Commit graph

1596 commits

Author SHA1 Message Date
Evan Huus
2a50c31800 Add a section to the wmem README about testing.
svn path=/trunk/; revision=48990
2013-04-22 21:29:57 +00:00
Jörg Mayer
6c137314aa Add col. pseudo dissector to thsark manpage.
svn path=/trunk/; revision=48931
2013-04-19 16:36:52 +00:00
Jeff Morriss
5c85df8a93 Add packet-PROTOABBREV.c to source distribution. Reorder some entries.
svn path=/trunk/; revision=48878
2013-04-16 13:57:06 +00:00
Evan Huus
4e3c836273 Major cleanup of skeleton dissector and related bits of README.developer.
Changes of note:
- Removed the 'Copied from' notice, it's only relevant if they're *not* using
  the skeleton code. Added a paragraph to README.developer instead.
- Exorcised all references to if (tree) and placed them in their own section
  at the bottom as an optimization. Hopefully this will be less confusing.

svn path=/trunk/; revision=48861
2013-04-15 21:43:40 +00:00
Evan Huus
bb2820deb0 Put the skeleton sample code from README.developer into its own file - it's
much easier to edit/maintain that way as well as much easier to copy for a
new dissector. Explicitly don't set the SVN id tag since this is a template.

svn path=/trunk/; revision=48860
2013-04-15 20:56:55 +00:00
Martin Kaiser
ff72006da8 list the new option -k in the capinfos manpage
svn path=/trunk/; revision=48838
2013-04-13 17:52:52 +00:00
Chris Maynard
4ac2441d7c Coalesce "-G fields2" and "-G fields3" into "-G fields", as discussed on -dev.
See: http://www.wireshark.org/lists/wireshark-dev/201304/msg00015.html

svn path=/trunk/; revision=48753
2013-04-05 21:58:43 +00:00
Chris Maynard
2239e7618d As forewarned at http://www.wireshark.org/lists/wireshark-dev/201304/msg00009.html, change the default snaplen to 65KiB-1. While we're at it, push the max packet size to that value as well.
Also: convert the few tabs to spaces and add modelines.


svn path=/trunk/; revision=48738
2013-04-04 19:48:20 +00:00
Evan Huus
2fba8c0f9d Update -2, -R and -Y to behave consistently as per the concensus reached on
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8223

Mention the new -Y flag and associated changes in the release notes.

svn path=/trunk/; revision=48654
2013-03-30 15:38:03 +00:00
Evan Huus
6fa584b0db Move wireshark's display filter flag to -Y for consistency with tshark.
Part of https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8223

svn path=/trunk/; revision=48653
2013-03-30 12:15:42 +00:00
Martin Kaiser
62075c88fb list the new file format on the manpage
svn path=/trunk/; revision=48648
2013-03-30 10:21:19 +00:00
Chris Maynard
07b35a96b7 Add some missing tvb_get_'s, proto_tree_add_'s, fix args and change all little_endian's to encoding. Some detailed descriptions are still missing though.
svn path=/trunk/; revision=48629
2013-03-28 20:22:47 +00:00
Evan Huus
d935a280e3 From Hadriel Kaplan via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8223
Add a 2-pass display-filter flag to tshark so that reassembly and other forward-
looking dissections can be used with filters.

It's a bit of a hack, but this entire area of 2-pass analysis etc. is a giant
pile of hacks to begin with and needs cleaning up. For now just having this
feature is a big enough win.

svn path=/trunk/; revision=48589
2013-03-27 17:14:42 +00:00
Chris Maynard
63b578b182 Updated tshark man page and release notes to document the change in '-x' behavior with r45715.
svn path=/trunk/; revision=48456
2013-03-21 17:30:35 +00:00
Evan Huus
8de4b82fcd Document the wmem override environment variable in the man pages, and improve
README.wmem in a couple of places.

svn path=/trunk/; revision=48251
2013-03-11 19:17:26 +00:00
Jeff Morriss
965cb6384e Followup to r48218: remove documentation of the WIRESHARK_DEBUG_USE_SLICES environment variable.
svn path=/trunk/; revision=48249
2013-03-11 18:04:46 +00:00
Michael Tüxen
da07699dd3 Make the memory limit (in bytes or packets) used for storing packets
configurable via command line options and print specific drop numbers
at the end. This allows to tune the buffering when using multiple
threads.
This also fixes a logic arrow in enforcing the limits.
The patch for the enhanced counters is from Anders Broman.


svn path=/trunk/; revision=48223
2013-03-10 11:57:40 +00:00
Michael Tüxen
0bbf82a38a Add -t to synopsis.
svn path=/trunk/; revision=48221
2013-03-10 11:40:46 +00:00
Evan Huus
aafe8b18e9 Remove the wmem slab. It was an optimization mimicking the emem slab
(removed in r48218) which did nothing particularly useful. Also lets us remove
another debugging environment variable.

svn path=/trunk/; revision=48219
2013-03-09 20:16:33 +00:00
Jeff Morriss
c6231cc4c4 Add asn2deb.pod and idl2deb.pod to the source distribution.
svn path=/trunk/; revision=48136
2013-03-06 17:16:16 +00:00
Jeff Morriss
794a8b03e6 Don't use (GNU-specific) pattern rules: use old-fashioned suffix rules instead.
Since there's now a suffix rule for the .1 man pages, don't create explicit
rules for them.  (Leave a comment explaining why the .html and .4 rules need
to stay.)

Simplify CLEANFILES: there's no need to list each man page, just remove them
all.

svn path=/trunk/; revision=48135
2013-03-06 16:33:01 +00:00
Balint Reczey
3047a570b0 Fix distcheck in autotools based builds
svn path=/trunk/; revision=48134
2013-03-06 14:46:15 +00:00
Balint Reczey
a8f543b56b Merge asn2deb and idl2deb from official Debian package
svn path=/trunk/; revision=48133
2013-03-06 13:31:08 +00:00
Evan Huus
8569907b9f From Steve Magnani via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8339
This patch adds a new public API, proto_tree_add_bitmask_len(), identical to
proto_tree_add_bitmask() but using a caller-supplied length rather than an
inferred one. The underlying proto_item_add_bitmask_tree() code is modified
to display only fields for which all defined bits are available, and to
ignore bits that have no corresponding defined field ("forward compatibility"
cases).

From me: minor edits, see the bug for more details.

svn path=/trunk/; revision=48049
2013-03-04 14:18:18 +00:00
Balint Reczey
1ebdb2e521 Export libwireshark symbols using WS_DLL_PUBLIC define
Also remove old WS_VAR_IMPORT define and related Makefile magic
everywhere in the project.

svn path=/trunk/; revision=47992
2013-03-01 23:53:11 +00:00
Jeff Morriss
018ba4ea65 Default capture buffer size is now 2MB.
svn path=/trunk/; revision=47937
2013-02-28 13:59:47 +00:00
Gerald Combs
0645396514 Print human-readable statistics by default. Raw values can be printed
using "-M". Based on a suggestion by Hansang Bae.

svn path=/trunk/; revision=47900
2013-02-26 06:40:25 +00:00
Michael Mann
8c3f3d6cee Add README for Lua
From Hadriel Kaplan, part of bug 8393 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8393)

svn path=/trunk/; revision=47875
2013-02-25 16:37:34 +00:00
Alexis La Goutte
491104bf68 Update README.qt with last change in qtshark build
svn path=/trunk/; revision=47836
2013-02-23 11:21:11 +00:00
Martin Kaiser
29de8baed5 mention gcrypt wrapper in README.developer
svn path=/trunk/; revision=47812
2013-02-21 22:24:43 +00:00
Chris Maynard
503cab9ff7 From Edwin Groothuis via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8353 : Document http-related '-z' statistics; also add document -z help.
From me: Don't print an error message for "-z help".

(Only "http,stat," is suitable for backport to 1.8 and 1.6)

svn path=/trunk/; revision=47763
2013-02-20 03:06:46 +00:00
Bill Meier
1e6e56c631 Fix two bugs in the example code that I revised.
svn path=/trunk/; revision=47626
2013-02-11 01:31:49 +00:00
Bill Meier
1cb08ae444 Remove a _U_ which I should not have used.
svn path=/trunk/; revision=47625
2013-02-11 01:27:04 +00:00
Chris Maynard
8b65d2759e Well, that didn't work (keyword substitution, that is). Try now.
svn path=/trunk/; revision=47623
2013-02-11 01:02:38 +00:00
Chris Maynard
b13e7f2000 Fix a couple of typos. Set svn properties.
svn path=/trunk/; revision=47622
2013-02-11 00:50:05 +00:00
Bill Meier
32834b7881 Update: Primarily to suggest calling conversation_set_dissector()
once a packet has been identified as being part of
        a particular protocol.

svn path=/trunk/; revision=47621
2013-02-11 00:12:59 +00:00
Evan Huus
63313f0c70 Update wmem docs
svn path=/trunk/; revision=47549
2013-02-08 01:50:35 +00:00
Gerald Combs
c8c168c99a Remove more unnecessary defintions.
svn path=/trunk/; revision=47527
2013-02-06 21:57:16 +00:00
Guy Harris
74b8ef79b1 At least as I read
http://www.gnu.org/software/automake/manual/automake.html#index-g_t_0040code_007bAM_005fDEFAULT_005fVERBOSITY_007d-1018

this is the way to do the silent-rules stuff; using nested variable
expansion in Makefile.am causes warnings when running autogen.sh.

svn path=/trunk/; revision=47474
2013-02-04 18:53:50 +00:00
Gerald Combs
ac42fabbac Prettify the silent build.
svn path=/trunk/; revision=47468
2013-02-04 17:00:02 +00:00
Martin Kaiser
34f58259fa describe the -t option in the dumpcap manpage
(use the same text that dumpcap -V prints)

svn path=/trunk/; revision=47455
2013-02-03 20:01:49 +00:00
Gerald Combs
7187abf120 Add $(AM_V_GEN) in a few more places.
svn path=/trunk/; revision=47434
2013-02-01 22:57:41 +00:00
Gerald Combs
b911a42115 Add support for silent builds.
svn path=/trunk/; revision=47431
2013-02-01 22:06:56 +00:00
Alexis La Goutte
ecb898db1e Fix the dev guide to use the correct indent (Tab => 4 Spaces) and add Modelines info
svn path=/trunk/; revision=47415
2013-02-01 09:22:40 +00:00
Chris Maynard
8ee3809edc Add 2 more verification steps to run in the "Submitting code for your new dissector" section.
svn path=/trunk/; revision=47388
2013-01-31 17:17:34 +00:00
Martin Kaiser
574c0d20d4 add missing case
svn path=/trunk/; revision=47380
2013-01-30 23:25:36 +00:00
Michael Mann
7f3064e6ae Add support in TShark to follow SSL streams
From QA Cafe, bug 8280 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8280)

svn path=/trunk/; revision=47372
2013-01-30 20:36:47 +00:00
Gilbert Ramirez
413e04d2b8 Update WiresharkXML.py to work with Python 2.7.
svn path=/trunk/; revision=47259
2013-01-24 18:16:32 +00:00
Evan Huus
681a3ad5a2 Handle NULL-pointers and 0-lengths in a much simpler allocator-agnostic way,
and document the fact that allocator authors don't have to care.

svn path=/trunk/; revision=47220
2013-01-23 01:11:36 +00:00
Evan Huus
669b98bb5f Rewrite wmem_allocator_simple to track allocations using a GHashTable instead of
a GSList. This permits it to implement the new realloc and free functions. Also
fill in an empty gc function, since there isn't much it can do as far as
garbage-collection goes.

svn path=/trunk/; revision=47169
2013-01-19 19:56:20 +00:00
Evan Huus
21453d5db6 Add three more slots to the wmem allocater definition (not yet implemented
by any particular allocator) and better document the entire structure.

svn path=/trunk/; revision=47163
2013-01-19 16:15:32 +00:00
Jeff Morriss
99ce4232cb As suggested in comments in sl_alloc() and sl_free(): add a new environment
variable (WIRESHARK_DEBUG_USE_SLICES) which turns off the slab allocator and uses
g_slices instead (which can themselves be turned off by setting
G_SLICE=always-malloc).

This makes debugging problems in slab-allocated memory easier to find
(hopefully including https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8197 ).


Set WIRESHARK_DEBUG_USE_SLICES when running Valgrind on *shark.


Remove unused structure member: emem_chunk_t.org.

svn path=/trunk/; revision=47110
2013-01-16 03:34:29 +00:00
Evan Huus
d0b774d0ea Minor documentation tweaks. Add a hash table to the wishlist.
svn path=/trunk/; revision=47101
2013-01-15 18:29:27 +00:00
Evan Huus
bab105d094 Add convenience macros wmem_new and wmem_new0
svn path=/trunk/; revision=46941
2013-01-04 22:11:13 +00:00
Guy Harris
d67586ccc4 Fix description of -p input - show the packet data the same way it's
shown for the previous input format (showing "data" as a pointer is a
bit confusing, as it's just in-line data in the input), and give a more
detailed description of the issues with that file format (the size of
the seconds field of the time stamp is platform-dependent).

svn path=/trunk/; revision=46864
2012-12-30 20:39:45 +00:00
Evan Huus
a19980c23d Replace another instance of emem in README.developer with wmem.
svn path=/trunk/; revision=46847
2012-12-29 20:41:12 +00:00
Evan Huus
5eacf33f1f Update wmem documentation for the new allocator.
Use the strict allocator when fuzzing (at least until the fuzz-bot starts
running everything under valgrind).

svn path=/trunk/; revision=46829
2012-12-28 17:09:07 +00:00
Evan Huus
439eaf4aa5 Add documentation about the environment variable.
svn path=/trunk/; revision=46817
2012-12-27 22:57:05 +00:00
Evan Huus
f88d8e48c1 Update wmem docs to include new type field.
svn path=/trunk/; revision=46815
2012-12-27 22:38:48 +00:00
Michael Tüxen
22df071cef Add support for -D option. The preamble will start with
an I or O indicating the direction of the packet. This
will be stored in the generated file if the pcap-ng
format is used.
Thanks to Jaap for suggesting to integrate this into
the preamble!

svn path=/trunk/; revision=46744
2012-12-25 22:37:40 +00:00
Michael Tüxen
2daea0a310 Add option to suppress duplicate suppression.
svn path=/trunk/; revision=46730
2012-12-25 10:29:22 +00:00
Michael Tüxen
a52b0de406 Add support for writing pcap-ng files by specifying -n as an option.
Leave pcap the default file format for now. The is should be reconsidered
before the next release as it might make sense to use pcapgn as
the default as we do for dumpcap. (We can use the -P option to allow
switching back to pcap).

svn path=/trunk/; revision=46691
2012-12-22 09:43:17 +00:00
Michael Mann
0bdfbe97d4 Add -Q option to TShark to force only "true" errors to stderr. No "status" messages should be included if -Q option is specified. Bug 2881 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2881)
svn path=/trunk/; revision=46627
2012-12-20 01:22:42 +00:00
Evan Huus
5ca70369a0 Add missing wmem strbuf routine to the documentation.
svn path=/trunk/; revision=46625
2012-12-19 23:12:58 +00:00
Jeff Morriss
456acec892 Do a little more to discourage the use of proto_tree_add_text(): don't
use it as example in a few places and point out that if you're not using the
return value to build a subtree, you probably shouldn't be using the function.

svn path=/trunk/; revision=46617
2012-12-19 15:54:40 +00:00
Evan Huus
3739c083bf Implement a basic singly-linked for wmem.
Re-implement the stack as a wrapper for that.

svn path=/trunk/; revision=46607
2012-12-19 01:37:28 +00:00
Evan Huus
5cf858ec52 Dispatch all allocator creations through a single function using an enum to
determine the desired type. This has two advantages over the old way:
 - just one environment variable for valgrind to override in order to guarantee
   that ALL allocators use memory it can track, and just one place to check that
   variable
 - allocator owners no longer have to include headers specific to their
   allocator, allowing them to change allocators without adjusting all their
   #includes

svn path=/trunk/; revision=46604
2012-12-19 00:43:36 +00:00
Evan Huus
8b69e3ee22 Use 'new' instead of 'create' a consistent manner.
svn path=/trunk/; revision=46601
2012-12-18 23:25:11 +00:00
Jeff Morriss
ed87fa9e3b Come down harder on the evils of tvb_get_ptr(): advise not to use it.
Combine the two comments in the Portability section (which largely said the
same thing) on the perils of that function.

Don't suggest it as an option to ensure there are enough bytes in the TVB.

svn path=/trunk/; revision=46590
2012-12-18 16:42:16 +00:00
Jeff Morriss
05ee001d73 Document the "-g" option to dumpcap.
Add that option to tshark, too, and document it.

The option can't be given to Wireshark because the GUI already has a "-g"
(goto packet).

svn path=/trunk/; revision=46513
2012-12-12 02:07:08 +00:00
Evan Huus
7f23c2f8b7 Recommend wmem over emem in the READMEs where possible.
svn path=/trunk/; revision=46472
2012-12-08 21:57:05 +00:00
Martin Kaiser
bc6881157d mention mpeg2 ts in the list of supported file formats
svn path=/trunk/; revision=46450
2012-12-07 21:01:19 +00:00
Evan Huus
d4261b289f Document the new pinfo pool, add a TODO list.
svn path=/trunk/; revision=46332
2012-12-02 17:16:09 +00:00
Gerald Combs
bd19dcd8bf Add an add_hosts_file routine that adds a "hosts" path to an array and
use it in tshark.c instead of read_hosts_file. This lets us use "-H"
multiple times. Make read_hosts_file static.

svn path=/trunk/; revision=46273
2012-11-29 00:32:39 +00:00
Alexis La Goutte
6231bf0d36 Enhance README.qt documentation
svn path=/trunk/; revision=46268
2012-11-28 22:55:52 +00:00
Evan Huus
f4a786638b Add strdup_printf and strdup_vprintf to the wmem string utilities.
svn path=/trunk/; revision=46177
2012-11-25 14:16:50 +00:00
Evan Huus
0d1f86c33e Allocate wmem memory in blocks of 8MB, not 10, because powers of two are nice.
svn path=/trunk/; revision=46175
2012-11-25 13:58:06 +00:00
Evan Huus
67ea470cc8 Add the block allocator to the documentation.
svn path=/trunk/; revision=46169
2012-11-24 18:49:52 +00:00
Jörg Mayer
015cdcef78 Fix the main dissect_PROTO signature
svn path=/trunk/; revision=46046
2012-11-16 20:52:30 +00:00
Evan Huus
ffd9a73b69 More wmem documentation.
svn path=/trunk/; revision=45989
2012-11-10 14:43:27 +00:00
Evan Huus
c3ee061e59 Update wmem README to reflect the fact that wmem_file_scope() now works.
svn path=/trunk/; revision=45978
2012-11-09 00:10:21 +00:00
Jeff Morriss
26a40dd999 editcap does not support the -H and -W options, remove the description of
those options (which had been cut-n-paste from the tshark man page).

For editcap to support these options it would either need to be linked
against libwireshark or the address resolution stuff would need to be moved
from libwireshark to, for example, libwsutil.

svn path=/trunk/; revision=45975
2012-11-08 23:13:58 +00:00
Evan Huus
f28a5df5df More wmem documentation additions and updates. Still incomplete.
svn path=/trunk/; revision=45882
2012-11-03 17:58:07 +00:00
Evan Huus
9037787982 Add wmem readme to the appropriate build files.
svn path=/trunk/; revision=45833
2012-10-30 01:30:57 +00:00
Evan Huus
7588f12291 Some documentation for wmem.
svn path=/trunk/; revision=45832
2012-10-30 01:24:16 +00:00
Chris Maynard
b8e5c94167 List -z compare,... in the statistics documentation. Maybe someone who actually knows how to use it could elaborate?
svn path=/trunk/; revision=45769
2012-10-24 17:24:50 +00:00
Chris Maynard
26989e9d11 Inspired by http://www.wireshark.org/lists/wireshark-users/201206/msg00025.html, add support for being able to specify a numeric range as the <selector> part of tshark's -d <layer type>==<selector>,<decode-as protocol> option.
svn path=/trunk/; revision=45734
2012-10-23 00:58:38 +00:00
Martin Mathieson
3f3743834b This is basically a rewrite from Jakub Zawadzki.
Rather than store the FrameRecord entries in a sorted linked list,
instead use an unsorted GPtrArray, then sort it all at once.

Also, there is no longer the option to limit the amount of sorting (and memory
used), but a new option means we can avoid writing the output file
altogether if the input file is found already to be in order.

svn path=/trunk/; revision=45313
2012-10-04 18:24:21 +00:00
Martin Mathieson
afbf3cd596 Add a command-line option to control how large the reordering list can
become.  The default is now 0 (infinite).

svn path=/trunk/; revision=45293
2012-10-03 18:03:01 +00:00
Martin Mathieson
6a99c30e53 Fix a spelling mistake.
svn path=/trunk/; revision=45290
2012-10-03 17:06:22 +00:00
Martin Mathieson
08a1014c31 Also add the reordercap help files to CLEANFILES.
svn path=/trunk/; revision=45285
2012-10-03 14:13:02 +00:00
Jakub Zawadzki
3be454cb3b Add reordercap.pod to EXTRA_DIST
svn path=/trunk/; revision=45284
2012-10-03 13:35:00 +00:00
Jakub Zawadzki
701f33e126 Fix copy-paste bug.
it should also fix bulding error:
 Can't open ../../doc/reordercap.pod: No such file or directory at /usr/bin/pod2man line 60

svn path=/trunk/; revision=45283
2012-10-03 13:31:04 +00:00
Martin Mathieson
181cb3e036 Add a man page for reordercap.
svn path=/trunk/; revision=45282
2012-10-03 12:22:08 +00:00
Jeff Morriss
f89635883f The -B option is no longer only available in Win32: remove the Win32
restriction from the Synopsis.

This is the man page for Wireshark, not Tshark (fix a cut-n-pasteo).

svn path=/trunk/; revision=45229
2012-10-01 07:14:03 +00:00
Jakub Zawadzki
bf108e8d23 configure.in -> configure.ac
svn path=/trunk/; revision=45161
2012-09-26 21:34:17 +00:00
Jaap Keuter
d249038a65 Implement and document the Custom plugin system. Create relevant example files and add them to the distribution. Rewrite README.plugins to describe how to use this system.
svn path=/trunk/; revision=45142
2012-09-25 21:02:13 +00:00
Chris Maynard
5dc7669451 We are using GRegex in GLib since ~r31304, so stop referencing libpcre. Also,
fix the perldoc link.  Maybe someone else can figure out how to also fix:

    http contains "http://www.wireshark.org"

Either the hyperlink should be made to work correctly by not including the
trailing quote as part of the link, or simply change it so it's not hyperlinked
at all.  Also, it should display a terminating semi-colon as follows:

    http contains "http://www.wireshark.org";


svn path=/trunk/; revision=45035
2012-09-21 03:12:38 +00:00
Jeff Morriss
22b7086fb9 We always HAVE_CONFIG_H so don't bother checking whether we have it or not.
svn path=/trunk/; revision=44997
2012-09-19 01:37:13 +00:00
Gerald Combs
2bda67e82e Implement File→Merge.
The GTK+ and native Win32 versions are slightly different. The GTK+
version lets you select an output file type and the Win32 version uses
the existing capture filetype. We do the latter for now.

Start documenting significant UI changes in README.qt. This might be
better handled on the wiki.

svn path=/trunk/; revision=44797
2012-09-06 22:58:39 +00:00