Commit Graph

81692 Commits

Author SHA1 Message Date
Gilbert Ramirez aca172004f Added RSVP protocol dissector.
svn path=/trunk/; revision=304
1999-06-11 16:45:02 +00:00
Gilbert Ramirez 34450a8a35 Added PPPoE, PPTP, GRE, and ISAKMP dissectors.
svn path=/trunk/; revision=303
1999-06-11 15:30:55 +00:00
Guy Harris 6d7cf738f0 Don't "g_strdup()" what "gtk_entry_get_text()" returns as the contents
of the packet count combo box; there's no need to do so (we don't
remember the string, just its value when converted to a number), and, as
we don't free what "g_strdup()" returns, and don't remember it to save
it later, we leak memory.

svn path=/trunk/; revision=302
1999-06-05 01:44:11 +00:00
Guy Harris a8f72707e1 When checking to see if a packet is of a given type by checking the
source and destination port numbers, check both port numbers against the
specified port, rather than checking the lower of the two port numbers
against the specified port, just in case you happen to either have

	1) the port number for that type being high enough that you can
	   get client sockets using it

or

	2) client sockets using it for some other reason.

svn path=/trunk/; revision=301
1999-06-02 01:28:47 +00:00
Guy Harris 885e4ddfcd When constructing the list for the "Count" combo box in the "Capture"
dialog box, put "0 (Infinite)" first, so that we default to that rather
than to the number of packets in the last capture we read.

svn path=/trunk/; revision=300
1999-06-01 22:24:05 +00:00
Guy Harris 653de14d44 As we may return an error message, rather than a NetBIOS name, from
"get_nbns_name()", make sure the array into which you put the name is
"big enough" - MAXDNAME+4 is more than big enough for those error
messages.

svn path=/trunk/; revision=299
1999-06-01 20:40:34 +00:00
Guy Harris 9bee1b3f20 Unfortunately, as the "cap_len" field in a "frame_data" is unsigned,
"fd->cap_len - offset", i.e. END_OF_FRAME, is unsigned, so

	while (END_OF_FRAME > 0) {

doesn't keep you out of the loop if "offset" is already beyond
"fd->cap_len", so you can try processing stuff past the end of the
captured data in the packet.

svn path=/trunk/; revision=298
1999-06-01 20:39:20 +00:00
Guy Harris cf84edfcf4 Correctly handle the case of the root showing up as a name in a DNS
request or reply.  (Redid "get_dns_name()" along the lines of the code
in the BSD resolver.)

Add code to dissect SOA RRs.

svn path=/trunk/; revision=297
1999-05-27 05:35:08 +00:00
Gilbert Ramirez 5f99945363 Removed segfault if NCP completion code was decoded for an uknown NCP reply type.
svn path=/trunk/; revision=296
1999-05-26 21:46:07 +00:00
Guy Harris fac51faa8a Dissect ICMP Router Discovery packets (router advertisements and router
solicitations).

svn path=/trunk/; revision=295
1999-05-20 02:41:22 +00:00
Gilbert Ramirez 00c52b9e33 Packaging changes for version 0.6.2
svn path=/trunk/; revision=293
1999-05-19 23:16:43 +00:00
Gilbert Ramirez caf9c3e964 Made BPF disassembly in wiretap.c a bit easier to read.
svn path=/trunk/; revision=292
1999-05-19 13:49:35 +00:00
Gilbert Ramirez 2b29a6bcad Added more functionality to the completion-code parsing routine.
svn path=/trunk/; revision=291
1999-05-16 05:12:11 +00:00
Gilbert Ramirez 4302432f16 Removed ethereal.1 and copied make rule from doc/Makefile to top-level
Makefile so that manpage can be made from pod file during packaging.

svn path=/trunk/; revision=290
1999-05-16 04:27:08 +00:00
Gilbert Ramirez 7f11c8a6d7 Fixed to actually compile with CMU SNMP library (at least on Linux).
svn path=/trunk/; revision=289
1999-05-16 04:13:29 +00:00
Gilbert Ramirez 11f27f9b29 Further refined NCP fix, and added translation of NCP Completion Code.
svn path=/trunk/; revision=288
1999-05-14 21:30:13 +00:00
Gilbert Ramirez 124c7bc994 Fixed some serious bugs in the NCP hash routines. I also simplified
the NCP field table structure so that it is easier to add new request/reply
types. I even added a new type myself. There's still more work to be done;
so for now ignore the warnings that gcc emits.

svn path=/trunk/; revision=287
1999-05-13 16:42:43 +00:00
Guy Harris 7d152d2237 Get rid of the include of <arpa/tftp.h>; put the #defines for packet
types in "packet-tftp.c", and grab the opcode directly from the first 2
bytes of the packet, using "pntohs()" (which will also keep us from
crashing, on processors that require strict alignment, if the UDP
payload isn't aligned on a 2-byte boundary).

Also use "pntohs()" to grab the block number in data and acknowledgment
packets, for the same reason we use it to grab the opcode.

svn path=/trunk/; revision=286
1999-05-13 05:46:04 +00:00
Richard Sharpe 38802ac432 Removing some includes of tftp.h from places it should not be
in.

Would like to remove it from packet-tftp.c as well to remove our
dependence on that file as well.

svn path=/trunk/; revision=285
1999-05-13 01:05:11 +00:00
Guy Harris 6399732b86 Add support for Network Monitor 2.0 files, thanks to information
supplied by Tim Farley.

Tim also indicated that the Network Monitor network types may be NDIS
network types+1.  It also appears that NetXRay/Windows Sniffer network
types may be NDIS network types as well.

svn path=/trunk/; revision=284
1999-05-12 21:40:07 +00:00
Laurent Deniel 06d5d955e8 Minor performance improvement and TCP option decoding fixed (when no tree).
svn path=/trunk/; revision=283
1999-05-12 20:44:59 +00:00
Gilbert Ramirez b7b52ec003 Credited John McDermott <jjm@jkintl.com> for his pseudo-real-time
capture patch.

svn path=/trunk/; revision=282
1999-05-12 06:04:47 +00:00
Gilbert Ramirez c50d66ba7c Added Didier Jorand's dissect_snmp routine. This is only compiled in
if you have the UCD or CMU SNMP library available. If you have the SNMP
library but do not with to have SNMP support, use the
	./configure --disable-snmp
option. Otherwise 'configure' finds the SNMP library and uses it.

svn path=/trunk/; revision=281
1999-05-12 05:56:42 +00:00
Gilbert Ramirez 78b0c26cfa Changed wiretap rules so that ordinary user doesn't need bison and flex
if they just compile the source and don't modify any source files.

svn path=/trunk/; revision=280
1999-05-12 04:56:10 +00:00
Guy Harris 64c2723f7d Add "SMB support" to the list of Richard Sharpe's contributions.
svn path=/trunk/; revision=279
1999-05-11 20:32:11 +00:00
Gilbert Ramirez 4c19edd782 Fixed problem where filename of capture file would not be displayed in
status bar if invoked by "ethereal -r filename".

svn path=/trunk/; revision=278
1999-05-11 20:07:47 +00:00
Laurent Deniel 32603ce155 Live data capture and display enhancement that allows network capture and
display of fully decoded packets at the same time.
Options added:
-F : fork capture process
-S : sync mode ala tail -f (implies -F)
-f : filter expression
-Q : exit after capture (implies -k)

svn path=/trunk/; revision=277
1999-05-11 20:07:12 +00:00
Laurent Deniel 4664b86ccd Live data capture and display enhancement that allows network capture and
display of fully decoded packets at the same time.
Options added:
-F : fork capture process
-S : sync mode ala tail -f (implies -F)
-f : filter expression
-Q : exit after capture (implies -k)

svn path=/trunk/; revision=276
1999-05-11 18:51:10 +00:00
Guy Harris e638eb378f Turn "arpaddr_to_str()" into "bytes_to_str()", and make it public, so it
can be used by dissectors other than ARP to display byte arrays as
strings of hex digits.

Add a routine to extract a null-terminated Unicode string and turn it
into an ISO 8859-1 string for display.  (Ultimately, we should determine
what character sets the X server or printer or whatever can handle, and
turn it into the appropriate character set.)

Display the challenge in "core-to-LANMAN-2.1" Negotiate Protocol
responses as a string of hex digits - but only if the length is
non-zero.  (It's a counted array, not a null-terminated string.)

Display some additional security mode bits in an NT LM 0.12 Negotiate
Protocol response.

Display some additional bits in the "capabilities" field of the
Negotiate Protocol response.

Display the challenge in an NT LM 0.12 Negotiate Protocol response as a
string of hex digits (it's a counted array, not a null-terminated
string).

Display the domain name as Unicode in an NT LM 0.12 Negotiate Protocol
response if the capabilities field has the "supports Unicode" bit set
(no, not the "Unicode" bit in the "flags2" field - NT doesn't set that
in the response, even though it sends the domain name over in Unicode!).

Display some additional bits in the "flags2" field of an SMB.

svn path=/trunk/; revision=275
1999-05-11 08:21:39 +00:00
Guy Harris 45394e744e Add some SMB codes and error codes from the
"draft-leach-cifs-v1-spec-01.txt" CIFS Internet draft.

svn path=/trunk/; revision=274
1999-05-11 07:22:31 +00:00
Guy Harris c3a9aef919 Add decoding of DOS-format dates and times (one of the N different
date/time formats used in SMB...).

svn path=/trunk/; revision=273
1999-05-11 01:18:30 +00:00
Guy Harris 3cc7edbb32 Some of my fixes did get lost - put 'em back.
Fix the "proto_tree_add_item()" used when the server didn't support any
of the dialects the client offered not to print the dialect index.

In the "Core to LANMAN 2.1" "negotiate protocol" decode, show the time
zone as minutes from UTC, just as is done for the "post-LANMAN 2.1"
decode.

svn path=/trunk/; revision=272
1999-05-11 00:28:18 +00:00
Richard Sharpe 1fe8627014 Some clean-ups. I hope I have not disturbed any of Guy's
fixes, as I had to manually apply his fixes. It is a long story,
but my development environment is, umm, interesting.

Thanks to Guy for spotting the problems in my Core Proto to LanMan 2.0
decode probs.

I did not spot them and I do not have any such traces to check
against.

svn path=/trunk/; revision=271
1999-05-11 00:00:40 +00:00
Guy Harris 663ff38e62 Pass NBDS packets on to SMB even if we're only generating a summary
line, so that they show up as SMB packets, rather than NBDS packets, in
the summary display.

Put SMB at the top level of the decode tree for NBDS packets, as is done
for NBSS packets.

svn path=/trunk/; revision=270
1999-05-10 22:07:09 +00:00
Guy Harris 93aab5c7b0 Decode SMB requests inside NetBIOS Datagram Service packets.
svn path=/trunk/; revision=269
1999-05-10 21:50:13 +00:00
Guy Harris 7dc4edc13b Fix up the decode of "greater than core and up to and including LANMAN
2.1" "negotiate protocol" responses.

Display unsigned fields in "negotiate protocol" as unsigned, rather than
signed, values.

svn path=/trunk/; revision=268
1999-05-10 21:36:40 +00:00
Gilbert Ramirez defccf6b4c Fixed the number of parameters for the other super-IPX protocols so that
the table of dissect functions that IPX needs only needs to store pointers to
on type of function. Now all super-IPX protocols have an 'int max_data' argument.

svn path=/trunk/; revision=267
1999-05-10 20:51:36 +00:00
Guy Harris a4c1b66753 Decode the "flags2" field in the SMB header.
Squelch another "variable may be used without being initialized"
complaint (also due to insufficiently sophisticated dataflow analysis by
EGCS 1.1), and a number of "unused variable" complaints, as well as
"assigning a 'const XXX *' to an 'XXX *'" complaints.

svn path=/trunk/; revision=266
1999-05-10 20:30:27 +00:00
Guy Harris 0562b3cd20 Get rid of the "P*" macros, as we're not using them (Ethereal only reads
packets, it doesn't store into them), and make the "G*" macros use
"pletohs()" and "pletohl()", making them platform-independent.

svn path=/trunk/; revision=265
1999-05-10 20:17:36 +00:00
Guy Harris 36609cd91e EGCS 1.1's dataflow analysis (and probably that of other versions of
GCC) isn't sophisticated enough to figure out that "nbss_tree" isn't
used if "tree" is null (or doesn't trust it not to change out from under
it), so we have to initialize "nbss_tree" to NULL to squelch complaints
about it being used but uninitialized.

svn path=/trunk/; revision=264
1999-05-10 20:02:57 +00:00
Guy Harris 8f90c3c914 Check in updated version, reflecting the changes to "Makefile.am".
svn path=/trunk/; revision=263
1999-05-10 19:26:48 +00:00
Gilbert Ramirez 0add610ce6 This small change lets me read SMBtrans packets that come over NBIPX.
svn path=/trunk/; revision=262
1999-05-10 19:01:32 +00:00
Richard Sharpe ba2afbfeb8 Mode decoded SMBs ... Now decode part of a TCONX request,
but not the responses, and do not handle the ANDX part yet,
but I have a Linux course to develop, so that is enough for
now.

svn path=/trunk/; revision=261
1999-05-10 00:27:32 +00:00
Richard Sharpe 57bdcc3387 Minor changes to check if log info is working
svn path=/trunk/; revision=260
1999-05-09 12:56:12 +00:00
Richard Sharpe 54e5da8bac Added new files for SMB decode: packet-smb.c, alignment.h, smb.h
svn path=/trunk/; revision=259
1999-05-09 04:20:59 +00:00
Richard Sharpe 8b00cf57b3 Added initial support for SMB plus most of negprot decode ..
svn path=/trunk/; revision=258
1999-05-09 04:16:36 +00:00
Gilbert Ramirez 1f8cc10010 Made the executable portable; it will now work on machines other than my
own. It allocates and fills in its own wtap struct.

svn path=/trunk/; revision=257
1999-05-07 03:33:42 +00:00
Guy Harris 1bb6e6ae3a Default the capture size to the maximum capture size, rather than the
minimum capture size.

svn path=/trunk/; revision=256
1999-05-06 05:45:58 +00:00
Guy Harris f453647cdb Update it to note that GTK+ has stable 1.2.x versions now.
Add a note warning that if you installed GTK+ from a binary package, it
may be a "user's" package, and you may also have to install the
"developer's" package.

svn path=/trunk/; revision=255
1999-05-04 18:26:22 +00:00
Gilbert Ramirez edbaefb975 Changed variable type of argument 'pd' in hex printing routine to match
prototype.

svn path=/trunk/; revision=254
1999-05-01 05:39:06 +00:00