the parse finishes (forcing us to feed the parser an end-of-input even
after an error) is that we don't create a new parser object when we
start a new parse and don't destroy it when the parse finishes.
svn path=/trunk/; revision=11156
Add a #define to enable parser tracing.
Clean up parser state when finished parsing, even if we stopped
parsing due to a syntax error, so that there's nothing left
around to screw up the next parse.
svn path=/trunk/; revision=11152
Fix a bug in the dissection of multiple NDS messages being sent
at the same time that the dissector was attempting to desegment
data spanning multiple packets. When a message was encountered
during the desegmentation code the dissector would
misinterpret the new message as an element in the data stream.
Code was added to validate the desegmentation handle and
validate which messages actually contain segmented data.
svn path=/trunk/; revision=11147
a few updates to ncp2222.py to include more detail to summary
window for NCP's 26, 28, 30;
fixed NCP 87/31 to not show as malformed when HandleInfoLevel
contains value 0x00.
svn path=/trunk/; revision=11146
and the error message includes "Not enough storage is available
to process this command" or "The operation completed successfully",
suggest that the user install a WinPcap version later than 3.0 - this is
definitely a Frequently Asked Question on the Ethereal list.
svn path=/trunk/; revision=11143
- NetrJoinDomain2 and NetrUnJoinDomain2 (can be used to remotely join a
machine to an Active Directory domain, typically with the JOIN and
UNJOIN of the netdom utility)
- NetrRenameMachineInDomain2
- NetrAddAlternateComputerName and NetrRemoveAlternateComputerName
(operations added in Windows XP)
All these operations carry a blob (524 bytes) containing an encrypted
version of the password of the account with domain administration
credentials, currently displayed as hex data because the format of this
blob is currently unknown (at least, for me).
svn path=/trunk/; revision=11142
- associate standard trace file extensions to ethereal *only*
if such extensions are not already known in the system;
- suppress the linking while Ethereal is uninstalling *only*
for extensions associated to Ethereal.
svn path=/trunk/; revision=11134
and "Decode As" dialogs (so that you can cut down the size of the
protocol lists in those dialogs by disabling "uninteresting" protocols).
svn path=/trunk/; revision=11132
"capture_pcap_cb()"; they're only done in live captures, and that
arranges that "process_packet()" gets called with the correct
wtap_dumper for the current file even if we switch to a new file.
Move the packet-count reporting out of "write_packet()" to
"capture_pcap_cb()" as well, as that's also only done in live captures.
That pretty much guts "write_packet()", so just move what's left up to
"process_packet()".
svn path=/trunk/; revision=11131
Other protocol, not only SMB will populate pinfo->private_data
thus checking for existence of non-NULL pinfo->private_data is not sufficient
to determine we have SMB data and this is what it is.
Refactor the adding of salt/FID from lower layer protocols and generalize it.
Create a new dissector_handle specific for SMB so that we know that IFF we came in through that handle, then whatever pinfo->private_data is what we expect it to be.
svn path=/trunk/; revision=11129
Do not output the value definitions for enumerated integers twice.
the c compiler doesnt like when the same symbol is declared twice.
svn path=/trunk/; revision=11124
Guy Harris