Commit graph

4850 commits

Author SHA1 Message Date
Uwe Girlich
26f38471ae First attempt to dissect the Time Synchronization Protocol (TSP)
used by timed (or in.timed).

svn path=/trunk/; revision=4646
2002-01-31 07:50:29 +00:00
Guy Harris
fe8a0d2c5e Don't copy the AVP data to a buffer from the tvbuff and then extract
stuff from the buffer - extract what you need directly from the tvbuff.
(And definitely don't extract stuff from the buffer if you haven't
copied stuff to it.)

For integral AVP items, check the length of the item before processing
it.

Put time items into the protocol tree as times, not as byte arrays.

svn path=/trunk/; revision=4645
2002-01-31 01:55:14 +00:00
Guy Harris
b539bcadd5 Don't include "inet_v6defs.h" in "column-utils.c"; nothing from it is
necessary.

Don't use "alloca()", as it's not guaranteed to be present on all
platforms.

svn path=/trunk/; revision=4644
2002-01-31 00:51:36 +00:00
Guy Harris
a927aed2fb From Michael T�xen: updates to work with the new M3UA dissector.
svn path=/trunk/; revision=4643
2002-01-31 00:49:59 +00:00
Guy Harris
5723b50a7d From Michael T�xen: updates to support versions 6 and 10 of the SIGTRAN
draft, and to register all protocol fields.

svn path=/trunk/; revision=4642
2002-01-31 00:47:40 +00:00
Guy Harris
6a969169e0 Minor updates, from Mark Burton:
More draft 09 compatibility changes.

 Default port number now 3260.

 Now prints extra info to COL_INFO for SCSI command and login
 responses.

svn path=/trunk/; revision=4641
2002-01-31 00:44:36 +00:00
Guy Harris
f180114360 Remove the "--without-gcc" option - it doesn't work with the Sun,
Digital UNIX, and HP C compilers, and it may not work with other
compilers (due to the GLib problem mentioned in the previous checkin),
so it runs the risk of being an "attractive nuisance", i.e. users may
try it, find it doesn't work, and then send mail to various Ethereal
mailing lists asking about it.

svn path=/trunk/; revision=4640
2002-01-30 23:48:53 +00:00
Guy Harris
c2136d0735 Include <string.h> to declare various string functions.
Include "snprintf.h", when needed, to declare "snprintf()" on platforms
that don't have it.

Fix some formats and arguments to various printing routines.

Fix "diameter_time_to_string()" to properly fetch the time value from
the data buffer handed to it.

svn path=/trunk/; revision=4639
2002-01-30 23:08:27 +00:00
Guy Harris
8dc27bb184 Just use "val_to_str()" to generate names for communities whose values
are in the reserved region (which also fixes a bug where we weren't
printing the value for the NO_ADVERTISE community correctly).

svn path=/trunk/; revision=4638
2002-01-30 23:04:02 +00:00
Guy Harris
595513d5cc Add a "--without-gcc" option, similar to what tcpdump and libpcap have.
(This isn't as useful for testing purposes as it is in tcpdump and
libpcap, as GLib is configured based on the compiler used to compile it,
so you can't necessarily build an application using GLib with a compiler
different from the one used to compile GLib, but we'll add it anyway.)

svn path=/trunk/; revision=4637
2002-01-30 23:01:33 +00:00
Guy Harris
7f2e644e84 Make some variables volatile because GCC on Digital UNIX complained
about them being trashed by setjmp/longjmp (does GCC there stuff them
into registers?  They're bigger than 64 bits, so they don't even fit
into a single register on Alpha).

svn path=/trunk/; revision=4636
2002-01-30 22:58:54 +00:00
Guy Harris
d4017a1ee1 Fix up some type/size problems that showed up when compiling on Digital
UNIX on Alpha.

svn path=/trunk/; revision=4635
2002-01-30 22:55:15 +00:00
Gilbert Ramirez
a8e66fb1c5 dftest needs wiretap library. Thanks to Alex Huetter <ahlx@aon.at>
svn path=/trunk/; revision=4634
2002-01-30 22:41:00 +00:00
Gerald Combs
0d0e0d3cf6 manuf: Periodic updates from "make-manuf".
manuf.tmpl: Update 00:B0:D0 as per http://www.ethereal.com/lists/ethereal-cvs/200201/msg00048.html so that make-manuf won't clobber the fix.

svn path=/trunk/; revision=4633
2002-01-30 22:23:32 +00:00
Guy Harris
f560c48396 Bug fixes from Marc Milgram.
svn path=/trunk/; revision=4632
2002-01-30 18:58:04 +00:00
Guy Harris
a2e6d3175a Updated GIOP plugins, from Frank Singleton.
svn path=/trunk/; revision=4631
2002-01-30 18:55:39 +00:00
Guy Harris
7b4403d361 Try defining just _USE_XOPEN and see if that gets "strptime()" declared
on most platforms; it works on Solaris, at least.

svn path=/trunk/; revision=4630
2002-01-30 10:19:44 +00:00
Guy Harris
e6f24ee951 Alas, on Solaris, defining _XOPEN_SOURCE causes some things not in the
X/Open specs *not* to be defined, so we also have to define
__EXTENSIONS__.

XXX - can we just define __USE_XOPEN, and not define _XOPEN_SOURCE? Is
that sufficient to get "strptime()" declared on all platforms?

svn path=/trunk/; revision=4629
2002-01-30 10:10:03 +00:00
Guy Harris
7bd0d9a4f7 Solaris's "/usr/ucb/sed" isn't good enough either.
svn path=/trunk/; revision=4628
2002-01-30 10:05:07 +00:00
Guy Harris
5ec8fb43a5 IPv6 name resolution support on Solaris 8, from Heikki Vatiainen.
svn path=/trunk/; revision=4627
2002-01-30 08:46:29 +00:00
Guy Harris
628ea3c84a On Solaris, check whether "sed" is "/usr/bin/sed", and fail if it is, as
Solaris's "/usr/bin/sed" is inadequate to handle, in libtool, a list of
object files as large as the list in Ethereal.

svn path=/trunk/; revision=4626
2002-01-30 08:01:15 +00:00
Guy Harris
12c499603e XFree86 installed with its own zlib isn't the only reason why an old
zlib might be found when linking with the GTK+ link flags, so don't
imply that it is in error messages.

svn path=/trunk/; revision=4625
2002-01-30 07:52:52 +00:00
Gilbert Ramirez
147b9e8d52 Use:
#ifndef _XOPEN_SOURCE
#define _XOPEN_SOURCE 500
#endif
#define __USE_XOPEN
#include <time.h>

to get strptime() declared in time.h on various systems. I hope
this helps more than it hurts.

svn path=/trunk/; revision=4624
2002-01-29 22:57:31 +00:00
Guy Harris
3c1fb071eb Redo the previous change in a slightly cleaner fashion (don't convert
the result of "g_hash_table_lookup()" to an integer until you've
determined that it's not a null pointer, i.e. that the lookup
succeeded).

svn path=/trunk/; revision=4623
2002-01-29 21:49:43 +00:00
Guy Harris
e08be416ff "NULL" is a pointer.
Objects of type "guint32" are integers.

Don't compare the former with the latter.

svn path=/trunk/; revision=4622
2002-01-29 21:37:58 +00:00
Gilbert Ramirez
e7148a16b4 Fixes from Joe Litman <jlitman@fvc.com>
svn path=/trunk/; revision=4621
2002-01-29 17:18:06 +00:00
Guy Harris
638c1bfba8 Fix a typo.
svn path=/trunk/; revision=4620
2002-01-29 10:44:43 +00:00
Guy Harris
a66d50bbf2 Untested support for AiroPeek captures.
svn path=/trunk/; revision=4619
2002-01-29 09:45:58 +00:00
Guy Harris
d5df557923 DCE RPC enhancements, and SAMR improvements, from Ronnie Sahlberg.
svn path=/trunk/; revision=4618
2002-01-29 09:13:28 +00:00
Guy Harris
5cf3587feb Support a libpcap link-layer type of 17 as DLT_PFLOG unless DLT_LANE8023
is defined as 17.

svn path=/trunk/; revision=4617
2002-01-29 08:55:24 +00:00
Guy Harris
c873f79156 Support for capturing on, and reading captures from, OpenBSD firewall
logging virtual interface, from Mike Frantzen.

svn path=/trunk/; revision=4616
2002-01-29 08:44:53 +00:00
Guy Harris
d76a4172a6 The ring buffer code only supports libpcap format captures; print an
error message and quit if the user tries to use ring buffering with
another capture file format, and put a note about that in the Tethereal
man page.

svn path=/trunk/; revision=4615
2002-01-29 05:38:56 +00:00
Guy Harris
80dcfd02ac Some capture formats for 802.11 have fixed-length link-layer headers
(padded to the maximum length); add code to handle that.

svn path=/trunk/; revision=4614
2002-01-28 01:13:48 +00:00
Guy Harris
b3bc97d7f5 Add support for dissecting NT FILETIME time stamp values.
Get rid of a level of hierarchy in some SMB field names.

svn path=/trunk/; revision=4613
2002-01-28 00:58:46 +00:00
Guy Harris
eb0f5ed538 Not all pointers in RAP packets point to null-terminated strings; add
support for the "b" descriptor item in data, for pointers that point to
arrays of bytes - the descriptor item includes a byte count giving the
number of bytes in the array.

Handle the "logon hours" bitmask in that fashion.

Sometimes it appears that -1 means "unknown", and sometimes it appears
that 0 means "unknown", for the last logoff date/time; interpret both of
them as "unknown" (or "never").

svn path=/trunk/; revision=4612
2002-01-27 22:25:48 +00:00
Guy Harris
a765213629 Fix "add_byte_param()" not to report multi-byte parameters as having the
wrong type.

Don't have routines that create subtrees for the data in a RAP reply -
just have a string for the name to give the subtree.  Create the subtree
iff the reply has an entry count; if there's no name, use "Entries", and
if there's no ett_ value for it, use a generic one.

If there's no routine to create a subtreee for an entry in a RAP reply,
don't create the subtree - some entries have only one member, so there's
no point in creating a subtree for them.  Provide an ett_ value to use
if we don't know what the entry looks like.

Properly terminate "lm_null_list[]".

Fix the tables for the NetUserGetInfo API.

Add tables for the NetUserGetGroups API.

Add #defines and names for all the APIs in the SNIA CIFS spec (but fix
up some of the names to reflect what the actual API names appear to be).

Display the RAP API number in decimal, not hex, for unknown APIs.

Use the right hf_ value when displaying the auxiliary data descriptor.

svn path=/trunk/; revision=4611
2002-01-27 03:04:30 +00:00
Guy Harris
32b4f58cd7 From Motonori Shindo: protect include of <netinet/in.h> with #ifdef
HAVE_NETINET_IN_H.

svn path=/trunk/; revision=4610
2002-01-25 09:44:52 +00:00
Guy Harris
42a38685cd In the "Announce change to UAS or SAM" NETLOGON message, dissect the
"Large Serial Number" as a 64-bit little-endian integer, and dissect the
"NT Date/Time" as a FILETIME by calling "dissect_smb_64bit_time()".

Export "dissect_smb_64bit_time()" so that we can do so.

svn path=/trunk/; revision=4609
2002-01-25 09:42:21 +00:00
Guy Harris
55bed21e45 From Ronnie Sahlberg:
NDR pointer handling in DCE RPC
	SAMR updates

svn path=/trunk/; revision=4608
2002-01-25 08:35:59 +00:00
Guy Harris
7f0ef5ec87 From Tim Potter: NT SID dissection.
Don't label the SID in an ACE as an "NT SID SID", label it as an "NT ACE
SID".

svn path=/trunk/; revision=4607
2002-01-25 08:02:01 +00:00
Guy Harris
886b4994ec Add support for ATM captures (based on writing one out and handing it to
NetMon 2.0; I don't have any ATM captures *from* NetMon to try it on, so
I don't know what significance the "destination address" and "source
address" fields have, but we can at least read the captures we ourselves
write out, as can NetMon).

svn path=/trunk/; revision=4606
2002-01-24 23:02:56 +00:00
Guy Harris
eb2d6593dc Replace a bunch of "tvb_length()" and "tvb_length_remaining()" calls in
arguments to "proto_tree_add_text()", and to "proto_tree_add_XXX()" calls
that add FT_NONE or FT_PROTO items to the protocol tree, with -1.

Replace some calls to "tvb_length()" or "tvb_length_remaining()" with
calls to "tvb_reported_length()" and "tvb_reported_length_remaining()",
as those give the actual length of the data in the packet, not just the
data that happened to be captured.

svn path=/trunk/; revision=4605
2002-01-24 09:20:54 +00:00
Guy Harris
6f334976e0 Fix typo, as per mail from Greg Franks.
svn path=/trunk/; revision=4604
2002-01-24 07:24:56 +00:00
Guy Harris
910c2ee830 From Frank Singleton:
- Cleanup of unused code after implementing recursion
	- Fix some spelling errors.

svn path=/trunk/; revision=4603
2002-01-23 23:15:32 +00:00
Guy Harris
33a5bc4772 From Hamish Moffatt: set the year to 1970 before parsing the date, in
case there's no date specified.

Set the day-of-month to 1, as well, and set the "is DST" flag to "not
known", i.e. -1.

svn path=/trunk/; revision=4602
2002-01-23 08:35:17 +00:00
Guy Harris
0a979b81b8 Get rid of "m"/"M" and other Macintosh references in names - it appears
that EtherPeek for Windows uses the same format as EtherPeek for MacOS,
so the code isn't specific to the MacOS version.

Check the physMedium value in the secondary header, and leave a
placeholder for a value of 1, which is presumably used in AiroPeek
captures.

Treat unknown mediaType and physMedium values as indications that we
don't have a *Peek file, not as unsupported *Peek files - we need all
the heuristics we can get.

svn path=/trunk/; revision=4601
2002-01-23 06:32:52 +00:00
Guy Harris
20d4266049 From Ronnie Sahlberg: add support for finding the response that matches
a request.

svn path=/trunk/; revision=4600
2002-01-23 05:38:32 +00:00
Guy Harris
be0b8a2d31 Fix up various product names and descriptions in the lists of file
formats we can read; include vendor names.

We should be able to read TokenPeek captures, as well as captures from
the Windows versions of EtherPeek.

Don't list the version numbers for EtherPeek and TokenPeek - those are
file format version numbers, not program version numbers.

svn path=/trunk/; revision=4599
2002-01-22 22:38:05 +00:00
Guy Harris
f953bd7415 From Ricardo Barroetave�a: don't give a PDU ordinal number for
LDP-over-UDP, as there's only one LDP PDU per UDP PDU.

svn path=/trunk/; revision=4598
2002-01-22 20:21:39 +00:00
Guy Harris
8d1812f93c From Alan Harrison: set "wth->phdr.pkt_encap" to "wth->file_encap" in
the V7-format read routine.

svn path=/trunk/; revision=4597
2002-01-22 20:01:07 +00:00