broman:
Add recently lost support for the h.323 conversations tap in the h225 dissector.

svn path=/trunk/; revision=13092
2005-01-17 21:52:30 +00:00
Tomas Kukosa
5b3af778d6 ASN.1 PER VisibleString support
svn path=/trunk/; revision=13085
2005-01-17 10:09:43 +00:00
Guy Harris
3778ca99c1 If a given TLV type isn't found in an aim_tlv table, just use "Unknown"
as the description - some aim_tlv tables have NULL in the end-of-table
entry.

For those that don't, replace "Unknown" with NULL; "Unknown" is now
redundant.

svn path=/trunk/; revision=13084
2005-01-17 08:13:02 +00:00
Guy Harris
6d5fa89996 When assembling application layer chunks, don't include the transport
layer byte in the reassembled data - including it means we have to pass
to "tvb_new_real_data()" a pointer to the *second* byte of a mallocated
chunk of data, but that would require us to have the free routine for
the new tvbuff back that pointer up before freeing it (we aren't doing
that currently, which means that "free()" either complains bitterly or,
potentially, corrupts the arena, causing crashes later).

Put in some XXX comments about some issues seen when looking at the
code.

svn path=/trunk/; revision=13083
2005-01-17 03:39:58 +00:00
Guy Harris
2bdef3c122 Rename the FieldError exception to DissectorError.
Add a DISSECTOR_ASSERT() macro, which is the usual type of assertion
macro, but throws a DissectorError exception with a message giving the
flien and line number and the failed test as a string.  Use that macro
in "alloc_field_info()".

Report that exception in the Info column and the protocol tree, as well
as logging the exception failure with g_warning().

svn path=/trunk/; revision=13078
2005-01-16 23:30:55 +00:00
Lars Roland
ce032dd5cf Add a few more things to the h225 dissector that got lost.
Lost things left:
-h.450 stuff
-support for the h.323 conversations tap (It is currently broken.)

svn path=/trunk/; revision=13076
2005-01-16 21:21:41 +00:00
Guy Harris
636d4690d7 Make the object length variable in some routines an "int"; we fetch a
16-bit unsigned value into it, but we might round it up to a multiple of
4 bytes, which could overflow a guint16.  Make arguments corresponding
to them "int" as well.

Use the reported length in "cops_analyze_packetcable_mm_obj()".

svn path=/trunk/; revision=13075
2005-01-16 20:26:19 +00:00
Ulf Lamping
1c9781b4ec throw the new FieldError exception, if a dissector tries to add a field with invalid parameters
add a message parameter to the show_exception function

svn path=/trunk/; revision=13074
2005-01-16 16:06:15 +00:00
Guy Harris
d1ae7c688f From Jon Ringle:
don't dissect attributes if there aren't any;

	put each attribute into a subtree;

	register the dissector by name.

Use "match_strval()" to check whether the message type is a known STUN
message type, and to generate the message type for the Info column.

Don't use "tvb_bytes_exist()" to check when we run out of data - use the
length fields from the packet.  Check the sanity of those lengths, too.

svn path=/trunk/; revision=13063
2005-01-16 04:25:27 +00:00
Guy Harris
7af9548d90 The keycode_first and keycode_count arguments to "listOfKeysyms()" can
come directly from packet data, so don't abort if they define a sequence
of keycodes that goes past 255 - just report errors for the keycodes
past 255.

Clean up indentation.

svn path=/trunk/; revision=13059
2005-01-16 01:22:53 +00:00
Guy Harris
b24afc4ed8 Revert to the previous formatting of the item.
svn path=/trunk/; revision=13058
2005-01-16 00:48:25 +00:00
Guy Harris
f1ce220265 Display the keycode list for a modifier a bit differently (don't list
the modifier name for every keycode, just give the modifier name once
and then show all the keycodes), and use "proto_item_append_text()"
rather than building a string.

Clean up white space.

svn path=/trunk/; revision=13057
2005-01-16 00:29:54 +00:00