aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Get rid of an unused variable, and fix a comment.Guy Harris2001-12-031-3/+2
| | | | svn path=/trunk/; revision=4307
* As you set a conversation dissector by supplying a dissector handleGuy Harris2001-12-035-24/+20
| | | | | | | | | | | rather than a function pointer, "dissect_wtp_fromudp()" no longer needs to be global; make it static, register it by name, and have the WSP dissector get the handle by calling "find_dissector()" rather than by constructing its own handle for it. Fix up some attributions. svn path=/trunk/; revision=4306
* Rename another routine to get rid of an unnecessary "1" in its name.Guy Harris2001-12-031-3/+3
| | | | svn path=/trunk/; revision=4305
* Don't bother saving or restoring "can_desegment" until you actually callGuy Harris2001-12-031-13/+14
| | | | | | a subdissector. svn path=/trunk/; revision=4304
* Rename and re-comment some routines to make it clearer what they do.Guy Harris2001-12-031-18/+27
| | | | svn path=/trunk/; revision=4303
* Add a new header file for X.264 transport protocol IDs.Guy Harris2001-12-023-12/+54
| | | | | | Handle ISO 8602 as a protocol ID on top of X.25. svn path=/trunk/; revision=4302
* From John McDermott:Guy Harris2001-12-023-105/+99
| | | | | | | | | | | | | Adds an "Add Expression..." button to the color filter creation dialog. Improve the look of the "Add color to protocols" window. Clean up some ugly code. Give John credit in the AUTHORS file for the coloring stuff. svn path=/trunk/; revision=4301
* An NLPID of 1 means T.70 when used as an X.263/ISO 9577 initial protocolGuy Harris2001-12-026-137/+303
| | | | | | | | | | | | | | | | | | | | identifier, but means X.29 when used as an X.263/ISO 9577 secondary protocol identifier. Add support for the IPv6 NLPID, and Ethernet type, in more places. Fix up the handling of the user data of a CALL REQUEST packet to more correctly distinguish between user data containing an NLPID and user data containing an X.264/ISO 11570 UN TPDU. If it's an NLPID, use "nlpid_vals" to show its value. Put that user data in a subtree. Create a new "x.25.spi" dissector table, for protocols running atop X.25, rather than having a built-in switch statement, so that other protocols can register themselves by NLPID. svn path=/trunk/; revision=4300
* Add support for LocalTalk Link Access Protocol.Guy Harris2001-11-307-14/+186
| | | | | | | | | | | Rename WTAP_ENCAP_PRISM to WTAP_ENCAP_PRISM_HEADER, to match DLT_PRISM_HEADER. Add in missing capture support for WTAP_ENCAP_PRISM_HEADER when capturing with "pcap_open_live()" rather than reading the capture from a pipe. svn path=/trunk/; revision=4299
* Make "fr_subdissector_table" static - it's not used outside the FrameGuy Harris2001-11-302-7/+3
| | | | | | Relay dissector. svn path=/trunk/; revision=4298
* Add support for OSI CLNP over GRE, as per mail from Mrmcsnoots@aol.com.Guy Harris2001-11-291-1/+2
| | | | svn path=/trunk/; revision=4297
* Update from Ronnie Sahlberg:Guy Harris2001-11-295-14/+65
| | | | | | | | | | | | | | | | | | | | | | | 1. Changes how can_desegment works so that can_desegment is only != 0 for whichever dissector is running immediately on top of whoever offers the can_desegment service. Thus DCERPC needs no special handling to see if it can trust can_desegment (which is currently only available ontop of TCP and not ontop of tcp->nbss->smb). 2. Changes fragment reassembly of transaction smb to only show the defragmented packet for the transaction smb holding the first fragment. To see why, test it with a transaction SMB containing a ~60kb PDU or larger. The old behaviour had approximately quadratic behaviour regarding runtime for dissecting such PDUs. (example: NetShareEnum is a command which can grow really really large if the number of shares and comments are large) svn path=/trunk/; revision=4296
* When processing a response, check whether "si->sip" is null before usingGuy Harris2001-11-291-3/+3
| | | | | | it; it'll be null if the matching request hasn't been seen. svn path=/trunk/; revision=4295
* Squelch compiler warnings.Guy Harris2001-11-281-2/+2
| | | | svn path=/trunk/; revision=4294
* From Ronnie Sahlberg: track FID values between requesta and responsesGuy Harris2001-11-281-6/+35
| | | | | | for ReadAndX and WriteAndX. svn path=/trunk/; revision=4293
* If a request has already been processed, and we fail to find itsGuy Harris2001-11-284-144/+123
| | | | | | | | | | | | | | | | | | | | "smb_saved_info_t" in the table of requests whose replies have been found, don't look it up in the table of requests whose replies have not been found - if the request in question has no reply in the capture, that may find some later frame in the same conversation with the same MID, and we don't need that information anyway - the only reason we *need* that structure is to save information in it for use when processing its reply, and we already did that the first time we processed the request. (The information for the later frame may be bad, e.g. having a null "extra_info" pointer, or having one that points to information for another request.) Arrange that we don't use the pointer to the "smb_saved_info_t" when processing a request except to save information if the request hasn't already been processed, as that pointer may not be valid if the request has already been processed, as per the above. svn path=/trunk/; revision=4292
* Updates to transaction reassembly, from Ronnie Sahlberg.Guy Harris2001-11-283-237/+239
| | | | | | | | | | | Add some checks for null tvbuff arguments. When dissecting transaction setup, parameters, and data when we couldn't dissect it as a pipe or mailslot transaction, use the reported length of the supplied tvbuff, not the actual length, as the amount of data present. svn path=/trunk/; revision=4291
* Support for 802.11+Prism II monitor-mode link-layer headers, fromGuy Harris2001-11-2811-9/+277
| | | | | | | | | Tim Newsham. Add in missing item for WTAP_ENCAP_CISCO_IOS in the Wiretap encapsulation type table. svn path=/trunk/; revision=4290
* OSPFv3 checksum fix, from Taisuke Sasaki.Guy Harris2001-11-283-19/+55
| | | | svn path=/trunk/; revision=4289
* Add { 0, NULL } terminators to some "value_string" arrays lacking them.Guy Harris2001-11-274-11/+21
| | | | | | Make some static that don't need to be exported. svn path=/trunk/; revision=4288
* When returning the length of the DCE RPC PDU, add 4 if the packet wasGuy Harris2001-11-271-5/+13
| | | | | | preceded by 4 bytes of zero padding. svn path=/trunk/; revision=4287
* Rename the heuristic dissector table "msrpc" to "smb_transact", toGuy Harris2001-11-272-7/+7
| | | | | | | | | | | indicate that it's to be used for SMB transactions; a different table, using different dissectors, would be needed for, say, reads and writes over a named pipe, as those are byte streams and SMB transactions are packets, so the dissectors for the first one need to worry about multiple PDUs per segment and desegmentation, while the dissectors for the second one don't - and, in fact, can't do desegmentation stuff. svn path=/trunk/; revision=4286
* From Todd Sabin:Guy Harris2001-11-276-56/+383
| | | | | | | | | | | | | | | | | | | | | | | | o Modifies the dcerpc handoff to subdissectors slightly. It also needs to pass the data representation to the subdissector. Also, if no subdissector is found, it puts a "Stub data" entry in the tree. o Adds optional TCP desegmentation to the dcerpc layer. Note that dcerpc has it's own ability to fragment PDUs. This isn't for dealing with that, but with the case of a single PDU being broken over more than one TCP segment. o Adds a little bit of dissection to packet-dcerpc-epm.c. Mainly just proof of concept for the dcerpc handoff stuff. (Writing this is how I realized the need for the drep.) o Adds packet-dcerpc-ndr.c, which will contain NDR dissection routines for use by subdissectors. Also, support added for multiple PDUs per segment for DCERPC-over-TCP (and, potentially, other byte-stream transports). svn path=/trunk/; revision=4285
* Thou shalt not use C++-style comments in C code, for they upset some CGuy Harris2001-11-273-6/+6
| | | | | | compilers. svn path=/trunk/; revision=4284
* Get rid of some code to set "pinfo->current_proto"; let the EtherealGuy Harris2001-11-273-11/+5
| | | | | | | | infrastructure do it for the dissectors. Make some WCP dissector routines static. svn path=/trunk/; revision=4283
* Reflect the change to "conversation_set_dissector()" to take a dissectorGuy Harris2001-11-271-9/+34
| | | | | | handle as an argument. svn path=/trunk/; revision=4282
* Change "conversation_set_dissector()" to take a dissector handle, ratherGuy Harris2001-11-2726-177/+150
| | | | | | | | | | | | | | | | | | | | | than a pointer to a dissector function, as an argument. This means that the conversation dissector is called through "call_dissector()", so the dissector itself doesn't have to worry about checking whether the protocol is enabled or setting "pinfo->current_proto", so get rid of the code that does that in conversation dissectors. Also, make the conversation dissectors static. Get rid of some direct calls to dissectors; replace them with calls through handles, and, again, get rid of code to check whether a protocol is enabled and set "pinfo->current_proto" where that code isn't needed. Make those dissectors static if they aren't already static. Add a routine "create_dissector_handle()" to create a dissector handle without registering it by name, if the dissector isn't used outside the module in which it's defined. svn path=/trunk/; revision=4281
* Remove an extra blank from a data source name.Guy Harris2001-11-271-2/+10
| | | | | | Added comments, from Ronnie Sahlberg. svn path=/trunk/; revision=4280
* Fixes from Ronnie Sahlberg for fragmented transactions - handle nullGuy Harris2001-11-271-11/+22
| | | | | | tvbuff pointers. svn path=/trunk/; revision=4279
* Clarify what the tvbuff handed to a dissector contains (i.e., it's notGuy Harris2001-11-271-6/+8
| | | | | | the raw frame data, it's the data that the dissector should look at). svn path=/trunk/; revision=4278
* Note that LDP is documented in RFC 3036.Guy Harris2001-11-271-2/+2
| | | | svn path=/trunk/; revision=4277
* Handle the case of multiple LDP PDUs per TCP segment. (Still needs toGuy Harris2001-11-271-31/+87
| | | | | | | | handle the case of more than one TCP segment per LDP PDU....) Fix the handling of some of the length fields. svn path=/trunk/; revision=4276
* WCCP capability info dissection bug fix, from Raghu Angadi.Guy Harris2001-11-273-4/+9
| | | | svn path=/trunk/; revision=4275
* In "smb_trans_defragment()", quit if "si->sip" is null, as it means weGuy Harris2001-11-261-1/+12
| | | | | | | | | | don't have the frame number of the request, which we use as the ID of the transaction being reassembled. (If we're reassembling a reply, should we not use the frame number of the reply instead? We used to have a hash table to keep track of that, so we might just be able to bring it back....) svn path=/trunk/; revision=4274
* Add some comments.Guy Harris2001-11-261-1/+12
| | | | svn path=/trunk/; revision=4273
* From Ronnie Sahlberg: reassemble transaction data if transactionGuy Harris2001-11-261-29/+151
| | | | | | continuations are seen. svn path=/trunk/; revision=4272
* This should be the final bit of removing the dissect_data symbolEd Warnicke2001-11-268-37/+17
| | | | | | | | from being required by anyone other than packet-data.c. It can now be accessed with call_dissector() with the name "data". dissect_data is now also of dissect_t. svn path=/trunk/; revision=4271
* Switched from using CHECK_DISPLAY_AS_DATA to using CHECK_DISPLAY_AS_XEd Warnicke2001-11-2612-24/+41
| | | | | | | which also takes a handle as an argument and thus doesn't call dissect_data directly. svn path=/trunk/; revision=4270
* Moved from using dissect_data() to using call_dissector()Ed Warnicke2001-11-2638-118/+253
| | | | svn path=/trunk/; revision=4269
* Added a proto_reg_handoff_frame() function and switched fromEd Warnicke2001-11-261-2/+9
| | | | | | using dissect_data() to using call_dissector() svn path=/trunk/; revision=4268
* Clean up the stuff that creates the pipe protocol subtree; it shouldn'tGuy Harris2001-11-261-14/+17
| | | | | | | | fetch the length of "sp_tvb" if "sp_tvb" is null. Fix some comments. svn path=/trunk/; revision=4267
* Moved from using dissect_data to using call_dissector()Ed Warnicke2001-11-266-17/+31
| | | | svn path=/trunk/; revision=4266
* From Ronnie Sahlberg: fix a check for a null tvbuff pointer to check theGuy Harris2001-11-251-2/+2
| | | | | | correct pointer. svn path=/trunk/; revision=4265
* Moved from using dissect_data to using call_dissector()Ed Warnicke2001-11-2512-41/+69
| | | | svn path=/trunk/; revision=4264
* Switched from calling dissect_data to using call_dissectorEd Warnicke2001-11-2510-25/+46
| | | | svn path=/trunk/; revision=4263
* Added hooks to be able to call dissect_data as via a handle.Ed Warnicke2001-11-251-1/+9
| | | | svn path=/trunk/; revision=4262
* Remove a duplicate entry from the SAP table, and move an entry in thatGuy Harris2001-11-251-3/+2
| | | | | | table to the proper sorted location. svn path=/trunk/; revision=4261
* Throw in a large pile of additional SAP values.Guy Harris2001-11-251-43/+223
| | | | svn path=/trunk/; revision=4260
* Finish removing the pointer to the no-longer-extant global "packet_info"Guy Harris2001-11-242-5/+2
| | | | | | structure "pi" from the plugin API. svn path=/trunk/; revision=4259
* Update the Makefile.nmake files to reflect the move of "int-64bit.c" toGuy Harris2001-11-242-3/+3
| | | | | | | | | the "epan" subdirectory. Include "strptime.obj" in the list of object files used to build "text2pcap.exe". svn path=/trunk/; revision=4258
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-26 11:55:48 +0000