Commit Graph

4300 Commits

Author SHA1 Message Date
Martin Mathieson 86056bff3c "an wireshark" -> "a wireshark".
Presumably "an ethereal" was search replaced...

svn path=/trunk/; revision=20266
2007-01-02 13:25:36 +00:00
Martin Mathieson 7e2db474c8 Fix for bug 1279 (Negative values for RTCP round trip delay
cannot be stored in guint32).
- Makes the threshold preference value an absolute value.
- There is now a separate expert info item for -ve roundtrips

N.B. There is still a problem with filtering -ve values on this
FT_INT32 field, i.e. rtcp.roundtrip-delay < 0 never matches with
frames that it should (even if rtcp.roundtrip-delay == -3 can
be used to match specific frames...).

svn path=/trunk/; revision=20264
2007-01-02 11:46:30 +00:00
Guy Harris 04ca66dfb1 Ehtereal[sic] -> Wireshark. :-)
Give a little more detail in the comment in the H.248 dissector about
"MEGACO" vs. "H.248".

svn path=/trunk/; revision=20262
2007-01-02 09:20:27 +00:00
Anders Broman 9375e27794 Use TransactionId to match ansi map responses to requests and fix
some bugs in the asn2wrs generated ansi map dissector.

svn path=/trunk/; revision=20257
2007-01-01 22:03:01 +00:00
Jaap Keuter 224a21ecfe From Mark C. Brown:
HP-UX 11.31 will add a new nettl trace subsystem, NS_LS_TELNET (ID=267).
NS_LS_TELNET is just raw telnet data.  There is no layer 2/3/4 headers, so
there's just the HP-UX nettl record header followed directly by the TCP payload
for a telnet connection.  Thus the need for a new wiretap encapsulation type...

svn path=/trunk/; revision=20253
2007-01-01 14:48:18 +00:00
Jaap Keuter f824a895a4 From Paul Erkkila:
parse NAPTR records in dns dissector (rfc 3403)

svn path=/trunk/; revision=20250
2006-12-31 00:00:06 +00:00
Stephen Fisher e376bf66e8 Fix for bug #1132:
Stop displaying the application data (in this case, HTML) in the tree and
and "Decrypted SSL data" tab twice since each already includes both of the
application data record layers combined.


svn path=/trunk/; revision=20247
2006-12-30 01:06:46 +00:00
Guy Harris fa9aeff8db Give dissect_cmd_Get_Channel_Auth_Capabilities() a return type (it
returns nothing, so it should be void), and make it static like the
other functions.

Make the ipmi_cmd_array[] table static - and const, while we're at it.

svn path=/trunk/; revision=20235
2006-12-29 22:48:09 +00:00
Gerald Combs bd282b4114 Move the contents of airpdcap to epan/crypt. Try to fix the current
distcheck failure.  Move the nmake build targets for airpdcap from 
epan/dissectors to epan.  This will probably break the Windows build.

svn path=/trunk/; revision=20231
2006-12-28 17:22:12 +00:00
Tomas Kukosa 60180815a6 debug improvements
svn path=/trunk/; revision=20230
2006-12-28 12:30:53 +00:00
Gerald Combs 2437fd2e77 Prepare to move the airpdcap code to epan/crypt (SVN won't let me actually
move the files until these changes are checked in).  Add an AC_DEFINE
for airpdcap (which will be removed once the changes have settled).
Update the airpdcap code to compile on non-Windows systems.  Fix up
comments and whitespace to conform more closely to the rest of the
code base.  Verified to compile under Windows and OS X.

svn path=/trunk/; revision=20227
2006-12-27 23:05:55 +00:00
Guy Harris 303082812e From Sebastien Tandel: fix places where a signed character was being
passed to ctype.h macros.

Make some routines in packet-exec.c not used outside that file static,
and fix a typo.

svn path=/trunk/; revision=20222
2006-12-26 22:56:35 +00:00
Jeff Morriss 37d4a40254 If p2p_dir isn't set (no message direction is configured) or no association is found, try to find a subdissector on both the called and calling SSNs instead of just trying the called SSN. Also clean up some indenting and fix the capitalization when showing what dissector the TCAP SSN is linked to.
svn path=/trunk/; revision=20220
2006-12-26 22:27:46 +00:00
Ulf Lamping f2671283b5 use prefix to prevent redefinition warning from wingdi.h
svn path=/trunk/; revision=20216
2006-12-26 20:00:45 +00:00
Jaap Keuter c7959ab0e1 From Sebastien Tandel:
Here is a patch for the management of the bad/good checksum for ISIS (like TCP/UDP/IP).
support added for:
- booleans hf_isis_lsp_checksum_good, hf_isis_lsp_checksum_bad in the tree,
- information in the info column if bad checksum,
- expert info for bad checksum,

svn path=/trunk/; revision=20214
2006-12-26 09:13:05 +00:00
Stephen Fisher d5aa0e1844 From Sake Blok:
The attached patch changes the way the ssl-session-id is displayed.
Currently it is not shown, only the length is shown like this:
 
   Session ID Length: 32
   Session ID (32 bytes)
 
To me, it is not useful to repeat the length and omit the ID itself.
With this patch the ssl-session-id is shown like this:
 
   Session ID Length: 32
   Session ID: A4B2FB0EE6D8F58DEFF68E38B1E5B4C25F1869D4BC86A96E...


svn path=/trunk/; revision=20212
2006-12-25 04:01:22 +00:00
Guy Harris 3094d7e3f6 dissect_roofnet_link() returns no value and nothing expects it to;
declare it to return void, not int.

Get rid of an unused variable.

svn path=/trunk/; revision=20211
2006-12-24 20:40:19 +00:00
Stephen Fisher 3700141ae2 Report inaccurate PPPoE Session payload length when detected to aid in the
troubleshooting of malformed packets.


svn path=/trunk/; revision=20203
2006-12-22 22:15:38 +00:00
Jaap Keuter 79b23d4856 Fix for bug 1272.
Check length remaining before aligning.

svn path=/trunk/; revision=20198
2006-12-22 14:48:51 +00:00
Jaap Keuter 14cafb271f From Alfred Alinazar:
The patch is to dissect unknown information element when an Avaya PBX
use codeset = 6 to send display.

svn path=/trunk/; revision=20189
2006-12-21 22:24:33 +00:00
Jaap Keuter 888cf1130b From Taisuke SASAKI:
I found a misdecoding in dissect_sflow_extended_switch() in epan/dissector/packet-sflow.c and fixed it.

svn path=/trunk/; revision=20187
2006-12-21 22:13:30 +00:00
Martin Mathieson 09c7a1abc4 Add a generated field for how many data bytes are accepted by subdissector
svn path=/trunk/; revision=20184
2006-12-21 18:00:07 +00:00
Martin Mathieson 7a84ccbe0f TBCP changes:
- Fix 'ignored' flag that wasn't wide enough to take result
- Use FP_UINT_STRING in a couple of places

svn path=/trunk/; revision=20183
2006-12-21 17:05:42 +00:00
Stephen Fisher 69ddfdb12e From Motonori Shindo:
As per NetFlow V9 protocol, Template ID is guaranteed to be unique per
Observation Domain (identified by Source ID) and the Exporter
(identified by the source IP address of NetFlow PDU).

The former code was ignoring these information for simplicity, but
noticing such a necessity.


svn path=/trunk/; revision=20182
2006-12-21 06:41:11 +00:00
Ronnie Sahlberg 78ad94c00d Enhance tcp reassembly of the flavor "reassemble one more segment" work properly
for the quite unusual case when we need to do this multiple times in a row for the same PDU.

This fixes the issue reported by Xiaoguang Liu on the mailinglist
where wireshark did not manage to properly reassemble a big HTTP header spanning several (more than two) tcp segments.



svn path=/trunk/; revision=20179
2006-12-20 11:57:31 +00:00
Anders Broman cf919a1adb Remove an unused variable.
svn path=/trunk/; revision=20173
2006-12-19 22:28:20 +00:00
Anders Broman 898f55b302 Correct a problem with media parameter dissection and add inforamtion about a number of packages.
svn path=/trunk/; revision=20166
2006-12-19 22:26:41 +00:00
Jaap Keuter 5ce80ed046 From Sebastien Tandel:
Here is a patch for the dissector of the new Roofnet protocol.

svn path=/trunk/; revision=20154
2006-12-19 22:16:54 +00:00
Anders Broman 039a3278a0 From Florent Drouin:
Update the Camel ASN1 definition to version 3GPP TS
29.078 7.3.0 Release 7.
Some definitions for element SIZE have been replaced to use the capSpecificBound variables, and some decoding problemes, like for Establish temporary connection have been solved.
I did notice that the CalledPartyBCDNumber (ISDN-AddressString (1..9) ) is not inline with the last definition (1..41), but I did not update it.

svn path=/trunk/; revision=20153
2006-12-19 22:07:08 +00:00
Anders Broman ea86134eaf From Florent Drouin:
Introduce the support for "expert info" in the BER decoding module.
It is usefull if you have to analyze long capture files, containing few malformed messages.

With changes to make it compile with MSVC6.

svn path=/trunk/; revision=20152
2006-12-19 22:04:22 +00:00
Stephen Fisher e4dc8bd0fb From Sebastien Tandel:
a little patch against revision 20088 in packet-isis-lsp.c for the
following :
- hf_isis_lsp_remaining_life declared but unused
- replacing a proto_tree_add_uint useless with proto_tree_add_item


svn path=/trunk/; revision=20148
2006-12-18 23:12:50 +00:00
Martin Mathieson 927e520b1a Show generated field when frame has 0 TBs for a channel
svn path=/trunk/; revision=20146
2006-12-18 17:58:52 +00:00
Stephen Fisher 5ed8492c42 Display icmp echo/echo reply sequence numbers in decimal in addition to hex,
so that it is easier to match it with the output of a ping program. 


svn path=/trunk/; revision=20142
2006-12-17 05:44:32 +00:00
Stephen Fisher a058ef7325 Make IPv4 addresses in AIM TLV data human readable.
svn path=/trunk/; revision=20141
2006-12-17 05:37:18 +00:00
Jeff Morriss 12bf9032cf From Sebastien Tandel: if the TCP dissector is dissecting a fragment of a packet in an ICMP message, put the TCP sequence number in the tree.
svn path=/trunk/; revision=20140
2006-12-16 15:17:43 +00:00
Jeff Morriss 40ad0bce4d From Sebastien Tandel: don't allocate a hash table until a little bit later in the function so memory is not leaked by an early (error) return
svn path=/trunk/; revision=20138
2006-12-14 12:46:50 +00:00
Martin Mathieson 6005837364 Fix version check needed for EDCH 'Number of subframes' field
svn path=/trunk/; revision=20137
2006-12-14 11:50:54 +00:00
Ronnie Sahlberg 2aaabbba43 check for whether the blob starts with "NTLMSSP" before any other check if it is not BED/DER encoded and call tha appropriate subdissector if so.
this fixes some issues with some really ancient cifs implementations where the previous tests and statemanagement would cause it to fail othervise.



svn path=/trunk/; revision=20136
2006-12-14 10:11:40 +00:00
Jaap Keuter 577343f7c3 Some source code clean up.
svn path=/trunk/; revision=20135
2006-12-14 07:54:55 +00:00
Stephen Fisher 3785851d84 Add checksum verification to the CDP dissector and add an entry for this
in the main colorfilters file.


svn path=/trunk/; revision=20134
2006-12-14 03:34:26 +00:00
Stephen Fisher c97caf2a94 From Stig Bjorlykke:
I have added a new dissector for DMP (STANAG 4406 Direct Message
Profile) as defined in STANAG 4406 Annex E.  The DMP protocol has no
assigned UDP port number yet, so the default value in this dissector
is 0 (I suppose this is som sort of "disabled"?) until we get this
registered.

The dissector has been tested on OSX Intel/PowerPC and Solaris SPARC.

Changes in this patch:
* Added DMP dissector
* Added a new CRC table and functions in crc16.c
* Made NonDeliveryReasonCode and NonDeliveryDiagnosticCode available
from X.411
* Made NonReceiptReasonField and DiscardReasonField available from X.420


svn path=/trunk/; revision=20133
2006-12-14 00:16:06 +00:00
Stephen Fisher daa21601b2 From Marc Petit-Huguenin:
This is a new dissector for STUN v2, that is currently in WGLC at the IETF.

- Keep packet-stun.c for the RFC 3498 protocol, plus the STUN and TURN
drafts up to draft-ietf-behave-rfc3489bis-02 and
draft-rosenberg-midcom-turn-08, as there is some huge deployments using
this.  There will be no modification to this dissectors in the future,
excepted perhaps to add support for retransmission or things like this.

- Add a new dissector packet-stun2.c for the new STUN (currently in
WGLC), the STUN relay-usage (formerly known as TURN) and the other
usages that will be added in the future (IPv6, NAT Behavior, etc...).


svn path=/trunk/; revision=20131
2006-12-13 22:22:05 +00:00
Ronnie Sahlberg 84553a1b5e if there is a list of mechTypes in the negTokenInit then store the first one
and associate it with the conversation properly.

do the same for supportedMech in the negTokenTarg


This will allow wireshark to decode the blob in negTokenTarg even when no supportedMech is provided.



svn path=/trunk/; revision=20129
2006-12-13 02:44:00 +00:00
Gerald Combs 75ba22c7d0 Processing packet data via tvb_get_ptr() is like palpating a cow -- it's
messy and you shouldn't do it unless you REALLY have to.  Change several
routines to use standard tvb_get_* accessors instead of operating on raw
packet data.  This fixes an integer overflow in dissect_vendor_ie_rsn()
found by Neil Kettle.

Use value_strings instead of duplicating their functionality with our
own routines.  Print the WME surplus bandwidth allowance factor.  Fix
some compiler warnings.

Update the release notes.

Some of the changes are untested due to a lack of capture data.

svn path=/trunk/; revision=20126
2006-12-12 22:24:18 +00:00
Ronnie Sahlberg fd00fc9cb2 kerberos error with ERR_ETYPE_NOSUPP which is issued when the kdc does not support the specified enctype in AS REQ contains in the e-type field for optional additional data a PA_DATA sequence of sequence just as PREAUTH_REQ/FAILED does.
(it would make much more sense if the KDC here would list the enctypes that are supported)




svn path=/trunk/; revision=20125
2006-12-12 08:28:37 +00:00
Anders Broman a78874863a Dissect Get Channel Authentication Capabilities Command.
svn path=/trunk/; revision=20124
2006-12-12 07:06:40 +00:00
Bill Meier ee29136d41 Remove svn:executable property from a few more .[hc] files
svn path=/trunk/; revision=20122
2006-12-12 02:24:51 +00:00
Jaap Keuter 376c54d343 Removed executable property.
svn path=/trunk/; revision=20119
2006-12-11 21:28:07 +00:00
Stephen Fisher f4e0b64fe7 From Thomas Sillaber:
Create two new columns: IP DSCP and L2 COS (802.1p)


svn path=/trunk/; revision=20118
2006-12-11 20:24:51 +00:00
Martin Mathieson bb910ed113 Remove \n from long preference description
svn path=/trunk/; revision=20114
2006-12-11 13:33:46 +00:00