Commit Graph

905 Commits

Author SHA1 Message Date
Ulf Lamping ecfa9c3d2b fix the return value of file_seek, as noted by Steve
svn path=/trunk/; revision=19816
2006-11-06 00:24:24 +00:00
Ulf Lamping 59d6c8ea33 change all file offsets from long to gint64 so we can - theoretically - handle files > 2GB correct.
Please distclean Win32 builds!

svn path=/trunk/; revision=19814
2006-11-05 22:46:44 +00:00
Jörg Mayer e8a5a41045 Parts of http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1179
Frederic Heem:
* More cmake system checks. It compiles dumpcap without running configure,

svn path=/trunk/; revision=19672
2006-10-24 17:39:32 +00:00
Martin Mathieson d55c609c55 - Fix problems with parsing sctpprim headers
- Add dissection of nbap (as encap or inside sctp primitive)

svn path=/trunk/; revision=19664
2006-10-23 17:22:20 +00:00
Michael Tüxen 3ce4a70412 Use G_GINT64_CONSTANT to handle 64-bit constants in the code.
svn path=/trunk/; revision=19663
2006-10-23 17:12:48 +00:00
Bill Meier 798a4b8c77 fix 'save' to store hi-order 32 bits of time offset for each pkt; fixes bug 1168
svn path=/trunk/; revision=19622
2006-10-20 01:17:17 +00:00
Guy Harris e773247138 If we have to use Lex or Flex, check whether we found it, first, and if
we didn't, report an error and fail, rather than blithely executing
commands with the command a blank string.

svn path=/trunk/; revision=19602
2006-10-19 07:45:10 +00:00
Jörg Mayer e8869dffb9 Paolo Abeni:
the attached patch add support for the recently introduced pcap
bluetooth data link type. Yes, pcap is going to support also bluetooth
devices (at least on Linux) :-)


svn path=/trunk/; revision=19513
2006-10-13 15:18:10 +00:00
Ronnie Sahlberg 26f642778f From Paolo Abeni
USB dissector


svn path=/trunk/; revision=19480
2006-10-10 21:00:35 +00:00
Anders Broman ca8bc2b83a From Martin Warnes:
The patch addresses issues with higher precision packet
timings on top end iSeries hardware and should enable the iseries wiretap to handle timings in both micro and nano seconds.

svn path=/trunk/; revision=19428
2006-10-04 17:36:40 +00:00
Martin Mathieson 3474ea868c - Add special case for reading strange encoding of ATM CID field
- Indicate direction of DCH Data in info column
- Assume EDCH payload CRC if 2 bytes are left over (previous test was broken)

svn path=/trunk/; revision=19405
2006-10-03 14:21:07 +00:00
Jaap Keuter 72cf2186d3 From: Rolf Fiedler
So far Wireshark complained about channel 129, now it gets a little further 
and then complains about channel 128. 

Solution: Open up all channel from 128 up. 

svn path=/trunk/; revision=19358
2006-09-29 08:47:51 +00:00
Jaap Keuter 81d8db9705 From Rolf Fiedler:
I am the author of the eyesdn wiretap module. Recently we added ATM
support to our trace format. We used channel id 129 for that, so far
only 0 for D channel and 1-30 for bearer channels had been in use.

svn path=/trunk/; revision=19353
2006-09-28 20:28:26 +00:00
Gerald Combs 3edaa624c5 Get rid of a compiler warning.
svn path=/trunk/; revision=19224
2006-09-12 21:59:54 +00:00
Martin Mathieson 2e1177c328 For DCT2000, show better transport info:
- for FP over AAL2, add CID to AAL tree
- for IPPRIM protocols, show IPV4 addresses in src & dst columns

svn path=/trunk/; revision=19156
2006-09-05 16:05:23 +00:00
Jörg Mayer 9f4f88e84e propset, add $Id: $ and copyright headers
svn path=/trunk/; revision=19150
2006-09-05 09:50:45 +00:00
Jörg Mayer 57656db02e OK, as I haven't had any negative feedback, I'm adding my work
to use cmake as a build system. It's in no way complete, I'd
just like others to be able to participate in playing with cmake
and to document what I'm doing.

Please read the README.cmake for what can be done right now.

svn path=/trunk/; revision=19149
2006-09-05 09:27:22 +00:00
Martin Mathieson 76192b1c6c Partial implementation of UMTS FP. Currently only works with Catapult DCT2000 format files, as need extra information about packet when decoding. There are a few TODOs (notably E-DCH channels), but the current version gives OK coverage.
svn path=/trunk/; revision=19130
2006-09-04 11:04:14 +00:00
Guy Harris a6eda1060e Rework some of the header processing, to handle some additional nettl
files, and to clean the code up a bit - and incorporate some fixes to
the rework, and other fixes, from Mark C. Brown.

svn path=/trunk/; revision=18945
2006-08-18 09:01:20 +00:00
Anders Broman d221d6f2fc From Hannes Gredler:
A patch that adds support for dissection of
libpcap DLT_JUNIPER_VP frames. In addition i have fixed
also the indent for DLT_JUNIPER_GGSN.

svn path=/trunk/; revision=18940
2006-08-17 20:24:05 +00:00
Martin Mathieson 4842aeab96 Wasn't allocating big enough frame buffer!
svn path=/trunk/; revision=18848
2006-08-07 17:08:11 +00:00
Martin Mathieson 229e2dfbde - Removes last traces of 'board ports only' preference (other than marking it as an obselete preference)
- Add a preference to try to find messages within sctp primitive messages (tries renaming of known mismatches)
- Add outhdr to stub protocol (getting ready for IuB FP)

svn path=/trunk/; revision=18818
2006-08-02 09:30:28 +00:00
Guy Harris c5a7a3b935 The nettl_file_hdr structure has a fixed format, as it's an on-disk data
structure.  Instead of making the host_name field bigger, make the thing
we put in it smaller.

Use that structure when reading files as well as when writing them.

svn path=/trunk/; revision=18796
2006-07-26 23:22:28 +00:00
Jörg Mayer 7f6aa2359e postadal@suse.cz:
Bufferoverflow caused by ethereal->wireshark rename
	(ws is 1 char longer).
	http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1015


svn path=/trunk/; revision=18794
2006-07-26 06:38:16 +00:00
Guy Harris 0a67adf95f Fix indentation.
svn path=/trunk/; revision=18657
2006-07-04 18:32:32 +00:00
Guy Harris 964a447748 Don't test a variable in a loop if its value never changes.
Get rid of arguments and #defines that are no longer used as a result of
the previous change.

svn path=/trunk/; revision=18656
2006-07-04 18:27:07 +00:00
Ulf Lamping 0e1a8a8023 add file extension information (filter "*.pcap;*.cap" and default extension ".pcap") to wiretap
sort file types in alphabetical order, but keep the libpcap like entries at the start

svn path=/trunk/; revision=18562
2006-06-23 18:20:34 +00:00
Guy Harris e6a5d40f84 Remove definition of catapult_dct2000_board_ports_only, as per mail from
Martin Mathieson.

svn path=/trunk/; revision=18551
2006-06-23 02:42:40 +00:00
Ulf Lamping a8b26ae252 hopefully, the win32 buildbot will compile again :-(
svn path=/trunk/; revision=18541
2006-06-22 10:30:35 +00:00
Gerald Combs f7e38bd5e6 Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variable
definition in the Catapult DCT2000 code.

svn path=/trunk/; revision=18524
2006-06-20 18:30:54 +00:00
Ronnie Sahlberg 22edbe1066 fix coverity "bug" 184 (false positive)
the contract for wiretap ..._read() functions are that the *err pointer MUST always
be provided as a valid pointer and not a NULL pointer.


ber.c contained a spurios and redundant check for the pointer being non-NULL wich triggered coverity to detect this as a false positive.

this redundant test if the pointer is NULL has been revoved.



svn path=/trunk/; revision=18492
2006-06-17 10:26:20 +00:00
Anders Broman 974fd085dc From Martin Mathieson:
Skips variant string bytes of dct2000 header when finding real packet 
data to dump.

svn path=/trunk/; revision=18458
2006-06-14 05:39:52 +00:00
Anders Broman 81bda938ff From Martin Mathieson:
This patch:
- treats the variant field as a variable-length string field.  This is 
needed for some of the more complicated protocols where the variant 
number of the embedded protocol is also represented

- the patch to Makefile.am was not applied from 
http://www.wireshark.org/lists/wireshark-dev/200606/msg00009.html

svn path=/trunk/; revision=18427
2006-06-11 08:26:55 +00:00
Gerald Combs dea7ae98be Ethereal -> Wireshark
svn path=/trunk/; revision=18369
2006-06-06 23:09:20 +00:00
Gerald Combs eb71f7fb96 Rename the main executable to "wireshark", along with more conversions:
ethereal.com -> wireshark.org
  mailing lists and addresses
  ETHEREAL -> WIRESHARK
  Man pages
  Automake/Autoconf names


svn path=/trunk/; revision=18271
2006-05-31 19:12:15 +00:00
Gerald Combs 8958bab6de Tethereal/tethereal -> TShark/tshark.
svn path=/trunk/; revision=18268
2006-05-31 17:38:42 +00:00
Anders Broman 7056661eac Ethareal->Wireshark
svn path=/trunk/; revision=18230
2006-05-28 15:56:15 +00:00
Anders Broman 1814821adc From Martin Mathieson:
- Many DCT2000 protocols can be embedded within an IP primitive 
message.  Add a heuristic to see if we can find the protocol payload 
within in IP primitive message, and look for an ethereal dissector 
matching the DCT2000 protocol name (this is useful for simple protocol 
testing where no physical links are involved)
- Make some more of these protocols (diameter, http, mgcp) findable by name
- Adds protocol 'variant' number to stub and dissector
- Break the duplicated writing of the stub header out into a separate 
function

svn path=/trunk/; revision=18212
2006-05-23 05:48:00 +00:00
Ronnie Sahlberg f0b33a4789 ethereal->wireshark updates
svn path=/trunk/; revision=18206
2006-05-22 08:14:01 +00:00
Ronnie Sahlberg 89f022b12b name change
svn path=/trunk/; revision=18197
2006-05-21 05:12:17 +00:00
Guy Harris 031773273c Squelch some compiler warnings (a time_t might be an int or a long).
svn path=/trunk/; revision=18188
2006-05-19 08:18:22 +00:00
Guy Harris 0457e756b1 GLib 1.2[.x] doesn't have g_sprintf(), it just has g_snprintf(); use
that.

It also doesn't hae <glib/gprintf.h>, so use that only for GLib 2.0 and
later.

svn path=/trunk/; revision=18169
2006-05-15 22:21:51 +00:00
Guy Harris c914d509a0 Fix some compiler warnings.
That requires that we define G_GINT64_MODIFIER ourselves if glib.h
doesn't define it for us, as that's what should be used to print 64-bit
integral values in any calls that use any of the GLib printf functions
(directly or indirectly).

svn path=/trunk/; revision=18154
2006-05-15 05:28:56 +00:00
Graeme Lunt abefaf32bf Basic Encoding Rules (BER) encoded file reading. Not really a packet trace format but still useful for dissecting arbitrary BER/DER ASN.1.
svn path=/trunk/; revision=18110
2006-05-08 19:56:36 +00:00
Anders Broman de3b8195c5 From Martin Mathieson:
This patch should hopefully remove any possible buffer overflows in 
parse_line() as reported by the current Coverity scan.  I'm not sure 
that the error it currently reports is valid (I think its confused by 
supposing that a condition that is being tested can be true, whereas it 
can't...), but this patch fixes a number of potential problems remaining 
in the function.

svn path=/trunk/; revision=17979
2006-04-24 19:08:52 +00:00
Anders Broman 8dd0e70722 Fix CID: 150
svn path=/trunk/; revision=17968
2006-04-23 18:05:23 +00:00
Anders Broman b99bf25795 From Martin Mathieson:
Fix coverity bugs.

svn path=/trunk/; revision=17909
2006-04-19 18:57:25 +00:00
Guy Harris 87077ede81 The first item in the network load EIP appears to be the network
utilization, in units of .1%.

svn path=/trunk/; revision=17901
2006-04-19 03:42:06 +00:00
Anders Broman 375ba77274 From Martin Mathieson:
These patches:
- fix the bounds errors reported by coverity in bug 879
- fix a couple of other potential bounds errors (length checking 1st & 2nd lines in file)
- reorder catapult_dct2000_phdr so that normal protocol pseudo-header info is at the start.  This means that the stub dissector can avoid the nasty
(overlapped) memcpy
- a little whitespace fixing

svn path=/trunk/; revision=17886
2006-04-17 18:46:14 +00:00
Guy Harris 701b569104 Get rid of the unused WTAP_ENCAP value - holes in the number space cause
ugly printouts for "editcap -T".

svn path=/trunk/; revision=17873
2006-04-16 10:38:47 +00:00