Commit Graph

4012 Commits

Author SHA1 Message Date
Guy Harris daebc74d91 2.1 isn't the current version of WinPcap; don't say what the current
version is, as that's subject to change - just speak of the "latest
non-beta version".

Mention the mirrors for WinPcap and WinDump.

svn path=/trunk/; revision=3956
2001-09-26 21:22:02 +00:00
Guy Harris c2d19c1ceb Make the message popped up if you try to do a capture on a Win32 machine
when wpcap.dll couldn't be loaded more detailed, in the hopes that it'll
reduce the chances that somebody will see that message and not know what
to do.  Also, mention the Wiretapped.net mirror of the WinPcap site, as
the WinPcap site is all-too-often down due to networking glitches.

svn path=/trunk/; revision=3955
2001-09-26 20:02:36 +00:00
Guy Harris 4325d41fbd MMSE support, from Tom Uijldert.
svn path=/trunk/; revision=3954
2001-09-25 21:32:41 +00:00
Guy Harris a86490d2a7 If "snprintf()" can't print all the data because there's not enough
room, it might return -1 in some versions of glibc; check for that, and
quit if that happens.

It might also return the number of characters that would've been printed
had there been enough room; this means that a loop that does

	n += snprintf (buf + n, BUF_LENGTH - n, ...);

may end up making "n" bigger than BUF_LENGTH, and "snprintf()" might not
sanely handle being passed a negative length, so if "n" isn't less than
the total length of the string buffer, don't add stuff to it.

The "capabilitiesStart" variable in "add_capabilities()" in the WSP
dissector is an offset into the PDU data; there's no guarantee that said
offet is < 256, and, even if there were, there's no point in making it
an 8-bit variable.

Add some additional buffer overflow checks to the WSP dissector.

svn path=/trunk/; revision=3953
2001-09-25 18:27:35 +00:00
Guy Harris 12db23546d If "snprintf()" can't print all the data because there's not enough
room, it might return -1 in some versions of glibc; check for that, and
quit if that happens.

It might also return the number of characters that would've been printed
had there been enough room; this means that a loop that does

	n += snprintf (buf + n, BUF_LENGTH - n, ...);

may end up making "n" bigger than BUF_LENGTH, and "snprintf()" might not
sanely handle being passed a negative length, so if "n" isn't less than
the total length of the string buffer, don't add stuff to it.

svn path=/trunk/; revision=3952
2001-09-25 02:21:15 +00:00
Guy Harris 7ee55bfd6b The data in a tagged field can be up to 255 bytes (the length is an
8-bit value), and the raw data of an SSID parameter is the
interpretation, so the buffer into which we put the interpretation must
be at least 256 bytes long; it's an array of size SHORT_STR, so boost
SHORT_STR to 256.

svn path=/trunk/; revision=3951
2001-09-25 00:34:24 +00:00
Guy Harris cf5dc889a9 Explain what the LLC header vs. no LLC header stuff in the ATM on Linux
tcpdump patch is all about, and note that a future version of libpcap
may render it irrelevant.

svn path=/trunk/; revision=3950
2001-09-23 23:10:30 +00:00
Guy Harris c80cd072ac Update the URL for ATM-on-Linux.
svn path=/trunk/; revision=3949
2001-09-23 21:55:21 +00:00
Ashok Narayanan 29c8fa03b3 Removed the dependency on gzgetc and gzgets by implementing internal
versions of these commands in file_wrappers.c. This allows us to
compile successfully even on platforms where X has an older zlib built
in.

Removed this restriction from acinclude.m4

svn path=/trunk/; revision=3948
2001-09-20 16:36:45 +00:00
Guy Harris d1ec951825 "value_string" arrays must end with a terminator entry.
If "get_hex_uint()" supplies a "next_offset" equal to the offset fed
into it, it found no hex digits; don't put the value into the tree if
that's the case.

If "get_unquoted_string()" or "get_quoted_string()" returns NULL, the
string separator/terminator wasn't found; don't put the value into the
tree if that's the case.

svn path=/trunk/; revision=3947
2001-09-20 02:26:03 +00:00
Guy Harris 5644182f65 Updates from Michal Melerowicz:
1. simplified and shorter names
	2. fixed problem with filtering (consequence of 1st point)
	3. added more charging tickets

svn path=/trunk/; revision=3946
2001-09-19 06:08:36 +00:00
Gilbert Ramirez 6ea1d075c1 Distribute the make-manuf and manuf.tmpl files in the source tarball.
svn path=/trunk/; revision=3945
2001-09-18 21:29:56 +00:00
Guy Harris 7e9fee9f39 Fix from Andy Hood, to remove a bogus extra line.
svn path=/trunk/; revision=3944
2001-09-17 23:35:22 +00:00
Guy Harris 0e10085580 Add support for desegmentation of DNS messages.
Make the default for NBSS and ONC RPC-over-TCP desegmentation "on",
rather than "off"; the default for desegmentation in general is "off",
so this won't change the default behavior, but it lets you turn
desegmentation on by flipping only one switch (and turn it off for
particular protocols if you desire).

svn path=/trunk/; revision=3943
2001-09-17 02:07:00 +00:00
Guy Harris 16b4866dca Add "idl2eth" to the list of files for CVS to ignore; it's now a
generated file.

svn path=/trunk/; revision=3942
2001-09-17 00:37:04 +00:00
Guy Harris b55b8ba57b Fix the handling of DNS-over-TCP.
Rename the "cap_len" argument to "dissect_dns_common()" to "msg_len", as
it's just the length of the DNS message being dissected.

svn path=/trunk/; revision=3941
2001-09-17 00:36:04 +00:00
Guy Harris dcb2bdf420 Generate "idl2eth" from "idl2eth.sh", filling in the pathname for the
shell.  (This also arranges that the source to "idl2eth" - which is now
"idl2eth.sh" - not be deleted by "make clean").

Add "doc/idl2eth.pod" to the list of files in a source tarball.

svn path=/trunk/; revision=3940
2001-09-15 23:01:12 +00:00
Guy Harris bcc16a58c9 To check whether something is a directory, call "test_for_directory()"
on it and check whether it returned EISDIR, not whether it returns 0 -
EISDIR means it's a directory, 0 means it isn't.

svn path=/trunk/; revision=3939
2001-09-14 09:27:35 +00:00
Guy Harris 92d94edd0c Times in NFS done as FT_ABSOLUTE_TIME and FT_RELATIVE_TIME fields, from
Ronnie Sahlberg.

svn path=/trunk/; revision=3938
2001-09-14 08:22:29 +00:00
Guy Harris 845f39b6fe Make the resolution for time values be nanoseconds rather than
microseconds.

Fix some "signed vs. unsigned" comparison warnings.

svn path=/trunk/; revision=3937
2001-09-14 07:33:04 +00:00
Guy Harris 07c2ce1bad Get rid of no-longer-necessary includes of <sys/time.h>.
svn path=/trunk/; revision=3936
2001-09-14 07:23:34 +00:00
Guy Harris ce626b31af Make the resolution for time values be nanoseconds rather than
microseconds.

Fix some "signed vs. unsigned" comparison warnings.

svn path=/trunk/; revision=3935
2001-09-14 07:16:42 +00:00
Guy Harris 1d42c94b05 Make the resolution for time values be nanoseconds rather than
microseconds.

Fix some "signed vs. unsigned" comparison warnings.

svn path=/trunk/; revision=3934
2001-09-14 07:10:13 +00:00
Guy Harris e32028f6cd "stat" is the status in an NLM reply; "state" is the lock manager state
sent over the wire in a lock request.

svn path=/trunk/; revision=3933
2001-09-14 06:48:30 +00:00
Guy Harris aac97da811 Squelch a signed vs. unsigned comparison complaint.
Display the command in decimal, not hex, as that's how it's specified in
the RFCs for RIP.

svn path=/trunk/; revision=3932
2001-09-14 06:34:36 +00:00
Guy Harris 5d76f722a2 Get rid of a trailing blank.
svn path=/trunk/; revision=3931
2001-09-14 06:30:42 +00:00
Guy Harris 42a6d1b152 Support for dissecting multiple capabilities, from Endoh Akira.
svn path=/trunk/; revision=3930
2001-09-13 22:06:55 +00:00
Guy Harris 8822f3f702 Squelch a "signed vs. unsigned comparison" warning (which warned of a
real problem, if "byte_span" were 0 - that would only happen if
"bitoffset" and "bitlength" were both 0, and "bitlength" should never be
0).

svn path=/trunk/; revision=3929
2001-09-13 20:42:13 +00:00
Guy Harris eb63c37b0e Fixes to the OSPFv3 dissector, from Palle Lyckegaard.
svn path=/trunk/; revision=3928
2001-09-13 20:27:24 +00:00
Guy Harris 0b6dbbea35 Make the filter name for the status monitor callback "statnotify", to
match the name in the filterable fields; make the short name "STAT-CB"
again.

svn path=/trunk/; revision=3927
2001-09-13 08:14:45 +00:00
Guy Harris 53292d26a2 Display filters for RIP protocol fields, from Ronnie Sahlberg.
svn path=/trunk/; revision=3926
2001-09-13 08:10:53 +00:00
Guy Harris d18dd29d12 Display filters for XoT protocol fields, from Ronnie Sahlberg.
svn path=/trunk/; revision=3925
2001-09-13 08:05:26 +00:00
Guy Harris 3af4def7d2 NLM fix, and change of status monitor callback protocol name to use "_"
rather than "-" ("-" upsets the display filter parser), from Ronnie
Sahlberg.

svn path=/trunk/; revision=3924
2001-09-13 08:02:11 +00:00
Guy Harris 2a148564d6 TCP desegmentation support, and changes to the ONC RPC and NBSS
dissectors to use it, from Ronnie Sahlberg, with additional changes to
handle the case where a frame contains messages that don't run past the
end followed by one that does and where a reassembled chunk has, at the
end, a message that runs past the end of that chunk (because the
reassembly was for an earlier message).

svn path=/trunk/; revision=3923
2001-09-13 07:56:53 +00:00
Guy Harris a37ddb63b1 Clean up the previous checkin a bit - there's no need to have
"dissect_rpc_common()" check, every time it's about to return FALSE,
whether it's being used as a heuristic dissector and, if not, call
"dissect_rpc_continuation()" - we can just have the non-heuristic
dissector call it and, if it returned FALSE, call
"dissect_rpc_continuation()".

svn path=/trunk/; revision=3922
2001-09-12 08:46:39 +00:00
Guy Harris 94e029fef6 When establishing or searching for a conversation for ONC RPC, use both
source and destination addresses if the transport is TCP (we use that,
for now, as a proxy for "if the transport is connection-oriented"), as
the endpoint addresses should be the same for all packets.

Have both a heuristic RPC dissector and a non-heuristic version, and
make the non-heuristic version the dissector for the conversations we
create; that version will, if the frame doesn't look like a call or
reply, mark it as continuation data.

svn path=/trunk/; revision=3921
2001-09-12 08:13:33 +00:00
Guy Harris e35a8ac8fe Fix from Tom Uijldert: scan TPI's to get proper WTP packet length and
correct start of WSP-data.

svn path=/trunk/; revision=3920
2001-09-11 14:36:33 +00:00
Guy Harris a649181931 GTPv1 support and GTPv0 improvements, from Michal Melerowicz and Nicolas
Balkota.

svn path=/trunk/; revision=3919
2001-09-11 08:14:39 +00:00
Guy Harris b6ac95ef20 Fix some bugs (and some indentation).
svn path=/trunk/; revision=3918
2001-09-11 06:38:57 +00:00
Guy Harris 65ac4971d2 The byte count field in an SMB Write request counts not only the data
being written, but the 2 bytes of data length and one byte of buffer
type preceding that data; use the data length (which doesn't count
itself or the buffer type byte), rather than the byte count, to
determine how much data is being written.

svn path=/trunk/; revision=3917
2001-09-11 05:31:45 +00:00
Guy Harris de14d757d1 From Frank Singleton: install idl2eth in "/usr/local/bin".
svn path=/trunk/; revision=3916
2001-09-10 22:06:33 +00:00
Guy Harris fa8a2ac762 Man page update, from Frank Singleton, to mention
$PYTHONPATH/site-packages/.

svn path=/trunk/; revision=3915
2001-09-10 21:59:57 +00:00
Guy Harris 1d16da664c Some WAP WTP naming fixes plus textual Transaction Class value decoding,
from Olivier Biot.

svn path=/trunk/; revision=3914
2001-09-10 21:54:08 +00:00
Guy Harris aa29eca046 The "Save only marked packets" checkbox should change as the file type
changes, just as the "Save only packets currently being displayed"
checkbox should.

svn path=/trunk/; revision=3913
2001-09-10 08:49:11 +00:00
Guy Harris 0ee22efcd6 From Jason Lango:
Clean up RTSP Transport parsing and sub-conversation code.
	Dissect RTP/MP4 (and other RTP/xxx) as RTP/AVP (for now).

svn path=/trunk/; revision=3912
2001-09-08 00:43:51 +00:00
Guy Harris dd1b7eafaf OSPFv3 support, from Palle Lyckegaard.
svn path=/trunk/; revision=3911
2001-09-05 19:53:42 +00:00
Guy Harris 2cdb896f85 Typo fix, from Martti Kuparinen.
svn path=/trunk/; revision=3910
2001-09-05 19:48:53 +00:00
Guy Harris 23140475d7 Close the file to which we're writing before exiting, so that:
buffered data is written out to the file;

	headers are written if the capture file header depends on the
	number or sizes of the packets;

etc..

svn path=/trunk/; revision=3909
2001-09-05 05:03:47 +00:00
Guy Harris b98e472531 From Frank Singleton: first look in $PYTHONPATH/site-packages for
ethereal_be.py and ethereal_gen.py, then look in the current directory.

svn path=/trunk/; revision=3908
2001-09-04 21:06:58 +00:00
Guy Harris 4ad369eca1 HMIPv6 support, from Martti Kuparinen.
svn path=/trunk/; revision=3907
2001-09-04 21:04:52 +00:00