| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
svn path=/trunk/; revision=4198
|
|
|
|
|
|
|
| |
but you can do that directly, so eliminate the hash table and just
attach the data structures to the conversation directly.
svn path=/trunk/; revision=4197
|
|
|
|
|
|
| |
Put in comments about some of the other bits.
svn path=/trunk/; revision=4196
|
|
|
|
|
|
| |
RPC.
svn path=/trunk/; revision=4195
|
|
|
|
|
|
| |
services used with SMB, from Tim Potter.
svn path=/trunk/; revision=4194
|
|
|
|
|
|
|
|
| |
from Ronnie Sahlberg.
Various other bug fixes, cleanups, and other improvements.
svn path=/trunk/; revision=4193
|
|
|
|
| |
svn path=/trunk/; revision=4192
|
|
|
|
|
|
|
|
| |
SMBs that got errors.
Add some additional access mask bits, and the URL of another spec.
svn path=/trunk/; revision=4191
|
|
|
|
|
|
| |
OSF's DCE DFS (which is completely unrelated to Dfs).
svn path=/trunk/; revision=4190
|
|
|
|
|
|
|
|
|
|
|
| |
"#if 0" out an unused routine, pending determination of whether there's
any place that would use it.
Fix some typos.
Display the NT create options in hex, as they appear to be a bitmask.
svn path=/trunk/; revision=4189
|
|
|
|
|
|
| |
clean" is done.
svn path=/trunk/; revision=4188
|
|
|
|
| |
svn path=/trunk/; revision=4187
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1) print the payload length in AH headers correctly (the field's
value is length of the payload, minus 2, divided by 2, so we
have to add 2 before multiplying by 2);
2) correctly handle, in an SIOCGIFCONF list, entries whose
address has an "sa_len" field less than the size of a "struct
sockaddr" (the length of the address in an entry is the
maximum of the real length and the size of a "struct
sockaddr").
svn path=/trunk/; revision=4186
|
|
|
|
|
|
|
| |
libpcap, we may also want to return a flag indicating that we have to
map seconds/nanoseconds in the packet header to seconds/microseconds.
svn path=/trunk/; revision=4185
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
for AIX 5.x's non-standard libpcap, where "pcap_datalink()" doesn't
return DLT_ values, it returns RFC 1573 ifType values.
Put that wrapper, and the routine to get the interface list, in a
separate file, for packet-capture utility routines, so not everybody who
includes "util.h" needs to include <pcap.h>.
Fix up the Wiretap hack for dealing with said incompatibility to use the
correct ifType value for Token Ring.
svn path=/trunk/; revision=4184
|
|
|
|
|
|
| |
Fix up some SMBs I missed when adding the byte-count checks.
svn path=/trunk/; revision=4183
|
|
|
|
| |
svn path=/trunk/; revision=4182
|
|
|
|
|
|
| |
"g_strdup()", not "strdup()" to copy strings.
svn path=/trunk/; revision=4181
|
|
|
|
|
|
|
|
|
|
| |
Add some checks of the return value of
"get_unicode_or_ascii_string_tvb()" - if a null terminator is missing,
it might well run past the end of the byte parameters - and add some
code to keep the byte count updated so that the right byte count is
passed to "get_unicode_or_ascii_string_tvb()".
svn path=/trunk/; revision=4180
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
common subroutine.
Label the "total data length" field in Write Raw and Write Multiplexed
requests as such.
Dissect the IPC State/Device State field of Open and X requests and NT
Create and X requests ass per the stuff on page 67 of
ftp://ftp.microsoft.com/developr/drg/CIFS/dosextp.txt
Make a variable that doesn't need to be static not static.
svn path=/trunk/; revision=4179
|
|
|
|
| |
svn path=/trunk/; revision=4178
|
|
|
|
| |
svn path=/trunk/; revision=4177
|
|
|
|
|
|
| |
the appropriate entry in the "dissect[]" table.
svn path=/trunk/; revision=4176
|
|
|
|
|
|
| |
type, from Hamish Moffatt.
svn path=/trunk/; revision=4175
|
|
|
|
| |
svn path=/trunk/; revision=4174
|
|
|
|
|
|
|
|
| |
No, Nokia *weren't* kind enough to change the major or minor version
number in the capture file when they changed the format, just as they
weren't kind enough to change the magic number.
svn path=/trunk/; revision=4173
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Get rid of a bunch of stuff for which said tvbuffication removes the
need.
When dissecting byte parameters, make sure you don't consume more bytes
than the byte count, and handle captures where the last string in the
byte parameters area isn't properly null-terminated (I think I've seen
that in packets from various versions of Windows NT).
Make various bitfields given as decimal in SMB specs decimal.
svn path=/trunk/; revision=4172
|
|
|
|
|
|
| |
AUTH reply dissector added
svn path=/trunk/; revision=4171
|
|
|
|
|
|
| |
Nikander.
svn path=/trunk/; revision=4170
|
|
|
|
|
|
| |
a decode on the fly.
svn path=/trunk/; revision=4169
|
|
|
|
| |
svn path=/trunk/; revision=4168
|
|
|
|
| |
svn path=/trunk/; revision=4167
|
|
|
|
| |
svn path=/trunk/; revision=4166
|
|
|
|
| |
svn path=/trunk/; revision=4165
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
with one capture I've seen, but perhaps that was done with an old
version of AIX, and newer versions use a minor version number, in the
file, of 4.
However, libpcap hasn't used a minor version of 2 for ages, so perhaps
AIX hasn't updated their libpcap in ages, and aren't about to do so
soon. If they do, let's hope they change the magic number. The capture
file in question *does* have the capture length and real length in the
old, pre-2.3, order, so it really looks as if it's an old version,
rather than IBM trying to be "helpful" by using a different minor
version number so that you can distinguish between normal libpcap and
AIX libpcap formats.)
svn path=/trunk/; revision=4164
|
|
|
|
|
|
|
| |
as a TCP conversation dissector, so that it can be selected in the
"Decode As" dialog box.
svn path=/trunk/; revision=4163
|
|
|
|
|
|
| |
<a.stockmeier[AT]avm.de>.
svn path=/trunk/; revision=4162
|
|
|
|
| |
svn path=/trunk/; revision=4161
|
|
|
|
| |
svn path=/trunk/; revision=4160
|
|
|
|
| |
svn path=/trunk/; revision=4159
|
|
|
|
|
|
|
| |
Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item"
calls.
svn path=/trunk/; revision=4158
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Do more sanity checking on DOS dates and times.
Convert a bunch of "proto_tree_add_XXX" calls to "proto_tree_add_item"
calls.
Put the word and byte data for untvbuffified SMBs under a subtree just
as is done for tvbuffified SMBs.
Get rid of some no-longer-used routines.
Fix some displays in untvbuffified SMBs to resemble the way those fields
are displayed for tvbuffified SMBs.
Display timesouts as seconds and milliseconds when they're in units of
milliseconds.
svn path=/trunk/; revision=4157
|
|
|
|
|
|
| |
Light dissector.
svn path=/trunk/; revision=4156
|
|
|
|
|
|
| |
create and find conversations.
svn path=/trunk/; revision=4155
|
|
|
|
|
|
|
|
| |
Make it possible for a non-tvbuffied dissector for an andX SMB to call a
tvbuffified dissector for the andX command, and fix the non-tvbuffified
dissectors in question to do so.
svn path=/trunk/; revision=4154
|
|
|
|
| |
svn path=/trunk/; revision=4153
|
|
|
|
|
|
| |
protocols that can be used to decode stuff.
svn path=/trunk/; revision=4152
|
|
|
|
|
|
|
| |
extern, so that "plugin_api_defs.h" works on platforms where you have to
use the plugin API table.
svn path=/trunk/; revision=4151
|
|
|
|
| |
svn path=/trunk/; revision=4150
|
|
|
|
|
|
|
|
|
|
|
| |
addr_XXX p_XXX;
for all the declarations, to simplify things, as per Tomas Kukosa's
suggestion.
Fix a couple of comments.
svn path=/trunk/; revision=4149
|