Commit graph

545 commits

Author SHA1 Message Date
Guy Harris
e120160577 From Dinesh Dutt:
- A new decoder called MDSHDR which decodes the internal header of the
      Cisco MDS switch (this is different from the Boardwalk header).
    - Support for some more new columns as part of FC support.
    - Fixed the decoding of the Special Frame in FCIP.
    - Fixed the decoding of credit management type field in FLOGI/PLOGI frame
      in FC-ELS.

svn path=/trunk/; revision=6974
2003-01-22 06:26:36 +00:00
Ronnie Sahlberg
96a18fb8cf TopTalkers feature for Ethernet/IP/TokenRing
IO-Users is a feature for tethereal that will print statistics on io usage
similar to top talkers in other tools.

It needs to be ported to ethereal with a nice graph sometime later.

try:
-z io,users,ip

see man-page

svn path=/trunk/; revision=6972
2003-01-22 01:24:06 +00:00
Ronnie Sahlberg
48d3d8eb26 SMB RTT statistics for tethereal and ethereal.
SMB RTT statistics are similar to the RTT statistics already supported by ONC-RPC and DCE-RPC.
It will present a table with all seen SMB commands and present the Min/Max and Avg response time in ms.

Transaction2 and NT-Transaction commands are broken out and presented in its own subtables.

tethereal feature is activated with -z smb,rtt    switch
and in ethereal it is activated either through -0z smb,rtt switch or through the Menu.

svn path=/trunk/; revision=6966
2003-01-22 00:40:36 +00:00
Jörg Mayer
2b78e3931d Fix for the problem that the aclocal-missing directory was not included in make dist-gzip
svn path=/trunk/; revision=6964
2003-01-22 00:08:12 +00:00
Gerald Combs
aa3831b6cf Add packet-ntlmssp.h to Makefile.am.
svn path=/trunk/; revision=6950
2003-01-21 00:39:57 +00:00
Guy Harris
96b2d60763 From Huagang Xie: dissector for MySQL protocol.
svn path=/trunk/; revision=6939
2003-01-19 21:29:10 +00:00
Guy Harris
943ef396d4 Add "doc/README.tapping" to the list of files that go into the release
tarballs.

svn path=/trunk/; revision=6933
2003-01-16 07:10:24 +00:00
Guy Harris
a002a0fec4 From Christian Falckenberg: beginnings of a MEGACO dissector.
Move SCTP payload protocol IDs to a header file, and get the PPIDs from
that header file rather than defining them in dissectors running atop
SCTP.  Use both the old(?) and official PPID for ASAP.

svn path=/trunk/; revision=6926
2003-01-14 23:53:40 +00:00
Guy Harris
6de6ff2fb8 From Dinesh Dutt:
- Decoders for the few remaining FC protocols not included in my first
  patch. Included in this list are decoders for FC-CT (common transport),
  Name Server (dNS), Fabric Configuration Server (FCS) and Zone Server
  (FZS).

- Decoder for MDS Debug Port Adapter. MDS Debug Port Adapter (internal
  name was   Boardwalk and this is the file name) is a piece of hardware
  that can be purchased with Cisco's MDS Fibre Channel switches that
  converts FC frames into Ethernet frames.  One end is connected to a
  port on a FC switch and the other end is connected to a FE/GE Ethernet
  port.  The decoder included here decodes the encapsulation header that
  carries information such as SOF/EOF of FC frames.

svn path=/trunk/; revision=6919
2003-01-14 01:17:44 +00:00
Guy Harris
68799ac1cd Add a new "chdlctypes.h" file for Cisco HDLC type values that aren't
just Ethernet type values.  Move the type value for ISO network-layer
protocols there, and put the type value for IEEE spanning tree there as
well, use that value in the BPDU dissector, and add an item to the CHDLC
dissector for it.

svn path=/trunk/; revision=6915
2003-01-11 10:16:22 +00:00
Guy Harris
94800ef0fb From Chris Waters: support Tazmen Sniffer Protocol and DLT_TZSP captures
from network-based libpcaps that use that protocol.

svn path=/trunk/; revision=6875
2003-01-08 05:03:54 +00:00
Guy Harris
0551b7030f Add an X.29 dissector.
The Q bit in X.25 doesn't mean "this is QLLC traffic", it's just a "this
packet is special" indication.  Have the X.25 dissector pass as the
"private_data" pointer a pointer to a gboolean indicating whether the Q
bit was set or not.  Replace the "decode non-Q-bit traffic as SNA"
option with a "decode traffic as QLLC/SNA if we didn't see the Call
Request packet and thus don't know what it is" option, which hands
traffic to the QLLC dissector for that traffic.  Have the QLLC dissector
hand traffic to the SNA dissector if the Q bit isn't set.

Arrange that we determine whether the Q bit is set regardless of whether
we're building the protocol tree or not.

If we don't just dissect traffic as QLLC/SNA if we didn't see the Call
Request packet, check not only for 0x45 (as an indication that it's
probably IP), check also for NLPID_ISO8473_CLNP and treat that as an
indication that it's probably OSI CLNP.

svn path=/trunk/; revision=6854
2003-01-06 02:24:57 +00:00
Guy Harris
e56b77f4cd Add support for SDLC encapsulation in DOS Sniffer captures; that
includes adding an SDLC dissector.

svn path=/trunk/; revision=6848
2003-01-03 22:31:26 +00:00
Guy Harris
87ed53914b From Jeff Morriss:
make ANSI point codes filterable in MTP3;

	fix a bug in the ANSI SLS dissection;

	have MTP3 store the SI for use by subdissectors;

	add a new MTP3-Management dissector.

Fix Makefile.nmake to include the Wellfleet HDLC dissector.

svn path=/trunk/; revision=6837
2003-01-02 20:44:32 +00:00
Guy Harris
3a92530a52 From Devin Heitmueller: support for decrypting DCERPC conversations
using NTLMSSP version 1.

Show stub data as such for all requests and replies where we can't
dissect the stub data as a request or reply for some DCERPC-based
protocol.

svn path=/trunk/; revision=6825
2002-12-31 08:05:29 +00:00
Richard Sharpe
05fa98f948 Add support for Wellfleet HDLC. It now can see inside the packets and handles
the capture I was sent as a bunch of TCP segments containing LPD stuff.

svn path=/trunk/; revision=6810
2002-12-20 07:56:07 +00:00
Gerald Combs
b287a6d3d9 Rename md5.[ch] to crypt-md5.[ch] to conform with our naming conventions.
svn path=/trunk/; revision=6793
2002-12-17 16:06:54 +00:00
Gerald Combs
9c0d1cbfb7 From James Harris: Decrypt RADIUS user passwords.
The MD5 is copyrighted by L. Peter Deutsch, and released under the same
license as zlib.  It is GPL-compatible, and should NOT have the GPL
applied to it.

svn path=/trunk/; revision=6790
2002-12-17 04:05:25 +00:00
Guy Harris
22496138e9 Add a capture routine for IP-over-FC, and call it from the capture code.
svn path=/trunk/; revision=6767
2002-12-08 22:35:30 +00:00
Gerald Combs
8f75728dea Add packet-ipfc.c and packet-fcbls.h to Makefile.am.
svn path=/trunk/; revision=6761
2002-12-08 03:38:19 +00:00
Gerald Combs
b60b1414c3 From Dinesh Dutt: Add Fibre Channel support, including FCIP, Basic FC
header, Extended Link Service, Interswitch Link Service, FCP, and IPFC.

svn path=/trunk/; revision=6757
2002-12-08 02:32:36 +00:00
Gerald Combs
804d5ab842 Add make-tapreg-dotc to the distribution.
svn path=/trunk/; revision=6755
2002-12-07 21:43:27 +00:00
Jörg Mayer
acbf9274fe Include packet-wlancap.h into the tarball
svn path=/trunk/; revision=6733
2002-12-03 01:44:22 +00:00
Guy Harris
dd8f630768 From Devin Heitmueller:
add MD4 and RC4 crypto support;

	use it to decrypt the NT password encryption block in
	UnicodeChangePassword2.

svn path=/trunk/; revision=6727
2002-12-03 00:37:27 +00:00
Ronnie Sahlberg
cf6ddd5b77 New protocol: Stub dissector for ClearCase NFS protocol
svn path=/trunk/; revision=6640
2002-11-15 22:45:52 +00:00
Richard Sharpe
6485d818d6 Add HyperSCSI support. SCSI over ethernet.
svn path=/trunk/; revision=6624
2002-11-14 07:54:48 +00:00
Guy Harris
8ee4a65f76 From Solomon Peachy: support for new "wlancap" 802.11 extra-information
header.

Add overflow checks to "BYTES_ARE_IN_FRAME()", and cast all arguments to
unsigned values (negative values should never be passed) to squelch
compiler warnings.

svn path=/trunk/; revision=6567
2002-11-06 21:49:34 +00:00
Ronnie Sahlberg
7775a0bec5 New tap extension to tethereal: ProtoColInfo
Using this command line option you canb now place any arbitrary display-filter fields on the COL_INFO line.

Assume you want NFS dissector in tethereal to put ALL filehandle hashes (nfs.fh.hash) on COL_INFO.
No worries, just add

-z proto,colinfo,nfs.fh.hash,nfs.fh.hash

as a parameter to tethereal.

Never again do you need to hack tethereal and recompile just because you want some extra info on the COL_INFO line.

svn path=/trunk/; revision=6560
2002-11-04 12:11:01 +00:00
Olivier Abad
05ef1fc475 Merge gtk and gtk2 directories.
svn path=/trunk/; revision=6552
2002-11-03 17:38:45 +00:00
Ronnie Sahlberg
b1c157b995 From Jochen Friedrich : Support for the RPL (Remote Program Load) protocol implemented on some NIC bootproms.
svn path=/trunk/; revision=6548
2002-11-02 22:23:16 +00:00
Ronnie Sahlberg
cdb4e6929c New tap extension for tethereal : ProtocolHierarchyStatistics.
Similar to what is available on ethereal:/Tools/ProtocolHierarchyStatistics
but this one can handle ALL protocols that tethereal has dissectors for.

Maybe a gtk/gtk2 version of this should replace the existing one in ethereal?


Try -z io,phs   or -z io,phs,<filter>  to test it.

svn path=/trunk/; revision=6532
2002-11-01 05:29:36 +00:00
Ronnie Sahlberg
dcc95e010f New tap for tethereal: io statistics that provides frames/bytes counts for frames matching user specified filters.
Try it with
-z io,stat,1,nfs,smb,arp
on a capture containing both nfs, cifs and arp traffic.

svn path=/trunk/; revision=6531
2002-11-01 01:49:40 +00:00
Tim Potter
f64906c9b3 Added support for a new DCERPC pipe supported by Windows 2000. It has
something to do with Active Directory and has been named LSA_DS by the
Samba Team.

svn path=/trunk/; revision=6527
2002-11-01 00:42:00 +00:00
Guy Harris
8442ad9a32 From Ronnie Sahlberg: have a registration interface for tap listeners,
and generate the table of stuff to register from tap source files, so
Tethereal doesn't need to know what tap listeners exist.

Get rid of "tap-xxx.h" files, as they're now empty.

Add "tethereal-tap-register.c" to the .cvsignore file, as it's a new
generated file.

Update "Makefile.nmake" to generate "tethereal-tap-register.c".

Clean up "Makefile.am" and "Makefile.nmake" a bit.

svn path=/trunk/; revision=6525
2002-10-31 22:16:01 +00:00
Guy Harris
56f644145e Discard the WTAP_ENCAP_LAPD encapsulation type in favor of a
WTAP_ENCAP_ISDN encapsulation type, which includes a pseudo-header
giving the direction (user-to-network or network-to-user) and the
channel number.

Add a new circuit type, using the ISDN channel number as the circuit ID.

Add an ISDN dissector to put the direction and channel number into the
protocol tree and to call the appropriate dissector for the payload
based on the channel (LAPD for the D channel; V.120, PPP, or data for B
channels, based on some heuristics).

svn path=/trunk/; revision=6521
2002-10-31 07:12:42 +00:00
Guy Harris
a71d1d910e From Ronnie Sahlberg: add a tap for statistics for DCERPC interfaces.
svn path=/trunk/; revision=6479
2002-10-23 03:49:13 +00:00
Guy Harris
75ef739627 From Jamie Fournier: AFS 4 UPDATE server support.
Merge two CREDITS entries for Jamie.

svn path=/trunk/; revision=6472
2002-10-22 08:47:46 +00:00
Guy Harris
27df774d0b From Peter Fales: ARCNET support.
Sort the lists of dissectors in the DISSECTOR_SRC macros in
"Makefile.am" and "Makefile.nmake".

svn path=/trunk/; revision=6450
2002-10-18 21:00:01 +00:00
Jörg Mayer
6743236a10 Remove experimental (and faulty) stuff that leaked in while adding a dissecotor in 1.500
svn path=/trunk/; revision=6384
2002-10-09 00:48:10 +00:00
Ed Warnicke
b54b76e697 Added a dissector plugin for Packet Cable Lawful Intercept.
svn path=/trunk/; revision=6366
2002-10-03 02:56:59 +00:00
Gerald Combs
33608d4763 Makefile.am fixes to pass "make distcheck" tests
svn path=/trunk/; revision=6357
2002-09-29 19:10:07 +00:00
Jörg Mayer
37c599b47d Dissector for Novell Distributed Print Services by Greg Morris.
NDPS runs on top of SPX and TCP.

svn path=/trunk/; revision=6323
2002-09-23 17:14:54 +00:00
Gerald Combs
66f22c2df8 Remove packet-netflow.h
svn path=/trunk/; revision=6316
2002-09-22 17:20:00 +00:00
Ronnie Sahlberg
acf0825fdd From Jeff Morriss: New protocol SCCP-Management
svn path=/trunk/; revision=6309
2002-09-20 09:22:46 +00:00
Ronnie Sahlberg
4b82a0c5cb From Jaime Fournier, bugfix for dtsprovider and some error codes for dce122
svn path=/trunk/; revision=6299
2002-09-17 09:38:04 +00:00
Jörg Mayer
365a9e0224 New dissector for the FIX protocol by PC Drew
svn path=/trunk/; revision=6298
2002-09-16 17:49:20 +00:00
Ronnie Sahlberg
a7aacfd4f9 From Jaime Fournier: DCE/RPC AFS4INT interface
svn path=/trunk/; revision=6294
2002-09-13 10:36:55 +00:00
Ronnie Sahlberg
b0d021db49 From Jaime Fournier: DCE/RCP FLDB interface
svn path=/trunk/; revision=6293
2002-09-13 10:28:54 +00:00
Ronnie Sahlberg
6ee09ff5d8 From Jaime Fournier: DCE/RPC TKN4INT interface
svn path=/trunk/; revision=6292
2002-09-13 10:20:48 +00:00
Ronnie Sahlberg
5e0494b35e From Jaime Fournier: DCE/RPC SECIDMAP interface
svn path=/trunk/; revision=6291
2002-09-13 10:13:03 +00:00