Commit Graph

18708 Commits

Author SHA1 Message Date
Ulf Lamping a7ce410506 "Elapsed Time:" is truncated, use "Elapsed:" instead
svn path=/trunk/; revision=19237
2006-09-15 21:59:09 +00:00
Gerald Combs 7d95399a0d Use SESSIONNAME instead of CLIENTNAME to try to detect RDP sessions.
Look for a string that starts with "rdp".  This should take care of
cases where a default capture filter is set needlessly.

Update the docs accordingly.

svn path=/trunk/; revision=19236
2006-09-15 21:35:01 +00:00
Martin Mathieson 5f38a25c0b More missing message types
svn path=/trunk/; revision=19235
2006-09-15 15:03:18 +00:00
Anders Broman 20b391debb svn propset.
svn path=/trunk/; revision=19234
2006-09-14 17:21:28 +00:00
Martin Mathieson 2a380ba8bf More fixes and prettifications
svn path=/trunk/; revision=19233
2006-09-14 15:43:43 +00:00
Ronnie Sahlberg 8b236488e2 add OpenSCManagerW
also make the dissector manage that dcv->private_data in the future will be of ep scope



svn path=/trunk/; revision=19232
2006-09-14 12:01:18 +00:00
Jörg Mayer 2a5d217358 Jeff Morriss:
Fix for bug 1036

I looked at this today and found that in fact the PC stuff is pretty
hosed up in the SS7 dissectors.  For example, MTP3 *looks* OK here (DPC is
4-5-6):

    Routing label
        DPC (4-5-6) (394500)

but 394500 == 0x60504 == 6-5-4.  Something's not right.

I made a common PC dissector function for all the SS7 dissectors so as to
concentrate all this code in one place (something I've been wanting to do for a
while anyway) and fixed the reported problem as well as the above problem in
the attached patch.

svn path=/trunk/; revision=19231
2006-09-14 10:51:44 +00:00
Ulf Lamping 93bf2c9841 fix various minor things noted by Brian Drab
svn path=/trunk/; revision=19230
2006-09-13 20:37:37 +00:00
Martin Mathieson 1d5165c8e0 Add support for R6 HSDPA data 'new IEs' (the spec seems not be be very clear...).
Try to cast away a warning seen on buildbot logs

svn path=/trunk/; revision=19229
2006-09-13 13:32:31 +00:00
Ulf Lamping 1048fafb27 so it's HAVE_LIBPORTAUDIO
svn path=/trunk/; revision=19228
2006-09-13 11:28:36 +00:00
Jörg Mayer ac260321d9 Add a comment
svn path=/trunk/; revision=19227
2006-09-13 10:51:40 +00:00
Ronnie Sahlberg f6976864bf the way we pass dcerpc strings from deep down in helpers to high level dissector functions (dcv->private_data) for things such as strings and sids is a mess and very difficult to handle without a lot of memory leakage.
the biggest problem in changing this is the dcv->private_data usage.


add a dcv->se_data which can keep data around from a request to a response and use this to change the LSA/OpenPolicy2 servername passing from request to response as a test pattern of moving all users of dcv->private data over to use dcv->se_data.

once all users are migrated over we can then change the dcv->private data pointer to be of ep scope and thus not need an explicit free (which is quite difficult and it is quite difficult in the old semantics to know WHEN we need to free this pointer)

this will eventually make the usage more clean and at the same time close down quite a few memory leaks.


eventually this will make dissect_ndr_nt_SID return a pointer to ep allocated memory that need not be explicitely freed.



svn path=/trunk/; revision=19226
2006-09-13 08:30:16 +00:00
Guy Harris 2e64b81928 Not all platforms define "u_short", and "tvb_length_remaining()+4" isn't
guaranteed to fit into a "u_short" in any case.  Use "gint" instead.

Squelch some compiler warnings.

svn path=/trunk/; revision=19225
2006-09-13 01:28:07 +00:00
Gerald Combs 3edaa624c5 Get rid of a compiler warning.
svn path=/trunk/; revision=19224
2006-09-12 21:59:54 +00:00
Guy Harris 1ae3d4e86e AC_CHECK_TYPE already prints a "checking for" message; don't bother
printing another one before calling it.

svn path=/trunk/; revision=19223
2006-09-12 20:24:42 +00:00
Guy Harris c577480d71 Move the PortAudio stuff to from version_info.c to gtk/main.c, so it can
use Pa_GetVersionText().

(The word-wrapping stuff appears to work.)

svn path=/trunk/; revision=19222
2006-09-12 20:23:57 +00:00
Anders Broman 5dd7a4e7f9 From: Luca Deri via Andrew Feren:
> please find enclosed a patch to the CFlow dissector (packet-netflow.c) 
> that enables it to decode IPFIX packet traces.

svn path=/trunk/; revision=19221
2006-09-12 19:11:45 +00:00
Anders Broman ffbabd4fb8 Set default port to zero.
svn path=/trunk/; revision=19220
2006-09-12 19:02:10 +00:00
Jörg Mayer 6cf447a76d tshark wouldn't link any more, as it doesn't link against
libportaudio, but version_info.c with libportaudio >= 19
needs to link against this.

FIXME: Just print out >= 19 instead of real version string
  until someone finds a proper solution.

svn path=/trunk/; revision=19219
2006-09-12 18:51:22 +00:00
Jörg Mayer 5f9300b9e2 Makefile.nmake
config.h.win32
  - Use HAVE_LIBPORTAUDIO instead of HAVE_PORTAUDIO to make
    sure we use the same var everywhere (including sources
    and autofoo stuff).
  - Use PORTAUDIO_API_1 everywhere

version_info.c
  - Include <portaudio.h>
  - Add some , and breaks when printing version infos.

svn path=/trunk/; revision=19218
2006-09-12 18:43:56 +00:00
Ulf Lamping d0f09612b8 add version output (e.g. in the About box) for the following libraries:
-GnuTLS
-Gcrypt
-Kerberos (no version, only if compiled with MIT/HEIMDAL or without any kerberos)
-PortAudio (version number only for V>=19, maybe need some fixing)

Don't know how to use the line breaking stuff, if someone could help me here ...

svn path=/trunk/; revision=19217
2006-09-12 17:50:36 +00:00
Ulf Lamping e8ddc809b5 fix the generation of config.h, some HAVE_... were wrong
svn path=/trunk/; revision=19216
2006-09-12 17:46:55 +00:00
Ulf Lamping edae542c06 it's HAVE_PORTAUDIO, not HAVE_LIBPORTAUDIO
svn path=/trunk/; revision=19215
2006-09-12 17:45:43 +00:00
Ulf Lamping af15bf7782 it's HAVE_LIBGNUTLS instead HAVE_GNUTLS
svn path=/trunk/; revision=19214
2006-09-12 17:34:41 +00:00
Ulf Lamping d4585bdf69 use the official name spelling for some projects
svn path=/trunk/; revision=19213
2006-09-12 17:28:38 +00:00
Martin Mathieson 46afb89310 More DCH control types
svn path=/trunk/; revision=19212
2006-09-12 17:13:56 +00:00
Jaap Keuter 593efe3509 Fix for bug 1098. Add BPDU dissector to ethertype 0x8181.
svn path=/trunk/; revision=19211
2006-09-12 12:58:16 +00:00
Ronnie Sahlberg 4919409df7 from Taner Kurtulus and Menno Andriesse
Hi folks,
We think we've found a bug in STANAG 5066 SIS layer dissector.

Problem is at S_EXPEDITED_UNIDATA_INDICATION S_Prim's parser
and occurs when we receive a U_PDU via expedited unidata channel.
Dissector tries to parse first 2 bytes of U_PDU as a header size of  type
21 s_prim (S_UNIDATA_INDICATION). But, this is not an wanted  process on
that parser. Maybe, it was forgotten unchanged from
S_UNIDATA_INDICATION dissector while copying it. So it shows
data (U_PDU) 2 bytes short. Moreover, if data is just 1-byte, TCP datagrams
receive TCP checksum error.


Confirmed.

It was indeed a "copy-paste-did not edit correctly" bug.

While going over the code once more, I found:

1 - One bug in the heuristic. (Changed '&&' to '||')
2 - One to-do that was already done. (Removed the /* TODO */)
3 - One to-do that is now done. ;-)



svn path=/trunk/; revision=19210
2006-09-12 12:08:34 +00:00
Ronnie Sahlberg 073483df45 from Florian Lohoff
Hi,
after using the redback dissector again i found some more protocol
types:



svn path=/trunk/; revision=19209
2006-09-12 11:51:48 +00:00
Ronnie Sahlberg b61e42bc3a from bryant eastham
Also, there is still an outstanding issue regarding the default use of
the "media" dissector. The way it is currently coded there is no way to
have a heuristic decoder when a content-type header is specified.


In this way if there is a decoder for a specific content-type then it
will be used, then the heuristic decoders have a chance, and finally the
default of either the media-type decoder of the http_payload decoder.



svn path=/trunk/; revision=19208
2006-09-12 11:39:51 +00:00
Martin Mathieson 3dc82c316d Various small fixes and prettifications
svn path=/trunk/; revision=19207
2006-09-12 11:36:42 +00:00
Ronnie Sahlberg a92d1dc783 put the ah and esp payload as its own top level expansion in the tree instead of as an expansion inside the ah/esp layer.
since source/dest/protocol/info is updated by the content of the payload    it doesnt make sense to hide the actual payload inside esp/ah
it just would look confusing



svn path=/trunk/; revision=19206
2006-09-12 10:04:11 +00:00
Ronnie Sahlberg 68e8b2f914 the name of the protocol is IPsec, not IP-sec
svn path=/trunk/; revision=19205
2006-09-12 10:02:28 +00:00
Ronnie Sahlberg a67f7da9d7 prettify dissection of ESP
show the IV as a hexadecimal
show the protocol name for the Next header field inside ESP



svn path=/trunk/; revision=19204
2006-09-12 09:53:10 +00:00
Jörg Mayer 46e0abe929 - Replace the ELINKS variable by HTML2TEXT and include the parameters
into the variable to make this actually portable.
- Some whitespace changes between filenames and the \

svn path=/trunk/; revision=19203
2006-09-12 09:35:29 +00:00
Ulf Lamping 02b49da1b2 add a missing dependency from wiretap to the image dir, otherwise image/wiretap.res can't be generated for some targets
svn path=/trunk/; revision=19202
2006-09-12 08:24:01 +00:00
Ulf Lamping 8d7690ea23 wireshark.res is generated in the image dir, so the paths for includes should be relative to /image and not to /
svn path=/trunk/; revision=19201
2006-09-12 08:22:02 +00:00
Ulf Lamping 4286f79f59 add a comment, that .res files are generated using an implicit (built in) nmake rule
svn path=/trunk/; revision=19200
2006-09-12 08:19:39 +00:00
Ulf Lamping b16e2c43c5 Hmmm, don't optimize too much :-)
also fix the clean_setup

svn path=/trunk/; revision=19199
2006-09-12 01:04:35 +00:00
Ulf Lamping 04fe34d711 various nmake related build file cleanups
svn path=/trunk/; revision=19198
2006-09-12 00:27:03 +00:00
Ulf Lamping 0dbb8ffcaf remove obsolete "HAVE_AIRPCAP_API" comment
svn path=/trunk/; revision=19197
2006-09-12 00:23:46 +00:00
Ulf Lamping 9fee393b87 tweak the nmake build so the NET-SNMP library is in fact optional (as it is in the UNIX builds)
svn path=/trunk/; revision=19196
2006-09-11 22:47:57 +00:00
Ulf Lamping 1d1f904321 let the user only specify the PortAudio version and do the "ugly details" in the part below, just as we do it for most other libs
svn path=/trunk/; revision=19195
2006-09-11 22:43:00 +00:00
Ulf Lamping 32bc691d97 a proxy might also be specified using .wgetrc, so don't switch off the proxy explicitly
svn path=/trunk/; revision=19194
2006-09-11 22:37:46 +00:00
Ulf Lamping a56edc8e34 As no one seems to update the install information in this file (including me), remove most of the installation text and mention the User's Guide instead.
Some minor updates in the development section as well.

svn path=/trunk/; revision=19193
2006-09-11 22:34:29 +00:00
Ulf Lamping 7c2dbdd580 add missing libraries: GNUTLS, Gcrypt, Kerberos, LUA, PortAudio (please check if it's correct)
fix a lot of broken URL's

svn path=/trunk/; revision=19192
2006-09-11 22:30:12 +00:00
Ulf Lamping 26b81bd926 add the LUA plugin install option
svn path=/trunk/; revision=19191
2006-09-11 20:41:32 +00:00
Anders Broman 96c13a1000 Fix bug http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1091
h248_handle was declared localy, udp port was not added at register.

Added a few more packagenames.

svn path=/trunk/; revision=19190
2006-09-11 20:35:24 +00:00
Martin Mathieson 1936461d8d Added E-DCH (HSUPA) channels to FP.
Also show VPI/VCI/CID in ATM protocol label.

svn path=/trunk/; revision=19189
2006-09-11 12:03:29 +00:00
Jaap Keuter f29dbe34d8 VRRPver3 support fixed: Count restored, Auth Type is reserved field.
svn path=/trunk/; revision=19188
2006-09-10 18:48:33 +00:00