Commit graph

6628 commits

Author SHA1 Message Date
Olivier Abad
e0926b556a Update Debian packaging files. Ethereal is now split in 4 packages :
ethereal-common, ethereal, tethereal, ethereal-dev

svn path=/trunk/; revision=6513
2002-10-26 08:56:39 +00:00
Guy Harris
45ed05190c Fix up some more byte-string displays.
svn path=/trunk/; revision=6512
2002-10-26 06:30:41 +00:00
Guy Harris
54117349d4 Show the elements of authentication triplets as byte strings (as that's
what they are - well, bit strings, really, but...).  Doing so also fixes
a bug, as "decode_gtp_auth_tri()" was copying 16 bytes to an array that
was 8 bytes long....

Do the same for byte-string elements of a quintuplet - and show as byte
strings some elements that weren't being shown at all.

svn path=/trunk/; revision=6511
2002-10-26 06:13:33 +00:00
Guy Harris
daa0dd9f1a Count ICMPv6 packets as ICMP when capturing.
Check the next header type - properly handling extension headers - in
"capture_ipv6()".

Get rid of the count of IPv6 packets - we break that down in
"capture_ipv6()" now.

Fix a typo.

svn path=/trunk/; revision=6510
2002-10-25 23:23:28 +00:00
Guy Harris
86af47dd68 From Didier Gautheron: handle the padding in AFP login packets that put
the password on an even boundary.

svn path=/trunk/; revision=6509
2002-10-25 21:59:47 +00:00
Guy Harris
a9b42ee36c That was a rather unique interpretation of "correctly" I came up with
there.  Try a different interpretation.

svn path=/trunk/; revision=6508
2002-10-25 21:13:38 +00:00
Guy Harris
bf3b1dbd69 Correctly handle the "no IAC found" case in "telnet_sub_option()".
Handle the "unknown command" case in "telnet_command()".

svn path=/trunk/; revision=6507
2002-10-25 21:09:36 +00:00
Guy Harris
b3b2464202 Fix a typo and fix alignment.
svn path=/trunk/; revision=6506
2002-10-25 04:36:45 +00:00
Guy Harris
354f955644 Sometimes a cigar is just a cigar, err, umm, sometimes a KRB5 blob is
just a Kerberos message; we can distinguish that from the other two
cases, so we do so, and handle all three cases.

svn path=/trunk/; revision=6505
2002-10-25 04:22:26 +00:00
Guy Harris
9b2845f8ea Fix the offset for the flags in an NTLMSSP_AUTH message.
svn path=/trunk/; revision=6504
2002-10-25 03:40:13 +00:00
Guy Harris
72d59f0596 The versions of UCD SNMP that we now support all install
<ucd-snmp/version.h>, so get rid of the stuff to check for its presence
and handle its absence.

svn path=/trunk/; revision=6503
2002-10-25 03:13:11 +00:00
Guy Harris
00b3eed033 From Ronnie Sahlberg: dissect the LookupHandleFree call.
svn path=/trunk/; revision=6502
2002-10-25 01:16:02 +00:00
Guy Harris
1e7af41606 From Ronnie Sahlberg: update the tap documentation to reflect recent
changes.

svn path=/trunk/; revision=6501
2002-10-25 01:11:03 +00:00
Guy Harris
f94df3780a Add the DCERPCSTAT stuff.
svn path=/trunk/; revision=6500
2002-10-25 01:10:07 +00:00
Guy Harris
35c1970720 From Ronnie Sahlberg: Ethereal support for DCERPCSTAT.
svn path=/trunk/; revision=6499
2002-10-25 01:08:49 +00:00
Guy Harris
75c2155cad From Ronnie Sahlberg: ONLY calculate RTT values for replies we have
actually seen the request packet for.

svn path=/trunk/; revision=6498
2002-10-25 01:02:49 +00:00
Guy Harris
f54f6a1a0a At least according to the UNIX 98 spec, you need to include <unistd.h>
to declare "getopt()" and the variables it uses; tethereal.c already
includes it, but gtk/main.c and gtk2/main.c, which also use "getopt()",
don't - make them do so.

svn path=/trunk/; revision=6497
2002-10-25 00:29:12 +00:00
Ed Warnicke
6f0b42deff Added a pointer to more information on PCLI
svn path=/trunk/; revision=6496
2002-10-24 23:41:56 +00:00
Guy Harris
b8572717b7 Move the value_string tables for V1 and V2 procedure values after the
vsff table, so that the comment applies to the table it precedes - and
put another copy of the comment in front of the V2 vsff table.

svn path=/trunk/; revision=6495
2002-10-24 20:59:21 +00:00
Guy Harris
3a04908429 Add fields for procedure numbers for NFS V2, V3, and V4, and register
them with the ONC RPC dissector.

svn path=/trunk/; revision=6494
2002-10-24 20:55:03 +00:00
Guy Harris
ae1ebc09da Don't include the header file to get the SNMP version unless we're
building with an SNMP library.

If we have Net-SNMP, include <net-snmp/version.h>, not
<ucd-snmp/version.h>.

Don't include any of the SNMP headers unless HAVE_SOME_SNMP is defined.

Include <net-snmp/config_api.h> if we have Net-SNMP, to declare
"read_premib_configs()" and "read_configs()".

Supply the include directories for Net-SNMP in the Makefile.nmake for
GTK 1.2 and GTK 2.

svn path=/trunk/; revision=6493
2002-10-24 07:08:26 +00:00
Tim Potter
d3c91154c5 This helps packet-snmp.c compile if you don't HAVE_NET_SNMP or HAVE_UCD_SNMP.
svn path=/trunk/; revision=6492
2002-10-24 06:39:09 +00:00
Guy Harris
07d0032f1c Add a "fragment_add_seq_next()" to reassemble fragments that don't have
sequence numbers or offsets and are thus assumed to be received in order
with no duplicates or dropped fragments (e.g., for NetBIOS Frame, where
802.2 LLC guarantees in-order delivery to NetBIOS with no duplicates or
dropped fragments).

"show_fragment_tree()' and "show_fragment_seq_tree()" don't modify the
"fragment_items" to which the "fit" argument points, so make that
argument a "const fragment_items *".

Make all the "fragment_items" tables "static" (as they're not used
outside the modules defining them) and "const" (as they're not
modified).

Add support for reassembly of NetBIOS fragmented requests and responses.

Get rid of an unnecessary include of "packet-tr.c" in the NetBIOS
dissector, and make its table of dissection function pointers static.

Fix some typos in the AppleTalk and NetBIOS dissectors.

svn path=/trunk/; revision=6491
2002-10-24 06:17:36 +00:00
Guy Harris
0c0516a755 Check whether the array of procedure hf values has an element for the
given version before fetching that value.

svn path=/trunk/; revision=6490
2002-10-24 03:54:11 +00:00
Guy Harris
24a1312102 Don't use "unsigned long" to mean "32-bit unsigned integer", as it's not
32 bits on all platforms - it's 64 bits on some platforms.  Use
"guint32" instead.  The same applies for "unsigned short" and "guint16".

svn path=/trunk/; revision=6489
2002-10-24 03:04:51 +00:00
Guy Harris
3266b0bb14 From Ronnie Sahlberg: make the tap listeners for gtk and gtk2 redissect
the packet list immediately when the tap is started.

svn path=/trunk/; revision=6488
2002-10-23 23:17:26 +00:00
Guy Harris
6d8d731412 From Ronnie Sahlberg: pass a pointer to the epan_dissect_t for a packet
to taps.

svn path=/trunk/; revision=6487
2002-10-23 23:12:38 +00:00
Guy Harris
d5f34ad8b2 Add an extra argument to "rpc_init_proc_table()" that can specify an hf_
value for a field to be used for the procedure number for that version
of the protocol; use that field, if specified, instead of just putting
in a generic "rpc.procedure" field.

Have the ypserv dissector register those fields and supply them to
"rpc_init_proc_table()".  Supply -1 for other RPC programs (for now),
meaning "no such field exists".

svn path=/trunk/; revision=6486
2002-10-23 21:17:03 +00:00
Ashok Narayanan
6cfdb3c0ed Added support for Label Request Type 2 (ATM Label Range) and
Type 3 (Frame Label Range)

svn path=/trunk/; revision=6485
2002-10-23 20:50:22 +00:00
Guy Harris
d812fb2810 Define HAVE_NET_SNMP, as Ethereal is set up to be built with Net-SNMP
rather than UCD SNMP on Windows, and define HAVE_SOME_SNMP as per Wes
Hardaker's changes to handle both Net-SNMP and UCD SNMP.

svn path=/trunk/; revision=6484
2002-10-23 18:27:33 +00:00
Guy Harris
cc8a765d8e From Wes Hardaker:
Define HAVE_SOME_SNMP if either HAVE_UCD_SNMP or HAVE_NET_SNMP
	is defined, and use HAVE_SOME_SNMP, rather than HAVE_UCD_SNMP,
	in most places when testing whether we have an SNMP library or
	not.

	Be more selective when including Net-SNMP header files.

Fix up {gtk,gtk2}/main.c to do the same SNMP stuff that tethereal.c
does - including the MIB stuff that gtk/main.c was doing but gtk2/main.c
wasn't doing.

Fix the copyright date in gtk/main.c.

svn path=/trunk/; revision=6483
2002-10-23 18:24:09 +00:00
Guy Harris
3369c4f7c7 From Jamie Fournier: change to version 4, and fix to match the current
style of other DCERPC files (i.e., provide a filterable field for the
opcode).

svn path=/trunk/; revision=6482
2002-10-23 04:35:52 +00:00
Guy Harris
dc1bd10215 Put a leading "0x" in front of the hex value for ARCNET addresses when
generating a filter expression to match the address, so it's parsed
correctly (as a hex number rather than a string) if there are
non-decimal digits (A through F).

svn path=/trunk/; revision=6481
2002-10-23 04:23:03 +00:00
Guy Harris
b9e2d694c4 In the message indicating how Ethereal was configured, say "Use UCD
SNMP/NET-SNMP" rather than just "Use UCD SNMP", now that we support
both.

svn path=/trunk/; revision=6480
2002-10-23 03:54:04 +00:00
Guy Harris
a71d1d910e From Ronnie Sahlberg: add a tap for statistics for DCERPC interfaces.
svn path=/trunk/; revision=6479
2002-10-23 03:49:13 +00:00
Guy Harris
c655158489 Don't assume that we're building a protocol tree; dereference tree
pointers only if we are.

svn path=/trunk/; revision=6478
2002-10-23 00:48:33 +00:00
Jörg Mayer
bdf8645b06 Update manuf
svn path=/trunk/; revision=6477
2002-10-23 00:11:08 +00:00
Jörg Mayer
40e1ec7fad Minimalistic support for counting IPv6 packets during capture
svn path=/trunk/; revision=6476
2002-10-22 22:04:23 +00:00
Jörg Mayer
4c80b2ac3f Wes Hardaker: Support NET-SNMP in addition to UCD-SNMP
svn path=/trunk/; revision=6475
2002-10-22 20:06:15 +00:00
Guy Harris
671ba8b6a6 Put in a comment noting that not *all* captures with a network type of 3
look like Ethernet captures.

svn path=/trunk/; revision=6474
2002-10-22 18:48:15 +00:00
Guy Harris
2a54cd2a76 Add a Wiretap encapsulation type for RFC 2625 IP-over-Fibre Channel, and
map libpcap's DLT_IP_OVER_FC to it.

svn path=/trunk/; revision=6473
2002-10-22 09:11:13 +00:00
Guy Harris
75ef739627 From Jamie Fournier: AFS 4 UPDATE server support.
Merge two CREDITS entries for Jamie.

svn path=/trunk/; revision=6472
2002-10-22 08:47:46 +00:00
Guy Harris
3205a6e888 Add in a notion of "circuits", which are for virtual circuit-oriented
protocols (where there's a virtual circuit ID of some sort in packets)
what conversations are for protocols ultimately running atop
connectionless network layers.  Have circuit type and ID values in the
"packet_info" structure.

Have the Frame Relay dissector set the circuit type and ID values, and
have the Wellfleet compression protocol set up circuit information and
store compression information with the circuit.

svn path=/trunk/; revision=6471
2002-10-22 08:44:33 +00:00
Guy Harris
d97d0803b3 Put in a note about the completion code not appearing to be present in
replies to continuation messages (or, at least, not present in the
obvious place).

svn path=/trunk/; revision=6470
2002-10-22 08:24:39 +00:00
Guy Harris
28c1a65e85 Add in a notion of "circuits", which are for virtual circuit-oriented
protocols (where there's a virtual circuit ID of some sort in packets)
what conversations are for protocols ultimately running atop
connectionless network layers.  Have circuit type and ID values in the
"packet_info" structure.

Have the Frame Relay dissector set the circuit type and ID values, and
have the Wellfleet compression protocol set up circuit information and
store compression information with the circuit.

svn path=/trunk/; revision=6469
2002-10-22 08:22:07 +00:00
Guy Harris
6ba1ee899b Add support for desegmentation of NDPS-over-TCP.
svn path=/trunk/; revision=6468
2002-10-22 08:09:57 +00:00
Guy Harris
252667a153 Get rid of extra blanks at ends of program names (they're not needed; in
fact, they cause an extra blank to appear).

Turn "get_string()" into a routine that fetches the length of a string,
fetches the string, puts the string into the tree with the offset of the
length as the starting offset, and returns the new offset.

Make routines that return offsets return an "int", as packet offset
variables are "int"s.

Fix up a bunch of "proto_tree_add_uint()" calls, including presumably
properly updating the offset after the call.

Clean up the handling of qualified names, integer-or-OID types, and even
objects a bit.

Put octet strings into the protocol tree with the offset of the length
as the starting offset.

Fix up the record length variable to be decimal, and just use
"proto_tree_add_uint()" to put it into the tree.

In at least one capture I've seen, there are only two bytes after the
NDPS tree field in a Bind PA request, not 4, even if the NDPS tree name
isn't an empty string.

FT_BYTES and FT_BOOLEAN don't have a base for display, so use BASE_NONE.

Fix the field for address bytes to have the right name (it's not just
the length, it's the length *and* the bytes).

svn path=/trunk/; revision=6467
2002-10-22 07:50:07 +00:00
Guy Harris
173b01f830 Do a full dissection of NDPS packets regardless of whether we're
building a protocol tree or not - we need to do that in order to set
various state variables and to set the columns.

svn path=/trunk/; revision=6466
2002-10-22 06:09:06 +00:00
Guy Harris
abbd3e0dea From Ronnie Sahlberg: track and display the time between requests and
replies for DCERPC similar to what is already done for ONC-RPC.

svn path=/trunk/; revision=6465
2002-10-22 00:59:25 +00:00
Guy Harris
1780e3e10b From Solomon Peachy: display "(correct)" or "(not verified)" for the WEP
ICV, depending on whether it was successfully verified or not.

svn path=/trunk/; revision=6464
2002-10-21 19:05:21 +00:00