16 years agoFrom Georg von Zezschwitz: don't pass segments other than the first
guy [Tue, 29 Jul 2003 22:02:38 +0000 (22:02 +0000)]
From Georg von Zezschwitz: don't pass segments other than the first
segment of a segmented invoke or result to subdissectors.

Show the payload of fragments other than the one that finishes

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8100 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAs suggested by Georg von Zezschwitz, check whether all the bytes of the
guy [Tue, 29 Jul 2003 21:30:32 +0000 (21:30 +0000)]
As suggested by Georg von Zezschwitz, check whether all the bytes of the
URI are present before processing it, to catch bogus length values.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8099 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse GLib's macros for converting from host byte order to little-endian.
guy [Tue, 29 Jul 2003 20:50:39 +0000 (20:50 +0000)]
Use GLib's macros for converting from host byte order to little-endian.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8098 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoClean up argument names.
guy [Tue, 29 Jul 2003 20:49:32 +0000 (20:49 +0000)]
Clean up argument names.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8097 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse GLib's macros for converting from host byte order to little-endian.
guy [Tue, 29 Jul 2003 20:41:19 +0000 (20:41 +0000)]
Use GLib's macros for converting from host byte order to little-endian.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8096 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoDon't free "wdh->dump.opaque" in the close routine - "wtap_dump_close()"
guy [Tue, 29 Jul 2003 20:30:00 +0000 (20:30 +0000)]
Don't free "wdh->dump.opaque" in the close routine - "wtap_dump_close()"
does it for you.

"wdh->dump.opaque" should never be null, so unconditionally call

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8095 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse "guint16" and "guint32" for items in data records, rather than
guy [Tue, 29 Jul 2003 20:26:34 +0000 (20:26 +0000)]
Use "guint16" and "guint32" for items in data records, rather than
"unsigned short", "unsigned int" (or "int", as the items appear to be
unsigned), or "unsigned long".

Convert data to and from the appropriate byte order.

Don't free the private data structure in the dumper's close routine -
"wtap_dump_close()" does that for you.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8094 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Thierry Martin: support for reading files from Accellent 5Views LAN
guy [Tue, 29 Jul 2003 19:42:01 +0000 (19:42 +0000)]
From Thierry Martin: support for reading files from Accellent 5Views LAN

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8093 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agofix minor bugs in h245 decoding
sahlberg [Tue, 29 Jul 2003 08:59:14 +0000 (08:59 +0000)]
fix minor bugs in h245 decoding

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8092 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUpdate PER so that the bit that indicates whether an extension is encoded or not
sahlberg [Tue, 29 Jul 2003 07:57:22 +0000 (07:57 +0000)]
Update PER so that the bit that indicates whether an extension is encoded or not
is displayed in the tree for CHOICE constructs when internal PER fields are displayed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8091 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUpdate to RPC, prettiry the presentation of duplicates.
sahlberg [Tue, 29 Jul 2003 07:30:58 +0000 (07:30 +0000)]
Update to RPC,  prettiry the presentation of duplicates.
Only cosmetic changes, no functionality change.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8090 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoupdate to PER to decode PrintableString properly
sahlberg [Tue, 29 Jul 2003 07:25:14 +0000 (07:25 +0000)]
update to PER to decode PrintableString properly

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8089 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoThe NetInfo parent server address is an IPv4 address, and the NetInfo
guy [Tue, 29 Jul 2003 00:35:55 +0000 (00:35 +0000)]
The NetInfo parent server address is an IPv4 address, and the NetInfo
parent server tag is a string.

Also, it's "NetInfo", not "Netinfo".

Clean up white space.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8088 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUpdates to the MEGACO plugin so that it will call the H.245 dissector for some
sahlberg [Sat, 26 Jul 2003 04:51:08 +0000 (04:51 +0000)]
Updates to the MEGACO plugin so that it will call the H.245 dissector for some
instancews where megaco encapsulates h.245

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8087 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoGet rid of carriage returns - some compilers don't like them.
guy [Fri, 25 Jul 2003 17:57:09 +0000 (17:57 +0000)]
Get rid of carriage returns - some compilers don't like them.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8086 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoRemove some warnings from gcc.
gram [Fri, 25 Jul 2003 04:17:37 +0000 (04:17 +0000)]
Remove some warnings from gcc.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8085 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix signed/unsigned comparison warnings.
gram [Fri, 25 Jul 2003 04:11:51 +0000 (04:11 +0000)]
Fix signed/unsigned comparison warnings.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8084 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd to the fundamental types passed between the scanner and the parser.
gram [Fri, 25 Jul 2003 03:44:05 +0000 (03:44 +0000)]
Add to the fundamental types passed between the scanner and the parser.
Besides "STRING", there is now "UNPARSED_STRING", where the distinction
is that "STRING" was a double-quoted string and "UNPARSED_STRING" is just
a sequence of characters that the scanner didn't know how to scan/parse,
so it's up to the Ftype to parse it.

This gives us more flexibility and prepares the dfilter parsing engine
for the upcoming addition of the "contains" operator.

In the process of doing this, I also re-did the double-quoted string
support in the scanner, so that instead of the naively-simple support we
used to have, double-quoted strings now can have embedded dobule-quotes,
embedded octal sequences, and embedded hexadecimal sequences:
    "\""    embedded double-quote
    "\110"  embedded octal
    "\x48"  embedded hex

Enhance the dfilter unit test script to be able to run a single collection
of tests instead of having to run all of them all the time.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8083 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Lars Roland: add a preference to control whether, in the TCP
guy [Thu, 24 Jul 2003 21:11:20 +0000 (21:11 +0000)]
From Lars Roland: add a preference to control whether, in the TCP
dissector, heuristic dissectors should be checked before, or after,
dissectors for specific port numbers.

Add a similar preference for UDP.

Clean up white space.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8082 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Markus Seehofer: check the correct byte (the second byte, not the
guy [Thu, 24 Jul 2003 20:46:26 +0000 (20:46 +0000)]
From Markus Seehofer: check the correct byte (the second byte, not the
first byte) in a host membership query to distinguish between IGMPv1 and

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8081 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Jean-Baptiste Marchand: add descriptions of permissions for
guy [Thu, 24 Jul 2003 20:33:22 +0000 (20:33 +0000)]
From Jean-Baptiste Marchand: add descriptions of permissions for
SAM_SERVER and SAM_USER objects in SAMR.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8080 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoInitial Laplink support, from Brad Hards.
guy [Thu, 24 Jul 2003 20:22:50 +0000 (20:22 +0000)]
Initial Laplink support, from Brad Hards.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8079 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoRemove an extra comma.
gerald [Thu, 24 Jul 2003 01:41:34 +0000 (01:41 +0000)]
Remove an extra comma.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8078 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFinal updates for 0.9.14.
gerald [Wed, 23 Jul 2003 23:14:57 +0000 (23:14 +0000)]
Final updates for 0.9.14.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8076 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoBack out the changes made earlier.
gerald [Wed, 23 Jul 2003 20:32:37 +0000 (20:32 +0000)]
Back out the changes made earlier.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8075 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix a bug reported by Dave Nicoson:
jmayer [Wed, 23 Jul 2003 19:38:52 +0000 (19:38 +0000)]
Fix a bug reported by Dave Nicoson:
Igmp v1 membership reports should not be misdetected as v2 reports
(don't confuse the query with the report).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8074 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoMake "--enable-usr-local" disabled by default, as suggested by Joerg Mayer.
gerald [Wed, 23 Jul 2003 18:00:15 +0000 (18:00 +0000)]
Make "--enable-usr-local" disabled by default, as suggested by Joerg Mayer.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8073 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUpdate manuf
jmayer [Wed, 23 Jul 2003 15:13:29 +0000 (15:13 +0000)]
Update manuf

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8072 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUpdate FAQ
jmayer [Wed, 23 Jul 2003 15:11:20 +0000 (15:11 +0000)]
Update FAQ

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8071 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoRemove duplicate targets and circular rules, as pointed out by Guy.
gerald [Wed, 23 Jul 2003 14:33:34 +0000 (14:33 +0000)]
Remove duplicate targets and circular rules, as pointed out by Guy.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8070 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoGive a more detailed message when WSAStartup fails.
guy [Wed, 23 Jul 2003 05:01:15 +0000 (05:01 +0000)]
Give a more detailed message when WSAStartup fails.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8069 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoPrep for the 0.9.14 release
gerald [Wed, 23 Jul 2003 02:06:25 +0000 (02:06 +0000)]
Prep for the 0.9.14 release

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8068 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Greg Morris: code to support searches for text or raw binary data
guy [Tue, 22 Jul 2003 23:08:48 +0000 (23:08 +0000)]
From Greg Morris: code to support searches for text or raw binary data
in a frame in Find Frame.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8067 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Lars Roland: Updates to support linking against Glib 2.2 plus GTK+ 1.3
gerald [Tue, 22 Jul 2003 22:00:38 +0000 (22:00 +0000)]
From Lars Roland: Updates to support linking against Glib 2.2 plus GTK+ 1.3
on Windows.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8066 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix a "make distcheck" failure.
gerald [Tue, 22 Jul 2003 18:37:33 +0000 (18:37 +0000)]
Fix a "make distcheck" failure.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8065 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix a bug in RPC where the RCP_DUP items where not always added to the tree
sahlberg [Tue, 22 Jul 2003 11:51:20 +0000 (11:51 +0000)]
Fix a bug in RPC where the RCP_DUP items where not always added to the tree
and were thus not always filterable.

At the same time, change the dup fields to be placed visibly in the tree and point to the original of the dup.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8064 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd two preferences to control ADNS, one to enable/disable it and one to
gerald [Tue, 22 Jul 2003 03:14:31 +0000 (03:14 +0000)]
Add two preferences to control ADNS, one to enable/disable it and one to
set its concurrency level.  Fix an ADNS queueing bug.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8063 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoDon't assume that, if you've already seen the packet, you can use the
guy [Mon, 21 Jul 2003 21:52:32 +0000 (21:52 +0000)]
Don't assume that, if you've already seen the packet, you can use the
global variables to determine if packets were dropped, because you can't
- packets can be visited in any order.  Instead, attach to packets
preceded by dropped packets protocol data, as a flag that packets were

Re-initialize the global variables when a capture is opened.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8062 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoGet rid of two unused (and empty) value_string tables.
guy [Mon, 21 Jul 2003 21:30:10 +0000 (21:30 +0000)]
Get rid of two unused (and empty) value_string tables.

Make it correctly handle short frames (frames not long enough to have a
4-byte EOF record).

Don't give the "dropped packet" protocol tree item a length, as it
doesn't directly correspond to any data in the packet.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8061 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse "val_to_str()" to translate NDS verb numbers to strings.
guy [Mon, 21 Jul 2003 09:21:53 +0000 (09:21 +0000)]
Use "val_to_str()" to translate NDS verb numbers to strings.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8060 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd some missing entries to "ncp_nds_verb_vals[]".
guy [Mon, 21 Jul 2003 09:18:31 +0000 (09:18 +0000)]
Add some missing entries to "ncp_nds_verb_vals[]".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8059 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Devin Heitmueller: include the authentication padding in the stub
guy [Mon, 21 Jul 2003 09:10:00 +0000 (09:10 +0000)]
From Devin Heitmueller: include the authentication padding in the stub
data when decrypting it, as, at least for NTLMSSP encryption, the stub
*and* the authentication padding are encrypted as a single lump.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8058 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoLook for source files in the current directory first and then in srcdir.
girlich [Mon, 21 Jul 2003 07:05:44 +0000 (07:05 +0000)]
Look for source files in the current directory first and then in srcdir.

This semantic is used in make-reg-dotc (the shell script) as well and it
is needed, if the source directory and the build directory are different.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8057 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse "ncp_nds_verb_vals" for the NDS Verb item.
guy [Sun, 20 Jul 2003 00:37:20 +0000 (00:37 +0000)]
Use "ncp_nds_verb_vals" for the NDS Verb item.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8056 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix a couple of distcheck failures.
gerald [Sat, 19 Jul 2003 22:33:55 +0000 (22:33 +0000)]
Fix a couple of distcheck failures.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8055 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoDisable threads by default with gtk2.
oabad [Sat, 19 Jul 2003 10:59:49 +0000 (10:59 +0000)]
Disable threads by default with gtk2.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8054 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoIn packet_list_button_pressed_cb :
oabad [Sat, 19 Jul 2003 10:25:59 +0000 (10:25 +0000)]
In packet_list_button_pressed_cb :
we must check if the event occured in the clist_window (because the x,y
pixel positions of the event are relative to this window), before
calling gtk_clist_get_selection_info()

Fixes debian bug #199763

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8053 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoexport T38FaxProfile and DataProtocolCapability since these are user in H.225 as...
sahlberg [Sat, 19 Jul 2003 10:25:45 +0000 (10:25 +0000)]
export T38FaxProfile and DataProtocolCapability since these are user in H.225 as well

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8052 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoIn set_plist_sel_browse : change broken logic when determining if the
oabad [Sat, 19 Jul 2003 08:59:29 +0000 (08:59 +0000)]
In set_plist_sel_browse : change broken logic when determining if the
mode has changed.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8051 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd URLs and RFC numbers for protocol specs.
guy [Sat, 19 Jul 2003 07:06:01 +0000 (07:06 +0000)]
Add URLs and RFC numbers for protocol specs.

#define the SSL 3.x message types in decimal, as they're decimal in the

#if 0-out some tables that would be used if we dissected some messages.

Move some of the unimplemented SSL 3.x message cases to be in numerical
order by message type (and appearance in the TLS 1.0 spec).

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8050 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd PrintableString stub. H225 needs this type.
sahlberg [Sat, 19 Jul 2003 03:45:04 +0000 (03:45 +0000)]
Add PrintableString stub.   H225 needs this type.

I could not find a definition of which order the characters in the restricted set are encoded in so I could not implement the actual decoding.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8049 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoGet rid of a no-longer-used table.
guy [Sat, 19 Jul 2003 02:49:54 +0000 (02:49 +0000)]
Get rid of a no-longer-used table.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8048 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoGet rid of check for a null "docsis_vsif_handle" - "dissector_add()"
guy [Sat, 19 Jul 2003 02:11:34 +0000 (02:11 +0000)]
Get rid of check for a null "docsis_vsif_handle" - "dissector_add()"
should blow up when handed a null pointer on all platforms that map low
addresses out of the address space, which is most if not all of them at
this point, and calls to "assert()" cause problems if you mix
GCC-compiled and Sun-C-compiled code.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8047 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoInclude the same headers that "plugin_api.h" does.
guy [Fri, 18 Jul 2003 22:47:18 +0000 (22:47 +0000)]
Include the same headers that "plugin_api.h" does.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8046 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoVarious fixes related to GTK2 :
oabad [Fri, 18 Jul 2003 20:55:11 +0000 (20:55 +0000)]
Various fixes related to GTK2 :

- give the focus to the packet_list when a capture file is opened, and
  each time we change the selection in the packet list (it seems that
  the tree view has the focus if we don't do this) ;

- in set_plist_sel_browse() : it seems that packet_list->selection_mode
  is always 0 in GTK2 so we can't use it to determine the current mode.
  Use a static variable instead.

This should fix the second part of debian bug #199763

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8045 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoPut in an XXX comment about the code to remember the number of results
guy [Fri, 18 Jul 2003 06:12:43 +0000 (06:12 +0000)]
Put in an XXX comment about the code to remember the number of results
depending on those messages occurring in the same frame.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8044 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAlter_context is sort of like Bind, and its authentication stubs are
guy [Fri, 18 Jul 2003 06:07:14 +0000 (06:07 +0000)]
Alter_context is sort of like Bind, and its authentication stubs are
dissected like those on Binds; the same is true for their corresponding

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8043 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoI've seen NTLMSSP DCE RPC packets with a protection level of
guy [Fri, 18 Jul 2003 05:51:21 +0000 (05:51 +0000)]
I've seen NTLMSSP DCE RPC packets with a protection level of

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8042 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoI've seen captures with Netlogon Secure Channel security with a
guy [Fri, 18 Jul 2003 05:48:39 +0000 (05:48 +0000)]
I've seen captures with Netlogon Secure Channel security with a
protection level of DCE_C_AUTHN_LEVEL_PKT_INTEGRITY.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8041 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoCapitalize "C" in "Channel" in "Secure Channel", as is done elsewhere.
guy [Fri, 18 Jul 2003 05:19:42 +0000 (05:19 +0000)]
Capitalize "C" in "Channel" in "Secure Channel", as is done elsewhere.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8040 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoIt looks, from some SNA stuff found on the Web, as if the exception
guy [Fri, 18 Jul 2003 05:12:13 +0000 (05:12 +0000)]
It looks, from some SNA stuff found on the Web, as if the exception
response indicator should just be shown as set or not set, as the two
definite response indicators are.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8039 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Matthijs Melchior: generate all declarations and definitions for
guy [Fri, 18 Jul 2003 03:02:12 +0000 (03:02 +0000)]
From Matthijs Melchior: generate all declarations and definitions for
plugin ABI from a single file.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8038 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoPut in a note about the call heuristics.
guy [Thu, 17 Jul 2003 23:08:52 +0000 (23:08 +0000)]
Put in a note about the call heuristics.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8037 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd the KRB5 User-to-user OID
sharpe [Thu, 17 Jul 2003 22:17:01 +0000 (22:17 +0000)]
Add the KRB5 User-to-user OID

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8036 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Xuan Zhang: eDonkey support.
guy [Wed, 16 Jul 2003 21:13:49 +0000 (21:13 +0000)]
From Xuan Zhang: eDonkey support.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8035 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoEliminate some signed-vs-unsigned-comparison and signed-char-subscript
guy [Wed, 16 Jul 2003 21:05:12 +0000 (21:05 +0000)]
Eliminate some signed-vs-unsigned-comparison and signed-char-subscript

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8034 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoMake h221nonstandard and nonstandardparameter externaly visible
sahlberg [Wed, 16 Jul 2003 19:05:37 +0000 (19:05 +0000)]
Make h221nonstandard and nonstandardparameter externaly visible
h225 will need them

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8033 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd a new parameter to the constrained integer dissector so that it also handles
sahlberg [Wed, 16 Jul 2003 09:23:56 +0000 (09:23 +0000)]
Add a new parameter to the constrained integer dissector so that it also handles
constrained integers with an extension marker.

Update all calls to the constrained integer dissector

Add dissection to the rfc_number type  which is a constrasined integer with an extension marker

Add H245 so that it builds by default in ethereal.
It has been tested extensively by a semi-large number of people with a lot of real and synthetic captures  and seems to work very well.

New protocol added to ethereal

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8032 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoremove a function that was not used/obsolete
sahlberg [Wed, 16 Jul 2003 08:53:08 +0000 (08:53 +0000)]
remove a function that was not used/obsolete
fix an instance where the wrong dissector was called instead of RequestMultiplexEntryRejectionDescriptions.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8031 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agominor updates.
sahlberg [Wed, 16 Jul 2003 08:38:16 +0000 (08:38 +0000)]
minor updates.
make reassembly a preference
update comments

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8030 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoupdates bugfix for the NumericString alphabet.
sahlberg [Wed, 16 Jul 2003 08:17:14 +0000 (08:17 +0000)]
updates    bugfix for the NumericString alphabet.
Implement some restricted ia5strings

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8029 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoPut in "XXX - implement me" comments on routines that have unused
guy [Wed, 16 Jul 2003 05:39:25 +0000 (05:39 +0000)]
Put in "XXX - implement me" comments on routines that have unused
arguments because they're currently stubs, as they no longer produce
unused-argument warnings to flag them as unimplemented.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8028 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoSquelch a (potentially-valid) compiler warning.
guy [Wed, 16 Jul 2003 05:26:19 +0000 (05:26 +0000)]
Squelch a (potentially-valid) compiler warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8027 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoMove all DCERPC authentication/encryption dissection code from packet-dcerpc.c
tpot [Wed, 16 Jul 2003 04:20:33 +0000 (04:20 +0000)]
Move all DCERPC authentication/encryption dissection code from packet-dcerpc.c
to the dissector that handles the particular authentication flavour.  This
gets rid of a couple of ugly switch statements and allows other authentication
modules to be written easily.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8026 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix unused variable warning.
tpot [Wed, 16 Jul 2003 02:07:18 +0000 (02:07 +0000)]
Fix unused variable warning.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8025 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoClean out the correct hash table.
guy [Wed, 16 Jul 2003 00:04:21 +0000 (00:04 +0000)]
Clean out the correct hash table.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8024 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom Michael Kopp: add some entries for Cisco VSA for SSG Communication
guy [Tue, 15 Jul 2003 22:16:52 +0000 (22:16 +0000)]
From Michael Kopp: add some entries for Cisco VSA for SSG Communication
via Radius Packets.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8023 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoRemoved unused local variable.
tpot [Tue, 15 Jul 2003 01:37:27 +0000 (01:37 +0000)]
Removed unused local variable.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8022 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoCOL_INFO goodies for ldap dissector:
tpot [Mon, 14 Jul 2003 23:47:32 +0000 (23:47 +0000)]
COL_INFO goodies for ldap dissector:

  - display DN in COL_INFO for bindi, search and add requests
  - display errors in COL_INFO for all replies
  - for search entries, display the number of results returned
  - display the message type in the "top level" protocol item

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8021 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix the decoding of SIDs and Attributes so that a SamLogon response with extra
sharpe [Mon, 14 Jul 2003 19:51:42 +0000 (19:51 +0000)]
Fix the decoding of SIDs and Attributes so that a SamLogon response with extra
SIDs can be dissected properly. However, I am not sure if this affects anything

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8020 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFix misdissection of spoolss enumprinterdataex replies:
tpot [Mon, 14 Jul 2003 04:46:48 +0000 (04:46 +0000)]
Fix misdissection of spoolss enumprinterdataex replies:

 - skip dissection of value if value length is zero
 - add placeholder for REG_MULTI_SZ value proto item
 - rename local variable start to start_offset for consistency

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8019 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd decoding of NumericString
sahlberg [Sun, 13 Jul 2003 01:43:33 +0000 (01:43 +0000)]
Add decoding of NumericString

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8018 f5534014-38df-0310-8fa8-9805f1628bb7

16 years ago Break out the PER functions from the alternative h245 dissector
sahlberg [Sat, 12 Jul 2003 22:35:21 +0000 (22:35 +0000)]
 Break out the PER functions from the alternative h245 dissector
and put them in their own file.

I had to put them im packet-per.c  instead of asn1-per.c  since othervise
i couldnt get it to invoke the register  routine from register.c

the per dissector is compiled into ethereal by default,  but there are no callers in ethereal until  the h245 dissector is added.

someone that knows the registry stuff better might consider renaming it to asn1-per.c instead of packet-per.c

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8017 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoPut relevant field offset and lengths back in packet-mip6.h, along with
guy [Fri, 11 Jul 2003 21:03:13 +0000 (21:03 +0000)]
Put relevant field offset and lengths back in packet-mip6.h, along with
option lengths, and use them in packet-mip6.c.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8016 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd a routine "dissect_ipv6_options()" that works like
guy [Fri, 11 Jul 2003 09:30:49 +0000 (09:30 +0000)]
Add a routine "dissect_ipv6_options()" that works like
"dissect_ip_tcp_options()" but for options that are like IPv6 options
(i.e., the length byte has a value that doesn't include the option code
or length byte).

Add an "ip_opts.h" header to declare it, and move the declaration of
stuff used by it and "dissect_ip_tcp_options()", and the declaration of
"dissect_ip_tcp_options()", to that header.

Use "dissect_ipv6_options()" for Mobile IPv6 options.

Get rid of the unused "mip6_opt_types[]" array in "packet-mip6.h".

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8015 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFrom smhuang [AT] pcs.csie.nctu.edu.tw: fix a "g_string_append()" call.
guy [Fri, 11 Jul 2003 06:46:00 +0000 (06:46 +0000)]
From smhuang [AT] pcs.csie.nctu.edu.tw: fix a "g_string_append()" call.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8014 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agosmall updates
sahlberg [Thu, 10 Jul 2003 07:31:50 +0000 (07:31 +0000)]
small updates

IA5String when tehre are no restriction on the alphabet is actually just an octet string

start populating the COL_INFO with request/response  commandname
COL_INFO will be tricky to get nice.
we might needs some hack to pass different values around through the dissect_per layer so can format values from different parts/subdissector functions nicely.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8013 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoSupport for CIFS UNIX extensions as documented in the CIFS TR 1.0,
tpot [Thu, 10 Jul 2003 04:48:59 +0000 (04:48 +0000)]
Support for CIFS UNIX extensions as documented in the CIFS TR 1.0,
Appendix D.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8012 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAdd more entries to the query/set path/file info value_strings for
tpot [Thu, 10 Jul 2003 04:44:58 +0000 (04:44 +0000)]
Add more entries to the query/set path/file info value_strings for
some extra info levels discovered by tridge.

Put subcommand information in COL_INFO for trans2 query fs/path/file

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8011 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoremove one more NOT_DECODED_YET for the subAddress IA5String
sahlberg [Wed, 9 Jul 2003 11:07:57 +0000 (11:07 +0000)]
remove one more NOT_DECODED_YET  for the subAddress IA5String

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8010 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoSome more guesswork applied.
sahlberg [Wed, 9 Jul 2003 11:02:50 +0000 (11:02 +0000)]
Some more guesswork applied.

It looks like the constrained version of IA5String might be encoded as
a constrained integer followed by (byte aligned) a list of ASCII bytes makeing up shte string.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8009 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoFixed a bug reported by Michael Lum regarding the display of the SLS
tuexen [Wed, 9 Jul 2003 10:41:07 +0000 (10:41 +0000)]
Fixed a bug reported by Michael Lum regarding the display of the SLS
field in ITU MTP 3.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8008 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoMake ethereal decode normal unconstrained INTEGER types.
sahlberg [Wed, 9 Jul 2003 10:21:45 +0000 (10:21 +0000)]
Make ethereal decode normal unconstrained INTEGER types.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8007 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agofix bug in dissect_per_GeneralString()
sahlberg [Wed, 9 Jul 2003 09:45:42 +0000 (09:45 +0000)]
fix bug in dissect_per_GeneralString()

use proto_tree_add_item() instead of proto_tree_add_string() since there is nothing that says the string will be null terminated.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8006 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoDecode a bit more of the mobility management context message, and use
guy [Wed, 9 Jul 2003 07:12:23 +0000 (07:12 +0000)]
Decode a bit more of the mobility management context message, and use
"mm_sec_modep[]" to decode the security type.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8005 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoUse "fcencap_proto_vals[]" for the protocol field.
guy [Wed, 9 Jul 2003 06:24:48 +0000 (06:24 +0000)]
Use "fcencap_proto_vals[]" for the protocol field.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8004 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoShow the routing part of R_CTL symbolically, if possible.
guy [Wed, 9 Jul 2003 06:24:32 +0000 (06:24 +0000)]
Show the routing part of R_CTL symbolically, if possible.

Show the lower 4 byts if R_CTL symbolically, if possible.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8003 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoAt least from the latest Zebra source, it appears that the messages to
guy [Wed, 9 Jul 2003 05:42:23 +0000 (05:42 +0000)]
At least from the latest Zebra source, it appears that the messages to
the Zebra daemon don't have Zebra errors or SAFIs in them, so get rid of
the unused #defines and value_string tables for them.  (If that's not
so, the dissectors need fixing....)

Some do have address families in them, though, so use the "families"
value_string table.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8002 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoRemoved duplicate definitions of flags_set_truth.
tpot [Wed, 9 Jul 2003 05:37:47 +0000 (05:37 +0000)]
Removed duplicate definitions of flags_set_truth.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8001 f5534014-38df-0310-8fa8-9805f1628bb7

16 years agoX11 arcs don't have a mode - the mode is in the graphics context.
guy [Wed, 9 Jul 2003 05:23:50 +0000 (05:23 +0000)]
X11 arcs don't have a mode - the mode is in the graphics context.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8000 f5534014-38df-0310-8fa8-9805f1628bb7