Commit Graph

4013 Commits

Author SHA1 Message Date
Ronnie Sahlberg d12b09b886 new function fetch_tapped_data()
This function can be called from a dissector to fetch (if any) tapped data from a tap.
This can offer an alternative method of passing data between different dissectors much cleaner than the pinfo pollition and private_data design mistake.


The SMB2 dissector uses this method to extract vital data such as Account_Name from the ntlmssp dissector (that is 3 leveld down from smb2)




svn path=/trunk/; revision=16722
2005-12-07 13:12:39 +00:00
Ronnie Sahlberg 56b2184927 make ntlmssp tappable
svn path=/trunk/; revision=16721
2005-12-07 13:09:42 +00:00
Guy Harris 93106a8e2e Fix some more scaled-fixed-point values, and have a 2-byte spare field
followed by a 2-byte event count.  Fixes bug 609.

svn path=/trunk/; revision=16720
2005-12-07 10:44:55 +00:00
Guy Harris e4106ae5f8 Fix oroperties, get rid of CRs.
svn path=/trunk/; revision=16719
2005-12-07 09:51:31 +00:00
Guy Harris 6afd45377d Squelch a narrowing-conversion warning.
svn path=/trunk/; revision=16718
2005-12-07 09:48:08 +00:00
Guy Harris 9fea197bf9 Why duplicate the code of "tvb_get_string()" when you could just use
"tvb_get_string()"?

Why even bother with "tvb_get_string()" when you can just use
"proto_tree_add_item()" with a string item?

Make sure that the prefix in a PRIV item isn't bigger than the item
itself.  That fixes bug 603.

svn path=/trunk/; revision=16716
2005-12-07 03:03:37 +00:00
Guy Harris 3250d41ea6 Don't export stuff if no other dissector uses it. "Static unless
otherwise required."

svn path=/trunk/; revision=16715
2005-12-07 01:45:44 +00:00
Guy Harris 363298dd4c Fix indentation.
Gate X and Y Offset are 16-bit integral numbers of degrees, not 32-bit
IEEE floating-point numbers, and the numbers in collision detection
segment definitions and collision detection volume definitions are
16-bit fixed-point numbers, not 32-bit IEEE floating-point numbers;
handle them as such - this fixes bug 605.

When displaying the packet length in the Info column, display the *real*
length, not the sliced length.

svn path=/trunk/; revision=16714
2005-12-07 01:31:43 +00:00
Guy Harris e5de0c4986 Unicode considered unnecessary and non-portable. Avoid using non-ASCII
characters in field names.

Fix indentation, and fix a typo.

svn path=/trunk/; revision=16713
2005-12-07 00:43:17 +00:00
Ronnie Sahlberg a9a437d64a From Martin M various updates and fixes
Hi, Some tiddly changes: pppoe- don't create an empty discovery tags tree when the payload length is 0 chap- make chap.value work as a filterable field rtcp- append the packet type to the protocol tree name 


svn path=/trunk/; revision=16712
2005-12-07 00:35:16 +00:00
Ronnie Sahlberg 213ef19c87 From Jelmer V AIM bugfix
Hi,

The attached patch fixes the name of the version field, which I
previously mistook for an authorization cookie (which is in fact in a
TLV that follows this field).



svn path=/trunk/; revision=16711
2005-12-07 00:27:17 +00:00
Guy Harris 76bcc9bd3f Squelch some compiler const vs. non-const warnings.
svn path=/trunk/; revision=16710
2005-12-06 22:59:30 +00:00
Guy Harris 0b1f2585c5 Clean up capture_enc(), export it, and use it in the capture window.
svn path=/trunk/; revision=16709
2005-12-06 22:56:37 +00:00
Guy Harris d00581f430 The keys for entries in the OID-to-name hash table are g_mallocated, so
we have to g_free them when destroying the hash table.

svn path=/trunk/; revision=16708
2005-12-06 22:26:10 +00:00
Guy Harris 4fb23b89d4 Set svn:keywords to Id to get RCS IDs expanded.
Set svn:eol-style to native to handle line endings appropriately, and
trim off CRs.

svn path=/trunk/; revision=16707
2005-12-06 21:07:50 +00:00
Ronnie Sahlberg 383faa3de3 g_hash_table_new_full() does not exist for glib1
svn path=/trunk/; revision=16706
2005-12-06 20:29:46 +00:00
Luis Ontanon 94110893b7 It crashed when keep_persistent_data == FALSE
svn path=/trunk/; revision=16705
2005-12-06 19:47:22 +00:00
Luis Ontanon d6c5410b18 - Fix few issues with context analysis
- Add used terminations tree to the context analysis tree

Regenerate Dissector


svn path=/trunk/; revision=16703
2005-12-06 18:52:17 +00:00
Anders Broman 581faf7625 Fill in Column info, Dissect some more user info.
svn path=/trunk/; revision=16702
2005-12-06 17:54:40 +00:00
Anders Broman 1426dbb8fb Dissect Cause and use %(DEFAULT_BODY)s use import for IMSI.
svn path=/trunk/; revision=16701
2005-12-06 17:53:28 +00:00
Tomas Kukosa c41cac4285 mark unused parameter
svn path=/trunk/; revision=16700
2005-12-06 12:50:11 +00:00
Tomas Kukosa a5bfb48c2f OBJECT IDENTIFIER name resolution moved to oid_resolv.c
svn path=/trunk/; revision=16699
2005-12-06 11:45:55 +00:00
Tomas Kukosa a3ed89556a protocol discriminator byte has to be taken into info_element_len
svn path=/trunk/; revision=16698
2005-12-06 10:50:21 +00:00
Guy Harris ac2edbb7aa Note what we have to be careful of before we start using Unicode in the
packet list or packet details.

svn path=/trunk/; revision=16696
2005-12-06 06:09:28 +00:00
Ronnie Sahlberg 844756f0ca from Kyle Harms
CIGI updates


svn path=/trunk/; revision=16694
2005-12-06 01:05:48 +00:00
Ronnie Sahlberg 55c9157d6b objectid updates
svn path=/trunk/; revision=16692
2005-12-06 00:27:51 +00:00
Anders Broman f27bf13022 From Grame Lunt:
a patch for the X.411, X420 and CMS dissectors to implement the remaining heading extensions and bodyparts.

This includes GeneralText BP, forwarded content BP (forwarded p22 and forwarded p772), PKCS#7 BP, and "business class" messaging extensions.

The X.411 extensions using the SIGNATURE macro have also been implemented. There is also a fix for a bug in the dissection of integer 22 content type.

Graeme

svn path=/trunk/; revision=16689
2005-12-05 23:00:03 +00:00
Ronnie Sahlberg 7e5f31b6a0 updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown bytes in smb for objectid)
svn path=/trunk/; revision=16682
2005-12-05 21:22:06 +00:00
Ronnie Sahlberg e6dd4f9631 From Kyle J Harms
New protocol : CIGI  (with minor updates to make it heuristic)

Hi,

This patch is for a CIGI dissector (complete versions 2 and 3).  It has
been [fuzz] tested on GNU/Linux using the Ethereal 0.10.13 codebase.
However, the patch here is against the svn repository.

More information about CIGI can be found at http://cigi.sourceforge.net/

Kyle Harms




svn path=/trunk/; revision=16681
2005-12-05 20:54:42 +00:00
Anders Broman e74a09cd01 If we don't have the OID name let the SNMP dissector try to get it from the MIB:s
svn path=/trunk/; revision=16680
2005-12-05 17:24:19 +00:00
Anders Broman 0b02bdbb43 Connection and name manager uses data type hdr
svn path=/trunk/; revision=16675
2005-12-04 21:50:31 +00:00
Guy Harris 46325167d9 Check for a null blurb pointer for a field, as is done in some other
locations, and initialize the blurb field to NULL for protocols, now
that we support the blurb being a null pointer.

svn path=/trunk/; revision=16672
2005-12-04 04:22:43 +00:00
Guy Harris 02d9de5a5d Squelch a GCC complaint.
svn path=/trunk/; revision=16670
2005-12-04 04:13:07 +00:00
Luis Ontanon d573677bc6 Escape non ascii characters
svn path=/trunk/; revision=16665
2005-12-03 19:41:18 +00:00
Ronnie Sahlberg 7efbafb6e5 from Stig B:
I have made a small change in packet-x411-template.c to make the X.
411 message heading in CDT look like in COTP.




svn path=/trunk/; revision=16657
2005-12-02 22:01:00 +00:00
Ronnie Sahlberg e93abb6669 rtcp fix for sdes_prefix_string
svn path=/trunk/; revision=16656
2005-12-02 21:12:22 +00:00
Anders Broman cd7147c0b8 From Lukasz Apiecionek
Add Vendor id 
0x8a000003, "Teldat H. Kruszynski, M. Cichocki Sp. J." } ,

svn path=/trunk/; revision=16655
2005-12-02 19:33:40 +00:00
Tomas Kukosa 2b4785f93e PER dissectors regenerated with FT_OID
svn path=/trunk/; revision=16653
2005-12-02 13:21:43 +00:00
Tomas Kukosa dcae7d303f new field type FT_OID for OBJECT IDENTIFIERs
svn path=/trunk/; revision=16652
2005-12-02 13:16:58 +00:00
Ronnie Sahlberg a809b11b2b check in a version of wkssvc that contains all the constructs of the etehreal dissector.
the generated dissector is still "ugly" compared to the handwritten one so there needs a bit of conformance file magic and maybe pidl enhancements before it can go in.


svn path=/trunk/; revision=16651
2005-12-02 11:33:34 +00:00
Ronnie Sahlberg 063d484334 regenerate the pidl dissectors with the latest version of pidl so it will put the text representation of DOS errors in the decode as well.
(the hf field for doserrors did not come with the value_string)



svn path=/trunk/; revision=16650
2005-12-02 10:54:05 +00:00
Ronnie Sahlberg 5c8675fe7d add two new ip protocol numbers
from Jaap K


svn path=/trunk/; revision=16648
2005-12-02 10:25:05 +00:00
Ronnie Sahlberg 9edeb85cba add some more ioctls
svn path=/trunk/; revision=16646
2005-12-02 09:19:05 +00:00
Ronnie Sahlberg bc21123474 add dissection of
FSCTL_CREATE_OR_GET_OBJECT_ID


svn path=/trunk/; revision=16645
2005-12-02 06:49:52 +00:00
Anders Broman fa3b1f1424 Handle empty APM message
svn path=/trunk/; revision=16644
2005-12-01 20:29:24 +00:00
Anders Broman f07dd2bfcf Add TIPC address as address type and use it in TIPC.
svn path=/trunk/; revision=16641
2005-12-01 20:02:45 +00:00
Ronnie Sahlberg 1f39289cce add dissection of FSCTL_GET_SHADOW_COPY_DATA
svn path=/trunk/; revision=16638
2005-12-01 13:06:20 +00:00
Ronnie Sahlberg c8ff130c27 swap in/out to be more consistent with sane naming conventions
svn path=/trunk/; revision=16637
2005-12-01 12:34:53 +00:00
Ronnie Sahlberg 1b2e68397a start implementing an ioctl dispatcher for different ioctl functions
svn path=/trunk/; revision=16636
2005-12-01 10:34:00 +00:00
Ronnie Sahlberg 646535de33 add decoding of some ioctl names copied from packet-smb.c
svn path=/trunk/; revision=16635
2005-12-01 10:18:14 +00:00