Commit Graph

16394 Commits

Author SHA1 Message Date
Guy Harris a770b7b647 "get_oid_name()" can return a null pointer; don't try to add the name if
it does.

svn path=/trunk/; revision=16735
2005-12-08 23:21:26 +00:00
Guy Harris aaf8a3060d Clean up indentation.
For OID fields of type FT_STRING, put back the code to append the OID
name.  (Ultimately, we should probably convert them all to type FT_OID.)

svn path=/trunk/; revision=16734
2005-12-08 11:27:14 +00:00
Guy Harris d321960330 When checking whether a packet is for a protocol or not, make sure the
bytes you'll be checking are available in the tvbuff first.

Don't require *all* of the packet data to be available, however.

Heuristic dissectors should return TRUE or FALSE.  Non-heuristic
"new-style" dissectors should return the amount of data dissected or 0. 

svn path=/trunk/; revision=16733
2005-12-08 10:56:51 +00:00
Guy Harris 34bd5efdb7 Regenerate, so that it handles OIDs as FT_OID.
svn path=/trunk/; revision=16732
2005-12-08 09:56:19 +00:00
Guy Harris 344b59b6b3 Squelch a const vs. non-const pointer warning.
svn path=/trunk/; revision=16731
2005-12-08 09:05:23 +00:00
Guy Harris a9892169e3 From Kyle J. Harms:
Fix a few problems.

	CIGI 1 and 2 are only big-endian; CIGI 3 can be little-endian or
	big-endian.

	Remove the port preferences.

svn path=/trunk/; revision=16730
2005-12-08 08:55:15 +00:00
Ronnie Sahlberg febe5a84e3 add decoding of the share type that metze found in the tree connect response
prettify tid and uid 


svn path=/trunk/; revision=16729
2005-12-08 07:54:13 +00:00
Anders Broman b7bcb54079 Also add the new dissectors
svn path=/trunk/; revision=16728
2005-12-08 07:29:15 +00:00
Anders Broman 08468754f7 Commit the actual diissectors:
Log:
 From Grame Lunt:
  updated X.500 dissectors to include DOP support.
 
 The "dop" dissector is the renamed "x501" dissector consequently the asn/x501 directory should be removed. The patch includes the changes to epan/dissectors/Makefile.common to reflect this.
 
 As the DOP dissection is not fully tested, I have disabled it by default for now (like DSP) but it can be enabled by the user.

svn path=/trunk/; revision=16727
2005-12-08 06:43:01 +00:00
Anders Broman fa92d58b40 From Grame Lunt:
updated X.500 dissectors to include DOP support.

The "dop" dissector is the renamed "x501" dissector consequently the asn/x501 directory should be removed. The patch includes the changes to epan/dissectors/Makefile.common to reflect this.

As the DOP dissection is not fully tested, I have disabled it by default for now (like DSP) but it can be enabled by the user.


svn path=/trunk/; revision=16726
2005-12-07 23:20:11 +00:00
Luis Ontanon 55d5c5cc66 Avoid dereferencing pointers to the message, context and transaction object if they have not been created.
svn path=/trunk/; revision=16725
2005-12-07 21:08:51 +00:00
Anders Broman f65a00b5f4 libethereal: add capture_enc
tipc: First stab at reassembly, as tipc reasembly is based on reading the message length from the first segmented packet and then just add the bytes received I didn't find a better way of doing it. 

svn path=/trunk/; revision=16724
2005-12-07 20:07:14 +00:00
Ronnie Sahlberg adb796abc6 tap the ntlmssp protocol and extract the account/domain names when users authenticate.
If known   put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header




svn path=/trunk/; revision=16723
2005-12-07 13:14:09 +00:00
Ronnie Sahlberg d12b09b886 new function fetch_tapped_data()
This function can be called from a dissector to fetch (if any) tapped data from a tap.
This can offer an alternative method of passing data between different dissectors much cleaner than the pinfo pollition and private_data design mistake.


The SMB2 dissector uses this method to extract vital data such as Account_Name from the ntlmssp dissector (that is 3 leveld down from smb2)




svn path=/trunk/; revision=16722
2005-12-07 13:12:39 +00:00
Ronnie Sahlberg 56b2184927 make ntlmssp tappable
svn path=/trunk/; revision=16721
2005-12-07 13:09:42 +00:00
Guy Harris 93106a8e2e Fix some more scaled-fixed-point values, and have a 2-byte spare field
followed by a 2-byte event count.  Fixes bug 609.

svn path=/trunk/; revision=16720
2005-12-07 10:44:55 +00:00
Guy Harris e4106ae5f8 Fix oroperties, get rid of CRs.
svn path=/trunk/; revision=16719
2005-12-07 09:51:31 +00:00
Guy Harris 6afd45377d Squelch a narrowing-conversion warning.
svn path=/trunk/; revision=16718
2005-12-07 09:48:08 +00:00
Guy Harris 283fce7500 Clear up const vs. non-const warnings.
svn path=/trunk/; revision=16717
2005-12-07 09:38:57 +00:00
Guy Harris 9fea197bf9 Why duplicate the code of "tvb_get_string()" when you could just use
"tvb_get_string()"?

Why even bother with "tvb_get_string()" when you can just use
"proto_tree_add_item()" with a string item?

Make sure that the prefix in a PRIV item isn't bigger than the item
itself.  That fixes bug 603.

svn path=/trunk/; revision=16716
2005-12-07 03:03:37 +00:00
Guy Harris 3250d41ea6 Don't export stuff if no other dissector uses it. "Static unless
otherwise required."

svn path=/trunk/; revision=16715
2005-12-07 01:45:44 +00:00
Guy Harris 363298dd4c Fix indentation.
Gate X and Y Offset are 16-bit integral numbers of degrees, not 32-bit
IEEE floating-point numbers, and the numbers in collision detection
segment definitions and collision detection volume definitions are
16-bit fixed-point numbers, not 32-bit IEEE floating-point numbers;
handle them as such - this fixes bug 605.

When displaying the packet length in the Info column, display the *real*
length, not the sliced length.

svn path=/trunk/; revision=16714
2005-12-07 01:31:43 +00:00
Guy Harris e5de0c4986 Unicode considered unnecessary and non-portable. Avoid using non-ASCII
characters in field names.

Fix indentation, and fix a typo.

svn path=/trunk/; revision=16713
2005-12-07 00:43:17 +00:00
Ronnie Sahlberg a9a437d64a From Martin M various updates and fixes
Hi, Some tiddly changes: pppoe- don't create an empty discovery tags tree when the payload length is 0 chap- make chap.value work as a filterable field rtcp- append the packet type to the protocol tree name 


svn path=/trunk/; revision=16712
2005-12-07 00:35:16 +00:00
Ronnie Sahlberg 213ef19c87 From Jelmer V AIM bugfix
Hi,

The attached patch fixes the name of the version field, which I
previously mistook for an authorization cookie (which is in fact in a
TLV that follows this field).



svn path=/trunk/; revision=16711
2005-12-07 00:27:17 +00:00
Guy Harris 76bcc9bd3f Squelch some compiler const vs. non-const warnings.
svn path=/trunk/; revision=16710
2005-12-06 22:59:30 +00:00
Guy Harris 0b1f2585c5 Clean up capture_enc(), export it, and use it in the capture window.
svn path=/trunk/; revision=16709
2005-12-06 22:56:37 +00:00
Guy Harris d00581f430 The keys for entries in the OID-to-name hash table are g_mallocated, so
we have to g_free them when destroying the hash table.

svn path=/trunk/; revision=16708
2005-12-06 22:26:10 +00:00
Guy Harris 4fb23b89d4 Set svn:keywords to Id to get RCS IDs expanded.
Set svn:eol-style to native to handle line endings appropriately, and
trim off CRs.

svn path=/trunk/; revision=16707
2005-12-06 21:07:50 +00:00
Ronnie Sahlberg 383faa3de3 g_hash_table_new_full() does not exist for glib1
svn path=/trunk/; revision=16706
2005-12-06 20:29:46 +00:00
Luis Ontanon 94110893b7 It crashed when keep_persistent_data == FALSE
svn path=/trunk/; revision=16705
2005-12-06 19:47:22 +00:00
Ulf Lamping 5ae90828ae we can even get error messages while we are capturing (e.g. when a network cable is unplugged)
problem found by Joerg Mayer

svn path=/trunk/; revision=16704
2005-12-06 19:41:45 +00:00
Luis Ontanon d6c5410b18 - Fix few issues with context analysis
- Add used terminations tree to the context analysis tree

Regenerate Dissector


svn path=/trunk/; revision=16703
2005-12-06 18:52:17 +00:00
Anders Broman 581faf7625 Fill in Column info, Dissect some more user info.
svn path=/trunk/; revision=16702
2005-12-06 17:54:40 +00:00
Anders Broman 1426dbb8fb Dissect Cause and use %(DEFAULT_BODY)s use import for IMSI.
svn path=/trunk/; revision=16701
2005-12-06 17:53:28 +00:00
Tomas Kukosa c41cac4285 mark unused parameter
svn path=/trunk/; revision=16700
2005-12-06 12:50:11 +00:00
Tomas Kukosa a5bfb48c2f OBJECT IDENTIFIER name resolution moved to oid_resolv.c
svn path=/trunk/; revision=16699
2005-12-06 11:45:55 +00:00
Tomas Kukosa a3ed89556a protocol discriminator byte has to be taken into info_element_len
svn path=/trunk/; revision=16698
2005-12-06 10:50:21 +00:00
Ulf Lamping 08a727307c both the buildbot and I have problems with setargv.obj
trying to comment it out, so the build should work again.

don't know what this file is all about :-( 

I just don't have that file and it doesn't seem to be generated ... 

svn path=/trunk/; revision=16697
2005-12-06 08:40:17 +00:00
Guy Harris ac2edbb7aa Note what we have to be careful of before we start using Unicode in the
packet list or packet details.

svn path=/trunk/; revision=16696
2005-12-06 06:09:28 +00:00
Guy Harris 4f7478f3a0 Make $(command_line_OBJECTS) a dependency of the stuff that links with
it.

Link dumpcap with mkstemp.obj, as it needs mkstemp().

Make dumpcap depend only on its resource file, as we do with other
programs, not on all of them.

svn path=/trunk/; revision=16695
2005-12-06 06:03:34 +00:00
Ronnie Sahlberg 844756f0ca from Kyle Harms
CIGI updates


svn path=/trunk/; revision=16694
2005-12-06 01:05:48 +00:00
Ulf Lamping 47ae9fa7bd add a short comment to cant_load_winpcap_err() and use it in gtk/capture_dlg.c
svn path=/trunk/; revision=16693
2005-12-06 01:04:55 +00:00
Ronnie Sahlberg 55c9157d6b objectid updates
svn path=/trunk/; revision=16692
2005-12-06 00:27:51 +00:00
Ulf Lamping 7e3a24418c rename pcap-....c/.h files to capture-pcap-....c/.h
this way, the capture prefix will "logically" group the files together and file browsers will also group them

we may want to move the files into a subdir capture later

svn path=/trunk/; revision=16691
2005-12-06 00:07:13 +00:00
Ulf Lamping a6f33f1d05 requested by Cory Perry:
increase the maximum number of ringbuffer files from 1024 to 10000.

svn path=/trunk/; revision=16690
2005-12-05 23:22:59 +00:00
Anders Broman f27bf13022 From Grame Lunt:
a patch for the X.411, X420 and CMS dissectors to implement the remaining heading extensions and bodyparts.

This includes GeneralText BP, forwarded content BP (forwarded p22 and forwarded p772), PKCS#7 BP, and "business class" messaging extensions.

The X.411 extensions using the SIGNATURE macro have also been implemented. There is also a fix for a bug in the dissection of integer 22 content type.

Graeme

svn path=/trunk/; revision=16689
2005-12-05 23:00:03 +00:00
Ulf Lamping fcd9e87872 fixed a typo
svn path=/trunk/; revision=16688
2005-12-05 22:49:10 +00:00
Ulf Lamping 8dab6be33c move some GTK only function declarations from ui_util.h to the appropriate header files in the gtk dir, as these declarations are obsolete and only confuses (at least me)
svn path=/trunk/; revision=16687
2005-12-05 22:45:54 +00:00
Ulf Lamping a7dc7c2922 enhance the comments
svn path=/trunk/; revision=16686
2005-12-05 22:28:42 +00:00