obnox/wireshark/wip.git
22 years agoFix a bug for dcerpc. If we do not have reassembly of fragments enabled, only call...
sahlberg [Sat, 25 May 2002 08:37:44 +0000 (08:37 +0000)]
Fix a bug for dcerpc. If we do not have reassembly of fragments enabled, only call the subdissector for the first fragment.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5556 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of the routine to dissect LANE topology change frames, as
guy [Sat, 25 May 2002 07:40:11 +0000 (07:40 +0000)]
Get rid of the routine to dissect LANE topology change frames, as
there's nothing in them past the flags.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5555 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't give ordinal numbers to preferences that aren't displayed.
guy [Sat, 25 May 2002 01:47:46 +0000 (01:47 +0000)]
Don't give ordinal numbers to preferences that aren't displayed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5554 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd support for desegmentation of NCP-over-TCP.
guy [Sat, 25 May 2002 01:05:56 +0000 (01:05 +0000)]
Add support for desegmentation of NCP-over-TCP.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5553 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Joerg Mayer: mark last packet of TFTP transfer as such in the Info
guy [Fri, 24 May 2002 22:50:55 +0000 (22:50 +0000)]
From Joerg Mayer: mark last packet of TFTP transfer as such in the Info
column.

Tweak some other stuff while we're at it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5552 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix up some of the decodes and add netshareenum_all rqst.
sharpe [Fri, 24 May 2002 19:36:42 +0000 (19:36 +0000)]
Fix up some of the decodes and add netshareenum_all rqst.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5551 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSome cleanups for srvsvc. Decode the status, and start netshareenum_all.
sharpe [Fri, 24 May 2002 16:45:05 +0000 (16:45 +0000)]
Some cleanups for srvsvc. Decode the status, and start netshareenum_all.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5550 f5534014-38df-0310-8fa8-9805f1628bb7

22 years ago*** empty log message ***
sahlberg [Fri, 24 May 2002 11:52:39 +0000 (11:52 +0000)]
*** empty log message ***

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5549 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoReassembly of fragmented DCE/RPC (only for connection oriented DCE/RPC).
sahlberg [Fri, 24 May 2002 11:51:14 +0000 (11:51 +0000)]
Reassembly of fragmented DCE/RPC (only for connection oriented DCE/RPC).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5548 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix the definition of AllocateMode; it's only ever used as a 2-byte
gram [Fri, 24 May 2002 11:45:51 +0000 (11:45 +0000)]
Fix the definition of AllocateMode; it's only ever used as a 2-byte
value, so make it a val_string16 instead of a val_string8.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5547 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoHave bitfields check the type of bf_booleans inside of them, ensuring
gram [Fri, 24 May 2002 11:38:22 +0000 (11:38 +0000)]
Have bitfields check the type of bf_booleans inside of them, ensuring
they're the right width.
Fix the definitions of AccessRightsMask and JobControlFlagsWord,
and add AccessRightsMaskWord.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5546 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMove the value_string table for the share type values to
guy [Fri, 24 May 2002 10:57:38 +0000 (10:57 +0000)]
Move the value_string table for the share type values to
"packet-smb-common.c", and use it in "packet-dcerpc-srvsvc".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5545 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoShow the platform ID in decimal, with some values found in a Visual
guy [Fri, 24 May 2002 10:45:40 +0000 (10:45 +0000)]
Show the platform ID in decimal, with some values found in a Visual
Basic program on the Web.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5544 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd LANE 2.0 stuff.
guy [Fri, 24 May 2002 09:31:06 +0000 (09:31 +0000)]
Add LANE 2.0 stuff.

Show the maximum frame size symbolically.

For the various LANE frame types, show only the fields those frame types
are specified to contain, and show only the flag bits that are specified
for those frame types.

Use the ELAN name size when putting the name into the protocol tree, and
don't put it in if the name size is 0.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5543 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd the UNI 3.0 mode identifier AAL parameter.
guy [Fri, 24 May 2002 08:08:43 +0000 (08:08 +0000)]
Add the UNI 3.0 mode identifier AAL parameter.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5542 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix a routine that's supposed to return a value to actually do so.
guy [Fri, 24 May 2002 07:09:56 +0000 (07:09 +0000)]
Fix a routine that's supposed to return a value to actually do so.

Pass 0, not NULL, as an integral argument; NULL might be 0 or might be
"(void *)0)".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5541 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of an unused variable.
guy [Fri, 24 May 2002 07:05:44 +0000 (07:05 +0000)]
Get rid of an unused variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5540 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoBug fix from Kan Sasaki.
guy [Fri, 24 May 2002 03:21:23 +0000 (03:21 +0000)]
Bug fix from Kan Sasaki.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5539 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoThe 0x80000000 bit in the NCP-over-TCP length field, in requests,
guy [Fri, 24 May 2002 03:03:49 +0000 (03:03 +0000)]
The 0x80000000 bit in the NCP-over-TCP length field, in requests,
appears to be a flag indicating that there's an 8-byte signature after
the NCP-over-IP header but before the NCP packet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5538 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd some decoding for the srvsvc functions.
sharpe [Fri, 24 May 2002 02:32:50 +0000 (02:32 +0000)]
Add some decoding for the srvsvc functions.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5537 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSkeleton NSPI dissector, from Todd Sabin.
guy [Thu, 23 May 2002 23:45:22 +0000 (23:45 +0000)]
Skeleton NSPI dissector, from Todd Sabin.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5536 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of the old MAPI dissector in favor of the new DCE RPC-based
guy [Thu, 23 May 2002 23:37:49 +0000 (23:37 +0000)]
Get rid of the old MAPI dissector in favor of the new DCE RPC-based
dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5535 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSave the whole capture device name in the preferences file. Under
gerald [Thu, 23 May 2002 15:56:05 +0000 (15:56 +0000)]
Save the whole capture device name in the preferences file.  Under
Windows, this saves the description + device name.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5534 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMAPI Logoff function fully decoded.
sahlberg [Thu, 23 May 2002 12:48:28 +0000 (12:48 +0000)]
MAPI Logoff function fully decoded.
Ha, if the other functions are as
easy to figure out i will be a happy boy.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5533 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdditions to the MAPI dissector. Function 02 for MAPI.
sahlberg [Thu, 23 May 2002 12:23:29 +0000 (12:23 +0000)]
Additions to the MAPI dissector. Function 02 for MAPI.
The function request/call are dissected but the main body of the function
in/out parameters consists of a unidimensional conformant and varying array of bytes which content is encrypted/obfuscated.
Whoever can tell me how to decrypt/unobfuscate these bytes will get
a case of VB next time in Sydney.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5532 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoClean up the file saving code a bit.
guy [Thu, 23 May 2002 10:27:12 +0000 (10:27 +0000)]
Clean up the file saving code a bit.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5531 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded stub for MS Exchange MAPI protocol.
sahlberg [Thu, 23 May 2002 10:00:19 +0000 (10:00 +0000)]
Added stub for MS Exchange MAPI protocol.
If anyone has a better name they are welcome to change it.
Perhaps we can now remove the packet-mapi.c dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5530 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSet the LANE subtype in the "seek and read" routine.
guy [Thu, 23 May 2002 08:17:31 +0000 (08:17 +0000)]
Set the LANE subtype in the "seek and read" routine.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5529 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMake "save_cap_file()" return a Boolean (TRUE on success, FALSE on
guy [Thu, 23 May 2002 07:46:58 +0000 (07:46 +0000)]
Make "save_cap_file()" return a Boolean (TRUE on success, FALSE on
failure) - and don't use "err" to determine success or failure, as it's
not set in some failure cases.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5528 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoThe old URL for the LANalyzer file format is no longer valid; replace it
guy [Thu, 23 May 2002 06:34:10 +0000 (06:34 +0000)]
The old URL for the LANalyzer file format is no longer valid; replace it
with one that's currently valid.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5527 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoThe "fname" argument to "save_cap_file()", and "cf->filename" - and thus
guy [Thu, 23 May 2002 06:10:56 +0000 (06:10 +0000)]
The "fname" argument to "save_cap_file()", and "cf->filename" - and thus
"from_filename" - are both null-terminated strings; compare them with
"strcmp", not "strncmp()".  ("cf->filename" is a "char *", so
"sizeof(cf->filename)" is not the right third argument to "strncmp()" in
any case, as it's the size of a pointer, which is probably either 4 or 8
bytes.)

Make the dialog box for "Can't save over current capture file" an
ESD_TYPE_CRIT dialog box, as it's a fatal error.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5526 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCommand-line interface cleanups, from Graeme Hewson:
guy [Wed, 22 May 2002 23:22:56 +0000 (23:22 +0000)]
Command-line interface cleanups, from Graeme Hewson:

- Exit if an error is found in the options or arguments.

- In print_usage(), improve the visibility of any getopt() error
  message by suppressing the version information when -h is not
  specified, and by adding an empty line.

Ethereal:

- If the -k option is specified, use the interface in the preferences
  file, if present.

- Prevent the user from specifying any hidden options which are used
  internally in -S mode.

Tethereal:

- Fix a memory leak in the processing of the -f option.

- In print_usage(), change "capture file type" to "output file type",
  which I think is clearer; move the -q flag from the non-libpcap case
  to the libpcap case.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5525 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCapture file formats that can be written need a "short name" to let you
guy [Wed, 22 May 2002 22:57:54 +0000 (22:57 +0000)]
Capture file formats that can be written need a "short name" to let you
specify them on the command line of Tethereal/editcap/etc. (and to keep
those programs from dropping core when enumerating the names); now that
we can write Windows Sniffer 2.00x-format files, give them a short name.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5524 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdated NS_LS_DRIVER to work with both pre-HPUX11 and HPUX11.
sahlberg [Wed, 22 May 2002 10:53:17 +0000 (10:53 +0000)]
Updated NS_LS_DRIVER to work with both pre-HPUX11 and HPUX11.
Added support for NS_LS_TCP, NS_LS_UDP, NS_LS_LOOPBACK, NS_LS_ICMP and
unnamed subsystem 0xb9 (which contains ethernet headers in my captures frames).
However, NS_LS_ICMP will not be dissected since we dont have a
RAW_ICMP wiretap encapsulation type.
Updated decoding of usec timestamp for HPUX11 since HPUX11 has 0.1us
resolution for the scalar in this field.

YMMV but all these ones works for me from nettl traces from HPUX11.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5523 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDissect the headers of VJ compressed packets even if decompression is
guy [Wed, 22 May 2002 10:15:28 +0000 (10:15 +0000)]
Dissect the headers of VJ compressed packets even if decompression is
turned off or we don't know the direction of the traffic.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5522 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix a typo.
guy [Wed, 22 May 2002 09:52:14 +0000 (09:52 +0000)]
Fix a typo.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5521 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMaintain separate "discard compressed frames" state per connection.
guy [Wed, 22 May 2002 09:49:28 +0000 (09:49 +0000)]
Maintain separate "discard compressed frames" state per connection.

Put the array of connection states into the per-direction state
structure; its size is fixed, as the connection number field size is 1
byte.  Get rid of the "rslot_limit" member, as the number is fixed.

Get rid of the per-state "next" pointer, as it's unused.

Process uncompressed frames even if VJ decompression is turned off, and
even if the "discard compressed frames" flag is set on the connection,
as there's no decompression to do.

If the full IP and TCP header isn't available in an uncompressed frame,
discard subsequent compressed frames.

Only use the "discard compressed frames" flag on the first pass through
the capture; on subsequent passes, the presence of an "uncompressed
header" item attached to the frame indicates whether we could decompress
it or not (the "discard compressed frames" flag would merely indicate
the *last* state it had for that connection, which might not have been
the state at the time we saw that frame).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5520 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoVarious fixes from Mike Frisch (remove unused arguments, make variables
guy [Tue, 21 May 2002 22:31:36 +0000 (22:31 +0000)]
Various fixes from Mike Frisch (remove unused arguments, make variables
unsigned where appropriate).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5519 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFixes to BGP problems, from Dirk Steinberg.
guy [Tue, 21 May 2002 21:55:47 +0000 (21:55 +0000)]
Fixes to BGP problems, from Dirk Steinberg.

Add some additional bounds checking to "decode_MPLS_stack()" so as not
to overflow the buffer handed to it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5518 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Hannes Gredler: fix misuse of "&&" when "&" was intended.
guy [Tue, 21 May 2002 21:44:28 +0000 (21:44 +0000)]
From Hannes Gredler: fix misuse of "&&" when "&" was intended.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5517 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Mike Frisch: fix most of the TODOs.
guy [Tue, 21 May 2002 21:13:42 +0000 (21:13 +0000)]
From Mike Frisch: fix most of the TODOs.

Make a pile of things static.

Remove declarations of no-longer-extant routines from "packet-nfs.h".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5516 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoOption to make filtering on nfs fhandles stateful.
sahlberg [Tue, 21 May 2002 10:17:30 +0000 (10:17 +0000)]
Option to make filtering on nfs fhandles stateful.
When this ption is enabled in Protocols/NFS displayfilters for fhandle fields
such as nfs.fh.{hash|name|full_name} will find both the request and matching
response packets even if the fhandle is only present in one of the packets.
The option supports all NFS and related protocols which use nfs fhandles
including async NLM.
The option will not work with nfs packets containing multiple fhandles in
one PDU, nor will it work if tcp collapses multiple segments/pdus into
one larger segment.
It only works for async NLM if one first enables the MSG/RES stateful
matching for async NLM.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5515 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate the README to refer to "--without-ucdsnmp" rather than
guy [Mon, 20 May 2002 19:13:20 +0000 (19:13 +0000)]
Update the README to refer to "--without-ucdsnmp" rather than
"--disable-snmp", and to note that UCD SNMP 4.2.4 *or later* fix the
potential buffer overflow problems.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5514 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoImplemented getprinterdriver2, levels 1 and 3.
tpot [Mon, 20 May 2002 06:53:31 +0000 (06:53 +0000)]
Implemented getprinterdriver2, levels 1 and 3.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5513 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Yaniv Kaul: update to draft-ietf-ipsec-udp-encaps-02, which removed
guy [Mon, 20 May 2002 01:29:07 +0000 (01:29 +0000)]
From Yaniv Kaul: update to draft-ietf-ipsec-udp-encaps-02, which removed
UDP-encapsulated AH packet support.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5512 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Hannes Gredler: fix to label stack handling for withdrawn routes.
guy [Mon, 20 May 2002 01:01:11 +0000 (01:01 +0000)]
From Hannes Gredler: fix to label stack handling for withdrawn routes.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5511 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't include the FCS in the tvbuff handed to "dissect_ppp_common()", so
guy [Mon, 20 May 2002 00:56:30 +0000 (00:56 +0000)]
Don't include the FCS in the tvbuff handed to "dissect_ppp_common()", so
that it's not included in the tvbuff handed to subdissectors.  Use that
tvbuff to compute the FCS.

Properly handle the FCS in frames that don't include all the captured
data.

In VJ-compressed packets, put the VJ compression information into the
protocol tree, and set the Protocol and Info columns, and don't worry
about the CRC - as per the above, it's no longer in the tvbuff (and
never *was* in the tvbuff in some cases).

Also, clean up some other stuff in the VJ dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5510 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSome miscellaneous updates:
tpot [Mon, 20 May 2002 00:36:04 +0000 (00:36 +0000)]
Some miscellaneous updates:

 - implemented WritePrinter, DeletePrinterData

 - fixed dissection of various printerdata routines to use a more
   consistent field naming scheme and convert to ndr functions

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5509 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd Ronnie's notes about compiling under Cygwin.
gerald [Sun, 19 May 2002 17:12:25 +0000 (17:12 +0000)]
Add Ronnie's notes about compiling under Cygwin.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5508 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet NEWS ready for the 0.9.4 release.
gerald [Sun, 19 May 2002 14:01:07 +0000 (14:01 +0000)]
Get NEWS ready for the 0.9.4 release.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5506 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Michael Tuexen: show the filler only if present.
guy [Sat, 18 May 2002 22:25:40 +0000 (22:25 +0000)]
From Michael Tuexen: show the filler only if present.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5505 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSet the Info column for compressed and uncompressed TCP.
guy [Sat, 18 May 2002 21:19:48 +0000 (21:19 +0000)]
Set the Info column for compressed and uncompressed TCP.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5504 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Michael Tuexen: updates to later IETF drafts:
guy [Sat, 18 May 2002 20:33:53 +0000 (20:33 +0000)]
From Michael Tuexen: updates to later IETF drafts:

draft-ietf-tsvwg-addip-sctp-05.txt for the add-IP extension
draft-stewart-prsctp-00.txt for the 'Partial Reliability' extension
draft-ietf-tsvwg-sctpcsum-07.txt

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5503 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMake the default SNMP build behavior "ifpresent" instead of "yes", so things
gerald [Sat, 18 May 2002 17:17:12 +0000 (17:17 +0000)]
Make the default SNMP build behavior "ifpresent" instead of "yes", so things
work as they should by default on systems without SNMP libraries.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5502 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd initial support for GIOP.
gerald [Sat, 18 May 2002 14:58:00 +0000 (14:58 +0000)]
Add initial support for GIOP.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5501 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoIncrement versions to 0.9.4, get NEWS current to April 25 (more NEWS to
gerald [Sat, 18 May 2002 04:00:35 +0000 (04:00 +0000)]
Increment versions to 0.9.4, get NEWS current to April 25 (more NEWS to
come).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5500 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoIn the Windows capture dialog, place the interface description before the
gerald [Sat, 18 May 2002 02:41:46 +0000 (02:41 +0000)]
In the Windows capture dialog, place the interface description before the
interface name.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5499 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd a "break;" after a "default:" to fix an MSVC++ compilation error.
gerald [Sat, 18 May 2002 02:05:47 +0000 (02:05 +0000)]
Add a "break;" after a "default:" to fix an MSVC++ compilation error.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5498 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate from Greg Morris.
gram [Fri, 17 May 2002 23:17:22 +0000 (23:17 +0000)]
Update from Greg Morris.
Increase the max number of allowable req_cond_index's.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5497 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded support for HPUX11 NETTL captures for the NS_LS_DRIVER type.
sahlberg [Fri, 17 May 2002 09:53:20 +0000 (09:53 +0000)]
Added support for HPUX11 NETTL captures for the NS_LS_DRIVER type.
It works for such captures containing 100baseT captures. It may explode on
other link types.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5496 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDirectoryBase should be a uint32.
gram [Fri, 17 May 2002 05:00:50 +0000 (05:00 +0000)]
DirectoryBase should be a uint32.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5495 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Andrew Esh: support for additional interest levels in
guy [Thu, 16 May 2002 23:36:43 +0000 (23:36 +0000)]
From Andrew Esh: support for additional interest levels in
TRANS2_QUERY_FS_INFORMATION, and fix handling of level 1022 to treat the
file name as always being in Unicode.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5494 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSet the default for "--want_ucdsnmp" back to "yes", since overflow problems
gerald [Thu, 16 May 2002 21:47:22 +0000 (21:47 +0000)]
Set the default for "--want_ucdsnmp" back to "yes", since overflow problems
have been fixed in recent versions.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5493 f5534014-38df-0310-8fa8-9805f1628bb7

22 years ago- Major cleanup of the RSVP dissector
ashokn [Thu, 16 May 2002 20:11:32 +0000 (20:11 +0000)]
- Major cleanup of the RSVP dissector

- Added support for OIF O-UNI 1.0 (as per 125.7 standard)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5492 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Andrew Esh: fix a compiler warning.
guy [Thu, 16 May 2002 19:29:03 +0000 (19:29 +0000)]
From Andrew Esh: fix a compiler warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5491 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix from Mark Burton.
guy [Thu, 16 May 2002 10:03:31 +0000 (10:03 +0000)]
Fix from Mark Burton.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5490 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMove the #defines for NCP packet types to "packet-ncp-int.h", and use
guy [Thu, 16 May 2002 09:59:52 +0000 (09:59 +0000)]
Move the #defines for NCP packet types to "packet-ncp-int.h", and use
them in "packet-ncp2222.inc".

The page at

http://www.odyssea.com/whats_new/tcpipnet/tcpipnet.html

indicates that a positive ACK (0x9999) NCP packet has the same
completion code and connection status fields as a reply (0x3333) packet
(but nothing after them); hand "dissect_ncp_reply()" the packet type as
one of its arguments, and have it handle positive ACK packets as well as
reply packets.

It also indicates that bit 4 of the connection status indicates that the
server is unavailable, and the page at

http://www.unm.edu/~network/presentations/course/appendix/appendix_f/tsld088.htm

speaks of that and of the significance of other bits; put a comment in
"ncp2222.py", before the "hf_ncp_connection_status" field, about that.

From looking at a capture, it appears that a "destroy service
connection" (0x5555) packet should be treated like a "create service
connection" (0x1111) packet and be handed to "dissect_ncp_request()".

Note that perhaps watchdog packets should be handled by
"dissect_ncp_reply()" as well.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5489 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded function names for all v2 and v3 functions for the SUN NFS ACL protocol stub...
sahlberg [Thu, 16 May 2002 08:57:12 +0000 (08:57 +0000)]
Added function names for all v2 and v3 functions for the SUN NFS ACL protocol stub dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5488 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoNew dissector for SUN NFS AUTH nfs authentication protocol, stubs only.
sahlberg [Thu, 16 May 2002 08:51:17 +0000 (08:51 +0000)]
New dissector for SUN NFS AUTH nfs authentication protocol, stubs only.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5487 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoStubs for new dissector for SUN NFS AUTHentication protocol.
sahlberg [Thu, 16 May 2002 08:50:00 +0000 (08:50 +0000)]
Stubs for new dissector for SUN NFS AUTHentication protocol.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5486 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFor response packets, add a field showing the number of the frame
gram [Thu, 16 May 2002 03:31:34 +0000 (03:31 +0000)]
For response packets, add a field showing the number of the frame
containing the request packet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5485 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix a return type mismatch for get_CDR_wchar and a parameter type mismatch
gerald [Thu, 16 May 2002 02:43:53 +0000 (02:43 +0000)]
Fix a return type mismatch for get_CDR_wchar and a parameter type mismatch
for get_CDR_octet_seq.  The one for get_CDR_octet_seq was preventing
compilation under MSVC++.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5484 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't dissect the stuff after the RPC information in an RPC reply as a
guy [Wed, 15 May 2002 23:01:51 +0000 (23:01 +0000)]
Don't dissect the stuff after the RPC information in an RPC reply as a
protocol reply if:

we got anything other than SUCCESS for MSG_ACCEPTED;

we got MSG_DENIED;

we got anything other than MSG_ACCEPTED or MSG_DENIED;

as there isn't a protocol reply in there.

Just use "-1, -1" as arguments to "tvb_new_subset()" if you want the new
tvbuff to run to the end of the packet - there's no need to call
"tvb_reported_length_remaining()".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5483 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd Greg Morris as author of NCP dissector.
gram [Wed, 15 May 2002 21:50:27 +0000 (21:50 +0000)]
Add Greg Morris as author of NCP dissector.
Remove paragraph begging for help on NCP dissector from README.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5482 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Hannes Gredler: labeled unicast support for BGP.
guy [Wed, 15 May 2002 21:40:25 +0000 (21:40 +0000)]
From Hannes Gredler: labeled unicast support for BGP.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5481 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of the "Connection Number High" entry - the "Connection Number"
guy [Wed, 15 May 2002 21:37:19 +0000 (21:37 +0000)]
Get rid of the "Connection Number High" entry - the "Connection Number"
entry covers both bytes of the connection number (as well as the number
in the middle - alas, there's no way to create a protocol tree item that
covers a discontiguous range of bytes).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5480 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of an assigned-to-but-not-used variable, and eliminate another
guy [Wed, 15 May 2002 21:18:19 +0000 (21:18 +0000)]
Get rid of an assigned-to-but-not-used variable, and eliminate another
variable that's used only once.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5479 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoNCP-over-UDP doesn't have a special header, as NCP-over-TCP does.
guy [Wed, 15 May 2002 21:17:21 +0000 (21:17 +0000)]
NCP-over-UDP doesn't have a special header, as NCP-over-TCP does.

Dissect NCP watchdog packets.

Clean up the handling of NCP packet-specific headers and payload a bit.

Put in a protocol tree item for the upper 8 bits of the connection
number.

Make the "sorry, we don't dissect this yet" protocol tree item cover the
part we *don't* dissect, rather than covering the packet type.

Use the data dissector to dissect the data in a burst mode packet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5478 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Andrew Esh: support for interest level 1003 and 1007 in
guy [Wed, 15 May 2002 19:37:26 +0000 (19:37 +0000)]
From Andrew Esh: support for interest level 1003 and 1007 in
TRANS2_QUERY_FS_INFORMATION.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5477 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoiSCSI draft 12 support, from Mark Burton.
guy [Wed, 15 May 2002 19:32:22 +0000 (19:32 +0000)]
iSCSI draft 12 support, from Mark Burton.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5476 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse registered fields for the subfields of the Flags field in DNS and
guy [Wed, 15 May 2002 07:24:20 +0000 (07:24 +0000)]
Use registered fields for the subfields of the Flags field in DNS and
NBNS.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5475 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCheck in stub dissectors for Sun's NFS ACL, remote statistics, and
guy [Wed, 15 May 2002 07:21:41 +0000 (07:21 +0000)]
Check in stub dissectors for Sun's NFS ACL, remote statistics, and
Solstice administration daemon RPC services.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5474 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMake the message text an item in the protocol tree.
guy [Wed, 15 May 2002 06:51:07 +0000 (06:51 +0000)]
Make the message text an item in the protocol tree.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5473 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSet the Info column as soon as we have enough information to do so.
guy [Wed, 15 May 2002 06:50:33 +0000 (06:50 +0000)]
Set the Info column as soon as we have enough information to do so.

Add support for burst packets.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5472 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd a comment about the Name Space field and its possible use to
guy [Wed, 15 May 2002 03:33:40 +0000 (03:33 +0000)]
Add a comment about the Name Space field and its possible use to
indicate the character set for strings.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5471 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSet the length field correctly for proto_tree_add_text() when marking the
tpot [Wed, 15 May 2002 03:28:43 +0000 (03:28 +0000)]
Set the length field correctly for proto_tree_add_text() when marking the
undissected part of a long frame.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5470 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Mark Burton: make the iSCSI protocol level a settable preference
guy [Tue, 14 May 2002 21:35:17 +0000 (21:35 +0000)]
From Mark Burton: make the iSCSI protocol level a settable preference
rather than something chosen at compile time, and get rid of an
unused-but-#ifdeffed-out variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5469 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Mike Frisch: implement MAPID (procedure 12) in PCNFSD v2.
guy [Tue, 14 May 2002 21:22:39 +0000 (21:22 +0000)]
From Mike Frisch: implement MAPID (procedure 12) in PCNFSD v2.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5468 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix JobFileHandle and JobFileHandleLong.
gram [Tue, 14 May 2002 20:06:37 +0000 (20:06 +0000)]
Fix JobFileHandle and JobFileHandleLong.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5467 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse "-G fields" rather than "-G" in Makefiles.
guy [Tue, 14 May 2002 18:27:28 +0000 (18:27 +0000)]
Use "-G fields" rather than "-G" in Makefiles.

Print an error and exit if an invalid option is given for the "-G" flag.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5466 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate from Kan Sasaki.
guy [Tue, 14 May 2002 10:40:25 +0000 (10:40 +0000)]
Update from Kan Sasaki.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5465 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix a compiler warning.
guy [Tue, 14 May 2002 10:39:29 +0000 (10:39 +0000)]
Fix a compiler warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5464 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Ruud Linders: report errors from "g_module_open()".
guy [Tue, 14 May 2002 10:32:12 +0000 (10:32 +0000)]
From Ruud Linders: report errors from "g_module_open()".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5463 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMake the "-G" flag take an argument. If no arugment is specified, or if
guy [Tue, 14 May 2002 10:15:12 +0000 (10:15 +0000)]
Make the "-G" flag take an argument.  If no arugment is specified, or if
the argument is "fields", dump out a table of the fields, as we
currently do; if the argument is "protocols", dump out a table of the
protocols.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5462 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoShow the opaque type as a field and, if the opaque type is Traffic
guy [Tue, 14 May 2002 09:46:38 +0000 (09:46 +0000)]
Show the opaque type as a field and, if the opaque type is Traffic
Engineering LSA, show the rest of the LSA ID as a reserved field and an
instance, as per draft-katz-yeung-ospf-traffic-06.txt.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5461 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Kan Sasaki: added some VSAs from the FreeRadius dictionary files
guy [Tue, 14 May 2002 09:24:27 +0000 (09:24 +0000)]
From Kan Sasaki: added some VSAs from the FreeRadius dictionary files
and other changes to RADIUS.

Export the Q.931 cause location and code values, and use them in the
RADIUS dissector for ACC cause codes and values.

Make "CHAP" all caps, as it should be, and use InterCaps in AppleTalk
(Apple does).

The CHAP Challenge is an octet string, not a text string - the
FreeRadius dictionary has an error there.

In "rdconvertinttostr()", if there's no value_string table, just print
the value numerically, don't call "rd_match_strval()".

Don't pass a null value_string pointer to "rd_match_strval_attrib()" -
just report the value, without attempting to find a string for it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5460 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd some comments.
guy [Tue, 14 May 2002 07:29:13 +0000 (07:29 +0000)]
Add some comments.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5459 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoChange the name under which variables are hashed during processing.
gram [Mon, 13 May 2002 22:52:15 +0000 (22:52 +0000)]
Change the name under which variables are hashed during processing.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5458 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoHave "is_tpkt()" take a minimum-payload-length argument and check
guy [Mon, 13 May 2002 21:18:26 +0000 (21:18 +0000)]
Have "is_tpkt()" take a minimum-payload-length argument and check
whether the length value in the TPKT header is large enough to include
that much payload - if not, report the packet as not being a TPKT
packet.

Have the heuristic Q.931 dissector supply the appropriate value.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5457 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Motonori Shindo:
guy [Mon, 13 May 2002 20:46:37 +0000 (20:46 +0000)]
From Motonori Shindo:

 1) OSPF Link State Request packet in V2 has 4-octets LS type field
    whereas 2-octets MBZ and 2-octets LS type field in V3.

 2) 6th argument to proto_tree_add_item() has to be boolean value.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5456 f5534014-38df-0310-8fa8-9805f1628bb7