Commit Graph

1505 Commits

Author SHA1 Message Date
Gilbert Ramirez 339d67b043 Merge in the final code to make Ethereal run on Win32, compiled
with MSVC 6.0 and 'nmake', the make tool that comes with MSVC.

It compiles, links, and runs. It doesn't run correctly. There's a problem
when reading files. I'm getting short reads.  I'm not linking in zlib or
libsnmp because it first needs to be debugged.

I changed the plugin code to use gmodule instead of libltdl, but the
Unix build still links ethereal against libltdl. I'll fix that tonight; sorry
about leaving it in such a sad state, but I wanted to check in this code
before I left work on a Friday night. Ethereal still works, but the
building is less than optimal.

svn path=/trunk/; revision=1479
2000-01-15 00:23:13 +00:00
Nathan Neulinger dbf3bf6177 better command line syntax description
svn path=/trunk/; revision=1478
2000-01-14 23:26:18 +00:00
Guy Harris 0e6d9e95f8 Don't assume that the RX header is neatly aligned on a 4-byte boundary
in our address space.

svn path=/trunk/; revision=1477
2000-01-14 19:11:26 +00:00
Gerald Combs 62207b4d85 Set an initial (blank) filter to get around the peculiarities in RH
6.1's libpcap.

svn path=/trunk/; revision=1476
2000-01-14 19:05:30 +00:00
Gerald Combs a18345ca23 Fixed small typo in hex printing.
svn path=/trunk/; revision=1475
2000-01-14 17:08:41 +00:00
Gilbert Ramirez b65829c808 Check for existence of cf.iface before calling capture(). Change
usage statement accordingly.

svn path=/trunk/; revision=1474
2000-01-14 14:21:50 +00:00
Guy Harris e0468c2e16 Supply a patch that, at least on HP-UX 11.00, lets you specify to
"pcap_open_live()" a network interface name rather than a "dlpiN" name
(where "N" is the PPA for the device, as reported by lanscan).

svn path=/trunk/; revision=1473
2000-01-14 08:44:50 +00:00
Guy Harris f26c52668d Note that the Ethereal workaround for the libpcap timeout problem should
prevent Ethereal's GUI from hanging during a capture, even if libpcap on
your Linux system hasn't been patched.

svn path=/trunk/; revision=1472
2000-01-14 08:18:58 +00:00
Guy Harris bf9587025a Note that we can read "i4btrace" capture files.
svn path=/trunk/; revision=1471
2000-01-14 08:14:33 +00:00
Guy Harris 3e6240208d Note that the Ethereal distribution also comes with Tethereal and
editcap.

Expand the list of OSes on which Ethereal has (at least at one time)
been built and used.

Note that systems other than Solaris that use DLPI (e.g., HP-UX) may
also have "/dev" entries that can be made more widely readable and
writable to allow non-root users to capture packets.

Note that we can read "i4btrace" capture files.

Note that we now always do SNMP dissection, and that an external library
just allows us to do more sophisticated dissection.

svn path=/trunk/; revision=1470
2000-01-14 08:12:14 +00:00
Guy Harris 9f38b74060 Add "doc/editcap.pod" and "doc/tethereal.pod.template" to the
distribution.

svn path=/trunk/; revision=1469
2000-01-14 07:51:14 +00:00
Guy Harris b799cb10d9 Add "tethereal", a tty-oriented derivative of Ethereal that works like
Sun's snoop or like tcpdump.

svn path=/trunk/; revision=1468
2000-01-14 06:46:00 +00:00
Guy Harris 3d72fa5f87 Add "file_wrappers.c" to the list of things to compile with Microsoft
Visual C{++}.

svn path=/trunk/; revision=1467
2000-01-13 18:26:15 +00:00
Guy Harris 216a177b12 Call the CDP entry listing addresses "Addresses", not "Address" - it can
have more than one address.

svn path=/trunk/; revision=1466
2000-01-13 18:02:24 +00:00
Guy Harris 288e23e5d8 0x2000, for CDP, doesn't appear to be an Ethernet type - it's not
registered as a type for CDP, and CDP packets appear to be LLC packets
with an OUI of 00-00-0C, not the encapsulated Ethernet OUI of 00-00-00.

svn path=/trunk/; revision=1465
2000-01-13 17:59:14 +00:00
Guy Harris cc9a1060ca Fix "ascend-scanner.l" to include "file_wrappers.h" rather than the
defunct "file.h".

Make "file_wrappers.c" include "wtap.h", so that the WTAP_ERR_ZLIB_
values are defined.

svn path=/trunk/; revision=1464
2000-01-13 07:18:50 +00:00
Guy Harris 7a36bede0b We are obliged to define HAVE_UNISTD_H in "config.h"; to avoid the
hideous problem on FreeBSD 3.[23] (and perhaps other BSDs) if
HAVE_UNISTD_H is defined before "zlib.h" is included, turn "file_seek()"
into a subroutine defined in a file that *undefines* HAVE_UNISTD_H
before including "zlib.h", so that the *only* call to "gzseek()" is made
from a file that does not have HAVE_UNISTD_H defined when it includes
"zlib.h".

Move "file_error()" to that file while you're at it, so it holds all the
wrappers that hide the presence or absence of zlib from routines to read
capture files.

Turn "file.h", which declared those wrapper functions as well as wrapper
macros, into "file_wrapper.h" - it belongs with the "file_wrapper.c"
file that defines the wrapper functions, not with "file.c" which handles
higher-layer file access functions.

Remove the comment in "configure.in" that explained why defining
HAVE_UNISTD_H was a bad idea, as we're not obliged to define it and work
around the problem.  (The comment in "file_wrapper.c" explains the
workaround.)

svn path=/trunk/; revision=1463
2000-01-13 07:09:20 +00:00
Guy Harris b558dc21ec Get the NLPID value for ISIS from "nlpid.h", and report the NLPID value
in ISIS packets with "nlpid_vals".

Report the NLPID value in CLNP packets with "nlpid_vals" as well.

svn path=/trunk/; revision=1462
2000-01-13 06:07:53 +00:00
Guy Harris 7368e42aac Add the NLPID value for PPP.
In Q.931 and Q.2931, the TR 9577 values are NLPIDs, so use "nlpid_vals"
to dissect them, and values from "nlpid.h" to refer to them.

svn path=/trunk/; revision=1461
2000-01-13 05:41:24 +00:00
Guy Harris d7816c5985 X.25-over-Ethernet, as I'm inferring it works (i.e., the payload of the
packet is just an X.25 packet).

svn path=/trunk/; revision=1460
2000-01-13 04:49:54 +00:00
Guy Harris b773a60780 Indicate that the RFC for SDP is 2327.
svn path=/trunk/; revision=1459
2000-01-13 03:18:34 +00:00
Guy Harris f71cb4953d Indicate that the RFC for RTSP is 2326.
svn path=/trunk/; revision=1458
2000-01-13 03:12:07 +00:00
Guy Harris 06414573d8 Changes from Jason to make some RTSP fields filterable.
svn path=/trunk/; revision=1457
2000-01-13 03:07:26 +00:00
Guy Harris bff15bc846 Assign a frame number to a frame only when reading frame data from a
file, not when filtering or colorizing packets - filtering shouldn't
change the frame number of a frame (yes, this means that a filtered
display won't necessarily have packets numbered contiguously 1 through N
- that's a feature).

svn path=/trunk/; revision=1456
2000-01-13 00:53:09 +00:00
Guy Harris 35a0a0ada4 Export the list of OSI NLPIDs in "nlpid.h", for use by the CDP
dissector.

Add a "value_string" table for NLPIDs to the OSI dissector, and export
it for use by the CDP dissector.

Fix the CDP dissector as per the documentation in

	http://www.cisco.com/univercd/cc/td/doc/product/lan/trsrb/frames.htm

and as per some traces we have with CDP data in them.

svn path=/trunk/; revision=1455
2000-01-13 00:41:11 +00:00
Olivier Abad cd15d6c0f8 Add an "Hex. Dump" radio button to the "Contents of TCP stream" window. It
displays the contents of the TCP connexion in hexadecimal.
The two opposite directions of the conversation are displayed side by side.

svn path=/trunk/; revision=1454
2000-01-12 22:07:56 +00:00
Guy Harris 8c09da31c8 For the Cisco OUI, always add the protocol ID to the tree if we're
constructing a protocol tree.

Don't add the protocol ID for unknown OUIs unless we're constructing a
protocol tree.

svn path=/trunk/; revision=1453
2000-01-12 20:00:19 +00:00
Guy Harris 3db486ab74 Cisco CDP packets appears to be sent as LLC packets with an OUI of
0x00000c and a protocol ID of 0x2000 - we used to recognize those as CDP
because we ignored the OUI and treated all LLC packets as
SNAP-encapsulated packets, and treated 0x2000 as an Ethertype, but we
now treat only encapsulated-Ethernet and Apple packets as
SNAP-encapsulated (and arguably we should handle Apple separately).

svn path=/trunk/; revision=1452
2000-01-12 19:37:24 +00:00
Guy Harris bd7c6bda88 Enough is enough. Requiring anybody who uses Ethereal on Linux to
update their libpcap probably isn't going to scale - the increasing
frequency with which "Ethereal hangs when I try to capture packets"
shows up on "ethereal-dev" suggests that, unless and until a libpcap
with the "select()" in it becomes ubiquitous on Linux, that'll be the
source of a constant support burden - so we'll just put the "select()"
in Ethereal if it's being built for Linux.

(Putting it in for platforms where the read timeout argument to
"pcap_open_live()" works adds an extra useless system call at best and,
at worst, could make Ethereal not work - "select()" doesn't work on
"/dev/bpf" devices on FreeBSD 3.3, at least, unless you're in "immediate
mode", and, whilst "immediate mode" would make Ethereal respond more
quickly when packets arrive, it might cause Ethereal to respond too
quickly, doing reads for every new packet rather than waiting for
multiple packets to arrive and reading them all with one "read()", which
appears to be at least part of the intent of the read timeout on
"/dev/bpf" devices in BSD.)

svn path=/trunk/; revision=1451
2000-01-12 06:56:32 +00:00
Gilbert Ramirez 0a9f2233b8 Remove the reference to my old samples directory on the web server;
the new ethereal web site contains a link to its own samples directory.

svn path=/trunk/; revision=1450
2000-01-10 23:43:15 +00:00
Guy Harris 08fb6dc0c3 Updates to the L2TP parser, from Laurent Cazalet and Thomas Parvais.
svn path=/trunk/; revision=1449
2000-01-10 23:22:30 +00:00
Gilbert Ramirez 1990d5fb5c Some initial changes for win32 support, but not all.
Added lots of #ifdef HAVE_*_H wrappers.
Added some #defines in config.h.win32
Check for more headers in configure.in
Added prototype for inet_aton() in inet_v6defs.h.
Changed "BYTE" token (i.e., #define) in ascend-gramamr.y because it
conflicts with a windows definition. Use HEXBYTE instead.

svn path=/trunk/; revision=1448
2000-01-10 17:33:17 +00:00
Guy Harris 9fe38ca2b5 Move the code in "column.c" that implements the column preferences tab
into "gtk/column_prefs.c".

Get rid of "get_column_width()" - instead, export
"get_column_longest_string()", and have "get_column_width()"'s callers
make the GDK call to get the width of that string, so that "column.c"
contains no GTK+/GDK code.

svn path=/trunk/; revision=1447
2000-01-10 01:44:00 +00:00
Guy Harris 8fafa9af84 Add a man page for "editcap".
svn path=/trunk/; revision=1446
2000-01-09 20:28:26 +00:00
Guy Harris d061d39bd3 Make "editcap" one of the standard targets, so it's built and installed
by default.

Use the automake mechanisms for it, and, having done so, arrange that it
not be linked with GTK+ (which it doesn't need) - it currently links
with libpcap, but that should be fixed as well.  (It also needs a man
page.)

svn path=/trunk/; revision=1445
2000-01-09 20:05:37 +00:00
Gilbert Ramirez a5ad1c8c12 Add finaly news item.
svn path=/trunk/; revision=1443
2000-01-09 18:15:33 +00:00
Guy Harris 78b75095f4 Add to some comments notes on the meaning of DLT types 15 and 16 on
Linux systems with the isdn4linux patches; they help make DLT types even
less useful than they were after the various flavors of BSD proceeded to
add their own types past 14, with no coordination whatosever, so that
they overlapped, rendering it impossible to read a libpcap capture file
without knowing what particular OS generated it.

svn path=/trunk/; revision=1442
2000-01-09 07:55:48 +00:00
Guy Harris 24bf66d16c Don't recompute "cf->count" when filtering packets - the recomputation
will just give it the value it's always had, as packets are counted
regardless of whether they pass the filter or not (which is what we
want).

Given that, so there's no need for a separate "cf->unfiltered_count"
value, so get rid of it and use "cf->count" instead.

svn path=/trunk/; revision=1441
2000-01-08 23:49:33 +00:00
Guy Harris 0452dfe11e Allow people to print packets if there are packets to print, even if
we're in the middle of an "Update list of packets in real time" capture.

svn path=/trunk/; revision=1440
2000-01-08 23:34:50 +00:00
Gilbert Ramirez 365721f3ee Fix my typo in a variable name.
svn path=/trunk/; revision=1439
2000-01-08 21:56:29 +00:00
Gilbert Ramirez 69edc78327 I finally got autoconf, automake, and the plugins to behave together.
The distro is buildable finally. I had to change "plugins/gryphon" from
a separately configured (i.e., "./configure") package to a member of
the main ethereal autoconf package so that PLUGIN_DIR could be passed
to plugins/gryphon/Makefile.am. In doing so, I had to get rid of
plugins/gryphon/config.h which had PACKAGE and VERSION #defined, the latter
of which was actually used in packet-gryphon.c. So I moved those two
#defines into a new file, plugins/gryphon/moduleinfo.h.

svn path=/trunk/; revision=1438
2000-01-08 19:37:11 +00:00
Guy Harris 7a943b7810 Fix Gerald's e-mail address.
svn path=/trunk/; revision=1437
2000-01-07 22:05:43 +00:00
Guy Harris 4f3468b09c Indicate the RFC that specifies L2TP.
Update Gerald's e-mail address.

Make some variables static.

Make some *other* variables auto, as they don't need to have static
storage duration.

svn path=/trunk/; revision=1436
2000-01-07 21:53:24 +00:00
Guy Harris ad2ee158eb Include L2TP support in the list of new features in 0.8.1.
svn path=/trunk/; revision=1435
2000-01-07 09:24:59 +00:00
Guy Harris 6a12f137a1 The L2TP dissector is by John Thomes, not John Thomas.
svn path=/trunk/; revision=1434
2000-01-07 09:13:21 +00:00
Guy Harris 355bd9d8ac Add John Thomas' L2TP dissector.
svn path=/trunk/; revision=1433
2000-01-07 09:10:22 +00:00
Gilbert Ramirez d43ab4d684 Move to version 0.8.1
svn path=/trunk/; revision=1432
2000-01-07 05:21:09 +00:00
Gilbert Ramirez 90293644a3 Don't take strlen of TransactName if NULL. In fact, don't do *anything*
and return if TransactName == NULL.

svn path=/trunk/; revision=1431
2000-01-07 04:27:06 +00:00
Guy Harris 408e41d6ed "print_file()" is no longer used; nuke it.
svn path=/trunk/; revision=1430
2000-01-07 00:36:25 +00:00
Gilbert Ramirez dccccd9c9d Add README.vmware to list of deliverables.
svn path=/trunk/; revision=1429
2000-01-06 19:51:26 +00:00