Commit graph

20373 commits

Author SHA1 Message Date
Stephen Fisher
d3b873b60d Sync up my changes so far to the content list (now called object
list) feature for http traffic.  It's now available under File->
Export->Objects->HTTP.  More changes to come..


svn path=/trunk/; revision=20951
2007-02-28 23:20:40 +00:00
Stephen Fisher
793e70956e Fix problem where specifying -b duration:xx on tshark wasn't working by
testing for the "duration specified" variable along with the "maximum
file size" variable.
 

svn path=/trunk/; revision=20950
2007-02-28 22:45:18 +00:00
Anders Broman
6265ac771c Start dissecting H.263 according to RFC 4629.
svn path=/trunk/; revision=20949
2007-02-28 21:46:06 +00:00
Anders Broman
12fd61a5de Add a missing OPTIONAL.
svn path=/trunk/; revision=20948
2007-02-28 21:10:25 +00:00
Luis Ontanon
e8c5d47e26 SCTP TSN analysis part 1.
Up and running.
As it is analysis will stop at TSN rollover (0xffffffff->0x00000000).

And It will start to misbehave when a TSN is seen again in the same half association (that's a case where an out-of-memory error will probably had happened before).

It still needs testing.

svn path=/trunk/; revision=20947
2007-02-28 14:09:25 +00:00
Stephen Fisher
b740e4528d Fix for bug #1408:
Add proto_tree_add_bitmask to epan/libwireshark.def


svn path=/trunk/; revision=20946
2007-02-28 00:08:23 +00:00
Jörg Mayer
a933299791 Update from samba tree revision 21535 to 21565
============================ Samba log start ============
------------------------------------------------------------------------
r21545 | jelmer | 2007-02-26 18:43:01 +0100 (Mon, 26 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/tests/wireshark-ndr.pl

Fix pidl test.
------------------------------------------------------------------------
r21555 | jelmer | 2007-02-27 13:46:19 +0100 (Tue, 27 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Wireshark/Conformance.pm
   M /branches/SAMBA_4_0/source/pidl/tests/wireshark-conf.pl

Some tests for TYPE in wireshark conformance files.
------------------------------------------------------------------------
r21559 | jelmer | 2007-02-27 14:41:56 +0100 (Tue, 27 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/tests/wireshark-conf.pl

More tests.
------------------------------------------------------------------------
------------------------------------------------------------------------
============================ Samba log end ==============

svn path=/trunk/; revision=20945
2007-02-27 20:32:15 +00:00
Luis Ontanon
bef1c99feb fix Bug 1407
as per bug 1406 actual values aren't raw bytes, they are BER encoded octet strings.


svn path=/trunk/; revision=20944
2007-02-27 10:47:58 +00:00
Luis Ontanon
b1d91e4d2b fix Bug 1406:
it looks like 1 byte parameters are ber encoded integers, not raw data.

svn path=/trunk/; revision=20943
2007-02-27 10:27:05 +00:00
Jeff Morriss
01a71d7277 Some minor readability enhancements to the (still disabled) sequence analysis: use PROTO_ITEM_SET_GENERATED() on all the new fields and change hf_sctp_dup_ack's description to indicate that it's showing you the frame number of the previous ack.
svn path=/trunk/; revision=20942
2007-02-27 10:02:28 +00:00
Ronnie Sahlberg
bf87640840 add PIDL friendly helper to manage unicode strings
svn path=/trunk/; revision=20941
2007-02-27 09:37:48 +00:00
Anders Broman
6df7878bd5 Add some AVP:s
svn path=/trunk/; revision=20940
2007-02-27 07:02:29 +00:00
Anders Broman
7725763b35 Add $Id:$
svn path=/trunk/; revision=20939
2007-02-27 07:00:11 +00:00
Anders Broman
f73b16ffc0 From Douglas Pratley:
This patch gives brief instructions on how to build the RPM package target for Wireshark.

svn path=/trunk/; revision=20938
2007-02-27 06:58:30 +00:00
Anders Broman
bcdcace17b From Daniel Krüger:
I attached a patch to this dissector, which includes some corrections, updates and SDO by UDP support. I will upload a sample capture of SDO by UDP to the wiki. The patch is fuzzy tested against the current SVN rev under Linux and it builds also under MSVC2005.

svn path=/trunk/; revision=20937
2007-02-27 06:54:41 +00:00
Anders Broman
ccf3253f35 From Floren Drouin:
This patch add a test on the GTK version to avoid a warning with the "gtk-label-select-on-focus" configuration parameter, introduced in GTK-2.9.0.

svn path=/trunk/; revision=20936
2007-02-27 06:38:49 +00:00
Anders Broman
c637027427 From Richard van der Hoff:
- Registers H.223 as a dissector for RTP CLEARMODE payloads -
and makes some other modifications to the H.223 dissector to make this
work correctly.

-Allows a standalone binary, epan/reassemble_test, to be built; this can be run from the commandline and should end up printing out "success" 
if all goes well.

svn path=/trunk/; revision=20935
2007-02-27 06:25:07 +00:00
Jaap Keuter
cf13f56dc8 -Add the compiler version to the plugin resource
-Remove the SPECIAL_BUILD tag
-Set to OS type to NT_WINDOWS32

svn path=/trunk/; revision=20934
2007-02-26 20:39:38 +00:00
Jörg Mayer
c7fd37e49c Update from samba tree revision 21471 to 21535
============================ Samba log start ============
------------------------------------------------------------------------
r21484 | jelmer | 2007-02-21 11:31:14 +0100 (Wed, 21 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/NDR.pm
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm
   M /branches/SAMBA_4_0/source/pidl/tests/samba-ndr.pl

Fix Needed* for nested datastructures.
------------------------------------------------------------------------
r21486 | jelmer | 2007-02-21 11:55:03 +0100 (Wed, 21 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/Header.pm

Remove spurious semicolons.
------------------------------------------------------------------------
r21487 | jelmer | 2007-02-21 12:32:48 +0100 (Wed, 21 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/librpc/idl/echo.idl
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm

Fix warning when using anonymous types, initial work on nested type support in ejs.
------------------------------------------------------------------------
r21490 | jelmer | 2007-02-21 13:35:21 +0100 (Wed, 21 Feb 2007) | 3 lines
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm
   A /branches/SAMBA_4_0/source/pidl/tests/samba-ejs.pl

Add some tests for the EJS code
More work on supporting nested types in EJS.

------------------------------------------------------------------------
r21492 | jelmer | 2007-02-21 15:35:25 +0100 (Wed, 21 Feb 2007) | 2 lines
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/TODO
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/EJS.pm
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/Header.pm

Finish work on nested type support in EJS.

------------------------------------------------------------------------
r21493 | jelmer | 2007-02-21 21:59:01 +0100 (Wed, 21 Feb 2007) | 15 lines
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Wireshark/NDR.pm

Patch from Ronnie Sahlberg. From his email:

This patch changes the function name and signature that pidl generate
a call for when dissecting a policy handle to a new, more
PIDL-friendly function.

It also stores the procedure name in a new pinfo-> field so that
helpers that want to know the procedure name can finbd out easily.

The new PIDL helper function for policy handles use this new field and will show
   OpenHKU(<...>)
       opened in frame X
	   closed in frame Y
for the policy handle.

------------------------------------------------------------------------
r21531 | jelmer | 2007-02-25 10:35:32 +0100 (Sun, 25 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Wireshark/NDR.pm

Use pidl-specific utility functions. Patch from Ronnie Sahlberg
------------------------------------------------------------------------
r21532 | jelmer | 2007-02-25 10:55:57 +0100 (Sun, 25 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/TODO
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Wireshark/NDR.pm
   M /branches/SAMBA_4_0/source/pidl/tests/wireshark-ndr.pl

Add tests for StripPrefixes utility function.
------------------------------------------------------------------------
r21534 | jelmer | 2007-02-26 02:03:19 +0100 (Mon, 26 Feb 2007) | 1 line
Changed paths:
   M /branches/SAMBA_4_0
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm
   M /branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Wireshark/NDR.pm
   M /branches/SAMBA_4_0/source/pidl/tests/wireshark-ndr.pl

Add some more tests for wireshark.
------------------------------------------------------------------------
------------------------------------------------------------------------
============================ Samba log end ==============

svn path=/trunk/; revision=20933
2007-02-26 08:57:03 +00:00
Guy Harris
2b75ac83af Eliminate __inline - not all compilers support it.
svn path=/trunk/; revision=20932
2007-02-25 23:25:23 +00:00
Guy Harris
3496de0ff1 ANSI C defines size_t; if we don't have that defined, we have bigger
problems, and there's no guarantee that _SIZE_T is defined on all ANSI C
platforms, so you might end up with a redefinition and a compile failure.

svn path=/trunk/; revision=20931
2007-02-25 22:46:54 +00:00
Guy Harris
219a24a642 The type argument to dnp3_al_obj_quality() isn't taken from the packet,
so invalid type arguments are programming errors; check for them with
DISSECTOR_ASSERT().

Fix a call to use the right value from the packet.

The dissector is a new-style dissector, so register it as such.

svn path=/trunk/; revision=20930
2007-02-25 21:57:23 +00:00
Luis Ontanon
83682b6a5f I'm checking in what I got so far for TSN analysis.
It's disabled. To enable uncomment the preference, recompile and enable it from preferences.

I checking it in because I need it as a reference.

svn path=/trunk/; revision=20929
2007-02-25 18:22:08 +00:00
Luis Ontanon
a2a25e7586 revert (most) changes in rev #20753, to avoid items being created on a wrong menu on windows.
svn path=/trunk/; revision=20928
2007-02-25 18:03:05 +00:00
Ulf Lamping
cd08e6448f fix the padding in the read/write headers, some other minor changes
svn path=/trunk/; revision=20927
2007-02-25 15:50:40 +00:00
Ulf Lamping
7887d478cc add a new function dissect_dcom_HRESULT_item() for some more flexibility, use it in the CBA-ACCO dissector - as the value_strings from dcom can't be used in hf_register_info from a plugin
svn path=/trunk/; revision=20926
2007-02-25 15:48:43 +00:00
Ulf Lamping
036484c6c1 don't cache the downloaded file, so changes in the update file will have an effect while experimenting
svn path=/trunk/; revision=20925
2007-02-25 15:44:38 +00:00
Ulf Lamping
c51dc21954 fix the WinPcap version detection, some minor enhancements to the update logic
svn path=/trunk/; revision=20924
2007-02-25 15:42:56 +00:00
Ulf Lamping
ecc5482c03 fix #1399: don't assert the oidlength returned from the network card driver, but simply return that the PacketRequest call failed in that case.
BTW: this is a serious bug in the specific network card driver of this report, it returned a buffer length LONGER than the provided buffer length one!

svn path=/trunk/; revision=20923
2007-02-25 12:50:21 +00:00
Ronnie Sahlberg
66cf1f33e0 add new flag for PIDL conformance files : PIDL_SET_COL_INFO
which applies (for now only) to integer types.
when this flag is specified as PARAM_VALUE the fields name and its value will be pushed onto the info column of the summary line



svn path=/trunk/; revision=20922
2007-02-25 11:48:06 +00:00
Luis Ontanon
0743cac9a4 remove warnings
svn path=/trunk/; revision=20921
2007-02-25 11:23:49 +00:00
Luis Ontanon
679cf729d3 + some cosmetic changes to package dissection.
+ add more Q.1950 packages and parameters

svn path=/trunk/; revision=20920
2007-02-25 10:13:49 +00:00
Ronnie Sahlberg
470e92125e move the defines for PIDL_POLHND_{OPEN|CLOSE} to packet-dcerpc.h
also change their values to use the top order bits of an uint32 instead of the least significant ones



svn path=/trunk/; revision=20919
2007-02-25 01:47:43 +00:00
Ronnie Sahlberg
aa3d3793b7 add new PIDL friendly helpers for dissection of integer types.
these new helpers take a parameter that can be used to decorate the tree and summary line (when this parameter is acted upon/implemented in the code inside the helpers)

WINREG was regenerated using a patched version of PIDL. Mainline version of PIDL does not yet have this patch applied.



svn path=/trunk/; revision=20918
2007-02-25 01:34:41 +00:00
Ronnie Sahlberg
87f05b8bda update EFS and EVENTLOG conformance files to use the new defines
for when policy handles are opened/closed and regenerate the dissector
with the latest version of PIDL



svn path=/trunk/; revision=20917
2007-02-24 21:34:29 +00:00
Anders Broman
7a615b9729 Add basic support for RFC4585.
svn path=/trunk/; revision=20916
2007-02-24 17:31:55 +00:00
Ulf Lamping
d5003bcf80 give some reasons why older windows versions are no longer supported, add links to the versions known to still work with Win9x / NT 4.0
svn path=/trunk/; revision=20915
2007-02-24 13:11:47 +00:00
Ulf Lamping
f6d80cf41b better reflect the current Windows installer
svn path=/trunk/; revision=20914
2007-02-24 12:40:35 +00:00
Luis Ontanon
215b7eecc5 have sdp ignoring useless caracters efore the first element (this is a hack to avoid the two spaces found before the v= in sdp messages embeded in h248/q1950)
svn path=/trunk/; revision=20913
2007-02-24 12:24:13 +00:00
Ulf Lamping
b72efa7a49 mention that Windows with 256 colors still work with GTK1
svn path=/trunk/; revision=20912
2007-02-24 10:26:38 +00:00
Ulf Lamping
bc28ec6953 WS won't work well with 256 colors
svn path=/trunk/; revision=20911
2007-02-24 09:49:43 +00:00
Stephen Fisher
fe0e340bff From Mark Lewis:
The current RTP/MPEG2 Transport Stream dissector has a bug. When both
Adaptation Field and Payload are present in a packet (AFC==3) the
payload is ignored and Wireshark marks the packet as malformed.
This patch to epan/dissectors/packet-mp2t.c fixes the problem.


svn path=/trunk/; revision=20910
2007-02-23 21:31:11 +00:00
Luis Ontanon
46956317e2 I unadvertedly checked in this one, it adds tsn analysis to sctp which is still broken (although it is disabled by default).
Revert to previous version.

svn path=/trunk/; revision=20909
2007-02-23 21:12:25 +00:00
Luis Ontanon
4211d0dba2 fix some bugs introduced in the latest releases and add value_strings for param, evt, sig and stat ids s well as "sub-parameters".
svn path=/trunk/; revision=20908
2007-02-23 20:57:22 +00:00
Luis Ontanon
5b9457a104 have megaco handing over to h248 in case it does not recognize the buffer as text encoded megaco
svn path=/trunk/; revision=20907
2007-02-23 20:04:09 +00:00
Ulf Lamping
44b6dd623e prohibit installation on Win NT 4.0
svn path=/trunk/; revision=20906
2007-02-23 19:48:59 +00:00
Luis Ontanon
13c9782e21 remove another hidden item
svn path=/trunk/; revision=20905
2007-02-23 19:47:02 +00:00
Ulf Lamping
bfe862b91e system requirements Windows updates:
- Vista is no longer beta
- disk space min. 75MB
- be a bit more specific about no longer supported NT 4.0
- some editing

svn path=/trunk/; revision=20904
2007-02-23 19:40:27 +00:00
Jaap Keuter
a8fb7d24d0 Properly introduce packet-pn.c as a helper
svn path=/trunk/; revision=20903
2007-02-23 19:37:01 +00:00
Luis Ontanon
1600480f1b Wow!
hidden fields appear twice defeating the purpose, that's what I call deprecating a function!! 

svn path=/trunk/; revision=20902
2007-02-23 19:26:09 +00:00