Commit Graph

2074 Commits

Author SHA1 Message Date
Ronnie Sahlberg b140a83293 more idl2eth and drsuapi updates
svn path=/trunk/; revision=13759
2005-03-15 09:36:18 +00:00
Ronnie Sahlberg 5d7b72fd86 update to idl2eth adding WERROR as a built in type
svn path=/trunk/; revision=13758
2005-03-15 08:24:10 +00:00
Guy Harris 5817da91dc Export another routine that's been asked for at least once.
svn path=/trunk/; revision=13757
2005-03-14 23:41:08 +00:00
Anders Broman 612e924994 Routines for Unlicensed Mobile Access(UMA) dissection ( http://www.umatechnology.org/
UMA Protocols (Stage 3) R1.0.2 (2004-11-05) )
Work in progress.

svn path=/trunk/; revision=13756
2005-03-14 22:26:57 +00:00
Ronnie Sahlberg 1fe0f9022e a lot of people dont specify top level pointers in teh idl and just
cerlare it as a parameter that is a struct/union and not a ref pointer to one.

this is ok since toplevel ref pointers are invisible in the wire encoding anyway.

unfortunatelky  ethereal dce runtime needed to see that pointer to keep track of whisch one was a toplevel and which one wasnt.


implement a new api to call pointers which explicitely specifies whether the pointer is toplevel or embedded.
eventually all dce dissectors will use this new interface and the generic dissect_ndr_pointer() can be retired.



svn path=/trunk/; revision=13755
2005-03-14 20:51:13 +00:00
Guy Harris 9ce4ff20ef Tagged integers have 4 bytes of data (1 byte of tag, 3 bytes of
integer), not 5 bytes.

svn path=/trunk/; revision=13753
2005-03-14 20:23:11 +00:00
Guy Harris a81c8f1738 Some VoIP VLAN query and reply fields have a length of 6, not 7, with
only 2 bytes of data; dissect those differently.

svn path=/trunk/; revision=13752
2005-03-14 19:53:07 +00:00
Guy Harris c7e7167a2b Combine the two switch statements on IE type into one; this cleans
things up a bit (so that if we go through one switch statement we don't
fall into the other).

svn path=/trunk/; revision=13751
2005-03-14 11:12:00 +00:00
Guy Harris 0c70225fc6 Comment changes.
svn path=/trunk/; revision=13750
2005-03-14 10:45:46 +00:00
Ronnie Sahlberg 549ec8ee25 fix typo in name of KINK developer
svn path=/trunk/; revision=13749
2005-03-14 10:27:25 +00:00
Ronnie Sahlberg 59b3267d40 updates for drsuapi
svn path=/trunk/; revision=13748
2005-03-14 09:49:58 +00:00
Guy Harris 5f1b64cf8c Don't cruft up the display of the bitmap with "Tag interpretation".
(Perhaps we should just get rid of the "tag interpretation" field and,
instead, have explicit hf_ values for each of the fields and subfields.)

svn path=/trunk/; revision=13747
2005-03-14 03:08:38 +00:00
Ulf Lamping 49213d49da Very first start of a dissection of the VNC (RFB) protocol.
This is not much more than the dissector skeleton code.

svn path=/trunk/; revision=13746
2005-03-14 00:53:58 +00:00
Guy Harris 4d5d55b604 Handle the packet headeer for sFlow V5, put in a stub dissector for V5
samples, and give the URL of the V5 spec and some hints about how to
handle the private enterprise code in those samples.

For subtrees that cover structures, make the tree cover the entire
structure, not just the first field.

Add the flow sample type and extended data type to the protocol tree.

Set the protocol column name to capitalize "sFlow" the conventional way,
and remove the redundant "sFlow" from the Info column.

svn path=/trunk/; revision=13744
2005-03-13 21:42:51 +00:00
Guy Harris 99d60f21aa Don't attempt to get a pointer to the entire tagged field when
dissecting it; instead, fetch items from the tagged field as we go. 
Also, check the length of the tagged field against a minimum length, if
there is one.

When adding the SSID, just fetch it directly as a string, and leave it
up to the string display code to deal with non-printable characters.

When dissecting a tagged field, don't zero out the "out_buff" buffer
beforehand, just stick in the terminating '\0' afterwards.

svn path=/trunk/; revision=13743
2005-03-13 13:28:06 +00:00
Guy Harris d5c1aec8b5 Get rid of extra semicolon - it might be giving MSVC++ heartburn.
svn path=/trunk/; revision=13740
2005-03-13 07:53:19 +00:00
Gerald Combs 9d5ee3cfea Fix a check for the number of suboptions.
svn path=/trunk/; revision=13739
2005-03-13 05:48:43 +00:00
Guy Harris 4047793286 Use the tokenizing routines to parse HTTP request and status lines.
Rename the RequestDissector type to ReqRespDissector as it's used to
dissect status (response) lines as well as request lines.

svn path=/trunk/; revision=13738
2005-03-13 00:49:33 +00:00
Ronnie Sahlberg 8123288f6d some auth padding update from metze
svn path=/trunk/; revision=13736
2005-03-12 21:01:38 +00:00
Ronnie Sahlberg 3a26213e88 the previous drsuapi patch showed how idl2eth can handle embedded arrays just fine.
beautifully fine.

this patch overrides the array,   tells idl2eth to not generate code to unmarshall the conformance blob or the data for the array.

a handwritted replacement function is implemented in the template instead which prettifies the output a lot.



svn path=/trunk/; revision=13735
2005-03-12 12:04:44 +00:00
Ronnie Sahlberg 2ee14eef27 refine IDL
svn path=/trunk/; revision=13733
2005-03-12 10:55:50 +00:00
Ulf Lamping 25531c9a70 from Micheal Duigou: some more doxygen tags
svn path=/trunk/; revision=13732
2005-03-12 09:59:28 +00:00
Ronnie Sahlberg cc6d037933 fix small bug from previous checkin for fixed arrays
svn path=/trunk/; revision=13730
2005-03-12 09:24:54 +00:00
Ronnie Sahlberg 0e3ff62701 initial DRSUAPI dissector
now that we can decrypt DCERPC

the dissection is not complete since idl2eth can not yet handle
all the weird extensions in the idl file yet.


svn path=/trunk/; revision=13729
2005-03-12 09:02:01 +00:00
Jörg Mayer bbba7523e7 warning: function declaration isn't a prototype
svn path=/trunk/; revision=13728
2005-03-12 07:37:14 +00:00
Ulf Lamping e378098855 from Micheal Duigou: add some doxygen tags and some changes to README.developer
svn path=/trunk/; revision=13725
2005-03-11 21:14:38 +00:00
Ulf Lamping b8a20994cb add missing dissector_dump_decodes function
svn path=/trunk/; revision=13723
2005-03-11 18:57:12 +00:00
Gerald Combs 76ba06d767 Add a "-G decodes" option to ethereal and tethereal which shows the
filter/selector/protocol associations for each dissector.  This will be
used to improve our automated tests, but someone with time on their 
hands could probably use it to generate a protocol poster using Graphviz.

svn path=/trunk/; revision=13721
2005-03-11 16:17:41 +00:00
Guy Harris 092815f97d From Vladimir Kondratiev:
- Give each IE its own subtree, with a summary at the root, and
	  details within the tree.  It allows a condensed view when IE
	  trees are closed.

	- Display country info in multiple protocol tree items, with
	  each (start channel, channels, power) triplet in a separate
	  item.

	- Put a separate item into the protocol tree for each CFP
	  parameter.

svn path=/trunk/; revision=13713
2005-03-11 12:07:30 +00:00
Guy Harris 3057f63c8d Fix the offset for the system uptime field.
svn path=/trunk/; revision=13712
2005-03-11 11:59:27 +00:00
Guy Harris 2368cd28d9 We don't have an SMDS dissector, and it's not clear what dissector
should be used for ATM, so just use the data dissector for now.

The X.25 dissector registers itself as "x.25", not "x25".

svn path=/trunk/; revision=13711
2005-03-11 11:46:48 +00:00
Ronnie Sahlberg 349c5a8699 from metze
various bugfixes and enhancements to decryption of secure ldap


svn path=/trunk/; revision=13710
2005-03-11 09:31:11 +00:00
Guy Harris 009de7a662 From Alexandro Vaquero:
fix the call to "rtp_add_address()" to match the new signature;

	fix a problem with the codec displayed in the "Voip Graph"
	for H245 "RequestMode" messages.

svn path=/trunk/; revision=13709
2005-03-11 03:05:57 +00:00
Guy Harris 6db3fe1e96 Just use "tvb_format_text()" to handle strings - don't roll our own
routine to handle that.
 
Don't format the value text into a buffer; just use
"proto_item_append_text()", so we don't run the risk of overflowing the
buffer.

Use "ip_to_str()" to format an IP address - don't roll our own code to
handle that.

Don't make "is_fhss" global - that causes its value to depend on the
last packet dissected, which isn't necessarily the right value for the
packet being dissected.

svn path=/trunk/; revision=13707
2005-03-11 01:35:02 +00:00
Jörg Mayer 0f764ba58a Warning fix: no newline at end of file
svn path=/trunk/; revision=13701
2005-03-10 21:04:34 +00:00
Luis Ontanon 008054453b From Alejandro Vaquero:
- Automatic dissection of RTP events (RFC2833) set in SDP sessions.
- Add RTP events (RFC2833) to the Voip Graph


svn path=/trunk/; revision=13697
2005-03-10 19:32:22 +00:00
Ronnie Sahlberg 8700645d54 add support to decrypt and dissect sign-and-sealed traffic.
(cifs: dc's talking to eachother   and when longhorn comes out: anyone wanting to talk dce to a dc!)

((this is an incredibly advanced feature well worthy of mentioning in NEWS))


svn path=/trunk/; revision=13690
2005-03-10 10:16:49 +00:00
Ronnie Sahlberg 1564a2d2d3 add two nice defines for how to decrypt a GSSKRB tvb
dce has slightly different padding and checksumming so we have to tell decrypt_arcfour() about it.



svn path=/trunk/; revision=13689
2005-03-10 08:52:59 +00:00
Ronnie Sahlberg 0180d280fe change the signature for the functions to decrypt data for the
dcerpc_auth_subdissector_fns structure.

the SignAndSeal decryption (which works really well) needs this.



svn path=/trunk/; revision=13688
2005-03-10 08:50:18 +00:00
Ulf Lamping 2f73c1d242 removed some MSVC compiler warnings, mostly I've casted "downsized function parameters"
svn path=/trunk/; revision=13684
2005-03-09 23:00:21 +00:00
Gerald Combs aa8bea0559 Add a couple of definitions not present in MIT Kerberos. Fix a compiler
warning.

svn path=/trunk/; revision=13682
2005-03-09 19:43:29 +00:00
Ronnie Sahlberg 6626c6aac2 refactor the code to not use heimdal functions to decrypt and unwrap the blob.
use builtin functrions instead  which will make it trivial to add this support to mit later


svn path=/trunk/; revision=13680
2005-03-09 11:59:40 +00:00
Guy Harris 56f04fe686 Set the eol-style and keywords properties.
Use "tvb_reported_length_remaining()", not "tvb_length_remaining()", in
the loop parsing the packet contents, so we throw an exception on a
short frame (to mark that it *is* a short frame).

Use "tvb_format_text()" for text strings, so we don't have a problem
with non-printable characters.

Use "ether_to_str()" to turn MAC addresses into strings.

Clean up indentation.

svn path=/trunk/; revision=13679
2005-03-09 10:57:58 +00:00
Guy Harris 87c16299db From Vladimir Kondratiev:
- better parsing for TIM info element: it parses 'bitmap control' byte
and provides list of AID for stations having power saving traffic.
- separate names for TIM elements. It helps to higlight beacons with
some properties, for example DTIM ones (dtim_count==0).

svn path=/trunk/; revision=13678
2005-03-09 10:43:34 +00:00
Guy Harris 85dc6331eb Comment out a routine that's not currently being used.
svn path=/trunk/; revision=13677
2005-03-09 10:29:59 +00:00
Guy Harris 8d34b8cacd From Ricardo Muggli: decode the voice VLAN field in CDP packets.
svn path=/trunk/; revision=13676
2005-03-09 10:24:34 +00:00
Ronnie Sahlberg 4d0cb72d02 add helper to compute the md5 hmac
svn path=/trunk/; revision=13673
2005-03-09 07:29:52 +00:00
Guy Harris 3ca7500032 Updates from Abhijit Menon-Sen.
svn path=/trunk/; revision=13672
2005-03-09 03:15:59 +00:00
Guy Harris d7855a3c4d Fix the properties.
svn path=/trunk/; revision=13671
2005-03-09 03:04:46 +00:00
Guy Harris 33006e7f92 Squelch some compiler warnings if we don't have Kerberos.
svn path=/trunk/; revision=13670
2005-03-09 03:03:10 +00:00