wireshark/ChangeLog

3499 lines
86 KiB
Plaintext
Raw Blame History

$Id: ChangeLog,v 1.33 2003/12/13 00:55:10 gerald Exp $
2003-12-13 00:38 gerald
* Makefile.am:
Add packet-isup.h as well.
2003-12-13 00:22 gerald
* Makefile.am:
Add packet-ansi_map.h to the distribution.
2003-12-12 23:47 obiot
* packet-smpp.c:
Always dissect a sm_submit otherwise reassembly of short messages
does not work.
2003-12-12 23:35 obiot
* packet-wbxml.c:
Move info column update code outside of if (tree).
2003-12-12 23:23 guy
* packet-dns.c:
Add some checks to make sure we're not running past the end of
the RR we're dissecting. (Some RR's still don't do that check,
as they don't maintain an "rr_len" variable, and as
"get_dns_name()" doesn't do any length checking.)
That obviates the need for having "compute_key_id()" check the
length, as we won't even get to calling it if the RR is too
short. Have it still do a check for sanity, but just abort if
the check fails, and have it return -1 if the algorithm is
unsupported.
Don't bother processing T_CERT RRs if we're not building a
protocol tree, don't fetch data from a T_CERT RR until we put it
into the tree, and fix the bug that change found, namely that we
were using the wrong variable in the "val_to_str()" call for the
certificate type.
2003-12-12 22:19 guy
* packet-ses.c, packet-ses.h:
From Yuriy Sidelnikov: if the first SPDU in a TSDU has a type of
1 or 2, treat it specially - a type of 1 means GIVE_TOKENS, not
DATA_TRANSFER, in that case.
2003-12-12 21:17 guy
* packet-pim.c:
From Hannes Gredler:
display the PIM hello option values in brackets after the
option
name;
in the LAN prune delay option dissector:
put the top-level item for the option into the
PIM
options tree rather than the PIM main tree;
calculate the correct LAN prune delay and display
it in
units of milliseconds;
calculate the correct override interval and
display it
in units of milliseconds;
fix the offset and length calculation.
2003-12-12 19:55 guy
* AUTHORS, packet-ansi_a.c, packet-ansi_a.h, packet-ansi_map.c,
packet-ansi_map.h, packet-isup.c, packet-isup.h, gtk/Makefile.am,
gtk/Makefile.nmake, gtk/ansi_map_stat.c, gtk/isup_stat.c:
From Michael Lum:
Fix point code display.
Add taps for ANSI MAP and ISUP statistics.
2003-12-12 16:06 gerald
* README.win32:
Switch from gettext 0.13 to 0.12.1.
2003-12-12 02:50 gerald
* gtk/: dlg_utils.c, main.c:
In "dlg_window_new()" check to see if "top_level" has been
initialized, as is the case for the spawned capture process.
2003-12-11 21:23 ulfl
* packet-afp.c, packet-bssap.c, packet-cops.c, packet-esis.c,
packet-gsm_sms.c, packet-isakmp.c, packet-osi-options.c,
gtk/dcerpc_stat.c, plugins/docsis/packet-tlv.c,
plugins/docsis/packet-vendor.c, wiretap/erf.c,
wiretap/lanalyzer.c:
prevent MSVC warning: "warning C4761: Gr<47><72>enkonflikt im Argument.
Konvertierung vorgenommen" -> size conflict in argument,
conversion done
2003-12-11 18:38 guy
* packet-dns.c:
Have "compute_key_id()" return different values for different
errors, and have its caller put an entry into the tree for "we
don't support the algorithm" (the "RR too short" error is a
"can't happen").
2003-12-11 18:37 guy
* epan/configure.in:
Add "/usr/local/include" in case the PCRE header file is there.
2003-12-11 08:54 ulfl
* packet-dns.c:
replaced type u_int32_t by glib's guint32 (to satisfy MSVC)
2003-12-11 01:13 guy
* tethereal.c:
Fix a typo.
2003-12-10 23:21 gerald
* README.win32, packaging/nsis/ethereal.nsi:
Update the Windows environment to GLib 2.2.3 and GTK+
1.3.0-20030717. This requires replacing libintl-1.dll from the
libintl package (which is no longer used) with intl.dll from
intl.dll from the gettext package.
2003-12-10 22:52 gram
* print.c:
Analyzer's PDML will be changed to start the packet offset (the
"pos" field) at 0 instead of 1. This works better for Ethereal,
as our offsets start at 0. Change the "geninfo" pseudo-protocol
to use pos="0" instead of pos="1".
2003-12-10 22:38 obiot
* epan/dfilter/Makefile.nmake:
PCRE support requires $(PCRE_CFLAGS) in CFLAGS.
2003-12-10 22:27 obiot
* tap-wspstat.c:
WSP status code is hexadecimal.
2003-12-10 21:50 gerald
* config.nmake, configure.in, epan/configure.in:
Bump the version to 0.10.0. It could be (and has been) argued
that the last release should have been 0.10.0.
2003-12-10 21:21 guy
* gtk/gsm_a_stat.c:
Oops, I checked the wrong tap into CVS somehow.
2003-12-10 21:12 gerald
* epan/ftypes/: ftypes-int.h, ftypes.h:
Make the _pcre_tuple_t struct internal.
2003-12-10 19:35 guy
* packet-dns.c:
From David Fort: compute and display the key ID in a DNS KEY RR,
if possible.
2003-12-10 19:26 guy
* packet-isup.c:
From Anders Broman: add CIC to Info column.
2003-12-10 19:21 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-igap.c,
packet-igap.h, packet-igmp.c:
From Akira Endoh: IGAP support.
2003-12-10 19:21 guy
* packet-isakmp.c:
Squelch a compiler warning.
2003-12-10 19:05 ulfl
* packaging/nsis/ethereal.nsi:
added some more uninstall info and offering only removal of
program (instead of modify/repair)
2003-12-10 10:47 guy
* packet-isakmp.c:
Check whether the packet length is less than the length of the
packet header, and give up if it is.
2003-12-09 23:45 obiot
* gtk/tcp_graph.c:
Mark parameter data as unused in callback_create_help().
2003-12-09 23:15 obiot
* epan/ftypes/Makefile.nmake:
Internal PCRE field type for efficient RE parsing in dfilters.
2003-12-09 23:02 obiot
* epan/: ftypes/Makefile.am, ftypes/ftype-pcre.c,
ftypes/ftype-string.c, ftypes/ftypes.c, ftypes/ftypes.h,
dfilter/semcheck.c:
Internal PCRE field type for efficient RE parsing in dfilters.
2003-12-09 22:41 ulfl
* file.c, gtk/main.h, gtk/menu.c:
print system enhanced, more print ranges and expanded states
2003-12-09 22:27 ulfl
* print.c:
print system enhanced, more print ranges and expanded states
2003-12-09 22:21 ulfl
* print.h, tethereal.c, gtk/print_dlg.c:
print system enhanced, more print ranges and expanded states
2003-12-09 22:04 ulfl
* print.h:
print system enhanced, more print ranges and expanded states
2003-12-09 18:49 guy
* Makefile.am, Makefile.nmake, packet-gsm_a.c, packet-gsm_a.h,
tap-ansi_astat.c, tap-gsm_astat.c, gtk/Makefile.am,
gtk/Makefile.nmake, gtk/ansi_a_stat.c, gtk/gsm_a_stat.c:
From Michael Lum:
new taps for GSM A-interface;
fixes for ANSI A-interface taps.
2003-12-09 06:48 guy
* column.c, column.h, file.c, ui_util.h, epan/column-utils.c,
epan/column_info.h, gtk/main.c, gtk/packet_list.c:
Don't automatically size the columns - that's expensive in large
captures, as it has to compute the width of an auto-resizing
column in every row. Just pick fixed widths for the columns (and
tune the width of the "Protocol" column so that it's not narrower
than the column title).
2003-12-09 05:56 gram
* tethereal.c, doc/README.xml-output, doc/tethereal.pod,
tools/msnchat:
-Tpdml and -Tps force -V. Thus, -V is no longer required when
using -Tpdml. Eventually, -Tps will not force -V, and will print
summaries when -V is not selected. However, work still has to be
done there.
2003-12-09 05:10 guy
* packet-radius.c:
Add a new attribute type RADIUS_IP6_ADDRESS for IPv6 addresses.
Put in a note explaining the enum for those types.
From Rui Carmo: add all 3GPP VSA's.
2003-12-09 05:06 guy
* epan/: resolv.c, to_str.c, to_str.h:
Add "ip6_to_str_buf()", by analogy to "ip_to_str_buf()".
2003-12-09 00:52 guy
* packet-ansi_637.c:
From Michael Lum: fix incorrect switch values which resulted in
NULL strings being passed to ..._add_text().
2003-12-09 00:12 guy
* packet-tcp.c:
As per Didier Gautheron, dissect TCP options regardless of
whether we're building a protocol tree, so the Info column is set
correctly.
2003-12-08 23:40 guy
* packet-alcap.c, packet-ansi_637.c, packet-ansi_683.c,
packet-ansi_a.c, packet-ansi_map.c, packet-gsm_a.c,
packet-gsm_map.c, packet-gsm_sms.c, epan/to_str.c, epan/to_str.h:
Get rid of the private "my_decode_bitfield_value()" a number of
dissectors had. Instead, rename it
"other_decode_bitfield_value()", put it in "epan/to_str.c", and
make "decode_bitfield_value()" use it.
2003-12-08 22:28 guy
* Makefile.nmake:
Add a "doc" target, as per Ulf Lamping's comment.
2003-12-08 22:24 guy
* doc/ethereal-filter.pod.template:
Note the types of fields for which the "contains" operator is
available.
Always capitalize the names "Ethereal" and "Tethereal" (we don't
capitalize the command names, however, as they're
all-lower-case).
Note that you can find out from the GUI whether Ethereal was
built with the PCRE library or not.
Fix a typo.
2003-12-08 21:57 guy
* print.c:
"proto_construct_dfilter_string()" can return a null pointer,
e.g. for protocol tree fields that don't have values and that are
zero-length.
Combine the "if (fi->hfinfo->type != FT_PROTOCOL && fi->length >
0)" stuff to show the raw value into the previous "if".
2003-12-08 21:36 guy
* AUTHORS, packet-mtp3.c, packet-mtp3.h, packet-sccp.c,
epan/packet_info.h, epan/to_str.c:
From Michael Lum: support an AT_SS7PC address type for SS7 point
codes, and set the direction in pinfo for SS7 packets based on
source and destination addresses.
2003-12-08 20:58 guy
* packet-dcerpc.c:
From Jamie Fournier: don't show UNKUUID information for fragments
for known dissectors.
2003-12-08 20:50 guy
* packet-srvloc.c:
From Greg Morris: ecode the attribute structure instead of
reporting a really long undecoded string.
2003-12-08 20:43 guy
* packaging/nsis/ethereal.nsi:
From Lars Roland: fix a typo.
2003-12-08 20:42 guy
* packaging/nsis/Makefile.nmake:
From Lars Roland: fix the NSIS Makefile to handle PCRE.
2003-12-08 20:40 guy
* packet-isis-clv.c, packet-isis-clv.h, packet-isis-hello.c,
packet-isis-hello.h, packet-isis-lsp.c, packet-isis-lsp.h,
packet-isis-snp.c, packet-isis-snp.h:
From Hannes Gredler:
- unify the IS-IS CLV space IS-IS uses a unified CLV space
across all Level and PDU Types there is no need to define PDU-
and Level- Specific CLV Types;
- clean up Authentication CLV TLV #10 is the official supported
TLV for carrying authentication information- todays code
displays TLV #10 as non-standard which is wrong; also the
notion of "Domain" "Authentication" and "Link" password has
disappeared from contemporary routing SW;
- add IP Authentication CLV dissector this CLV is depreciated -
however it is using different semantics than TLV #10 so we need
a dedicated dissector;
- add Checksum CLV dissector add support for RFC 3358 Checksum
CLVs majority of code re-used from the LSP checksum
verification dissector.
2003-12-08 20:37 obiot
* packet-wsp.c, packet-mmse.c, packet-wbxml.c:
Get rid of the integer media type dissector table in WSP, WBXML
and MMSE.
2003-12-08 20:36 guy
* packet-dsi.c:
From Didier Gautheron: check packet format in get_dsi_pdu_len.
2003-12-08 20:36 guy
* packet-afp.c:
From Didier Gautheron: add offset and size parameters in info
colum for read and write commands.
2003-12-08 20:25 guy
* packet-sip.c:
From Anders Broman:
Call subdissectors regardless of whether we're building a
protocol tree or not.
Use the "media_type" dissector table to hand off to
subdissectors, rather than wiring in SDP.
Put the message body into a subtree of the SIP tree
rather than
at the top level.
2003-12-08 19:25 ulfl
* gtk/menu.c:
moved "File->Save Highlighted Data" to "File->Export->Raw Packet
Data"
2003-12-08 17:54 ulfl
* doc/ethereal.pod:
updated to reflect the menu redesign changes
2003-12-08 17:49 ulfl
* gtk/menu.c:
removed seperator between the two print menuitems
2003-12-07 19:09 obiot
* AUTHORS:
Update address of Johan Feyaerts. Dfilter matches operator.
2003-12-07 18:32 obiot
* doc/ethereal-filter.pod.template:
Clarify dfilter syntax (mainly the implicit exists operator), add
subsections in syntax section, add description of new "contains"
operator (and inform that it is only available if libpcre has
been linked in).
2003-12-07 18:09 obiot
* packet-mmse.c, packet-wbxml.c, packet-wsp.c:
Remove the literal WSP content type dissector table, and replace
it with the "media_type" table defined in the HTTP dissector.
2003-12-07 09:43 oabad
* gtk/main.c:
Update various set_menu_object_data() calls to reflect recent
menu hierarchy changes. This avoids a crash when selecting "Folow
TCP stream" from the "Analyze" menu.
2003-12-07 03:46 guy
* packet-sdp.c:
Register the SDP dissector with the media_type dissector table
with its media type.
2003-12-07 03:34 guy
* packet-http.c:
Use a cleanup handler to free the Content-Type header value, so
it gets freed even if we throw an exception after processing the
Content-Type header but before we call a subdissector.
2003-12-07 03:21 guy
* packet-http.c:
Change the name of the variable holding the dissector table
pointer to match the previous checkin.
2003-12-07 03:17 guy
* packet-http.c, packet-mmse.c:
Rename the "http.content_type" dissector table to "media_type",
as it's for use in any dissector that uses Internet media types.
2003-12-07 02:42 guy
* packet-nt-sonmp.c:
Only check the destination address if it's AT_ETHER; otherwise,
there's no guarantee that "data[5]" exists or can be interpreted
in that fashion.
2003-12-07 02:26 guy
* packet-ssl.c:
From Devin Heitmueller: include the AES ciphersuites from RFC
3268.
2003-12-07 02:23 guy
* doc/tethereal.pod:
Put the "-V" flag in boldface, so pod2man doesn't whine.
2003-12-07 00:04 gerald
* Makefile.nmake, README.win32, config.h.win32, config.nmake,
epan/Makefile.nmake, epan/config.h.win32,
epan/ftypes/Makefile.nmake, packaging/nsis/ethereal.nsi:
Add PCRE support to the Windows build.
2003-12-06 19:26 oabad
* packet-nt-sonmp.c:
Check if pinfo->dl_dst.data is not NULL before accessing the data
(it was NULL in one of my "linux cooked" captures which contains
no destination address).
2003-12-06 19:14 jmayer
* packet-mtp3mg.c:
Declaration included the line above
2003-12-06 16:35 gram
* Makefile.am, acinclude.m4, configure.in, util.c,
epan/acinclude.m4, epan/configure.in, epan/dfilter/dfvm.c,
epan/dfilter/dfvm.h, epan/dfilter/gencode.c,
epan/dfilter/grammar.lemon, epan/dfilter/scanner.l,
epan/dfilter/semcheck.c, epan/dfilter/sttype-test.c,
epan/dfilter/sttype-test.h, epan/ftypes/ftype-bytes.c,
epan/ftypes/ftype-double.c, epan/ftypes/ftype-integer.c,
epan/ftypes/ftype-ipv4.c, epan/ftypes/ftype-none.c,
epan/ftypes/ftype-string.c, epan/ftypes/ftype-time.c,
epan/ftypes/ftype-tvbuff.c, epan/ftypes/ftypes.c,
epan/ftypes/ftypes.h:
From Olivier Biot
New "matches" operater in display filter language. Uses PCRE.
If a "matches" operator is found in a dfilter while libpcre has
not been used to build the binary, then an exception is thrown
after using dfilter_fail() to set an apporporiate error message.
2003-12-06 06:22 gram
* epan/Makefile.am:
slab.h needs to be in libethereal_a_SOURCES
2003-12-06 06:09 gram
* Makefile.am, packet-frame.c, packet-frame.h, print.c, print.h,
tethereal.c, doc/README.xml-output, doc/tethereal.pod,
epan/proto.c, epan/proto.h, tools/EtherealXML.py,
tools/Makefile.am, tools/msnchat:
Add the ability to print packet dissections in PDML (an XML-based
format) to tethereal. It could be added to Ethereal, but the GUI
changes to allow the user to select PDML as a print format have
not been added.
Provide a python module (EtherealXML.py) to help parse PDML.
Provide a sample app (msnchat) which uses tethereal and
EtherealXML.py to reconstruct MSN Chat sessions from packet
capture files. It produces a nice HTML report of the chat
sessions.
Document tethereal's PDML and EtherealXML.py usage in
doc/README.xml-output
Update tethereal's manpage to reflect the new [-T pdml|ps|text]
option
2003-12-06 04:05 guy
* file.c, ui_util.h, gtk/packet_list.c:
From Jeff Morriss: avoid at least some N^2 behavior when changing
the time stamp format.
2003-12-05 22:33 guy
* packet-ccsds.c:
"hf_ccsds_secheader" is an FT_BOOLEAN; use
"proto_tree_add_boolean()" for it.
2003-12-05 16:00 gerald
* Makefile.nmake, README.win32, config.nmake:
Switch over to Net-SNMP 5.1. A ZIP file of the Net-SNMP 5.1
sources plus a static Windows library (netsnmp.lib) has been
placed at
http://www.ethereal.com/distribution/win32/development/
The Net-SNMP documentation recommends against using a DLL at the
present time.
2003-12-05 09:34 guy
* packet-sdp.c:
We have to parse the SDP packet even if we're not building a
protocol tree, as we might be setting up a conversation.
2003-12-05 09:33 guy
* packet-isup.c:
Subdissectors must be called regardless of whether a protocol
tree is being built.
2003-12-05 09:25 guy
* plugins/mgcp/packet-mgcp.c:
Subdissectors must be called regardless of whether a protocol
tree is being built.
2003-12-04 22:37 guy
* plugins/asn1/Makefile.am:
From some reason, at least on Mac OS X 10.3, the change to have
the protocol tree stuff not use GNodes means that the ASN.1
plugin now needs to be explicitly linked against GLib in order to
get access to the GNode routines, otherwise you get errors from
the run-time linker.
2003-12-04 19:53 guy
* epan/: proto.c, proto.h:
It turns out the protocol tree parent link was used, so we need
it in our new scheme.
2003-12-04 10:59 guy
* file.c, print.c, proto_hier_stats.c, tap-protohierstat.c,
epan/proto.c, epan/proto.h, gtk/proto_draw.c, gtk/rtp_analysis.c:
Don't use GNodes for the protocol tree, put the sibling pointer,
and pointers to the first *and* last child, in the "proto_node"
structure itself. That saves us one level of indirection and
memory allocation, and lets us append to a tree by appending to
the last child directly, rather than having to scan through the
list of siblings of the first child to find the end of that list.
2003-12-04 08:15 sahlberg
* packet-kerberos.c:
update to kerberos
if the kerberos blob contains a krb error, print the error string
to COL_INFO
2003-12-04 08:13 sahlberg
* packet-ldap.c:
update to ldap.
some implementations specify GSSAPI in the bind call. the
encapsulation seems to be the same as GSS-SPNEGO so handle it the
same way
2003-12-04 06:02 gram
* packet-wsp.c:
Add {0, NULL} to the vals_wsp_reason_codes value_string array.
2003-12-04 05:59 gram
* packet-wlancap.c:
Add {0, NULL} to all the value_string arrays.
2003-12-04 05:57 gram
* packet-socks.c:
Add {0, NULL} to the reply_table_v5 value_string array.
2003-12-04 05:55 gram
* packet-ldp.c:
ldp.msg.tlv.returned.msg.ubit needs to be an FT_BOOLEAN field,
not an FT_UINT8, since it is using a true_false_string struct to
print its values. Add {0, NULL} to the fec_vc_interfaceparm
value_string array.
2003-12-04 05:47 gram
* packet-isup.c:
Add {0, NULL} to the isup_Pass_on_not_possible_indicator_vals and
ISUP_Broadband_narrowband_interworking_indicator_vals
value_string arrays.
2003-12-04 05:40 gram
* packet-fcswils.c:
Add {0, NULL} to end of fc_swils_rscn_addrfmt_val value_string
array.
2003-12-04 05:38 gram
* packet-fcip.c:
Add {0, NULL} to end of fcencap_proto_vals value_string array.
2003-12-04 00:45 guy
* filters.c, filters.h, gtk/dcerpc_stat.c,
gtk/endpoint_talkers_table.c, gtk/fc_stat.c, gtk/filter_prefs.c,
gtk/find_dlg.c, gtk/h225_counter.c, gtk/h225_ras_srt.c,
gtk/ldap_stat.c, gtk/mgcp_stat.c, gtk/prefs_dlg.c,
gtk/rpc_stat.c, gtk/service_response_time_table.c,
gtk/smb_stat.c:
In GTK+ 2.x, "gtk_entry_get_text()" returns a "const gchar *";
assign its value to pointer-to-const variables.
2003-12-03 23:54 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-gsm_map.c,
doc/ethereal.pod:
From Felix Fei: GSM MAP support.
From Michael Lum:
Modified for better TCAP separation, fixed EOC handling
(a la
TCAP).
Added parameter parsing (although not dissection or
naming).
2003-12-03 23:46 guy
* AUTHORS, packet-ansi_a.c, packet-ansi_a.h, tap-ansi_astat.c,
gtk/Makefile.am, gtk/Makefile.nmake, gtk/ansi_a_stat.c:
From Michael Lum: Ethereal tap for ANSI A-interface.
Tweak some Makefile.nmake whitespace.
2003-12-03 22:50 guy
* packet-mtp2.c, packet-mtp3.c:
From Jeff Morriss: add support for WTAP_ENCAP_MTP2 and
WTAP_ENCAP_MTP3.
2003-12-03 22:40 guy
* wiretap/: AUTHORS, libpcap.c, wtap.c, wtap.h:
From Jeff Morriss: add support for libpcap MTP2 and MTP3
captures.
Add a missing entry in "encap_table[]" for Bluetooth H4, and fix
some comments.
2003-12-03 20:01 guy
* packet-bootp.c:
From Greg Morris: handle the backwards compatibility flag for
options 78 and 79.
2003-12-03 19:59 guy
* gtk/menu.c:
From Greg Morris: the "File->Save Highlighted" menu item has no
icon, so don't use "ITEM_FACTORY_STOCK_ENTRY()" for it.
2003-12-03 19:47 guy
* wiretap/airopeek9.c:
"strtoul()" returns a "long", not a "long long".
2003-12-03 10:14 sahlberg
* epan/tvbuff.c:
Replace two expensive macros with a much simpler mechanism to
prevent memory leaks due to exceptions.
makes my tethereal testcase ~1% faster.
2003-12-03 09:50 sahlberg
* epan/: proto.c, tvbuff.c, tvbuff.h:
performance update
replace tvb_raw_offset() which is essentially a simple assignment
and which is called a lot with a macro.
this makes my tethereal testcase 2-3% faster.
2003-12-03 09:28 guy
* packet-ncp2222.inc, print.c, proto_hier_stats.c,
tap-protohierstat.c, epan/proto.c, epan/proto.h,
epan/ftypes/ftypes.c, epan/ftypes/ftypes.h, gtk/main.c,
gtk/menu.c, gtk/prefs_dlg.c, gtk/rtp_analysis.c:
The "ptr_u" unions no longer have a "next" pointer - they now
just have one member - or have one that's not used, so get rid of
those unions.
2003-12-03 08:53 guy
* epan/: proto.c, proto.h, slab.h, ftypes/ftypes.c,
ftypes/ftypes.h:
Instead of requiring slab-allocated structures to have a "next"
pointer, when adding them to the free list, cast the pointer to
the structure to a pointer to a "freed_item_t" which contains the
"next" pointer.
This reduces the memory requirement for some of those structures,
and leaves us free to slab-allocate structures that have a "next"
pointer for other reasons.
2003-12-03 08:43 sahlberg
* packet-smb.c:
Update to SMB ReadAndX replies.
There might be a 4 (not 2) byte datalen high field. If there is
no such field (due to an early dialect being used) these bytes
are often 0xff. If these four bytes are all 0xff dont display
them in the tree.
2003-12-03 07:46 guy
* README.linux:
Bring it up to date.
2003-12-02 23:14 guy
* file.c, tethereal.c, epan/column-utils.c, epan/column_info.h,
gtk/main.c:
From Didier Gautheron: for each column format type, save the
first and last columns, if any, with that format, and use that to
speed up processing of columns with a particular format and
checking whether we're displaying a column with a particular
format.
2003-12-02 21:15 guy
* packet-ncp2222.inc, packet-smb-sidsnooping.c, tap-iostat.c,
epan/proto.c, epan/proto.h, epan/dfilter/dfvm.c,
epan/ftypes/ftypes.c, epan/ftypes/ftypes.h, gtk/io_stat.c,
gtk/main.c, gtk/rtp_analysis.c:
From Didier Gautheron: put an "fvalue_t" structure into a
"field_info" structure, rather than separately allocating
"fvalue_t"s and having the "field_info" structure point to them -
this appears to speed up protocol tree construction a bit.
2003-12-02 20:27 guy
* wiretap/airopeek9.c:
Check for errors and EOF, and handle them appropriately; don't
treat all errors when reading the header as indications that the
file isn't an AiroPeek V9 file.
Put in comments nothing some additional checks we should do.
2003-12-02 19:37 guy
* AUTHORS, doc/ethereal.pod, wiretap/AUTHORS, wiretap/Makefile.am,
wiretap/Makefile.nmake, wiretap/airopeek9.c, wiretap/airopeek9.h,
wiretap/file_access.c, wiretap/wtap.h:
From Martijn Schipper: support for reading AiroPeek files in V9
capture file format (AiroPeek 2.x).
2003-12-02 18:50 guy
* packet-tpkt.c:
Tomas Kukosa noted that the TPKT dissector spends a significant
amount of time in "find_protocol_by_id()"; the protocol_t pointer
for a protocol doesn't change over time, so get that pointer when
the protocol is registered and save it.
2003-12-02 18:35 guy
* packet-isakmp.c:
From Yaniv Kaul:
1) fix description of Check Point version 5004;
2) add description of Check Point version 5005.
2003-12-02 10:23 sahlberg
* epan/: proto.c, tvbuff.c, tvbuff.h:
Move the definition of the tvbuff_t structure and friends to
tvbuff.h so that we can change tvb_get_ds_tvb() into a macro.
This function was a single line assignment and was called a lot.
This made tethereal ~2.5% faster in one testcase I use.
2003-12-02 09:47 sahlberg
* epan/: proto.c, ftypes/ftypes.c, ftypes/ftypes.h:
Use the LSAB_ALLOC and SLAB_FREE macros to allocate/free fvalue_t
data
2003-12-02 09:11 sahlberg
* epan/: proto.c, slab.h:
Moving SLAB_ALLOC and SLAB_FREE to its own header file
2003-12-02 09:05 guy
* AUTHORS, packet-isakmp.c, doc/ethereal.pod:
From Arnaud Jacques: fix a typo, and handle another CheckPoint
version number.
2003-12-02 06:06 guy
* packet-fcfzs.c:
From Dave Sclarsky:
Correct several problems with zoneset decodes (e.g. the
zoneset
and zone name lengths do *not* include the pad bytes, so
the
offset calculation needed to be fixed).
Move the decode of zoneset name into the routine
"dissect_fcfzs_zoneset", so that it is done in only one
place.
2003-12-02 05:53 guy
* packet-ses.c:
Don't call the presentation layer dissector if we don't have a
handle for it.
2003-12-02 02:58 guy
* packet-bssap.c, packet-tcap.c:
From Michael Lum: don't register the handoff routine for
dissectors as a preference change callback if the ports they
register on aren't preferences.
2003-12-01 23:41 guy
* epan/value_string.c, epan/value_string.h,
plugins/plugin_api_list.c, plugins/Xass-list,
plugins/Xplugin_api.c, plugins/Xplugin_api.h,
plugins/Xplugin_api_decls.h, plugins/Xplugin_table.h:
From Tomas Kukosa: add "decode_enumerated_bitfield_shifted()",
which is like "decode_enumerated_bitfield()" but handles
value_string tables containing values as they appear in the
bitfield rather than as they appear in the item containing the
bitfield.
2003-12-01 23:26 guy
* packet-m2ua.c:
From Michael Lum: add a preference setting to specify the
parameter tag for "Protocol Data 1", as it changed between draft
7 and RFC 3331.
2003-12-01 23:05 guy
* Makefile.am, Makefile.nmake, packet-ansi_a.c, packet-ansi_a.h,
packet-bssap.c, tap-ansi_astat.c:
From Michael Lum:
add a message statistics tap for ANSI A interface for
Tethereal;
fix the BSSAP, BSMAP, and DTAP interface dissectors to
call
subdissectors even if no protocol tree is being built.
2003-12-01 22:25 guy
* packet-ranap.c:
From Michael Lum: add a heuristic RANAP dissector, for use atop
SCCP, as the SCCP dissector currently doesn't support
conversations to be given dissectors.
2003-12-01 20:27 gerald
* util.c:
Don't automatically fill in a capture filter if CLIENTNAME is set
to "Console".
2003-12-01 17:25 gerald
* README.win32:
Updates for new zlib.
2003-12-01 17:19 gerald
* packaging/nsis/ethereal.nsi:
Switch from zlib.dll to zlib1.dll.
2003-12-01 17:17 gerald
* config.nmake:
Switch to the new (and official) zlib DLL from www.gzip.org.
2003-12-01 06:59 sharpe
* wiretap/file_access.c:
It's RedHat, not Red Hat.
2003-12-01 02:01 guy
* gtk/: file_dlg.c, file_dlg.h, print_dlg.c, proto_draw.c:
"select_file_cb()" only needs a title, not a "construct_args_t" -
"construct_args_t" is for use with filter dialogs, and the
members other than the title apply only to filter dialogs.
Have "select_file_cb()" actually use the title supplied to it.
2003-12-01 01:57 sharpe
* gtk/menu.c:
Fix the accelerator issue ...
2003-11-30 23:05 guy
* gtk/proto_draw.c:
Not all platforms have <unistd.h> - in particular, Windows
doesn't.
If you're using "open()", "close()", "read()", "write()", etc.,
you should include <io.h> on Windows.
2003-11-30 18:01 sharpe
* gtk/proto_draw.c:
Fix some warnings in proto_draw.c
2003-11-30 04:40 sharpe
* gtk/menu.c:
Rename that to Save Highlighted with Ctl-H as the accellerator.
2003-11-30 04:37 sharpe
* gtk/menu.c:
Add Save Selected as a menu item in the File Menu.
This still has a way to go, though, because the menu item should
be greyed out until something is Highlighted.
2003-11-30 04:21 sharpe
* gtk/: color_dlg.c, file_dlg.c, file_dlg.h, menu.c, print_dlg.c,
proto_draw.c, toolbar.c:
Move print_file_cb out of gtk/print_dlg.c and into gtk/file_dlg.c
and rename it to select_file_cb to reflect its function.
While this cleans things up a bit, I am still not happy because
now filter_prefs.h must be included before file_dlg.h just to get
construct_args_t.
2003-11-29 12:34 jmayer
* doc/README.tapping:
Fix two small typos
2003-11-29 06:15 sharpe
* gtk/menu.c:
Properly capitalize the string for the menu item.
2003-11-29 06:09 sharpe
* gtk/: file_dlg.h, menu.c, print_dlg.c, proto_draw.c:
Add an entry in the byte_view pane that allows the user to save
the highlighted data to a file. This allows the user to select
some stuff, and analyse it with external tools, and is very
useful for quickly prototying dissectors etc.
This works by retrieving the info that is needed to define where
the selected region is.
It puts up a dialog box that asks for the file to save in.
However, it is an ugly hack, because it reuses print_file_cb,
while print_file_cb should be moved into file_dlg.c.
It also needs to have some warning dialogs put up in error cases.
Finally, it would be good to be able to select a region in the
byte_view, which you can do with click and drag, and then have a
menu item to save the selected bytes.
2003-11-29 03:55 guy
* AUTHORS, packet-gtp.c, doc/ethereal.pod:
From melerski [AT] poczta.onet.pl: fix a problem with unknown
IEs.
2003-11-28 19:13 ulfl
* gtk/menu.c:
renamed frame to packet in all GUI elements moved "Enabled
Protocols" and such from "View" to "Analyze" toplevel menu
2003-11-28 19:02 ulfl
* gtk/goto_dlg.c:
renamed frame to packet in all GUI elements
2003-11-28 19:00 ulfl
* gtk/capture_info_dlg.c:
use dlg_window_new instead of gtk_window_new
2003-11-28 18:59 ulfl
* gtk/: toolbar.c, find_dlg.c:
renamed frame to packet in all GUI elements
2003-11-28 00:44 ulfl
* gtk/capture_info_dlg.c:
label changed from "Portions" to "% of total" as suggested by Guy
2003-11-28 00:13 ulfl
* gtk/main.c:
using dlg_utils.c functions to catch the ESC key to close the
dialog
2003-11-28 00:07 ulfl
* gtk/: supported_protos_dlg.c, plugins_dlg.c:
using dlg_utils.c functions to catch the ESC key to close the
dialog
2003-11-27 23:25 ulfl
* gtk/help_dlg.c:
using dlg_utils.c functions to catch the ESC key to close the
dialog
2003-11-27 22:29 guy
* print.c:
"representation", in an "item_label_t", is now an array, not a
pointer, so "fi->rep->representation" can't be null.
2003-11-27 22:15 guy
* tap-rpcstat.c, tap-wspstat.c:
Fix comments to correctly refer to the "-z" option.
2003-11-27 22:14 guy
* tap-rpcstat.c:
From Michael Lum: fix the usage message to refer to "-z", not
"-Z".
2003-11-27 22:12 guy
* gtk/main.c:
Show the -z flag in the usage message.
2003-11-27 22:04 guy
* tethereal.c:
From Michael Lum: fix the usage message to say "-z", not "-Z".
2003-11-27 21:20 guy
* AUTHORS, packet-rtp-events.c, doc/ethereal.pod:
From Arsen Chaloyan: fix offsets in "proto_tree_add" calls.
2003-11-27 21:09 guy
* etypes.h, packet-ethertype.c, plugins/rtnet/packet-rtnet.c:
From Erwin Rol: RTCFG support.
Add in a URL to the RTNET home page.
2003-11-27 21:02 guy
* packet-dns.c:
From David Fort: fix to previous patch.
2003-11-27 20:34 ulfl
* gtk/menu.c:
Redesign of the whole menu structure, to be more intuitive to the
user and conforms somewhat better to the Gnome Human Interface
Guideline
2003-11-27 17:18 ulfl
* print.c:
bugfix: removed access violation when using "File/Print Packet".
The label_ptr could be NULL, when calling function print_line
2003-11-27 00:22 ulfl
* gtk/help_dlg.c:
using text files from help dir, to display the help texts. the
"dynamic protocol fields" are already moved to
gtk/supported_protos_dlg.c
2003-11-27 00:17 ulfl
* help/: capture_filters.h, display_filters.h, faq.h, overview.h,
well_known.h:
Added this intermediate files, until a Makfile.am is available
for unix systems
2003-11-26 23:23 guy
* AUTHORS, packet-dns.c, doc/ethereal.pod:
From David Fort: DNS DSS RR support.
2003-11-26 12:22 sahlberg
* epan/: proto.c, proto.h:
Speed updates
create generic macros for allocating/freeing structures.
remove one more slow GMemChunk and replace it with a simple
linked list
~4% speed improvement in my tests.
the allocated data is never freed. this may be a problem if
ethereal is ever supported on a platform lacking resource
tracking but makes the implementation faster and simpler.
2003-11-26 02:58 guy
* AUTHORS, packet-giop.c, doc/ethereal.pod:
From Patrick Kursawe: rename "getline()" so it doesn't collide
with the "getline()" declared in <stdio.h> with recent versions
of glibc.
Fix a typo in the AUTHORS file.
2003-11-26 02:54 guy
* pcap-util.c:
From Jaime Fournier: fix a typo.
2003-11-25 20:26 guy
* AUTHORS, packet-ucp.c, doc/ethereal.pod:
From Reinhard Speyerer: handle 10-digit UCP dates, which lack a
seconds value.
2003-11-25 20:02 guy
* epan/proto.c:
As with fvalue_t, so with field_info and item_label - the
individual items aren't individually g_mallocated and can't be
g_freed, only the chunks can.
2003-11-25 19:25 guy
* epan/ftypes/ftypes.c:
Individual fvalue_t's aren't individually allocated with
"g_malloc()", so they can't be freed with "g_free()"; keep a list
of the chunks of "fvalue_t"s, which are whare are allocated with
"g_malloc()", so we can free them all.
2003-11-25 18:02 guy
* packet-sip.c:
From Anders Broman: add more SIP headers, and the PUBLISH method.
2003-11-25 14:16 sahlberg
* epan/proto.c:
replace free_node_field_info with a macro since it is only called
from one other place in the code and this reduces one unnecessary
function call overhead. and it makes ethereal ~1% faster.
2003-11-25 14:11 sahlberg
* epan/proto.c:
rename FREE_FIELD_INFO to FIELD_INFO_FREE for consistency
2003-11-25 14:10 sahlberg
* epan/proto.c:
create a FIELD_INFO_NEW for consistency
2003-11-25 14:07 sahlberg
* file.c, print.c, epan/proto.c, epan/proto.h, gtk/proto_draw.c:
remove another slow GMemChunk from ethereal making ethereal a
little bit faster
2003-11-25 13:23 sahlberg
* epan/proto.c:
change free_field_info to FREE_FIELD_INFO to indicate it is a
macro and not a function
2003-11-25 13:20 sahlberg
* epan/proto.c, epan/dfilter/dfvm.c, epan/ftypes/ftype-ipv4.c,
epan/ftypes/ftype-string.c, epan/ftypes/ftypes-int.h,
epan/ftypes/ftypes.c, epan/ftypes/ftypes.h,
gtk/dfilter_expr_dlg.c:
fvalue_free() is one of the most called functions. This function
is also very small, so small that teh overhead for the actual
function call and return is likely to be a significant part of
its execution time.
change it into a macro and make it thus slightly faster by
eliminating the function call overhead.
2003-11-25 08:50 sahlberg
* epan/ftypes/: ftypes.c, ftypes.h:
Change the handling of temporary allocation of fvalue_t
structures to be faster. Use a similar technique as was used in
epan/proto.c to speed up the field_info allocation/deallocation
routines
2003-11-25 08:19 guy
* packet-dcerpc.c:
From Jaime Fournier: show the RPC version of the unknown
interface in the Info column.
2003-11-25 08:10 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-dcerpc-budb.c,
packet-dcerpc-epm4.c, packet-dcerpc-icl_rpc.c,
packet-dcerpc-rs_prop_acct.c:
From Jamie Fournier: DCE RPC EPM version 4 support, and stub
support for BUDB, ICL RPC, and RS_PROP_ACCT DCE RPC-based
protocols.
2003-11-25 05:58 guy
* wiretap/cosine.c:
"file_seek()" sets "*err" - we don't have to set it ourselves.
The same is true of "parse_cosine_rec_hdr()".
2003-11-25 05:56 guy
* wiretap/network_instruments.c:
"file_seek()" sets "*err" - there's no need to set it ourselves.
It returns -1 on errors, so just check for that.
2003-11-25 00:21 guy
* ipproto.h:
Fix a typo.
2003-11-24 23:46 guy
* packet-ccsds.c:
Eliminate compiler warnings.
2003-11-24 22:11 guy
* packet-ncp2222.inc, print.c, proto_hier_stats.c,
tap-protohierstat.c, epan/proto.c, epan/proto.h, gtk/main.c,
gtk/menu.c, gtk/prefs_dlg.c, gtk/rtp_analysis.c:
Make the recent epan/proto.{c,h} change compile.
2003-11-24 21:42 guy
* ipproto.c, ipproto.h, packet-mip6.c:
Preserve 62 as an (old) IP protocol type for mobility headers.
2003-11-24 21:12 sahlberg
* epan/: proto.c, proto.h:
performance enhancement to proto.c
Removed the GMemChunk used to allocate/free field_info structures
and used a free list to store the freed structs until they are
allocated again.
Ethereal will allocate more field_info structs as it needs to but
never free them. Instead the are just placed in a cheap and fast
free list so that if we want to use the struct again, this will
be fast.
This affects the speed of the two functions alloc_field_info()
that should be slightly faster now free_field_info() that was
replaced with a 2 line macro.
All in all my testing suggests that ethereal is 2-3% faster with
this patch.
2003-11-24 17:41 ulfl
* Makefile.nmake:
bugfix: corrected clean and distclean targets
2003-11-24 00:34 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-ccsds.c,
doc/ethereal.pod:
From Scott Hovis :CCSDS (Consultative Committee for Space Data
Systems) support.
2003-11-24 00:05 guy
* packet-isup.c:
From Anders Broman: fix dissection of GRS/GRA messages.
2003-11-23 23:42 guy
* Makefile.nmake:
Include the BFD dissector when building with MSVC++.
2003-11-23 22:00 gerald
* AUTHORS, Makefile.am, packet-bfd.c:
From Hannes Gredler: Add support for Bi-directional Fault
Detection (BFD).
2003-11-22 12:02 jmayer
* packet-radius.c:
- Bugfix: Passworddecoding should only be done for attribute 2,
but not for VSA 2 - Fixme comment about length handling
added - Cleanup: Setting a variable to the right type removes the
necessity for casts.
2003-11-22 11:12 sahlberg
* packet-h245.c:
Change the way signalType is dissected to be compatible with and
dissect the packets from Martin R and Paul H.
I still think ethereal was correct before this patch and that
this patch is not compatible with teh standard. Anyway, that
doesnt matter much. With this patch ethereal will dissect the
packets properly. Time to study x691 again.
2003-11-22 08:35 guy
* ipproto.h, packet-ipv6.h:
From Martti Kuparinen: use correct values for Mobile IPv6.
2003-11-22 04:41 sahlberg
* epan/proto.c:
As per Guys suggestion, continue optimizing proto.c to macroize
it and make it even faster
2003-11-21 22:18 guy
* packet-smpp.c:
From Olivier Biot: fix up the description of the
"port_number_udh_means_wsp" preference.
2003-11-21 22:00 guy
* packet-wsp.c:
From Olivier Biot:
* Fix the WSP dissector so a Quoted-string with
extraneous
trailing quote is displayed without duplicated final
quote, and
issue a warning in the protocol tree.
* Remove the Openwave x-up-proxy-client-id header
decoding as it
was incorrectly decoded as a text string, and process
it with
the default Openwave header parser.
* Fix byte highlighting of some WSP parameters.
* Rename the WSP parameter filter names so they don't all
refer to
content_type.
2003-11-21 21:58 guy
* packet-wbxml.c, epan/packet.c, epan/packet_info.h:
From Olivier Biot:
* Add a "match_string" field to the "packet_info"
structure,
saving the string value that matched in a string
dissector
lookup, by analogy to "match_port" - this was required
for
dissection with token rendering of WBXML content when
no public
ID was given (e.g. Nokia/Ericsson OTA provisioning
data).
* Add support for textual content type based WBXML token
mapping.
* Add extra WBXML public identifiers.
* Add the Nokia/Ericsson OTA provisioning (version 7)
token
definitions.
* Inform the user when a content-type based token match
is found.
2003-11-21 21:33 guy
* AUTHORS, packet-dcerpc-srvsvc.c, doc/ethereal.pod:
From Eric Wedel: fix dissection of NetServerDiskEnum reply.
2003-11-21 19:24 guy
* gtk/rtp_stream.c:
From Lars Ruoff: use the pointer to the RTP payload, rather than
extracting the data from the frame directly.
2003-11-21 14:58 sahlberg
* epan/: proto.c, proto.h:
Performance fix
In the GPROF logs proto_registrar_get_nth() used to take anything
between 2.5 and 5.5% of the time.
Replace the GLIB array with a handroleld one for one of the
private structures.
the function should now be virtually zero cost and thus ethereal
should be 2.5-5.5% faster on those traces.
anyone that wants to, please rerun GPROF with this fix and see
what has changed.
2003-11-21 08:40 guy
* packet-dcerpc-epm.c:
A "handle_t" as the first argument to a call doesn't seem to be
sent over the wire, at least in the DCE RPC 1.1 code.
That suggests that the first 24 bytes of a Map request are the
UUID pointer that the EPM IDL says should be there, not a context
handle.
2003-11-21 08:33 guy
* pcap-util.c:
Maybe the problem is that the compilers used on AIX weren't
defining "AIX", and that code was never compiled. Libpcap uses
"_AIX" to conditionally compile in the extra AIX BPF support;
we'll do the same.
2003-11-21 08:30 guy
* pcap-util.c:
Pass "strncmp()" the right number of arguments. (Why hasn't
anybody reported this as a problem when compiling on AIX?
Doesn't any compiler complain that "strncmp()" isn't being passed
enough arguments? GCC sure did in a test program I built on
FreeBSD 3.4....)
2003-11-21 04:01 guy
* packet-dcerpc.c:
From Jamie Fournier: add the UUID to the Info column for datagram
calls.
2003-11-21 02:57 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-dcerpc-rs_plcy.c:
From Jamie Fournier: DCERPC RS_PLCY support.
2003-11-21 02:48 guy
* packet-dcerpc-ndr.c, packet-dcerpc.h:
The 32-bit integer at the beginning of a context_handle is called
"context_handle_attributes" in the DCE RPC 1.1 "nbase.idl".
Rename our structure member accordingly.
Note in a comment that we should perhaps display a context_handle
as the attributes and UUID.
Use "proto_tree_add_item()", not "proto_tree_add_bytes()", to put
the context handle raw data into the protocol tree.
2003-11-20 23:34 guy
* packet-rtp.c, packet-rtp.h, gtk/Makefile.am, gtk/Makefile.nmake,
gtk/rtp_stream.c, gtk/rtp_stream.h, gtk/rtp_stream_dlg.c:
From Lars Roland:
- added a pointer to raw rtp data to _rtp_info that can
be used by
taps;
- RTP packets are passed to the tap queue only if they
are not
error packets (so that you don't need to filter out
ICMP
packets)
- use that pointer in rtp_stream, so it handles packets
with
padding, and should handle RTP packets fragmented
across
lower-level packets
- moved rtp_stream from tap sources to normal files
(prevents on-start-up registration of the rtp_stream
tap
listener)
- rtp_stream tap gets registered/unregistered with the
"RTP
Streams" dialog box
i.e. the tap is registered as long as the dialog box is
open.
Alternatively, it is de-/registered on demand if RTP
Analysis is
called directly on a packet.
- rtp_stream tap listener no longer uses a filter in
dissection
` and does not need to have a proto tree being built.
(performance increase)
- fixed: RTP Streams list will get updated in real time
if the
dialog box is open while a redissection takes place.
2003-11-20 23:21 guy
* packet-dcerpc-srvsvc.c:
#if 0-out some no-longer-used routines.
Use #if 0/#endif rather than comments to remove the code that
used to refer to those routines - it's a bit more robust in the
presence of comments (there aren't currently any, but, just in
case somebody adds them...).
2003-11-20 22:50 guy
* packet-wbxml.c:
From Olivier Biot: add support for media type
"application/x-prov.syncset+wbxml".
2003-11-20 22:38 guy
* packet-sip.c:
From Martin Mathieson:
- Add some summary info to REGISTER requests and
responses
- Tidy up whitespace a little
2003-11-20 22:24 guy
* packet-wbxml.c:
From Olivier Biot:
* Fix an incorrectly #ifdef'ed return introduced by the
previous
patch
* Remove the parsed_length parameter from the function
signature
of the tag and attribute dissectors - have it return
the
parsed length, instead
* Throw ReportedBoundsError exceptions if we run past the
end of
the tvbuff, rather than putting a special entry in
* Produce consistent and extensive debug logging (enabled
by
defining DEBUG_wbxml)
* Get rid of the dozens of "#ifdef DEBUG ... #endif"
constructs
for debug logging
2003-11-20 19:05 guy
* epan/osi-utils.c:
From Hannes Gredler: "print_system_id()" should call
"print_system_id_buf()", not "print_nsap_net_buf()". (What idiot
made *that* mistake? :-))
2003-11-20 14:29 nneul
* AUTHORS:
update proto list
2003-11-20 06:43 sharpe
* packet-dcerpc-srvsvc.c:
Clean up some IDL and remove some structures that Windows of all
flavors does not understand. SHARE_INFO_1004, 1005, 1006, 1007,
and 1501 seem not to be understood by any, and it can screw up
dissections.
2003-11-20 05:20 guy
* epan/proto.c:
Use "tvb_get_string()" in "proto_tree_set_string_tvb()" - it
won't leak memory if it throws an exception, as it checks whether
the entire string is in the tvbuff *before* allocating a buffer
for it, and that also means that if the length is absurdly large,
an exception will be thrown, rather than the memory allocation
failing.
2003-11-20 05:04 guy
* epan/resolv.c:
On Mac OS X, disable the alarm/longjmp stuff for timing out name
resolution queries - it runs a significant risk of crashing
applications that do that.
2003-11-20 04:28 gerald
* AUTHORS, doc/ethereal.pod:
Update Jakob Schlyter's address.
2003-11-19 22:55 guy
* packet-wbxml.c:
From Olivier Biot: fix the WBXML dissector in cases where
dissection is interrupted because of a short frame or packets not
being reassembled, and provide additional debug logging.
2003-11-19 22:13 nneul
* Makefile.am, Makefile.nmake, packet-sebek.c:
Add dissector for the SEBEK kernel read() data capture and/or
rootkit tool used as part of the HoneyNet project.
Info at: http://project.honeynet.org/tools/sebek/
2003-11-19 21:24 guy
* packet-wsp.c:
From Olivier Biot:
correct (and document) the offset computation in the
parameter()
and parameter_value_q() functions.
From Lo<4C>c Minier:
- a copy-paste with a missing replacement;
- content-disposition uses parameters not q-values;
- missing "+" for the calculation of parameter-offsets;
- white-space cleanup;
- comment fixes.
2003-11-19 09:58 guy
* packet-isis-lsp.c, packet-isis-lsp.h:
Fix the ATT bit definitions.
2003-11-19 09:49 guy
* packet-cpfi.c:
Get rid of unused variables.
2003-11-19 09:43 guy
* packet-wsp.c:
From Olivier Biot: get rid of no-longer-used routines.
2003-11-19 09:32 sahlberg
* packet-tcp.c:
Update to TCP, when we see a SYN|ACK packetm reset base_ack to
the current ACK-1 so that it looks right when doing relative
sequence numbers. I.e. SEQ : seq==0 ack==0 SEQ|ACK
seq==0 ack==1 ACK seq==1 ack==1
This looks much more correct.
This change also fixes the problem reported to ethereal-dev
recently with "Follow TCP Stream" dropping the first character of
the stream.
2003-11-19 07:13 sharpe
* packet-dcerpc-wkssvc.c:
Fix some IDL ...
2003-11-19 04:30 guy
* packet-fcswils.c:
From Dave Sclarsky: fix the offset for the Node WWN.
2003-11-19 04:26 guy
* packet-cpfi.c:
Get rid of some unused arguments and variables.
Clean up the handling of the footer, so that it works even with
short frames.
2003-11-19 04:05 guy
* packet-cpfi.c:
"uint" preferences should be "guint"s, not "int"s.
2003-11-19 04:02 guy
* packet-cpfi.c:
Fix a typo.
2003-11-19 04:00 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-cpfi.c,
doc/ethereal.pod:
From Dave Sclarsky: CPFI support.
2003-11-19 03:53 guy
* packet-smb-browse.c, packet-smb-logon.c, packet-smb-mailslot.c:
"dissect_mailslot_browse()", "dissect_mailslot_lanman()", and
"dissect_smb_logon()" always return TRUE, so just get rid of
their return value.
"call_dissector()" automatically calls the data dissector if the
protocol for the dissector being called is disabled, so we don't
have to check its result and call the data dissector if it
returns 0.
2003-11-19 02:58 guy
* packet-mmse.c:
Register the MMSE dissector with the "http.content_type"
dissector table, rathe than as a heuristic subdissector of HTTP.
2003-11-19 01:50 guy
* gtk/supported_protos_dlg.c:
Use "OK" for the "OK" button, as we do elsewhere.
2003-11-19 01:45 guy
* packet-wsp.c:
From Olivier Biot:
Implement quoted-string parsing by appending the closing
quote
to the string value. If the quoted-string value does not
start
with a quote, dissection resumes but a warning is
displayed.
Textual headers are assumed to be 0x00 terminated
(otherwise we
have a malformed packet or a short frame).
The Trailer header is also dissected now, and the charset
parameter dissection has been rewritten.
The Content-ID header dissector was registered at the
place of
the Trailer dissector; this has also been fixed.
2003-11-19 01:39 guy
* packet-ansi_map.c:
From Michael Lum: fix param_digits() subtree for "Nature of
Number".
2003-11-19 00:10 ulfl
* gtk/gui_prefs.c:
redraw supported_protos dialog, if GUI prefs changed
2003-11-19 00:04 ulfl
* gtk/menu.c:
added supported_protos menu item
2003-11-19 00:02 ulfl
* gtk/Makefile.am:
added supported_protos_dlg
2003-11-19 00:01 ulfl
* gtk/Makefile.nmake:
added supported_protos_dlg.obj
2003-11-18 23:56 ulfl
* gtk/: supported_protos_dlg.c, supported_protos_dlg.h:
seperated "supported protocols and protocol fields" dialog,
coming from help_dlg.c/.h
2003-11-18 23:40 ulfl
* Makefile.nmake:
generate "static" help content
2003-11-18 23:11 ulfl
* help/: capture_filters.txt, convert-include.sh, Makefile.nmake,
display_filters.txt, faq.txt, overview.txt, well_known.txt:
"static content" and make environment of redesigned online help
2003-11-18 19:56 guy
* packet-bootp.c:
From Greg Morris:
dissect the RFC 2610 DHCP options for SLP;
dissect Novell-specific options 85, 86, and 87.
2003-11-18 19:46 guy
* packet-tcp.c:
From Lars Roland: the window size passed to
"tcp_analyze_sequence_number()" is a "guint32", as it might be
scaled - make the arugment a "guint32" as well.
2003-11-18 19:36 guy
* plugins/: Xass-list, Xplugin_api.c, Xplugin_api.h,
Xplugin_api_decls.h, Xplugin_table.h:
Get rid of the second "col_set_fence()" entry.
2003-11-18 19:34 guy
* plugins/plugin_api_list.c:
The second of the "col_set_fence()" entries is the one that
should've been removed; that way, the ordinals of existing
entries in the function vector is preserved.
2003-11-18 19:31 guy
* plugins/Makefile.nmake:
From Lars Roland: put missing "enttec" into "all" list.
2003-11-18 19:29 ulfl
* gtk/capture_dlg.c:
removed MSVC compiler warnings
2003-11-18 19:28 guy
* packet-ntp.c:
From Matthias Drochner:
extensions need only be a multiple of 4 bytes in length,
not 8
bytes;
put in a missing increment of "offset".
2003-11-18 19:27 ulfl
* gtk/print_dlg.c:
removed unused vars
2003-11-18 19:26 ulfl
* plugins/plugin_api_list.c:
col_set_fence occurs twice, removed one appearance
2003-11-18 19:20 guy
* epan/filesystem.h:
From Tomas Kukosa: add "extern"s so that the plugin API stuff
works.
2003-11-18 19:20 ulfl
* packet-sdp.c:
includes changed, to be working with MSVC also
2003-11-18 19:18 ulfl
* plugins/rdm/Makefile.nmake:
corrected cut and paste errors, makefile was unchanged copied
from rtnet
2003-11-18 08:59 guy
* plugins/: Xass-list, Xplugin_api.c, Xplugin_api.h,
Xplugin_api_decls.h, Xplugin_table.h:
Add "col_get_writable()", "col_set_writable()", and
"col_set_fence()" to the plugin API list.
2003-11-18 08:58 guy
* plugins/Xplugin_table.h:
Export "protocol_t" as an opaque type.
Make "proto_is_protocol_enabled()" and
"proto_get_protocol_short_name()" take a "protocol_t *" as an
argument, so they don't have to look up the "protocol_t" - this
will probably speed them up considerably, and they're called on
almost every dissector handoff.
Get rid of a number of "proto_is_protocol_enabled()" calls that
aren't necessary (dissectors called through handles, including
those called through dissector tables, or called as heuristic
dissectors, aren't even called if their protocol isn't enabled).
Change some direct dissector calls to go through handles.
2003-11-18 08:55 guy
* plugins/plugin_api_list.c:
Add "col_get_writable()", "col_set_writable()", and
"col_set_fence()" to the plugin API list.
2003-11-18 08:13 guy
* configure.in, epan/configure.in, wiretap/configure.in:
From Olivier Biot: add a "--enable-profile-build" flag to request
that "-pg" binaries be built.
2003-11-18 08:04 guy
* packet-http.c:
Content-Type values are case-insensitive; force them to lower
case (subdissectors must register their Content-Type values as
all-lower-case).
Don't include parameters in the value we look up in the
Content-Type subdissector table.
2003-11-18 07:49 guy
* packet-http.c:
Add an "http.content_type" dissector table,
Process the Content-Type header, and, if one is found, look up
its value in the aforementioned dissector table.
2003-11-18 07:08 guy
* packet-ses.c:
Handle concatenated SPDUs.
Handle the Serial Number parameter.
2003-11-18 06:31 guy
* config.guess, config.sub:
Latest config.guess and config.sub from
http://savannah.gnu.org/projects/config/
2003-11-18 06:06 ulfl
* gtk/capture_info_dlg.c:
removed MSVC warnings
2003-11-18 04:19 gerald
* doc/ethereal.pod:
Document the capture filter changes that were just checked in.
2003-11-18 04:16 gerald
* util.c, util.h, gtk/main.c:
Check the environment variables SSH_CONNECTION, SSH_CLIENT,
REMOTEHOST, DISPLAY, and CLIENTNAME (in that order). If any of
them are set, create a capture filter that excludes their traffic
and set it as the default. The longer filters should be
efficient without being overly long; they may need some tweaking.
2003-11-18 00:46 ulfl
* gtk/toolbar.c:
removed some warnings
2003-11-17 22:56 sahlberg
* epan/to_str.c:
updates to ip_to_str[_buf]() to make them faster.
This functin was in a recent profiling run the fifth most
expensive function. It consumed ~3.5% of the total cpu in that
run.
Using a static table this function is now just over twice as fast
as previously.
My testrun calling it 10.000.000 times in a loop changed the
execution time from ~17.3s ro ~8.2s
If this test was representative for the speedup and if ~3.5 in
the profile run was representative for normal cases this should
make ethereal ~1.8% faster. Woohoo. (low hanging fruit)
2003-11-17 22:34 guy
* plugins/: acn/Makefile.am, artnet/Makefile.am, asn1/Makefile.am,
gryphon/Makefile.am, mgcp/Makefile.am, pcli/Makefile.am,
rtnet/Makefile.am:
Fix the copyright notices (Gerald has the copyright on Ethereal).
2003-11-17 22:31 guy
* plugins/giop/Makefile.am:
Tweak the introductory comment.
2003-11-17 22:29 guy
* plugins/: enttec/.cvsignore, rdm/.cvsignore:
Fix the .cvsignore files.
2003-11-17 22:26 guy
* plugins/rdm/packet-rdm.c:
From Erwin Rol: check the checksum in RDM packets.
2003-11-17 22:09 guy
* configure.in:
From Lo<4C>c Minier: append $(EXEEXT) to the names of binaries, so
that the configure script generates the right executable image
file names on Cygwin.
2003-11-17 21:52 guy
* packet-sdp.c:
From Lars Roland: use the c= and m= information to set up
conversations to use RTP/RTCP.
2003-11-17 20:57 guy
* AUTHORS, Makefile.am, configure.in,
packaging/nsis/Makefile.nmake, packaging/nsis/ethereal.nsi,
plugins/Makefile.am, plugins/Makefile.nmake,
plugins/artnet/ChangeLog, plugins/artnet/moduleinfo.h,
plugins/artnet/packet-artnet.c, plugins/enttec/.cvsignore,
plugins/enttec/AUTHORS, plugins/enttec/COPYING,
plugins/enttec/ChangeLog, plugins/enttec/INSTALL,
plugins/enttec/Makefile.am, plugins/enttec/Makefile.nmake,
plugins/enttec/NEWS, plugins/enttec/moduleinfo.h,
plugins/enttec/packet-enttec.c, plugins/rdm/.cvsignore,
plugins/rdm/AUTHORS, plugins/rdm/COPYING,
plugins/rdm/Makefile.am, plugins/rdm/Makefile.nmake,
plugins/rdm/moduleinfo.h, plugins/rdm/packet-rdm.c:
From Erwin Rol: initial ENTTEC support and RDM support.
2003-11-17 20:00 guy
* gtk/capture_info_dlg.c:
Not all compilers allow array/structure/union members of
automatic variables to be initialized to non-constant values (C89
says that "All the expressions in an initializer for an object
that has static storage duration or in an initializer list for an
object that has aggregate or union type shall be constant
expressions"; presumably the intent of the former was to avoid
run-time initialization and of the latter was to let the
initialization be done by copying from a compile-time-created
blob of memory), so we have to initialize "info->counts" by hand.
2003-11-17 19:40 guy
* capture.c:
Fix a typo.
2003-11-17 18:23 ulfl
* etypes.h, packet-ethertype.c:
added ETHERTYPE_PROFINET
2003-11-17 00:27 guy
* gtk/capture_info_dlg.c:
"capture()" takes a "struct pcap_stat *" argument, so you need to
include <pcap.h> before including "capture.h".
Include "dlg_utils.h" to declare "dlg_set_cancel()".
2003-11-17 00:26 guy
* capture.c:
Get rid of a no-longer-used variable.
2003-11-16 23:17 guy
* Makefile.am, disabled_protos.c, packet-alcap.c,
packet-ansi_637.c, packet-ansi_683.c, packet-ansi_a.c,
packet-ansi_map.c, packet-atalk.c, packet-clnp.c,
packet-dcerpc.c, packet-dcerpc.h, packet-dvmrp.c, packet-fcip.c,
packet-giop.c, packet-giop.h, packet-gsm_a.c, packet-gsm_sms.c,
packet-gssapi.c, packet-gssapi.h, packet-iscsi.c,
packet-mrdisc.c, packet-msnip.c, packet-pim.c, packet-ppp.c,
packet-rpc.c, packet-rpc.h, packet-smb-browse.c,
packet-smb-browse.h, packet-smb-logon.c, packet-smb-logon.h,
packet-smb-mailslot.c, packet-smb-pipe.c, packet-snmp.c,
packet-tpkt.c, prefs.c, epan/packet.c, epan/proto.c,
epan/proto.h, gtk/dfilter_expr_dlg.c, gtk/help_dlg.c,
gtk/proto_dlg.c, plugins/plugin_api_list.c:
Export "protocol_t" as an opaque type.
Make "proto_is_protocol_enabled()" and
"proto_get_protocol_short_name()" take a "protocol_t *" as an
argument, so they don't have to look up the "protocol_t" - this
will probably speed them up considerably, and they're called on
almost every dissector handoff.
Get rid of a number of "proto_is_protocol_enabled()" calls that
aren't necessary (dissectors called through handles, including
those called through dissector tables, or called as heuristic
dissectors, aren't even called if their protocol isn't enabled).
Change some direct dissector calls to go through handles.
2003-11-16 23:11 sahlberg
* AUTHORS, Makefile.am, Makefile.nmake, h225-persistentdata.c,
h225-persistentdata.h, packet-h225.c, packet-h225.h,
tap-h225rassrt.c, doc/ethereal.pod, doc/tethereal.pod,
gtk/Makefile.am, gtk/Makefile.nmake, gtk/h225_ras_srt.c:
From Lars Roland Service Response times for H225 RAS
2003-11-16 22:33 sahlberg
* packet-h450.c:
Bugfix for h450.
The hf field we give to dissect_per_object_string is a FT_STRING
and not a FT_BYTES. This caused ethereal to abort with an assert
failure.
This fixes the issue that Keith French recently brought up in his
mailing to ethereal-users
2003-11-15 23:58 guy
* packet-wsp.c:
From Olivier Biot: fix the offset for the Encoding-Version header
in the general form.
2003-11-15 23:48 guy
* gtk/menu.c:
From Michael Lum: add <shift><control> hotkeys for Protocols and
Preferences.
2003-11-15 11:46 ulfl
* gtk/menu.c:
GTK2 specific: use some Ethereal specific stock icons generated
in toolbar.c
2003-11-15 11:44 ulfl
* gtk/: toolbar.c, toolbar.h:
handlebar removed, GTK2 specific: generate some Ethereal specific
stock icons and use them in the toolbar
2003-11-15 11:39 ulfl
* config.nmake:
added gdk_pixbuf to GTK2 specific libs to link (needed in
toolbar.c)
2003-11-15 10:06 ulfl
* file.c:
removed no longer used gtk includes
2003-11-15 08:53 ulfl
* gtk/capture_info_dlg.c:
seperated capture dialog from capture.c and put into new
gtk/capture_info_dlg.c, added some tiny bars, that will indicate
the percentage, added ESC key handler and use of GTK_STOCK button
2003-11-15 08:50 ulfl
* gtk/capture_dlg.c:
added "#include <epan/packet.h>" to be able to include
"capture.h"
2003-11-15 08:47 ulfl
* capture.c, capture.h, gtk/Makefile.am, gtk/Makefile.nmake:
seperated capture dialog from capture.c and put into new
gtk/capture_info_dlg.c
2003-11-14 21:18 guy
* capture.c:
When it comes to whether to use "select()" or not, even if you're
building in Cygwin's pretend-it's-UNIX environment, we need to
treat the platform as Windows.
Get rid of the BSD #define - just check for the platforms on
which we mustn't use "select()".
2003-11-14 19:20 guy
* doc/README.developer:
Fix the stuff that talks about adding to DISSECTOR_SOURCES to
talk about adding to DISSECTOR_SRC instead, and update it to
mention "Makefile.nmake" in the first instance.
2003-11-14 18:59 guy
* packet-gprs-ns.c:
From Josef Korelus: update the offset after decoding an IE.
2003-11-14 10:11 guy
* packet-null.c:
Fix the heuristics so that they recognize Linux DLT_NULL headers.
2003-11-14 02:07 guy
* packet-sip.c:
Add support for the compact form of headers.
2003-11-14 01:35 guy
* packet-tcap.c:
From Michael Lum: fix up handling of ABORT package.
2003-11-14 01:27 guy
* packet-wap.c:
From Olivier Biot: fix the debugging output of
"tvb_get_guintvar()".
2003-11-13 23:44 guy
* packet-wsp.c:
From Olivier Biot: use "g_strdup_printf()" to generate
dynamically-allocated sprintf output.
2003-11-13 23:38 guy
* packet-eapol.c, packet-isup.c, packet-ldp.c, packet-m2ua.c,
epan/proto.c:
Require that field names contain only alphanumerics, "-", "_",
and ".".
Fix the names that contained other characters.
2003-11-13 23:13 guy
* packet-dcerpc.c:
From Jaime Fournier: get rid of space in field name.
2003-11-13 20:53 sahlberg
* packet-tcp.c:
Change the gboolean controlling whether to use TCP Sequence
Number Analysis and TCP Relative Sequence Numbers to default to
ENABLED instead of DISABLED.
These features do not consume that much memory or CPU but will
greatly enhance the feature set of ethereal. Make it enabled by
default so also those that never venture into the preferences
dialog will benefit from it.
2003-11-13 08:22 sahlberg
* file.c, doc/ethereal.pod:
For Time Reference frames reset the counter for
CulmulativeBytes. This makes the CulmulativeBytes field make
more sense since if we want something to be a TimeReference frame
it is likely that we also want to measure BOTH time and number of
bytes (==culmulative bytes) until the event we are looking at.
2003-11-13 08:16 sahlberg
* packet-ip.c:
Change the strings shown for ICMP TTL exceeded to match the
wording in the standard
2003-11-13 05:08 gerald
* packet-wsp.c:
We can't pass NULLs to proto_tree_add_text(). Replace a bunch of
occurrences of match_strval() with val_to_str() so that we don't
throw an assertion.
These changes fix a problem with a file from Martin Dubovsky;
otherwise they haven't been heavily tested.
2003-11-12 23:17 guy
* plugins/docsis/packet-docsis.c:
From Anand Narwani: fix bitmask for Active Grants field.
2003-11-12 22:44 guy
* packet-wsp.c:
From Olivier Biot:
implement the TE header decoding;
fix the exported add_content_type function;
reimplement the header parameter dissection so the
parameters
also show up in the related header.
2003-11-12 21:22 guy
* packet-tzsp.c:
From Chris Waters:
* Better decoding of TZSP header.
* Handle unknown tags in packet.
* Removed encapsulation types which are not actually
supported.
* Added tags for original length and sensor address.
* Fix signedness of some fields.
Get rid of unused "hf_tzsp_reserved" variable.
Use -1 rather than "tvb_length(tvb)" when constructing the
top-level protocol tree item, and set the length if we have
payload that we dissect separately.
Have "add_option_info()" take a starting offset, rather than
constructing a subset tvbuff for it.
Clean up indentation.
2003-11-12 20:44 guy
* AUTHORS, packet-ntp.c, doc/ethereal.pod:
From Matthias Drochner: support for mode 6 and mode 7 control
packets and NTP4 autokey extension data.
2003-11-12 19:04 ulfl
* gtk/print_dlg.c:
completely redesigned print dialog layout, to be more obvious to
the user
2003-11-12 18:48 gerald
* file.c:
Remove MAX_DECODE_BUFFER_SIZE; it's no longer used.
2003-11-12 09:00 guy
* packet-dcerpc.c:
Put stub data back where it was in the tree before.
2003-11-12 08:58 guy
* packet-smb.c:
If what remains of the SMB byte count exceeds the data left in
the tvbuff, show what's left as extra byte parameters - don't act
as if there aren't any extra byte parameters.
2003-11-11 20:49 guy
* packet-null.c, wiretap/snoop.c:
From Brian Ginsbach: fix handling of IRIX and UNICOS/mp snoop
captures on loopback interfaces.
2003-11-11 20:33 guy
* packet-ses.c:
Add parameter length checking.
2003-11-11 20:11 guy
* packet-rsvp.c:
From Mohammad Hanif: fix dissection of RSVP DETOUR object code.
2003-11-11 20:08 guy
* image/toolbar/capture_24.xpm, image/toolbar/cfilter_24.xpm,
image/toolbar/dfilter_24.xpm, image/toolbar/stock_close_24.xpm,
image/toolbar/stock_colorselector_24.xpm,
image/toolbar/stock_help_24.xpm,
image/toolbar/stock_jump_to_24.xpm,
image/toolbar/stock_open_24.xpm,
image/toolbar/stock_preferences_24.xpm,
image/toolbar/stock_print_24.xpm,
image/toolbar/stock_refresh_24.xpm,
image/toolbar/stock_right_arrow_24.xpm,
image/toolbar/stock_save_24.xpm,
image/toolbar/stock_search_24.xpm,
image/toolbar/stock_stop_24.xpm, plugins/asn1/moduleinfo.h:
Get rid of carriage returns in source files.
2003-11-11 19:24 guy
* packet-tcp.c:
Make the declaration of "process_tcp_payload()" match the
definition.
2003-11-11 19:23 guy
* packet-tacacs.c:
"tacplus_pref_cb()" takes no arguments, not an unspecified list
of arguments.
2003-11-11 18:25 guy
* config.nmake:
Get rid of GLib 1.3 support - current versions of GTK+ 1.3
require GLib 2.0, and earlier versions are sufficiently buggy
that we don't want to support them.
2003-11-11 13:59 ulfl
* gtk/print_mswin.c:
added some print dialog flags, to disable some unsupported print
features (e.g. selection of pages from X to Y)
2003-11-11 08:29 guy
* AUTHORS, Makefile.am, Makefile.nmake, packet-ses.c, packet-ses.h,
doc/ethereal.pod:
From Yuriy Sidelnikov: ISO 8327-1 Session Protocol support.
2003-11-11 06:10 guy
* plugins/: plugin_api_list.c, Xass-list, Xplugin_api.c,
Xplugin_api.h, Xplugin_api_decls.h, Xplugin_table.h:
Add "asn1_id_decode1()" to the list of exported functions.
2003-11-11 05:54 guy
* packet-ansi_map.c:
From Michael Lum:
Minor improvements.
Added IEI level decoding of cdma2000 Handoff * IOS data
parameters.
2003-11-11 05:51 guy
* packet-ansi_a.c:
From Michael Lum:
Change P_xxx to ANSI_A_E_xxx.
Fix decoding of some parameters.
Fix initialization of ett array.
2003-11-11 05:23 guy
* gtk/gui_prefs.c:
The user interface preference page has only 9 rows in the GTK+
2.x version.
2003-11-11 05:09 guy
* gtk/gui_prefs.c:
Create the last two items in the GUI preferences page's first
column the same way the other items are created - in order, going
down the page, and using "pos++" as the table position.
2003-11-10 22:31 guy
* packet-ansi_a.c:
From Albert Chin: <stdlib.h> on HP-UX 11.00 (and possibly 10.20
and perhaps some versions of Digital/Tru64 UNIX) drags in
<wait.h>, which drags in <sys/procset.h>, which defines P_SID in
ways that cause this not to compile. Use P_MY_SID instead.
2003-11-10 21:42 guy
* packet-h225.c:
From Martin Regner:
"aliasAddress", in an EndPoint sequence, is a sequence of
aliasAddresses.
Don't update the Info or Protocol columns in a pdu_item.
2003-11-10 20:22 guy
* packet-dcerpc-epm.c:
From Yaniv Kaul:
1. Add dissection of inquiry type (rpc_c_ep_all_elts /
rpc_c_ep_match_by_if / rpc_c_ep_match_by_obj /
rpc_c_ep_match_by_both).
2. The version field seems incorrect to me - I believe it
is usually
should be version 2.0, not 0.2.
I suspect that the insertion of version information to
the hash
table is also wrong, (and the get for the version
should have
used _letohl() ) - but I did not change it.
3. Clean up some white space.
2003-11-10 20:15 guy
* packet-ansi_a.c:
From Albert Chin: dynamically allocate the "ett" array - some
compilers (such as at least one older version of the HP C
compiler) can't cope with constant expressions that involve the
"?" operator, it appears; they think it's not a constant
expression.
Also, as Albert notes, there's no reason for "ett" to be static
here.
2003-11-10 08:14 sahlberg
* packet-q931.c:
The Q.931 dissector never checked whether the codeset variable
was set to a reasonable value or not.
This was problematic and caused crashes since this variable is
used as an index into an array where we grab a pointer (which is
later dereferenced).
Dereferencing that pointer will have surprising effects. Usually
crashes.
Update Q.931 to verify sanity of the codeset variable everytime
it gets set.
2003-11-10 08:02 sahlberg
* packet-smb.c:
Bugfix for ethereal crashes
If the ByteCount field in the SMB PDU spanned beyond the end of
the packet because the packet was short or because the BC field
was corrupted and contained garbade data then the tree item for
the command (the subtree just after the SMBHeader subtree) would
describe data continuing beyond the end of the packet.
If we selected one such tree in the dissect pane and used
Prepare/Match Selected this would cause the filter build thing
to try to access data beyod the end of the packet and ethereal
would dump core.
Change the END_OF_SMB macro so that it shrinks bc so that bc
never describes data beyond the end of the packet.
2003-11-10 07:44 sahlberg
* packet-ldap.c, gtk/dcerpc_stat.c:
Not all LDAP PDUs are aligned to the start of a TCP segment.
If we failed to dissect the GSS-SPNEGO blob it probably means
that the segment is somewhere in the middle of an LDAP PDU.
Just bail out and stop dissecting the PDU instead of aborting
ethereal completely using g_assert() since this is not really a
pathological error, its just something that can and will happen
normally.
2003-11-09 22:57 guy
* asn1.c, asn1.h:
Fix the type of the "integer" argument to
"asn1_uint32_value_decode()", as per a note by Michael Lum.
2003-11-09 22:55 guy
* AUTHORS, packet-rtcp.c, packet-rtp.c, doc/ethereal.pod:
From Martin Mathieson: display the bitfields for
- the first 2 bytes of RTP headers
- the first byte of RTCP report.
2003-11-09 22:49 guy
* packet-ansi_map.c:
From Michael Lum: add the ability to put parameter data at the
end of the parameter name so that the user doesn't have to open
the parameter subtree to see the most important data.
Use "%u", not "%d", to print unsigned quantities.
Get rid of includes of <gmodule.h> (we're not loading any code at
run-time in the dissector itself), and <sys/types.h> and
<netinet/in.h> (we shouldn't need either of those).
2003-11-09 22:41 guy
* packet-gsm_a.c:
From Michael Lum get rid of non-portable "%N$" constructs in
printf formats.
Use "%u", not "%d", to print unsigned quantities.
Get rid of includes of <gmodule.h> (we're not loading any code at
run-time in the dissector itself), and <sys/types.h> and
<netinet/in.h> (we shouldn't need either of those).
2003-11-09 22:32 guy
* packet-ansi_a.c:
Remove accidentally-inserted letter.
2003-11-09 22:30 guy
* packet-ansi_a.c:
From Michael Lum:
Fix some incorrect bit shifts.
Get rid of non-portable "%N$" constructs in printf
formats.
Use "%u", not "%d", to print unsigned quantities.
2003-11-09 22:15 guy
* plugins/asn1/packet-asn1.c:
From Albert Chin: the HP-UX 10.20 C compiler doesn't allow
typedef enum _foo foo;
enum _foo {
...
};
You have to define the enum before using it in a typedef. (If I
had my ANSI C89 standard handy, I could say whether that was
legal ANSI C or not.)
2003-11-09 22:13 guy
* packet-bssgp.c:
From Albert Chin: get rid of null statements outside of function
bodies (that's what the ";" in
int
foo(...)
{
...
};
is).
2003-11-09 19:53 guy
* packet-dcerpc-dcom.h:
From Albert Chin: get rid of C++ comments.
2003-11-09 01:36 guy
* prefs.c:
From Gisle Vanem:
Copy the "gui_fileopen_*" fields in "copy_prefs()".
Fix a typo in "free_prefs()".
2003-11-08 05:47 guy
* packet-tcp.c, packet-tcp.h:
Have "decode_tcp_ports()" handle only the handoff to a
subdissector - and have it return TRUE if we succeeded, FALSE
otherwise - and have an internal "process_tcp_payload()" routine
handle the (TCP-specific) PDU tracking and sequence number
analysis, with an argument to indicate whether it should do that
or not (i.e., whether it's being handed a TCP segment or
reassembled data).
2003-11-08 00:09 guy
* AUTHORS, packet-rsvp.c, doc/ethereal.pod:
From Mohammad Hanif:
correct and enhance support for RSVP FAST_REROUTE and
DETOUR
objects (source:
draft-ietf-mpls-rsvp-lsp-fastreroute-03.txt);
support an RSVP SESSION_OBJECT object with ctype = 1.
This
object contains resource affinities (source: RFC 3209).
2003-11-08 00:02 guy
* packet-msproxy.c, packet-socks.c, packet-tcp.c, packet-tcp.h:
"decode_tcp_ports()" is for use by protocols that proxy
transport-layer packets/sessions, e.g. MSProxy and SOCKS. It
should not cause any of the TCP-specific stuff such as sequence
number analysis or PDU tracking to be done. (Actually, MSProxy
and SOCKS should offer desegmentation services *themselves* and
do their *own* PDU tracking, rather than just passing stuff on to
"decode_tcp_ports()", but that's another matter.)
Make "tcp_tree" once again be a local variable to
"dissect_tcp()", and pass it as an argument to those functions
that use it.
2003-11-07 23:27 guy
* Makefile.nmake, config.h.win32, config.nmake,
wiretap/Makefile.nmake, wiretap/config.h.win32:
Let people configure whether to build with Zlib or not solely by
controlling whether ZLIB_DIR is defined or not in config.nmake.
2003-11-07 23:26 guy
* gtk/Makefile.nmake:
Nothing here should require zlib.h, so we shouldn't need to do
"/I$(ZLIB_DIR)".
2003-11-07 20:23 guy
* packet-wsp.c:
From Olivier Biot: implement the Range, Content-Range and
Content-Disposition headers.
2003-11-07 20:07 guy
* packet-wsp.c:
From Olivier Biot: add dissection for the Content-Base headeer.
2003-11-07 08:50 guy
* packet-fcels.c, packet-fcels.h:
From Dinesh Dutt:
- Added support for displaying support for
Multicast/Broadcast supported
bits in *LOGI common service params
- Removed restriction for "Random Relative Offset" & its
alternate to be in
PLOGI or PDISC only. Some HBAs set it even in FLOGI.
2003-11-07 08:47 guy
* packet-fcsp.c:
From Dinesh Dutt:
- Added support for decoding related to Security in *LOGI
service params
- Added support for new LS_RJT code for authentication
failure
- Brought packet-fcsp.c up-to-date with FC-SP rev 1.2
2003-11-07 05:26 sahlberg
* Makefile.am, Makefile.nmake, packet-kpasswd.c:
New protocol: MS Kpasswd (RFC3244)
KPasswd is partially dissected for UDP.
It would be very useful if someone added dissection of the asn.1
encoded AP_REQ and the KRB-PRIV blobs. I dont think I will add
those.
2003-11-07 04:03 sahlberg
* packet-ldap.c:
In some captures we might have already established and BOUND LDAP
session where GSS-SPNEGO is used. If we havent seen the BIND
call ethereal would assume it is vanilla non-GSS-SPNEGO LDAP and
would fail to decode the packet.
Add heuristics to the LDAP dissector so that IF the first 4 bytes
of the LDAP PDU looks like ity could be a length field and IF the
fifth byte has the value 0x60 then assume what we have is
GSS-SPNEGO and assume this and all further commands on this
session is GSS-SPNEGO as well.
2003-11-07 03:47 guy
* packet-http.c:
Make a field for the Content-Type entity header, and give it an
EH_ value so it can be handled specially (with a string dissector
table so that subdissectors can register for particular content
types).
2003-11-07 01:29 guy
* gtk/: menu.c, toolbar.c, toolbar.h:
"File->Open" should be available whether or not we have a captue
file open.
The toolbar equivalent should *not* be available if we have an
"Update list of packets in real time" capture running.
The toolbar "Save" button should not be available if we don't
have an unsaved capture file.
2003-11-06 23:02 guy
* gtk/menu.c:
Make Shift+Control+S an accelerator for "Save As...", as per the
GNOME HIG.
2003-11-06 22:45 guy
* wiretap/: file_access.c, netmon.c, network_instruments.c,
network_instruments.h, wtap-int.h:
From Scott Emberley: support for writing Network Instruments
Observer files.
2003-11-06 09:52 guy
* doc/README.plugins:
Note that not all OSes on which Ethereal runs can support
plugins.
Note that you have to modify plugins/Makefile.nmake.
Fix "plugin/" to "plugins/".
Update the sample Makefile.am and Makefile.nmake to match the
current state of affairs.
2003-11-06 09:47 guy
* doc/README.developer:
Warn people not to use the "numbered argument" feature that many
UNIX printf's implement.
2003-11-06 09:32 guy
* plugins/acn/packet-acn.c:
From Erwin Rol: fix some switched fields.
2003-11-06 09:28 guy
* packet-sccp.c:
From Michael Lum: have the SCCP dissector register itself by
name.
2003-11-06 09:18 sahlberg
* packet-ldap.c, packet-tcp.c:
Update to LDAP and TCP
LDAP messages that span multiple segments will throw an exception
unless we have reassembly enabled.
Update TCP so that IF an exception was thrown that we still pick
up any hints provided by the subdissector about where the next
PDU starts.
Update LDAP so that it will rpovide hints to TCP about where the
next LDAP PDU starts in the sequence number space.
Thus now ethereal can find and dissect LDAP PDUs that starts
somewhere in the middle of a TCP segment.
2003-11-06 09:13 guy
* packet-dcerpc.c:
Update a comment.
Catch another case where we need to check for a null
decrypted_tvb.
2003-11-06 09:05 guy
* plugins/: acn/Makefile.nmake, artnet/Makefile.nmake,
asn1/Makefile.nmake, docsis/Makefile.nmake,
gryphon/Makefile.nmake, lwres/Makefile.nmake,
megaco/Makefile.nmake, mgcp/Makefile.nmake, pcli/Makefile.nmake,
rtnet/Makefile.nmake:
Use "$(OBJECTS)" whenever a complete list of .obj files appears,
rather than repeating the list from the setting of OBJECTS.
2003-11-06 08:54 guy
* packet-http.c:
Add a mechanism to handle various entity headers, allowing their
(string) values to be put into the protocol tree as fields and
allowing some headers to get special treatment, and use it for
Authorization, Proxy-Authorization, WWW-Authenticate, and
Proxy-Authenticate.
2003-11-06 08:51 sahlberg
* packet-tcp.c:
Fix for TCP.
If we have short or malformed PDUs in protocols above TCP this
will generate an exception and thus some of the stateful things
such as keeping track of and printing the tcp analysis data will
be shourcutted and not called.
Add a wrapper around the call to the subdissectors above TCP so
that if an exception is generated we will still catch it and
explicitely call tcp_print_sequence_number_analysis() so that
also short packets are handled well.
2003-11-06 07:44 sahlberg
* packet-dcerpc.c:
Bugfix for dcerpc parsing of encrypted short packets.
Sometimes if we cant decrypt a DCERPC packet decrypted_tvb is
NULL.
do not pass a NULL pointer to show_stub_data() since this will
dump core.
2003-11-05 20:19 guy
* packet-ansi_a.c:
Get rid of includes of <gmodule.h> (we're not loading any code at
run-time in the dissector itself), and <sys/types.h> and
<netinet/in.h> (we shouldn't need either of those, and they might
be responsible for dragging in <sys/procset.h> on Digital UNIX -
that header defines P_SID in a way that conflicts with our
definition).
2003-11-05 20:10 guy
* plugins/acn/packet-acn.c:
Update from Erwin Rol.
2003-11-05 20:10 guy
* packet-ldap.c:
A "GHashFunc()" returns a "guint", not a "gint".
2003-11-05 09:04 sahlberg
* gtk/ldap_stat.c:
the LDAP service response time dialog
2003-11-05 09:04 sahlberg
* packet-ldap.c, packet-ldap.h, doc/ethereal.pod, gtk/Makefile.am,
gtk/Makefile.nmake, gtk/service_response_time_table.c:
update for LDAP measure the response time for some LDAP commands
and add a service response time dialog for it
2003-11-05 04:23 guy
* packet-wtp.c:
From Olivier Biot: have a separate subtree ett_ value for
concatenated PDUs.
2003-11-04 22:14 guy
* wiretap/snoop.c:
Sigh. Some snoop files have 6 bytes of padding; assume the file
is a snoop file unless it has enoguh padding to hold a Shomiti
trailer record. (DEAR SUN MICROSYSTEMS: PLEASE DO NOT STUFF 16
OR MORE BYTES OF PADDING INTO A SNOOP PACKET. THANK YOU. HAVE A
NICE DAY.)
Add a little paranoia about the record and captured data lengths.
2003-11-04 21:44 guy
* packet-isakmp.c:
Get rid of all the UDP-encapsulated IPSec stuff.
draft-ietf-ipsec-udp-encaps-06 says "The UDP port numbers are the
same as used by IKE traffic, as defined in [Kiv05]", and
"[Kiv05]" is draft-ietf-ipsec-nat-t-ike-05, which has been
superseded by draft-ietf-ipsec-nat-t-ike-07; the latter appears
to imply that it goes over port 4500, not port 500.
We already have a draft-ietf-ipsec-udp-encaps-06 dissector for
port 4500 (packet-ipsec-udp.c), and it's not entirely clear to me
how, if draft-ietf-ipsec-udp-encaps-06 traffic *did* go over port
500, you'd distinguish it from regular ISAKMP traffic.
2003-11-04 20:33 guy
* gtk/prefs_dlg.c:
Skip the check for the module if a page doesn't have a module.
2003-11-04 20:22 guy
* gtk/prefs_dlg.c:
Clean up the way we find the properties page for a given protocol
somewhat; this fixes a bug wherein we were assuming all modules
necessarily had preference pages (they won't, if the only
preferences for the module are obsolete preferences).
2003-11-04 19:47 guy
* packet-wsp.c:
From Olivier Biot:
* Extra headers: Encoding-Version, WWW-Authenticate,
Proxy-Authenticate
* Fix memory allocate/free in header parsing functions &
macros
* Add missing "ok = TRUE" for some header parsing
functions
* Header subfields all share the same subtree identifier
(more
intuitive)
* Get rid of unused header fields and subtrees
* Some whitespace changes
2003-11-04 18:37 guy
* plugins/asn1/packet-asn1.c, plugins/gryphon/packet-gryphon.c,
AUTHORS, doc/ethereal.pod:
From Masaki Chikama: fix static compilation of "generic ASN.1"
and Gryphon plugins.
2003-11-04 16:44 gerald
* plugins/asn1/packet-asn1.c:
#ifdef out "#include <gtk/gtk.h>", so that --disable-ethereal
works again.
2003-11-04 08:16 guy
* packet-http.c:
If we've already constructed a subset tvbuff, don't construct an
identical one and throw away the first one.