obnox/wireshark/wip.git
25 years agoAdded files to handle AIX iptrace 2.0 files in wiretap.
gram [Sun, 3 Jan 1999 04:30:13 +0000 (04:30 +0000)]
Added files to handle AIX iptrace 2.0 files in wiretap.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@148 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThe "lnk_t" field of per-packet data, and the "pkt_encap" field in the
guy [Sun, 3 Jan 1999 01:57:24 +0000 (01:57 +0000)]
The "lnk_t" field of per-packet data, and the "pkt_encap" field in the
packet header, are there only if "wiretap" is used, so protect their use
with "#ifdef WITH_WIRETAP".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@147 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI made sure to note that wiretap only supports iptrace 2.0 files so far.
gram [Sat, 2 Jan 1999 06:50:30 +0000 (06:50 +0000)]
I made sure to note that wiretap only supports iptrace 2.0 files so far.
iptrace 1.0 is not supported yet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@146 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded the iptrace (AIX's packet-capture tool) file format to wiretap.
gram [Sat, 2 Jan 1999 06:10:55 +0000 (06:10 +0000)]
Added the iptrace (AIX's packet-capture tool) file format to wiretap.
This necessitated a change in ethereal because iptrace supports multi-NIC
packet capturing, including multi-datalink-type capturing.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@145 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded #include <sys/types.h> for compilation under gtk-1.1.11
gram [Fri, 1 Jan 1999 07:40:34 +0000 (07:40 +0000)]
Added #include <sys/types.h> for compilation under gtk-1.1.11

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@144 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoBe smarter about IPX port numbers and which function to call.
gram [Thu, 31 Dec 1998 20:36:43 +0000 (20:36 +0000)]
Be smarter about IPX port numbers and which function to call.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@143 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Added Joerg Mayer's Vines patch
gerald [Tue, 29 Dec 1998 04:05:38 +0000 (04:05 +0000)]
* Added Joerg Mayer's Vines patch
* Added Joerg to the AUTHORS file
* Added Guy's bitfield decode patch
* Fixed time output

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@142 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Installation documentation updates
gerald [Tue, 29 Dec 1998 03:12:07 +0000 (03:12 +0000)]
* Installation documentation updates

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@141 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Add library version information to about box, -v and -h output
gerald [Sun, 27 Dec 1998 20:47:53 +0000 (20:47 +0000)]
* Add library version information to about box, -v and -h output

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@140 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Minor changes for GTK+ 1.1/1.2 support
gerald [Sun, 27 Dec 1998 20:46:45 +0000 (20:46 +0000)]
* Minor changes for GTK+ 1.1/1.2 support

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@139 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* GTK+ 1.1/1.2 compatibility changes (use gtk_scrolled_window_add_with_viewport
gerald [Sun, 27 Dec 1998 20:44:53 +0000 (20:44 +0000)]
* GTK+ 1.1/1.2 compatibility changes (use gtk_scrolled_window_add_with_viewport
  to add filter list to scrolled window)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@138 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoFixed more bugs with dialogues and gtk+-1.1.x.
gram [Tue, 22 Dec 1998 07:07:11 +0000 (07:07 +0000)]
Fixed more bugs with dialogues and gtk+-1.1.x.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@137 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoStopped the "TCP Follow" screen from producing an error when using
gram [Tue, 22 Dec 1998 05:52:51 +0000 (05:52 +0000)]
Stopped the "TCP Follow" screen from producing an error when using
wiretap and gtk+-1.1.x. I also added an #include to util.c to keep
it from complaining about a lack of a definition of vsnprintf when
compiling with gtk+-1.1.x.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@136 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoFixed the version of gtk1.1.x required for
gram [Tue, 22 Dec 1998 00:41:24 +0000 (00:41 +0000)]
Fixed the version of gtk1.1.x required for
gtk_scrolledwindow_add_with_viewport. Now it compiles correctly on
gtk+-1.1.[0-4].

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@135 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoSyntax and compilation fixes for the broken code I just committed.
gerald [Mon, 21 Dec 1998 03:58:00 +0000 (03:58 +0000)]
Syntax and compilation fixes for the broken code I just committed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@134 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoMake the info field verbose.
gerald [Mon, 21 Dec 1998 03:43:29 +0000 (03:43 +0000)]
Make the info field verbose.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@133 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoChanged port print formats to unsigned, added raw port number to tree output.
gerald [Mon, 21 Dec 1998 03:42:22 +0000 (03:42 +0000)]
Changed port print formats to unsigned, added raw port number to tree output.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@132 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoModify add_item_to_tree to return immediately on a null tree ptr.
gerald [Mon, 21 Dec 1998 03:39:27 +0000 (03:39 +0000)]
Modify add_item_to_tree to return immediately on a null tree ptr.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@131 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoBack out change that Hannes Boehm said he didn't intend to commit,
guy [Sun, 20 Dec 1998 01:47:05 +0000 (01:47 +0000)]
Back out change that Hannes Boehm said he didn't intend to commit,
replacing "memset(..., 0, ...)" with "bzero(..., ...)" - he asked me to
remove the change.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@130 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded "Cisco Discovery Protocol" Hooks
hannes [Sat, 19 Dec 1998 00:12:23 +0000 (00:12 +0000)]
Added "Cisco Discovery Protocol" Hooks
Added Ethernet Loopback Protocol Type to ethertype.c

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@129 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded Guy Harris' patch to read Sniffer ATM trace files. Very nice.
gram [Thu, 17 Dec 1998 06:39:13 +0000 (06:39 +0000)]
Added Guy Harris' patch to read Sniffer ATM trace files. Very nice.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@128 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoA patch spread across many files to let Ethereal compile under GTK+-1.1.x.
gram [Thu, 17 Dec 1998 05:42:33 +0000 (05:42 +0000)]
A patch spread across many files to let Ethereal compile under GTK+-1.1.x.
Tests for GTK versions are done during compilation, not during "./configure".
The big problems have been taken care of in this patch (functional change
in the packet clist and conversion of menu_factory to item_factory), but
plenty of smaller problems with dialogue boxes abound. I have fixed
a small problem with file_open*(), but have left 2 comments in just in case
I'm not going about this the right way. Can someone verify?

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@127 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoNote that wiring the current longest string in a column into
guy [Wed, 16 Dec 1998 09:05:51 +0000 (09:05 +0000)]
Note that wiring the current longest string in a column into
"get_column_width()" is somewhat fragile, and suggest a possible
alternative.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@126 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoFix the bitmask for the hour field in a DOS-format time (not that it
guy [Tue, 15 Dec 1998 04:11:58 +0000 (04:11 +0000)]
Fix the bitmask for the hour field in a DOS-format time (not that it
matters, as that code is commented out).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@125 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoDebug statement commented out.
gram [Sun, 13 Dec 1998 05:38:13 +0000 (05:38 +0000)]
Debug statement commented out.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@124 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded Guy's patch to calculate date of Sniffer packet trace. I copied
gram [Sun, 13 Dec 1998 05:08:05 +0000 (05:08 +0000)]
Added Guy's patch to calculate date of Sniffer packet trace. I copied
bits of it to do the same for Lanalyzer packets.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@123 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoWhen dissecting DNS or NBNS queries or replies, add the item to the tree
guy [Fri, 4 Dec 1998 05:59:14 +0000 (05:59 +0000)]
When dissecting DNS or NBNS queries or replies, add the item to the tree
for the queries or replies first, then create and add the subtree and
populate it, and, when that's done, set the length of the item
appropriately; if you add the subtree later, the subtree's top-level
node appears to have level 0, rather than 1 greater than the tree of
which it's a subtree, which causes those trees not to print correctly.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@122 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThe Appletalk ARP opcode, like other AARP fields, is big-endian, not
guy [Thu, 3 Dec 1998 09:42:21 +0000 (09:42 +0000)]
The Appletalk ARP opcode, like other AARP fields, is big-endian, not
little-endian.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@121 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoLANalyzer records time in half microseconds, not microseconds.
gram [Mon, 23 Nov 1998 15:48:38 +0000 (15:48 +0000)]
LANalyzer records time in half microseconds, not microseconds.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@120 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded time-stamp decoding to LANalyzer decodes, made minor comment changes to
gram [Mon, 23 Nov 1998 04:40:22 +0000 (04:40 +0000)]
Added time-stamp decoding to LANalyzer decodes, made minor comment changes to
ngsniffer.c, and removed DLT_* defines from wtap.h

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@119 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThe Sniffer-reading code now checks to make sure that it is trying
gram [Sat, 21 Nov 1998 05:08:40 +0000 (05:08 +0000)]
The Sniffer-reading code now checks to make sure that it is trying
to read an uncompressed Sniffer file.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@118 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoTake the name-processing part of "get_nbns_name_type_class()" and put it
guy [Sat, 21 Nov 1998 04:00:31 +0000 (04:00 +0000)]
Take the name-processing part of "get_nbns_name_type_class()" and put it
in "get_nbns_name()", and have "get_nbns_name_type_class()" call it.
Use "get_nbns_name()" rather than "get_nbns_name_type_class()" in the
NBDS code, as there aren't any type or class fields in an NBDS packet.

Show the data in an NBDS datagram as raw data.  (We don't have an SMB
parser yet.)

Don't dissect anything past the header if an NBDS packet is an unknown
packet type.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@117 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoPick up from Ethereal's "configure.in" the test to check whether we're
guy [Sat, 21 Nov 1998 03:26:54 +0000 (03:26 +0000)]
Pick up from Ethereal's "configure.in" the test to check whether we're
running GCC and, if so, to add the "-Wall" flag.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@116 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoFix for non null-terminated strings.
gram [Fri, 20 Nov 1998 17:47:33 +0000 (17:47 +0000)]
Fix for non null-terminated strings.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@115 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThe address family isn't part of the RIP header, it's part of the RIP
guy [Fri, 20 Nov 1998 09:24:42 +0000 (09:24 +0000)]
The address family isn't part of the RIP header, it's part of the RIP
entry.

Show, for each RIP entry, a summary line with, for IP routes, the
destination and metric, as well as showing the detailed breakdown below
it.

Dissect authentication entries.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@114 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded NetBIOS Datagram (over UDP) support.
gram [Fri, 20 Nov 1998 05:58:42 +0000 (05:58 +0000)]
Added NetBIOS Datagram (over UDP) support.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@113 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI gave Guy the credit he deserves.
gram [Fri, 20 Nov 1998 05:54:39 +0000 (05:54 +0000)]
I gave Guy the credit he deserves.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@112 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded NetBIOS datagram support (over UDP, as per RFC 1002).
gram [Fri, 20 Nov 1998 05:54:08 +0000 (05:54 +0000)]
Added NetBIOS datagram support (over UDP, as per RFC 1002).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@111 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoBOOTP option 55 (parameter request list) now shows more detail.
gram [Fri, 20 Nov 1998 04:34:37 +0000 (04:34 +0000)]
BOOTP option 55 (parameter request list) now shows more detail.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@110 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Fixed minor bug when printing string values.
gerald [Wed, 18 Nov 1998 23:58:54 +0000 (23:58 +0000)]
* Fixed minor bug when printing string values.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@108 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoNote that "wiretap" can now read Sun "snoop" files.
guy [Wed, 18 Nov 1998 20:10:30 +0000 (20:10 +0000)]
Note that "wiretap" can now read Sun "snoop" files.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@107 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Don't build wiretap if it isn't configured.
gerald [Wed, 18 Nov 1998 04:02:17 +0000 (04:02 +0000)]
* Don't build wiretap if it isn't configured.
* Bump the version to 0.5.0

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@106 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Disable filter-related widgets if we're using wiretap.
gerald [Wed, 18 Nov 1998 03:17:18 +0000 (03:17 +0000)]
* Disable filter-related widgets if we're using wiretap.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@105 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* File needed for one of Laurent's patches that I just committed.
gerald [Wed, 18 Nov 1998 03:04:25 +0000 (03:04 +0000)]
* File needed for one of Laurent's patches that I just committed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@104 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Added patches from Laurent and Guy
gerald [Wed, 18 Nov 1998 03:01:44 +0000 (03:01 +0000)]
* Added patches from Laurent and Guy

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@103 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Mods to use get_tcp_port() to print the port number.
gerald [Wed, 18 Nov 1998 01:49:12 +0000 (01:49 +0000)]
* Mods to use get_tcp_port() to print the port number.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@102 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Add -Wall to CFLAGS if we're running gcc.
gerald [Wed, 18 Nov 1998 01:40:09 +0000 (01:40 +0000)]
* Add -Wall to CFLAGS if we're running gcc.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@101 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd the header files to "libwiretap_a_SOURCES", so they get included if
guy [Tue, 17 Nov 1998 06:16:52 +0000 (06:16 +0000)]
Add the header files to "libwiretap_a_SOURCES", so they get included if
you do "make dist".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@100 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd the header files to "libwiretap_a_SOURCES", so they get included if
guy [Tue, 17 Nov 1998 05:34:29 +0000 (05:34 +0000)]
Add the header files to "libwiretap_a_SOURCES", so they get included if
you do "make dist".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@99 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Fixes for TCP and UDP port number display.
gerald [Tue, 17 Nov 1998 05:04:04 +0000 (05:04 +0000)]
* Fixes for TCP and UDP port number display.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@98 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Added column formatting functionality.
gerald [Tue, 17 Nov 1998 04:29:13 +0000 (04:29 +0000)]
* Added column formatting functionality.
* Added check_col(), add_col_str() and add_col_fmt() to replace references
  to ft->win_info.
* Added column prefs handling code.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@97 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd a "acinclude.m4" file that defines a "AC_ETHEREAL_STRUCT_SA_LEN"
guy [Tue, 17 Nov 1998 02:17:27 +0000 (02:17 +0000)]
Add a "acinclude.m4" file that defines a "AC_ETHEREAL_STRUCT_SA_LEN"
macro (modeled after similar macros provided with "autoconf") to check
whether "struct sockaddr" has an "sa_len" member, and defines or
undefines "HAVE_SA_LEN" appropriately.  Use it instead of
"AC_LBL_SOCKADDR_SA_LEN", and use "HAVE_SA_LEN" instead of
"HAVE_SOCKADDR_SA_LEN".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@96 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoUn-comment "AC_CONFIG_SUBDIRS()", so that it'll run "configure" in the
guy [Tue, 17 Nov 1998 02:02:46 +0000 (02:02 +0000)]
Un-comment "AC_CONFIG_SUBDIRS()", so that it'll run "configure" in the
"wiretap" subdirectory, and thus leave a "config.status" file around so
that one of the "auto{make,configure,header}" guys doesn't complain when
rebuilding stuff that it can't open "config.status".  (The
"automake"-generated Makefile will recurse into "wiretap", and, at least
if you're doing builds from a tree freshly checked out from CVS, "XXX"
files will probably have been checked out before "XXX.in", so "make"
will try to reconstruct the "XXX" files from the "XXX.in" files.)

That also obviates the need to make "wiretap/Makefile" here.

We can also re-delete "wiretap/Makefile" from CVS - the problem that
caused me to bring it back wasn't caused by its absence, it was caused
by the above.  As "Makefile"s generated by "configure" scripts depend on
the particular system on which you ran "configure", there's no One True
Makefile so "Makefile" should'n't be under CVS.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@95 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoPut the Makefile back, in the hopes that it'll prevent at least one of
guy [Mon, 16 Nov 1998 22:24:03 +0000 (22:24 +0000)]
Put the Makefile back, in the hopes that it'll prevent at least one of
the many complaints you get if you do a "configure" followed by a "make"
in a freshly-checked-out Ethereal source tree (it bitches when, or maybe
after, "automake"ing it, complaining about not being able to open
"config.status" - the right fix might be to make the "configure" script
recurse).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@94 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoRemove the Makefile from CVS - Ethereal doesn't have its Makefile under
guy [Sun, 15 Nov 1998 05:45:36 +0000 (05:45 +0000)]
Remove the Makefile from CVS - Ethereal doesn't have its Makefile under
CVS; it's generated by the "configure" script, and the resulting
Makefile is platform-dependent, so there's no One True Makefile to put
under CVS.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@93 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoBack out some changes accidentally commited by the previous checkin - I
guy [Sun, 15 Nov 1998 05:40:23 +0000 (05:40 +0000)]
Back out some changes accidentally commited by the previous checkin - I
forgot that CVS, unlike Perforce, doesn't let you edit the list of files
it gives you in the editor and cause those files *not* to be committed,
it requires you to specify the files to be committed if you only want
some files committed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@92 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd support to wiretap for reading Sun "snoop" capture files.
guy [Sun, 15 Nov 1998 05:29:17 +0000 (05:29 +0000)]
Add support to wiretap for reading Sun "snoop" capture files.

That requires that, in the packet-reading loop, we pass to the callback
routine the offset in the file of a packet's data, because we can no
longer compute that offset by subtracting the size of the captured
packet data from the offset in the file after the data was read -
"snoop" may stick padding in after the packet data to align packet
headers on 4-byte boundaries.

Doing that required that we arrange that we do that for "libpcap"
capture files as well; the cleanest way to do that was to write our own
code for reading "libpcap" capture files, rather than using the
"libpcap" code to do it.

Make "wtap_dispatch_cb()" and "pcap_dispatch_cb()" static to "file.c",
as they're not used elsewhere.

If we're using wiretap, don't define in "file.h" stuff used only when
we're not using wiretap.

Update the wiretap README to reflect Gilbert's and my recent changes.

Clean up some memory leaks in "wiretap/lanalyzer.c" and
"wiretap/ngsniffer.c", where the capture-file-format-specific data
wasn't freed if the open failed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@91 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd "acconfig.h" to make the "auto*" stuff happy.
guy [Sun, 15 Nov 1998 00:32:01 +0000 (00:32 +0000)]
Add "acconfig.h" to make the "auto*" stuff happy.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@90 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThe Sniffer-reading code in wiretap now decodes the time field for each
gram [Fri, 13 Nov 1998 06:47:37 +0000 (06:47 +0000)]
The Sniffer-reading code in wiretap now decodes the time field for each
packet. The date is still not taken into account, so all the traces appear to
start on Jan 1, 1970. But the time of day is correct, so at least you get good
delta times.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@89 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoNow that I know where to find the file format of Sniffer trace files, wiretap
gram [Fri, 13 Nov 1998 05:57:39 +0000 (05:57 +0000)]
Now that I know where to find the file format of Sniffer trace files, wiretap
now *properly* reads Sniffer files. I now know the field in the file header
which denotes link type.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@88 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoMore patches from Guy to make wiretap compile better. I definitely
gram [Fri, 13 Nov 1998 03:21:20 +0000 (03:21 +0000)]
More patches from Guy to make wiretap compile better. I definitely
need to learn more about autoconf/automake. :)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@87 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoMore patches from Guy, cleaning up warnings when using gcc -Wall.
gram [Thu, 12 Nov 1998 23:29:34 +0000 (23:29 +0000)]
More patches from Guy, cleaning up warnings when using gcc -Wall.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@86 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded a patch to wiretap from Guy Harris to help compile wiretap in
gram [Thu, 12 Nov 1998 21:39:22 +0000 (21:39 +0000)]
Added a patch to wiretap from Guy Harris to help compile wiretap in
different situations.  I also fixed bootp so that is properly handles
unknown BOOTP options.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@85 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoWe have to include <sys/types.h>, if we have it, to declare "u_char", as
guy [Thu, 12 Nov 1998 21:22:47 +0000 (21:22 +0000)]
We have to include <sys/types.h>, if we have it, to declare "u_char", as
we no longer include <pcap.h>.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@84 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI added the LANalzyer file format to wiretap. I cleaned up some code in the
gram [Thu, 12 Nov 1998 06:01:27 +0000 (06:01 +0000)]
I added the LANalzyer file format to wiretap. I cleaned up some code in the
wiretap functions to be more generic and therefore allow an easier integration
of more packet-capture file types. I also put in all the GPL copyrights in the
wiretap code.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@83 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoA lengthy patch to add the wiretap library. Wiretap is not used by default
gram [Thu, 12 Nov 1998 00:06:47 +0000 (00:06 +0000)]
A lengthy patch to add the wiretap library. Wiretap is not used by default
because it is still in its infancy, but it can be compiled in optionally.
The library exists in its own subdirectory ethereal/wiretap. This patch also
edits all the packet-*.c files to remove the #include <pcap.h> line which is
unnecessary in these files. In the ethereal code, file.c is the most heavily
modified with #ifdef WITH_WIRETAP lines for the optional library.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@82 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Fix for unsigned overflows on Solaris
gerald [Sun, 8 Nov 1998 00:05:45 +0000 (00:05 +0000)]
* Fix for unsigned overflows on Solaris

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@81 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoGet rid of the "N on link, M capture" from the null and raw detail, as
guy [Thu, 5 Nov 1998 10:23:27 +0000 (10:23 +0000)]
Get rid of the "N on link, M capture" from the null and raw detail, as
that's now in the frame-level detail display.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@80 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd in a bunch of #defines for packet types.
guy [Thu, 5 Nov 1998 10:16:59 +0000 (10:16 +0000)]
Add in a bunch of #defines for packet types.

Show the packet type as a string, as well as a hex number, in the detail
display.  Show the packet type as a hex number in the summary display if
it's not a packet type we know about.

Don't put the "N on link, M captured" stuff in the PPP detail display,
as that's now in the frame detail display.

Handle IPv6, Appletalk, IPX, and Vines.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@79 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago Add a routine to convert Ethernet packet types to strings.
guy [Tue, 3 Nov 1998 07:45:10 +0000 (07:45 +0000)]
Add a routine to convert Ethernet packet types to strings.

Use that routine in "ethertype()".

Have "dissect_arp()" handle hardware addresses that aren't
6-byte Ethernet addresses and protocol addresses that aren't
4-byte IPv4 addresses - currently, it just prints the first 16
hex digits, but it could be made to handle other types specially
just as it handles 6-byte Ethernet and 4-byte IPv4 addresses.

Have it decode a more complete set of hardware address types.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@78 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Fixes for problems with the preference initialization code (Guy)
gerald [Thu, 29 Oct 1998 15:59:00 +0000 (15:59 +0000)]
* Fixes for problems with the preference initialization code (Guy)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@77 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Changes to make things easier on people with misplaced or missing pcap
gerald [Wed, 28 Oct 1998 21:52:48 +0000 (21:52 +0000)]
* Changes to make things easier on people with misplaced or missing pcap
  headers.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@76 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Added preference file saves and reads.
gerald [Wed, 28 Oct 1998 21:38:11 +0000 (21:38 +0000)]
* Added preference file saves and reads.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@75 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Aligned the icon with the top edge of the dialog.
gerald [Wed, 28 Oct 1998 21:22:33 +0000 (21:22 +0000)]
* Aligned the icon with the top edge of the dialog.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@74 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoUse "memcpy()" rather than "bcopy()", to eliminate one "gcc -Wall"
guy [Wed, 28 Oct 1998 01:29:16 +0000 (01:29 +0000)]
Use "memcpy()" rather than "bcopy()", to eliminate one "gcc -Wall"
warning.  (We use "memcpy()" everywhere else.)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@73 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago Add the "Maximize security" type of service for IP, from RFC
guy [Wed, 28 Oct 1998 01:16:49 +0000 (01:16 +0000)]
Add the "Maximize security" type of service for IP, from RFC
1455.

Make the arguments to "val_to_str()" and "match_strval()" that
point to things those routines don't modify pointers to "const",
and make the "value_string" tables passed into those routines in
"packet-ip.c" "const".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@72 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoRemoved unused variable and fixed call to add_item_to_tree, as reported
gram [Tue, 27 Oct 1998 16:43:15 +0000 (16:43 +0000)]
Removed unused variable and fixed call to add_item_to_tree, as reported
by Guy Harris.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@71 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI added the byte count to the Data section. The print routines had to
gram [Thu, 22 Oct 1998 19:10:19 +0000 (19:10 +0000)]
I added the byte count to the Data section. The print routines had to
be modified to check the beginning of the string instead of the entire string
when trying to find the Data section in order to print a hex dump.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@70 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAn NCP READ is now decoded. This is the first function to be decoded.
gram [Thu, 22 Oct 1998 04:50:21 +0000 (04:50 +0000)]
An NCP READ is now decoded. This is the first function to be decoded.
I expect much of the packet-ncp.c file to change.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@69 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoSilly mistake which caused if(tree) to fail.
gram [Thu, 22 Oct 1998 04:03:40 +0000 (04:03 +0000)]
Silly mistake which caused if(tree) to fail.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@68 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoRemoved some routines in support of match_strval function.
gram [Wed, 21 Oct 1998 02:36:54 +0000 (02:36 +0000)]
Removed some routines in support of match_strval function.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@67 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago Add a "val_to_str()" routine that calls "match_strval()" and, if
guy [Tue, 20 Oct 1998 05:31:03 +0000 (05:31 +0000)]
Add a "val_to_str()" routine that calls "match_strval()" and, if
it returns NULL, formats the value with the format passed in as
an argument, and returns a pointer to that static buffer.

Change several "match_strval()" calls to use "val_to_str()".

In "dissect_ospf()", use "match_strval()" to look up the packet
type, and use "Unknown" if it doesn't find a match.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@66 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd declarations of "dissect_aarp()' and "dissect_ddp()".
guy [Fri, 16 Oct 1998 06:46:55 +0000 (06:46 +0000)]
Add declarations of "dissect_aarp()' and "dissect_ddp()".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@65 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoGet rid of unused "etype_str[]" array in "ethertype()".
guy [Fri, 16 Oct 1998 06:46:16 +0000 (06:46 +0000)]
Get rid of unused "etype_str[]" array in "ethertype()".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@64 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdd Simon Wilkinson to the list of contributors in the "About" box.
guy [Fri, 16 Oct 1998 06:44:32 +0000 (06:44 +0000)]
Add Simon Wilkinson to the list of contributors in the "About" box.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@63 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded Simon
gerald [Fri, 16 Oct 1998 01:22:29 +0000 (01:22 +0000)]
Added Simon

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@62 f5534014-38df-0310-8fa8-9805f1628bb7

25 years ago* Copied in the correct GNU license (I'm such a goober)
gerald [Fri, 16 Oct 1998 01:18:35 +0000 (01:18 +0000)]
* Copied in the correct GNU license (I'm such a goober)
* Hacks to the filter interface (Gerald)
* About box (Laurent)
* AppleTalk support (Simon)
* Mods to the match_strval routine (Gerald)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@61 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI'm preparing ncp for expansion (i.e., cleaning up my old code). I also
gram [Thu, 15 Oct 1998 21:12:17 +0000 (21:12 +0000)]
I'm preparing ncp for expansion (i.e., cleaning up my old code). I also
changed the summary line so that "Reply"/"Request" is printed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@60 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoFix up an "sprintf()" to handle the possibility that the difference
guy [Thu, 15 Oct 1998 06:55:42 +0000 (06:55 +0000)]
Fix up an "sprintf()" to handle the possibility that the difference
between two pointers might be a "long" rather than an "int" (on a
platform where they're not the same).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@59 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoShow queries as a summary line (as was the case before my DNS checkins)
guy [Thu, 15 Oct 1998 06:40:51 +0000 (06:40 +0000)]
Show queries as a summary line (as was the case before my DNS checkins)
which can be expanded into a detailed name/type/class description.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@58 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoUse "ip_to_str()" and "ether_to_str()" to extract IP and MAC addresses
guy [Wed, 14 Oct 1998 22:37:02 +0000 (22:37 +0000)]
Use "ip_to_str()" and "ether_to_str()" to extract IP and MAC addresses
from a packet and turn them into character strings in dotted-quad or
colonized-sextet form.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@57 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoNeeded for common routines between DNS and NBNS.
gram [Wed, 14 Oct 1998 20:03:03 +0000 (20:03 +0000)]
Needed for common routines between DNS and NBNS.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@56 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoTag NetBIOS Name Service-over-UDP packets as "NBNS (UDP)".
guy [Wed, 14 Oct 1998 19:35:00 +0000 (19:35 +0000)]
Tag NetBIOS Name Service-over-UDP packets as "NBNS (UDP)".

Give a detailed display of the innards of NBNS-over-UDP packets.  Export
some stuff from the DNS decoder for the use of the NBNS decoder (NBNS is
DNS-like).

Give a more detailed display of the innards of DNS packets as well.

Fix a couple of minor NBNS bugs.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@55 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoDon't assume the UDP header is always properly aligned (sometimes it
guy [Wed, 14 Oct 1998 08:47:16 +0000 (08:47 +0000)]
Don't assume the UDP header is always properly aligned (sometimes it
isn't).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@54 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI've started to figure out the difference between NetBIOS over IPX for
gram [Wed, 14 Oct 1998 05:18:32 +0000 (05:18 +0000)]
I've started to figure out the difference between NetBIOS over IPX for
Netware, and NetBIOS over IPX for WinNT (NWLink).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@53 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoI rename the single dissect() function in packet-nbipx.c, and had packet-ipx.c
gram [Wed, 14 Oct 1998 04:28:49 +0000 (04:28 +0000)]
I rename the single dissect() function in packet-nbipx.c, and had packet-ipx.c
call it under fewer circumstances.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@52 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoThis should have been part of my previous 'cvs commit' (netbios name
gram [Wed, 14 Oct 1998 04:11:32 +0000 (04:11 +0000)]
This should have been part of my previous 'cvs commit' (netbios name
services), but I forgot this file (I was doing the commmit manually).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@51 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoAdded preliminary support for NetBIOS Name Services over IPX and UDP. Note
gram [Wed, 14 Oct 1998 04:09:15 +0000 (04:09 +0000)]
Added preliminary support for NetBIOS Name Services over IPX and UDP. Note
that these are two very different implementations of NetBIOS name services and
at the protocol level are not similar. I have put the UDP protocol in
packet-nbns.c, since it will be a very big module. I have all of rfc 1002 to
read and implement. I am planning on putting many different NetBIOS over IPX
functions in packet-nbipx.c, however, since there is no RFC or published
standard. I have to hack the protocol, and as such, I do not expect it to be
as full-featured as the IP-world equivalents.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@50 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agotoo few arguments for sprintf format
deniel [Tue, 13 Oct 1998 17:56:41 +0000 (17:56 +0000)]
too few arguments for sprintf format

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@49 f5534014-38df-0310-8fa8-9805f1628bb7

25 years agoOn most systems, bit-swap the bytes of an FDDI MAC address. (List of
guy [Tue, 13 Oct 1998 07:48:03 +0000 (07:48 +0000)]
On most systems, bit-swap the bytes of an FDDI MAC address.  (List of
systems on which you don't bit-swap them taken from "tcpdump"; the list
may not be complete.)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@48 f5534014-38df-0310-8fa8-9805f1628bb7