Update gtk and gtk2 versions of RPC_STAT to allow a filter string to be specified on both the command line as well as the GUI.
Update the documentation for ethereal to reflect this.
svn path=/trunk/; revision=6343
releases don't involve explosive bolts like NASA launches do.
Bring the ChangeLog and NEWS files up to date to the end of August.
svn path=/trunk/; revision=6341
This makes it possible to generate any types of stats based on user defined subsets of the capture.
Try -z rpc,rtt,100003,3,nfs.fh.hash==0x12345678
NFS rtt statistics for a specific file.
svn path=/trunk/; revision=6337
This update adds NCP 87/66.
Also add additional error codes, added hf_definition for super class
(NDS). Cleaned up some unused variables (Warnings when building
Ethereal). Fixed NCP type 0x9999 (server busy packets to echo
information to summary information), Added subtree format to NDS
dissector to cleanup display.
svn path=/trunk/; revision=6331
the unicode bit.
Also, it seems that the strings in the address list of a
NTLMSSP_CHALLENGE message are always in unicode, regardless of the
negotiated string type. I have a capture of win98 doing NTLM over
HTTP where the domain name is in ASCII but the address list is
unicode.
There is still a bug in the dissection of the NTLMSSP_AUTH message
where the flags value does not specify unicode but the
domain/user/host name is unicode. Perhaps the flags value for this
message aren't NTLMSSP flags?
Guy/Richard/jmayer, if you have any captures that show different
behaviour can you send them my way?
svn path=/trunk/; revision=6329
HTTP, but NTLMSSP_CHALLENGE appears twice in a session setup response
SPNEGO negTokenTarg, as the NTLMSSP message appears both in the
responseToken and mechListMIC fields.
svn path=/trunk/; revision=6328
dissect_ntlmssp_strings(). It seems that most versions of IE don't
set the workstation name and domain name in the NTLMSSP_NEGOTIATE
message when doing NTLM over HTTP.
svn path=/trunk/; revision=6327
Other SNA TH types support fragmentation, but denote it much differently
thant TH FID2. Since I have only FID-2 fragmented packet traces, it's
the only type I could test, and thus the only FID type I coded for.
Many thanks to Nick Baldwin <nick.baldwin@satelcom.co.uk> for
providing the traces and for testing the changes.
svn path=/trunk/; revision=6325
- moved color_filter_t in color.h
- change color_filter_t to use color_t instead of GdkColor
This changed allowed to remove the last gtk includes in file.c. It is
now completely free of any gtk related code.
svn path=/trunk/; revision=6324
In my recent patches to set and use a default directory, I neglected
to set the directory when the user enters a file name directly into the
"Capture Options" and "Print" dialogs instead of using the file dialog.
This set of patches corrects this.
svn path=/trunk/; revision=6318
It can sometimes happen that capturing is stopped just after Ethereal
has switched to a new ring buffer. The result is that no frames
are displayed. The patch to ringbuffer.c displays the previous ring
buffer if the current buffer is empty on close.
The patch to capture.c fixes a bug where an error return from
ringbuf_wtap_dump_close was ignored, and tidies up the code around
the call.
svn path=/trunk/; revision=6315
- created a few packet_list_xxx functions (ui_util.h gtk/packet_list.c
gtk2/packet_list.c) ;
- removed almost all "gtk/xxx" and "gtk2/xxx" includes in file.c
The only remaining includes are related to color filters. We have to
make color_filter_t GUI independent by replacing GdkColor with color_t.
I'll work on this later.
svn path=/trunk/; revision=6311
structure to be dissected is 0.
Also, in "loop_record()":
Make the variable in which that size is stored a "guint" to
avoid overflows.
Free up the name string as soon as we're done with it, so that
we won't leak it if we throw an exception.
svn path=/trunk/; revision=6301
alternating colors in all TreeView widgets (see
gtk_tree_view_set_rules_hint()).
- remove unused preferences in the gtk2 port (tree_expander_style and
tree_line_style).
svn path=/trunk/; revision=6296
The performance impact on using multiple tap extensions using
filter strings should be greatly reduced.
Next step would be to rewrite the color filtering in file.c to become
a tap extension and then the checking of display filters in file.c as well.
After that the edt/epan_dissect_run() calls can be completely removed from
file.c
svn path=/trunk/; revision=6295
Ronnie Sahlberg