Commit Graph

16385 Commits

Author SHA1 Message Date
Anders Broman fa92d58b40 From Grame Lunt:
updated X.500 dissectors to include DOP support.

The "dop" dissector is the renamed "x501" dissector consequently the asn/x501 directory should be removed. The patch includes the changes to epan/dissectors/Makefile.common to reflect this.

As the DOP dissection is not fully tested, I have disabled it by default for now (like DSP) but it can be enabled by the user.


svn path=/trunk/; revision=16726
2005-12-07 23:20:11 +00:00
Luis Ontanon 55d5c5cc66 Avoid dereferencing pointers to the message, context and transaction object if they have not been created.
svn path=/trunk/; revision=16725
2005-12-07 21:08:51 +00:00
Anders Broman f65a00b5f4 libethereal: add capture_enc
tipc: First stab at reassembly, as tipc reasembly is based on reading the message length from the first segmented packet and then just add the bytes received I didn't find a better way of doing it. 

svn path=/trunk/; revision=16724
2005-12-07 20:07:14 +00:00
Ronnie Sahlberg adb796abc6 tap the ntlmssp protocol and extract the account/domain names when users authenticate.
If known   put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header




svn path=/trunk/; revision=16723
2005-12-07 13:14:09 +00:00
Ronnie Sahlberg d12b09b886 new function fetch_tapped_data()
This function can be called from a dissector to fetch (if any) tapped data from a tap.
This can offer an alternative method of passing data between different dissectors much cleaner than the pinfo pollition and private_data design mistake.


The SMB2 dissector uses this method to extract vital data such as Account_Name from the ntlmssp dissector (that is 3 leveld down from smb2)




svn path=/trunk/; revision=16722
2005-12-07 13:12:39 +00:00
Ronnie Sahlberg 56b2184927 make ntlmssp tappable
svn path=/trunk/; revision=16721
2005-12-07 13:09:42 +00:00
Guy Harris 93106a8e2e Fix some more scaled-fixed-point values, and have a 2-byte spare field
followed by a 2-byte event count.  Fixes bug 609.

svn path=/trunk/; revision=16720
2005-12-07 10:44:55 +00:00
Guy Harris e4106ae5f8 Fix oroperties, get rid of CRs.
svn path=/trunk/; revision=16719
2005-12-07 09:51:31 +00:00
Guy Harris 6afd45377d Squelch a narrowing-conversion warning.
svn path=/trunk/; revision=16718
2005-12-07 09:48:08 +00:00
Guy Harris 283fce7500 Clear up const vs. non-const warnings.
svn path=/trunk/; revision=16717
2005-12-07 09:38:57 +00:00
Guy Harris 9fea197bf9 Why duplicate the code of "tvb_get_string()" when you could just use
"tvb_get_string()"?

Why even bother with "tvb_get_string()" when you can just use
"proto_tree_add_item()" with a string item?

Make sure that the prefix in a PRIV item isn't bigger than the item
itself.  That fixes bug 603.

svn path=/trunk/; revision=16716
2005-12-07 03:03:37 +00:00
Guy Harris 3250d41ea6 Don't export stuff if no other dissector uses it. "Static unless
otherwise required."

svn path=/trunk/; revision=16715
2005-12-07 01:45:44 +00:00
Guy Harris 363298dd4c Fix indentation.
Gate X and Y Offset are 16-bit integral numbers of degrees, not 32-bit
IEEE floating-point numbers, and the numbers in collision detection
segment definitions and collision detection volume definitions are
16-bit fixed-point numbers, not 32-bit IEEE floating-point numbers;
handle them as such - this fixes bug 605.

When displaying the packet length in the Info column, display the *real*
length, not the sliced length.

svn path=/trunk/; revision=16714
2005-12-07 01:31:43 +00:00
Guy Harris e5de0c4986 Unicode considered unnecessary and non-portable. Avoid using non-ASCII
characters in field names.

Fix indentation, and fix a typo.

svn path=/trunk/; revision=16713
2005-12-07 00:43:17 +00:00
Ronnie Sahlberg a9a437d64a From Martin M various updates and fixes
Hi, Some tiddly changes: pppoe- don't create an empty discovery tags tree when the payload length is 0 chap- make chap.value work as a filterable field rtcp- append the packet type to the protocol tree name 


svn path=/trunk/; revision=16712
2005-12-07 00:35:16 +00:00
Ronnie Sahlberg 213ef19c87 From Jelmer V AIM bugfix
Hi,

The attached patch fixes the name of the version field, which I
previously mistook for an authorization cookie (which is in fact in a
TLV that follows this field).



svn path=/trunk/; revision=16711
2005-12-07 00:27:17 +00:00
Guy Harris 76bcc9bd3f Squelch some compiler const vs. non-const warnings.
svn path=/trunk/; revision=16710
2005-12-06 22:59:30 +00:00
Guy Harris 0b1f2585c5 Clean up capture_enc(), export it, and use it in the capture window.
svn path=/trunk/; revision=16709
2005-12-06 22:56:37 +00:00
Guy Harris d00581f430 The keys for entries in the OID-to-name hash table are g_mallocated, so
we have to g_free them when destroying the hash table.

svn path=/trunk/; revision=16708
2005-12-06 22:26:10 +00:00
Guy Harris 4fb23b89d4 Set svn:keywords to Id to get RCS IDs expanded.
Set svn:eol-style to native to handle line endings appropriately, and
trim off CRs.

svn path=/trunk/; revision=16707
2005-12-06 21:07:50 +00:00
Ronnie Sahlberg 383faa3de3 g_hash_table_new_full() does not exist for glib1
svn path=/trunk/; revision=16706
2005-12-06 20:29:46 +00:00
Luis Ontanon 94110893b7 It crashed when keep_persistent_data == FALSE
svn path=/trunk/; revision=16705
2005-12-06 19:47:22 +00:00
Ulf Lamping 5ae90828ae we can even get error messages while we are capturing (e.g. when a network cable is unplugged)
problem found by Joerg Mayer

svn path=/trunk/; revision=16704
2005-12-06 19:41:45 +00:00
Luis Ontanon d6c5410b18 - Fix few issues with context analysis
- Add used terminations tree to the context analysis tree

Regenerate Dissector


svn path=/trunk/; revision=16703
2005-12-06 18:52:17 +00:00
Anders Broman 581faf7625 Fill in Column info, Dissect some more user info.
svn path=/trunk/; revision=16702
2005-12-06 17:54:40 +00:00
Anders Broman 1426dbb8fb Dissect Cause and use %(DEFAULT_BODY)s use import for IMSI.
svn path=/trunk/; revision=16701
2005-12-06 17:53:28 +00:00
Tomas Kukosa c41cac4285 mark unused parameter
svn path=/trunk/; revision=16700
2005-12-06 12:50:11 +00:00
Tomas Kukosa a5bfb48c2f OBJECT IDENTIFIER name resolution moved to oid_resolv.c
svn path=/trunk/; revision=16699
2005-12-06 11:45:55 +00:00
Tomas Kukosa a3ed89556a protocol discriminator byte has to be taken into info_element_len
svn path=/trunk/; revision=16698
2005-12-06 10:50:21 +00:00
Ulf Lamping 08a727307c both the buildbot and I have problems with setargv.obj
trying to comment it out, so the build should work again.

don't know what this file is all about :-( 

I just don't have that file and it doesn't seem to be generated ... 

svn path=/trunk/; revision=16697
2005-12-06 08:40:17 +00:00
Guy Harris ac2edbb7aa Note what we have to be careful of before we start using Unicode in the
packet list or packet details.

svn path=/trunk/; revision=16696
2005-12-06 06:09:28 +00:00
Guy Harris 4f7478f3a0 Make $(command_line_OBJECTS) a dependency of the stuff that links with
it.

Link dumpcap with mkstemp.obj, as it needs mkstemp().

Make dumpcap depend only on its resource file, as we do with other
programs, not on all of them.

svn path=/trunk/; revision=16695
2005-12-06 06:03:34 +00:00
Ronnie Sahlberg 844756f0ca from Kyle Harms
CIGI updates


svn path=/trunk/; revision=16694
2005-12-06 01:05:48 +00:00
Ulf Lamping 47ae9fa7bd add a short comment to cant_load_winpcap_err() and use it in gtk/capture_dlg.c
svn path=/trunk/; revision=16693
2005-12-06 01:04:55 +00:00
Ronnie Sahlberg 55c9157d6b objectid updates
svn path=/trunk/; revision=16692
2005-12-06 00:27:51 +00:00
Ulf Lamping 7e3a24418c rename pcap-....c/.h files to capture-pcap-....c/.h
this way, the capture prefix will "logically" group the files together and file browsers will also group them

we may want to move the files into a subdir capture later

svn path=/trunk/; revision=16691
2005-12-06 00:07:13 +00:00
Ulf Lamping a6f33f1d05 requested by Cory Perry:
increase the maximum number of ringbuffer files from 1024 to 10000.

svn path=/trunk/; revision=16690
2005-12-05 23:22:59 +00:00
Anders Broman f27bf13022 From Grame Lunt:
a patch for the X.411, X420 and CMS dissectors to implement the remaining heading extensions and bodyparts.

This includes GeneralText BP, forwarded content BP (forwarded p22 and forwarded p772), PKCS#7 BP, and "business class" messaging extensions.

The X.411 extensions using the SIGNATURE macro have also been implemented. There is also a fix for a bug in the dissection of integer 22 content type.

Graeme

svn path=/trunk/; revision=16689
2005-12-05 23:00:03 +00:00
Ulf Lamping fcd9e87872 fixed a typo
svn path=/trunk/; revision=16688
2005-12-05 22:49:10 +00:00
Ulf Lamping 8dab6be33c move some GTK only function declarations from ui_util.h to the appropriate header files in the gtk dir, as these declarations are obsolete and only confuses (at least me)
svn path=/trunk/; revision=16687
2005-12-05 22:45:54 +00:00
Ulf Lamping a7dc7c2922 enhance the comments
svn path=/trunk/; revision=16686
2005-12-05 22:28:42 +00:00
Ulf Lamping a1dc531677 replace all appearances of 'fprintf(stderr, "tethereal: ' with 'cmdarg_err("', this is:
a) smaller
b) makes it possible to use some functions for Ethereal too
c) is the wrong name now, as some outputs are not command line related :-(

use capture_opts_trim()

svn path=/trunk/; revision=16685
2005-12-05 21:32:12 +00:00
Ulf Lamping 792584c211 no more usage of Ethereal.lib in dumpcap any longer :-)
use capture_opts_trim()
output of command line usage and version "enhanced"

svn path=/trunk/; revision=16684
2005-12-05 21:28:34 +00:00
Ulf Lamping e1ee12bc71 add capture_opts_trim(), as this sequence is used three times now (will replace the other appearances later) ...
svn path=/trunk/; revision=16683
2005-12-05 21:26:01 +00:00
Ronnie Sahlberg 7e5f31b6a0 updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown bytes in smb for objectid)
svn path=/trunk/; revision=16682
2005-12-05 21:22:06 +00:00
Ronnie Sahlberg e6dd4f9631 From Kyle J Harms
New protocol : CIGI  (with minor updates to make it heuristic)

Hi,

This patch is for a CIGI dissector (complete versions 2 and 3).  It has
been [fuzz] tested on GNU/Linux using the Ethereal 0.10.13 codebase.
However, the patch here is against the svn repository.

More information about CIGI can be found at http://cigi.sourceforge.net/

Kyle Harms




svn path=/trunk/; revision=16681
2005-12-05 20:54:42 +00:00
Anders Broman e74a09cd01 If we don't have the OID name let the SNMP dissector try to get it from the MIB:s
svn path=/trunk/; revision=16680
2005-12-05 17:24:19 +00:00
Ulf Lamping 56f1f421bd I've forgot to put one line under _WIN32, should fix the unix build
svn path=/trunk/; revision=16679
2005-12-05 02:30:04 +00:00
Luis Ontanon 906eb93fd7 Analysis starts to work
svn path=/trunk/; revision=16678
2005-12-05 01:46:07 +00:00
Ulf Lamping 61c8c42aef Win32: fix signal_pipe handling if we run dumpcap as a standalone application (no signal_pipe)
svn path=/trunk/; revision=16677
2005-12-05 01:23:18 +00:00