Commit graph

12954 commits

Author SHA1 Message Date
Guy Harris
db69eb8c13 Add some comments noting issues with some of the items in here.
svn path=/trunk/; revision=13224
2005-02-01 11:11:15 +00:00
Guy Harris
17e0d15df3 Move "dissect_nt_GUID()" into "packet-dcerpc-nt.c", as it's used by the
LSA dissector as well, and declare it in "packet-dcerpc-nt.h".

svn path=/trunk/; revision=13223
2005-02-01 05:21:08 +00:00
Guy Harris
5dd0ecbbcc If the VCI and payload type indicate that a cell is an OAM cell, dissect
it as such.

Clear the Info column when dissecting cells for an AAL we handle before
dissecting the cell, and set the Info column for OAM cells.

svn path=/trunk/; revision=13222
2005-02-01 05:19:53 +00:00
Ulf Lamping
970594e453 removed MSVC warnings:
packet-redback.c(63) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(64) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-redback.c(65) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-rmt-fec.c(108) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data

svn path=/trunk/; revision=13221
2005-02-01 00:52:38 +00:00
Ulf Lamping
89ee9a7290 removed MSVC warnings:
packet-juniper.c(262) : warning C4761: integral size mismatch in argument; conversion supplied
packet-juniper.c(289) : warning C4761: integral size mismatch in argument; conversion supplied

svn path=/trunk/; revision=13220
2005-02-01 00:51:42 +00:00
Anders Broman
a5ac048f4b Prepare for handling of different versions of the protocol.
svn path=/trunk/; revision=13219
2005-01-31 21:40:51 +00:00
Anders Broman
a960b72f5f Put application context OID in pinfo->private data to be used by sub-dissector(s).
svn path=/trunk/; revision=13218
2005-01-31 21:38:56 +00:00
Anders Broman
d9614f8c40 Update som valuse strings
svn path=/trunk/; revision=13217
2005-01-31 21:37:11 +00:00
Anders Broman
f2c5299014 From LEGO:
- remove duplicate fields from VSAs (every defined field in VSAs was set twice)
 - dissect radius packet with avplen == 0 (did not decode authenticator when no AVPs were present)

svn path=/trunk/; revision=13216
2005-01-31 21:36:31 +00:00
Ronnie Sahlberg
22c81aa543 there are two NETLOGON protocols
the really really old one which is never used
and there is the DCE/RPC one that is used by all windows/cifs implementations.

We used to reserve the protocol name NETLOGON for the old obsolete protocol
and since we can not have two protocols with the same name, called
the current protocol RPC_NETLOGON instead.

that does not exactly make sense.


This renames the old obsolete protocol to SMB_NETLOGON  to make way and allow
the real netlogon protocol take the name NETLOGON



svn path=/trunk/; revision=13215
2005-01-31 09:56:42 +00:00
Ronnie Sahlberg
d3beff7c6a call dissect_ndr_uuit_t directly and avoid a dependency on packet-dcerpc-netlogon
svn path=/trunk/; revision=13214
2005-01-31 09:43:07 +00:00
Ronnie Sahlberg
262d2b36c8 support H.248 BER over SCTP PPID 7
svn path=/trunk/; revision=13213
2005-01-31 03:31:13 +00:00
Guy Harris
467ece8920 From Florian Lohoff: Redback SmartEdge SE400/800 tcpdump disassembly.
svn path=/trunk/; revision=13212
2005-01-31 03:03:02 +00:00
Guy Harris
e2089f3d82 Add a URL for Gnutella specs.
Don't check, in the dissectors for particular Gnutella packets, whether
the packet goes past the end of the tvbuff - let that throw an exception
so unreassembled packets are shown as such.

Clean up indentation.

Boost GNUTELLA_MAX_SNAP_SIZE to 4096 (one Gnutella spec suggests that
packets should be < 4K), and use it to

	1) clamp the length of packets (so we don't do huge reassembly
	   or have problems when the total packet length, including the
	   header, overflows 32 bits)

and

	2) check the length of packets before using tcp_dissect_pdus(),
	   to distinguish between packets to be reassembled and a
	   transfer stream.

Pass the correct value to tcp_dissect_pdus() as the header length.

svn path=/trunk/; revision=13211
2005-01-31 00:28:02 +00:00
Ronnie Sahlberg
a43da7a4ff add dissection of three new flags in the security descriptor
svn path=/trunk/; revision=13210
2005-01-30 23:15:10 +00:00
Anders Broman
7578a81982 Add OID:s to old dissector, for comparison reasons.
svn path=/trunk/; revision=13209
2005-01-30 18:00:48 +00:00
Anders Broman
a4db2eb570 In case of "faulty" BER tag:s return tvb = NULL
svn path=/trunk/; revision=13208
2005-01-30 17:48:18 +00:00
Ronnie Sahlberg
bb7160249d rename lsa_dissect_LSA_SECURITY_DESCRIPTOR to lsa_dissect_sec_desc_buf
change its signature to match the autogenerated signatures.

add a small wrapper function so tha tthe handwritten lsa can still call the
function through dissect_ndr_pointer()

no changes in functionality,  essentially just a rename of a function and signature change


svn path=/trunk/; revision=13207
2005-01-30 13:00:35 +00:00
Ronnie Sahlberg
7fc663c738 rename lsa_dissect_LSA_SECURITY_DESCRIPTOR_data to lsa_dissect_sec_desc_buf_data
to make the symbol compatible with an autogenerated LSA dissector.

no changes to the code, just a rename.


svn path=/trunk/; revision=13206
2005-01-30 12:38:38 +00:00
Ronnie Sahlberg
ae9fe25e4f rename lsa_dissect_POLICY_DNS_DOMAIN_INFO to lsa_dissect_DnsDomainInfo and change the signature slightly.
the signature change is to make it compatilbe with the signatures the idl compiler generates.


svn path=/trunk/; revision=13205
2005-01-30 12:21:17 +00:00
Ronnie Sahlberg
95b0d123ba add a new dissect_ndr_counted_ascii_string() that mimics dissect_ndr_counted_string() but handles an ASCII string instead of a Unicode one.
svn path=/trunk/; revision=13204
2005-01-30 11:56:37 +00:00
Guy Harris
cdaf516b8b Byte arrays are byte arrays, not strings.
svn path=/trunk/; revision=13203
2005-01-30 03:43:03 +00:00
Ronnie Sahlberg
0431c0c49f change dissect_ndr_counted_byte_array to be more consistent with dissect_ndr_counted_string
svn path=/trunk/; revision=13202
2005-01-30 02:52:25 +00:00
Guy Harris
87bf383873 Add the I-D name for L2TPv3 to a comment.
Do more, and more careful, AVP length checks.

Use tvb_format_text() to display strings.

Just use "col_add_fstr()" to set the Info column - there's no need to
format into a buffer and then set the column to that buffer.

Make the L2TP dissector a "new-style" dissector and have it reject
packets with an unknown version number - the dissection effect is the
same if no other dissector claims the packet (it just gets displayed as
data), but this allows other dissectors to claim it.

Don't use the length field if the length bit isn't set.

svn path=/trunk/; revision=13201
2005-01-29 23:45:53 +00:00
Guy Harris
152e6819a2 Put the dissection of the payload at the top level.
If the information that we used to guess the payload type is part of the
payload, don't make it correspond to the "Payload Type" protocol tree
item - it's covered by the dissected payload.

If we don't succeed in guessing the protocol type, just dissect the
payload as data.

svn path=/trunk/; revision=13200
2005-01-29 22:21:09 +00:00
Guy Harris
5084ff9f37 Treat the command opcodes as SBC-2 for CD-ROMs as well as for block
devices.

svn path=/trunk/; revision=13199
2005-01-29 20:56:20 +00:00
Guy Harris
75e4d0a2ce Use the 64-bit integer fetch routines to support 64-bit NDR integers.
svn path=/trunk/; revision=13198
2005-01-29 20:39:14 +00:00
Guy Harris
d9d7d0be95 Mark unused arguments as such.
svn path=/trunk/; revision=13197
2005-01-29 20:35:42 +00:00
Ulf Lamping
89a0f5518b various versioning related things (like using the svn version number), fix a broken link in the developer-guide
svn path=/trunk/; revision=13196
2005-01-29 15:38:15 +00:00
Ulf Lamping
6a0691490c add links to wiki example pages (Capture/Display Filters and Coloring Rules)
svn path=/trunk/; revision=13195
2005-01-29 14:43:33 +00:00
Guy Harris
e4a550c538 Add some notes about stuff discovered by Ken Mann.
svn path=/trunk/; revision=13194
2005-01-29 10:48:16 +00:00
Ronnie Sahlberg
995a967894 only add 4 bytes to the pdu length IFF header digest/crc32 is actually used.
svn path=/trunk/; revision=13193
2005-01-29 04:44:40 +00:00
Ulf Lamping
3d9c7d48ae Add a new menu item "View/Resize Columns" to, well, resize columns. As this might take a long time, I've provided a progress bar with the option to cancel the operation.
I might later add something like "View/Auto Resize Columns" with a checkbox menu item, so this is done everytime a capture file finished loading. However, I don't know how well this will work together with "Update list of packets in real time" while doing a capture.

svn path=/trunk/; revision=13192
2005-01-29 02:14:25 +00:00
Ulf Lamping
b3b3f5cbcc use MATE (not mate) for protocol name and protocol tree
svn path=/trunk/; revision=13191
2005-01-28 23:24:04 +00:00
Lars Roland
4bf362f863 A new patch for mate from Luis Ontanon:
- move mate_packet into packet-mate.c and remove it frome mate.h
  - supressed some warnings

svn path=/trunk/; revision=13190
2005-01-28 13:53:14 +00:00
Guy Harris
c29e427533 From Yoshihiro Oyama: support "-" as a file name, referring to the
standard input.  Opening it for random access isn't supported; we add a
new error for that.

svn path=/trunk/; revision=13189
2005-01-28 11:31:19 +00:00
Guy Harris
d90ba1a144 From Yoshihiro Oyama: get rid of _U_s in prototype declarations that
lack variable names.

svn path=/trunk/; revision=13188
2005-01-28 10:15:03 +00:00
Guy Harris
3dcde58708 From Yoshihiro Oyama: include the names of all the IrDA plugin's .o
files in the ENABLE_STATIC plugin_ldadd list.  (This one was missing
from the previous checkin.)

svn path=/trunk/; revision=13187
2005-01-28 09:55:24 +00:00
Guy Harris
4bc45c0d2c From Yoshihiro Oyama: include the names of all the IrDA plugin's .o
files in the ENABLE_STATIC plugin_ldadd list.

svn path=/trunk/; revision=13186
2005-01-28 09:47:52 +00:00
Ronnie Sahlberg
0c00534dd1 we need a dissect_ndr_uint64() that dissects an NDR hyper
svn path=/trunk/; revision=13185
2005-01-28 09:37:47 +00:00
Ronnie Sahlberg
610da77693 older MS DCE/RPC interfaces often use a construct that is to be treated as a 64 bit integer but in reality is a struct containing 2 32bit integers.
this construct is aligned on 4 byte boundaries in ndr and NOT
8 bytes as a real uint64 (== hyper) would be.


rename the existing dissect_ndr_uint64  ro  dissect_ndr_duint32  (double uint32) to make it reflect better the alignment of the type.



svn path=/trunk/; revision=13184
2005-01-28 09:29:49 +00:00
Ronnie Sahlberg
289fd317a0 add a macro for aligning NDR datastreams to 8 byte boundaries
svn path=/trunk/; revision=13183
2005-01-28 09:12:40 +00:00
Guy Harris
f72cba5413 We use the range utilities regardless of whether we're built with
libpcap or not.

svn path=/trunk/; revision=13182
2005-01-27 11:23:06 +00:00
Guy Harris
91e606b7dd Fix a problem with building with libpcap disabled.
svn path=/trunk/; revision=13181
2005-01-27 10:47:27 +00:00
Ulf Lamping
f6dbe26f6c add another REPORT_DISSECTOR_BUG() call, if tfi->tree_type is existing and not in valid range.
Question remains: Is it safe to continue in that case?

svn path=/trunk/; revision=13180
2005-01-26 23:17:00 +00:00
Ulf Lamping
751d2ebfce if there must be an unknown version message, use hex instead of decimal to print the unknown version number
svn path=/trunk/; revision=13179
2005-01-26 23:14:54 +00:00
Ulf Lamping
a5def37d6d if there must be an "unknown transport" message, at least print the transport name
svn path=/trunk/; revision=13178
2005-01-26 23:13:36 +00:00
Ulf Lamping
6fe12c02b5 bugfix of crash_00001_20050124142515.cap: dissector packet-daap.c displayed [Dissector Bug] as it dissected a length field and used it without checking it first.
use tvb_ensure_bytes_exist() before using this length value, so [Malformed Packet] will be displayed

svn path=/trunk/; revision=13177
2005-01-26 22:37:04 +00:00
Ulf Lamping
f92d7df152 bugfix of crash_00026_20050124150108.cap: three places with possible write behind the end of fixed arrays
used g_malloc instead of a fixed array

svn path=/trunk/; revision=13176
2005-01-26 22:24:42 +00:00
Anders Broman
84a6808dca Unpack and display digits, Decode SS-status.
svn path=/trunk/; revision=13175
2005-01-26 20:07:35 +00:00