Commit Graph

188 Commits

Author SHA1 Message Date
Ronnie Sahlberg 8700645d54 add support to decrypt and dissect sign-and-sealed traffic.
(cifs: dc's talking to eachother   and when longhorn comes out: anyone wanting to talk dce to a dc!)

((this is an incredibly advanced feature well worthy of mentioning in NEWS))


svn path=/trunk/; revision=13690
2005-03-10 10:16:49 +00:00
Jörg Mayer 8de6e67f08 Fix a small typo that would prevent compilation with MIT Kerberos
svn path=/trunk/; revision=13647
2005-03-07 10:15:03 +00:00
Ronnie Sahlberg 31a9522aa2 export some symbols we will need later.
svn path=/trunk/; revision=13646
2005-03-07 09:02:33 +00:00
Jörg Mayer f2bab830dc Make packet-kerberos.c compile again:
Replace the use of the undefined type krb5_keyusage (at least with heimdal)
in decrypt_krb5_data with the old int. The change wasn't complete anyway
as the .h file wasn't changed and the third implemenitation of
decrypt_krb5_data was left out also.

Disclaimer: I only made sure it compiles again, I don't know whether the
  change has any side effects.


svn path=/trunk/; revision=13645
2005-03-07 08:47:48 +00:00
Ronnie Sahlberg 26dd060797 export decrypt_krb5_data
svn path=/trunk/; revision=13641
2005-03-06 22:34:13 +00:00
Guy Harris 5ba3adf134 Omit some stuff when building without a Kerberos library, as it's unused
if you don't have a Kerberos library to do decryption.

svn path=/trunk/; revision=13593
2005-03-05 01:00:15 +00:00
Lars Roland e434150f99 fix kerberos dissector for those having no kerberos decryption
svn path=/trunk/; revision=13591
2005-03-05 00:21:46 +00:00
Ronnie Sahlberg 7671b98bac make kpasswd privide subdissectors to handle the user-data field for the KRB_PRIV structure for kpasswd requests and replies.
decrypt and behold the new password in plaintext in all its glory
(given you have the keytab with the old one of course)


svn path=/trunk/; revision=13586
2005-03-04 13:39:15 +00:00
Ronnie Sahlberg 6fec8dca5f some authentication stuff from metze
svn path=/trunk/; revision=13584
2005-03-04 12:28:00 +00:00
Ronnie Sahlberg 2f4cb22585 make ethereal able to decrypt KRB_PRIV which kpasswd uses
svn path=/trunk/; revision=13583
2005-03-04 12:21:40 +00:00
Guy Harris 5639b87daf The Kerberos-over-UDP dissector can decide not to dissect packets, so it
needs to be a new-style dissector and explicitly reject them so that
other dissectors can pick them up.

svn path=/trunk/; revision=13528
2005-02-26 00:14:22 +00:00
Ronnie Sahlberg 7f86cffa58 add support to call krb4 for suspected krb4 stuff soming in on udp port 88
weirdo krb4 implementations apparently do this.


svn path=/trunk/; revision=13516
2005-02-25 11:38:56 +00:00
Ronnie Sahlberg fbf762bda5 update asn2eth and all generated dissectors to new dissect_ber_boolean that takes a implicit_tag parameter
svn path=/trunk/; revision=13479
2005-02-23 08:57:47 +00:00
Lars Roland ec9ca01616 Move the following files from /trunk to /trunk/epan:
asn1.[ch]
follow.[ch]
ptvcursor.[ch]
reassemble.[ch]
xmlstub.[ch]

fix #include statements accordingly.

svn path=/trunk/; revision=13366
2005-02-09 23:38:00 +00:00
Anders Broman 851ecd2ac4 From Jon Ringle:
1) Added a setup_frame parameter to conversation_t
2) Used the conversation_t next to maintain a list of conversations with the 
same src/dest tuple but different setup_frame number.
3) Changed the signature of find_conversation() and conversation_new() to pass 
in the frame number.
4) Adjusted packet-sdp to select RTP conversation if both m=audio and m=image 
are present, and T.38 conversation if only m=image is present. I expect that 
RTP/T.38 dissecting to be better, but I don't have a way to generate T.38 
packets.

svn path=/trunk/; revision=13243
2005-02-02 20:07:03 +00:00
Guy Harris db204c7045 From Chris Maynard: free strings fetched with "tvb_fake_unicode()".
svn path=/trunk/; revision=12956
2005-01-05 10:17:09 +00:00
Ronnie Sahlberg 8afae320de update of the asn2eth compiler to use the types ber_[choice|sequence]_t instead of ber_[choice|sequence]
regenerated all dissectors


fixed the choice/sequence struct to use unsigned entities for class and tag
(to reduce some compiler warning and because it should be signed quantities)



svn path=/trunk/; revision=12740
2004-12-13 08:15:34 +00:00
Ronnie Sahlberg 896737c467 update the helper for BER GeneralizedTime to handle implicit tag and update all dissectors using GeneralizedTime
svn path=/trunk/; revision=12732
2004-12-12 22:47:24 +00:00
Ronnie Sahlberg 0e528dc7a1 updates from tomas and anders
create some missing makefiles for autogenerated dissectors

finish the transition to the new ber integer dissetor helper signature
and regenerate all ber dissectors



svn path=/trunk/; revision=12724
2004-12-12 01:14:03 +00:00
Ronnie Sahlberg bdf35ecfc1 move kerberos over to use the new signature for ber integer dissection helper
svn path=/trunk/; revision=12720
2004-12-12 00:12:23 +00:00
Gerald Combs 02032272ad When we dynamically discover a Kerberos key, it helps to add it to the
key list.  In the Nettle code, clear the key list and re-read the key
file when the key file preference changes.

Remove a redundant define in config.h.win32.

svn path=/trunk/; revision=12471
2004-11-01 23:54:05 +00:00
Gerald Combs c31b0ca7ed Create a conversation only when we see a KDC_REQ.
svn path=/trunk/; revision=12461
2004-11-01 17:04:05 +00:00
Gerald Combs 24f30a8850 Add support for pkauthdata and pkdhkeydata OIDs.
svn path=/trunk/; revision=12426
2004-10-28 22:06:55 +00:00
Gerald Combs d6a2182535 Fix some include problems and compiler warnings pointed out by Thomas Anders.
svn path=/trunk/; revision=12339
2004-10-18 14:37:43 +00:00
Gerald Combs fa01ccd18c One more item from CableLabs: Add conversation support to the Kerberos
UDP dissector.

svn path=/trunk/; revision=12337
2004-10-18 13:58:20 +00:00
Gerald Combs fee16ab377 Add support for decoding DES3/CBC/MD5 keys. Make it disabled by default.
Whitespace cleanup.

svn path=/trunk/; revision=12304
2004-10-15 15:36:12 +00:00
Ronnie Sahlberg 29da6658b6 add support in packet-kerberos to use MIT Kerberos API to parse keytabs and decrypt blobs
if HAVE_KERBEROS and HAVE_MIT_KERBEROS are both defined in config.h


Now we need someone to hack up the required automake magic to detect MIT Kerberos and massage the makefiles accordingly.



svn path=/trunk/; revision=12296
2004-10-14 09:51:54 +00:00
Guy Harris bbe7f89742 Move prefs.c and prefs.h into the epan subdirectory.
svn path=/trunk/; revision=12115
2004-09-27 22:55:15 +00:00
Ronnie Sahlberg 524a9eb587 make kerberos able to dissect pkinit/pa-pk-as-rep packets
svn path=/trunk/; revision=12038
2004-09-17 23:45:29 +00:00
Ronnie Sahlberg 5ef0b5c88d add new dissectors to build process
update Kerberos to call PKINIT (and remove the handwritten incomplete one inside packet-kerberos.c)



svn path=/trunk/; revision=12014
2004-09-16 09:01:20 +00:00
Ronnie Sahlberg e74f18ee9b Add a key origin string for kerberos keys
so that IF kerberos succeeds in decrypting a blob it can print a nice
"[Decrypted using: keytab principal foo/bar@REALM]"
or
"[Decrypted using: key learnt from frame xx]"

This makes it much easier to keep track of what keys decrypt what blob
and is very useful for illustrating the sequence of keys that are exchanged and used in kerberos during the AS/TGS/AP exchanges.




svn path=/trunk/; revision=11853
2004-08-30 09:49:08 +00:00
Ronnie Sahlberg 379ca865e4 Add the optional 13th tag to the KRB_ERR structure.
This tag was part of an early kerberos draft but had dissapeared
when 1510 was published.
this early draft exist in implementations in the wild.

add 4 extra checksum types as well from that draft.



svn path=/trunk/; revision=11834
2004-08-25 11:35:04 +00:00
Ronnie Sahlberg 29a31444b6 Prettify the principal name expansion to make it look more like normal kerberos notation for principals
i.e. display it as "foo/bar"  instead of as "foo bar"




svn path=/trunk/; revision=11833
2004-08-25 10:48:37 +00:00
Ulf Lamping d530bd4e14 Prevent the word "desegmentation" at the GUI, but use reassembling at that places, as we also use "defragmentation" and "reassembling". Use reassembling as the general term for such actions.
I (hopefully) didn't changed any protocol fields or preference file names, but only the GUI labels appearing in the protocol display and the protocol preferences.

Also added a note to the protocol preferences (where appropriate), that you have to enable "Allow subdissectors to reassemble TCP streams" at the corresponding protocol settings for TCP reassembling to take effect.

If you encounter any mistakes I've made here, please let me know...

svn path=/trunk/; revision=11784
2004-08-21 09:02:52 +00:00
Guy Harris 13bb12c4f1 Move a bunch of stuff that's more Windows-related than SMB-related to
"packet-windows-common.[ch]".

svn path=/trunk/; revision=11592
2004-08-03 02:28:49 +00:00
Ronnie Sahlberg dcea6b49c6 get rid of the nasty ber specific oid->callback table and reimplement the functionality using a dissector table instead i.e. the proper way.
svn path=/trunk/; revision=11457
2004-07-21 11:13:03 +00:00
Ronnie Sahlberg 723d3dbe44 Add the new protocols CMS, X509AF, X509IF, X509CE and X509SAT
to the ethereal build.

The dissections are semi-useful  but incomplete.
The big problem still remaining is the x509if  Name object not being 
dissected properly   thus causing the dissection to get out of sync/fail
halfway through the certificate structure.


work in progress but already semi-useful.


svn path=/trunk/; revision=11440
2004-07-20 09:11:40 +00:00
Gilbert Ramirez 669db206cb Move dissectors to epan/dissectors directory.
Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.

Adjust #include lines in files that include packet-*.h
files.

svn path=/trunk/; revision=11410
2004-07-18 18:06:47 +00:00