Commit Graph

5321 Commits

Author SHA1 Message Date
Martin Mathieson 1d5165c8e0 Add support for R6 HSDPA data 'new IEs' (the spec seems not be be very clear...).
Try to cast away a warning seen on buildbot logs

svn path=/trunk/; revision=19229
2006-09-13 13:32:31 +00:00
Ronnie Sahlberg f6976864bf the way we pass dcerpc strings from deep down in helpers to high level dissector functions (dcv->private_data) for things such as strings and sids is a mess and very difficult to handle without a lot of memory leakage.
the biggest problem in changing this is the dcv->private_data usage.


add a dcv->se_data which can keep data around from a request to a response and use this to change the LSA/OpenPolicy2 servername passing from request to response as a test pattern of moving all users of dcv->private data over to use dcv->se_data.

once all users are migrated over we can then change the dcv->private data pointer to be of ep scope and thus not need an explicit free (which is quite difficult and it is quite difficult in the old semantics to know WHEN we need to free this pointer)

this will eventually make the usage more clean and at the same time close down quite a few memory leaks.


eventually this will make dissect_ndr_nt_SID return a pointer to ep allocated memory that need not be explicitely freed.



svn path=/trunk/; revision=19226
2006-09-13 08:30:16 +00:00
Guy Harris 2e64b81928 Not all platforms define "u_short", and "tvb_length_remaining()+4" isn't
guaranteed to fit into a "u_short" in any case.  Use "gint" instead.

Squelch some compiler warnings.

svn path=/trunk/; revision=19225
2006-09-13 01:28:07 +00:00
Anders Broman 5dd7a4e7f9 From: Luca Deri via Andrew Feren:
> please find enclosed a patch to the CFlow dissector (packet-netflow.c) 
> that enables it to decode IPFIX packet traces.

svn path=/trunk/; revision=19221
2006-09-12 19:11:45 +00:00
Anders Broman ffbabd4fb8 Set default port to zero.
svn path=/trunk/; revision=19220
2006-09-12 19:02:10 +00:00
Martin Mathieson 46afb89310 More DCH control types
svn path=/trunk/; revision=19212
2006-09-12 17:13:56 +00:00
Jaap Keuter 593efe3509 Fix for bug 1098. Add BPDU dissector to ethertype 0x8181.
svn path=/trunk/; revision=19211
2006-09-12 12:58:16 +00:00
Ronnie Sahlberg 4919409df7 from Taner Kurtulus and Menno Andriesse
Hi folks,
We think we've found a bug in STANAG 5066 SIS layer dissector.

Problem is at S_EXPEDITED_UNIDATA_INDICATION S_Prim's parser
and occurs when we receive a U_PDU via expedited unidata channel.
Dissector tries to parse first 2 bytes of U_PDU as a header size of  type
21 s_prim (S_UNIDATA_INDICATION). But, this is not an wanted  process on
that parser. Maybe, it was forgotten unchanged from
S_UNIDATA_INDICATION dissector while copying it. So it shows
data (U_PDU) 2 bytes short. Moreover, if data is just 1-byte, TCP datagrams
receive TCP checksum error.


Confirmed.

It was indeed a "copy-paste-did not edit correctly" bug.

While going over the code once more, I found:

1 - One bug in the heuristic. (Changed '&&' to '||')
2 - One to-do that was already done. (Removed the /* TODO */)
3 - One to-do that is now done. ;-)



svn path=/trunk/; revision=19210
2006-09-12 12:08:34 +00:00
Ronnie Sahlberg 073483df45 from Florian Lohoff
Hi,
after using the redback dissector again i found some more protocol
types:



svn path=/trunk/; revision=19209
2006-09-12 11:51:48 +00:00
Ronnie Sahlberg b61e42bc3a from bryant eastham
Also, there is still an outstanding issue regarding the default use of
the "media" dissector. The way it is currently coded there is no way to
have a heuristic decoder when a content-type header is specified.


In this way if there is a decoder for a specific content-type then it
will be used, then the heuristic decoders have a chance, and finally the
default of either the media-type decoder of the http_payload decoder.



svn path=/trunk/; revision=19208
2006-09-12 11:39:51 +00:00
Martin Mathieson 3dc82c316d Various small fixes and prettifications
svn path=/trunk/; revision=19207
2006-09-12 11:36:42 +00:00
Ronnie Sahlberg a92d1dc783 put the ah and esp payload as its own top level expansion in the tree instead of as an expansion inside the ah/esp layer.
since source/dest/protocol/info is updated by the content of the payload    it doesnt make sense to hide the actual payload inside esp/ah
it just would look confusing



svn path=/trunk/; revision=19206
2006-09-12 10:04:11 +00:00
Ronnie Sahlberg a67f7da9d7 prettify dissection of ESP
show the IV as a hexadecimal
show the protocol name for the Next header field inside ESP



svn path=/trunk/; revision=19204
2006-09-12 09:53:10 +00:00
Ulf Lamping 04fe34d711 various nmake related build file cleanups
svn path=/trunk/; revision=19198
2006-09-12 00:27:03 +00:00
Ulf Lamping 9fee393b87 tweak the nmake build so the NET-SNMP library is in fact optional (as it is in the UNIX builds)
svn path=/trunk/; revision=19196
2006-09-11 22:47:57 +00:00
Anders Broman 96c13a1000 Fix bug http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1091
h248_handle was declared localy, udp port was not added at register.

Added a few more packagenames.

svn path=/trunk/; revision=19190
2006-09-11 20:35:24 +00:00
Martin Mathieson 1936461d8d Added E-DCH (HSUPA) channels to FP.
Also show VPI/VCI/CID in ATM protocol label.

svn path=/trunk/; revision=19189
2006-09-11 12:03:29 +00:00
Jaap Keuter f29dbe34d8 VRRPver3 support fixed: Count restored, Auth Type is reserved field.
svn path=/trunk/; revision=19188
2006-09-10 18:48:33 +00:00
Ronnie Sahlberg d517c305b1 fix for bug 1045
windows in SYN and SYN+ACK packets are not scaled so dont apply window scaling to them when displaying them in the tree


svn path=/trunk/; revision=19186
2006-09-10 14:34:57 +00:00
Ronnie Sahlberg 6d3c94a53a implement support to reassemble tcp sessions until the end of the session (FIN)
add required code to the http (and others) code in req_resp_hdrs.c to signal to tcp
when it wants a session to be reassembled to the FIN.

This is currently done for all HTTP packets where we have a Content-type in the header but no content-length.




svn path=/trunk/; revision=19185
2006-09-10 14:03:08 +00:00
Anders Broman 505465d5a4 From Frédéric Roudaut:
as requested  here is a patch  in order to take into account  Encryption 
and Authentication keys for ESP in hexa. 
You only have to write your key with 0x first. In this case if the key 
is not in 8-bit unit, it will be considered as starting with a "0" (4 bits). Excepted this case, the key should be completely written, even if it 
starts with "0x00".

svn path=/trunk/; revision=19181
2006-09-08 07:32:13 +00:00
Anders Broman d0ee14432c Move the code to handle ISO protocols over TCP/TPKT to packet-osi.c where it belongs.
svn path=/trunk/; revision=19180
2006-09-08 06:58:40 +00:00
Luis Ontanon a81d83486a removed options.
now it can either be called as

make-sminmpec.pl

so it will fetch the file only if it has been modified since we last loaded it

or 

make-sminmpec.pl enterprise-numbers

to regenerate the C file from the given file.

Luis


svn path=/trunk/; revision=19177
2006-09-07 22:38:16 +00:00
Ulf Lamping ac76ad1c64 tweak some expert infos so they better work with the composite dialog (e.g. remove some minor details)
svn path=/trunk/; revision=19176
2006-09-07 20:35:26 +00:00
Ulf Lamping a6d4e249a6 add some probable protocol IDs from the DCOM specs
svn path=/trunk/; revision=19175
2006-09-07 20:33:02 +00:00
Ulf Lamping 4a03300106 distinguish between things "ToBeDone" and "NoSpecificationAvailable" as some DCOM things are just unknown and cannot be implemented therefore
svn path=/trunk/; revision=19174
2006-09-07 20:30:48 +00:00
Luis Ontanon c704e3414f From Andrew Feren:
This adds some features to update enterprise-numbers from the web.

As used in the Makefile currently
 make-sminmpec.pl <infile> <outfile.c>

works exactly the same.  Additionally <infile> can be a URL to an infile in
the expected format.

Using the new "-gen" switch will create a new <infile>

example:
make-sminmpec.pl -gen \
   http://www.iana.org/assignments/enterprise-numbers \
   enterprise-numbers

other than that I modified so that calling it like
make-sminmpec.pl -gen
be like 
make-sminmpec.pl -gen \
 http://www.iana.org/assignments/enterprise-numbers \
 sminmpec.c



svn path=/trunk/; revision=19172
2006-09-07 16:16:51 +00:00
Ronnie Sahlberg 457c3f13c0 pidl now handles empty bitmaps properly so no need for the dummy (dont trigger empty bitmapbug entry)
svn path=/trunk/; revision=19170
2006-09-07 10:53:32 +00:00
Jaap Keuter 1c1f856470 Update enterprise-numbers
svn path=/trunk/; revision=19165
2006-09-06 21:08:24 +00:00
Martin Mathieson b7505630c8 Dissect some more common control messages
svn path=/trunk/; revision=19164
2006-09-06 14:08:40 +00:00
Ronnie Sahlberg 9fddfa2777 fix for the typo in bug 1094
svn path=/trunk/; revision=19163
2006-09-06 08:36:13 +00:00
Jörg Mayer 370a162e87 - Make options filterable
- Display options in info column
- Only remember blksize from OACK packets
- Add some rfc numbers
- Move tftp_dissect_options in front of dissect_tftp
  (I forgot to fix the forward decl once too often ;)
- Warning fixes
- Add expert error in case of tftp-error pdu


svn path=/trunk/; revision=19162
2006-09-06 08:24:36 +00:00
Jörg Mayer adc56b8e95 option name "blksize" is case in-sensitive
svn path=/trunk/; revision=19158
2006-09-05 16:09:49 +00:00
Martin Mathieson 26285e4b2f Make smrse & radius dissectors findable by name
svn path=/trunk/; revision=19157
2006-09-05 16:06:41 +00:00
Martin Mathieson 2e1177c328 For DCT2000, show better transport info:
- for FP over AAL2, add CID to AAL tree
- for IPPRIM protocols, show IPV4 addresses in src & dst columns

svn path=/trunk/; revision=19156
2006-09-05 16:05:23 +00:00
Jörg Mayer 56e1dd7780 Fix for http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1092
Actually, this was a feature request:

Store the value of the blksize option in the conversation data
and use that information to compare whether we have reached the
last packet.

Includes the cleanup ideas from Ronnie.

svn path=/trunk/; revision=19155
2006-09-05 15:58:11 +00:00
Ronnie Sahlberg 542380d974 fix for bug 1054
there were instances where the function dissect_nt_sid() would not fill in the return pointer for the sid string
causing callers that rely on that this string will ALWAYS be assigned try to access and g_free() an uninitialized pointer.

dissect_nt_sid() should be changed to use and return ep allocated memory instead of gmalloced memory



svn path=/trunk/; revision=19154
2006-09-05 15:13:39 +00:00
Ronnie Sahlberg 52c827f1d1 fix for bug 1079
verify that stat_info->request_uri is non null before doing string manipulations on it
so that we dont try to dereference a null pointer further down the code


svn path=/trunk/; revision=19153
2006-09-05 14:32:15 +00:00
Jaap Keuter db31d4a72f Fix for bug 1093, as proposed by Atsushi Fukumoto
svn path=/trunk/; revision=19152
2006-09-05 12:22:44 +00:00
Anders Broman 5c682dd6ee From Stephen Fisher:
A patch to bring the VNC dissector almost to completion.

I have not had a chance to finish the server message type "frame buffer 
update," which are the pixel values for screen rectangle updates.  
Everything else is there - tracking the keys the user is pushing, 
ringing a bell on the client, mouse button pushes/pointer movements, 
etc.

svn path=/trunk/; revision=19145
2006-09-05 05:38:11 +00:00
Guy Harris ee7166aff1 Declare "dissect_h248_Name()" and "dissect_h248_Value()" before they're
used.

svn path=/trunk/; revision=19141
2006-09-04 23:20:52 +00:00
Anders Broman c99428334a Fix(?) bug http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1042
Does the string need to be freed ad destruction of the hashtable?

Surplus add_text removed.

svn path=/trunk/; revision=19139
2006-09-04 21:07:35 +00:00
Anders Broman 316453598a From Oleg Kostenko:
This patch will add the following functionality to the H.248
 dissector:

 1. Dissection of properties from Annex C.11 SDP equivalents.

 2. Dissection of EventNames and SignalNames from Annex E Basic
Packages.

 3. Dissection of event and signal parameters from Annex E.9 Analog
 Line Supervision Package.

 4. Dissection of statistics from Annex E.11 Network Package and
 Annex E.12 RTP Package.

svn path=/trunk/; revision=19136
2006-09-04 18:10:14 +00:00
Jaap Keuter 6f7f25b8d5 From Donald White:
First, the length of the header of a sub-frame may be miscalculated if
if the PID field is not present, but was present in a previous
sub-frame.  The calculation of the header length will use the value from
the previous sub-frame.

Second, correct the typo "ength" to "length".

Third, the length of the current sub-frame was not passed as the
reported length to a sub-dissector.  When the sub-dissector calls
tvb_reported_length(), the function returns the length of the complete
frame and not the length of the sub-frame to be dissected.

svn path=/trunk/; revision=19132
2006-09-04 14:12:26 +00:00
Martin Mathieson 76192b1c6c Partial implementation of UMTS FP. Currently only works with Catapult DCT2000 format files, as need extra information about packet when decoding. There are a few TODOs (notably E-DCH channels), but the current version gives OK coverage.
svn path=/trunk/; revision=19130
2006-09-04 11:04:14 +00:00
Ronnie Sahlberg 6e040b3a83 krb4 is a new style dissector and is called through a handle from krb5 which is also new style.
use call_dissector_only()  which is new-style aware and not call_dissector() which is not.

this fixes a recent bug found on the heimdal list.



svn path=/trunk/; revision=19129
2006-09-04 08:18:52 +00:00
Ronnie Sahlberg 389e7390e9 make the heuristics for detecting kerberos4 stronger
svn path=/trunk/; revision=19128
2006-09-04 07:44:30 +00:00
Ronnie Sahlberg c91f8d9876 From David Buechi
New protocol: epl v1


Hi,

in addition to the recently submitted dissector for the EPL v2 protocol,
this is the dissector for the first version of the EPL protocol.

Best Regards,
David




svn path=/trunk/; revision=19125
2006-09-02 23:18:38 +00:00
Ronnie Sahlberg e3c9fab51c add primitive reassembly of gssapi
this will allow reassembly of gssapi blobs that span multiple smb/sessionsetup command pdus



svn path=/trunk/; revision=19119
2006-09-02 11:46:15 +00:00
Guy Harris e7135c63bb Clean up indentation, etc.
svn path=/trunk/; revision=19116
2006-09-02 06:39:09 +00:00