Commit graph

2797 commits

Author SHA1 Message Date
Ronnie Sahlberg
c8ff130c27 swap in/out to be more consistent with sane naming conventions
svn path=/trunk/; revision=16637
2005-12-01 12:34:53 +00:00
Ronnie Sahlberg
1b2e68397a start implementing an ioctl dispatcher for different ioctl functions
svn path=/trunk/; revision=16636
2005-12-01 10:34:00 +00:00
Ronnie Sahlberg
646535de33 add decoding of some ioctl names copied from packet-smb.c
svn path=/trunk/; revision=16635
2005-12-01 10:18:14 +00:00
Ronnie Sahlberg
ced869a426 move the ioctl function code to the si structure so we can switch on this later in the ioctl_data dissector
svn path=/trunk/; revision=16634
2005-12-01 09:42:39 +00:00
Ronnie Sahlberg
966de91a8d 0x0b is ioctl not transaction
svn path=/trunk/; revision=16633
2005-12-01 09:20:29 +00:00
Anders Broman
9880fdcb98 From Stig Bjørlykke
Added "Activity Identifier" PI in the OSI Session Protocol dissector. 

svn path=/trunk/; revision=16632
2005-12-01 06:28:04 +00:00
Anders Broman
20f04faf96 From Jaap Keuter:
Q.931 fails to pass long message to H.225

svn path=/trunk/; revision=16631
2005-12-01 06:20:17 +00:00
Anders Broman
72b18dfd81 Fix a typo
svn path=/trunk/; revision=16630
2005-12-01 06:18:30 +00:00
Anders Broman
6ea74af3d1 Connec all op types to the asn1 code. Use #.PDU to get hf fields auto generated.
svn path=/trunk/; revision=16629
2005-11-30 20:14:18 +00:00
Anders Broman
0fd0ebef0e Dissct Ptotocol Id 0
svn path=/trunk/; revision=16627
2005-11-30 20:11:45 +00:00
Michael Tüxen
af27e7c520 Add support for
- http://www.ietf.org/internet-drafts/draft-stewart-sctpstrrst-01.txt

svn path=/trunk/; revision=16626
2005-11-29 23:09:01 +00:00
Anders Broman
0e29ab69d3 Change the name of 'isup_calling_partys_category_value'.
svn path=/trunk/; revision=16625
2005-11-29 18:58:18 +00:00
Anders Broman
f082fe8ecf ISUP - Export functions used by INAP and Camel
Gsmmap - Export asn1 structs used by Camel
Camel - Use functions from GSMMAp and ISUP
INAP - Rewrite of the asn1 code to correspond more to CS1 data types
          Let ISUP and Q931 dissect apropriate stuff.

svn path=/trunk/; revision=16624
2005-11-29 17:23:50 +00:00
Guy Harris
37df4d6886 "dcerpc_smb_fetch_pol()" doesn't necessarily return a name, as we might
not have seen anything that would let us give a name to a handle.

svn path=/trunk/; revision=16623
2005-11-29 09:38:45 +00:00
Ronnie Sahlberg
886e7e603b prettification and updates to winreg
svn path=/trunk/; revision=16622
2005-11-29 03:19:52 +00:00
Richard Sharpe
3e92ea7c1f Change the way we handle realloc so that we now compute all the space required
up front and realloc once ...

This will probably be the last changes I make on this dissector, as I want to
concentrate on using asn2eth for LDAP, as time permits.


svn path=/trunk/; revision=16619
2005-11-28 17:32:30 +00:00
Guy Harris
bee3824471 Update the offset correctly regardless of whether we're building a
protocol tree or not.

svn path=/trunk/; revision=16617
2005-11-28 10:28:31 +00:00
Guy Harris
b7853e1285 Give the RFC number for CHAP.
Don't fetch CHAP fields until we need them, so that we can at least
partially dissect a short frame.

Even if the CHAP length is wrong, put it into the protocol tree using
the registered field.

Use "tvb_format_text()" to put text into the Info column, so we handle
non-printable characters by escaping them.

svn path=/trunk/; revision=16616
2005-11-28 10:26:21 +00:00
Richard Sharpe
1a77239007 Make sure that we reset the filter pointer after we realloc the filter.
This should be simplified ... calc all the space required once and then realloc once etc.


svn path=/trunk/; revision=16614
2005-11-28 08:31:11 +00:00
Ronnie Sahlberg
74b05ec567 name some infolevels
svn path=/trunk/; revision=16613
2005-11-28 08:20:12 +00:00
Guy Harris
a195a01dab Don't show the tag twice.
svn path=/trunk/; revision=16612
2005-11-28 00:48:17 +00:00
Guy Harris
96c2884641 Host-Uniq is binary, not text.
FT_BYTES items don't have a base - the bytes are always dumped in hex -
so use BASE_NONE with them.

svn path=/trunk/; revision=16611
2005-11-28 00:41:01 +00:00
Guy Harris
cf75dd602a Don't do anything to the filter string until we've successfully parsed
the extensibleMatch.

Make sure the filter string is always null-terminated, as we use
"strlen()" to skip to the end of it.

On the (illegal, but not impossible) chance that we have more than one
matching rule ID, attributeDescription, or matchValue, free any we
already have before fetching a new one.

svn path=/trunk/; revision=16609
2005-11-27 02:42:29 +00:00
Ronnie Sahlberg
91126d392b from Martin M
ppp chap updates


svn path=/trunk/; revision=16608
2005-11-26 22:49:18 +00:00
Ronnie Sahlberg
55beaa37cf add endoffile infolevel
svn path=/trunk/; revision=16607
2005-11-26 21:59:48 +00:00
Ronnie Sahlberg
f699f011fc more infolevels
svn path=/trunk/; revision=16606
2005-11-26 21:44:37 +00:00
Ronnie Sahlberg
81c46d4c59 update setinfo response dissection
svn path=/trunk/; revision=16605
2005-11-26 21:09:53 +00:00
Jörg Mayer
2edee79378 Porperties: replace executable by eol-style and keywords
svn path=/trunk/; revision=16603
2005-11-26 10:05:14 +00:00
Guy Harris
d25e4c8e0f Fix typoes in comments.
Update a comment, and get rid of a commented-out unused variable.

Use "get_ber_identifier()" and "get_ber_length()", rather than
"dissect_ber_identifier()" and "dissect_ber_length()", if we're just
fetching the values, rather than dissecting them.  As we're just
fetching the values, if we get an error, put the identifer and length
into the protocol tree (if we've enabled that) with
"dissect_ber_identifier()" and "dissect_ber_length()".

Properly declare class and tag variables as signed.

svn path=/trunk/; revision=16602
2005-11-26 04:16:40 +00:00
Guy Harris
3784eec708 Get rid of unused global variables.
svn path=/trunk/; revision=16601
2005-11-26 03:09:40 +00:00
Guy Harris
d2f2043218 Fix RFC number.
Use "tvb_reported_length_remaining()" for all length checks and values,
so we get the *actual* packet length, not the *captured* packet length
(it's a *feature* if it reports a "packet cut short" error if the packet
really *was* cut short by slicing).

Set subtree lengths to -1, so that if an exception is throws while
dissecting them, the length includes all the data.

Get rid of unused variables, and mark unused parameters.

In heuristic checks, give up if we don't have enough data to check.

svn path=/trunk/; revision=16599
2005-11-26 03:06:25 +00:00
Ronnie Sahlberg
d107130cd4 many commands return a short 8 byte pdu when errors occur.
make ethereal handle these better instead of showing them as unreassembled packet



svn path=/trunk/; revision=16598
2005-11-26 03:06:21 +00:00
Ronnie Sahlberg
d149d98fc3 assume the four bytes after the fid in notify request is the completion mask
svn path=/trunk/; revision=16596
2005-11-26 00:34:22 +00:00
Ronnie Sahlberg
7773d60b9a add decoding of some more opcodes
svn path=/trunk/; revision=16594
2005-11-25 23:52:47 +00:00
Ronnie Sahlberg
808f2fc111 add decoding of some more opcodes
svn path=/trunk/; revision=16590
2005-11-25 22:06:56 +00:00
Ronnie Sahlberg
85cfb618f9 from metze and modified, fix for in offset/length for transaction request
svn path=/trunk/; revision=16589
2005-11-25 21:55:34 +00:00
Anders Broman
b8d097b28b Update the Camel asn1 spec to 3GPP TS 29.078 version 6.4.0 and export needed stuff from gsmmap
svn path=/trunk/; revision=16587
2005-11-25 20:18:36 +00:00
Ronnie Sahlberg
0f9be028ca add dissection of treedisconnect
svn path=/trunk/; revision=16586
2005-11-25 08:26:02 +00:00
Ronnie Sahlberg
704abdc0e5 add some more infolevels
svn path=/trunk/; revision=16585
2005-11-25 08:02:40 +00:00
Ronnie Sahlberg
ebe4645322 fix typo it is one in buffer and one out buffer in transaction request not two out buffers
svn path=/trunk/; revision=16584
2005-11-25 06:45:50 +00:00
Ronnie Sahlberg
cdec2dd031 transaction update
svn path=/trunk/; revision=16583
2005-11-25 06:30:47 +00:00
Anders Broman
b0e921a5e0 From Martin Mathieson:
Here is a patch to the PPPoED and PPPoES dissectors.
- All fields are now filterable
- General prettification
- I've added a preference to PPoED to set whether or not tag values and data lengths should be shown in the tree (default is OFF)

svn path=/trunk/; revision=16582
2005-11-25 06:23:04 +00:00
Ronnie Sahlberg
261aade300 add dissection of the smb2 impersionationlevel field
svn path=/trunk/; revision=16581
2005-11-25 06:19:41 +00:00
Ronnie Sahlberg
c76c376968 some info level updates
svn path=/trunk/; revision=16580
2005-11-25 06:04:11 +00:00
Ronnie Sahlberg
cfc56af514 some info level updates
svn path=/trunk/; revision=16579
2005-11-25 05:41:00 +00:00
Ronnie Sahlberg
d93bd8606c update the transaction code
svn path=/trunk/; revision=16578
2005-11-25 00:28:02 +00:00
Ronnie Sahlberg
64181a533c dissect some more of SMB2 Transaction command
svn path=/trunk/; revision=16577
2005-11-24 15:24:30 +00:00
Ronnie Sahlberg
22d2f325ea dissect some of opcode 0x0b Transaction
svn path=/trunk/; revision=16576
2005-11-24 14:49:46 +00:00
Anders Broman
9d646e76dc From Greg Morris:
ncp2222.py.diff
Fixed decoding of NCP 89,10 reply packet. Fixes malformed packet.
 
packet-ncp.c.diff
Adds NCP protocol preference options for enabling/disabling the echoing of data to the expert table.
Expert: EID to Name Lookups
Expert: NCP Connections
Expert: NCP Errors
Expert: Server Information
 
packet-ncp2222.inc.diff
Adds decoding of ZEN attribute values
zendmSearchType
zendmSearchOrder
Fixes blank name stored in EID to Name table if tuned name was returned in resolve name reply packet
Adds capability of reading hf values from NCP tree for exporting specific NCP info to expert table
Adds support for new NCP protocol preference options
Adds expert options for EID to Name Lookups, NCP connections, and Server Information
Change nwconnection from 16bit value to 32bit
 
Packet-ncp-int.h.diff
Fix function prototypes to match new 32bit nwconnection
Add global variables to allow for new NCP protocol preference options

svn path=/trunk/; revision=16575
2005-11-24 05:55:18 +00:00
Anders Broman
f067906362 Pretify TIPC addr.
svn path=/trunk/; revision=16574
2005-11-23 21:32:07 +00:00
Anders Broman
6612fea2ae From greg Morris:
Fixes proper decoding of extended error 2 values
Also adds a number of additional error codes/values

svn path=/trunk/; revision=16573
2005-11-23 21:27:39 +00:00
Anders Broman
81fb46aacd From Greg Morris:
Fixes proper decoding of extended error 2 values
Also adds a number of additional error codes/values

svn path=/trunk/; revision=16572
2005-11-23 21:25:24 +00:00
Anders Broman
fc2400ac41 From Greg Morris:
This update adds info column data for srvloc request/reply to display SLP version and XID information.
Also adds expert data for srvloc error conditions

svn path=/trunk/; revision=16571
2005-11-23 21:17:58 +00:00
Tomas Kukosa
eca9dac0ae fixed typo
svn path=/trunk/; revision=16570
2005-11-23 09:41:43 +00:00
Anders Broman
cf0d307ef6 From Stig Bjørlykke
Added a new dissector for CDT (CompressedDataType) as
 defined in STANAG 4406 Annex E.  This dissector is used in P_Mul to  
 decode encapsulated X.411 content.  I have added a function in the  
 X.411 dissector to decode a MTS APDU without having a ROS

 Changes in this patch:
 * Added CDT dissector
 * Use CDT dissector in P_Mul
 * Added function to decode MTS APDU in the X.411 dissector

svn path=/trunk/; revision=16567
2005-11-23 07:33:03 +00:00
Anders Broman
ff66247888 From Stig Bjørlykke
Added a new dissector for CDT (CompressedDataType) as
 defined in STANAG 4406 Annex E.  This dissector is used in P_Mul to  
 decode encapsulated X.411 content.  I have added a function in the  
 X.411 dissector to decode a MTS APDU without having a ROS

 Changes in this patch:
 * Added CDT dissector
 * Use CDT dissector in P_Mul
 * Added function to decode MTS APDU in the X.411 dissector

svn path=/trunk/; revision=16566
2005-11-23 07:32:24 +00:00
Anders Broman
c995a05ef4 Add dissection of Transparent Inter Process Communication (TIPC).
svn path=/trunk/; revision=16562
2005-11-22 21:48:10 +00:00
Jörg Mayer
eff40f65db Trivial warning fixes
svn path=/trunk/; revision=16561
2005-11-22 12:51:14 +00:00
Richard Sharpe
5d58e19323 Remove unnecessary code to add NULLs to strings obtained with ASN1_STRING_VALUE_DECODE, as they are already there.
svn path=/trunk/; revision=16560
2005-11-22 06:36:06 +00:00
Richard Sharpe
ca0774dd9e Remove a comment that says we don't support extensibleMatch, because we now do. Also, remove an unused static.
svn path=/trunk/; revision=16559
2005-11-22 03:55:02 +00:00
Richard Sharpe
0f46461794 A first pass at providing a dissector for extensibleMatch filters.
More work to come on the whole filters shtick and more clean-up required here.


svn path=/trunk/; revision=16558
2005-11-22 02:19:52 +00:00
Ronnie Sahlberg
8bcb4b47e6 from Metze
generalize the offset/length/buffer   handling
and make some code much nicer


svn path=/trunk/; revision=16557
2005-11-21 20:37:43 +00:00
Anders Broman
eba478ca11 Add ethertype for TIPC
svn path=/trunk/; revision=16556
2005-11-21 19:01:52 +00:00
Guy Harris
a30e519736 When registering a context ID and OID, set the OID to NULL if we don't
have an OID to register.

If our table of context identifiers and OIDs is to keep that association
on a per-conversation basis, it should use conversations, not
address/port, as we aren't necessarily running over TCP or UDP.

svn path=/trunk/; revision=16554
2005-11-20 04:34:58 +00:00
Ronnie Sahlberg
2d8fb070ca if the packet is mangled the oid string might be NULL.
dont try to register a NULL oid



svn path=/trunk/; revision=16553
2005-11-20 02:48:26 +00:00
Anders Broman
15e0ccf887 Use VendorID from sminmpec.
svn path=/trunk/; revision=16552
2005-11-19 15:59:30 +00:00
Ronnie Sahlberg
e2ef8b1632 fix for bug 570, the domain name is present in sessionsetupandx replies even for wc==4
svn path=/trunk/; revision=16550
2005-11-19 10:27:16 +00:00
Ronnie Sahlberg
a54d3e960b fix bug 588 and friends
svn path=/trunk/; revision=16549
2005-11-19 10:03:16 +00:00
Ronnie Sahlberg
49499c1b96 the 4 bytes in MxAc are access maxk not file attributes
svn path=/trunk/; revision=16548
2005-11-19 03:19:56 +00:00
Ronnie Sahlberg
7e45fb1755 prettification
svn path=/trunk/; revision=16547
2005-11-19 03:15:39 +00:00
Ronnie Sahlberg
6de5370105 decode the extra blob at the end of Create calls
svn path=/trunk/; revision=16546
2005-11-19 02:24:22 +00:00
Ronnie Sahlberg
ad65921598 update to SMB2_FILE_ALL_INFO dissection
prettify dissection of some strings


svn path=/trunk/; revision=16545
2005-11-18 21:59:05 +00:00
Guy Harris
12ae3bba4d Don't crash if a null OID pointer is passed to
"call_ber_oid_callback()".  (Arguably, the caller of
"call_ber_oid_callback()" should check for that, and report that a
presumably-required field is missing.)

svn path=/trunk/; revision=16544
2005-11-18 10:06:47 +00:00
Ronnie Sahlberg
3f047721a3 dissect some more infolevels
svn path=/trunk/; revision=16543
2005-11-18 07:31:18 +00:00
Ronnie Sahlberg
3afd94f519 add dissection of more infolevels for smb2
svn path=/trunk/; revision=16539
2005-11-17 22:30:19 +00:00
Ronnie Sahlberg
e5b6a6426b add dissection of fs_[objectid|full_size]_info
svn path=/trunk/; revision=16538
2005-11-17 14:22:11 +00:00
Ronnie Sahlberg
6ac4fe9a25 add dissection of fs quota info
svn path=/trunk/; revision=16537
2005-11-17 14:00:07 +00:00
Ronnie Sahlberg
1b809cfcd7 add full dissection of fs_[volume|size|device|atrtibute]_info
svn path=/trunk/; revision=16536
2005-11-17 13:43:22 +00:00
Ronnie Sahlberg
675d0862b5 add dissection of the security descriptor mask
svn path=/trunk/; revision=16535
2005-11-17 12:30:36 +00:00
Guy Harris
e2c9bcf703 The SHA-1 routines now take const pointers; don't cast away constness.
tvb_get_ptr() returns a "const guint8 *"; don't bother casting its
return value to "const guint8 *".

"cms_verify_msg_digest()" can be passed a const pointer for "alg"; make
its argument a "const char *".

svn path=/trunk/; revision=16534
2005-11-17 11:50:36 +00:00
Guy Harris
148d700e01 Get rid of some char * vs. const char * warnings, and declare a function
with no arguments as such.

svn path=/trunk/; revision=16532
2005-11-17 11:16:37 +00:00
Guy Harris
b018becab3 Get rid of an unused variable.
svn path=/trunk/; revision=16531
2005-11-17 11:15:26 +00:00
Ronnie Sahlberg
57c5bffa85 decode the create flags
svn path=/trunk/; revision=16529
2005-11-17 08:21:53 +00:00
Ronnie Sahlberg
b8cb0d07b8 add more updates from the wiki
svn path=/trunk/; revision=16528
2005-11-17 07:32:17 +00:00
Ronnie Sahlberg
5d24bf785a start updating the dissector from wiki updates done
svn path=/trunk/; revision=16527
2005-11-17 07:04:41 +00:00
Guy Harris
7586ab64db Squelch some const vs. non-const warnings.
svn path=/trunk/; revision=16525
2005-11-17 05:02:30 +00:00
Guy Harris
0c8be0fab6 Include <epan/emem.h> to declare ep_alloc().
svn path=/trunk/; revision=16524
2005-11-17 04:54:25 +00:00
Guy Harris
393ac45d83 "dissect_ber_object_identifier_str" expects a "const char **" as its
last argument; make it so.

svn path=/trunk/; revision=16523
2005-11-17 04:47:41 +00:00
Ronnie Sahlberg
d71982fbbb add the rest of Graeme Lunts patch
svn path=/trunk/; revision=16520
2005-11-16 23:17:21 +00:00
Anders Broman
7c8d0dad93 Decose APN messages correctly.
svn path=/trunk/; revision=16514
2005-11-16 20:03:09 +00:00
Ronnie Sahlberg
04f785f836 add dissection of buffercode
according to
wiki.etehreal.com/SMB2/BufferCode



svn path=/trunk/; revision=16512
2005-11-16 10:59:41 +00:00
Ronnie Sahlberg
898dc49980 add a simple g_strlcat define in strutil for gtk==1 where this symbol does not exist
svn path=/trunk/; revision=16511
2005-11-16 09:27:43 +00:00
Anders Broman
6c466a1437 Display AVP:s of Dimater type Unsigned32 as such even when they have "value translation".
svn path=/trunk/; revision=16510
2005-11-16 07:21:48 +00:00
Anders Broman
00131b0f1e From Greg Morris;
The following diff (based on current SVN) fixes the following...
1. Adds additional return value 0xa901 
"Invalid Data Type Flag (outdated return value - replaced in NSS as 0x89aa error)" 
for 87/xx NCP's.
2. Fixes decode for NCP 87/20 reply packets
3. Fixes decode for NCP 89/53 request packets

svn path=/trunk/; revision=16509
2005-11-16 07:16:34 +00:00
Anders Broman
c33182b898 From Graeme Lunt:
Here are a number of small patches for asn1 based dissectors:

acse:
  release request/response column information (many X.400/X.500 unbinds are
empty)
  "standardised" PNAME to "ISO 8650-1 OSI Association Control Service"
  fix for crash when using EXTERNAL dissector

rtse:
  column information when attempting a resume

x509if:
  generation of LDAP-style DNs from RDNSequences 
  new function x509if_get_last_dn() to get the last DN generated.

x509af:
  DSS parameters
  certificate extension naming
  subject naming of certificate

x509sat:
  Guide syntax (as SET now supported)
  PDU exports.
  
cms:
  verification of message digest attribute (SHA-1 and MD5)
  
ess:
  enumerated/restrictive/permissive/informative security categories

x411:
  generation of string encoding of X.400 addresses, trace information and message identifiers.

s4406:
  separate types for primary and copy precedence to allow better filtering (e.g. primary precedence = flash)
  priority-level-qualifier


svn path=/trunk/; revision=16508
2005-11-16 07:13:12 +00:00
Guy Harris
893ad69c74 Handle OSPF V3 prefixes similarly to the way other IPv6 prefixes are
handled (but not the same, as the prefix length in OSPF is rounded up to
a multiple of 4 bytes, not just a byte).  This simplifies the code, and
keeps us from overflowing the buffer we allocate if the prefix length is
> 128 (we now just report that as an error).

svn path=/trunk/; revision=16507
2005-11-15 10:56:18 +00:00
Ronnie Sahlberg
5bc41c76b0 add decoding of extended attributes
svn path=/trunk/; revision=16506
2005-11-15 08:49:34 +00:00
Tomas Kukosa
97584210fb improvements in value constraint support
- NO_BOUND is defined instead of usage -1
- negative bound is handled properly for INTEGER

svn path=/trunk/; revision=16505
2005-11-14 13:05:17 +00:00
Ronnie Sahlberg
f4e55c1155 move the include of emem.h a bit further down
so it does know what size_t is when emem is included.

i needed this change to get it to compile on my box


svn path=/trunk/; revision=16504
2005-11-14 13:02:23 +00:00
Ronnie Sahlberg
ae6cc5a6f2 some more infol;evels decoded
svn path=/trunk/; revision=16503
2005-11-14 12:06:39 +00:00
Guy Harris
04b5d191ac Fix the declaration of gssapi_lookup_oid_str() to match its definition.
svn path=/trunk/; revision=16502
2005-11-14 10:49:13 +00:00
Tomas Kukosa
3b770d5c7c - dissect_ber_object_identifier() returns value as tvb
- new dissect_ber_object_identifier_str() function
 - BER dissectors adapted and regenerated

svn path=/trunk/; revision=16501
2005-11-14 10:02:31 +00:00
Anders Broman
0496eb5dca Fix Bug 566 H.263: in display filters, ftype bit masked by sbit
svn path=/trunk/; revision=16500
2005-11-13 20:53:24 +00:00
Anders Broman
42ed3aede8 Fix the lenght calculation.
svn path=/trunk/; revision=16499
2005-11-13 18:09:44 +00:00
Ronnie Sahlberg
5244ca9cdd prettify read/write
svn path=/trunk/; revision=16497
2005-11-12 23:17:06 +00:00
Ronnie Sahlberg
6124eac224 prettify smb2
always put the filename in col_info if it is known

for getinfo/setinfo  put the class/level in colinfo as well.


this makes it very easy to see in the packet summary which file a icommand applies to and what kind of info is requested



svn path=/trunk/; revision=16496
2005-11-12 23:05:29 +00:00
Ronnie Sahlberg
fafd0aeb49 from martin marthieson
updates to rlogin

Hi, this patch:
- uses value_string for control message field
- doesn't use a single global time value to mark start of all conversations!
- corrects client-user-name, server-user-name order in initial user-info
message
- adds data (text input/output) into the protocol tree
- makes lots more things filterable
- improves info column text (always calls rlogin_display() now)
- cleans up some whitespace



svn path=/trunk/; revision=16495
2005-11-12 22:05:53 +00:00
Ronnie Sahlberg
7d0ed23854 from Laurent Constantin
updates to smb
A patch for packet-smb.c is attached:
 - it improves timeout decoding
 - it defines common NT transaction IOCTL functions
 - it corrects decoding of resume key in search queries
 - it defines a new function dissect_4_2_16_8_unsure() to replace
   dissect_4_2_16_8(). I'm unsure if it is correct. As said in
   comments, it works for me, but I find strange that nobody noticed
   dissect_4_2_16_8() was wrong. So, it is between "#if 0".
   Someone else should confirm dissect_4_2_16_8_unsure() works
   before activating it.



svn path=/trunk/; revision=16494
2005-11-12 21:56:02 +00:00
Ronnie Sahlberg
5940b03d12 if we get the error BUTTER_TOO_SMALL coming back in a getinfo reply the data will just be 4 bytes and will contain the required buffer size
svn path=/trunk/; revision=16493
2005-11-12 21:14:17 +00:00
Ronnie Sahlberg
0097584f2e the timestamps of negprot are known
svn path=/trunk/; revision=16491
2005-11-12 11:42:06 +00:00
Ronnie Sahlberg
15f13b23a0 improve the dissection of Create and fill in most of the fields
svn path=/trunk/; revision=16490
2005-11-12 11:27:34 +00:00
Ulf Lamping
a78d2fbc63 (on behalf of the PROFIBUS Nutzerorganisation e.V. Deutschland):
add some PROFINET specific LLDP extensions

svn path=/trunk/; revision=16488
2005-11-12 10:09:02 +00:00
Ronnie Sahlberg
8b68d91039 dissect more of Close request/response
svn path=/trunk/; revision=16487
2005-11-12 10:07:12 +00:00
Ronnie Sahlberg
728323e533 add initial decode of dcerpc over smb2
it does not yet multiplex between different files   but it is better than nothing


svn path=/trunk/; revision=16484
2005-11-12 08:48:02 +00:00
Ronnie Sahlberg
bc6cb5d6ad in order to handle dcerpc over smb2 later and to make the heuristics stronger for determining what might and what might not be a pipe
add   TID tracking.   for all TreeConnect requests/resposnes seen,   store the name->tid mapping and other metadata.


as a freebee    the disswection of the tid in the ehader is aware of this table so when a tid value is dissected in the header and we known the name for this tid   then put it in an expansion below the tid.




svn path=/trunk/; revision=16483
2005-11-12 07:45:01 +00:00
Ronnie Sahlberg
9ca683a249 start separating things out into structures
we can regenerate from the header
we need to remember between request/response
we need on a per conersation bases

to reduce the amount of data we store in the per req/resp  pair  since there will be many of them and we want that struct as small as possible.




svn path=/trunk/; revision=16482
2005-11-12 04:23:52 +00:00
Ronnie Sahlberg
9f6c2b3ed5 a guid is only 16 bytes so dont highlight 20 bytes in the hexpane
svn path=/trunk/; revision=16481
2005-11-12 01:21:43 +00:00
Jörg Mayer
1baf01d966 Update to samba 11681
svn path=/trunk/; revision=16480
2005-11-12 00:42:45 +00:00
Jörg Mayer
66df615702 Propset svn:...
svn path=/trunk/; revision=16478
2005-11-12 00:25:27 +00:00
Ronnie Sahlberg
ebcdb60414 in smb2 the file handles are not normal context handles they are just a guid
make them a guid in smb2 dissector and make tim pottesr excellent conmtext handle tracking also able to do the same thing for GUIDs


( a context handle is just a 32 biut attribute field followed by a uuid anyway)




svn path=/trunk/; revision=16477
2005-11-11 22:12:10 +00:00
Anders Broman
260853d5b4 fix:
Malformed packet IAM, Calling party number 
Application transport -  some code clean up. 
bug 551 Nor Med PC ethereal-bugs@ethereal.com NEW SS7, ISUP, IAM-signal, malformed packet (not) 
Bug 554 Min Low PC ethereal-bugs@ethereal.com NEW ETSI codec dissection error in BICC 

svn path=/trunk/; revision=16476
2005-11-11 22:05:21 +00:00
Ronnie Sahlberg
574717c28d start decoding notify requests
svn path=/trunk/; revision=16475
2005-11-11 12:49:42 +00:00
Ronnie Sahlberg
756520be42 dissect READ packets
svn path=/trunk/; revision=16474
2005-11-11 11:35:10 +00:00
Ronnie Sahlberg
6250873db4 write offset is 32 bits so is write length
svn path=/trunk/; revision=16473
2005-11-11 11:14:14 +00:00
Ronnie Sahlberg
eae75ff28b add allocation size
svn path=/trunk/; revision=16472
2005-11-11 11:03:00 +00:00
Ronnie Sahlberg
ec327c0a14 add decode of endoffile for file infolevel 0x12
svn path=/trunk/; revision=16471
2005-11-11 10:26:36 +00:00
Ronnie Sahlberg
b358df838c class:3 level:0 is just a normal nt security descvriptor
svn path=/trunk/; revision=16470
2005-11-11 09:09:31 +00:00
Ronnie Sahlberg
e85060f171 opcode 0x0c is Cancel
svn path=/trunk/; revision=16469
2005-11-11 08:23:11 +00:00
Ronnie Sahlberg
1a6338e9d5 opcode 0x0f is Notify
svn path=/trunk/; revision=16468
2005-11-11 08:14:59 +00:00
Ronnie Sahlberg
deadd3c93f SMB2_FILE_INFO_0a structure which is used with SetInfo to rename a file
svn path=/trunk/; revision=16467
2005-11-11 08:04:32 +00:00
Ronnie Sahlberg
8e2ab17da8 dont dereference null pointers
svn path=/trunk/; revision=16466
2005-11-11 07:49:13 +00:00
Ronnie Sahlberg
886e149907 the uid is 64 bits
svn path=/trunk/; revision=16465
2005-11-11 07:41:09 +00:00
Ronnie Sahlberg
078ef72ee4 break out some structures into packet-smb2.h so we can start tapping in later
we will do service-response-time   statistics before other inferior products have even noticed a new protocol is in town.




svn path=/trunk/; revision=16463
2005-11-11 03:50:53 +00:00
Gerald Combs
66296cdf17 Don't use null values for blurbs in header fields.
svn path=/trunk/; revision=16462
2005-11-11 00:04:37 +00:00
Ronnie Sahlberg
46f0739541 start decoding SMB2_FILE_INFO_22
svn path=/trunk/; revision=16461
2005-11-10 22:46:10 +00:00
Ronnie Sahlberg
8d54b19302 from albert chin
dont use c++ style comments


svn path=/trunk/; revision=16459
2005-11-10 21:50:30 +00:00
Ronnie Sahlberg
b78b018dbc use the policy_handle framework for dcerpc to trach which frame a policy handle is opened in and which one it is closed in.
also attempt to store a name for it   like File:foo


but this does not work yet.




svn path=/trunk/; revision=16458
2005-11-10 10:08:32 +00:00
Guy Harris
07d0b328c7 Include <ctype.h> to declare "isprint()".
svn path=/trunk/; revision=16456
2005-11-10 07:26:30 +00:00
Guy Harris
13a24cc310 There's no guarantee that BYTE_ORDER is defined as anything useful, and
the BYTE_ORDER == BIG_ENDIAN values for FMIP_HI_FLAG_ASSIGNED and
FMIP_HI_FLAG_BUFFER are bogus for the way they're used anyway (they're
used to check bits in a one-byte value), so throw away those values, and
get rid of the leading 00 in the BYTE_ORDER == LITTLE_ENDIAN values.

svn path=/trunk/; revision=16455
2005-11-10 03:16:25 +00:00
Anders Broman
f86d2d458c From Andrei Emeltchenko
I have added new RTCP POC fields as OMA standard says. With some additions. 

svn path=/trunk/; revision=16452
2005-11-09 21:50:39 +00:00
Ronnie Sahlberg
4acbd6bcc9 add initial decode for SMB2_FS_INFO_01
svn path=/trunk/; revision=16451
2005-11-09 21:06:06 +00:00
Ronnie Sahlberg
d0a574078d add decode of SMB2_FS_INFO_05
svn path=/trunk/; revision=16450
2005-11-09 20:57:56 +00:00
Ronnie Sahlberg
005fbb5304 add decoding of the create request
svn path=/trunk/; revision=16449
2005-11-09 20:37:49 +00:00
Gerald Combs
f9d4caf148 From Stig Bjørlykke:
I just learned how easy it is to reassemble multiple UDP packets, so  I
had to implement this for the P_Mul protocol :)

This patch fixes:
* Reassemble multiple data packets
* Add packet length check
* Fix for PDU type in tree entry

svn path=/trunk/; revision=16448
2005-11-09 16:01:35 +00:00
Ronnie Sahlberg
8ba0aaf3a9 some more of the never ending stream of smb2 updates
svn path=/trunk/; revision=16447
2005-11-09 13:19:57 +00:00
Ronnie Sahlberg
2c0b087fde add decode of Write commands
svn path=/trunk/; revision=16446
2005-11-09 10:18:31 +00:00
Ronnie Sahlberg
d94d156a7a add support for Close and the new guess that the FID is present in the Find request.
Ohoy sailor,    we have spotted the concept of current working directory.

does this mean we also get rid of the silly 200-256 byte path length limitation?




svn path=/trunk/; revision=16445
2005-11-09 09:29:41 +00:00
Ronnie Sahlberg
a204fdaea7 dissect more of the SMB2/Close function
svn path=/trunk/; revision=16444
2005-11-09 09:14:11 +00:00
Anders Broman
2044d02bcb Move def of subid_t to format-oid.h don't include asn1.h in cops any more.
svn path=/trunk/; revision=16440
2005-11-08 22:18:06 +00:00
Ronnie Sahlberg
53ab6ed970 start dissecting SMB2_FILE_INFO_12
svn path=/trunk/; revision=16439
2005-11-08 21:16:36 +00:00
Gerald Combs
781f8051e5 From Peter Kovar: Fix the typo referenced in bug 577.
svn path=/trunk/; revision=16438
2005-11-08 15:28:15 +00:00
Gerald Combs
f2d2a624d8 You don't tug on Superman's cape. You don't spit into the wind.
You don't pull the mask off the old Lone Ranger, and you don't
overflow a guint8.  Fixes the infinite loop in bug 576.

Fix up whitespace.  Add an entry to the release notes.  Apologies
to Jim Croce.

svn path=/trunk/; revision=16436
2005-11-08 15:22:38 +00:00
Ronnie Sahlberg
6f2482bc9f dissect some of GetInfo requests and Replies
svn path=/trunk/; revision=16435
2005-11-08 09:20:04 +00:00
Ronnie Sahlberg
f8b4f34276 add a comment to keep the dissector in sync with the wiki
rename functions 0x10 and 0x11 to follow the names in the wiki



svn path=/trunk/; revision=16434
2005-11-08 08:53:55 +00:00
Ronnie Sahlberg
b46a5611ed add a pointer to the wiki for documentation of this protocol
svn path=/trunk/; revision=16433
2005-11-08 08:41:42 +00:00
Ronnie Sahlberg
40b13e337f add dissection of the known parts of negotiate protocol
svn path=/trunk/; revision=16432
2005-11-08 08:40:32 +00:00
Guy Harris
af00219b1b Use "proto_tree_add_item()", not "proto_tree_add_bytes()", if you're
just supplying the result of "tvb_get_ptr()" with the same tvbuff,
offset, and length as the byte array.

Get rid of an unused variable.

Set svn:keywords and svn:eol-style appropriately.

svn path=/trunk/; revision=16430
2005-11-07 22:50:34 +00:00
Gerald Combs
b1b1c50f1e Fix an ftsanity.py error.
svn path=/trunk/; revision=16429
2005-11-07 21:58:27 +00:00
Gerald Combs
062621786f Fix bug 575, from Menno Andriesse:
In two functions that call proto_tree_add_bytes I forgot the
  'tvb_get_ptr' function, the argument was 'FALSE' instead.  This gave
  a predictable 'NULL' pointer bug...

Fix an ftsanity.py error.  Fixup whitespace.


svn path=/trunk/; revision=16428
2005-11-07 21:54:08 +00:00
Ronnie Sahlberg
66d99c3eed begin dissecting the Find response packet
svn path=/trunk/; revision=16427
2005-11-07 21:19:59 +00:00
Guy Harris
6c521f90f5 The return value of tvb_get_ptr() is a const ptr; assign it to a const
ptr.

The answer to the question
"??????????????????????????????????????????????????????????????????" is
"No - the return value of tvb_get_ptr() is a reference, not an allocated
copy, and it cannot be freed and doesn't need to be freed."

svn path=/trunk/; revision=16426
2005-11-07 21:10:52 +00:00
Ronnie Sahlberg
39ecd87667 dissect the treeconnect request packet
svn path=/trunk/; revision=16425
2005-11-07 21:00:09 +00:00
Ronnie Sahlberg
8012fd3cd9 add request response matching so we can start passing info levels around from request to response and start dissecting some of the commands
svn path=/trunk/; revision=16424
2005-11-07 20:32:27 +00:00
Anders Broman
708d793e63 Display MSW and LSW as NTP timestamp as well.
svn path=/trunk/; revision=16421
2005-11-07 19:40:55 +00:00
Anders Broman
a9a63056df Dissect NSAP
svn path=/trunk/; revision=16420
2005-11-07 19:39:38 +00:00
Anders Broman
b2ec8c9ca4 Bug fix to dissection of NSAP E164 Country codes
svn path=/trunk/; revision=16419
2005-11-07 19:39:02 +00:00
Anders Broman
199214844b Martin Hill has examined packet-dec-dnart.c and found some errors and made some improvements.
svn path=/trunk/; revision=16418
2005-11-07 19:37:10 +00:00
Anders Broman
8586ce47d2 From Stig Bjørlykke
A new dissector for P_Mul (ACP142) http://www.jcs.mil/j6/cceb/acps/Acp142.pdf

svn path=/trunk/; revision=16417
2005-11-07 19:35:48 +00:00
Ronnie Sahlberg
575907f024 put the error code in col info
svn path=/trunk/; revision=16414
2005-11-07 08:57:04 +00:00
Ronnie Sahlberg
0b01ed88cb smb2 updates, most of the header is now decoded properly
svn path=/trunk/; revision=16413
2005-11-07 08:39:23 +00:00
Ulf Lamping
c3187174bf replace *a lot* of file related calls by their GLib counterparts. This is necessary for the switch to GTK 2.6 (at least on WIN32).
to do this, I've added file_util.h to wiretap (would file_compat.h be a better name?), and provide compat_macros like eth_open() instead of open(). While at it, move other file related things there, like #include <io.h>, definition of O_BINARY and alike, so it's all in one place.

deleted related things from config.h.win32

As of these massive changes, I'm almost certain that this will break the Unix build. I'll keep an eye on the buildbot so hopefully everything is working again soon.

svn path=/trunk/; revision=16403
2005-11-06 22:43:25 +00:00
Ronnie Sahlberg
4e954caec3 dissect some of the session setup and the security blob for smb2
svn path=/trunk/; revision=16402
2005-11-06 13:04:57 +00:00
Ronnie Sahlberg
3924f02631 dissect the smb2 request/response flag
svn path=/trunk/; revision=16401
2005-11-06 11:55:17 +00:00
Ronnie Sahlberg
f449406fee dissect the smb2 tree id
svn path=/trunk/; revision=16400
2005-11-06 11:46:10 +00:00
Ronnie Sahlberg
c44a9aab72 some smb2 updates
svn path=/trunk/; revision=16399
2005-11-06 05:32:01 +00:00
Ronnie Sahlberg
dcfb3758cc add an empty dissector for SMB2
svn path=/trunk/; revision=16398
2005-11-06 04:18:13 +00:00
Anders Broman
2916d12d76 Packet-amr Register as "AMR" not "amr".
Add Dynamic PT:s mimestring  to rtp_info if avalable.
Use Dynamic PT:s mime string to find clock rate.

svn path=/trunk/; revision=16397
2005-11-05 21:38:22 +00:00
Ronnie Sahlberg
4a92dc0bc9 get rid of some strcat
svn path=/trunk/; revision=16396
2005-11-05 20:32:33 +00:00
Ronnie Sahlberg
c7aee8324f get rid of an array and dissect a bitmask properly
get rid of some strcat()s


svn path=/trunk/; revision=16395
2005-11-05 02:03:21 +00:00
Ronnie Sahlberg
b6ae69cfcf remove an array and some strcat from ncp
svn path=/trunk/; revision=16394
2005-11-05 01:23:06 +00:00
Ronnie Sahlberg
b1b51ed1b0 remove an array and the remaining strcat from ospf
svn path=/trunk/; revision=16393
2005-11-04 23:03:26 +00:00
Ronnie Sahlberg
909764f6b2 get rid of some strcat and a stackbased array
svn path=/trunk/; revision=16392
2005-11-04 21:55:23 +00:00
Ronnie Sahlberg
e07f132280 from Metze
some winsrepl updates


svn path=/trunk/; revision=16391
2005-11-04 21:22:21 +00:00
Ronnie Sahlberg
0cafcb3e50 From Menno Andriesse
New protocol : STANAG 5066

I changed it from being a plugin to a builtin dissector
and also changed a couple of small bugs


svn path=/trunk/; revision=16390
2005-11-04 21:14:33 +00:00
Anders Broman
857077708b Fix a typo and change TLLI representation to HEX.
svn path=/trunk/; revision=16389
2005-11-03 19:14:52 +00:00
Guy Harris
2447b390d2 "dissect_cmp_http()" doesn't check for a valid packet (it doesn't need
to, it's selected by the media-type string, not something unreliable
such as a port number), and doesn't return anything, so give it the
right type and don't declare it as a "new-style" dissector.

svn path=/trunk/; revision=16387
2005-11-03 04:35:39 +00:00
Guy Harris
81b9490d4c Get rid of (valid) warning about uninitialized variable, and clean up
indentation.

svn path=/trunk/; revision=16386
2005-11-03 04:33:51 +00:00
Luis Ontanon
ff20ed3e10 Some cleanup,
- Improve expert info
- Remove the debug tree (one warning unused function, will go)
- Make Sure Pending messages have a cmdmsg (and so a colinfo label)


svn path=/trunk/; revision=16383
2005-11-02 23:01:15 +00:00
Anders Broman
7cfbacfb79 Handle a optional parameter length of zero.
svn path=/trunk/; revision=16382
2005-11-02 21:49:24 +00:00
Anders Broman
9fac8a5601 From David Wysochanski fix a typo.
svn path=/trunk/; revision=16380
2005-11-02 20:28:58 +00:00
Anders Broman
098fcb0d2b Use dissect_sip_tcp_heur for TCP to make re-assembly work on hueristics.
svn path=/trunk/; revision=16379
2005-11-02 20:24:42 +00:00
Luis Ontanon
b10fcd969a - terminate a value_string
- wildcard field subdissector


svn path=/trunk/; revision=16378
2005-11-02 19:46:47 +00:00
Anders Broman
6eb18470f8 From Tim
A small patch for camel and inap, where the linkedid doesn't get dissected correctly in camel or inap
and some tidy up in the camel asn.1 which now compiles with no warnings.

also fix the copy_file target (/y)

svn path=/trunk/; revision=16376
2005-11-02 07:51:55 +00:00
Luis Ontanon
c5ff846c22 - add a counter for pending messages
- do not use a value string for context ids
- remove the plugin registration as it is not supposedd to be a plugin


svn path=/trunk/; revision=16375
2005-11-01 21:09:28 +00:00
Anders Broman
e91462a7d8 Add "application/resource-lists+xml" to xml types
svn path=/trunk/; revision=16374
2005-11-01 19:50:25 +00:00
Olivier Biot
e931881626 Use g_print() instead of fprintf() to write messages to the debug console.
svn path=/trunk/; revision=16373
2005-11-01 18:18:46 +00:00
Luis Ontanon
f100a33216 - Embryonic Transaction & Context tracing
svn path=/trunk/; revision=16372
2005-11-01 16:28:13 +00:00
Guy Harris
552ee02a93 Get rid of an unused variable, and declare a variable that points into a
tvbuff's data const.

svn path=/trunk/; revision=16368
2005-10-31 02:21:02 +00:00
Jörg Mayer
942f7fce66 - Split dissect_wendor_specific_ie into
dissect_vendor_ie_wpawme and dissect_vendor_ie_rsn
- Display the vendor code on the top level of vendor specific IEs
- Make the vendor code of vendor specific IEs filterable
  (wlan_mgt.tag.oui)


svn path=/trunk/; revision=16363
2005-10-30 09:14:38 +00:00
Jörg Mayer
c9300eeb05 - Remove trailing whitespace
- IS_WEP is now (11i) called IS_PROTECTED
- Remove duplicate (and commented out) code
- Add reson code 0x24 to reason_codes


svn path=/trunk/; revision=16362
2005-10-30 09:13:27 +00:00