Commit graph

2777 commits

Author SHA1 Message Date
Ronnie Sahlberg
fc97105f24 add Jaap K's extensions
also change one (of several:-( )  arrays to be accessed through accessor functions so proper bounds checking is done.


there are many other inbstances of arrays in this dissector that are accessed with no proper bounds checking and the same thing should be done for them




svn path=/trunk/; revision=16891
2005-12-23 23:54:35 +00:00
Ronnie Sahlberg
c98abee7ef from jaap k
Hi list,

On the Ethereal Wiki is a CDP capture of a Broadcom BCM1100 VoIP chipset.
It has a power consumption TLV, which was not yet dissected. The attached
patch does that.




svn path=/trunk/; revision=16890
2005-12-23 21:12:40 +00:00
Ronnie Sahlberg
dd19e660ba make smb2 tappable
svn path=/trunk/; revision=16886
2005-12-23 04:55:25 +00:00
Ronnie Sahlberg
80720ebcab from eric wedel
kpasswd over tcp support


svn path=/trunk/; revision=16885
2005-12-23 03:43:56 +00:00
Ronnie Sahlberg
9b61e75bb6 dunt put ACK number in COL_INFO or in the decode pane if the ACK bit is not set
svn path=/trunk/; revision=16884
2005-12-22 23:23:25 +00:00
Ronnie Sahlberg
15f441cdd6 add decoding of RFC3947 which should fix bug 513
svn path=/trunk/; revision=16883
2005-12-22 21:28:51 +00:00
Anders Broman
5b106306fd From Martin Mathieson:
there are only 1000 ms in one second

svn path=/trunk/; revision=16882
2005-12-22 16:26:26 +00:00
Ronnie Sahlberg
4e518c616d some ACEs are not used for authorization and thus do NOT contain an access mask and a SID.
make the dissection of the ACL check the type for each individual ACE and only dissect  as access mask and sid  those ACEs we know how to handle.


this prevents ethereal from dumping on w32 if we encounter any of these "special" ACE entries,   such as the ones used for storing location data for offline files.




svn path=/trunk/; revision=16881
2005-12-22 08:51:50 +00:00
Anders Broman
d4e37349e7 Fix Bug 642, use col_set_fence() not to owerwrite column info if several Skinny messages are in one frame.
svn path=/trunk/; revision=16880
2005-12-22 07:11:21 +00:00
Jörg Mayer
409ea74249 As reported by Mark Millet <mmillet@cisco.com>
Add message types 13-17 for option 53 decoding.


svn path=/trunk/; revision=16879
2005-12-22 02:37:22 +00:00
Jörg Mayer
788e63c8d2 Jaap Keuter:
Add MS NLB buildin dissector

svn path=/trunk/; revision=16875
2005-12-22 01:26:04 +00:00
Jörg Mayer
25d4aaaaa4 - Add max frame size
- Add port power forwarding
- Some more field cleanups

svn path=/trunk/; revision=16873
2005-12-22 01:08:07 +00:00
Jörg Mayer
4d91380f8e - Don't use numbers when there are enum values
- Better nameing of tfs_ arrays
- Name and dissect "version" field (previously unknown)
- Name and dissect "add tag scheme" (previously unknown)
- Add lots of comments about meanings in the port data
- The first byte in the set command is probably some salt value


svn path=/trunk/; revision=16871
2005-12-21 11:21:49 +00:00
Ronnie Sahlberg
8aca1c1c52 add dissection of two more NTCreateAndX bits :
open by file id 
and
backup intent



svn path=/trunk/; revision=16869
2005-12-21 08:48:59 +00:00
Anders Broman
5a0d95fa76 From jaap Keuter:
Taking a random dissector from the list on the Wiki I picked packet-enip.c. Nothing wrong with this one, I still ememified it.

From Bart Braem:
packet-mip.c does not have support for all registration denials by the foreign agent, code 77 was left out. The attached patch fixes that.

svn path=/trunk/; revision=16868
2005-12-20 18:38:13 +00:00
Jörg Mayer
e3c87533ae packet-rnsap.[hc] were added to Makefile.common but missing from svn
svn path=/trunk/; revision=16866
2005-12-20 09:23:42 +00:00
Jörg Mayer
9575877bb7 packet-radius.c, packet-xml.c:
Fix a memory leak found by valgrind:
        Although dir isn't a directory it may still use memory

packet-xml.c:
        Reformat the relevant function in packet-xml.c to be readable on systems
        where a tab is 8 spaces.

svn path=/trunk/; revision=16865
2005-12-20 08:35:53 +00:00
Anders Broman
fadf4746d1 Add dissection of RNSAP, not complete yet.
svn path=/trunk/; revision=16864
2005-12-20 07:22:33 +00:00
Anders Broman
f9d87c5800 Get rid of some GCC warnings about unused code.
svn path=/trunk/; revision=16861
2005-12-19 19:36:32 +00:00
Luis Ontanon
b56c1ffc6f register the m3ua dissector by name
svn path=/trunk/; revision=16859
2005-12-19 19:21:32 +00:00
Luis Ontanon
0d2f2c33ff Avoid a warning if release_cause == 0
svn path=/trunk/; revision=16858
2005-12-19 19:20:31 +00:00
Luis Ontanon
5113ab4d4a Add support for Juniper GGSN generated pcap files.
svn path=/trunk/; revision=16857
2005-12-19 19:18:20 +00:00
Anders Broman
185cfdefd4 From John Sullivan:
Three patches here:

eth-ed-2.diff
-------------

1) The handling of HashSet Answer messages was wrong
2) Add dissection of some more eMule extension packets to do with
   error recovery

   
eth-bt-1.diff
-------------

New versions of the Azureus BitTorrent client implement a new extension to the protocol, which is effectively a text based encapsulation of the binary BitTorrent protocol, embedded within the BitTorrent protocol. Who knows why they thought that was a good idea, but this patch can pick apart their new headers.


eth-bt-2.diff
-------------

By registering a normal dissector as well as the heuristic one, BitTorrent shows up on the Decode As... list so you can manually override its mistake.

svn path=/trunk/; revision=16856
2005-12-19 06:48:07 +00:00
Jörg Mayer
dba7a99e1d warning: C++ style comments are not allowed in ISO C90
svn path=/trunk/; revision=16853
2005-12-18 23:22:47 +00:00
Jörg Mayer
b06bd208d0 warning: function declaration isn't a prototype
svn path=/trunk/; revision=16852
2005-12-18 23:18:06 +00:00
Anders Broman
aec5bebc77 From Michael Rozhavsky:
In my previous patch I forgot to add a OOBResync flag to the DBD packet flags field. This patch adds this flag.

svn path=/trunk/; revision=16847
2005-12-18 19:01:46 +00:00
Anders Broman
e3e3e3f5f8 From Greg Morris:
-  New Dissector Novell Cluster Services

1. Changes Dir Handle Type from Boolean to val string
2. Changes Search Mode from Boolean to val string
3. Adds a number of additional attribute definitions
4. Adds file migration state values
5. Adds missing return values
6. Adds NCP 90,150 "File Migration Request"
 

svn path=/trunk/; revision=16844
2005-12-18 18:13:05 +00:00
Guy Harris
004eb8b1c1 If we're going to use a handle for the data handle, we need to get a
handle for that dissector.  This fixes bug 637.

svn path=/trunk/; revision=16842
2005-12-18 11:19:25 +00:00
Guy Harris
9851c0aa87 Get rid of an unused variable.
svn path=/trunk/; revision=16840
2005-12-18 10:59:45 +00:00
Guy Harris
e09d859591 Squelch a compiler warning.
svn path=/trunk/; revision=16839
2005-12-18 10:58:47 +00:00
Guy Harris
df02403f08 Get rid of an unused variable.
svn path=/trunk/; revision=16838
2005-12-18 10:51:41 +00:00
Guy Harris
bcd1cacaa7 Get rid of an unused variable.
Fix a typo in svn:keywords.

svn path=/trunk/; revision=16837
2005-12-18 10:42:29 +00:00
Luis Ontanon
0f4cc578a1 remove // comments
svn path=/trunk/; revision=16835
2005-12-17 21:17:58 +00:00
Luis Ontanon
bc84ba5de6 Have tcap subdissectors registering using functions provided by tcap and tcap manage ssn registration.
In packet-sccp.c avoid not having a binding.


svn path=/trunk/; revision=16834
2005-12-17 16:55:45 +00:00
Ronnie Sahlberg
99395c7775 add work in progress srvsvc.idl.
This idl file is required by wkssvc.idl since wkssvc references Platform_id


There are still some minor changes required for pidl to prettify the output for both wkssvc and srvsvc before these two dissectors should be used.



note that this idl is significantly different from the samba4 idl since it contains all the additional functions and structures the handwritten dissector has that is lacking from s4 idl.

it is expected that s4 will take up the authorative version of this idl soon so there will only be one master copy of this idl.




svn path=/trunk/; revision=16831
2005-12-16 22:06:52 +00:00
Anders Broman
111de4ae66 A patch for packet-ospf.c is attached:
- Fix the handling of the DN-bit of options field.
 - Add a new function dissect_ospf_bitfield() to dissect a bitfield
   such as options, flags. The following functions are merged by
   using this function.
     - dissect_ospf_lls_extended_options()
     - dissect_ospf_dbd()
     - dissect_ospf_options()
     - dissect_ospf_v3_prefix_options()
 - dissect the flags and prefix-options bitfield.

svn path=/trunk/; revision=16828
2005-12-16 20:37:45 +00:00
Anders Broman
fa04b29920 As per Olivier Jacques mail,
"preferences/mtp3 must be changed accordingly (it is explicitly indicated that the "network address format" is ..."
Change the text and som names.

svn path=/trunk/; revision=16827
2005-12-16 20:36:09 +00:00
Jörg Mayer
0beb951745 Some updates
svn path=/trunk/; revision=16825
2005-12-16 17:52:05 +00:00
Anders Broman
6f23144e46 From Jaap Keuter:
- Editcap 
Mikko Tiihonen filed bug 379 including a patch for editcap. This wasn't picked up so far. I've ported the patch to svn 16820 and included a documentation patch.

-packet-ieee80211.c
Radek Vokal of RedHat filed a bug found by Vladimir Kondratiev of Intel in the 802.11 dissector. Radek provided a sample capture and Vladimir a oneliner patch. I've ported the patch to svn 16820 and tested it against the provided capture. Works well.


-From Kan Sasaki
A patch for packet-ospf.c is attached:
 - Fix the handling of the DN-bit of options field.
 - Add a new function dissect_ospf_bitfield() to dissect a bitfield
   such as options, flags. The following functions are merged by
   using this function.
     - dissect_ospf_lls_extended_options()
     - dissect_ospf_dbd()


     - dissect_ospf_options()
     - dissect_ospf_v3_prefix_options()
 - dissect the flags and prefix-options bitfield.

- lldp Bugfix Bug 596  LLDP TIA Network Policy Decode is not correct 

- Camel make it possible to dissect based on OID.

svn path=/trunk/; revision=16822
2005-12-16 16:37:03 +00:00
Anders Broman
9269a3b4f2 From Jaap Keuter:
Bug 373 complains about a field type. Trivial fix attached.

svn path=/trunk/; revision=16821
2005-12-16 16:31:46 +00:00
Anders Broman
336086ca21 From Michael Rozhavsky:
This patch adds support for draft-nguyen-ospf-lls-05.txt, draft-nguyen-ospf-oob-resync-05.txt and draft-nguyen-ospf-restart-05.txt. These are an alternative way to do OSPF graceful restart.

These drafts are implemented by cisco and several other vendors that want to interoperate with cisco. My patch adds a dissectors for LLS TLVs.

I had to modify the existing ospf dissector as it assumed that all the data after IP header is OSPF packet. This is not true anymore and probably was not true before as well.

Also please find attached an example of OSPF packets with LLS data blocks.
-- 
   
   

svn path=/trunk/; revision=16818
2005-12-16 07:37:28 +00:00
Anders Broman
8d05164bec Get rid of duplicted dissector tables for MTP3 Service indicator and SCCP ssn:s
svn path=/trunk/; revision=16815
2005-12-16 07:05:50 +00:00
Anders Broman
483ec5bd05 From Graeme Lunt:
* DOP - This has now been successfully tested and so is now enabled by default and workaround code removed. 
Also now uses the correct EXPORTs from the other modules/dissectors.

* X509SAT - Most of the selected attributes are now supported in addition to the DirectoryString syntax attributes. This includes restoring the correct DirectoryString syntax and also providing the basic syntaxes (e.g. OBJECT IDENTIFIER, PrintableString). The latter requires a sed line in the Makefile which I assume should be OK? Not all the SAT can be defined in x509sat - so some have been included in x509if and x509af - though x509sat.cnf contains the master list and references the other dissectors where appropriate.

(I still prefer a syntax registration approach but I don't think that is going to be agreed in the short term.)

* X509IF - a mechanism to register some formating, based upon the hf_index, that is used in the cnf file.

* A couple of fixes identified by Stig.

svn path=/trunk/; revision=16814
2005-12-16 06:47:22 +00:00
Ronnie Sahlberg
163252a41c From Stig B
Patch for COTP reassembly.

There does not seem to be any reasonable or cleaner way to fix COTP 
reassembly than adding the frame.[ch] patch.


svn path=/trunk/; revision=16813
2005-12-16 00:32:12 +00:00
Ronnie Sahlberg
f84e9e9bde from Jaap K
fix for bug 306


svn path=/trunk/; revision=16812
2005-12-15 23:17:01 +00:00
Ronnie Sahlberg
651a48c2e2 update to modbus/tcp
Make the dissector new-style and add simple (better than nothing) heuristics so that it can reject some packets that are obviously not modbus.

change the constants to upper case


 the horrors:
replace two instances where tvb_memcpy()  were used to read straight into a structure to instead read the structure field by field using tvb_get_...()
This may allow the modbus dissector to actually work.






svn path=/trunk/; revision=16811
2005-12-15 22:54:33 +00:00
Guy Harris
3cb89f382f Use the reported length, not the length, to figure out how much to
dissect (so that we report a packet cut short by the snapshot length).

Get rid of an unused variable..

As we restore "pinfo->fragmented" from "save_fragmented" regardless of
whether we're defragmenting or not, we have to save its previous value
in "save_fragmented" regardless of whether we're defragmenting or not.

svn path=/trunk/; revision=16808
2005-12-15 02:44:26 +00:00
Anders Broman
ef6bc891fa Fix Bug 628 Bugzilla 2.18.3
CAMEL - Connect decoding error 
- Calledparty number included first two octets

svn path=/trunk/; revision=16804
2005-12-14 21:46:56 +00:00
Anders Broman
13f87e6f52 Add possibility to try to dissect IP over TIPC.
svn path=/trunk/; revision=16803
2005-12-14 21:40:04 +00:00
Anders Broman
2c7bbf1fb1 From Jaap Keuter:
> Two patch files are attached adding UDP-Lite dissection to the UDP 
> dissector. Wiki page is available at the normal location, including 
> sample captures courtesy of Gerrit Renker of the University of 
> Aberdeen Electronics Research Group. The patch has been tested with 
> both the sample captures and Fuzz test.

And add Marc Petit-Huguenin to AUTHORS

svn path=/trunk/; revision=16801
2005-12-14 21:14:57 +00:00