osmocom
/
wireshark
14
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
16,965 Commits 26 Branches 0 Tags 795 MiB
Commit Graph

71 Commits

Author SHA1 Message Date
Anders Broman 851ecd2ac4 From Jon Ringle: 
1) Added a setup_frame parameter to conversation_t
2) Used the conversation_t next to maintain a list of conversations with the 
same src/dest tuple but different setup_frame number.
3) Changed the signature of find_conversation() and conversation_new() to pass 
in the frame number.
4) Adjusted packet-sdp to select RTP conversation if both m=audio and m=image 
are present, and T.38 conversation if only m=image is present. I expect that 
RTP/T.38 dissecting to be better, but I don't have a way to generate T.38 
packets.

svn path=/trunk/; revision=13243
 2005-02-02 20:07:03 +00:00
Guy Harris 75e4d0a2ce Use the 64-bit integer fetch routines to support 64-bit NDR integers. 
svn path=/trunk/; revision=13198
 2005-01-29 20:39:14 +00:00
Ulf Lamping 13e90b72b3 use col_set_fence for COL_INFO, if multiple DCE/RPC requests/responses are in one (TCP)PDU. I've used " # " as the delimiter string, BTW: do we have an "official" one yet? 
svn path=/trunk/; revision=13149
 2005-01-20 19:26:24 +00:00
Ulf Lamping 39a6232a8d try to defragment DCE/RPC fragments (simply one after the other), if alloc_hint is zero 
svn path=/trunk/; revision=13126
 2005-01-19 23:41:07 +00:00
Ulf Lamping 1c9781b4ec throw the new FieldError exception, if a dissector tries to add a field with invalid parameters 
add a message parameter to the show_exception function

svn path=/trunk/; revision=13074
 2005-01-16 16:06:15 +00:00
Ulf Lamping aa139758f9 add new function dissect_dcerpc_uuid_t and let dissect_ndr_uuid_t call it 
svn path=/trunk/; revision=13006
 2005-01-12 21:20:50 +00:00
Ulf Lamping dc0fc1896e use GLib's pointer to int conversion macros to prevent compiler warnings 
svn path=/trunk/; revision=12830
 2004-12-24 23:17:38 +00:00
Ronnie Sahlberg 0b6ae100fe add another error code to dcerpc 
svn path=/trunk/; revision=12822
 2004-12-23 19:53:24 +00:00
Ulf Lamping ea0baf468e (on behalf of the PROFIBUS Nutzerorganisation e.V. Deutschland): 
another part of the PROFINET dissectors (PN-CBA, including a lot of generic DCOM dissection) still some work to be done ...

svn path=/trunk/; revision=12776
 2004-12-19 13:46:09 +00:00
Guy Harris c2b55b8d97 From Yaniv Kaul: DCERPC-over-HTTP(!) support. (But why didn't whoever 
came up with that not go whole hog and implement RFC 3093?)

svn path=/trunk/; revision=12756
 2004-12-15 09:10:07 +00:00
Guy Harris 7b81bb17f3 According to the part of the DCE RPC spec at 
http://www.opengroup.org/onlinepubs/009629399/chap12.htm#tagcjh_17_06_01

the number of transfer syntaxes is a u_int8, with an alignment pad byte
following it, not a u_int16.

svn path=/trunk/; revision=12631
 2004-12-01 06:44:54 +00:00
Guy Harris 6472876ab3 Move the tap infrastructure to the epan directory. 
svn path=/trunk/; revision=12128
 2004-09-29 00:06:36 +00:00
Guy Harris bbe7f89742 Move prefs.c and prefs.h into the epan subdirectory. 
svn path=/trunk/; revision=12115
 2004-09-27 22:55:15 +00:00
Guy Harris f23f4ecf04 Use _WIN32 rather than WIN32 to determine if we're compiling on Win32; 
according to Gisle Vanem, WIN32 isn't a built-in in MSVC, but _WIN32 is.

svn path=/trunk/; revision=11972
 2004-09-11 23:03:36 +00:00
Guy Harris d8eefd6115 Squelch a compiler warning. (We really might want a 
"tvb_ensure_reported_length_remaining()" call here.)

svn path=/trunk/; revision=11946
 2004-09-08 21:14:40 +00:00
Guy Harris 005aa9f66d From Devin Heitmuller: decode verifiers after stub decryption - for 
NTLMSSP, the state of the RC4 stream is dependent on the stub being
decrypted before the verifier.

Correctly set the length and reported length of the tvb for the stub
(the reported length of that tvb should be set based on the *reported*
length of the parent tvbuff, not the captured length).

svn path=/trunk/; revision=11938
 2004-09-08 09:35:47 +00:00
Ulf Lamping 26afcbd9cc First working implementation of "Decode As" for DCE-RPC interface bindings. Ethereal needs to capture the DCE-RPC bind sequence, to get a relationsship between the interface UUID and the current conversation. If this binding wasn't captured, one can use "Decode As" and choose the interface from a list corresponding to a specific conversation. Currently "only" implemented for connectionoriented (TCP) DCE-RPC, but connectionless is a work in progress. 
svn path=/trunk/; revision=11924
 2004-09-07 16:19:56 +00:00
Ulf Lamping 7125550f19 rename add_conv_to_dcerpc_bind_table to dcerpc_add_conv_to_bind_table and don't use packet_info as a parameter 
svn path=/trunk/; revision=11916
 2004-09-06 19:51:33 +00:00
Ulf Lamping 4777e5ef7b From Eric Wedel: backend things for "Decode As" of DCE-RPC interfaces 
svn path=/trunk/; revision=11894
 2004-09-04 11:35:26 +00:00
Ulf Lamping d530bd4e14 Prevent the word "desegmentation" at the GUI, but use reassembling at that places, as we also use "defragmentation" and "reassembling". Use reassembling as the general term for such actions. 
I (hopefully) didn't changed any protocol fields or preference file names, but only the GUI labels appearing in the protocol display and the protocol preferences.

Also added a note to the protocol preferences (where appropriate), that you have to enable "Allow subdissectors to reassemble TCP streams" at the corresponding protocol settings for TCP reassembling to take effect.

If you encounter any mistakes I've made here, please let me know...

svn path=/trunk/; revision=11784
 2004-08-21 09:02:52 +00:00
Gilbert Ramirez 669db206cb Move dissectors to epan/dissectors directory. 
Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.

Adjust #include lines in files that include packet-*.h
files.

svn path=/trunk/; revision=11410
 2004-07-18 18:06:47 +00:00