Commit graph

8256 commits

Author SHA1 Message Date
Ronnie Sahlberg
de0002bbdf Fix small display bug. we returned the wrong value from dissect_per_choice and it made us display the wrong string sometimes
svn path=/trunk/; revision=8299
2003-08-28 14:41:20 +00:00
Ronnie Sahlberg
9c561b384a Update to H.225 when H.245 is tunneled in some octet strings,
call the h245 dissector instead of just showing the octet string content as some random hex bytes

svn path=/trunk/; revision=8298
2003-08-28 14:29:41 +00:00
Ronnie Sahlberg
9ce749fd8a update to h245 to decode the county codes
from anders broman

svn path=/trunk/; revision=8297
2003-08-28 12:57:24 +00:00
Guy Harris
6bbe0b5834 Update a comment.
svn path=/trunk/; revision=8296
2003-08-28 04:46:13 +00:00
Guy Harris
a224698042 Make "process_reassembled_data()" do the check for fragmentation not
being complete and for fragmentation being trivial (i.e., the packet in
question is both the first and last fragment).  Have its callers *not*
do that check - this lets "process_reassembled_data()" put in the
"Reassembled in" item for fragments other than the last fragment.

Add a "Reassembled in" field to TDS.

svn path=/trunk/; revision=8295
2003-08-28 04:19:29 +00:00
Guy Harris
f3d64a2c38 Add a "reassembled in" field.
svn path=/trunk/; revision=8294
2003-08-28 03:35:23 +00:00
Guy Harris
268b0adf6d It appears that TDS packets do have a sequence number; use that when
reassembling.

svn path=/trunk/; revision=8293
2003-08-28 02:19:00 +00:00
Guy Harris
ada92eb7f4 Use "process_reassembled_data()"; this means we get to use common code,
and it means we only dissect the reassembled data for the last frame (so
code running through the packet list, and humans clicking on frames, see
only one instance of the reassembled data, not multiple instances that
might look like retransmissions).

svn path=/trunk/; revision=8292
2003-08-28 02:12:26 +00:00
Guy Harris
4059b02fe9 Add an API to let a dissector register a dissector table and field for a
given OUI; the field is used when the PID for that OUI is put into the
protocol tree, and the dissector table is used to find a dissector for
that PID.

Not yet used, thus not yet tested; API is subject to change.
(Eventually, several of the cases in the big switch statement in
"dissect_llc()" should be handled by registering information for those
OUIs.)

svn path=/trunk/; revision=8291
2003-08-28 01:29:16 +00:00
Guy Harris
fadeb72b2e From Giles Scott: Nortel/SynOptics Network Management Protocol support.
svn path=/trunk/; revision=8290
2003-08-28 00:11:32 +00:00
Guy Harris
c3d7c67df3 Make various lengths unsigned in "dissect_fhandle_data_unknown()", so
lengths > 2^31-1 get handled correctly.

svn path=/trunk/; revision=8289
2003-08-27 23:53:07 +00:00
Guy Harris
dc05624d72 From Yaniv Kaul: fix the dissection of TDS7 login packets, and add
dissection for several fields in that packet.

svn path=/trunk/; revision=8288
2003-08-27 23:28:37 +00:00
Guy Harris
103e0f1402 The Fibre Channel dissector doesn't have any tables in which it
registers itself - it's just imported by name.  Get rid of the
"create_dissector_handle()" call, as the resulting dissector handle
isn't ever used.

svn path=/trunk/; revision=8287
2003-08-27 23:05:59 +00:00
Guy Harris
2d71f3589d Use "GPOINTER_TO_INT()" to convert the return value of
"gtk_clist_get_row_data()" to an "int", to squelch compiler warnings.

svn path=/trunk/; revision=8286
2003-08-27 23:01:10 +00:00
Guy Harris
115700bc62 From Richard Urwin:
use Export and Import for the buttons in GTK+ 2.x as well;

	get rid of a duplicate fclose;

	other fixes.

Update the description of color filters in the Ethereal man page to
reflect the change, clean up the formatting (use =item), and add the
global and personal color filters files to the FILES section; refer to
them as "color filters" files rather than "colorfilters" files, as the
FILES section gives the "colorfilters" file name so you don't have to
use that as the name.

Clean up white space.

svn path=/trunk/; revision=8285
2003-08-27 22:55:51 +00:00
Guy Harris
8bc3a1b51b Fix a typo.
svn path=/trunk/; revision=8284
2003-08-27 21:59:12 +00:00
Ronnie Sahlberg
a7d0d4bf16 update to the talkers popup list.
hopefully it will now create the filter for the actual conversation
we selected.

add EP1 <-> ANY and EP2 <-> ANY fitlers

svn path=/trunk/; revision=8283
2003-08-27 21:54:36 +00:00
Guy Harris
14990641c3 From Jesper Peterson: fix a typo.
svn path=/trunk/; revision=8282
2003-08-27 21:12:27 +00:00
Guy Harris
92c530aced Include <string.h> to get "strlen()" declared.
svn path=/trunk/; revision=8281
2003-08-27 21:11:39 +00:00
Gilbert Ramirez
52338a3baf Add a "contains" operator for byte-strings, strings, and tvbuffs (protocols).
The search uses a naive approach; more work is required to add a
Boyer-Moore Search algorithm.

svn path=/trunk/; revision=8280
2003-08-27 15:23:11 +00:00
Ronnie Sahlberg
d3562c0480 Updates for the endpoint talkers thing
The table now has a popup menu with
   Match display filter
         Selected
               EP1 <-> EP2
               EP1 --> EP2
               EP1 <-- EP2
               EP1 --> ANY
               EP1 <-- ANY
               EP2 --> ANY
               EP2 <-- ANY
          Not Selected
               ...
          ...
    Prepare Display Filter
          ...

Self explanatory.

Now the bad news.
I set the display filter box in the main window and i call redissect_packet
which redissects the packet list   but the displayfilter does not take
or affect the main window until i click  the apply button.

Some signal needs to be raised to some object me thinks.

Please feel free to fix it if you know what is missing.

svn path=/trunk/; revision=8279
2003-08-27 12:10:21 +00:00
Guy Harris
982ece89cf From Jesper Peterson:
use WTAP_ENCAP_ATM_PDUS as the default encapsulation for ATM;

	don't use ULL constants, as not all C compilers that support
	gint64 support them, and as there's no need to make them ULL
	constants.

svn path=/trunk/; revision=8278
2003-08-26 23:07:43 +00:00
Ronnie Sahlberg
b91e76964d The definition of NonStandardParameter is different between H.225 and H.245
Create an alternative NonStandardParameter dissector that matches the
definition that H.225 needs.

svn path=/trunk/; revision=8277
2003-08-26 21:44:35 +00:00
Ronnie Sahlberg
ec660f2051 From Anders Broman, updates and fixes to MEGACO
svn path=/trunk/; revision=8276
2003-08-26 21:36:17 +00:00
Ronnie Sahlberg
ec66d01b58 Make the option to display the internal PER fields default to FALSE
svn path=/trunk/; revision=8275
2003-08-26 21:30:08 +00:00
Gerald Combs
6deb901e11 Fix macro logic to allow classical resolution even if we have HAVE_GNU_ADNS
defined.

svn path=/trunk/; revision=8274
2003-08-26 20:21:08 +00:00
Guy Harris
e766fc1c2c Pass the pointer in the "data" field of the destination address, not a
pointer to that pointer, to "ip_to_str()".

svn path=/trunk/; revision=8273
2003-08-26 19:41:09 +00:00
Guy Harris
4ecb7cb4f2 From Jesper Peterson: support for Endace ERF file format.
svn path=/trunk/; revision=8272
2003-08-26 07:10:39 +00:00
Guy Harris
44eff3ce3b From Jesper Peterson:
Extract the FCS decoding section of the PPP_HDLC dissector to
	allow the CHDLC dissector to use the same routine.

	The ppp_options used for preferences has been renamed to
	fcs_options and exported via packet-ppp.h so CHDLC gets a
	separate (but identical) FCS preference.

	This means prefs.h has to be included before packet-ppp.h so a
	couple of ppp related files (packet-{gtp,null,raw,vj}.c) had
	their includes slightly re-arranged.

From me: make the PPP/CHDLC FCS code use "crc32()" to check the 32-bit
FCS.

svn path=/trunk/; revision=8271
2003-08-26 07:07:41 +00:00
Guy Harris
87f8ecdf33 Note that the SCTP CRC-32c is not the same as the AUTODIN/HDLC/802.x
CRC, as it uses a different polynomial.

svn path=/trunk/; revision=8270
2003-08-26 07:03:14 +00:00
Guy Harris
87d35a7c55 In "col_set_addr()", don't do anything other than clearing the column
expression information if the address type is AT_NONE -
"address_to_str_buf()" panics if passed an AT_NONE address, as there's
nothing sensible one can do with them.  (A null string wouldn't be
appropriate here, as a dissector might have set the address columns to a
string.)

svn path=/trunk/; revision=8269
2003-08-26 06:40:25 +00:00
Guy Harris
b73e8138a8 Make the CRC-32 routines take a tvbuff and a length as arguments.
Rename "crc32()" so as not to collide with the one in zlib; rename
"crc32_802()" to match.

svn path=/trunk/; revision=8268
2003-08-26 06:18:18 +00:00
Guy Harris
cdd8b24d5c Fix a typo.
svn path=/trunk/; revision=8267
2003-08-26 05:56:43 +00:00
Guy Harris
f7e3062867 From Jesper Peterson:
Extract the FCS decoding section of the PPP_HDLC dissector to
	allow the CHDLC dissector to use the same routine.

	The ppp_options used for preferences has been renamed to
	fcs_options and exported via packet-ppp.h so CHDLC gets a
	separate (but identical) FCS preference.

	This means prefs.h has to be included before packet-ppp.h so a
	couple of ppp related files (packet-{gtp,null,raw,vj}.c) had
	their includes slightly re-arranged.

From me: make the PPP/CHDLC FCS code use "crc32()" to check the 32-bit
FCS.

svn path=/trunk/; revision=8266
2003-08-26 05:52:53 +00:00
Guy Harris
42fdef2ff4 Extract the CRC-32 code from the 802.11 dissector into a separate file,
and use it in the Ethernet dissector as well, to check the FCS in
Ethernet frames, if present.

svn path=/trunk/; revision=8265
2003-08-26 05:09:56 +00:00
Guy Harris
be83b4d487 Handle snapshot lengths that cut off *part* of the FCS.
svn path=/trunk/; revision=8264
2003-08-26 04:34:26 +00:00
Guy Harris
f91af72c55 All endpoint talkers table taps use "address_to_str()" as the routine to
use to translate addresses to strings - wire that into
"endpoint_talkers_table.c", don't pass the function as an argument to
"init_ett_table()".

svn path=/trunk/; revision=8263
2003-08-26 01:46:23 +00:00
Guy Harris
dcf024f759 Use "address_to_str_buf()" to generate column data for non-resolved
addresses.

svn path=/trunk/; revision=8262
2003-08-26 01:30:48 +00:00
Guy Harris
14854b769e Include "osi-utils.h" to define "print_nsap_net_buf()".
svn path=/trunk/; revision=8261
2003-08-26 01:28:28 +00:00
Guy Harris
d9c401c74c Create an "address_to_str_buf()" routine, called by "address_to_str()",
which fills in a caller-supplied buffer.

Create "_buf()" versions of various "to_str" routines for various
address types, and create a routine to map SNA FIDs to strings, and use
them to finish up "address_to_str_buf()".

Get rid of the declaration of "sna_fid_type_4_addr_to_str()" in
"packet-sna.h", as that routine has been swallowed up in
"sna_fid_to_str()".

svn path=/trunk/; revision=8260
2003-08-26 01:00:30 +00:00
Guy Harris
9bcebc00c0 From Greg Morris: added support for defragmentation of NDS packets.
svn path=/trunk/; revision=8259
2003-08-25 22:16:57 +00:00
Guy Harris
aabecd0a04 From Greg Morris:
1. Added support for defragmentation of NDS packets

	2. The packet signature fixes seemed to never been applied.  I
	   have been using this code to dissect reply packets with packet
	   signatures for quite some time and have never experienced any
	   problems with it.  Without these changes then reply packets
	   containing signatures will not be decoded properly.  It was
	   recommended by Guy to not use public variables to track the
	   signatures but it has been my experience that if signatures are
	   enabled then it is enabled in the whole environment and would be
	   valid for all NCP packets within the trace.  I could change this
	   but it would add additional code to build a memory table to
	   track this.  If for some reason it is determined to not add this
	   part of the code then I will have to go back and add this table.

svn path=/trunk/; revision=8258
2003-08-25 22:14:07 +00:00
Guy Harris
4901c45334 From Greg Morris:
1. Added support for defragmentation of NDS packets

	2. Moved the run_info_string logic outside of the
	   pinfo->fd->flags->visited because of the dissection of info
	   strings is not processed on subsequent decodes then the
	   find/string/info will not locate info string values.  By moving
	   this outside then when the find logic runs a tvb_dissect_new
	   then the info string gets processed again and all data is
	   visible.  Otherwise only info column data that is processed by
	   the NCP dissector is visible not any data from ncp2222.py
	   processed by the info string function.

svn path=/trunk/; revision=8257
2003-08-25 22:12:04 +00:00
Guy Harris
aae16c9178 From Greg Morris:
1. Added Secret Store Services group
	2. Added a number of NCP return values
	3. Added support for NDS defragmentation
	4. Fixed type from file to bindery on ncp's 23/20, 23/21, 23/22, 23/24,
	   23/27, 23/28, 23/29, 23/30, and 23/31
	5. Fixed type from comm to nmas on ncp 91
	6. Fixed ncp 92 to include 92/01, 92/02, 92/03, 92/04, 92/05, 92/06,
	   92/07, 92/08, 92/09, and 92/10
	7. Added return value for 104/02
	8. Fixed reply structures for NCP 123/60 and NCP 123/79

svn path=/trunk/; revision=8256
2003-08-25 22:06:38 +00:00
Guy Harris
d5a4e68262 From Greg Morris: fix reassembly not to use global variables, and to use
the SPX EOM flag as a "last fragment" indication.

svn path=/trunk/; revision=8255
2003-08-25 21:59:18 +00:00
Guy Harris
1884bfa986 H.263 updates from Niklas Ogren.
Put him in the authors list in the Ethereal man page.

svn path=/trunk/; revision=8254
2003-08-25 21:48:44 +00:00
Guy Harris
e22b6afeb7 From Matthijs Melchior:
make the "Help" menu the rightmost menu item, as is done in

		recent versions of Windows;

		Mac OS X;

		recent versions of KDE;

		recent versions of GNOME;

	rather than making it an item on the far right side.

	Make the "Protocol" display in the help mention the number of
	entries, and give it has 3 columns, starting with the one that
	was used to sort this list.

	Make the "Display Filters" display mention the number of fields
	for each protocol and at the end the total number of fields.
	Give it 4 columns, including the 'blurb'.

	List all fields with the correct protocol.

svn path=/trunk/; revision=8253
2003-08-25 21:42:33 +00:00
Guy Harris
0333b96fbf Include the header files required by new APIs in the plugin API table.
svn path=/trunk/; revision=8252
2003-08-25 21:35:36 +00:00
Ronnie Sahlberg
cd016e69a9 Update to IO-Stat to put the capture filename on the titlebar
to make it easier to navigate when having multiple instances of ethereal
and io-stat open
at the same time.

Updates to all endpoint talkers and service response time windows to do this as well.

Bonus, when the user opens a new capture file when having these windows open,
the title bar will be updated to reflect the name of the new capture file.

svn path=/trunk/; revision=8251
2003-08-25 11:06:32 +00:00
Ronnie Sahlberg
764114e914 Due to popular demand:
The heuristic for RPC detection sometimes mistakenly decodes something as RPC when in reality it is payload.

Since the heuristics is based on the PDU suze as specified in the record marker
make this limit settable from the preferences.

Arbitrary limit of 256kb is choosen as default instead of the original limit of 2mb.
(face it, the largest common oncrpc pdus are those for nfs read/write anyway and these seldom go above 32kb.)

svn path=/trunk/; revision=8250
2003-08-25 10:17:38 +00:00