Commit Graph

2729 Commits

Author SHA1 Message Date
Anders Broman 13f87e6f52 Add possibility to try to dissect IP over TIPC.
svn path=/trunk/; revision=16803
2005-12-14 21:40:04 +00:00
Anders Broman 2c7bbf1fb1 From Jaap Keuter:
> Two patch files are attached adding UDP-Lite dissection to the UDP 
> dissector. Wiki page is available at the normal location, including 
> sample captures courtesy of Gerrit Renker of the University of 
> Aberdeen Electronics Research Group. The patch has been tested with 
> both the sample captures and Fuzz test.

And add Marc Petit-Huguenin to AUTHORS

svn path=/trunk/; revision=16801
2005-12-14 21:14:57 +00:00
Anders Broman 7980c9295e From Graeme Lunt:
Here is a patch for packet-ber.c that only includes the upgraded dissect_unknown_ber()

svn path=/trunk/; revision=16798
2005-12-14 20:45:15 +00:00
Anders Broman 61c177ea6d From Marc Petit-Huguenin
This is a patch that add support for the latest drafts[1] in the STUN dissectors. I choose to add TURN directly in the STUN dissector instead of creating a new dissector because of the decision at the latest IETF meeting[2] to redefine TURN as an use case of STUN.


[1] ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-ietf-behave-rfc3489bis-02.txt
ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-rosenberg-midcom-turn-08.txt
ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-camarillo-midcom-turn-ipv6-00.txt
[2] http://www3.ietf.org/proceedings/05nov/minutes/behave.txt

svn path=/trunk/; revision=16797
2005-12-14 20:43:39 +00:00
Anders Broman 1abb6c1031 Use src and dst instead of net_src.
svn path=/trunk/; revision=16796
2005-12-14 20:01:21 +00:00
Guy Harris 66c394806a "a & b == c" is, in C, parsed as "a & (b == c)" - and if b and c are the
same, and have only one bit set, "(a & b) == c", which is what is
intended, is the same as "a & b".

In addition, we don't want to do desegmentation if "isup_apm_desegment"
isn't set, so that test should be ANDed with the other two tests.

svn path=/trunk/; revision=16792
2005-12-14 07:33:07 +00:00
Luis Ontanon b40ff00e49 handle sccp connections.
(first step towards RANAP analysis).



svn path=/trunk/; revision=16783
2005-12-13 22:07:09 +00:00
Luis Ontanon 3728b83d2b Avoid the default sccp.ssn range to overwrite sccp.ssns of other dissectors.
svn path=/trunk/; revision=16782
2005-12-13 22:04:02 +00:00
Anders Broman da8debc2ec Change reassembly to include first empty segment, check if SLR exists.
Change pinfo->src/dst to use SS7 address for reassembly to use the correct key.

svn path=/trunk/; revision=16781
2005-12-13 21:14:54 +00:00
Gerald Combs fa312091ce Throw an exception if we have an invalid offset. Fixes bug 585.
svn path=/trunk/; revision=16780
2005-12-13 17:00:03 +00:00
Guy Harris 4ca1ee0a89 Fix some bit mask tests - & has lower priority than !=, so "a & b != c"
means "a & (b != c)", not "(a & b) != c".

Put in a comment noting a potential problem with defragmentation,
pointed out by a compiler warning that apm_Segmentation_local_ref might
not be set before it's used.

svn path=/trunk/; revision=16779
2005-12-13 10:59:33 +00:00
Guy Harris 77ff57e72a Escape question marks when they could be interpreted as part of a
trigraph.

svn path=/trunk/; revision=16778
2005-12-13 10:54:11 +00:00
Ronnie Sahlberg 39d07a2555 update the work-in-progress pidl generated wkssvc dissector and add a conformance file using the new nice TFS conformance file directive
svn path=/trunk/; revision=16775
2005-12-13 07:53:52 +00:00
Ronnie Sahlberg 92cddab07a swap Trip/Close as per bug 579
svn path=/trunk/; revision=16774
2005-12-13 06:36:30 +00:00
Gerald Combs 6b376c9c0e asn2eth.py:
Catch a TypeError that gets thrown if we don't use any conversion
specifiers during string formatting.

H.248:

Don't dereference a null pointer.  Fixes bug 626.

svn path=/trunk/; revision=16773
2005-12-13 03:48:26 +00:00
Jörg Mayer 6f70b8c2d2 Convert to new style dissector (hopefully done right)
svn path=/trunk/; revision=16770
2005-12-12 23:38:04 +00:00
Jörg Mayer 8225722cc5 Dissect type 0x0c as 'remove tag' flag
svn path=/trunk/; revision=16768
2005-12-12 23:14:41 +00:00
Gerald Combs 2b1512c995 Use "guint" instead of "u_int".
svn path=/trunk/; revision=16766
2005-12-12 16:49:49 +00:00
Anders Broman e8997a0478 Reassmble apm messages.
svn path=/trunk/; revision=16765
2005-12-12 15:17:53 +00:00
Anders Broman 47dee284ae From Hannes Gredler
-add codepoint to name resolution for Juniper IFMT, IFLE extension TLVs
-bugfix: DLT_JUNIPER_PPP, correct the calculate offset for PPP payload
-bugfix: DLT_JUNIPER_CHDLC, add CHDLC handler
-bugfix: add a more flexible TLV value extraction function which
   does not bail if the assumed TLV length does not match

svn path=/trunk/; revision=16764
2005-12-12 10:28:57 +00:00
Guy Harris d4ed40201a OK, if we're not going to have our "idl_types.h" different from Samba's,
we have to put the definition of "unistr" as "[string] wchar_t *" into
the IDL files that use "unistr".

svn path=/trunk/; revision=16763
2005-12-12 10:15:56 +00:00
Jörg Mayer e17d206357 Dissect the management protocol between 3com Netjack200 devices and the
Windows managment application.

svn path=/trunk/; revision=16760
2005-12-12 00:07:54 +00:00
Jörg Mayer 4dcfde8082 Updates from samba svn
svn path=/trunk/; revision=16758
2005-12-11 22:54:43 +00:00
Jörg Mayer 87768c664f Start the function name on a new line to make it easier to search
svn path=/trunk/; revision=16757
2005-12-11 22:53:25 +00:00
Jörg Mayer 46bafa4324 Port some information from yersinia
(http://yersinia.sourceforge.net/index.html)
by Alfredo Andres and David Barroso. There's more information to be put
into Ethereal but it's a start.

svn path=/trunk/; revision=16756
2005-12-11 22:52:20 +00:00
Ronnie Sahlberg 5b238763bf implement SMB_FILE_ALL_INFO properly once and for all
svn path=/trunk/; revision=16755
2005-12-11 22:29:39 +00:00
Guy Harris 46cbfd576a The Bitmap routine in lib/Parse/Pidl/Ethereal/NDR.pm in Pidl generates
fields as BASE_DEC; bitmaps are typically displayed in hex in Ethereal,
so it should generate BASE_HEX instead.  (Submitted to
bugzilla.samba.org as bug 3313.)

A couple of the IDL files use "unistr"; define it as "[string] uint16",
so that the resulting dissectors work correctly.

Regenerate dissectors.

svn path=/trunk/; revision=16754
2005-12-10 22:42:19 +00:00
Anders Broman 056e30ad8b Add packet-nhrp.h
svn path=/trunk/; revision=16751
2005-12-09 18:02:18 +00:00
Jörg Mayer c2eaf1bc74 Fix ...$ to : $
svn path=/trunk/; revision=16750
2005-12-09 16:51:56 +00:00
Anders Broman 1636a6ddac Minor bug fixes.
svn path=/trunk/; revision=16745
2005-12-09 16:15:25 +00:00
Anders Broman fdec74f1c7 From: Deepak Jain
changes/addition to support decode for Next Hop Resolution Protocol

svn path=/trunk/; revision=16744
2005-12-09 16:14:42 +00:00
Guy Harris 3f72fb77a6 Re-generate one more BER dissector.
svn path=/trunk/; revision=16738
2005-12-09 03:24:52 +00:00
Guy Harris b45d2efe6d Regenerate with the latest asn2eth, to get FT_OID used, and to add #line.
svn path=/trunk/; revision=16736
2005-12-08 23:29:21 +00:00
Guy Harris a770b7b647 "get_oid_name()" can return a null pointer; don't try to add the name if
it does.

svn path=/trunk/; revision=16735
2005-12-08 23:21:26 +00:00
Guy Harris aaf8a3060d Clean up indentation.
For OID fields of type FT_STRING, put back the code to append the OID
name.  (Ultimately, we should probably convert them all to type FT_OID.)

svn path=/trunk/; revision=16734
2005-12-08 11:27:14 +00:00
Guy Harris d321960330 When checking whether a packet is for a protocol or not, make sure the
bytes you'll be checking are available in the tvbuff first.

Don't require *all* of the packet data to be available, however.

Heuristic dissectors should return TRUE or FALSE.  Non-heuristic
"new-style" dissectors should return the amount of data dissected or 0. 

svn path=/trunk/; revision=16733
2005-12-08 10:56:51 +00:00
Guy Harris 34bd5efdb7 Regenerate, so that it handles OIDs as FT_OID.
svn path=/trunk/; revision=16732
2005-12-08 09:56:19 +00:00
Guy Harris 344b59b6b3 Squelch a const vs. non-const pointer warning.
svn path=/trunk/; revision=16731
2005-12-08 09:05:23 +00:00
Guy Harris a9892169e3 From Kyle J. Harms:
Fix a few problems.

	CIGI 1 and 2 are only big-endian; CIGI 3 can be little-endian or
	big-endian.

	Remove the port preferences.

svn path=/trunk/; revision=16730
2005-12-08 08:55:15 +00:00
Ronnie Sahlberg febe5a84e3 add decoding of the share type that metze found in the tree connect response
prettify tid and uid 


svn path=/trunk/; revision=16729
2005-12-08 07:54:13 +00:00
Anders Broman b7bcb54079 Also add the new dissectors
svn path=/trunk/; revision=16728
2005-12-08 07:29:15 +00:00
Anders Broman 08468754f7 Commit the actual diissectors:
Log:
 From Grame Lunt:
  updated X.500 dissectors to include DOP support.
 
 The "dop" dissector is the renamed "x501" dissector consequently the asn/x501 directory should be removed. The patch includes the changes to epan/dissectors/Makefile.common to reflect this.
 
 As the DOP dissection is not fully tested, I have disabled it by default for now (like DSP) but it can be enabled by the user.

svn path=/trunk/; revision=16727
2005-12-08 06:43:01 +00:00
Luis Ontanon 55d5c5cc66 Avoid dereferencing pointers to the message, context and transaction object if they have not been created.
svn path=/trunk/; revision=16725
2005-12-07 21:08:51 +00:00
Anders Broman f65a00b5f4 libethereal: add capture_enc
tipc: First stab at reassembly, as tipc reasembly is based on reading the message length from the first segmented packet and then just add the bytes received I didn't find a better way of doing it. 

svn path=/trunk/; revision=16724
2005-12-07 20:07:14 +00:00
Ronnie Sahlberg adb796abc6 tap the ntlmssp protocol and extract the account/domain names when users authenticate.
If known   put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header




svn path=/trunk/; revision=16723
2005-12-07 13:14:09 +00:00
Ronnie Sahlberg 56b2184927 make ntlmssp tappable
svn path=/trunk/; revision=16721
2005-12-07 13:09:42 +00:00
Guy Harris 93106a8e2e Fix some more scaled-fixed-point values, and have a 2-byte spare field
followed by a 2-byte event count.  Fixes bug 609.

svn path=/trunk/; revision=16720
2005-12-07 10:44:55 +00:00
Guy Harris e4106ae5f8 Fix oroperties, get rid of CRs.
svn path=/trunk/; revision=16719
2005-12-07 09:51:31 +00:00
Guy Harris 6afd45377d Squelch a narrowing-conversion warning.
svn path=/trunk/; revision=16718
2005-12-07 09:48:08 +00:00
Guy Harris 9fea197bf9 Why duplicate the code of "tvb_get_string()" when you could just use
"tvb_get_string()"?

Why even bother with "tvb_get_string()" when you can just use
"proto_tree_add_item()" with a string item?

Make sure that the prefix in a PRIV item isn't bigger than the item
itself.  That fixes bug 603.

svn path=/trunk/; revision=16716
2005-12-07 03:03:37 +00:00