obnox/wireshark/wip.git
13 years agoUpdate to V9.1.0 (2010-03)
etxrab [Thu, 13 May 2010 07:41:35 +0000 (07:41 +0000)]
Update to V9.1.0 (2010-03)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32779 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdate to V9.1.0 (2010-03)
etxrab [Thu, 13 May 2010 07:40:31 +0000 (07:40 +0000)]
Update to V9.1.0 (2010-03)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32778 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoCreate a new REP_NA value for fields where there are no representations
guy [Thu, 13 May 2010 00:20:40 +0000 (00:20 +0000)]
Create a new REP_NA value for fields where there are no representations
from which to choose; use that for protocol fields in some protocols
(modify the CORBA generator to use it, and manually update the generated
CORBA dissectors accordingly).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32777 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoInstead of using private #defines for the last argument to
guy [Wed, 12 May 2010 23:45:16 +0000 (23:45 +0000)]
Instead of using private #defines for the last argument to
proto_tree_add_item(), use the new REP_BIG_ENDIAN and REP_LITTLE_ENDIAN
values.

Use those #defines in variables that represent the byte order, as well.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32776 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd REP_{BIG,LITTLE}_ENDIAN #defines, for possible future use in
guy [Wed, 12 May 2010 22:35:56 +0000 (22:35 +0000)]
Add REP_{BIG,LITTLE}_ENDIAN #defines, for possible future use in
proto_tree_add_item() and field definitions, and for current use if
somebody finds it more self-documenting (some dissectors already have
their own #defines for that purpose).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32775 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoDon't set the sensitivity of the Open button based on whether we can
guy [Wed, 12 May 2010 19:44:23 +0000 (19:44 +0000)]
Don't set the sensitivity of the Open button based on whether we can
open the currently-selected file; that button is also used to select the
file or directory typed in the location bar.  This should fix bug 1791.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32774 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago(Trivial) Use consistent indentation.
wmeier [Wed, 12 May 2010 17:34:11 +0000 (17:34 +0000)]
(Trivial) Use consistent indentation.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32773 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Dirk via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4758 :
morriss [Wed, 12 May 2010 13:24:42 +0000 (13:24 +0000)]
From Dirk via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4758 :

The HTTP dissector uses strtoll() to convert the Content-Length string into a
64bit variable. But that string can contain a number larger (or less) than
64bit, which lets the strtoll() return INT_MAX (or INT_MIN). strtoll() then
indicates this with errno==ERANGE.

The attachted patch checks if errno is set this way and then treats that HTTP
Content-Length as unspecified, since we don't know the real size.

I haven't checked other occurences of strtoll() in the HTTP dissector if they
could benefit from the errno check, or if other dissectors could use it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32772 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Tamas Regos:
etxrab [Wed, 12 May 2010 10:31:41 +0000 (10:31 +0000)]
From Tamas Regos:
WSLUA improvement.

The existing ProtoField.bool looks like the following:
ProtoField.bool(abbr, [name], [desc])

But checking any protocol dissector with bool protofield, it can be seen that
in C code we have more options than thru the WSLUA interface.

E.g.: {&hf_gtp_qos_sig_ind,{"Signalling Indication", "gtp.sig_ind", FT_BOOLEAN,
8, TFS(&gtp_sig_ind), GTP_EXT_QOS_SIG_IND_MASK, NULL, HFILL}},

So I've extended ProtoField.bool to have more options like this:
ProtoField.bool(abbr, [name], [bitfield], [true_false_string], [mask], [desc])

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4700

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32771 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Tamas Regos:
etxrab [Wed, 12 May 2010 08:08:01 +0000 (08:08 +0000)]
From Tamas Regos:
Whitspace changes

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32770 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdate to V9.2.0 (2010-03)
etxrab [Wed, 12 May 2010 05:51:54 +0000 (05:51 +0000)]
Update to V9.2.0 (2010-03)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32769 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Chris Maynard via bug 4722:
gerald [Wed, 12 May 2010 04:03:07 +0000 (04:03 +0000)]
From Chris Maynard via bug 4722:

When I submitted the USB and PPP changes, I had not previously tested with a
full insertion of a particular USB device.  Now that I have, I've found that
what used to be reported as an unknown interface class is now reported as a
vendor specific interface class.  Thus, in order for PPP/USB dissection to
work, the ppp dissector must register for that class as well.  The attached
trivial patch does just that.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32768 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoInitialize the GValues without triggering any warnings
dimeg [Tue, 11 May 2010 21:50:54 +0000 (21:50 +0000)]
Initialize the GValues without triggering any warnings

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32767 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdate display filter scripts with new field types.
jake [Tue, 11 May 2010 21:49:30 +0000 (21:49 +0000)]
Update display filter scripts with new field types.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32766 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoStraighten out field type names.
jake [Tue, 11 May 2010 21:46:17 +0000 (21:46 +0000)]
Straighten out field type names.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32765 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoGrinding through the Operational Bulletins:
dimeg [Tue, 11 May 2010 21:40:33 +0000 (21:40 +0000)]
Grinding through the Operational Bulletins:
SANC and ISPC lists updated up to OB No 949

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32764 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoMake sure pcap_open_live points to something.
gerald [Tue, 11 May 2010 21:09:21 +0000 (21:09 +0000)]
Make sure pcap_open_live points to something.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32763 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoMake the changes compile on Linux also.
jake [Tue, 11 May 2010 20:57:15 +0000 (20:57 +0000)]
Make the changes compile on Linux also.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32762 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoIf we have pcap_open(), and we're *not* opening an rpcap URL, open the
guy [Tue, 11 May 2010 20:19:35 +0000 (20:19 +0000)]
If we have pcap_open(), and we're *not* opening an rpcap URL, open the
device, don't just execute whatever comes after the open code as an else
clause.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32761 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Yaniv Kaul: Fix errors found by clang static code analyzer and add some consts.
wmeier [Tue, 11 May 2010 20:14:37 +0000 (20:14 +0000)]
From Yaniv Kaul:  Fix errors found by clang static code analyzer and add some consts.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32760 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoStart to replace deprecated gtk_combo_new() with
etxrab [Tue, 11 May 2010 19:52:40 +0000 (19:52 +0000)]
Start to replace deprecated gtk_combo_new() with
gtk_combo_box_entry_new_text().

(I'll try to get back to this tomorrow)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32759 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Paul J. Metzger: Add support for decoding DIS Electromagnetic Emission packets.
wmeier [Tue, 11 May 2010 19:03:33 +0000 (19:03 +0000)]
From Paul J. Metzger:  Add support for decoding DIS Electromagnetic Emission packets.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32758 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAllow for heuristic dissection of Unicode XML.
jake [Tue, 11 May 2010 19:01:56 +0000 (19:01 +0000)]
Allow for heuristic dissection of Unicode XML.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32757 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoShow version as generated field.
jake [Tue, 11 May 2010 18:04:03 +0000 (18:04 +0000)]
Show version as generated field.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32756 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUse consistent indentation; Whitesapce & formatting cleanup.
wmeier [Tue, 11 May 2010 16:54:55 +0000 (16:54 +0000)]
Use consistent indentation; Whitesapce & formatting cleanup.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32755 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUse consistent indentation; Whitespace & formatting cleanup.
wmeier [Tue, 11 May 2010 15:34:57 +0000 (15:34 +0000)]
Use consistent indentation; Whitespace & formatting cleanup.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32754 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoReflect changes made in SVN #32752
wmeier [Tue, 11 May 2010 15:12:13 +0000 (15:12 +0000)]
Reflect changes made in SVN #32752

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32753 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix handling of pa-data-type KRB5_PA_PAC_REQUEST (& KRB5_PA_S4U2SELF).
wmeier [Tue, 11 May 2010 14:34:16 +0000 (14:34 +0000)]
Fix handling of pa-data-type KRB5_PA_PAC_REQUEST (& KRB5_PA_S4U2SELF).

-Define pa-data-type KRB5_PA_PAC_REQUEST properly so that it is recognized.
  Fixes bug #4752 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4752)
-Also revert definition of  KRB5_PA_S4U2SELF (to be a positive number).
(All of the above reverts part of SVN #31400).

-Display pa-data-type as FT_INT32.
-Display the value for pa-data-type KRB5_PA_PAC_REQUEST as Boolean (not Int).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32752 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Jay Moran via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4697 :
morriss [Tue, 11 May 2010 13:42:13 +0000 (13:42 +0000)]
From Jay Moran via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4697 :

Fix generation of ~/.wireshark-etc/pangorc to fix font issue.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32751 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoReplace deprecated gtk_input_add_full()
etxrab [Tue, 11 May 2010 08:36:16 +0000 (08:36 +0000)]
Replace deprecated gtk_input_add_full()

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32750 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFixwes to 3GPP AVP:s from Tamás Regõs.
etxrab [Tue, 11 May 2010 06:53:03 +0000 (06:53 +0000)]
Fixwes to 3GPP AVP:s from Tamás Regõs.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32749 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd a little more code to avoid not-very-useful blurbs:
morriss [Tue, 11 May 2010 03:53:31 +0000 (03:53 +0000)]
Add a little more code to avoid not-very-useful blurbs:
  - Change spaces in the name to underscores before comparing it to the blurb.
  - Check if the type simply as T_ prepended to the name.
  - Don't put in a blurb of "NULL".

and regenerate the dissectors.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32748 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegenerate a few more of the ASN.1 dissectors
morriss [Tue, 11 May 2010 02:58:27 +0000 (02:58 +0000)]
Regenerate a few more of the ASN.1 dissectors

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32747 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegenerate a few more of the ASN.1 dissectors
morriss [Tue, 11 May 2010 02:51:39 +0000 (02:51 +0000)]
Regenerate a few more of the ASN.1 dissectors

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32746 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegenerate a few more of the ASN.1 dissectors
morriss [Tue, 11 May 2010 02:37:46 +0000 (02:37 +0000)]
Regenerate a few more of the ASN.1 dissectors

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32745 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegenerate a few more of the ASN.1 dissectors
morriss [Tue, 11 May 2010 02:33:30 +0000 (02:33 +0000)]
Regenerate a few more of the ASN.1 dissectors

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32744 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFollow on to rev 32593: apparently delaying the start of resolv_update_cb() isn't...
morriss [Tue, 11 May 2010 02:25:22 +0000 (02:25 +0000)]
Follow on to rev 32593: apparently delaying the start of resolv_update_cb() isn't always enough.  Delaying it further is would require adding the function call to several cases of an already complicated if/then/else + #ifdef/#else, so instead just put in a NULL check before calling gdk_window_invalidate_rect().

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32743 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegenerate a few of the ASN.1 dissectors
morriss [Tue, 11 May 2010 02:13:26 +0000 (02:13 +0000)]
Regenerate a few of the ASN.1 dissectors

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32742 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd new packet list open bugs to the "known bugs" list.
gerald [Mon, 10 May 2010 22:10:59 +0000 (22:10 +0000)]
Add new packet list open bugs to the "known bugs" list.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32741 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdates for 1.4.
gerald [Mon, 10 May 2010 21:58:44 +0000 (21:58 +0000)]
Updates for 1.4.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32740 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix for bug 4720:
jake [Mon, 10 May 2010 21:31:12 +0000 (21:31 +0000)]
Fix for bug 4720:
Assume all fields, except ProducerID, being LE, i.s.o. BE (network order).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32739 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdate the ISPC lists up to ITU Operational Bulletin 940
dimeg [Mon, 10 May 2010 21:04:08 +0000 (21:04 +0000)]
Update the ISPC lists up to ITU Operational Bulletin 940

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32738 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix a gcc -Wshadow warning.
wmeier [Mon, 10 May 2010 16:51:09 +0000 (16:51 +0000)]
Fix a gcc -Wshadow warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32737 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix a gcc -Wshadow warning.
wmeier [Mon, 10 May 2010 16:39:53 +0000 (16:39 +0000)]
Fix a gcc -Wshadow warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32736 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoIndentation & whitespace cleanup (including: "4 space tabs" ==> spaces)
wmeier [Mon, 10 May 2010 15:54:57 +0000 (15:54 +0000)]
Indentation & whitespace cleanup (including: "4 space tabs" ==> spaces)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32735 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix non-libz build.
martinm [Mon, 10 May 2010 12:56:01 +0000 (12:56 +0000)]
Fix non-libz build.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32734 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoBring back "1 min" and "10 min" in IO Graph Tick interval.
stig [Mon, 10 May 2010 10:48:45 +0000 (10:48 +0000)]
Bring back "1 min" and "10 min" in IO Graph Tick interval.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32733 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd missing textify.sh to source distribution
kukosa [Mon, 10 May 2010 06:54:16 +0000 (06:54 +0000)]
Add missing textify.sh to source distribution

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32732 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAllow for proto_tree_add_item() with FT_ABSOLUTE_TIME and FT_RELATIVE_TIME.
jake [Mon, 10 May 2010 06:32:31 +0000 (06:32 +0000)]
Allow for proto_tree_add_item() with FT_ABSOLUTE_TIME and FT_RELATIVE_TIME.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32731 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago[Automatic manuf and enterprise-numbers update for 2010-05-09]
gerald [Sun, 9 May 2010 15:03:37 +0000 (15:03 +0000)]
[Automatic manuf and enterprise-numbers update for 2010-05-09]

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32728 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAs of release 1.5, MIT Kerberos moved krb5.h to krb5/krb5.h. Check both
sfisher [Sun, 9 May 2010 06:33:03 +0000 (06:33 +0000)]
As of release 1.5, MIT Kerberos moved krb5.h to krb5/krb5.h.  Check both
places.  Fix prompted by report on -dev from Jeff Blaine using MIT Kerberos
1.8.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32727 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoClean comments and indentation.
jake [Sun, 9 May 2010 05:40:29 +0000 (05:40 +0000)]
Clean comments and indentation.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32726 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago(Trivial) Fix some indentation.
wmeier [Sat, 8 May 2010 16:33:59 +0000 (16:33 +0000)]
(Trivial) Fix some indentation.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32725 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago(Trivial) Fix a typo & some indentation
wmeier [Sat, 8 May 2010 16:12:29 +0000 (16:12 +0000)]
(Trivial) Fix a typo & some indentation

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32724 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoEnable "Decode As..." for ethertype 0x0000 (fix for bug 4721)
sake [Sat, 8 May 2010 07:55:12 +0000 (07:55 +0000)]
Enable "Decode As..." for ethertype 0x0000 (fix for bug 4721)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32723 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoInclude inet_v6defs.h after include the Windows socket headers, so it
guy [Sat, 8 May 2010 01:37:36 +0000 (01:37 +0000)]
Include inet_v6defs.h after include the Windows socket headers, so it
knows whether AF_INET6 is needed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32722 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoPrune some includes.
guy [Sat, 8 May 2010 01:18:12 +0000 (01:18 +0000)]
Prune some includes.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32721 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoInclude inet_v6defs.h if needed to declare inet_ntop().
guy [Sat, 8 May 2010 01:15:56 +0000 (01:15 +0000)]
Include inet_v6defs.h if needed to declare inet_ntop().

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32720 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd wtap_cleareof().
guy [Sat, 8 May 2010 00:43:23 +0000 (00:43 +0000)]
Add wtap_cleareof().

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32719 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoThe default capture buffer size is, in fact, *nominally* 1MB; however,
guy [Sat, 8 May 2010 00:39:07 +0000 (00:39 +0000)]
The default capture buffer size is, in fact, *nominally* 1MB; however,
libpcap/WinPcap and the capture mechanism atop which they run might
either silently limit the buffer size to a smaller value or raise it to
a higher value - that's the part that's platform-dependent.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32718 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoDon't define err_str twice if building on Win32 with AirPcap support.
guy [Sat, 8 May 2010 00:17:06 +0000 (00:17 +0000)]
Don't define err_str twice if building on Win32 with AirPcap support.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32717 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoZlib has an officially-sanctioned way of clearing EOF when we're tailing
gerald [Fri, 7 May 2010 21:15:24 +0000 (21:15 +0000)]
Zlib has an officially-sanctioned way of clearing EOF when we're tailing
a file.  Use it.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32716 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoEOF in zlib 1.2.5 seems to be sticky. When we're tailing a file and we
gerald [Fri, 7 May 2010 19:45:47 +0000 (19:45 +0000)]
EOF in zlib 1.2.5 seems to be sticky. When we're tailing a file and we
reach EOF, zlib's file handle seems to stay at EOF even when more data
is appended to the file. Add a check for 1.2.5 which calls gzseek in
order to unset EOF. Fixes bugs 4708 and 4748.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32715 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAs with the list of data link types, so with the list of interfaces; move
guy [Fri, 7 May 2010 19:24:32 +0000 (19:24 +0000)]
As with the list of data link types, so with the list of interfaces; move
the code to print the machine-readable format into dumpcap, and have the
code in capture_opts.c just print the human-readable format.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32714 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUpdate 3GPP AVP codes.
etxrab [Fri, 7 May 2010 14:25:16 +0000 (14:25 +0000)]
Update 3GPP AVP codes.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32713 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoRegister a dissector table for dissecting Ericsson AVP:s.
etxrab [Fri, 7 May 2010 11:08:56 +0000 (11:08 +0000)]
Register a dissector table for dissecting Ericsson AVP:s.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32712 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd routines vfprintf_stderr() and fprintf_stderr() to print to the
guy [Fri, 7 May 2010 08:40:02 +0000 (08:40 +0000)]
Add routines vfprintf_stderr() and fprintf_stderr() to print to the
standard error and, in Wireshark on Windows, create a console if
necessary.  Have the cmdarg_err routines use them.

Use *fprintf_stderr() to print the output of -L, rather than using
cmdarg_err_cont(), so that we don't get extra newlines in the output (it
should look similar to the output of tcpdump).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32711 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFor TShark and Wireshark, get the list of link-layer types for an
guy [Fri, 7 May 2010 08:06:25 +0000 (08:06 +0000)]
For TShark and Wireshark, get the list of link-layer types for an
interface by running dumpcap, so that if you need privileges to open an
interface, and dumpcap has those privileges, neither TShark nor
Wireshark need them.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32710 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoSet default seconds type in rawshark and dftest.
stig [Fri, 7 May 2010 06:35:17 +0000 (06:35 +0000)]
Set default seconds type in rawshark and dftest.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32709 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago-I is now a valid TShark option (at least if you have libpcap 1.x).
guy [Fri, 7 May 2010 05:59:32 +0000 (05:59 +0000)]
-I is now a valid TShark option (at least if you have libpcap 1.x).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32708 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago-B is no longer Windows-only.
guy [Fri, 7 May 2010 02:00:46 +0000 (02:00 +0000)]
-B is no longer Windows-only.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32707 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd monitor mode support to Wireshark *on the command line*; support
guy [Fri, 7 May 2010 01:55:13 +0000 (01:55 +0000)]
Add monitor mode support to Wireshark *on the command line*; support
through the GUI requires more work.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32706 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoOops, -B disappeared from the list of dumpcap options in the change to
guy [Fri, 7 May 2010 01:50:22 +0000 (01:50 +0000)]
Oops, -B disappeared from the list of dumpcap options in the change to
support multiple, err, optional options.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32705 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd monitor mode support to TShark.
guy [Fri, 7 May 2010 01:46:38 +0000 (01:46 +0000)]
Add monitor mode support to TShark.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32704 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoHandle -I in the options processing.
guy [Fri, 7 May 2010 01:25:53 +0000 (01:25 +0000)]
Handle -I in the options processing.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32703 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoBeginnings of monitor mode support with libpcap 1.x.
guy [Fri, 7 May 2010 01:22:33 +0000 (01:22 +0000)]
Beginnings of monitor mode support with libpcap 1.x.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32702 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoInstead, say that the default is platform-dependent.
guy [Fri, 7 May 2010 00:28:42 +0000 (00:28 +0000)]
Instead, say that the default is platform-dependent.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32701 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoNow that we support -B on various UN*X platforms as well as Windows, we
guy [Fri, 7 May 2010 00:16:52 +0000 (00:16 +0000)]
Now that we support -B on various UN*X platforms as well as Windows, we
can no longer state what the default is (it's platform-dependent).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32700 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Jouni Malinen via bug 4713:
gerald [Fri, 7 May 2010 00:13:33 +0000 (00:13 +0000)]
From Jouni Malinen via bug 4713:

The 0x80 bit in the Action Category field indicates that the
transmitter is reporting an unrecognized category (or somehow
incorrect frame). Rest of the frame body is identical to the original
Action frame, so we should handle dissecting of these just like with
the category without the 0x80 bit.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32699 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoOur default target platform is still win32.
gerald [Thu, 6 May 2010 23:58:18 +0000 (23:58 +0000)]
Our default target platform is still win32.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32698 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoSet the timestamp seconds type to TS_SECONDS_DEFAULT at startup so we
gerald [Thu, 6 May 2010 23:51:37 +0000 (23:51 +0000)]
Set the timestamp seconds type to TS_SECONDS_DEFAULT at startup so we
don't abort.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32697 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Hadar Shoham via bug 4750:
gerald [Thu, 6 May 2010 23:34:56 +0000 (23:34 +0000)]
From Hadar Shoham via bug 4750:

1. add docsis3.0 support in bootp option 60
2. change to text option 123 (Cable lab)
3. change to text option 43 sub option 8 (OUI)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32696 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoJust check for pcap_create(); it first appeared in libpcap 1.0.0, and
guy [Thu, 6 May 2010 23:33:41 +0000 (23:33 +0000)]
Just check for pcap_create(); it first appeared in libpcap 1.0.0, and
pcap_set_buffer_size() did as well, so there aren't any libpcap releases
with pcap_create() but not pcap_set_buffer_size().

Only do one check for pcap_create.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32695 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFix compilation.
gerald [Thu, 6 May 2010 23:29:55 +0000 (23:29 +0000)]
Fix compilation.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32694 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoUse consistent indentation & whitespace.
wmeier [Thu, 6 May 2010 21:16:31 +0000 (21:16 +0000)]
Use consistent indentation & whitespace.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32693 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFrom Mathieu Parent:
jake [Thu, 6 May 2010 19:16:45 +0000 (19:16 +0000)]
From Mathieu Parent:
* Added LineInstance and CallId to keypadButton-, stimulus-, offHook-, onHook-,
  startTone-, stopTone-, setRingerMessage
* Added RingMode to setRingerMessage
* Added displayName to LineStatMessage

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32692 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agotvbparse_len_left does not seem to exist in tvbparse.c
etxrab [Thu, 6 May 2010 19:15:25 +0000 (19:15 +0000)]
tvbparse_len_left does not seem to exist in tvbparse.c

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32691 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFollow up for revision 32670.
jake [Thu, 6 May 2010 18:41:23 +0000 (18:41 +0000)]
Follow up for revision 32670.
Straighten out is_acn() function.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32690 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoCleanup and export the TVB parser.
jake [Thu, 6 May 2010 18:37:47 +0000 (18:37 +0000)]
Cleanup and export the TVB parser.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32689 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoChecking in Stigs changes from
etxrab [Thu, 6 May 2010 18:34:30 +0000 (18:34 +0000)]
Checking in Stigs changes from
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=475
BUT not activating the check for
pcap_create()
pcap_set_buffer_size()
This should make it possible to build with support for setting the buffersize if not capturing 802.11 traffic.

The code for handling the 'B' option should be OK in any case.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32688 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoCheck for pcap_create
etxrab [Thu, 6 May 2010 15:39:08 +0000 (15:39 +0000)]
Check for pcap_create
Using pcap create and pcap_activate should make it possible
to set the capture buffer size on Linux systems as well as Windows.
Help to implement it would be apreciated :-)

Ref:
http://seclists.org/tcpdump/2009/q3/151

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32687 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdd PPID 28 IRCP
etxrab [Thu, 6 May 2010 12:54:43 +0000 (12:54 +0000)]
Add PPID 28  IRCP

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32686 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoMoved command line option for seconds type to -u.
stig [Thu, 6 May 2010 12:31:24 +0000 (12:31 +0000)]
Moved command line option for seconds type to -u.
Added this option to tshark.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32685 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoSimplified hour_min_sec calculations.
stig [Thu, 6 May 2010 11:25:15 +0000 (11:25 +0000)]
Simplified hour_min_sec calculations.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32684 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoAdded an option to display seconds as hours, minutes and seconds
stig [Thu, 6 May 2010 10:32:59 +0000 (10:32 +0000)]
Added an option to display seconds as hours, minutes and seconds
in the packet list, on this format: "1h 2m 3.456s".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32683 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoCalculate correct PDU lenght if the per_length_determinant is one byte long.
etxrab [Wed, 5 May 2010 19:22:28 +0000 (19:22 +0000)]
Calculate correct PDU lenght if the per_length_determinant is one byte long.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32680 f5534014-38df-0310-8fa8-9805f1628bb7

13 years ago- Remove check_col()
etxrab [Wed, 5 May 2010 17:22:40 +0000 (17:22 +0000)]
- Remove check_col()
- only read method string once.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32677 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoTry to avoid the user confusion reported in
morriss [Wed, 5 May 2010 14:29:55 +0000 (14:29 +0000)]
Try to avoid the user confusion reported in
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3477 by not using blurbs
that look like abbreviations (filter strings).

While we're at it try to avoid giving blurbs that are identical (or nearly so)
to the field name.

Regenerate a couple of dissectors like this to prove out the idea.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32673 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoH.225.0 updated to version 7 (2009-12)
kukosa [Wed, 5 May 2010 13:14:41 +0000 (13:14 +0000)]
H.225.0 updated to version 7 (2009-12)

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32672 f5534014-38df-0310-8fa8-9805f1628bb7

13 years agoFile updated from ASN.1 database where the bug in ASN.1 definition has been fixed...
kukosa [Wed, 5 May 2010 10:29:23 +0000 (10:29 +0000)]
File updated from ASN.1 database where the bug in ASN.1 definition has been fixed on request

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32671 f5534014-38df-0310-8fa8-9805f1628bb7