Commit Graph

3872 Commits

Author SHA1 Message Date
Guy Harris 393ac45d83 "dissect_ber_object_identifier_str" expects a "const char **" as its
last argument; make it so.

svn path=/trunk/; revision=16523
2005-11-17 04:47:41 +00:00
Guy Harris 378ebd81a6 g_strlcat() and g_ascii_isprint() don't exist in GTK+ at all - they
exist in GLib 2.x, but not in 1.2[.x].  Check the version number of
GLIB, not of GTK+, to decide whether to #define them.

svn path=/trunk/; revision=16522
2005-11-17 04:15:01 +00:00
Ronnie Sahlberg d71982fbbb add the rest of Graeme Lunts patch
svn path=/trunk/; revision=16520
2005-11-16 23:17:21 +00:00
Ronnie Sahlberg bde7f8d3b6 add a g_ascii_isprint() macro so that this symbol can be used for gtk1 platforms as well
svn path=/trunk/; revision=16519
2005-11-16 23:15:04 +00:00
Anders Broman 7c8d0dad93 Decose APN messages correctly.
svn path=/trunk/; revision=16514
2005-11-16 20:03:09 +00:00
Ronnie Sahlberg 04f785f836 add dissection of buffercode
according to
wiki.etehreal.com/SMB2/BufferCode



svn path=/trunk/; revision=16512
2005-11-16 10:59:41 +00:00
Ronnie Sahlberg 898dc49980 add a simple g_strlcat define in strutil for gtk==1 where this symbol does not exist
svn path=/trunk/; revision=16511
2005-11-16 09:27:43 +00:00
Anders Broman 6c466a1437 Display AVP:s of Dimater type Unsigned32 as such even when they have "value translation".
svn path=/trunk/; revision=16510
2005-11-16 07:21:48 +00:00
Anders Broman 00131b0f1e From Greg Morris;
The following diff (based on current SVN) fixes the following...
1. Adds additional return value 0xa901 
"Invalid Data Type Flag (outdated return value - replaced in NSS as 0x89aa error)" 
for 87/xx NCP's.
2. Fixes decode for NCP 87/20 reply packets
3. Fixes decode for NCP 89/53 request packets

svn path=/trunk/; revision=16509
2005-11-16 07:16:34 +00:00
Anders Broman c33182b898 From Graeme Lunt:
Here are a number of small patches for asn1 based dissectors:

acse:
  release request/response column information (many X.400/X.500 unbinds are
empty)
  "standardised" PNAME to "ISO 8650-1 OSI Association Control Service"
  fix for crash when using EXTERNAL dissector

rtse:
  column information when attempting a resume

x509if:
  generation of LDAP-style DNs from RDNSequences 
  new function x509if_get_last_dn() to get the last DN generated.

x509af:
  DSS parameters
  certificate extension naming
  subject naming of certificate

x509sat:
  Guide syntax (as SET now supported)
  PDU exports.
  
cms:
  verification of message digest attribute (SHA-1 and MD5)
  
ess:
  enumerated/restrictive/permissive/informative security categories

x411:
  generation of string encoding of X.400 addresses, trace information and message identifiers.

s4406:
  separate types for primary and copy precedence to allow better filtering (e.g. primary precedence = flash)
  priority-level-qualifier


svn path=/trunk/; revision=16508
2005-11-16 07:13:12 +00:00
Guy Harris 893ad69c74 Handle OSPF V3 prefixes similarly to the way other IPv6 prefixes are
handled (but not the same, as the prefix length in OSPF is rounded up to
a multiple of 4 bytes, not just a byte).  This simplifies the code, and
keeps us from overflowing the buffer we allocate if the prefix length is
> 128 (we now just report that as an error).

svn path=/trunk/; revision=16507
2005-11-15 10:56:18 +00:00
Ronnie Sahlberg 5bc41c76b0 add decoding of extended attributes
svn path=/trunk/; revision=16506
2005-11-15 08:49:34 +00:00
Tomas Kukosa 97584210fb improvements in value constraint support
- NO_BOUND is defined instead of usage -1
- negative bound is handled properly for INTEGER

svn path=/trunk/; revision=16505
2005-11-14 13:05:17 +00:00
Ronnie Sahlberg f4e55c1155 move the include of emem.h a bit further down
so it does know what size_t is when emem is included.

i needed this change to get it to compile on my box


svn path=/trunk/; revision=16504
2005-11-14 13:02:23 +00:00
Ronnie Sahlberg ae6cc5a6f2 some more infol;evels decoded
svn path=/trunk/; revision=16503
2005-11-14 12:06:39 +00:00
Guy Harris 04b5d191ac Fix the declaration of gssapi_lookup_oid_str() to match its definition.
svn path=/trunk/; revision=16502
2005-11-14 10:49:13 +00:00
Tomas Kukosa 3b770d5c7c - dissect_ber_object_identifier() returns value as tvb
- new dissect_ber_object_identifier_str() function
 - BER dissectors adapted and regenerated

svn path=/trunk/; revision=16501
2005-11-14 10:02:31 +00:00
Anders Broman 0496eb5dca Fix Bug 566 H.263: in display filters, ftype bit masked by sbit
svn path=/trunk/; revision=16500
2005-11-13 20:53:24 +00:00
Anders Broman 42ed3aede8 Fix the lenght calculation.
svn path=/trunk/; revision=16499
2005-11-13 18:09:44 +00:00
Ronnie Sahlberg 5244ca9cdd prettify read/write
svn path=/trunk/; revision=16497
2005-11-12 23:17:06 +00:00
Ronnie Sahlberg 6124eac224 prettify smb2
always put the filename in col_info if it is known

for getinfo/setinfo  put the class/level in colinfo as well.


this makes it very easy to see in the packet summary which file a icommand applies to and what kind of info is requested



svn path=/trunk/; revision=16496
2005-11-12 23:05:29 +00:00
Ronnie Sahlberg fafd0aeb49 from martin marthieson
updates to rlogin

Hi, this patch:
- uses value_string for control message field
- doesn't use a single global time value to mark start of all conversations!
- corrects client-user-name, server-user-name order in initial user-info
message
- adds data (text input/output) into the protocol tree
- makes lots more things filterable
- improves info column text (always calls rlogin_display() now)
- cleans up some whitespace



svn path=/trunk/; revision=16495
2005-11-12 22:05:53 +00:00
Ronnie Sahlberg 7d0ed23854 from Laurent Constantin
updates to smb
A patch for packet-smb.c is attached:
 - it improves timeout decoding
 - it defines common NT transaction IOCTL functions
 - it corrects decoding of resume key in search queries
 - it defines a new function dissect_4_2_16_8_unsure() to replace
   dissect_4_2_16_8(). I'm unsure if it is correct. As said in
   comments, it works for me, but I find strange that nobody noticed
   dissect_4_2_16_8() was wrong. So, it is between "#if 0".
   Someone else should confirm dissect_4_2_16_8_unsure() works
   before activating it.



svn path=/trunk/; revision=16494
2005-11-12 21:56:02 +00:00
Ronnie Sahlberg 5940b03d12 if we get the error BUTTER_TOO_SMALL coming back in a getinfo reply the data will just be 4 bytes and will contain the required buffer size
svn path=/trunk/; revision=16493
2005-11-12 21:14:17 +00:00
Ronnie Sahlberg 0097584f2e the timestamps of negprot are known
svn path=/trunk/; revision=16491
2005-11-12 11:42:06 +00:00
Ronnie Sahlberg 15f13b23a0 improve the dissection of Create and fill in most of the fields
svn path=/trunk/; revision=16490
2005-11-12 11:27:34 +00:00
Ulf Lamping a78d2fbc63 (on behalf of the PROFIBUS Nutzerorganisation e.V. Deutschland):
add some PROFINET specific LLDP extensions

svn path=/trunk/; revision=16488
2005-11-12 10:09:02 +00:00
Ronnie Sahlberg 8b68d91039 dissect more of Close request/response
svn path=/trunk/; revision=16487
2005-11-12 10:07:12 +00:00
Ronnie Sahlberg 728323e533 add initial decode of dcerpc over smb2
it does not yet multiplex between different files   but it is better than nothing


svn path=/trunk/; revision=16484
2005-11-12 08:48:02 +00:00
Ronnie Sahlberg bc6cb5d6ad in order to handle dcerpc over smb2 later and to make the heuristics stronger for determining what might and what might not be a pipe
add   TID tracking.   for all TreeConnect requests/resposnes seen,   store the name->tid mapping and other metadata.


as a freebee    the disswection of the tid in the ehader is aware of this table so when a tid value is dissected in the header and we known the name for this tid   then put it in an expansion below the tid.




svn path=/trunk/; revision=16483
2005-11-12 07:45:01 +00:00
Ronnie Sahlberg 9ca683a249 start separating things out into structures
we can regenerate from the header
we need to remember between request/response
we need on a per conersation bases

to reduce the amount of data we store in the per req/resp  pair  since there will be many of them and we want that struct as small as possible.




svn path=/trunk/; revision=16482
2005-11-12 04:23:52 +00:00
Ronnie Sahlberg 9f6c2b3ed5 a guid is only 16 bytes so dont highlight 20 bytes in the hexpane
svn path=/trunk/; revision=16481
2005-11-12 01:21:43 +00:00
Jörg Mayer 1baf01d966 Update to samba 11681
svn path=/trunk/; revision=16480
2005-11-12 00:42:45 +00:00
Jörg Mayer 66df615702 Propset svn:...
svn path=/trunk/; revision=16478
2005-11-12 00:25:27 +00:00
Ronnie Sahlberg ebcdb60414 in smb2 the file handles are not normal context handles they are just a guid
make them a guid in smb2 dissector and make tim pottesr excellent conmtext handle tracking also able to do the same thing for GUIDs


( a context handle is just a 32 biut attribute field followed by a uuid anyway)




svn path=/trunk/; revision=16477
2005-11-11 22:12:10 +00:00
Anders Broman 260853d5b4 fix:
Malformed packet IAM, Calling party number 
Application transport -  some code clean up. 
bug 551 Nor Med PC ethereal-bugs@ethereal.com NEW SS7, ISUP, IAM-signal, malformed packet (not) 
Bug 554 Min Low PC ethereal-bugs@ethereal.com NEW ETSI codec dissection error in BICC 

svn path=/trunk/; revision=16476
2005-11-11 22:05:21 +00:00
Ronnie Sahlberg 574717c28d start decoding notify requests
svn path=/trunk/; revision=16475
2005-11-11 12:49:42 +00:00
Ronnie Sahlberg 756520be42 dissect READ packets
svn path=/trunk/; revision=16474
2005-11-11 11:35:10 +00:00
Ronnie Sahlberg 6250873db4 write offset is 32 bits so is write length
svn path=/trunk/; revision=16473
2005-11-11 11:14:14 +00:00
Ronnie Sahlberg eae75ff28b add allocation size
svn path=/trunk/; revision=16472
2005-11-11 11:03:00 +00:00
Ronnie Sahlberg ec327c0a14 add decode of endoffile for file infolevel 0x12
svn path=/trunk/; revision=16471
2005-11-11 10:26:36 +00:00
Ronnie Sahlberg b358df838c class:3 level:0 is just a normal nt security descvriptor
svn path=/trunk/; revision=16470
2005-11-11 09:09:31 +00:00
Ronnie Sahlberg e85060f171 opcode 0x0c is Cancel
svn path=/trunk/; revision=16469
2005-11-11 08:23:11 +00:00
Ronnie Sahlberg 1a6338e9d5 opcode 0x0f is Notify
svn path=/trunk/; revision=16468
2005-11-11 08:14:59 +00:00
Ronnie Sahlberg deadd3c93f SMB2_FILE_INFO_0a structure which is used with SetInfo to rename a file
svn path=/trunk/; revision=16467
2005-11-11 08:04:32 +00:00
Ronnie Sahlberg 8e2ab17da8 dont dereference null pointers
svn path=/trunk/; revision=16466
2005-11-11 07:49:13 +00:00
Ronnie Sahlberg 886e149907 the uid is 64 bits
svn path=/trunk/; revision=16465
2005-11-11 07:41:09 +00:00
Ronnie Sahlberg 6c348b1db4 from albert chin
remove some c99-isms


svn path=/trunk/; revision=16464
2005-11-11 04:35:22 +00:00
Ronnie Sahlberg 078ef72ee4 break out some structures into packet-smb2.h so we can start tapping in later
we will do service-response-time   statistics before other inferior products have even noticed a new protocol is in town.




svn path=/trunk/; revision=16463
2005-11-11 03:50:53 +00:00
Gerald Combs 66296cdf17 Don't use null values for blurbs in header fields.
svn path=/trunk/; revision=16462
2005-11-11 00:04:37 +00:00