obnox/wireshark/wip.git
22 years agoShow the "negotiable/non-negotiable" flags as such.
guy [Wed, 24 Apr 2002 19:35:52 +0000 (19:35 +0000)]
Show the "negotiable/non-negotiable" flags as such.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5239 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse "tvb_get_ntohieee_float()" to fetch floating-point numbers from the
guy [Wed, 24 Apr 2002 19:26:18 +0000 (19:26 +0000)]
Use "tvb_get_ntohieee_float()" to fetch floating-point numbers from the
packet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5238 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCRLDP support, and assorted byg fixes, from Michael Rozhavsky.
guy [Wed, 24 Apr 2002 19:16:49 +0000 (19:16 +0000)]
CRLDP support, and assorted byg fixes, from Michael Rozhavsky.

Clean up the "Error processing TLV" error messages to

1) indicate the type of TLV

and

2) indicate the type of error.

Clean up white space.

Make routines static if they're not used outside this file.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5237 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd "stamp-h1", for automake 1.6.1, as per Joerg Mayer's suggestion.
guy [Wed, 24 Apr 2002 07:40:37 +0000 (07:40 +0000)]
Add "stamp-h1", for automake 1.6.1, as per Joerg Mayer's suggestion.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5236 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSometimes there is some junk at the end of an ACE so use the size field
tpot [Wed, 24 Apr 2002 07:19:25 +0000 (07:19 +0000)]
Sometimes there is some junk at the end of an ACE so use the size field
within the ACE to work out where the end is.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5235 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded 'invalid security descriptor' error to list of dos errors.
tpot [Wed, 24 Apr 2002 06:18:51 +0000 (06:18 +0000)]
Added 'invalid security descriptor' error to list of dos errors.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5234 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Joerg Mayer: get rid of extra arguments to capture routines.
guy [Wed, 24 Apr 2002 06:03:34 +0000 (06:03 +0000)]
From Joerg Mayer: get rid of extra arguments to capture routines.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5233 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoIf the progress fraction when reading in a file becomes > 1, assume that
guy [Wed, 24 Apr 2002 05:48:43 +0000 (05:48 +0000)]
If the progress fraction when reading in a file becomes > 1, assume that
the file grew while we were reading it, and re-fetch the size and try
again; if it's still > 1, give up and clamp it at 1 so that the GTK+
progress bar code doesn't complain.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5232 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoPass the correct len field to dissect_nt_sec_desc() when dissecting
tpot [Wed, 24 Apr 2002 03:08:49 +0000 (03:08 +0000)]
Pass the correct len field to dissect_nt_sec_desc() when dissecting
PRINTER_INFO_2 and PRINTER_INFO_3 structures.

Added dissector for EnumJobs rpc - not quite finished yet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5231 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoClean up the descriptions of reassembly preferences.
guy [Tue, 23 Apr 2002 19:19:57 +0000 (19:19 +0000)]
Clean up the descriptions of reassembly preferences.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5230 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse the value of "bv_size" as the size of a byte view notebook when
guy [Tue, 23 Apr 2002 06:42:05 +0000 (06:42 +0000)]
Use the value of "bv_size" as the size of a byte view notebook when
creating it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5229 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of unused variables, and mark unused arguments as such.
guy [Tue, 23 Apr 2002 06:25:37 +0000 (06:25 +0000)]
Get rid of unused variables, and mark unused arguments as such.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5228 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of an unused variable.
guy [Tue, 23 Apr 2002 06:06:03 +0000 (06:06 +0000)]
Get rid of an unused variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5227 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of the last global variable.
guy [Tue, 23 Apr 2002 06:01:01 +0000 (06:01 +0000)]
Get rid of the last global variable.

Get rid of "nameAsChar" arguments; get the name from the field itself.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5226 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMake sure that when we save a file, we don't overwrite our capture file
sharpe [Mon, 22 Apr 2002 19:10:33 +0000 (19:10 +0000)]
Make sure that when we save a file, we don't overwrite our capture file
with an empty file.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5225 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoEliminate some unused variables.
guy [Mon, 22 Apr 2002 09:50:54 +0000 (09:50 +0000)]
Eliminate some unused variables.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5224 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrame numbers are unsigned, and 0 is not a valid frame number; make the
guy [Mon, 22 Apr 2002 09:43:03 +0000 (09:43 +0000)]
Frame numbers are unsigned, and 0 is not a valid frame number; make the
frame number arguments, and elements in data structures, unsigned,
display them with "%u" rather than "%d", and use 0, rather than -1, as
"not known".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5223 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd support for DSI packet reassembly.
guy [Mon, 22 Apr 2002 08:50:49 +0000 (08:50 +0000)]
Add support for DSI packet reassembly.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5222 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of some unused variables and arguments.
guy [Mon, 22 Apr 2002 08:14:12 +0000 (08:14 +0000)]
Get rid of some unused variables and arguments.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5221 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix typos.
guy [Mon, 22 Apr 2002 07:45:38 +0000 (07:45 +0000)]
Fix typos.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5220 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdditional PIM hello options support, from Kevin Humphries.
guy [Mon, 22 Apr 2002 07:41:33 +0000 (07:41 +0000)]
Additional PIM hello options support, from Kevin Humphries.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5219 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSupport for NT Rename SMB, from Steven French.
guy [Mon, 22 Apr 2002 07:37:30 +0000 (07:37 +0000)]
Support for NT Rename SMB, from Steven French.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5218 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoSupport for NT Rename SMB, from Steven French.
guy [Mon, 22 Apr 2002 06:26:08 +0000 (06:26 +0000)]
Support for NT Rename SMB, from Steven French.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5217 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of an extra colon.
guy [Mon, 22 Apr 2002 02:08:17 +0000 (02:08 +0000)]
Get rid of an extra colon.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5216 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix "samr_dissect_query_information_alias_reply()" to dissect the
guy [Mon, 22 Apr 2002 02:04:37 +0000 (02:04 +0000)]
Fix "samr_dissect_query_information_alias_reply()" to dissect the
ALIAS_INFO structure before the status.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5215 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoPolish the column prefs a bit. Make the column tile entry and format
gerald [Mon, 22 Apr 2002 02:03:53 +0000 (02:03 +0000)]
Polish the column prefs a bit.  Make the column tile entry and format
menu modify the currently-selected item directly.  Remove the "Change"
button since it's no longer needed.  Make the column list a clist, and
add a column which shows the format.  Make the format option menu not
fill the entire table cell.  Update the man page accordingly.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5214 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix the return value of "dissect_nt_sec_desc()".
guy [Mon, 22 Apr 2002 01:54:51 +0000 (01:54 +0000)]
Fix the return value of "dissect_nt_sec_desc()".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5213 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCorrectly dissect LSA security descriptors, at least as they appear
guy [Mon, 22 Apr 2002 01:07:19 +0000 (01:07 +0000)]
Correctly dissect LSA security descriptors, at least as they appear
inside a Netlogon security descriptor.

Correctly dissect NT security descriptors as they appear inside an LSA
security descriptor (at least as those appear inside a Netlogon security
descriptor) - they get sent over the wire, apparently, as an opaque blob
from the point of view of DCE RPC, at least from one capture I've seen,
they do *not* get sent over the wire in DCE RPC NDR syntax.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5212 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix an error in the "dcerpc_samr_dissectors[]" table.
guy [Mon, 22 Apr 2002 00:09:21 +0000 (00:09 +0000)]
Fix an error in the "dcerpc_samr_dissectors[]" table.

Rename "samr_dissect_enum_dom_alias_rqst()" and
"samr_dissect_enum_dom_alias_reply()" to
"samr_dissect_enum_dom_aliases_rqst()" and
"samr_dissect_enum_dom_aliases_reply()", to match the name of the RPC
that they dissect.

Rename the routines used to dissect the unknown 0x2f requests and replies
along the lines of the names of the routines for other unknown requests
and replies, and change the Info column information in that fashion as
well.

Dissect the USER_INFO structure in the QueryUserInfo response.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5211 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd a hidden length fild for TCP, tcp.len. Also fixed a small type.
sharpe [Sun, 21 Apr 2002 02:57:01 +0000 (02:57 +0000)]
Add a hidden length fild for TCP, tcp.len. Also fixed a small type.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5210 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoOn Windows, include "capture-wpcap.h", to define "has_wpcap".
guy [Sat, 20 Apr 2002 20:29:28 +0000 (20:29 +0000)]
On Windows, include "capture-wpcap.h", to define "has_wpcap".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5209 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoClean up white space.
guy [Sat, 20 Apr 2002 08:07:56 +0000 (08:07 +0000)]
Clean up white space.

Fix the display filter expression generated for protocol tree items
without named fields attached to them; the length defaults to 1 if not
specified in a range expression, so the length should be specified.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5208 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDissect ntstatus codes instead of uint32 for response packets.
tpot [Sat, 20 Apr 2002 07:15:19 +0000 (07:15 +0000)]
Dissect ntstatus codes instead of uint32 for response packets.

Display pretty names in COL_INFO for commonly used functions
(RequestChallenge, Auth2, SamLogon).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5207 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't prime the display filter unless we're re-applying it; otherwise,
guy [Sat, 20 Apr 2002 01:54:27 +0000 (01:54 +0000)]
Don't prime the display filter unless we're re-applying it; otherwise,
we aren't building a protocol tree, and we can't prime the filter
against the tree.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5206 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoBug fix from Frank Singleton.
guy [Fri, 19 Apr 2002 22:23:37 +0000 (22:23 +0000)]
Bug fix from Frank Singleton.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5205 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoOn Windows, don't put the capture preferences item into the
guy [Fri, 19 Apr 2002 20:49:28 +0000 (20:49 +0000)]
On Windows, don't put the capture preferences item into the
"Preferences" dialog box if we couldn't load WinPcap.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5204 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoproto_registrar_get_nth(hfinfo->id) == hfinfo, so use the latter rather
guy [Fri, 19 Apr 2002 10:03:52 +0000 (10:03 +0000)]
proto_registrar_get_nth(hfinfo->id) == hfinfo, so use the latter rather
than the former.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5203 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoInitial support for writing NetXRay 2.x (Windows Sniffer) format
guy [Thu, 18 Apr 2002 21:35:57 +0000 (21:35 +0000)]
Initial support for writing NetXRay 2.x (Windows Sniffer) format
captures, from Olivier Abad.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5202 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Phil Williams: support for looking up fields by name.
guy [Thu, 18 Apr 2002 20:19:10 +0000 (20:19 +0000)]
From Phil Williams: support for looking up fields by name.

Clean up some white space, and one non-extern declaration in
"epan/proto.h".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5201 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoMore LSA updates
sahlberg [Thu, 18 Apr 2002 10:40:30 +0000 (10:40 +0000)]
More LSA updates

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5200 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoRemoved init routine as the dcerpc/smb init is now done in the correct
tpot [Thu, 18 Apr 2002 02:42:43 +0000 (02:42 +0000)]
Removed init routine as the dcerpc/smb init is now done in the correct
location.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5199 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse common policy handle hashing code in packet-dcerpc-nt.c
tpot [Thu, 18 Apr 2002 02:35:45 +0000 (02:35 +0000)]
Use common policy handle hashing code in packet-dcerpc-nt.c

Fix for lsa_open_policy request dissection.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5198 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoCatch attempts to register ett_ values after the array of "tree is
guy [Thu, 18 Apr 2002 00:50:45 +0000 (00:50 +0000)]
Catch attempts to register ett_ values after the array of "tree is
expanded" flags has been allocated.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5197 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd a "proto_register_dcerpc_smb()" which registers ett_ values for
guy [Thu, 18 Apr 2002 00:29:17 +0000 (00:29 +0000)]
Add a "proto_register_dcerpc_smb()" which registers ett_ values for
"packet-dcerpc-nt.c", and registers "dcerpc_smb_init()" as an
initialization routine.  Take the ett_ registration out of the latter
routine, and also take out the "do this only once" stuff.

Get rid of the initialization routines for netlogon, samr, and spoolss;
they just call "dcerpc_smb_init()", which is now an initialization
routine of its own.

The policy hash initialization should be done before every capture, so
it should be done in an initialization routine, and should not do any
"do this only once" stuff.  It should also be called only once before
every capture, rather than 3 times.

The ett_ initialization should, however, be done at the same time all
other ett_ initialization is done - at protocol registration time - so
it should be done in a "proto_register_" routine.

This fixes a bug I saw wherein

1) the tree for Unicode strings was open by default

and

2) if you closed one and then exited, Ethereal would crash.

The problem is that "proto_register_subtree_array()" doesn't expand the
array, it just bumps the number of registered ett_ values; the array is
allocated in "proto_init()".  As such, if you register ett_ values with
"proto_register_subtree_array()" *after* "proto_init()" is called - and,
even for the first capture, initialization routines are called after
"proto_init()" is called - you will get ett_ numbers that go past the
number of elements in the array.

Move the declaration of "ett_nt_unicode_string" to "packet-dcerpc-nt.h",
as it's exported from "packet-dcerpc-nt.c".

Get rid of the declaration of "dcerpc_smb_init()" in
"packet-dcerpc-nt.h", and make it static, as it's no longer called from
outside "packet-dcerpc-nt.c".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5196 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agobugs found when verifying agains muddle generated idl file
sahlberg [Wed, 17 Apr 2002 15:39:27 +0000 (15:39 +0000)]
bugs found when verifying agains muddle generated idl file

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5195 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoBugfixes for LSA dissector and a small change to the security_descriptor dissector...
sahlberg [Wed, 17 Apr 2002 15:11:30 +0000 (15:11 +0000)]
Bugfixes for LSA dissector and a small change to the security_descriptor dissector in packet-smb.c  so we can call it from DCERPC NDR encoded services.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5194 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoTiny bugfix. One element was declared as of the wrong type.
sahlberg [Wed, 17 Apr 2002 13:48:56 +0000 (13:48 +0000)]
Tiny bugfix. One element was declared as of the wrong type.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5193 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDisplay rids for open user, group, alias in COL_INFO.
tpot [Wed, 17 Apr 2002 11:32:24 +0000 (11:32 +0000)]
Display rids for open user, group, alias in COL_INFO.

Give query user info its own dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5192 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoPrettification of SAMR dissector - display short names in COL_INFO.
tpot [Wed, 17 Apr 2002 11:17:43 +0000 (11:17 +0000)]
Prettification of SAMR dissector - display short names in COL_INFO.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5191 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded LSAENUMERATEPRIVILEGESACCOUNT, LSAADDPRIVILEGESTOACCOUNT and LSAREMOVEPRIVILEGE...
sahlberg [Wed, 17 Apr 2002 11:01:38 +0000 (11:01 +0000)]
Added LSAENUMERATEPRIVILEGESACCOUNT, LSAADDPRIVILEGESTOACCOUNT and LSAREMOVEPRIVILEGESFROMACCOUNT function dissectors and support functions to LSA.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5190 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoIn "fragment_add_seq_check()", handle short frames the same way
guy [Wed, 17 Apr 2002 10:59:58 +0000 (10:59 +0000)]
In "fragment_add_seq_check()", handle short frames the same way
regardless of whether they're the first frame we see in a reassembly or
not - put all but the last fragment into the hash table (so subsequent
frames with the same reassembly ID don't get misdissected as
unfragmented frames), return the head of the fragment list for the first
fragment and NULL for all other fragments (so the first fragment gets
dissected as a fragmented packet), and unhash the fragment head from the
reassembly hash table when we see the last fragment.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5189 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded dissection of LSA functions LSALOOKUPPRIVILEGENAME and LSALOOKUPPRIVILEGEVALUE
sahlberg [Wed, 17 Apr 2002 10:41:05 +0000 (10:41 +0000)]
Added dissection of LSA functions LSALOOKUPPRIVILEGENAME and LSALOOKUPPRIVILEGEVALUE

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5188 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdded dissection and support functions for LSAENUMERATEPRIVILEGES
sahlberg [Wed, 17 Apr 2002 10:29:09 +0000 (10:29 +0000)]
Added dissection and support functions for LSAENUMERATEPRIVILEGES
function.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5187 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't try to reassemble short frames - but do still pass them through at
guy [Wed, 17 Apr 2002 10:07:57 +0000 (10:07 +0000)]
Don't try to reassemble short frames - but do still pass them through at
least some of the reassembly mechanism, so we can deal with both bogus
and real last fragment (display the bogus ones as unfragmented frames,
treat the real ones as fragments).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5186 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoChange the way not implemented functions are commented out so thast ethereal
sahlberg [Wed, 17 Apr 2002 09:51:11 +0000 (09:51 +0000)]
Change the way not implemented functions are commented out so thast ethereal
will still print the name of the function even if no dissector for it exists.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5185 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix up the handling of the "fragmented" flag in the "packet_info"
guy [Wed, 17 Apr 2002 09:34:09 +0000 (09:34 +0000)]
Fix up the handling of the "fragmented" flag in the "packet_info"
structure (make it match the way it's done in the IP dissector).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5184 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoRemove some temporary functions from NETLOGON now that the real functions
sahlberg [Wed, 17 Apr 2002 09:32:48 +0000 (09:32 +0000)]
Remove some temporary functions from NETLOGON now that the real functions
exist in LSA.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5183 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoShow the "More Fragments" indicator as such, rather than as a "this is
guy [Wed, 17 Apr 2002 09:30:58 +0000 (09:30 +0000)]
Show the "More Fragments" indicator as such, rather than as a "this is
fragmented" vs. "this is not fragmented" indicator.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5182 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoLSA dissector updates. Adds a lot of LSA functions to the dissector.
sahlberg [Wed, 17 Apr 2002 09:24:09 +0000 (09:24 +0000)]
LSA dissector updates. Adds a lot of LSA functions to the dissector.
Also export dissect-nt-GUID() from netlogon since this structure is common to
other interfaces as well.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5181 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDon't bother with "reassembled_key" structures - just use the
guy [Wed, 17 Apr 2002 08:57:07 +0000 (08:57 +0000)]
Don't bother with "reassembled_key" structures - just use the
"frame_data" structure for the frame as the key structure, and use the
frame number in that field as the key.  (We could be even cheesier and
use the frame number as the key, with casts.)

When we move an entry from the hash table of reassemblies to the hash
table of reassembled packets, free the key structure for the first hash
table.  (This doesn't plug a leak, as they get freed when you
reinitialize the data structures, but it does reduce the memory needed
for them to the amount needed for in-progress reassemblies rather than
the amount needed for all reassemblies.)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5180 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoIn a ChangeHosts request, display 4-byte Internet addresses as IPv4
guy [Wed, 17 Apr 2002 08:33:09 +0000 (08:33 +0000)]
In a ChangeHosts request, display 4-byte Internet addresses as IPv4
addresses.

When showing a list of keysyms, build the text representation of the
item for the list by appending keysyms to the text of the item as
dissected; this fixes a bug in the display of those keysums, and means
that we don't build a text string with the keysyms if we're not
generating the text representation.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5179 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix up the offsets in the list of segments.
guy [Wed, 17 Apr 2002 08:30:17 +0000 (08:30 +0000)]
Fix up the offsets in the list of segments.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5178 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd a separate hash table to the reassembly code for reassembled
guy [Wed, 17 Apr 2002 08:25:05 +0000 (08:25 +0000)]
Add a separate hash table to the reassembly code for reassembled
packets, using the reassembly ID and the frame number of the final frame
as the key.  There is no guarantee that reassembly IDs won't be reused,
even when talking between the same source and destination address; if,
once reassembly is complete, the "fragment_data" structure is moved to
the latter hash table, this will keep reused reassembly IDs from causing
mis-reassembly.

Add a routine "fragment_add_seq_check()", which

if a fragment has the "more fragments" flag not set but is the
first fragment of a reassembly, treats that as a non-fragmented
frame, allocating a "fragment_data" structure for the reassembly
but not attaching any fragment to it, and adding it to a
reassembled packet list;

if a packet has been reassembled, removes it from the table of
reassemblies and moves it to the table of reassembled packets;

if the frame's been seen already, looks it up in the table of
reassembled packets rather than the table of reassemblies.

Add reassembly support for fragmented 802.11 frames.  Use
"fragment_add_seq_check()" to cope with the fact that some
hardware+drivers apparently hands us reassembled frames with a non-zero
fragment number and the "more fragments" bit clear (as if it puts the
802.11 header of the *last* fragment onto the reassembled data).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5177 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse policy handle hash code in DCERPC/SMB SAMR dissector.
tpot [Wed, 17 Apr 2002 07:52:26 +0000 (07:52 +0000)]
Use policy handle hash code in DCERPC/SMB SAMR dissector.

Start to move some common stuff into packet-dcerpc-nt.[ch]

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5176 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoRename the "frag_offset" argument of "fragment_add_seq()" to
guy [Wed, 17 Apr 2002 04:54:30 +0000 (04:54 +0000)]
Rename the "frag_offset" argument of "fragment_add_seq()" to
"frag_number", to make it clearer that it's not a byte offset but a
sequence number.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5175 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Michael Tuexen: add missing support for the T-Bit in ABORT chunks.
guy [Tue, 16 Apr 2002 19:58:53 +0000 (19:58 +0000)]
From Michael Tuexen: add missing support for the T-Bit in ABORT chunks.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5174 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd support for desegmentation of X11 messages.
guy [Tue, 16 Apr 2002 09:42:31 +0000 (09:42 +0000)]
Add support for desegmentation of X11 messages.

Try to check whether the first request we see is an initial connection
request, and dissect it as such if so.

Get rid of the global "next_offset" variable.

Check for buffer overflows when building the summary item for a list
of keysyms.

Display BASE_DEC items in decimal, not hex.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5173 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFix more Politecnico di Torino links.
gerald [Tue, 16 Apr 2002 03:00:54 +0000 (03:00 +0000)]
Fix more Politecnico di Torino links.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5172 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDo the standard "next entry offset" stuff in NT NOTIFY replies, so as to
guy [Tue, 16 Apr 2002 02:42:24 +0000 (02:42 +0000)]
Do the standard "next entry offset" stuff in NT NOTIFY replies, so as to

1) handle inter-entry padding;

2) quit when the "next entry offset" is 0 (that being the signal
   for the last entry).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5171 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDisplay non-zero return codes in COL_INFO.
tpot [Tue, 16 Apr 2002 02:02:04 +0000 (02:02 +0000)]
Display non-zero return codes in COL_INFO.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5170 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Michael Tuexen:
guy [Mon, 15 Apr 2002 21:53:55 +0000 (21:53 +0000)]
From Michael Tuexen:

- support for current SCTP checksum
- fix a bug for the -S parameter
- fix a bug in the displayed output for the TSN and PPI.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5169 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoASAP support, from Michael Tuexen.
guy [Mon, 15 Apr 2002 21:47:59 +0000 (21:47 +0000)]
ASAP support, from Michael Tuexen.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5168 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Jason Lango: a hack to get SDES length correct on QT packets.
guy [Mon, 15 Apr 2002 21:25:05 +0000 (21:25 +0000)]
From Jason Lango: a hack to get SDES length correct on QT packets.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5167 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Simharajan Srishylam:
guy [Mon, 15 Apr 2002 21:12:56 +0000 (21:12 +0000)]
From Simharajan Srishylam:

In capability element, length is for the value (excluding type &
len field) not for the whole element.  Results in packets not
being parsed correctly.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5166 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Ronnie Sahlberg: dissect_mount_dirpath_call()
girlich [Mon, 15 Apr 2002 08:55:03 +0000 (08:55 +0000)]
From Ronnie Sahlberg: dissect_mount_dirpath_call()
The sprintf() thingy failed to properly null terminate the string thus
causing damage.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5165 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUse "CLEANUP_PUSH()" and "CLEANUP_CALL_AND_POP()" to plug potential
guy [Mon, 15 Apr 2002 00:10:26 +0000 (00:10 +0000)]
Use "CLEANUP_PUSH()" and "CLEANUP_CALL_AND_POP()" to plug potential
memory leaks.

Put "Requests", not "X11 request", in the Info column for packets to the
server - we already know it's X11, and there may be more than one
request in the packet.

Put "Replies/events", not "X11 event", in the Info column for packets
from the server - we already know it's X11, and there may be more than
one message, and the messages might be replies rather than events.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5164 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Joerg Mayer: get rid of some unused variables and arguments.
guy [Sun, 14 Apr 2002 23:22:22 +0000 (23:22 +0000)]
From Joerg Mayer: get rid of some unused variables and arguments.

Use "tvb_get_ntohs()" to fetch the checksum from a VJ compressed packet,
rather than doing the ntoh by hand.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5163 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Joerg Mayer:
guy [Sun, 14 Apr 2002 23:04:04 +0000 (23:04 +0000)]
From Joerg Mayer:

Declares some variables static.

Creates a new include file packet-rsvp.h, and make use of it
(change some extern decls to #inlcude).

Move the file packet-pgm.h into packet-pgm.c as it is not used
by anything outside packet-pgm.c.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5162 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Didier Gautheron: make the "code" field an signed decimal number.
guy [Sun, 14 Apr 2002 22:56:02 +0000 (22:56 +0000)]
From Didier Gautheron: make the "code" field an signed decimal number.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5161 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoM2UA support, from Michael Tuexen.
guy [Sun, 14 Apr 2002 22:52:49 +0000 (22:52 +0000)]
M2UA support, from Michael Tuexen.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5160 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of another global variable.
guy [Sun, 14 Apr 2002 22:50:07 +0000 (22:50 +0000)]
Get rid of another global variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5159 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDisplay Boolean bitfields that control whether other fields show up in a
guy [Sun, 14 Apr 2002 22:08:51 +0000 (22:08 +0000)]
Display Boolean bitfields that control whether other fields show up in a
message regardless of whether they're set or clear, so you can see not
only what flags are set, but also what flags aren't set.  (The previous
checkin only affected bitfields that don't control whether other fields
show up in a message.)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5158 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDisplay Boolean bitfields regardless of whether they're set or clear, so
guy [Sun, 14 Apr 2002 21:44:48 +0000 (21:44 +0000)]
Display Boolean bitfields regardless of whether they're set or clear, so
you can see not only what flags are set, but also what flags aren't set.
Don't show reserved bits unless they're set, though.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5157 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate wiretapped mirror links.
gerald [Sun, 14 Apr 2002 20:06:04 +0000 (20:06 +0000)]
Update wiretapped mirror links.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5156 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoChange "http://netgroup-mirror.ethereal.com/winpcap" URLs to
gerald [Sun, 14 Apr 2002 19:24:26 +0000 (19:24 +0000)]
Change "netgroup-mirror.ethereal.com/winpcap" URLs to
"http://winpcap.mirror.ethereal.com/", since that's how we're mirroring
the Politecnico di Torino sites now.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5155 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd an ett_ variable to the "ett[]" array; it was missing.
guy [Sat, 13 Apr 2002 22:34:17 +0000 (22:34 +0000)]
Add an ett_ variable to the "ett[]" array; it was missing.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5154 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate to reflect the replacement of "--enable-zlib"/"--disable-zlib"
guy [Sat, 13 Apr 2002 22:11:06 +0000 (22:11 +0000)]
Update to reflect the replacement of "--enable-zlib"/"--disable-zlib"
with "--with-zlib"/"--without-zlib", and the added support for
"--with-zlib=DIR".

Update to reflect the replacement of "--disable-snmp" with
"--without-ucdsnmp".

Note "--without-pcap" is what you'd use to build on a system without
libpcap.

Fix some typos.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5153 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoGet rid of another global variable.
guy [Sat, 13 Apr 2002 20:16:09 +0000 (20:16 +0000)]
Get rid of another global variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5152 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Jouni Malinen:
guy [Sat, 13 Apr 2002 18:41:47 +0000 (18:41 +0000)]
From Jouni Malinen:

Fix offset of challenge element in 802.11 dissector.
Show fragmented 802.11 frames as fragments.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5151 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Michael Tuexen:
guy [Sat, 13 Apr 2002 18:36:24 +0000 (18:36 +0000)]
From Michael Tuexen:

The -S option has been changed such that the payload protocol
identifier can be specified instead of the verification tag.

The error messages for -s -S have been corrected.

Update the text2pcap man page to reflect the "-S" change.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5150 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Aamer Akhter: fix initialization of ett_slarp in CHDLC dissector.
guy [Sat, 13 Apr 2002 09:22:39 +0000 (09:22 +0000)]
From Aamer Akhter: fix initialization of ett_slarp in CHDLC dissector.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5149 f5534014-38df-0310-8fa8-9805f1628bb7

22 years ago"pinfo->pseudo_header" might be null, even for link-layer types such as
guy [Sat, 13 Apr 2002 00:02:55 +0000 (00:02 +0000)]
"pinfo->pseudo_header" might be null, even for link-layer types such as
WTAP_ENCAP_CHDLC; check whether it's null before using it.

Use FROM_DCE rather than 0x80 to check the "this is DCE->DTE" bit in
"x25.flags".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5148 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoAdd (untested) routines to fetch IEEE single-precision and
guy [Fri, 12 Apr 2002 23:25:24 +0000 (23:25 +0000)]
Add (untested) routines to fetch IEEE single-precision and
double-precision floating-point numbers, in big-endian and little-endian
format (hopefully there aren't any middle-endian formats; if there are,
we'll have to add them), from a tvbuff, and to return floats (for
single-precision) and doubles (for double-precision).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5147 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoBug fix from Didier Gautheron.
guy [Fri, 12 Apr 2002 01:18:47 +0000 (01:18 +0000)]
Bug fix from Didier Gautheron.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5146 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Pasi Eronen: support for the PCT record layer, and fixes for a
guy [Thu, 11 Apr 2002 09:43:22 +0000 (09:43 +0000)]
From Pasi Eronen: support for the PCT record layer, and fixes for a
couple of bugs in the TCP desegmentation routines.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5145 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Joerg Mayer: get rid of some unused arguments, and make some
guy [Thu, 11 Apr 2002 09:38:03 +0000 (09:38 +0000)]
From Joerg Mayer: get rid of some unused arguments, and make some
routines not used outside the file in which they're defined static.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5144 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Pasi Eronen: add some items for the cipher suites for Microsoft's
guy [Thu, 11 Apr 2002 09:20:33 +0000 (09:20 +0000)]
From Pasi Eronen: add some items for the cipher suites for Microsoft's
old PCT protocol.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5143 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoFrom Tom Uijldert: create a subtree with "proto_item_add_subtree()",
guy [Thu, 11 Apr 2002 09:10:47 +0000 (09:10 +0000)]
From Tom Uijldert: create a subtree with "proto_item_add_subtree()",
rather than just using an item as a tree.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5142 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoUpdate the Win32 nmakefile to include "packet-lmp.c".
guy [Thu, 11 Apr 2002 09:01:52 +0000 (09:01 +0000)]
Update the Win32 nmakefile to include "packet-lmp.c".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5141 f5534014-38df-0310-8fa8-9805f1628bb7

22 years agoDo the "follow TCP stream" stuff before calling the subdissector, so
guy [Thu, 11 Apr 2002 08:59:43 +0000 (08:59 +0000)]
Do the "follow TCP stream" stuff before calling the subdissector, so
that it gets done even if the subdissector throws an exception (and so
that, if the subdissector modifies the addresses or ports, we still hand
the right values to "reassemble_tcp()").

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@5140 f5534014-38df-0310-8fa8-9805f1628bb7