Commit Graph

18616 Commits

Author SHA1 Message Date
Gerald Combs 27c127863e Fix up copyrights and whitespace.
svn path=/trunk/; revision=18981
2006-08-21 19:22:33 +00:00
Jörg Mayer a2a5c2f998 Update FAQ
svn path=/trunk/; revision=18979
2006-08-21 16:17:24 +00:00
Jörg Mayer 3210936545 Update manuf list
svn path=/trunk/; revision=18978
2006-08-21 16:16:01 +00:00
Gerald Combs 98883c6538 AirPcap fix from Florent Drouin:
Since version 18928, there is a GTK warning at wireshark startup.
I think a #ifdef HAVE_AIRPCAP is missing in ./gtk/menu.c

svn path=/trunk/; revision=18976
2006-08-21 14:40:05 +00:00
Ronnie Sahlberg 93c3a4026b prettify the MMS dissector by at least putting the pdu name in the info column
svn path=/trunk/; revision=18975
2006-08-21 13:44:37 +00:00
Ronnie Sahlberg ce1ae65e12 from Angel de Juan
make mms bitstrings easier to read


--
Hi, this is my new mms with some changes in order to display some data in
binary instead of hex.

Excuse me because is not a diff from the repository, but I don't know how to
create a diff.

I also have the compiled packet-mms.c and packet-mms.h if you want it only
mail me.



svn path=/trunk/; revision=18974
2006-08-21 13:32:07 +00:00
Ronnie Sahlberg 834647384c get rid of a rotating buffer
svn path=/trunk/; revision=18973
2006-08-21 13:05:18 +00:00
Ronnie Sahlberg 27924a4603 move a few arrays off the stack
svn path=/trunk/; revision=18972
2006-08-21 13:00:55 +00:00
Ronnie Sahlberg 3d5a81b7e9 remove two hashtables and replace with binary trees
svn path=/trunk/; revision=18971
2006-08-21 12:41:59 +00:00
Martin Mathieson 654502118d The xmlns attribute isn't really part of the schema, so probably shouldn't be #REQUIRED (not that the XML dissector currently uses this property)
svn path=/trunk/; revision=18970
2006-08-21 11:52:20 +00:00
Martin Mathieson f8aadddf70 Make apply-as-filter strings work for FT_UINT_STRING (rather than using frame[...])
svn path=/trunk/; revision=18969
2006-08-21 11:45:37 +00:00
Martin Mathieson bd6931e2d3 Use FT_UINT_STRING for TBCP DENY reason-phrase
svn path=/trunk/; revision=18968
2006-08-21 11:41:32 +00:00
Ronnie Sahlberg 0ed3415d5d make the scsi statistics dialogs easier to understand for scsi novices
explain what the commandsets refer to   SBC==disk  SSC=tape  MMC=cd


svn path=/trunk/; revision=18967
2006-08-21 11:26:34 +00:00
Anders Broman 43d1b4c099 Dissect some more H.245 messages in MEGACO
svn path=/trunk/; revision=18966
2006-08-20 21:18:43 +00:00
Ronnie Sahlberg cf6d4692aa in LDAP over TCP
use tcp_dissect_pdus() which works    insterad of trying to do the pdu tracking and signalling for reassembly manually.
This makes ldap pdu tracking and reassembly work properly for cases when hosts are streaming lpad over tcp and there is little or none alignlemt of pdus to the start of a segment



svn path=/trunk/; revision=18965
2006-08-20 06:00:16 +00:00
Ronnie Sahlberg 0adb40dbc0 we have to search for multisegments starting PRIOR to the start of the current semgent or elsae it will break for the case when one multisegment ends in this segment there are a few smaller ones completely within this segment and then another segment starts that spans across future segments.
svn path=/trunk/; revision=18964
2006-08-20 05:18:10 +00:00
Gerald Combs a238f1f7ac Make sure a preference exists before we try to use it.
svn path=/trunk/; revision=18961
2006-08-20 01:19:56 +00:00
Anders Broman 84112e7167 Improve parsing a bit and correctly dissect errorDescriptor in Reply.
svn path=/trunk/; revision=18960
2006-08-19 21:42:25 +00:00
Ronnie Sahlberg c0e5ca30ad add some well known rids from s4 security.idl and code to show the name of this rid
when dissecting a security descriptor


svn path=/trunk/; revision=18959
2006-08-19 09:22:20 +00:00
Guy Harris f4457669d3 Fix some g_warning() calls.
svn path=/trunk/; revision=18958
2006-08-19 03:01:53 +00:00
Guy Harris 7cb6f60b18 Fix some format strings and format string arguments.
svn path=/trunk/; revision=18957
2006-08-19 03:01:15 +00:00
Guy Harris 5000c85513 Squelch a compiler warning.
svn path=/trunk/; revision=18956
2006-08-19 03:00:16 +00:00
Guy Harris 8a3af12c87 Define "char_def_alphabet_ext_decode()" with a return type - and define
it as static as it's not used outside this file.

svn path=/trunk/; revision=18955
2006-08-19 02:58:48 +00:00
Guy Harris 338f7ede99 Squelch a compiler warning.
svn path=/trunk/; revision=18954
2006-08-19 02:56:16 +00:00
Guy Harris 46bcd17054 Fix cut-and-pasteo.
svn path=/trunk/; revision=18953
2006-08-19 00:24:40 +00:00
Gerald Combs 7bded1f0ee Fix CID 209 (possible NULL dereference).
svn path=/trunk/; revision=18950
2006-08-18 20:18:38 +00:00
Guy Harris 51142bc70a From Gisle Vanem: export the new GUID functions.
svn path=/trunk/; revision=18949
2006-08-18 18:18:36 +00:00
Gerald Combs f95cb7af5c Add an attribution.
svn path=/trunk/; revision=18948
2006-08-18 15:46:43 +00:00
Ronnie Sahlberg b588469ccf guids are not olnly used in dcerpc interfaces and they often occur in many other protocols such as ldap and smb/smb2
move the initialization of the guid mapping table from the dcerpc dissector to a more neutral place


svn path=/trunk/; revision=18947
2006-08-18 09:32:19 +00:00
Ronnie Sahlberg 47969704c6 change the guid mapping code to use a tree isntead of a hashtable
svn path=/trunk/; revision=18946
2006-08-18 09:27:40 +00:00
Guy Harris a6eda1060e Rework some of the header processing, to handle some additional nettl
files, and to clean the code up a bit - and incorporate some fixes to
the rework, and other fixes, from Mark C. Brown.

svn path=/trunk/; revision=18945
2006-08-18 09:01:20 +00:00
Ronnie Sahlberg d6ba4c112c from stephen f
new protocol: veritas low latency transport

---
Attached is a patch file that adds a new dissector for the LLT protocol
(Veritas Low Level Transport, used for server clustering).  They use
ethertype 0xCAFE even though it isn't assigned to them :(.  There are
other fields and possibly other message types directly between servers
it does not yet dissect as no one outside of Veritas knows what they
are.  This dissector understands the one people will run across most -
multiple servers broadcasting these heartbeats all over the place.  I
figured out these fields through many Internet searches.

I will add the protocol to the Wiki after it is committed.


Thanks,
  Steve




svn path=/trunk/; revision=18944
2006-08-18 08:46:31 +00:00
Gerald Combs 0e5e0c4453 Fix two remaining off-by-one errors. Remove a static buffer.
svn path=/trunk/; revision=18943
2006-08-18 00:22:48 +00:00
Gerald Combs 5e344f5d95 Include strutil.h.
svn path=/trunk/; revision=18942
2006-08-17 23:35:45 +00:00
Anders Broman a870534df9 From Stephen Fisher:
the attached patch removes the 
redundant "Cisco Discovery Protocol" from the info column:

Before:

  Cisco Discovery Protocol  Device ID: myswitch.domain.com  Port ID: GigabitEthernet3/17

After:

  Device ID: myswitch.domain.com  Port ID: GigabitEthernet3/17

svn path=/trunk/; revision=18941
2006-08-17 20:32:06 +00:00
Anders Broman d221d6f2fc From Hannes Gredler:
A patch that adds support for dissection of
libpcap DLT_JUNIPER_VP frames. In addition i have fixed
also the indent for DLT_JUNIPER_GGSN.

svn path=/trunk/; revision=18940
2006-08-17 20:24:05 +00:00
Ulf Lamping 7d04019388 some further work on the GUID/UUID resolvings
most of the relevant code moved to guid_utils
lot of corresponding code cleanup in packet-dcerpc.c
still using GHashTable
still not using a manuf like file

svn path=/trunk/; revision=18939
2006-08-17 19:09:41 +00:00
Jörg Mayer 162d87a516 Muthu Krishnan V <muthukrishnanv@gmail.com>
As per RFC 4090, In the FAST_REROUTE Object, Include-any starts
at the 12th byte and Exclude-any starts at the 16th byte.

Ethereal has inter-changed these two fields in its display.

*Ethereal* bug 1043.

svn path=/trunk/; revision=18938
2006-08-17 11:56:35 +00:00
Ronnie Sahlberg 2fdf0e4b4b add trees with PErmanent allocation scope which will be useful for constructing
associative arrays for globally unique and persistent mappings such as
oid to name
sid to name
guid to name


svn path=/trunk/; revision=18937
2006-08-17 08:17:48 +00:00
Ronnie Sahlberg c7250199a7 add missing _WIN32 encapsulation so braces match and compilation under non-win32 works
svn path=/trunk/; revision=18936
2006-08-17 07:35:58 +00:00
Ulf Lamping de0594b9a5 various UUID/GUID based changes.
I think I've changed all corresponding appearances from FT_STRING to FT_GUID, so assert the FT_ type as it should only be a FT_GUID now.

Add a generic implementation in guid_utils.h to have a way to store data about GUID to name resolving (something like value_string for e.g. int). It might be better to have a single registry for all GUID's of all dissectors and implement the GUID name resolving into the proto_tree_add... functions.

svn path=/trunk/; revision=18935
2006-08-16 23:13:26 +00:00
Ulf Lamping eb7c653073 FT_STRING -> FT_GUID
svn path=/trunk/; revision=18934
2006-08-16 22:59:55 +00:00
Ulf Lamping 2ed79a23f1 lower the expert info levels WARN -> NOTE for missing references
fix an iteration bug in cba_connection_disconnectme()

svn path=/trunk/; revision=18933
2006-08-16 22:56:55 +00:00
Ulf Lamping 513649aad0 rollback some IMO unintended changes to the config settings
svn path=/trunk/; revision=18932
2006-08-16 22:45:51 +00:00
Ulf Lamping f17222a893 FT_STRING -> FT_GUID
svn path=/trunk/; revision=18931
2006-08-16 20:55:21 +00:00
Ulf Lamping 3ec210b0d1 Don't mark a TCP packet as a "Duplicate ACK" if the flags don't have the ACK flag set (IMHO it's not an ACK in that case). This happens sometimes between FIN and RST packets.
Ronnie, could you check if this change is ok?

svn path=/trunk/; revision=18930
2006-08-16 20:52:51 +00:00
Ronnie Sahlberg 58396f47da add tracking of fid type to objects opened by NT CREATE so that we can dissect aces properly also for these fids
svn path=/trunk/; revision=18929
2006-08-16 19:38:39 +00:00
Gerald Combs f9661850d1 Add support for AirPcap, an upcoming wireless product from CACE. Support
is disabled by default, and can be enabled by setting AIRPCAP_CONFIG
in config.nmake.  The code is currently limited to Windows, but should
be adaptable to other platforms.

The official announcement won't come until next week, so you'll have to
read the source for details.  :)

svn path=/trunk/; revision=18928
2006-08-16 18:01:25 +00:00
Ronnie Sahlberg b02d08fa76 use the same structure to pass the fid type information from nt transaction parameter to nt transaction data dissector for both ssd and qsd instead of two different ones
svn path=/trunk/; revision=18927
2006-08-16 10:35:04 +00:00
Ronnie Sahlberg d08c190fe0 track fid types between NT TRans QUERY_SECURITY_DESCRIPTOR and dissect the ACEs properly
svn path=/trunk/; revision=18926
2006-08-16 09:22:36 +00:00