Guy Harris [Mon, 22 Nov 1999 08:09:16 +0000 (08:09 -0000)]
Document the new "Reset" button.
svn path=/trunk/; revision=1092
Guy Harris [Mon, 22 Nov 1999 08:03:31 +0000 (08:03 -0000)]
Include "util.h" to get the declaration of "EBCDIC_to_ASCII1()".
svn path=/trunk/; revision=1091
Jun-ichiro itojun Hagino [Mon, 22 Nov 1999 07:05:21 +0000 (07:05 -0000)]
bgp updates from Greg.
- now prints RFC1771 withdrawn prefixes
- COMMUNITIES are now fully supported
- AS_PATH fixes (output formatting, used snprintf and not sprintf,
AS_PATH broken into separate subtree, and for now will
ignore confederation types until we support them)
- AGGREGATOR fixes, now prints again in tree header
- made capitalization consistent (first words capitalized, rest lower
case)
- lots more commenting
- other minor corrections
- started work on route reflector attributes
From: Greg Hankins <gregh@arthur.twoguys.org>
svn path=/trunk/; revision=1090
Gilbert Ramirez [Mon, 22 Nov 1999 06:24:56 +0000 (06:24 -0000)]
A "character encoding" variable is now set per packet. The existence
of SNA in a packet changes the character encoding from the default ASCII
to EBCDIC.
The hex-printing routines in the GUI code and in the printing code convert
to EBCDIC if appropriate.
svn path=/trunk/; revision=1089
Gilbert Ramirez [Mon, 22 Nov 1999 06:03:46 +0000 (06:03 -0000)]
Fixed the way IPX network name resolution works with name resolution
turned off (the '-n' option), and made it a bit faster by removing
sprintf()'s.
svn path=/trunk/; revision=1088
Nathan Neulinger [Mon, 22 Nov 1999 03:32:55 +0000 (03:32 -0000)]
Added v2 portmap dump reply
svn path=/trunk/; revision=1087
Gilbert Ramirez [Sun, 21 Nov 1999 20:02:32 +0000 (20:02 -0000)]
Added Heikki Vatiainen's <hessu@cs.tut.fi> HSRP dissector.
svn path=/trunk/; revision=1086
Gilbert Ramirez [Sun, 21 Nov 1999 16:32:23 +0000 (16:32 -0000)]
Enable IPX network name resolution by providing for an /etc/ipxnets
and a $HOME/.ethereal/ipxnets file. get_ipxnet_name() and other functions,
similar to get_ether_name() and friends, have been added.
svn path=/trunk/; revision=1085
Laurent Deniel [Sun, 21 Nov 1999 15:06:07 +0000 (15:06 -0000)]
Add a "Reset" button to reset the current display filter and
redisplay the packet list.
svn path=/trunk/; revision=1084
Gilbert Ramirez [Sun, 21 Nov 1999 14:43:53 +0000 (14:43 -0000)]
Added Heikki Vatiainen's <hessu@cs.tut.fi> VRRP dissector.
svn path=/trunk/; revision=1083
Laurent Deniel [Sun, 21 Nov 1999 11:17:13 +0000 (11:17 -0000)]
Remove debugging printf.
svn path=/trunk/; revision=1082
Laurent Deniel [Sun, 21 Nov 1999 11:04:11 +0000 (11:04 -0000)]
Add display filters.
svn path=/trunk/; revision=1081
Guy Harris [Sat, 20 Nov 1999 23:03:09 +0000 (23:03 -0000)]
Patches from Heikki Vatiainen to:
handle replies that may be continued from an earlier TCP
segment;
not show the argument line in the tree display if the request
or response didn't contain an argument.
svn path=/trunk/; revision=1080
Richard Sharpe [Sat, 20 Nov 1999 13:48:26 +0000 (13:48 -0000)]
Added support or NetServerEnum2 LANMAN messages.
I still have compile warnings, but I am too tired to chase them down.
Have also fixed a number of problems.
Next thing to add is a general engine that can decode Transact messages
as they can be decode from the descriptors in the Parameters area, and I
can feed in a list of names where we know what a structure looks like,
otherwise we use made up names.
svn path=/trunk/; revision=1079
Guy Harris [Sat, 20 Nov 1999 06:17:00 +0000 (06:17 -0000)]
Mount V2.
Add EXPORTALL, which is identical to EXPORT.
Make static and/or const a number of things that can be made static or
const.
svn path=/trunk/; revision=1078
Gilbert Ramirez [Sat, 20 Nov 1999 06:05:56 +0000 (06:05 -0000)]
Remove my debug printf().
svn path=/trunk/; revision=1077
Gilbert Ramirez [Sat, 20 Nov 1999 05:35:15 +0000 (05:35 -0000)]
Enable ether name resolution for packet summary lines of IPX packets
(in the src/dst of the CList). In order to do this, I had to:
1. Add a new function, ether_to_str_punct(const guint8*, char) which
turns a 6-byt ether address into a string, using whatever punctuation
is passed as the char. If a null char is passed, no separator
is put between the hex digits. Unresolved IPX addresses look better
with the ether portion having no punctuation (IMHO)
2. Changed ether_to_str() to call ether_to_str_punct with ':' as the char
argument. That is, code abstraction.
3. MAXNAMELEN was moved from resolv.c to resolv.h so that packet-ipx.c
could see it.
4. A new resolve function, get_ether_name_if_known(), returns the resolved name
of an ether address, or NULL if there is none. This differs
from get_ether_name() by returning NULL rather than a text version
of the ether address.
svn path=/trunk/; revision=1076
Gilbert Ramirez [Sat, 20 Nov 1999 03:56:10 +0000 (03:56 -0000)]
Ugg. Pod format needs a blank line after a =head1 line.
svn path=/trunk/; revision=1075
Gilbert Ramirez [Sat, 20 Nov 1999 03:39:27 +0000 (03:39 -0000)]
The resolve routines accept HW addresses in the ethers file with either
dashes or colons as punctuation. Added period as a valid separator, to make
the resolve routines congruent with the display filter syntax options.
Document the fact that both /etc/ethers and $HOME/.ethereal/ethers are
used for resolving hardware address names. I did not know this until
I discovered it in resolv.c!
svn path=/trunk/; revision=1074
Gilbert Ramirez [Sat, 20 Nov 1999 03:27:02 +0000 (03:27 -0000)]
The code for Ethernet II was using proto_tree_add_item_format() even
though it doesn't need to. (I missed that section when I converted packet-eth.c
to use hfinfo fields). Fixed.
svn path=/trunk/; revision=1073
Guy Harris [Fri, 19 Nov 1999 23:23:41 +0000 (23:23 -0000)]
Make various "value_string" tables "const"; this allows the compiler to
stuff them into shared read-only space.
Put the "VALS()" cast macro into the initialization of an
"hf_register_info" array.
svn path=/trunk/; revision=1072
Gilbert Ramirez [Fri, 19 Nov 1999 23:01:26 +0000 (23:01 -0000)]
Change ipv4 class to use ip_to_str() when converting IP address to string.
ip_to_str() is 7 times faster than my sprintf() implementation (both of
which take very little time for the single call that match_selected() makes,
but you know....)
svn path=/trunk/; revision=1071
Gilbert Ramirez [Fri, 19 Nov 1999 22:32:00 +0000 (22:32 -0000)]
Change match_selected() to produce a display filter using the selected
field's name, if possible. (If the selected field is not a registered field,
then of course, we still have to use the frame[x:y] syntax).
tree_selected_start and tree_selected_len are on longer globals variables;
finfo_selected has replaced them.
svn path=/trunk/; revision=1070
Gilbert Ramirez [Fri, 19 Nov 1999 13:09:56 +0000 (13:09 -0000)]
Added Uwe's update to RPC.
svn path=/trunk/; revision=1069
Guy Harris [Fri, 19 Nov 1999 09:55:38 +0000 (09:55 -0000)]
Beginnings of Q.2931 support.
svn path=/trunk/; revision=1068
Guy Harris [Fri, 19 Nov 1999 09:46:51 +0000 (09:46 -0000)]
There are no protocols under Q.931, so mark everything up to the end of
the frame as being Q.931 stuff.
svn path=/trunk/; revision=1067
Guy Harris [Fri, 19 Nov 1999 09:11:44 +0000 (09:11 -0000)]
Fix a typo.
svn path=/trunk/; revision=1066
Guy Harris [Fri, 19 Nov 1999 09:10:22 +0000 (09:10 -0000)]
The only thing we shouldn't do if the "tree" argument is NULL is put
stuff into the tree - we should call the child dissectors in any case.
svn path=/trunk/; revision=1065
Guy Harris [Fri, 19 Nov 1999 07:28:16 +0000 (07:28 -0000)]
Add support for SSCOP protocol; dissect signalling AAL packets using it.
It's in a file of its own, as I think there may be, or may have been
proposed, non-ATM uses of it as well.
svn path=/trunk/; revision=1064
Gilbert Ramirez [Fri, 19 Nov 1999 05:48:21 +0000 (05:48 -0000)]
Add comments showing IFT names for the IFT-to-Wiretap encapsulation array.
If a interface type is not recognized, set error to WTAP_ERR_UNSUPPORTED
instead of WTAP_BAD_RECORD.
Continue to check for X.25, FDDI, and loopback traces via the interface
name instead of the newly-discovered if_type field in the packet header.
Once Olivier confirms that his traces still work by checking only if_type,
I'll change the code. But he's on vacation right now. ATM, Ethernet, and
Token-Ring are discovered via the if_type field.
svn path=/trunk/; revision=1063
Gilbert Ramirez [Fri, 19 Nov 1999 05:12:50 +0000 (05:12 -0000)]
Be sure to use offset everywhere. The correct values for eth.src, eth.dst, and
eth.length were being pulled put into the proto_tree (logical and GUI),
but the fields were highlighted in the hex dump w/o adding offset.
svn path=/trunk/; revision=1062
Guy Harris [Thu, 18 Nov 1999 21:48:53 +0000 (21:48 -0000)]
Clean up some ANSI C nits pointed out by "gcc -pedantic".
Also, explicitly compare the result of "memcmp()" against 0 - the
appearance of a comparison operator in the expression makes it clearer
what test is being done.
svn path=/trunk/; revision=1061
Guy Harris [Thu, 18 Nov 1999 21:04:54 +0000 (21:04 -0000)]
Clean up some ANSI C nits pointed out by "gcc -pedantic".
svn path=/trunk/; revision=1060
Guy Harris [Thu, 18 Nov 1999 19:59:11 +0000 (19:59 -0000)]
Zero-length arrays are a GCC extension, and some compilers don't support
them - don't "#if 0" out the initializers for "hf[]", "#if 0" out the
entire declaration of "hf[]" and the call that uses "hf[]".
svn path=/trunk/; revision=1059
Guy Harris [Thu, 18 Nov 1999 09:39:12 +0000 (09:39 -0000)]
(AppTrafType & ATT_HLTYPE) is the type of high-level traffic, and
AppHLType is the subtype of that type; set them appropriately (as best
we can, given that we can only *guess* what kind of traffic it is) for
"iptrace" captures in Wiretap. (Alas, more work is needed to
distinguish Ethernet from Token-Ring LANE traffic....)
Handle VPI = 0, VCI = 5 as the Signalling AAL in "iptrace" captures.
svn path=/trunk/; revision=1058
Gilbert Ramirez [Thu, 18 Nov 1999 08:50:37 +0000 (08:50 -0000)]
Check in my work so far on enabling the ATM iptrace capability. Not
all packets are recognized yet, but ILMI and Classical IP (LLCMX) are.
The ATM iptrace facility uses the ngsniffer_atm_phdr pseudo header so that
ethereal doesn't have to worry about yet another psuedo header.
svn path=/trunk/; revision=1057
Guy Harris [Thu, 18 Nov 1999 08:28:30 +0000 (08:28 -0000)]
Don't define the variables passed to "dissect_snmp_pdu()" if we don't
have an SNMP dissector.
svn path=/trunk/; revision=1056
Richard Sharpe [Thu, 18 Nov 1999 07:32:46 +0000 (07:32 -0000)]
Added decode of the Election Criteria and a few other bits of
info.
Still need someone to look at the times I have in there ... Guy?
svn path=/trunk/; revision=1055
Guy Harris [Thu, 18 Nov 1999 07:29:55 +0000 (07:29 -0000)]
ILMI is just SNMP-over-ATM AAL5; if the SNMP dissector is available,
dissect ILMI packets with the SNMP dissector.
svn path=/trunk/; revision=1054
Gilbert Ramirez [Thu, 18 Nov 1999 07:04:29 +0000 (07:04 -0000)]
Fixed the checking of the return value from file_gets() (fgets()).
svn path=/trunk/; revision=1053
Guy Harris [Thu, 18 Nov 1999 01:45:05 +0000 (01:45 -0000)]
Craig Rodrigues' fixes to let it compile on AIX using IBM's compiler
(remove commas following the last member of an enum, make all bit fields
"guint32" - GCC lets you get away with that, but at least some other
compilers don't).
svn path=/trunk/; revision=1052
Gilbert Ramirez [Wed, 17 Nov 1999 23:31:22 +0000 (23:31 -0000)]
Add packet-bgp.h to the list of deliverables.
svn path=/trunk/; revision=1051
Guy Harris [Wed, 17 Nov 1999 21:58:33 +0000 (21:58 -0000)]
Provide a general mechanism by which dissectors can register "init"
routines, which are called before a dissection pass is made over all the
packets in a capture - the "init" routine would clear out any state
information that needs to be initialized before such a dissection pass.
Make the NCP, SMB, AFS, and ONC RPC dissectors register their "init"
routines with that mechanism, have the code that reads in a capture file
call the routine that calls all registered "init" routines rather than
calling a wired-in set of "init" routines, and also have the code that
runs a filtering or colorizing pass over all the packets call that
routine, as a filtering or colorizing pass is a dissection pass.
Have the ONC RPC "init" routine zero out the table of RPC calls, so that
it completely erases any state from the previous dissection pass (so
that, for example, if you run a filtering pass, it doesn't mark any
non-duplicate packets as duplicates because it remembers them from the
previous pass).
svn path=/trunk/; revision=1050
Guy Harris [Wed, 17 Nov 1999 19:07:10 +0000 (19:07 -0000)]
Typo fixes, and fix to bug wherein when Ethereal sees a Network-LSA it
does not stop dissecting the LSA until it hits the end of the packet,
from Heikki Vatiainen.
svn path=/trunk/; revision=1049
Guy Harris [Wed, 17 Nov 1999 07:50:33 +0000 (07:50 -0000)]
Add some comment based on some spelunking done in some capture files,
and on a comment that "libpcap"/BPF on AIX appears to return 6 as the
network type for an Ethernet device - the BSD IFT_ETHER is 6.
svn path=/trunk/; revision=1048
Guy Harris [Wed, 17 Nov 1999 06:52:19 +0000 (06:52 -0000)]
Print unsigned quantities with "%u", not "%d".
Use "plurality()" to pluralize byte counts.
svn path=/trunk/; revision=1047
Guy Harris [Wed, 17 Nov 1999 02:17:29 +0000 (02:17 -0000)]
Heikki Vatiainen's SAP (Session Announcement Protocol) dissector.
Rename the dissector for the Netware SAP protocol to "dissect_ipxsap()",
so as to keep its name from colliding with that of the dissector for the
Session Announcement Protocol.
svn path=/trunk/; revision=1046
Guy Harris [Wed, 17 Nov 1999 01:35:57 +0000 (01:35 -0000)]
Typo fix, from Heikki Vatiainen.
svn path=/trunk/; revision=1045
Gilbert Ramirez [Tue, 16 Nov 1999 17:03:36 +0000 (17:03 -0000)]
We should be checking the value of loc_of_slash instead of index. It
might be NULL from strchr().
svn path=/trunk/; revision=1044
Guy Harris [Tue, 16 Nov 1999 11:44:20 +0000 (11:44 -0000)]
Replace the ETT_ "enum" members, declared in "packet.h", with
dynamically-assigned "ett_" integer values, assigned by
"proto_register_subtree_array()"; this:
obviates the need to update "packet.h" whenever you add a new
subtree type - you only have to add a call to
"proto_register_subtree_array()" to a "register" routine and an
array of pointers to "ett_", if they're not already there, and
add a pointer to the new "ett_" variable to the array, if they
are there;
would allow run-time-loaded dissectors to allocate subtree types
when they're loaded.
svn path=/trunk/; revision=1043
Guy Harris [Tue, 16 Nov 1999 08:00:20 +0000 (08:00 -0000)]
"gtk_object_get_data()" returns a pointer, so its return value shouldn't
be cast to a "gint" if that "gint" value is then going to be assigned to
a pointer.
svn path=/trunk/; revision=1042
Richard Sharpe [Tue, 16 Nov 1999 07:58:12 +0000 (07:58 -0000)]
I hope no one just committed something on this.
There was a core dump because of a coding oversight. Should be fixed
now Gilbert.
Should now handle names of form \<somepipe>
Will screw up if there is no leading slash, but in a non-fatal way, I
think.
svn path=/trunk/; revision=1041
Guy Harris [Tue, 16 Nov 1999 06:59:17 +0000 (06:59 -0000)]
Remove an "#if 0"-ed out chunk of code that was supposed to cause the
hex window to scroll so that the data in the currently-selected field is
visible, but merely revealed core-dumping bugs in GTK+.
svn path=/trunk/; revision=1040
Gilbert Ramirez [Mon, 15 Nov 1999 22:52:03 +0000 (22:52 -0000)]
Don't store both "start" and "length" in each GUI proto_tree item. Just
store the field_info pointer, from which we can get both "start" and
"length" (and "hfinfo" and "value", which I'm working towards, so that
match_selected, or a new function, and create a display filter based on
the field's name, instead of byte offset ).
svn path=/trunk/; revision=1039
Nathan Neulinger [Mon, 15 Nov 1999 21:33:57 +0000 (21:33 -0000)]
added sap types, netbios name types, ipx socket names
svn path=/trunk/; revision=1038
Nathan Neulinger [Mon, 15 Nov 1999 17:16:51 +0000 (17:16 -0000)]
Got rid of dissect_rpc_string routine, renamed dissect_rpc_string_item to
dissect_rpc_string. Replaced only instance of this routine being called.
Added display filtering to rpc dissector. Replaced most instances of
proto_tree_add_text with proto_tree_add_item.
Added program version and procedure to the program tree in addition to it
being in the RPC tree.
svn path=/trunk/; revision=1037
Nathan Neulinger [Mon, 15 Nov 1999 14:57:38 +0000 (14:57 -0000)]
start of display filters and fix for toupper prototype
svn path=/trunk/; revision=1036
Nathan Neulinger [Mon, 15 Nov 1999 14:32:16 +0000 (14:32 -0000)]
Fixed rpc dissector to upcase program name.
Fixed nfs and nlm to use a lowercase protocol name so filtering will work.
svn path=/trunk/; revision=1035
Nathan Neulinger [Mon, 15 Nov 1999 14:17:20 +0000 (14:17 -0000)]
Uwe Girlich's patches for nfs,mount,portmap and addition of nlm.
svn path=/trunk/; revision=1034
Guy Harris [Mon, 15 Nov 1999 07:25:31 +0000 (07:25 -0000)]
We have to include <sys/types.h> before including <netinet/in.h> on some
platforms, e.g. FreeBSD.
svn path=/trunk/; revision=1033
Gilbert Ramirez [Mon, 15 Nov 1999 06:32:38 +0000 (06:32 -0000)]
Add "class" that understands IPv4 addresses and subnet masks.
We now store IPv4 addresses in host order, allowing non-equivalence
comparisons. That is, display filters with lt, le, gt, and ge will work
on big-endian and little-endian machines.
CIDR notation is now supported for IPv4 addresses in display filters.
You can test to see if an IPv4 address is on a certain subnet by using
this notation. For example, to test for IPv4 packets on a Class-C network:
ip.addr == 192.168.1.0/24
svn path=/trunk/; revision=1032
Guy Harris [Sun, 14 Nov 1999 21:16:58 +0000 (21:16 -0000)]
For ONC RPC, when constructing conversations, use a null address as the
destination address for calls and the source address of the reply - we
should't require the server address to be the same for a call and reply,
as they may not be on a multi-homed server (clients presumably check the
XID only, or perhaps the XID and the port whence the reply came,
although with TI-RPC I don't think they can check the port without
checking the address as well).
This requires that the conversation code not assume that the source and
destination addresses for a given packet in a conversation have the same
type, so, when comparing addresses for equality, it must explicitly
check the address types.
In said code, also check the port numbers before we check the addresses
- testing ports is cheaper, as they're just integers, and there's
probably a decent chance that you won't see two conversations between
different pairs of hosts and the *same* pair of ports in a capture file,
so the cheaper port tests are probably decently likely to fail first.
svn path=/trunk/; revision=1031
Guy Harris [Sun, 14 Nov 1999 20:44:52 +0000 (20:44 -0000)]
Move the test to see if something looks like an ONC RPC request or reply
into "dissect_rpc()" itself; it returns TRUE if it is, FALSE if it
isn't.
svn path=/trunk/; revision=1030
Guy Harris [Sun, 14 Nov 1999 19:56:32 +0000 (19:56 -0000)]
Set "conversation_keys" to NULL after destroying the list of
conversation keys.
svn path=/trunk/; revision=1029
Laurent Deniel [Sun, 14 Nov 1999 10:48:17 +0000 (10:48 -0000)]
Add display filters.
svn path=/trunk/; revision=1028
Laurent Deniel [Sun, 14 Nov 1999 10:32:26 +0000 (10:32 -0000)]
Add display filters.
svn path=/trunk/; revision=1027
Laurent Deniel [Sun, 14 Nov 1999 10:16:25 +0000 (10:16 -0000)]
Add display filters.
svn path=/trunk/; revision=1026
Richard Sharpe [Sun, 14 Nov 1999 06:54:42 +0000 (06:54 -0000)]
OK,
much more complete decoding of browse messages.
They are now shown in the parent tree as well.
I still have problems with:
1. Times
2. Election criteral
I also haven't been able to see a BecomeBackup request, nor a
GetBackupListResp with more than one browser ... Should run a Windows NT
server or another Samba on my network.
I am also not sure of there are any more message types. Damn! Old, and
wrong MS documents!
svn path=/trunk/; revision=1025
Richard Sharpe [Sun, 14 Nov 1999 02:42:03 +0000 (02:42 -0000)]
Fixed some more small problems and added support for decoding
MS Windows Browser messages. Can decode host announcements now.
Still need to decode more. Also need to break the new code out.
I also have the Browse tree at the wrong location. Can I get at the
parent of the tree somewhere, or do I have to pass it in as a variable?
svn path=/trunk/; revision=1024
Guy Harris [Sat, 13 Nov 1999 10:13:24 +0000 (10:13 -0000)]
Dissect a whole pile of Q.931 information elements.
svn path=/trunk/; revision=1023
Gilbert Ramirez [Sat, 13 Nov 1999 04:06:10 +0000 (04:06 -0000)]
Add ETT_Q931_IE
svn path=/trunk/; revision=1022
Guy Harris [Sat, 13 Nov 1999 02:07:59 +0000 (02:07 -0000)]
A few cause codes more (cue Ennio Morricone).
svn path=/trunk/; revision=1021
Guy Harris [Sat, 13 Nov 1999 01:32:31 +0000 (01:32 -0000)]
Add initial support for decoding information elements.
svn path=/trunk/; revision=1020
Guy Harris [Fri, 12 Nov 1999 22:43:32 +0000 (22:43 -0000)]
Add support for HINFO records.
svn path=/trunk/; revision=1019
Nathan Neulinger [Fri, 12 Nov 1999 15:12:23 +0000 (15:12 -0000)]
enhancements to ypserv dissector
svn path=/trunk/; revision=1018
Nathan Neulinger [Thu, 11 Nov 1999 23:13:43 +0000 (23:13 -0000)]
added minimalist MAPI dissector - only determines request/reply
svn path=/trunk/; revision=1017
Nathan Neulinger [Thu, 11 Nov 1999 21:22:00 +0000 (21:22 -0000)]
Added mount dissector.
Added stat dissector.
Enhancements to portmap dissector.
Added rpc_prog_name function to packet-rpc to retrieve the name of an
rpc program. This should likely eventually be modified to use the
/etc/rpc or rpc.bynumber NIS maps in addition to the programs that
are registered within ethereal.
svn path=/trunk/; revision=1016
Jun-ichiro itojun Hagino [Thu, 11 Nov 1999 21:08:52 +0000 (21:08 -0000)]
bgp improvements.
- a few more tree types
- RFC1771 NLRI printed on advertisements
- AS_PATH parsing
- lots of small cleanup on printing "byte" vs "bytes"
From: Greg Hankins <gregh@cc.gatech.edu>
svn path=/trunk/; revision=1015
Guy Harris [Thu, 11 Nov 1999 20:44:14 +0000 (20:44 -0000)]
The conversation comparison code should, if *any* of the tests that
check whether the two packets are going in the same direction in the
same conversation fails, check whether the two packets are going in
opposite directions in the same conversation.
svn path=/trunk/; revision=1014
Nathan Neulinger [Thu, 11 Nov 1999 20:18:46 +0000 (20:18 -0000)]
Additions to bootparams, portmap, and ypserv dissectors
svn path=/trunk/; revision=1013
Gilbert Ramirez [Thu, 11 Nov 1999 19:19:17 +0000 (19:19 -0000)]
Remove potential for a bad toshiba trace file to overflow a fixed char[]
buffer in sscanf call.
svn path=/trunk/; revision=1012
Nathan Neulinger [Thu, 11 Nov 1999 16:20:25 +0000 (16:20 -0000)]
Expanded bootparams dissector to handle decoding getfile calls and replies.
Added proto_registrar_get_name routine to proto.c to retrieve the name
of particular proto_tree field.
Added dissect_rpc_string_item to packet-rpc.c. This routine does the same
thing as dissect_rpc_string, except it takes a hfindex of a
proto_tree item instead of a name. It uses the p_r_get_name call
to get the name, and adds the actual string content as a hidden
field (so that the subtree highlights the entire data area - length,
data, and padding). There is only one call to dissect_rpc_string, so
I believe that this routine should replace it.
svn path=/trunk/; revision=1011
Richard Sharpe [Thu, 11 Nov 1999 13:56:58 +0000 (13:56 -0000)]
Some general fixups and some fixes for protocol decode problems
exposed by Win2000 interacting with a Samba server ...
svn path=/trunk/; revision=1010
Guy Harris [Thu, 11 Nov 1999 10:17:29 +0000 (10:17 -0000)]
Support all lengths of call reference value (1 to 15 octets).
svn path=/trunk/; revision=1009
Guy Harris [Thu, 11 Nov 1999 08:45:34 +0000 (08:45 -0000)]
Change my e-mail address to the forwarding address my *alma mater*
provides. "Every problem in computer science can be solved by adding a
layer of indirection."
svn path=/trunk/; revision=1008
Guy Harris [Thu, 11 Nov 1999 08:35:11 +0000 (08:35 -0000)]
Add #defines for bits in the LAPD address field and for the LAPD SAPI
values.
Dissect the LAPD payload, if present.
Add the beginnings of a Q.931 dissector.
svn path=/trunk/; revision=1007
Guy Harris [Thu, 11 Nov 1999 08:04:06 +0000 (08:04 -0000)]
"XDLC_CONTROL_LEN()" actually returned the length of the entire xDLC
header, under the assumption that the address field was two octets.
It should return the length of the *control* field, and leave it up to
its caller to add in the length of the address field. (The address
field appears to be one byte in SNA, not two bytes.)
svn path=/trunk/; revision=1006
Gilbert Ramirez [Thu, 11 Nov 1999 06:29:59 +0000 (06:29 -0000)]
Remove unnecessary file_seek per packet, speeding up loading of a
gzipped toshiba file.
svn path=/trunk/; revision=1005
Gilbert Ramirez [Thu, 11 Nov 1999 05:36:16 +0000 (05:36 -0000)]
Add LAPD support.
svn path=/trunk/; revision=1004
Nathan Neulinger [Wed, 10 Nov 1999 22:43:53 +0000 (22:43 -0000)]
expanded portmap dissector to process some of the procedure calls
svn path=/trunk/; revision=1003
Nathan Neulinger [Wed, 10 Nov 1999 21:05:11 +0000 (21:05 -0000)]
Changed protocol names to all lowercase. It looks weird in listing though.
I'm presuming packet-rpc.c will be fixed soon.
svn path=/trunk/; revision=1002
Gilbert Ramirez [Wed, 10 Nov 1999 19:58:54 +0000 (19:58 -0000)]
More small memleak fixes.
colors.c wasn't freeing path in one place
main.c wasn't freeing rc_file
the frame_buffer fix in wtap.c didn't clear everything.
svn path=/trunk/; revision=1001
Gilbert Ramirez [Wed, 10 Nov 1999 19:47:57 +0000 (19:47 -0000)]
Fixed small memory leak in wiretap (frame_buffer wasn't being freed),
and aligned g_malloc calls with g_free calls (i.e, we no longer mix-and-match
C-library malloc with GLIB g_free, and vice-versa).
svn path=/trunk/; revision=1000
Gilbert Ramirez [Wed, 10 Nov 1999 18:32:55 +0000 (18:32 -0000)]
Added dissect_imap() prototype to get rid of compilation warning
in packet-tcp.c
svn path=/trunk/; revision=999
Nathan Neulinger [Wed, 10 Nov 1999 17:23:55 +0000 (17:23 -0000)]
Added stubs for various RPC routines:
portmap
ypserv
ypxfr
ypserv
bootparams
Stubs currently just map procedure numbers to names. I'll add some more
decoding of the actual procedure call/reply contents eventually.
svn path=/trunk/; revision=998
Nathan Neulinger [Wed, 10 Nov 1999 15:10:33 +0000 (15:10 -0000)]
added ypxfr program to rpc
svn path=/trunk/; revision=997
Nathan Neulinger [Wed, 10 Nov 1999 14:54:37 +0000 (14:54 -0000)]
fix ypbinb/ypbind typo
svn path=/trunk/; revision=996
Nathan Neulinger [Wed, 10 Nov 1999 14:44:58 +0000 (14:44 -0000)]
Added imap dissector, pretty much a simple translation of the pop
dissector.
svn path=/trunk/; revision=995
Guy Harris [Wed, 10 Nov 1999 07:01:53 +0000 (07:01 -0000)]
Add a "Go To Frame" menu item, which lets you go to a frame by frame
number.
svn path=/trunk/; revision=994
Guy Harris [Wed, 10 Nov 1999 06:01:21 +0000 (06:01 -0000)]
Fix up the MX record handling.
svn path=/trunk/; revision=993