Commit graph

2797 commits

Author SHA1 Message Date
Guy Harris
b45d2efe6d Regenerate with the latest asn2eth, to get FT_OID used, and to add #line.
svn path=/trunk/; revision=16736
2005-12-08 23:29:21 +00:00
Guy Harris
a770b7b647 "get_oid_name()" can return a null pointer; don't try to add the name if
it does.

svn path=/trunk/; revision=16735
2005-12-08 23:21:26 +00:00
Guy Harris
aaf8a3060d Clean up indentation.
For OID fields of type FT_STRING, put back the code to append the OID
name.  (Ultimately, we should probably convert them all to type FT_OID.)

svn path=/trunk/; revision=16734
2005-12-08 11:27:14 +00:00
Guy Harris
d321960330 When checking whether a packet is for a protocol or not, make sure the
bytes you'll be checking are available in the tvbuff first.

Don't require *all* of the packet data to be available, however.

Heuristic dissectors should return TRUE or FALSE.  Non-heuristic
"new-style" dissectors should return the amount of data dissected or 0. 

svn path=/trunk/; revision=16733
2005-12-08 10:56:51 +00:00
Guy Harris
34bd5efdb7 Regenerate, so that it handles OIDs as FT_OID.
svn path=/trunk/; revision=16732
2005-12-08 09:56:19 +00:00
Guy Harris
344b59b6b3 Squelch a const vs. non-const pointer warning.
svn path=/trunk/; revision=16731
2005-12-08 09:05:23 +00:00
Guy Harris
a9892169e3 From Kyle J. Harms:
Fix a few problems.

	CIGI 1 and 2 are only big-endian; CIGI 3 can be little-endian or
	big-endian.

	Remove the port preferences.

svn path=/trunk/; revision=16730
2005-12-08 08:55:15 +00:00
Ronnie Sahlberg
febe5a84e3 add decoding of the share type that metze found in the tree connect response
prettify tid and uid 


svn path=/trunk/; revision=16729
2005-12-08 07:54:13 +00:00
Anders Broman
b7bcb54079 Also add the new dissectors
svn path=/trunk/; revision=16728
2005-12-08 07:29:15 +00:00
Anders Broman
08468754f7 Commit the actual diissectors:
Log:
 From Grame Lunt:
  updated X.500 dissectors to include DOP support.
 
 The "dop" dissector is the renamed "x501" dissector consequently the asn/x501 directory should be removed. The patch includes the changes to epan/dissectors/Makefile.common to reflect this.
 
 As the DOP dissection is not fully tested, I have disabled it by default for now (like DSP) but it can be enabled by the user.

svn path=/trunk/; revision=16727
2005-12-08 06:43:01 +00:00
Luis Ontanon
55d5c5cc66 Avoid dereferencing pointers to the message, context and transaction object if they have not been created.
svn path=/trunk/; revision=16725
2005-12-07 21:08:51 +00:00
Anders Broman
f65a00b5f4 libethereal: add capture_enc
tipc: First stab at reassembly, as tipc reasembly is based on reading the message length from the first segmented packet and then just add the bytes received I didn't find a better way of doing it. 

svn path=/trunk/; revision=16724
2005-12-07 20:07:14 +00:00
Ronnie Sahlberg
adb796abc6 tap the ntlmssp protocol and extract the account/domain names when users authenticate.
If known   put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header




svn path=/trunk/; revision=16723
2005-12-07 13:14:09 +00:00
Ronnie Sahlberg
56b2184927 make ntlmssp tappable
svn path=/trunk/; revision=16721
2005-12-07 13:09:42 +00:00
Guy Harris
93106a8e2e Fix some more scaled-fixed-point values, and have a 2-byte spare field
followed by a 2-byte event count.  Fixes bug 609.

svn path=/trunk/; revision=16720
2005-12-07 10:44:55 +00:00
Guy Harris
e4106ae5f8 Fix oroperties, get rid of CRs.
svn path=/trunk/; revision=16719
2005-12-07 09:51:31 +00:00
Guy Harris
6afd45377d Squelch a narrowing-conversion warning.
svn path=/trunk/; revision=16718
2005-12-07 09:48:08 +00:00
Guy Harris
9fea197bf9 Why duplicate the code of "tvb_get_string()" when you could just use
"tvb_get_string()"?

Why even bother with "tvb_get_string()" when you can just use
"proto_tree_add_item()" with a string item?

Make sure that the prefix in a PRIV item isn't bigger than the item
itself.  That fixes bug 603.

svn path=/trunk/; revision=16716
2005-12-07 03:03:37 +00:00
Guy Harris
3250d41ea6 Don't export stuff if no other dissector uses it. "Static unless
otherwise required."

svn path=/trunk/; revision=16715
2005-12-07 01:45:44 +00:00
Guy Harris
363298dd4c Fix indentation.
Gate X and Y Offset are 16-bit integral numbers of degrees, not 32-bit
IEEE floating-point numbers, and the numbers in collision detection
segment definitions and collision detection volume definitions are
16-bit fixed-point numbers, not 32-bit IEEE floating-point numbers;
handle them as such - this fixes bug 605.

When displaying the packet length in the Info column, display the *real*
length, not the sliced length.

svn path=/trunk/; revision=16714
2005-12-07 01:31:43 +00:00
Guy Harris
e5de0c4986 Unicode considered unnecessary and non-portable. Avoid using non-ASCII
characters in field names.

Fix indentation, and fix a typo.

svn path=/trunk/; revision=16713
2005-12-07 00:43:17 +00:00
Ronnie Sahlberg
a9a437d64a From Martin M various updates and fixes
Hi, Some tiddly changes: pppoe- don't create an empty discovery tags tree when the payload length is 0 chap- make chap.value work as a filterable field rtcp- append the packet type to the protocol tree name 


svn path=/trunk/; revision=16712
2005-12-07 00:35:16 +00:00
Ronnie Sahlberg
213ef19c87 From Jelmer V AIM bugfix
Hi,

The attached patch fixes the name of the version field, which I
previously mistook for an authorization cookie (which is in fact in a
TLV that follows this field).



svn path=/trunk/; revision=16711
2005-12-07 00:27:17 +00:00
Guy Harris
76bcc9bd3f Squelch some compiler const vs. non-const warnings.
svn path=/trunk/; revision=16710
2005-12-06 22:59:30 +00:00
Guy Harris
0b1f2585c5 Clean up capture_enc(), export it, and use it in the capture window.
svn path=/trunk/; revision=16709
2005-12-06 22:56:37 +00:00
Luis Ontanon
94110893b7 It crashed when keep_persistent_data == FALSE
svn path=/trunk/; revision=16705
2005-12-06 19:47:22 +00:00
Luis Ontanon
d6c5410b18 - Fix few issues with context analysis
- Add used terminations tree to the context analysis tree

Regenerate Dissector


svn path=/trunk/; revision=16703
2005-12-06 18:52:17 +00:00
Anders Broman
581faf7625 Fill in Column info, Dissect some more user info.
svn path=/trunk/; revision=16702
2005-12-06 17:54:40 +00:00
Anders Broman
1426dbb8fb Dissect Cause and use %(DEFAULT_BODY)s use import for IMSI.
svn path=/trunk/; revision=16701
2005-12-06 17:53:28 +00:00
Tomas Kukosa
a5bfb48c2f OBJECT IDENTIFIER name resolution moved to oid_resolv.c
svn path=/trunk/; revision=16699
2005-12-06 11:45:55 +00:00
Tomas Kukosa
a3ed89556a protocol discriminator byte has to be taken into info_element_len
svn path=/trunk/; revision=16698
2005-12-06 10:50:21 +00:00
Guy Harris
ac2edbb7aa Note what we have to be careful of before we start using Unicode in the
packet list or packet details.

svn path=/trunk/; revision=16696
2005-12-06 06:09:28 +00:00
Ronnie Sahlberg
844756f0ca from Kyle Harms
CIGI updates


svn path=/trunk/; revision=16694
2005-12-06 01:05:48 +00:00
Ronnie Sahlberg
55c9157d6b objectid updates
svn path=/trunk/; revision=16692
2005-12-06 00:27:51 +00:00
Anders Broman
f27bf13022 From Grame Lunt:
a patch for the X.411, X420 and CMS dissectors to implement the remaining heading extensions and bodyparts.

This includes GeneralText BP, forwarded content BP (forwarded p22 and forwarded p772), PKCS#7 BP, and "business class" messaging extensions.

The X.411 extensions using the SIGNATURE macro have also been implemented. There is also a fix for a bug in the dissection of integer 22 content type.

Graeme

svn path=/trunk/; revision=16689
2005-12-05 23:00:03 +00:00
Ronnie Sahlberg
7e5f31b6a0 updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown bytes in smb for objectid)
svn path=/trunk/; revision=16682
2005-12-05 21:22:06 +00:00
Ronnie Sahlberg
e6dd4f9631 From Kyle J Harms
New protocol : CIGI  (with minor updates to make it heuristic)

Hi,

This patch is for a CIGI dissector (complete versions 2 and 3).  It has
been [fuzz] tested on GNU/Linux using the Ethereal 0.10.13 codebase.
However, the patch here is against the svn repository.

More information about CIGI can be found at http://cigi.sourceforge.net/

Kyle Harms




svn path=/trunk/; revision=16681
2005-12-05 20:54:42 +00:00
Anders Broman
e74a09cd01 If we don't have the OID name let the SNMP dissector try to get it from the MIB:s
svn path=/trunk/; revision=16680
2005-12-05 17:24:19 +00:00
Anders Broman
0b02bdbb43 Connection and name manager uses data type hdr
svn path=/trunk/; revision=16675
2005-12-04 21:50:31 +00:00
Ronnie Sahlberg
7efbafb6e5 from Stig B:
I have made a small change in packet-x411-template.c to make the X.
411 message heading in CDT look like in COTP.




svn path=/trunk/; revision=16657
2005-12-02 22:01:00 +00:00
Ronnie Sahlberg
e93abb6669 rtcp fix for sdes_prefix_string
svn path=/trunk/; revision=16656
2005-12-02 21:12:22 +00:00
Tomas Kukosa
2b4785f93e PER dissectors regenerated with FT_OID
svn path=/trunk/; revision=16653
2005-12-02 13:21:43 +00:00
Tomas Kukosa
dcae7d303f new field type FT_OID for OBJECT IDENTIFIERs
svn path=/trunk/; revision=16652
2005-12-02 13:16:58 +00:00
Ronnie Sahlberg
a809b11b2b check in a version of wkssvc that contains all the constructs of the etehreal dissector.
the generated dissector is still "ugly" compared to the handwritten one so there needs a bit of conformance file magic and maybe pidl enhancements before it can go in.


svn path=/trunk/; revision=16651
2005-12-02 11:33:34 +00:00
Ronnie Sahlberg
063d484334 regenerate the pidl dissectors with the latest version of pidl so it will put the text representation of DOS errors in the decode as well.
(the hf field for doserrors did not come with the value_string)



svn path=/trunk/; revision=16650
2005-12-02 10:54:05 +00:00
Ronnie Sahlberg
9edeb85cba add some more ioctls
svn path=/trunk/; revision=16646
2005-12-02 09:19:05 +00:00
Ronnie Sahlberg
bc21123474 add dissection of
FSCTL_CREATE_OR_GET_OBJECT_ID


svn path=/trunk/; revision=16645
2005-12-02 06:49:52 +00:00
Anders Broman
fa3b1f1424 Handle empty APM message
svn path=/trunk/; revision=16644
2005-12-01 20:29:24 +00:00
Anders Broman
f07dd2bfcf Add TIPC address as address type and use it in TIPC.
svn path=/trunk/; revision=16641
2005-12-01 20:02:45 +00:00
Ronnie Sahlberg
1f39289cce add dissection of FSCTL_GET_SHADOW_COPY_DATA
svn path=/trunk/; revision=16638
2005-12-01 13:06:20 +00:00
Ronnie Sahlberg
c8ff130c27 swap in/out to be more consistent with sane naming conventions
svn path=/trunk/; revision=16637
2005-12-01 12:34:53 +00:00
Ronnie Sahlberg
1b2e68397a start implementing an ioctl dispatcher for different ioctl functions
svn path=/trunk/; revision=16636
2005-12-01 10:34:00 +00:00
Ronnie Sahlberg
646535de33 add decoding of some ioctl names copied from packet-smb.c
svn path=/trunk/; revision=16635
2005-12-01 10:18:14 +00:00
Ronnie Sahlberg
ced869a426 move the ioctl function code to the si structure so we can switch on this later in the ioctl_data dissector
svn path=/trunk/; revision=16634
2005-12-01 09:42:39 +00:00
Ronnie Sahlberg
966de91a8d 0x0b is ioctl not transaction
svn path=/trunk/; revision=16633
2005-12-01 09:20:29 +00:00
Anders Broman
9880fdcb98 From Stig Bjørlykke
Added "Activity Identifier" PI in the OSI Session Protocol dissector. 

svn path=/trunk/; revision=16632
2005-12-01 06:28:04 +00:00
Anders Broman
20f04faf96 From Jaap Keuter:
Q.931 fails to pass long message to H.225

svn path=/trunk/; revision=16631
2005-12-01 06:20:17 +00:00
Anders Broman
72b18dfd81 Fix a typo
svn path=/trunk/; revision=16630
2005-12-01 06:18:30 +00:00
Anders Broman
6ea74af3d1 Connec all op types to the asn1 code. Use #.PDU to get hf fields auto generated.
svn path=/trunk/; revision=16629
2005-11-30 20:14:18 +00:00
Anders Broman
0fd0ebef0e Dissct Ptotocol Id 0
svn path=/trunk/; revision=16627
2005-11-30 20:11:45 +00:00
Michael Tüxen
af27e7c520 Add support for
- http://www.ietf.org/internet-drafts/draft-stewart-sctpstrrst-01.txt

svn path=/trunk/; revision=16626
2005-11-29 23:09:01 +00:00
Anders Broman
0e29ab69d3 Change the name of 'isup_calling_partys_category_value'.
svn path=/trunk/; revision=16625
2005-11-29 18:58:18 +00:00
Anders Broman
f082fe8ecf ISUP - Export functions used by INAP and Camel
Gsmmap - Export asn1 structs used by Camel
Camel - Use functions from GSMMAp and ISUP
INAP - Rewrite of the asn1 code to correspond more to CS1 data types
          Let ISUP and Q931 dissect apropriate stuff.

svn path=/trunk/; revision=16624
2005-11-29 17:23:50 +00:00
Guy Harris
37df4d6886 "dcerpc_smb_fetch_pol()" doesn't necessarily return a name, as we might
not have seen anything that would let us give a name to a handle.

svn path=/trunk/; revision=16623
2005-11-29 09:38:45 +00:00
Ronnie Sahlberg
886e7e603b prettification and updates to winreg
svn path=/trunk/; revision=16622
2005-11-29 03:19:52 +00:00
Richard Sharpe
3e92ea7c1f Change the way we handle realloc so that we now compute all the space required
up front and realloc once ...

This will probably be the last changes I make on this dissector, as I want to
concentrate on using asn2eth for LDAP, as time permits.


svn path=/trunk/; revision=16619
2005-11-28 17:32:30 +00:00
Guy Harris
bee3824471 Update the offset correctly regardless of whether we're building a
protocol tree or not.

svn path=/trunk/; revision=16617
2005-11-28 10:28:31 +00:00
Guy Harris
b7853e1285 Give the RFC number for CHAP.
Don't fetch CHAP fields until we need them, so that we can at least
partially dissect a short frame.

Even if the CHAP length is wrong, put it into the protocol tree using
the registered field.

Use "tvb_format_text()" to put text into the Info column, so we handle
non-printable characters by escaping them.

svn path=/trunk/; revision=16616
2005-11-28 10:26:21 +00:00
Richard Sharpe
1a77239007 Make sure that we reset the filter pointer after we realloc the filter.
This should be simplified ... calc all the space required once and then realloc once etc.


svn path=/trunk/; revision=16614
2005-11-28 08:31:11 +00:00
Ronnie Sahlberg
74b05ec567 name some infolevels
svn path=/trunk/; revision=16613
2005-11-28 08:20:12 +00:00
Guy Harris
a195a01dab Don't show the tag twice.
svn path=/trunk/; revision=16612
2005-11-28 00:48:17 +00:00
Guy Harris
96c2884641 Host-Uniq is binary, not text.
FT_BYTES items don't have a base - the bytes are always dumped in hex -
so use BASE_NONE with them.

svn path=/trunk/; revision=16611
2005-11-28 00:41:01 +00:00
Guy Harris
cf75dd602a Don't do anything to the filter string until we've successfully parsed
the extensibleMatch.

Make sure the filter string is always null-terminated, as we use
"strlen()" to skip to the end of it.

On the (illegal, but not impossible) chance that we have more than one
matching rule ID, attributeDescription, or matchValue, free any we
already have before fetching a new one.

svn path=/trunk/; revision=16609
2005-11-27 02:42:29 +00:00
Ronnie Sahlberg
91126d392b from Martin M
ppp chap updates


svn path=/trunk/; revision=16608
2005-11-26 22:49:18 +00:00
Ronnie Sahlberg
55beaa37cf add endoffile infolevel
svn path=/trunk/; revision=16607
2005-11-26 21:59:48 +00:00
Ronnie Sahlberg
f699f011fc more infolevels
svn path=/trunk/; revision=16606
2005-11-26 21:44:37 +00:00
Ronnie Sahlberg
81c46d4c59 update setinfo response dissection
svn path=/trunk/; revision=16605
2005-11-26 21:09:53 +00:00
Jörg Mayer
2edee79378 Porperties: replace executable by eol-style and keywords
svn path=/trunk/; revision=16603
2005-11-26 10:05:14 +00:00
Guy Harris
d25e4c8e0f Fix typoes in comments.
Update a comment, and get rid of a commented-out unused variable.

Use "get_ber_identifier()" and "get_ber_length()", rather than
"dissect_ber_identifier()" and "dissect_ber_length()", if we're just
fetching the values, rather than dissecting them.  As we're just
fetching the values, if we get an error, put the identifer and length
into the protocol tree (if we've enabled that) with
"dissect_ber_identifier()" and "dissect_ber_length()".

Properly declare class and tag variables as signed.

svn path=/trunk/; revision=16602
2005-11-26 04:16:40 +00:00
Guy Harris
3784eec708 Get rid of unused global variables.
svn path=/trunk/; revision=16601
2005-11-26 03:09:40 +00:00
Guy Harris
d2f2043218 Fix RFC number.
Use "tvb_reported_length_remaining()" for all length checks and values,
so we get the *actual* packet length, not the *captured* packet length
(it's a *feature* if it reports a "packet cut short" error if the packet
really *was* cut short by slicing).

Set subtree lengths to -1, so that if an exception is throws while
dissecting them, the length includes all the data.

Get rid of unused variables, and mark unused parameters.

In heuristic checks, give up if we don't have enough data to check.

svn path=/trunk/; revision=16599
2005-11-26 03:06:25 +00:00
Ronnie Sahlberg
d107130cd4 many commands return a short 8 byte pdu when errors occur.
make ethereal handle these better instead of showing them as unreassembled packet



svn path=/trunk/; revision=16598
2005-11-26 03:06:21 +00:00
Ronnie Sahlberg
d149d98fc3 assume the four bytes after the fid in notify request is the completion mask
svn path=/trunk/; revision=16596
2005-11-26 00:34:22 +00:00
Ronnie Sahlberg
7773d60b9a add decoding of some more opcodes
svn path=/trunk/; revision=16594
2005-11-25 23:52:47 +00:00
Ronnie Sahlberg
808f2fc111 add decoding of some more opcodes
svn path=/trunk/; revision=16590
2005-11-25 22:06:56 +00:00
Ronnie Sahlberg
85cfb618f9 from metze and modified, fix for in offset/length for transaction request
svn path=/trunk/; revision=16589
2005-11-25 21:55:34 +00:00
Anders Broman
b8d097b28b Update the Camel asn1 spec to 3GPP TS 29.078 version 6.4.0 and export needed stuff from gsmmap
svn path=/trunk/; revision=16587
2005-11-25 20:18:36 +00:00
Ronnie Sahlberg
0f9be028ca add dissection of treedisconnect
svn path=/trunk/; revision=16586
2005-11-25 08:26:02 +00:00
Ronnie Sahlberg
704abdc0e5 add some more infolevels
svn path=/trunk/; revision=16585
2005-11-25 08:02:40 +00:00
Ronnie Sahlberg
ebe4645322 fix typo it is one in buffer and one out buffer in transaction request not two out buffers
svn path=/trunk/; revision=16584
2005-11-25 06:45:50 +00:00
Ronnie Sahlberg
cdec2dd031 transaction update
svn path=/trunk/; revision=16583
2005-11-25 06:30:47 +00:00
Anders Broman
b0e921a5e0 From Martin Mathieson:
Here is a patch to the PPPoED and PPPoES dissectors.
- All fields are now filterable
- General prettification
- I've added a preference to PPoED to set whether or not tag values and data lengths should be shown in the tree (default is OFF)

svn path=/trunk/; revision=16582
2005-11-25 06:23:04 +00:00
Ronnie Sahlberg
261aade300 add dissection of the smb2 impersionationlevel field
svn path=/trunk/; revision=16581
2005-11-25 06:19:41 +00:00
Ronnie Sahlberg
c76c376968 some info level updates
svn path=/trunk/; revision=16580
2005-11-25 06:04:11 +00:00
Ronnie Sahlberg
cfc56af514 some info level updates
svn path=/trunk/; revision=16579
2005-11-25 05:41:00 +00:00
Ronnie Sahlberg
d93bd8606c update the transaction code
svn path=/trunk/; revision=16578
2005-11-25 00:28:02 +00:00
Ronnie Sahlberg
64181a533c dissect some more of SMB2 Transaction command
svn path=/trunk/; revision=16577
2005-11-24 15:24:30 +00:00
Ronnie Sahlberg
22d2f325ea dissect some of opcode 0x0b Transaction
svn path=/trunk/; revision=16576
2005-11-24 14:49:46 +00:00
Anders Broman
9d646e76dc From Greg Morris:
ncp2222.py.diff
Fixed decoding of NCP 89,10 reply packet. Fixes malformed packet.
 
packet-ncp.c.diff
Adds NCP protocol preference options for enabling/disabling the echoing of data to the expert table.
Expert: EID to Name Lookups
Expert: NCP Connections
Expert: NCP Errors
Expert: Server Information
 
packet-ncp2222.inc.diff
Adds decoding of ZEN attribute values
zendmSearchType
zendmSearchOrder
Fixes blank name stored in EID to Name table if tuned name was returned in resolve name reply packet
Adds capability of reading hf values from NCP tree for exporting specific NCP info to expert table
Adds support for new NCP protocol preference options
Adds expert options for EID to Name Lookups, NCP connections, and Server Information
Change nwconnection from 16bit value to 32bit
 
Packet-ncp-int.h.diff
Fix function prototypes to match new 32bit nwconnection
Add global variables to allow for new NCP protocol preference options

svn path=/trunk/; revision=16575
2005-11-24 05:55:18 +00:00
Anders Broman
f067906362 Pretify TIPC addr.
svn path=/trunk/; revision=16574
2005-11-23 21:32:07 +00:00
Anders Broman
6612fea2ae From greg Morris:
Fixes proper decoding of extended error 2 values
Also adds a number of additional error codes/values

svn path=/trunk/; revision=16573
2005-11-23 21:27:39 +00:00
Anders Broman
81fb46aacd From Greg Morris:
Fixes proper decoding of extended error 2 values
Also adds a number of additional error codes/values

svn path=/trunk/; revision=16572
2005-11-23 21:25:24 +00:00
Anders Broman
fc2400ac41 From Greg Morris:
This update adds info column data for srvloc request/reply to display SLP version and XID information.
Also adds expert data for srvloc error conditions

svn path=/trunk/; revision=16571
2005-11-23 21:17:58 +00:00
Tomas Kukosa
eca9dac0ae fixed typo
svn path=/trunk/; revision=16570
2005-11-23 09:41:43 +00:00
Anders Broman
cf0d307ef6 From Stig Bjørlykke
Added a new dissector for CDT (CompressedDataType) as
 defined in STANAG 4406 Annex E.  This dissector is used in P_Mul to  
 decode encapsulated X.411 content.  I have added a function in the  
 X.411 dissector to decode a MTS APDU without having a ROS

 Changes in this patch:
 * Added CDT dissector
 * Use CDT dissector in P_Mul
 * Added function to decode MTS APDU in the X.411 dissector

svn path=/trunk/; revision=16567
2005-11-23 07:33:03 +00:00
Anders Broman
ff66247888 From Stig Bjørlykke
Added a new dissector for CDT (CompressedDataType) as
 defined in STANAG 4406 Annex E.  This dissector is used in P_Mul to  
 decode encapsulated X.411 content.  I have added a function in the  
 X.411 dissector to decode a MTS APDU without having a ROS

 Changes in this patch:
 * Added CDT dissector
 * Use CDT dissector in P_Mul
 * Added function to decode MTS APDU in the X.411 dissector

svn path=/trunk/; revision=16566
2005-11-23 07:32:24 +00:00
Anders Broman
c995a05ef4 Add dissection of Transparent Inter Process Communication (TIPC).
svn path=/trunk/; revision=16562
2005-11-22 21:48:10 +00:00
Jörg Mayer
eff40f65db Trivial warning fixes
svn path=/trunk/; revision=16561
2005-11-22 12:51:14 +00:00
Richard Sharpe
5d58e19323 Remove unnecessary code to add NULLs to strings obtained with ASN1_STRING_VALUE_DECODE, as they are already there.
svn path=/trunk/; revision=16560
2005-11-22 06:36:06 +00:00
Richard Sharpe
ca0774dd9e Remove a comment that says we don't support extensibleMatch, because we now do. Also, remove an unused static.
svn path=/trunk/; revision=16559
2005-11-22 03:55:02 +00:00
Richard Sharpe
0f46461794 A first pass at providing a dissector for extensibleMatch filters.
More work to come on the whole filters shtick and more clean-up required here.


svn path=/trunk/; revision=16558
2005-11-22 02:19:52 +00:00
Ronnie Sahlberg
8bcb4b47e6 from Metze
generalize the offset/length/buffer   handling
and make some code much nicer


svn path=/trunk/; revision=16557
2005-11-21 20:37:43 +00:00
Anders Broman
eba478ca11 Add ethertype for TIPC
svn path=/trunk/; revision=16556
2005-11-21 19:01:52 +00:00
Guy Harris
a30e519736 When registering a context ID and OID, set the OID to NULL if we don't
have an OID to register.

If our table of context identifiers and OIDs is to keep that association
on a per-conversation basis, it should use conversations, not
address/port, as we aren't necessarily running over TCP or UDP.

svn path=/trunk/; revision=16554
2005-11-20 04:34:58 +00:00
Ronnie Sahlberg
2d8fb070ca if the packet is mangled the oid string might be NULL.
dont try to register a NULL oid



svn path=/trunk/; revision=16553
2005-11-20 02:48:26 +00:00
Anders Broman
15e0ccf887 Use VendorID from sminmpec.
svn path=/trunk/; revision=16552
2005-11-19 15:59:30 +00:00
Ronnie Sahlberg
e2ef8b1632 fix for bug 570, the domain name is present in sessionsetupandx replies even for wc==4
svn path=/trunk/; revision=16550
2005-11-19 10:27:16 +00:00
Ronnie Sahlberg
a54d3e960b fix bug 588 and friends
svn path=/trunk/; revision=16549
2005-11-19 10:03:16 +00:00
Ronnie Sahlberg
49499c1b96 the 4 bytes in MxAc are access maxk not file attributes
svn path=/trunk/; revision=16548
2005-11-19 03:19:56 +00:00
Ronnie Sahlberg
7e45fb1755 prettification
svn path=/trunk/; revision=16547
2005-11-19 03:15:39 +00:00
Ronnie Sahlberg
6de5370105 decode the extra blob at the end of Create calls
svn path=/trunk/; revision=16546
2005-11-19 02:24:22 +00:00
Ronnie Sahlberg
ad65921598 update to SMB2_FILE_ALL_INFO dissection
prettify dissection of some strings


svn path=/trunk/; revision=16545
2005-11-18 21:59:05 +00:00
Guy Harris
12ae3bba4d Don't crash if a null OID pointer is passed to
"call_ber_oid_callback()".  (Arguably, the caller of
"call_ber_oid_callback()" should check for that, and report that a
presumably-required field is missing.)

svn path=/trunk/; revision=16544
2005-11-18 10:06:47 +00:00
Ronnie Sahlberg
3f047721a3 dissect some more infolevels
svn path=/trunk/; revision=16543
2005-11-18 07:31:18 +00:00
Ronnie Sahlberg
3afd94f519 add dissection of more infolevels for smb2
svn path=/trunk/; revision=16539
2005-11-17 22:30:19 +00:00
Ronnie Sahlberg
e5b6a6426b add dissection of fs_[objectid|full_size]_info
svn path=/trunk/; revision=16538
2005-11-17 14:22:11 +00:00
Ronnie Sahlberg
6ac4fe9a25 add dissection of fs quota info
svn path=/trunk/; revision=16537
2005-11-17 14:00:07 +00:00
Ronnie Sahlberg
1b809cfcd7 add full dissection of fs_[volume|size|device|atrtibute]_info
svn path=/trunk/; revision=16536
2005-11-17 13:43:22 +00:00
Ronnie Sahlberg
675d0862b5 add dissection of the security descriptor mask
svn path=/trunk/; revision=16535
2005-11-17 12:30:36 +00:00
Guy Harris
e2c9bcf703 The SHA-1 routines now take const pointers; don't cast away constness.
tvb_get_ptr() returns a "const guint8 *"; don't bother casting its
return value to "const guint8 *".

"cms_verify_msg_digest()" can be passed a const pointer for "alg"; make
its argument a "const char *".

svn path=/trunk/; revision=16534
2005-11-17 11:50:36 +00:00
Guy Harris
148d700e01 Get rid of some char * vs. const char * warnings, and declare a function
with no arguments as such.

svn path=/trunk/; revision=16532
2005-11-17 11:16:37 +00:00
Guy Harris
b018becab3 Get rid of an unused variable.
svn path=/trunk/; revision=16531
2005-11-17 11:15:26 +00:00
Ronnie Sahlberg
57c5bffa85 decode the create flags
svn path=/trunk/; revision=16529
2005-11-17 08:21:53 +00:00
Ronnie Sahlberg
b8cb0d07b8 add more updates from the wiki
svn path=/trunk/; revision=16528
2005-11-17 07:32:17 +00:00
Ronnie Sahlberg
5d24bf785a start updating the dissector from wiki updates done
svn path=/trunk/; revision=16527
2005-11-17 07:04:41 +00:00
Guy Harris
7586ab64db Squelch some const vs. non-const warnings.
svn path=/trunk/; revision=16525
2005-11-17 05:02:30 +00:00
Guy Harris
0c8be0fab6 Include <epan/emem.h> to declare ep_alloc().
svn path=/trunk/; revision=16524
2005-11-17 04:54:25 +00:00
Guy Harris
393ac45d83 "dissect_ber_object_identifier_str" expects a "const char **" as its
last argument; make it so.

svn path=/trunk/; revision=16523
2005-11-17 04:47:41 +00:00
Ronnie Sahlberg
d71982fbbb add the rest of Graeme Lunts patch
svn path=/trunk/; revision=16520
2005-11-16 23:17:21 +00:00
Anders Broman
7c8d0dad93 Decose APN messages correctly.
svn path=/trunk/; revision=16514
2005-11-16 20:03:09 +00:00
Ronnie Sahlberg
04f785f836 add dissection of buffercode
according to
wiki.etehreal.com/SMB2/BufferCode



svn path=/trunk/; revision=16512
2005-11-16 10:59:41 +00:00
Ronnie Sahlberg
898dc49980 add a simple g_strlcat define in strutil for gtk==1 where this symbol does not exist
svn path=/trunk/; revision=16511
2005-11-16 09:27:43 +00:00
Anders Broman
6c466a1437 Display AVP:s of Dimater type Unsigned32 as such even when they have "value translation".
svn path=/trunk/; revision=16510
2005-11-16 07:21:48 +00:00
Anders Broman
00131b0f1e From Greg Morris;
The following diff (based on current SVN) fixes the following...
1. Adds additional return value 0xa901 
"Invalid Data Type Flag (outdated return value - replaced in NSS as 0x89aa error)" 
for 87/xx NCP's.
2. Fixes decode for NCP 87/20 reply packets
3. Fixes decode for NCP 89/53 request packets

svn path=/trunk/; revision=16509
2005-11-16 07:16:34 +00:00
Anders Broman
c33182b898 From Graeme Lunt:
Here are a number of small patches for asn1 based dissectors:

acse:
  release request/response column information (many X.400/X.500 unbinds are
empty)
  "standardised" PNAME to "ISO 8650-1 OSI Association Control Service"
  fix for crash when using EXTERNAL dissector

rtse:
  column information when attempting a resume

x509if:
  generation of LDAP-style DNs from RDNSequences 
  new function x509if_get_last_dn() to get the last DN generated.

x509af:
  DSS parameters
  certificate extension naming
  subject naming of certificate

x509sat:
  Guide syntax (as SET now supported)
  PDU exports.
  
cms:
  verification of message digest attribute (SHA-1 and MD5)
  
ess:
  enumerated/restrictive/permissive/informative security categories

x411:
  generation of string encoding of X.400 addresses, trace information and message identifiers.

s4406:
  separate types for primary and copy precedence to allow better filtering (e.g. primary precedence = flash)
  priority-level-qualifier


svn path=/trunk/; revision=16508
2005-11-16 07:13:12 +00:00
Guy Harris
893ad69c74 Handle OSPF V3 prefixes similarly to the way other IPv6 prefixes are
handled (but not the same, as the prefix length in OSPF is rounded up to
a multiple of 4 bytes, not just a byte).  This simplifies the code, and
keeps us from overflowing the buffer we allocate if the prefix length is
> 128 (we now just report that as an error).

svn path=/trunk/; revision=16507
2005-11-15 10:56:18 +00:00
Ronnie Sahlberg
5bc41c76b0 add decoding of extended attributes
svn path=/trunk/; revision=16506
2005-11-15 08:49:34 +00:00
Tomas Kukosa
97584210fb improvements in value constraint support
- NO_BOUND is defined instead of usage -1
- negative bound is handled properly for INTEGER

svn path=/trunk/; revision=16505
2005-11-14 13:05:17 +00:00
Ronnie Sahlberg
f4e55c1155 move the include of emem.h a bit further down
so it does know what size_t is when emem is included.

i needed this change to get it to compile on my box


svn path=/trunk/; revision=16504
2005-11-14 13:02:23 +00:00
Ronnie Sahlberg
ae6cc5a6f2 some more infol;evels decoded
svn path=/trunk/; revision=16503
2005-11-14 12:06:39 +00:00