Commit graph

4349 commits

Author SHA1 Message Date
Guy Harris
6ff9b3366e Support for DCE RPC atop SMB, and support for several Microsoft DCE RPC
services used with SMB, from Tim Potter.

svn path=/trunk/; revision=4194
2001-11-12 08:58:45 +00:00
Guy Harris
0b0116e207 Transaction2 tvbuffified, and support added for many Transaction2 SMBs,
from Ronnie Sahlberg.

Various other bug fixes, cleanups, and other improvements.

svn path=/trunk/; revision=4193
2001-11-12 08:46:14 +00:00
Guy Harris
45cc752b95 Dissect the NT create option bits. (Well, some of them, anyway.)
svn path=/trunk/; revision=4192
2001-11-11 02:27:06 +00:00
Guy Harris
c62c2256e3 Change from Tim Potter to show the error status in the Info column for
SMBs that got errors.

Add some additional access mask bits, and the URL of another spec.

svn path=/trunk/; revision=4191
2001-11-10 22:23:11 +00:00
Guy Harris
c08a612a4c Microsoft calls it "Dfs", not "DFS", perhaps to avoid confusion with the
OSF's DCE DFS (which is completely unrelated to Dfs).

svn path=/trunk/; revision=4190
2001-11-09 22:58:10 +00:00
Guy Harris
dbe1718c7e NT Create and X support, from Ronnie Sahlberg.
"#if 0" out an unused routine, pending determination of whether there's
any place that would use it.

Fix some typos.

Display the NT create options in hex, as they appear to be a bitmask.

svn path=/trunk/; revision=4189
2001-11-09 22:45:22 +00:00
Guy Harris
f57a2329ec Remove "text2pcap-scanner.obj" and "tools\lemon\lemon.obj" when a "nmake
clean" is done.

svn path=/trunk/; revision=4188
2001-11-09 09:22:07 +00:00
Guy Harris
79163b436a Fix a couple of comments.
svn path=/trunk/; revision=4187
2001-11-09 08:36:56 +00:00
Guy Harris
45900852ff Fixes from Kazushi Sugyo:
1) print the payload length in AH headers correctly (the field's
	   value is length of the payload, minus 2, divided by 2, so we
	   have to add 2 before multiplying by 2);

	2) correctly handle, in an SIOCGIFCONF list, entries whose
	   address has an "sa_len" field less than the size of a "struct
	   sockaddr" (the length of the address in an entry is the
	   maximum of the real length and the size of a "struct
	   sockaddr").

svn path=/trunk/; revision=4186
2001-11-09 08:16:25 +00:00
Guy Harris
4279815244 Put in an XXX note indicating that if we conclude we're using the AIX
libpcap, we may also want to return a flag indicating that we have to
map seconds/nanoseconds in the packet header to seconds/microseconds.

svn path=/trunk/; revision=4185
2001-11-09 07:51:01 +00:00
Guy Harris
40b22f317b Wrap calls to "pcap_datalink()" in a routine that attempts to compensate
for AIX 5.x's non-standard libpcap, where "pcap_datalink()" doesn't
return DLT_ values, it returns RFC 1573 ifType values.

Put that wrapper, and the routine to get the interface list, in a
separate file, for packet-capture utility routines, so not everybody who
includes "util.h" needs to include <pcap.h>.

Fix up the Wiretap hack for dealing with said incompatibility to use the
correct ifType value for Token Ring.

svn path=/trunk/; revision=4184
2001-11-09 07:44:51 +00:00
Guy Harris
e6b12dd801 Tvbuffification of SMB print commands, from Ronnie Sahlberg.
Fix up some SMBs I missed when adding the byte-count checks.

svn path=/trunk/; revision=4183
2001-11-09 06:43:38 +00:00
Guy Harris
c7fbf7f888 2^n is 1 << n, not 2 << n.
svn path=/trunk/; revision=4182
2001-11-09 02:04:35 +00:00
Guy Harris
10843c0ddc From <a.stockmeier[AT]avm.de>: fix the file dialog box code to use
"g_strdup()", not "strdup()" to copy strings.

svn path=/trunk/; revision=4181
2001-11-09 00:08:30 +00:00
Guy Harris
0ec155cfaf Print the create flags with 8 hex digits.
Add some checks of the return value of
"get_unicode_or_ascii_string_tvb()" - if a null terminator is missing,
it might well run past the end of the byte parameters - and add some
code to keep the byte count updated so that the right byte count is
passed to "get_unicode_or_ascii_string_tvb()".

svn path=/trunk/; revision=4180
2001-11-08 10:57:09 +00:00
Guy Harris
f4a46388f2 Put the stuff to handle file data in read and write requests into a
common subroutine.

Label the "total data length" field in Write Raw and Write Multiplexed
requests as such.

Dissect the IPC State/Device State field of Open and X requests and NT
Create and X requests ass per the stuff on page 67 of

	ftp://ftp.microsoft.com/developr/drg/CIFS/dosextp.txt

Make a variable that doesn't need to be static not static.

svn path=/trunk/; revision=4179
2001-11-08 10:34:11 +00:00
Guy Harris
3412303bf6 NT Transact dissection, from Ronnie Sahlberg.
svn path=/trunk/; revision=4178
2001-11-08 08:21:13 +00:00
Gilbert Ramirez
caa3a9f213 Allow periods in module names.
svn path=/trunk/; revision=4177
2001-11-08 02:54:31 +00:00
Guy Harris
d607582d65 "dissect_open_print_file_smb()" was defined but not used; put it into
the appropriate entry in the "dissect[]" table.

svn path=/trunk/; revision=4176
2001-11-07 20:30:43 +00:00
Guy Harris
d65661ea24 MPLS support for handling either IPv4 or IPv6 as the payload protocol
type, from Hamish Moffatt.

svn path=/trunk/; revision=4175
2001-11-07 20:26:38 +00:00
Guy Harris
a29623753d Update the URL for Cygwin.
svn path=/trunk/; revision=4174
2001-11-07 18:49:57 +00:00
Guy Harris
b7d32da1eb Expand on the comments about AIX libpcap.
No, Nokia *weren't* kind enough to change the major or minor version
number in the capture file when they changed the format, just as they
weren't kind enough to change the magic number.

svn path=/trunk/; revision=4173
2001-11-07 08:16:26 +00:00
Guy Harris
588cd16184 Further tvbuffication from Ronnie Sahlberg.
Get rid of a bunch of stuff for which said tvbuffication removes the
need.

When dissecting byte parameters, make sure you don't consume more bytes
than the byte count, and handle captures where the last string in the
byte parameters area isn't properly null-terminated (I think I've seen
that in packets from various versions of Windows NT).

Make various bitfields given as decimal in SMB specs decimal.

svn path=/trunk/; revision=4172
2001-11-07 08:05:04 +00:00
Uwe Girlich
f551a6cc4c code cleanup
AUTH reply dissector added

svn path=/trunk/; revision=4171
2001-11-07 07:05:58 +00:00
Guy Harris
3852944487 IEEE 802.1x, a/k/a EAPOL, and PPP/EAPOL EAP support, from Pekka
Nikander.

svn path=/trunk/; revision=4170
2001-11-06 20:30:40 +00:00
Uwe Girlich
ad5e74a19d AUTH call dissected. It includes XOR encoded user name/passwords. I did
a decode on the fly.

svn path=/trunk/; revision=4169
2001-11-06 18:32:30 +00:00
Uwe Girlich
ec5c73a520 PCNFSD added for Uwe Girlich
svn path=/trunk/; revision=4168
2001-11-06 13:44:08 +00:00
Uwe Girlich
67db3adfca PCNFSD dissector file packet-pcnfsd.c added to source list
svn path=/trunk/; revision=4167
2001-11-06 13:43:44 +00:00
Uwe Girlich
0f36473f09 start of a PCNFSD dissector, header file
svn path=/trunk/; revision=4166
2001-11-06 13:42:35 +00:00
Uwe Girlich
60d861e33b Start of a PCNFSD dissector as the RPC dissector 150001.
svn path=/trunk/; revision=4165
2001-11-06 13:42:04 +00:00
Guy Harris
6910b84deb Add in some heuristics to try to detect AIX libpcap format. (This works
with one capture I've seen, but perhaps that was done with an old
version of AIX, and newer versions use a minor version number, in the
file, of 4.

However, libpcap hasn't used a minor version of 2 for ages, so perhaps
AIX hasn't updated their libpcap in ages, and aren't about to do so
soon.  If they do, let's hope they change the magic number.  The capture
file in question *does* have the capture length and real length in the
old, pre-2.3, order, so it really looks as if it's an old version,
rather than IBM trying to be "helpful" by using a different minor
version number so that you can distinguish between normal libpcap and
AIX libpcap formats.)

svn path=/trunk/; revision=4164
2001-11-06 01:55:14 +00:00
Guy Harris
fd514820e4 From Tom Uijldert: have an non-heuristic UCP dissector, and register it
as a TCP conversation dissector, so that it can be selected in the
"Decode As" dialog box.

svn path=/trunk/; revision=4163
2001-11-05 21:41:33 +00:00
Guy Harris
a968373a7a IPCOMP transformation and ID_IPV4_ADDR_SUBNET for ISAKMP, from
<a.stockmeier[AT]avm.de>.

svn path=/trunk/; revision=4162
2001-11-05 21:36:07 +00:00
Guy Harris
d5727068bb Fix the previous change to handle SMBs with tvbuffified dissectors.
svn path=/trunk/; revision=4161
2001-11-05 07:58:33 +00:00
Guy Harris
eff04e8bae Put andX commands at the same level as the first command.
svn path=/trunk/; revision=4160
2001-11-05 07:46:01 +00:00
Guy Harris
39b35fd837 Put in some references.
svn path=/trunk/; revision=4159
2001-11-05 05:39:31 +00:00
Guy Harris
ff8cc11795 Further tvbuffication, from Ronnie Sahlberg.
Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item"
calls.

svn path=/trunk/; revision=4158
2001-11-05 05:24:17 +00:00
Guy Harris
9449d55a91 Futher tvbuffification from Ronnie Sahlberg.
Do more sanity checking on DOS dates and times.

Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item"
calls.

Put the word and byte data for untvbuffified SMBs under a subtree just
as is done for tvbuffified SMBs.

Get rid of some no-longer-used routines.

Fix some displays in untvbuffified SMBs to resemble the way those fields
are displayed for tvbuffified SMBs.

Display timesouts as seconds and milliseconds when they're in units of
milliseconds.

svn path=/trunk/; revision=4157
2001-11-05 01:44:17 +00:00
Guy Harris
d8aa1045ce SUA dissector, from Michael Tuexen, replacing (and subsuming) the SUA
Light dissector.

svn path=/trunk/; revision=4156
2001-11-04 22:19:23 +00:00
Guy Harris
f0c86f5537 Include "conversation.h", as the plugin API now includes the routines to
create and find conversations.

svn path=/trunk/; revision=4155
2001-11-04 22:14:43 +00:00
Guy Harris
35078ebac9 Further tvbuffication, from Ronnie Sahlberg.
Make it possible for a non-tvbuffied dissector for an andX SMB to call a
tvbuffified dissector for the andX command, and fix the non-tvbuffified
dissectors in question to do so.

svn path=/trunk/; revision=4154
2001-11-04 12:44:02 +00:00
Guy Harris
a4676104d9 CBCP support in PPP, from Motonori Shindo.
svn path=/trunk/; revision=4153
2001-11-04 04:50:12 +00:00
Guy Harris
fbc3f2eb0e Include protocols for TCP conversation dissectors in the list of
protocols that can be used to decode stuff.

svn path=/trunk/; revision=4152
2001-11-04 04:12:03 +00:00
Guy Harris
8cc7d53183 Declare routines exported to plugins through the plugin API table as
extern, so that "plugin_api_defs.h" works on platforms where you have to
use the plugin API table.

svn path=/trunk/; revision=4151
2001-11-04 03:55:52 +00:00
Guy Harris
d859325753 Additional routines made available to plugins, from Tomas Kukosa.
svn path=/trunk/; revision=4150
2001-11-04 03:37:29 +00:00
Guy Harris
8789943142 In "plugin_api_defs.h", just do
addr_XXX p_XXX;

for all the declarations, to simplify things, as per Tomas Kukosa's
suggestion.

Fix a couple of comments.

svn path=/trunk/; revision=4149
2001-11-04 03:16:47 +00:00
Guy Harris
cc7347ebf6 Allow a dissector to register preferences that it no longer supports as
obsolete; we silently ignore attempts to set those in a preferences
file, so that we don't spam the user with error messages caused by them
having saved preferences in an earlier release that contained those
preferences.

Make the Diameter and iSCSI dissectors register obsolete preferences.

Crash if some code tries to register a preferences module with a name
that contains something other than lower-case ASCII letters, numbers, or
underscores, or that has already been registered, or if some code tries
to register a preference with a name that contains something other than
lower-case ASCII letters, numbers, underscores, or periods, or that has
already been registered, so that we don't put code like that in a
release and have to shovel code into "prefs.c" to fix it up later.  (The
problem with multiple modules or preferences with the same name should
be obvious; the problem with names with blanks, or upper-case letters,
or punctuation, is that they're a pain to type on the command line.)

svn path=/trunk/; revision=4148
2001-11-04 02:50:21 +00:00
Guy Harris
52bf3d770f Updates from Mark Burton.
svn path=/trunk/; revision=4147
2001-11-04 00:58:23 +00:00
Guy Harris
303bb72023 More tvbuffication, from Ronnie Sahlberg.
When converting DOS-date years to "struct tm" years, add 1980 and
subtract 1900, to make it clearer what the conversion involves (DOS-date
years are (year - 1980); "struct tm" years are (year - 1900)).

svn path=/trunk/; revision=4146
2001-11-04 00:53:46 +00:00
Guy Harris
d6a16d417a Check for a zero word count in LogoffandX requests and replies.
svn path=/trunk/; revision=4145
2001-11-03 23:53:48 +00:00