Commit Graph

553 Commits

Author SHA1 Message Date
Guy Harris 44fed5407e From Olivier Biot:
- Move all static definitions from packet-wbxml.h to packet-wbxml.c
 - Comment out inclusion of packet-wbxml.h in packet-wbxml.c
 - Append WBXML + version + public ID to the Info column

Then, while we're at it, get rid of packet-wbxml.h (we can reinstate it
if there's any functionality to export other than the dissector) and get
rid of the include of packet-wbxml.h (and update comments not to refer
to it).

svn path=/trunk/; revision=7153
2003-02-14 19:39:54 +00:00
Guy Harris d48ec06a6a From Olivier Biot: WBXML/WMLC support.
svn path=/trunk/; revision=7084
2003-02-06 01:23:32 +00:00
Guy Harris 625d0088d4 From Teemu Rinta-aho: draft 20 MIPv6 support (now in a file of its own).
svn path=/trunk/; revision=7071
2003-02-04 20:17:01 +00:00
Guy Harris ee3449d08b From Chris Waters: MSN Messenger support.
svn path=/trunk/; revision=7045
2003-01-30 18:49:47 +00:00
Jörg Mayer fb2884ff99 Add the FAQ to the help menu
svn path=/trunk/; revision=7033
2003-01-29 12:58:48 +00:00
Guy Harris ff9fece331 SSH dissector, from Huagang Xie.
svn path=/trunk/; revision=7001
2003-01-25 00:22:50 +00:00
Tim Potter 354a9a8018 packet-dcerpc-nt.c is no longer a dissector so adjust Makefiles
accordingly.

svn path=/trunk/; revision=6996
2003-01-24 05:41:33 +00:00
Guy Harris 498c94b10a Add a "capture_arcnet()" routine and use it when capturing.
In "dissect_arcnet_common()", fetch the protocol ID using the correct
offset rather than a hardwired 4.

svn path=/trunk/; revision=6982
2003-01-23 06:57:37 +00:00
Guy Harris e120160577 From Dinesh Dutt:
- A new decoder called MDSHDR which decodes the internal header of the
      Cisco MDS switch (this is different from the Boardwalk header).
    - Support for some more new columns as part of FC support.
    - Fixed the decoding of the Special Frame in FCIP.
    - Fixed the decoding of credit management type field in FLOGI/PLOGI frame
      in FC-ELS.

svn path=/trunk/; revision=6974
2003-01-22 06:26:36 +00:00
Ronnie Sahlberg 96a18fb8cf TopTalkers feature for Ethernet/IP/TokenRing
IO-Users is a feature for tethereal that will print statistics on io usage
similar to top talkers in other tools.

It needs to be ported to ethereal with a nice graph sometime later.

try:
-z io,users,ip

see man-page

svn path=/trunk/; revision=6972
2003-01-22 01:24:06 +00:00
Ronnie Sahlberg 48d3d8eb26 SMB RTT statistics for tethereal and ethereal.
SMB RTT statistics are similar to the RTT statistics already supported by ONC-RPC and DCE-RPC.
It will present a table with all seen SMB commands and present the Min/Max and Avg response time in ms.

Transaction2 and NT-Transaction commands are broken out and presented in its own subtables.

tethereal feature is activated with -z smb,rtt    switch
and in ethereal it is activated either through -0z smb,rtt switch or through the Menu.

svn path=/trunk/; revision=6966
2003-01-22 00:40:36 +00:00
Jörg Mayer 2b78e3931d Fix for the problem that the aclocal-missing directory was not included in make dist-gzip
svn path=/trunk/; revision=6964
2003-01-22 00:08:12 +00:00
Gerald Combs aa3831b6cf Add packet-ntlmssp.h to Makefile.am.
svn path=/trunk/; revision=6950
2003-01-21 00:39:57 +00:00
Guy Harris 96b2d60763 From Huagang Xie: dissector for MySQL protocol.
svn path=/trunk/; revision=6939
2003-01-19 21:29:10 +00:00
Guy Harris 943ef396d4 Add "doc/README.tapping" to the list of files that go into the release
tarballs.

svn path=/trunk/; revision=6933
2003-01-16 07:10:24 +00:00
Guy Harris a002a0fec4 From Christian Falckenberg: beginnings of a MEGACO dissector.
Move SCTP payload protocol IDs to a header file, and get the PPIDs from
that header file rather than defining them in dissectors running atop
SCTP.  Use both the old(?) and official PPID for ASAP.

svn path=/trunk/; revision=6926
2003-01-14 23:53:40 +00:00
Guy Harris 6de6ff2fb8 From Dinesh Dutt:
- Decoders for the few remaining FC protocols not included in my first
  patch. Included in this list are decoders for FC-CT (common transport),
  Name Server (dNS), Fabric Configuration Server (FCS) and Zone Server
  (FZS).

- Decoder for MDS Debug Port Adapter. MDS Debug Port Adapter (internal
  name was   Boardwalk and this is the file name) is a piece of hardware
  that can be purchased with Cisco's MDS Fibre Channel switches that
  converts FC frames into Ethernet frames.  One end is connected to a
  port on a FC switch and the other end is connected to a FE/GE Ethernet
  port.  The decoder included here decodes the encapsulation header that
  carries information such as SOF/EOF of FC frames.

svn path=/trunk/; revision=6919
2003-01-14 01:17:44 +00:00
Guy Harris 68799ac1cd Add a new "chdlctypes.h" file for Cisco HDLC type values that aren't
just Ethernet type values.  Move the type value for ISO network-layer
protocols there, and put the type value for IEEE spanning tree there as
well, use that value in the BPDU dissector, and add an item to the CHDLC
dissector for it.

svn path=/trunk/; revision=6915
2003-01-11 10:16:22 +00:00
Guy Harris 94800ef0fb From Chris Waters: support Tazmen Sniffer Protocol and DLT_TZSP captures
from network-based libpcaps that use that protocol.

svn path=/trunk/; revision=6875
2003-01-08 05:03:54 +00:00
Guy Harris 0551b7030f Add an X.29 dissector.
The Q bit in X.25 doesn't mean "this is QLLC traffic", it's just a "this
packet is special" indication.  Have the X.25 dissector pass as the
"private_data" pointer a pointer to a gboolean indicating whether the Q
bit was set or not.  Replace the "decode non-Q-bit traffic as SNA"
option with a "decode traffic as QLLC/SNA if we didn't see the Call
Request packet and thus don't know what it is" option, which hands
traffic to the QLLC dissector for that traffic.  Have the QLLC dissector
hand traffic to the SNA dissector if the Q bit isn't set.

Arrange that we determine whether the Q bit is set regardless of whether
we're building the protocol tree or not.

If we don't just dissect traffic as QLLC/SNA if we didn't see the Call
Request packet, check not only for 0x45 (as an indication that it's
probably IP), check also for NLPID_ISO8473_CLNP and treat that as an
indication that it's probably OSI CLNP.

svn path=/trunk/; revision=6854
2003-01-06 02:24:57 +00:00
Guy Harris e56b77f4cd Add support for SDLC encapsulation in DOS Sniffer captures; that
includes adding an SDLC dissector.

svn path=/trunk/; revision=6848
2003-01-03 22:31:26 +00:00
Guy Harris 87ed53914b From Jeff Morriss:
make ANSI point codes filterable in MTP3;

	fix a bug in the ANSI SLS dissection;

	have MTP3 store the SI for use by subdissectors;

	add a new MTP3-Management dissector.

Fix Makefile.nmake to include the Wellfleet HDLC dissector.

svn path=/trunk/; revision=6837
2003-01-02 20:44:32 +00:00
Guy Harris 3a92530a52 From Devin Heitmueller: support for decrypting DCERPC conversations
using NTLMSSP version 1.

Show stub data as such for all requests and replies where we can't
dissect the stub data as a request or reply for some DCERPC-based
protocol.

svn path=/trunk/; revision=6825
2002-12-31 08:05:29 +00:00
Richard Sharpe 05fa98f948 Add support for Wellfleet HDLC. It now can see inside the packets and handles
the capture I was sent as a bunch of TCP segments containing LPD stuff.

svn path=/trunk/; revision=6810
2002-12-20 07:56:07 +00:00
Gerald Combs b287a6d3d9 Rename md5.[ch] to crypt-md5.[ch] to conform with our naming conventions.
svn path=/trunk/; revision=6793
2002-12-17 16:06:54 +00:00
Gerald Combs 9c0d1cbfb7 From James Harris: Decrypt RADIUS user passwords.
The MD5 is copyrighted by L. Peter Deutsch, and released under the same
license as zlib.  It is GPL-compatible, and should NOT have the GPL
applied to it.

svn path=/trunk/; revision=6790
2002-12-17 04:05:25 +00:00
Guy Harris 22496138e9 Add a capture routine for IP-over-FC, and call it from the capture code.
svn path=/trunk/; revision=6767
2002-12-08 22:35:30 +00:00
Gerald Combs 8f75728dea Add packet-ipfc.c and packet-fcbls.h to Makefile.am.
svn path=/trunk/; revision=6761
2002-12-08 03:38:19 +00:00
Gerald Combs b60b1414c3 From Dinesh Dutt: Add Fibre Channel support, including FCIP, Basic FC
header, Extended Link Service, Interswitch Link Service, FCP, and IPFC.

svn path=/trunk/; revision=6757
2002-12-08 02:32:36 +00:00
Gerald Combs 804d5ab842 Add make-tapreg-dotc to the distribution.
svn path=/trunk/; revision=6755
2002-12-07 21:43:27 +00:00
Jörg Mayer acbf9274fe Include packet-wlancap.h into the tarball
svn path=/trunk/; revision=6733
2002-12-03 01:44:22 +00:00
Guy Harris dd8f630768 From Devin Heitmueller:
add MD4 and RC4 crypto support;

	use it to decrypt the NT password encryption block in
	UnicodeChangePassword2.

svn path=/trunk/; revision=6727
2002-12-03 00:37:27 +00:00
Ronnie Sahlberg cf6ddd5b77 New protocol: Stub dissector for ClearCase NFS protocol
svn path=/trunk/; revision=6640
2002-11-15 22:45:52 +00:00
Richard Sharpe 6485d818d6 Add HyperSCSI support. SCSI over ethernet.
svn path=/trunk/; revision=6624
2002-11-14 07:54:48 +00:00
Guy Harris 8ee4a65f76 From Solomon Peachy: support for new "wlancap" 802.11 extra-information
header.

Add overflow checks to "BYTES_ARE_IN_FRAME()", and cast all arguments to
unsigned values (negative values should never be passed) to squelch
compiler warnings.

svn path=/trunk/; revision=6567
2002-11-06 21:49:34 +00:00
Ronnie Sahlberg 7775a0bec5 New tap extension to tethereal: ProtoColInfo
Using this command line option you canb now place any arbitrary display-filter fields on the COL_INFO line.

Assume you want NFS dissector in tethereal to put ALL filehandle hashes (nfs.fh.hash) on COL_INFO.
No worries, just add

-z proto,colinfo,nfs.fh.hash,nfs.fh.hash

as a parameter to tethereal.

Never again do you need to hack tethereal and recompile just because you want some extra info on the COL_INFO line.

svn path=/trunk/; revision=6560
2002-11-04 12:11:01 +00:00
Olivier Abad 05ef1fc475 Merge gtk and gtk2 directories.
svn path=/trunk/; revision=6552
2002-11-03 17:38:45 +00:00
Ronnie Sahlberg b1c157b995 From Jochen Friedrich : Support for the RPL (Remote Program Load) protocol implemented on some NIC bootproms.
svn path=/trunk/; revision=6548
2002-11-02 22:23:16 +00:00
Ronnie Sahlberg cdb4e6929c New tap extension for tethereal : ProtocolHierarchyStatistics.
Similar to what is available on ethereal:/Tools/ProtocolHierarchyStatistics
but this one can handle ALL protocols that tethereal has dissectors for.

Maybe a gtk/gtk2 version of this should replace the existing one in ethereal?


Try -z io,phs   or -z io,phs,<filter>  to test it.

svn path=/trunk/; revision=6532
2002-11-01 05:29:36 +00:00
Ronnie Sahlberg dcc95e010f New tap for tethereal: io statistics that provides frames/bytes counts for frames matching user specified filters.
Try it with
-z io,stat,1,nfs,smb,arp
on a capture containing both nfs, cifs and arp traffic.

svn path=/trunk/; revision=6531
2002-11-01 01:49:40 +00:00
Tim Potter f64906c9b3 Added support for a new DCERPC pipe supported by Windows 2000. It has
something to do with Active Directory and has been named LSA_DS by the
Samba Team.

svn path=/trunk/; revision=6527
2002-11-01 00:42:00 +00:00
Guy Harris 8442ad9a32 From Ronnie Sahlberg: have a registration interface for tap listeners,
and generate the table of stuff to register from tap source files, so
Tethereal doesn't need to know what tap listeners exist.

Get rid of "tap-xxx.h" files, as they're now empty.

Add "tethereal-tap-register.c" to the .cvsignore file, as it's a new
generated file.

Update "Makefile.nmake" to generate "tethereal-tap-register.c".

Clean up "Makefile.am" and "Makefile.nmake" a bit.

svn path=/trunk/; revision=6525
2002-10-31 22:16:01 +00:00
Guy Harris 56f644145e Discard the WTAP_ENCAP_LAPD encapsulation type in favor of a
WTAP_ENCAP_ISDN encapsulation type, which includes a pseudo-header
giving the direction (user-to-network or network-to-user) and the
channel number.

Add a new circuit type, using the ISDN channel number as the circuit ID.

Add an ISDN dissector to put the direction and channel number into the
protocol tree and to call the appropriate dissector for the payload
based on the channel (LAPD for the D channel; V.120, PPP, or data for B
channels, based on some heuristics).

svn path=/trunk/; revision=6521
2002-10-31 07:12:42 +00:00
Guy Harris a71d1d910e From Ronnie Sahlberg: add a tap for statistics for DCERPC interfaces.
svn path=/trunk/; revision=6479
2002-10-23 03:49:13 +00:00
Guy Harris 75ef739627 From Jamie Fournier: AFS 4 UPDATE server support.
Merge two CREDITS entries for Jamie.

svn path=/trunk/; revision=6472
2002-10-22 08:47:46 +00:00
Guy Harris 27df774d0b From Peter Fales: ARCNET support.
Sort the lists of dissectors in the DISSECTOR_SRC macros in
"Makefile.am" and "Makefile.nmake".

svn path=/trunk/; revision=6450
2002-10-18 21:00:01 +00:00
Jörg Mayer 6743236a10 Remove experimental (and faulty) stuff that leaked in while adding a dissecotor in 1.500
svn path=/trunk/; revision=6384
2002-10-09 00:48:10 +00:00
Ed Warnicke b54b76e697 Added a dissector plugin for Packet Cable Lawful Intercept.
svn path=/trunk/; revision=6366
2002-10-03 02:56:59 +00:00
Gerald Combs 33608d4763 Makefile.am fixes to pass "make distcheck" tests
svn path=/trunk/; revision=6357
2002-09-29 19:10:07 +00:00
Jörg Mayer 37c599b47d Dissector for Novell Distributed Print Services by Greg Morris.
NDPS runs on top of SPX and TCP.

svn path=/trunk/; revision=6323
2002-09-23 17:14:54 +00:00