offset of the beginning of the first record containing data from that
packet, and the offset from the first byte of data in that record of the
first byte of data from that packet; to read a given packet, seek to the
offset of the first record, and keep processing packets until we find
one with the right direction.
This fixes a problem where it wasn't correctly reading the packet, when
doing random access, in cases where you have a sequence of records that
stop in the middle of a packet.
svn path=/trunk/; revision=5873
length of the data in the PPP packet, not the value from the IP header,
just in case there's extra crap at the end. (That appears to be the
case in at least one pppdump capture filel; that's probably either a bug
in the version of pppdump that produced the capture or in the pppdump
reading code, but, until we fix that, if we can, let's at least get this
right, so that the reported length of the tvbuff won't be less than the
length unless that was the case for the tvbuff handed to us.)
svn path=/trunk/; revision=5868
management frame, the Info column isn't erased.
Replace a call to "tvb_length_remaining()" with the value returned by a
earlier identical call.
svn path=/trunk/; revision=5867
lines, and only put "smtp.rsp" into the tree for packets that contain
reply lines; don't put either into the tree for packets that contain
only message body text or an EOM.
svn path=/trunk/; revision=5866
line that doesn't is a middle line of a multi-line reply. Treat only
lines with a 3-digit number at the beginning as reply lines with a
response code and response argument.
Provide filterable fields for the SMTP command and parameters, and the
SMTP reply code and parameters, along the lines of what's done for FTP.
svn path=/trunk/; revision=5865
DOCSIS support, including support for "Ethernet" captures where
the raw frame is a DOCSIS frame rather than an Ethernet
frame (some Cisco cable-modem head-end gear can send out a
trace of all traffic on an Ethernet, but what it sends are
the raw bytes of DOCSIS frames, not Ethernet frames)
Get rid of second AUTHORS entry for Devin Heitmueller, merging its item
into the older entry.
Clean up the order of some lists of plugin items.
svn path=/trunk/; revision=5861
UNIX-style "time_t" values (seconds since January 1, 1970, 00:00:00 GMT
- yes, GMT, not local time as in UTIME values).
They also appear to require 4-byte alignment.
svn path=/trunk/; revision=5855
- changed field types of the Trace Cross Facility Items
(hf_tns_trace_cf1 and hf_tns_trace_cf2) from FT_UINT16
to FT_UINT32
- changed field type of Trace Unique Connection ID (tns.trace_cid)
to FT_UINT64
- changed the base for display of some length fields from BASE_HEX
to BASE_DEC (tns.accept_data_length, tns.refuse_data_length,
tns.redirect_data_length)
- corrected typo in field name for tns.refuse_reason_system
based on the output of the Oracle trace tool trcasst (specifically
trcasst -od) on Oracle 9.0.1.
svn path=/trunk/; revision=5847
reassembled packet and are thus not limited to the maximum frame size;
leave room for a Really Big number in the length item in the status bar,
and use "snprintf()" to format the length item Just To Be Sure.
svn path=/trunk/; revision=5839
the command-line options are processed, so that we don't crash if you've
set the "column.format" preference from the command line.
Fix a grammaro in a comment.
svn path=/trunk/; revision=5838
Added names for all structure fields and fixed up bottom half of the structure which was completely broken and wrong.
Added IDL definition for this structure. Implementors may want to look at it.
svn path=/trunk/; revision=5829
Don't add "-I/usr/include" to CFLAGS or CPPFLAGS; GCC 3.1 warns
about it, and it's not necessary.
Expand the plugin directory path used for installation at
installation time, rather than configuration time, so the user
can reset "prefix" at installation time.
svn path=/trunk/; revision=5828
Guy Harris