Commit Graph

8956 Commits

Author SHA1 Message Date
Guy Harris 9687947b5f From Lars Roland:
- added a pointer to raw rtp data to _rtp_info that can be used by
	  taps;

	- RTP packets are passed to the tap queue only if they are not
	  error packets (so that you don't need to filter out ICMP
	  packets)

	- use that pointer in rtp_stream, so it handles packets with
	  padding, and should handle RTP packets fragmented across
	  lower-level packets

	- moved rtp_stream from tap sources to normal files
	  (prevents on-start-up registration of the rtp_stream tap
	  listener)

	- rtp_stream tap gets registered/unregistered with the "RTP
	  Streams" dialog box
	  i.e. the tap is registered as long as the dialog box is open.
	  Alternatively, it is de-/registered on demand if RTP Analysis is
	  called directly on a packet.

	- rtp_stream tap listener no longer uses a filter in dissection
`	  and does not need to have a proto tree being built.
	  (performance increase)

	- fixed: RTP Streams list will get updated in real time if the
	  dialog box is open while a redissection takes place.

svn path=/trunk/; revision=9051
2003-11-20 23:34:31 +00:00
Guy Harris bb0b226ca6 #if 0-out some no-longer-used routines.
Use #if 0/#endif rather than comments to remove the code that used to
refer to those routines - it's a bit more robust in the presence of
comments (there aren't currently any, but, just in case somebody adds
them...).

svn path=/trunk/; revision=9050
2003-11-20 23:21:19 +00:00
Guy Harris 7005a5f725 From Olivier Biot: add support for media type
"application/x-prov.syncset+wbxml".

svn path=/trunk/; revision=9049
2003-11-20 22:50:56 +00:00
Guy Harris 530d993a6b From Martin Mathieson:
- Add some summary info to REGISTER requests and responses
	- Tidy up whitespace a little

svn path=/trunk/; revision=9048
2003-11-20 22:38:33 +00:00
Guy Harris e4080b8a02 From Olivier Biot:
* Fix an incorrectly #ifdef'ed return introduced by the previous
	  patch
	* Remove the parsed_length parameter from the function signature
	  of the tag and attribute dissectors - have it return the
	  parsed length, instead
	* Throw ReportedBoundsError exceptions if we run past the end of
	  the tvbuff, rather than putting a special entry in
	* Produce consistent and extensive debug logging (enabled by
	  defining DEBUG_wbxml)
	* Get rid of the dozens of "#ifdef DEBUG ... #endif" constructs
	  for debug logging

svn path=/trunk/; revision=9047
2003-11-20 22:24:15 +00:00
Guy Harris f42de5c9b2 From Hannes Gredler: "print_system_id()" should call
"print_system_id_buf()", not "print_nsap_net_buf()".  (What idiot made
*that* mistake? :-))

svn path=/trunk/; revision=9046
2003-11-20 19:05:40 +00:00
Nathan Neulinger 137b1e31e9 update proto list
svn path=/trunk/; revision=9045
2003-11-20 14:29:44 +00:00
Richard Sharpe 08f50a17ce Clean up some IDL and remove some structures that Windows of all flavors
does not understand. SHARE_INFO_1004, 1005, 1006, 1007, and 1501 seem not
to be understood by any, and it can screw up dissections.

svn path=/trunk/; revision=9044
2003-11-20 06:43:51 +00:00
Guy Harris 92b2d0f796 Use "tvb_get_string()" in "proto_tree_set_string_tvb()" - it won't leak
memory if it throws an exception, as it checks whether the entire string
is in the tvbuff *before* allocating a buffer for it, and that also
means that if the length is absurdly large, an exception will be thrown,
rather than the memory allocation failing.

svn path=/trunk/; revision=9043
2003-11-20 05:20:17 +00:00
Guy Harris 1581057cc4 On Mac OS X, disable the alarm/longjmp stuff for timing out name
resolution queries - it runs a significant risk of crashing applications
that do that.

svn path=/trunk/; revision=9042
2003-11-20 05:04:57 +00:00
Gerald Combs 6d5751b6e7 Update Jakob Schlyter's address.
svn path=/trunk/; revision=9041
2003-11-20 04:28:13 +00:00
Guy Harris 674c756e6d From Olivier Biot: fix the WBXML dissector in cases where dissection is
interrupted because of a short frame or packets not being reassembled,
and provide additional debug logging.

svn path=/trunk/; revision=9040
2003-11-19 22:55:27 +00:00
Nathan Neulinger 403a9fd3f5 Add dissector for the SEBEK kernel read() data capture and/or rootkit tool
used as part of the HoneyNet project.

Info at:
http://project.honeynet.org/tools/sebek/

svn path=/trunk/; revision=9039
2003-11-19 22:13:29 +00:00
Guy Harris 49af7e1586 From Olivier Biot:
correct (and document) the offset computation in the parameter()
	and parameter_value_q() functions.

From Lo�c Minier:

	- a copy-paste with a missing replacement;
	- content-disposition uses parameters not q-values;
	- missing "+" for the calculation of parameter-offsets;
	- white-space cleanup;
	- comment fixes.

svn path=/trunk/; revision=9038
2003-11-19 21:24:19 +00:00
Guy Harris 6341212165 Fix the ATT bit definitions.
svn path=/trunk/; revision=9037
2003-11-19 09:58:37 +00:00
Guy Harris 5e28ce7e6c Get rid of unused variables.
svn path=/trunk/; revision=9036
2003-11-19 09:49:00 +00:00
Guy Harris 3fe5ef9396 From Olivier Biot: get rid of no-longer-used routines.
svn path=/trunk/; revision=9035
2003-11-19 09:43:29 +00:00
Ronnie Sahlberg a07a627e3f Update to TCP, when we see a SYN|ACK packetm reset base_ack to the current ACK-1 so that it looks right when doing relative sequence numbers.
I.e. SEQ :    seq==0  ack==0
     SEQ|ACK  seq==0  ack==1
     ACK      seq==1  ack==1

This looks much more correct.

This change also fixes the problem reported to ethereal-dev
recently with "Follow TCP Stream" dropping the first character of the stream.

svn path=/trunk/; revision=9034
2003-11-19 09:32:04 +00:00
Richard Sharpe 2b01591a52 Fix some IDL ...
svn path=/trunk/; revision=9033
2003-11-19 07:13:01 +00:00
Guy Harris 1ad8bf690c From Dave Sclarsky: fix the offset for the Node WWN.
svn path=/trunk/; revision=9032
2003-11-19 04:30:11 +00:00
Guy Harris 9e097e07e7 Get rid of some unused arguments and variables.
Clean up the handling of the footer, so that it works even with short
frames.

svn path=/trunk/; revision=9031
2003-11-19 04:26:13 +00:00
Guy Harris 7d4ec012d9 "uint" preferences should be "guint"s, not "int"s.
svn path=/trunk/; revision=9030
2003-11-19 04:05:09 +00:00
Guy Harris d279fa42fa Fix a typo.
svn path=/trunk/; revision=9029
2003-11-19 04:02:03 +00:00
Guy Harris 374f0f1b93 From Dave Sclarsky: CPFI support.
svn path=/trunk/; revision=9028
2003-11-19 04:00:53 +00:00
Guy Harris 69f30a1f12 "dissect_mailslot_browse()", "dissect_mailslot_lanman()", and
"dissect_smb_logon()" always return TRUE, so just get rid of their
return value.

"call_dissector()" automatically calls the data dissector if the
protocol for the dissector being called is disabled, so we don't have to
check its result and call the data dissector if it returns 0.

svn path=/trunk/; revision=9027
2003-11-19 03:53:33 +00:00
Guy Harris 2030e7e74b Register the MMSE dissector with the "http.content_type" dissector
table, rathe than as a heuristic subdissector of HTTP.

svn path=/trunk/; revision=9026
2003-11-19 02:58:02 +00:00
Guy Harris 81ff12e4aa Use "OK" for the "OK" button, as we do elsewhere.
svn path=/trunk/; revision=9025
2003-11-19 01:50:50 +00:00
Guy Harris de402f57a6 From Olivier Biot:
Implement quoted-string parsing by appending the closing quote
	to the string value.  If the quoted-string value does not start
	with a quote, dissection resumes but a warning is displayed.
	Textual headers are assumed to be 0x00 terminated (otherwise we
	have a malformed packet or a short frame).

	The Trailer header is also dissected now, and the charset
	parameter dissection has been rewritten.

	The Content-ID header dissector was registered at the place of
	the Trailer dissector; this has also been fixed.

svn path=/trunk/; revision=9024
2003-11-19 01:45:26 +00:00
Guy Harris 715afef7df From Michael Lum: fix param_digits() subtree for "Nature of Number".
svn path=/trunk/; revision=9023
2003-11-19 01:39:50 +00:00
Ulf Lamping 34dfb0b3d0 redraw supported_protos dialog, if GUI prefs changed
svn path=/trunk/; revision=9022
2003-11-19 00:10:25 +00:00
Ulf Lamping 007b97900c added supported_protos menu item
svn path=/trunk/; revision=9021
2003-11-19 00:04:15 +00:00
Ulf Lamping 3aad138c1b added supported_protos_dlg
svn path=/trunk/; revision=9020
2003-11-19 00:02:42 +00:00
Ulf Lamping 0d636117a1 added supported_protos_dlg.obj
svn path=/trunk/; revision=9019
2003-11-19 00:01:38 +00:00
Ulf Lamping afafa5fd36 seperated "supported protocols and protocol fields" dialog, coming from help_dlg.c/.h
svn path=/trunk/; revision=9018
2003-11-18 23:56:45 +00:00
Ulf Lamping 7cf8e7425d generate "static" help content
svn path=/trunk/; revision=9017
2003-11-18 23:40:12 +00:00
Ulf Lamping 0c5731a50a "static content" and make environment of redesigned online help
svn path=/trunk/; revision=9016
2003-11-18 23:11:49 +00:00
Guy Harris 4b24ca41ff From Greg Morris:
dissect the RFC 2610 DHCP options for SLP;

	dissect Novell-specific options 85, 86, and 87.

svn path=/trunk/; revision=9015
2003-11-18 19:56:37 +00:00
Guy Harris c3c1e2a7c6 From Lars Roland: the window size passed to
"tcp_analyze_sequence_number()" is a "guint32", as it might be scaled -
make the arugment a "guint32" as well.

svn path=/trunk/; revision=9014
2003-11-18 19:46:41 +00:00
Guy Harris 6811485d3b Get rid of the second "col_set_fence()" entry.
svn path=/trunk/; revision=9013
2003-11-18 19:36:02 +00:00
Guy Harris 3d0f23f569 The second of the "col_set_fence()" entries is the one that should've
been removed; that way, the ordinals of existing entries in the function
vector is preserved.

svn path=/trunk/; revision=9012
2003-11-18 19:34:43 +00:00
Guy Harris a98138bd48 From Lars Roland: put missing "enttec" into "all" list.
svn path=/trunk/; revision=9011
2003-11-18 19:31:51 +00:00
Ulf Lamping 1aacb3f060 removed MSVC compiler warnings
svn path=/trunk/; revision=9010
2003-11-18 19:29:07 +00:00
Guy Harris 68244882c4 From Matthias Drochner:
extensions need only be a multiple of 4 bytes in length, not 8
	bytes;

	put in a missing increment of "offset".

svn path=/trunk/; revision=9009
2003-11-18 19:28:24 +00:00
Ulf Lamping 02b9fb53cc removed unused vars
svn path=/trunk/; revision=9008
2003-11-18 19:27:39 +00:00
Ulf Lamping 5d394a177b col_set_fence occurs twice, removed one appearance
svn path=/trunk/; revision=9007
2003-11-18 19:26:26 +00:00
Guy Harris 0bd646058d From Tomas Kukosa: add "extern"s so that the plugin API stuff works.
svn path=/trunk/; revision=9006
2003-11-18 19:20:36 +00:00
Ulf Lamping a89e8b6c5a includes changed, to be working with MSVC also
svn path=/trunk/; revision=9005
2003-11-18 19:20:15 +00:00
Ulf Lamping 584550018e corrected cut and paste errors, makefile was unchanged copied from rtnet
svn path=/trunk/; revision=9004
2003-11-18 19:18:45 +00:00
Guy Harris bf31e57829 Add "col_get_writable()", "col_set_writable()", and "col_set_fence()" to
the plugin API list.

svn path=/trunk/; revision=9003
2003-11-18 08:59:03 +00:00
Guy Harris 42d35d6cd3 Export "protocol_t" as an opaque type.
Make "proto_is_protocol_enabled()" and "proto_get_protocol_short_name()"
take a "protocol_t *" as an argument, so they don't have to look up the
"protocol_t" - this will probably speed them up considerably, and
they're called on almost every dissector handoff.

Get rid of a number of "proto_is_protocol_enabled()" calls that aren't
necessary (dissectors called through handles, including those called
through dissector tables, or called as heuristic dissectors, aren't even
called if their protocol isn't enabled).

Change some direct dissector calls to go through handles.

svn path=/trunk/; revision=9002
2003-11-18 08:58:09 +00:00