aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Moved from using dissect_data to using call_dissector()Ed Warnicke2001-11-2512-41/+69
| | | | svn path=/trunk/; revision=4264
* Switched from calling dissect_data to using call_dissectorEd Warnicke2001-11-2510-25/+46
| | | | svn path=/trunk/; revision=4263
* Added hooks to be able to call dissect_data as via a handle.Ed Warnicke2001-11-251-1/+9
| | | | svn path=/trunk/; revision=4262
* Remove a duplicate entry from the SAP table, and move an entry in thatGuy Harris2001-11-251-3/+2
| | | | | | table to the proper sorted location. svn path=/trunk/; revision=4261
* Throw in a large pile of additional SAP values.Guy Harris2001-11-251-43/+223
| | | | svn path=/trunk/; revision=4260
* Finish removing the pointer to the no-longer-extant global "packet_info"Guy Harris2001-11-242-5/+2
| | | | | | structure "pi" from the plugin API. svn path=/trunk/; revision=4259
* Update the Makefile.nmake files to reflect the move of "int-64bit.c" toGuy Harris2001-11-242-3/+3
| | | | | | | | | the "epan" subdirectory. Include "strptime.obj" in the list of object files used to build "text2pcap.exe". svn path=/trunk/; revision=4258
* Assume that a.stockmeier[AT]avm.de, a/k/a "stocki", is the AndreasGuy Harris2001-11-242-2/+2
| | | | | | | | | | | Stockmeier listed as the contact in http://www.isi.edu/in-notes/iana/assignments/enterprise-numbers for the private enterprise number 872, with the e-mail address "stocki@avm-berlin.de". svn path=/trunk/; revision=4257
* Fix to text2pcap to handle colons after offset field, from GordonGuy Harris2001-11-242-2/+3
| | | | | | McKinney. svn path=/trunk/; revision=4256
* Assorted changes from Ronnie Sahlberg:Guy Harris2001-11-243-24/+162
| | | | | | | | | | | | | | | | | | | | Add a few small functions to reassemble.c to cope with protocols where the total length of defragmented PDUs are specified in the first fragment (all previous uses of reassembly has been for PDUs where the last fragment is signalled by a flag in the header for the last fragment). Add a few small functions to reassemble.c to abort-and-delete defragmentation of PDUs and also detect IF a PDU is currently being defragmented. (Useful for PDUs where the "unique" identifier is rather ununique, or may be reused often enough so it can be a problem for Ethereal.) Change where NT Cancel presents its Cancelation-to output, and makes the three trans secondary requests also output similar information. svn path=/trunk/; revision=4255
* Fix the usage message and man page for text2pcap.Guy Harris2001-11-242-13/+19
| | | | svn path=/trunk/; revision=4254
* If a non-option command-line argument is specified to Ethereal, treat itGuy Harris2001-11-243-5/+42
| | | | | | | | | as the pathname of a capture file to be read. If more than one such option is specified, print a usage message. Fix the documentation of the "-r" option to Ethereal and Tethereal. svn path=/trunk/; revision=4253
* Support for time stamping packets in text2pcap, from Gordon McKinney.Guy Harris2001-11-245-10/+171
| | | | svn path=/trunk/; revision=4252
* Fix the return value of a routine.Guy Harris2001-11-241-2/+2
| | | | svn path=/trunk/; revision=4251
* If the expected "next offset" doesn't match the offset we read, it mayGuy Harris2001-11-241-18/+36
| | | | | | | | | | | | | | | merely mean that we mistakenly treated stuff from the text-dump part of the file we're reading as if it were hex byte data (e.g., if the first non-white-space part of the text dump was a 2-digit hex number). If the offset we read is less than the expected next offset, assume that's the problem, and throw away enough extra bytes to make the offset we read the expected next offset. "getopt()" will never, for any option that the "getopt()" string says takes an argument, leave "optarg" null; if no argument was specified, it'll return an error, so there's no need to check for a null "optarg". svn path=/trunk/; revision=4250
* Treat a bunch of digits followed by a newline differently from a bunchGuy Harris2001-11-241-2/+4
| | | | | | | of digits followed by a blank or tab, so that we recognize the newline as an end-of-line. svn path=/trunk/; revision=4249
* Moved int-64bit.{c,h} into epan/Ed Warnicke2001-11-226-10/+10
| | | | svn path=/trunk/; revision=4248
* Remove the pointer to the global packet_info from the table ofGilbert Ramirez2001-11-213-8/+3
| | | | | | pointers used for plugins on win32. svn path=/trunk/; revision=4247
* Remove the global packet_info called "pi". Dissectors now onlyGilbert Ramirez2001-11-2118-136/+93
| | | | | | | | | | | | | | | | access their own "pinfo". A packet_info is stored in epan_dissect_t, which is created for the dissection of a single packet. GUI functions which need to access the packet_info of the currently selected packet used to use "pi"; now they use cfile.edt->pi. cfile's "edt" member is the epan_dissect_t of the currently-selected packet. The functionality of blank_packetinfo() was moved into dissect_packet(), as that's the only place that called blank_packetinfo(), after a spurious call to blank_packetinfo() was removed from packet_list_select_cb(). svn path=/trunk/; revision=4246
* If we have to worry about subdissectors changing the "packet_info"Guy Harris2001-11-216-73/+6
| | | | | | | | | | structure, we may have to worry about it in more places than the places that *used* to set "pi.len" and "pi.captured_len", so there's no point in just saving and restoring it there. We'll remove those saves/restores, and worry about saves and restores when we find a problem. svn path=/trunk/; revision=4245
* Discard stuff in "smb.h" not used by the dissectors, and replace theGuy Harris2001-11-212-517/+97
| | | | | | | | | | #defines for SMB commands with ones that use the names from the SNIA CIFS spec. Use those #define values rather than hardcoded values in various places that check for specific commands. svn path=/trunk/; revision=4244
* Support for Transaction Secondary and Transaction2 Secondary, fromGuy Harris2001-11-211-3/+12
| | | | | | Ronnie Sahlberg. svn path=/trunk/; revision=4243
* Rename the "packet-msrpc-XXX.[ch]" files to "packet-dcerpc-XXX.[ch]", asGuy Harris2001-11-2118-152/+152
| | | | | | per Todd Sabin's suggestion. svn path=/trunk/; revision=4242
* Get rid of some unused variables.Guy Harris2001-11-2112-76/+27
| | | | svn path=/trunk/; revision=4241
* Get rid of some unused variables.Guy Harris2001-11-213-5/+5
| | | | svn path=/trunk/; revision=4240
* Get rid of some unused variables.Guy Harris2001-11-214-14/+4
| | | | svn path=/trunk/; revision=4239
* Fix an earlier typo of mine.Guy Harris2001-11-211-2/+2
| | | | svn path=/trunk/; revision=4238
* Get rid of "tvb_compat()"; it's no longer needed (the one remaining callGuy Harris2001-11-203-24/+4
| | | | | | to it returns data that's no longer used). svn path=/trunk/; revision=4237
* Get rid of the "len" and "captured_len" members of the "packet_info"Guy Harris2001-11-2011-119/+34
| | | | | | structure; they're no longer used. svn path=/trunk/; revision=4236
* Make the capture routines take an additional argument giving the amountGuy Harris2001-11-2037-189/+199
| | | | | | | | | | | of packet data captured. Make the "BYTES_ARE_IN_FRAME()" macro take a "captured length of the packet" argument. Add some length checks to capture routines. svn path=/trunk/; revision=4235
* "END_OF_FRAME" and "IS_DATA_IN_FRAME()" are no longer used; get rid ofGuy Harris2001-11-201-13/+5
| | | | | | them. svn path=/trunk/; revision=4234
* Have a routine to add all the hex dump tabs to the hex dump notebook,Guy Harris2001-11-204-35/+36
| | | | | | | and call it both from "select_packet()" and "create_new_window()", rather than having two similar loops in both places. svn path=/trunk/; revision=4233
* If bytes in a hex dump view are selected, the field in the correspondingGuy Harris2001-11-203-11/+28
| | | | | | | text view should be selected, rather than always selecting a field in the main text view. svn path=/trunk/; revision=4232
* Allow the tvbuff pointer to various "proto_tree_add" routines to be nullGuy Harris2001-11-205-18/+40
| | | | | | | | | | | | | if (and only if) the length of the item being added is 0 (so that it has no data backing it). This means the data stream name pointer for the item in question is null; make sure we handle that. Use that for some "uses the value from the matching request" fields in the SMB Pipe protocol. svn path=/trunk/; revision=4231
* From Ronnie Sahlberg: handle transaction continuations the way we handleGuy Harris2001-11-201-27/+69
| | | | | | NT Cancel, as transaction continuations don't get a response, either. svn path=/trunk/; revision=4230
* Dissect the rest of the named pipe protocol. Export from "packet-smb.c"Guy Harris2001-11-203-42/+197
| | | | | | | | | | | routines used for that. Rename some named pipe functions as per the SNIA CIFS spec. Label the "number of files moved" field of the reply to a Move SMB as such, rather than as an unspecified "Count". svn path=/trunk/; revision=4229
* Save the function code and FID for pipe requests, and use it for theGuy Harris2001-11-203-25/+77
| | | | | | matching responses. svn path=/trunk/; revision=4228
* From Frank Singleton:Guy Harris2001-11-191-3/+4
| | | | | | | | | - accept struct and union lists passed in via ethereal_be.py - these lists are unused until I add the templates for struct and union helper functions. So code generation is unchanged for the moment. svn path=/trunk/; revision=4227
* From Frank Singleton:Guy Harris2001-11-191-18/+164
| | | | | | | | | - find all union/struct references and store in lists. This includes embedded unions and structs. - pass the struct and union lists onto ethereal_gen.py - print all found nodes at DEBUG svn path=/trunk/; revision=4226
* When reading the preferences file, if the "module.preference" stringGilbert Ramirez2001-11-191-18/+35
| | | | | | | | | | references an unknown module, check the "preference" part to see if another "." is found; iterate until a known module is found, or until nor more "."'s are found. Needed for the new "x.25.non_q_bit_is_sna" preference. svn path=/trunk/; revision=4225
* If we know the pipe function code, put the function into the InfoGuy Harris2001-11-191-1/+6
| | | | | | column. svn path=/trunk/; revision=4224
* Dissect the setup words in pipe transactions that have them; thatGuy Harris2001-11-193-192/+339
| | | | | | | | | | | | | | | obviates the need to have a protocol tree item for "MSRPC-over-SMB", as the setup words for it are just standard TransactNmPipe setup words (0x26 is the TransactNmPipe function code, and the next setup word is the FID for the pipe in question.) Pass to the pipe dissector tvbuffs for setup-words-plus-pipe (which is the data for the pipe protocol) and parameters-plus-data (which is the data for the protocol running atop the pipe protocol); use the former for the top-level protocol tree item for the pipe protocol, and the latter for the top-level protocol tree item for the LANMAN protocol. svn path=/trunk/; revision=4223
* Make the register routines for the mailslot, pipe, browser, andGuy Harris2001-11-197-34/+12
| | | | | | | | mailslot-based logon protocols just be regular register routines, detected by the script that generates the "register.c" file, rather than special stuff known to the SMB dissector. svn path=/trunk/; revision=4222
* Pass, as the first tvbuff argument to "dissect_mailslot_smb()" andGuy Harris2001-11-196-164/+277
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "dissect_pipe_smb()", a tvbuff containing the setup words and the pipe/mailslot pathname, as those are arguably the part of the packet that contains the "mailslot protocol" and the "pipe protocol", as opposed to the protocol running atop mailslots or pipes. Pass a setup tvbuff to "dissect_pipe_smb()" for it to pass on to the MSRPC-over-named-pipe dissector, and have the setup tvbuff passed to it and "dissect_mailslot_smb()" contain *only* the setup words; don't extract anything other than the setup words from it. Declare "register_proto_smb_mailslot()" in "packet-smb-mailslot.h" rather than "packet-smb.c", and declare "register_proto_smb_pipe()" in "packet-smb-pipe.h" rather than "packet-smb.c". Add a protocol for MSRPC-over-named-pipes. Move the stuff to handle the FID in the setup words of MSRPC-over-named-pipe transactions out of the SMB Transaction dissector into the MSRPC dissector. Add a routine to "packet-smb.c", callable from outside "packet-smb.c", to put an "smb.fid" field into the protocol tree, and to add ", FID: XXXX" to the Info column, for use by the MSRPC-over-named-pipe dissector; use it in the SMB dissector as well, in all the places where we put a FID into the protocol tree. Move the stuff to check whether the LANMAN protocol is enabled, and to set "pinfo->current_proto" to "LANMAN" if it is, into the LANMAN API-over-named-pipe dissector out of the named pipe protocol dissector. If we didn't dissect a Transaction request or reply as a named pipe or mailslot message, put any setup words, parameters, and data it has into the protocol tree as separate items. Don't put a "Response in" item into the protocol tree for an NT Cancel request, as there are no responses to NT Cancel requests. svn path=/trunk/; revision=4221
* From Tim Potter: use the FID, for DCE RPC-over-SMB, as part of theGuy Harris2001-11-185-6/+60
| | | | | | conversation matching. svn path=/trunk/; revision=4220
* From Tim Potter:Guy Harris2001-11-182-8/+71
| | | | | | | | | | | | | display the returned FID in the Info column for NT Create And X replies; display the setup words, and treat the second word as a FID in Transaction requests presumed to contain DCE RPC-over-SMB. Add the FID to the Info column for other open/create replies while we're at it. svn path=/trunk/; revision=4219
* Pass in the "smb_info" structure a pointer to the "smb_saved_info_t"Guy Harris2001-11-184-123/+203
| | | | | | | | | | | | structure, so that it can be updated by subdissectors; this way the updates affect the structure immediately, and don't get lost if the subdissector later throws an exception. Use "tvb_reported_length()" to check for an interim mailslot reply; "tvb_length()" could give the wrong answer if a short snapshot length was given in the capture. svn path=/trunk/; revision=4218
* Added hooks to allow the registration of heuristic subdissectors ofEd Warnicke2001-11-181-1/+19
| | | | | | http. svn path=/trunk/; revision=4217
* Have only the request and response frame numbers, and a "void *", in anGuy Harris2001-11-184-239/+391
| | | | | | | | | | | | | | | | | "smb_saved_info_t". Put all the information needed to dissect NT Transaction replies, Transaction2 replies, or Transaction replies into separate data structures, allocated separately, and put a pointer to that data structure in the "void *" in question. Use the return value of "dissect_pipe_smb()" and "dissect_mailslot_smb()" to control whether to display as data the stuff those routines were asked to dissect. If we've seen a request before, but its "smb_saved_info_t" isn't in the "matched" hash table, look in the "unmatched" hash table - perhaps we haven't seen the reply yet. svn path=/trunk/; revision=4216
* Add some bits in the Write AndX write mode as per "Microsoft NetworksGuy Harris2001-11-161-3/+29
| | | | | | | | | SMB FILE SHARING PROTOCOL EXTENSIONS, SMB File Sharing Protocol Extensions Version 2.0, Document Version 3.3". Fix the test for the "connectionless mode" to test the correct bit. svn path=/trunk/; revision=4215
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-24 20:33:41 +0000