Commit graph

6858 commits

Author SHA1 Message Date
Guy Harris
9da0c70214 Use "tcp_dissect_pdus()" rather than doing that stuff ourselves.
"mysql_handle" doesn't need to be static.

"is_response" is really a Boolean; make it a gboolean.

Get rid of some unused variables.

svn path=/trunk/; revision=6944
2003-01-20 06:54:52 +00:00
Guy Harris
c091bb397d The decision on whether there's an encapsulated IP packet in a
Source-Active TLV should be based on the length of the Source-Active
TLV, not on the length of the data remaining in the tvbuff.

The length of an (S,G) block is 12 bytes, not 24 bytes.

svn path=/trunk/; revision=6943
2003-01-20 06:24:37 +00:00
Guy Harris
6c4a845613 Move into "call_dissector_work()" the stuff to handle dissecting, in
error packets, the copy of the packet that got the error, rather than
doing it in the CLNP dissector and the ICMP dissector and the ICMPv6
dissector and the PPP dissector for various control protocols; have it
do that work iff "pinfo->in_error_pkt" is set.

svn path=/trunk/; revision=6942
2003-01-20 05:42:37 +00:00
Guy Harris
fa62e3b4d4 When dissecting the packet that gave an ICMP error, save the writability
state of the columns and the current protocol, and restore them when
done.  Also, cache BoundsError and, if we get a BoundsError, restore
them and then re-throw the BoundsError, so we see a "Short Frame"
indication if the frame was cut off by the snapshot length.

svn path=/trunk/; revision=6941
2003-01-19 22:21:01 +00:00
Guy Harris
76794cc753 Make the DDTP dissector reject packets with an invalid version number.
svn path=/trunk/; revision=6940
2003-01-19 21:43:18 +00:00
Guy Harris
96b2d60763 From Huagang Xie: dissector for MySQL protocol.
svn path=/trunk/; revision=6939
2003-01-19 21:29:10 +00:00
Guy Harris
3e393a11f0 From Didier Gautheron:
fix a padding issue and a problem where the spec appears to give
	the size of the AFP session token length incorrectly (changed to
	match what's captured, not what the spec says);

	provide more verbose messages in the Info column and decode more
	parameters for login packets.

svn path=/trunk/; revision=6938
2003-01-19 21:21:32 +00:00
Guy Harris
b0e2e98ec8 Rename OUT_DATE to OUT_TIMESECS, as it can be used for relative time in
seconds as well as for UNIX-style date/time stamps.

FT_ABSOLUTE_TIME fields don't have a base, so use BASE_NONE.

Make hf_afs_fs_callback_expires an FT_RELATIVE_TIME, as it's a relative
time not an absolute UNIX time.

svn path=/trunk/; revision=6937
2003-01-18 02:18:39 +00:00
Guy Harris
eeb05c3b1c From Marc Milgram: e-mail address update.
svn path=/trunk/; revision=6936
2003-01-17 23:54:19 +00:00
Tim Potter
23a6b3819c Change name of proto item for UINT16UNI.
Use dissect_ndr_uint32 instead of dissect_doserror() to peek at the
RPC error in SpoolssOpenPrinterEx_r.

svn path=/trunk/; revision=6935
2003-01-16 22:44:05 +00:00
Tim Potter
2146871345 Clean up some unused variables in dissect_ndr_nt_UNICODE_STRING_str()
Undo change to dissect_doserror() and dissect_ntstatus() made in
revision 1.42 as it breaks the display of rpc errors in COL_INFO.

svn path=/trunk/; revision=6934
2003-01-16 22:40:48 +00:00
Guy Harris
943ef396d4 Add "doc/README.tapping" to the list of files that go into the release
tarballs.

svn path=/trunk/; revision=6933
2003-01-16 07:10:24 +00:00
Guy Harris
4a521a5a9f From Devin Heitmueller: further AIM cleanups, including cleanups of
Family subtype dissection, and addition of subtypes present in GAIM
source but not in Ethereal.

svn path=/trunk/; revision=6932
2003-01-15 06:09:11 +00:00
Guy Harris
f71d13b16e Move the code that associates buttons with filter dialogs, and vice
versa, into "filter_dialog_new()", rather than replicating it in a
couple of routines.

The return value of "display_filter_construct_cb()" isn't used for
anything, it's ignored by most callers and stored but subsequently
ignored by io_stat.c; get rid of the return value, and don't bother
storing it in io_stat.c.

Before destroying a filter dialog box associated with a button being
destroyed, break the association.

Get rid of an unused variable in io_stat.c.

svn path=/trunk/; revision=6931
2003-01-15 05:58:50 +00:00
Guy Harris
a2f01014c1 Add a new routine "filter_button_destroy_cb()", and make it the
"destroy" signal handler for any button that pops up a filter; if the
button has a filter dialog box associated with it, it destroys that
dialog box.

Have the routines that create filter dialog boxes asociate the dialog
box with the button that created it, so that if the button is destroyed
the filter dialog box can be destroyed as well, and associate the button
with the dialog box.

This means that if a dialog box has a button to create a filter, we no
longer have to have the destroy handler for the dialog box destroy any
filters - that'll happen when the button in the dialog box is destroyed
as part of the process of destroying the dialog box.

Don't make the "Filter" buttons in the io_stat dialog box insensitive if
there's already a filter dialog box open - we can have more than one
open per dialog box.

svn path=/trunk/; revision=6930
2003-01-15 05:20:19 +00:00
Guy Harris
cdbf86b42a Don't have two entries for the official ASAP PPID, have one for it and
one for the old one.

svn path=/trunk/; revision=6929
2003-01-15 01:20:32 +00:00
Guy Harris
f52d31f3ab #if 0 out the binary protocol stuff, as there's only a dissector for
text MEGACO.

Fix up the preference description strings.

svn path=/trunk/; revision=6928
2003-01-15 00:17:53 +00:00
Guy Harris
35c1a63199 Give it an RCS ID.
svn path=/trunk/; revision=6927
2003-01-14 23:54:20 +00:00
Guy Harris
a002a0fec4 From Christian Falckenberg: beginnings of a MEGACO dissector.
Move SCTP payload protocol IDs to a header file, and get the PPIDs from
that header file rather than defining them in dissectors running atop
SCTP.  Use both the old(?) and official PPID for ASAP.

svn path=/trunk/; revision=6926
2003-01-14 23:53:40 +00:00
Guy Harris
e3fe8c0d34 From Anders Broman: some additional SCTP payload protocol IDs.
svn path=/trunk/; revision=6925
2003-01-14 22:54:20 +00:00
Guy Harris
75dbe3e0b1 Catch ReportedBoundsError exceptions when dissecting decrypted stub
data, as the error could be due to the decryption being bad, and we
should still dissect the authentication data.

svn path=/trunk/; revision=6924
2003-01-14 22:03:33 +00:00
Guy Harris
2955489887 We don't know what, in captures with a major version number of 3,
indicates the subtype of an "Internetwork analyzer" capture; we've seen
only one such capture, and it was a frame relay capture, so we just wire
it to frame relay for now.

svn path=/trunk/; revision=6923
2003-01-14 19:52:47 +00:00
Guy Harris
7563779cb0 Set the length of the L2TP tvbuff based on the length in the L2TP
header, if present.

Don't explicitly base the length of the subset we hand to the PPP
dissector on the length in the header, as it might not be present;
instead, just use -1 for the lengths, as we set the length of our tvbuff
if there's a length in the L2TP header.

Set the length of the L2TP top-level protocol item for data packets, so
it covers the L2TP header but not the packet data.

Don't put a padding item into the tree if there's no padding.

svn path=/trunk/; revision=6922
2003-01-14 18:57:07 +00:00
Guy Harris
1372d1c5e0 Don't copy the entire IP header into a structure, extract stuff from it
as you dissect it, so we can dissect packets that are cut short before
the end of an IP header.

Check for an IP total length less than the header length.

svn path=/trunk/; revision=6921
2003-01-14 18:54:29 +00:00
Tim Potter
a476a8b4c3 Add value_string for secure channel type used in ServerAuthenticate2.
svn path=/trunk/; revision=6920
2003-01-14 05:09:16 +00:00
Guy Harris
6de6ff2fb8 From Dinesh Dutt:
- Decoders for the few remaining FC protocols not included in my first
  patch. Included in this list are decoders for FC-CT (common transport),
  Name Server (dNS), Fabric Configuration Server (FCS) and Zone Server
  (FZS).

- Decoder for MDS Debug Port Adapter. MDS Debug Port Adapter (internal
  name was   Boardwalk and this is the file name) is a piece of hardware
  that can be purchased with Cisco's MDS Fibre Channel switches that
  converts FC frames into Ethernet frames.  One end is connected to a
  port on a FC switch and the other end is connected to a FE/GE Ethernet
  port.  The decoder included here decodes the encapsulation header that
  carries information such as SOF/EOF of FC frames.

svn path=/trunk/; revision=6919
2003-01-14 01:17:44 +00:00
Michael Tüxen
4744edb0be Fixed a typo.
svn path=/trunk/; revision=6918
2003-01-13 14:04:31 +00:00
Guy Harris
eb4e35abff From Devin Heitmueller:
* Break up dissection into separate functions
* Added families not already present (based on GAIM source code)
* Added entries from the "generic" family not already present
* Started to break families and subtypes into constants instead of
  having hardcoded values (signon and generic are done, others in
  progress)

svn path=/trunk/; revision=6917
2003-01-12 04:58:32 +00:00
Ronnie Sahlberg
07bcd090fc From Ronald Henderson, when closing IO-Stat window, also close any open Filter dialogs
svn path=/trunk/; revision=6916
2003-01-11 11:10:33 +00:00
Guy Harris
68799ac1cd Add a new "chdlctypes.h" file for Cisco HDLC type values that aren't
just Ethernet type values.  Move the type value for ISO network-layer
protocols there, and put the type value for IEEE spanning tree there as
well, use that value in the BPDU dissector, and add an item to the CHDLC
dissector for it.

svn path=/trunk/; revision=6915
2003-01-11 10:16:22 +00:00
Guy Harris
d6f3718f07 Only do stuff to circuits on the first pass.
svn path=/trunk/; revision=6914
2003-01-11 10:03:12 +00:00
Guy Harris
1c2361fd48 0x4242 is the Cisco HDLC type value for the spanning tree protocol.
svn path=/trunk/; revision=6913
2003-01-11 10:01:51 +00:00
Guy Harris
4a12e2d45d Do some simple sanity checking of TNS data before dissecting it.
svn path=/trunk/; revision=6912
2003-01-11 09:57:16 +00:00
Guy Harris
01d8f31347 Fix the copyright notice, give it an RCS ID, and fix the introductory
comment.

svn path=/trunk/; revision=6911
2003-01-11 09:15:00 +00:00
Guy Harris
6e57154948 Put Unicode strings into the protocol tree with the appropriate protocol
tree item, not with hf_nt_str.  Get rid of hf_nt_str, as it's no longer
used.

Put ASCII strings into the protocol tree only once.

svn path=/trunk/; revision=6910
2003-01-11 08:22:39 +00:00
Guy Harris
84d0997526 "hf_nt_str" is of type FT_STRING, so it should be set to an ASCII
string; set it to the result of the "fake_unicode()" call, not to the
raw Unicode string.  (Yes, we should have support for strings that don't
have 8-bit characters - and somehow handle strings in packets in
multiple character sets, e.g. ISO 8859/x and other EUC codes, the
Macintosh extended character set, various DOS/Windows code pages, and
Unicode - but we don't have it now.)

svn path=/trunk/; revision=6909
2003-01-11 07:52:34 +00:00
Guy Harris
62c48557e5 Get rid of an extra "." at the end of the name of the "nt.str" field.
svn path=/trunk/; revision=6908
2003-01-11 07:48:22 +00:00
Guy Harris
7b8fc2d189 Get rid of unused variables.
svn path=/trunk/; revision=6907
2003-01-11 07:40:09 +00:00
Guy Harris
dc3ed93566 From Devin Heitmueller: improve dissection of the AIM signon-reply, the
request-user-info, and the start of the user-info reply.

svn path=/trunk/; revision=6906
2003-01-11 07:17:37 +00:00
Guy Harris
3fde588008 From Jaime Fournier: extend the packet-dcerpc-krb5rpc dissectors to call
kerberos V.

svn path=/trunk/; revision=6905
2003-01-11 07:11:21 +00:00
Guy Harris
4ce24bef0f Put the message type in the Info column.
svn path=/trunk/; revision=6904
2003-01-11 07:01:59 +00:00
Guy Harris
f19788d377 Put the correct/incorrect flag after the CRC value, as is done for other
checksums.

svn path=/trunk/; revision=6903
2003-01-11 06:17:22 +00:00
Guy Harris
66782261d8 The OAM type and function type are packed into a single byte; set the
length of the entries for them to 1, not 2.

svn path=/trunk/; revision=6902
2003-01-11 06:03:49 +00:00
Guy Harris
61e9a95dba If it doesn't begin with FF 00 it can't be LANE LE Control; if it's
LANE, claimed to be LE Control, but doesn't begin with FF 00, call it
802.3.

svn path=/trunk/; revision=6901
2003-01-11 05:54:52 +00:00
Tim Potter
9f4148decf Delete all prs_* functions. Huzzah!
svn path=/trunk/; revision=6900
2003-01-11 04:42:16 +00:00
Tim Potter
5039537845 Finish converting remaining RPCs to ndr routines.
Deleted all the old crufy ndr pointer dissection. Hooray!

Next on the hit list is some refactoring of the ndr string
routines...

svn path=/trunk/; revision=6899
2003-01-11 04:40:21 +00:00
Tim Potter
56b60052cd Convert some incidental prs_* calls to dissect_dcerpc_*
equivalents.

svn path=/trunk/; revision=6898
2003-01-11 04:35:57 +00:00
Tim Potter
855f004140 Converted some more RPCs to ndr routines.
svn path=/trunk/; revision=6897
2003-01-11 00:42:12 +00:00
Guy Harris
bb2824366b In "dissect_spnego_negTokenTarg()", don't assume we've found a GSSAPI
OID value for the protocol being used in a previous packet in the GSSAPI
sequence.

svn path=/trunk/; revision=6896
2003-01-10 23:47:30 +00:00
Guy Harris
42ca8b98d5 Put the traffic type right after the AAL.
Dump unknown AAL purportedly-reassembled data as raw data.

svn path=/trunk/; revision=6895
2003-01-10 09:46:19 +00:00