aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Times in NFS done as FT_ABSOLUTE_TIME and FT_RELATIVE_TIME fields, fromGuy Harris2001-09-142-41/+127
| | | | | | Ronnie Sahlberg. svn path=/trunk/; revision=3938
* Make the resolution for time values be nanoseconds rather thanGuy Harris2001-09-142-1/+37
| | | | | | | | microseconds. Fix some "signed vs. unsigned" comparison warnings. svn path=/trunk/; revision=3937
* Get rid of no-longer-necessary includes of <sys/time.h>.Guy Harris2001-09-144-20/+4
| | | | svn path=/trunk/; revision=3936
* Make the resolution for time values be nanoseconds rather thanGuy Harris2001-09-141-4/+4
| | | | | | | | microseconds. Fix some "signed vs. unsigned" comparison warnings. svn path=/trunk/; revision=3935
* Make the resolution for time values be nanoseconds rather thanGuy Harris2001-09-1425-241/+263
| | | | | | | | microseconds. Fix some "signed vs. unsigned" comparison warnings. svn path=/trunk/; revision=3934
* "stat" is the status in an NLM reply; "state" is the lock manager stateGuy Harris2001-09-141-12/+12
| | | | | | sent over the wire in a lock request. svn path=/trunk/; revision=3933
* Squelch a signed vs. unsigned comparison complaint.Guy Harris2001-09-141-7/+4
| | | | | | | Display the command in decimal, not hex, as that's how it's specified in the RFCs for RIP. svn path=/trunk/; revision=3932
* Get rid of a trailing blank.Guy Harris2001-09-141-3/+3
| | | | svn path=/trunk/; revision=3931
* Support for dissecting multiple capabilities, from Endoh Akira.Guy Harris2001-09-133-116/+120
| | | | svn path=/trunk/; revision=3930
* Squelch a "signed vs. unsigned comparison" warning (which warned of aGuy Harris2001-09-131-2/+2
| | | | | | | | real problem, if "byte_span" were 0 - that would only happen if "bitoffset" and "bitlength" were both 0, and "bitlength" should never be 0). svn path=/trunk/; revision=3929
* Fixes to the OSPFv3 dissector, from Palle Lyckegaard.Guy Harris2001-09-131-16/+14
| | | | svn path=/trunk/; revision=3928
* Make the filter name for the status monitor callback "statnotify", toGuy Harris2001-09-131-2/+2
| | | | | | | match the name in the filterable fields; make the short name "STAT-CB" again. svn path=/trunk/; revision=3927
* Display filters for RIP protocol fields, from Ronnie Sahlberg.Guy Harris2001-09-132-44/+99
| | | | svn path=/trunk/; revision=3926
* Display filters for XoT protocol fields, from Ronnie Sahlberg.Guy Harris2001-09-131-19/+30
| | | | svn path=/trunk/; revision=3925
* NLM fix, and change of status monitor callback protocol name to use "_"Guy Harris2001-09-132-4/+8
| | | | | | | rather than "-" ("-" upsets the display filter parser), from Ronnie Sahlberg. svn path=/trunk/; revision=3924
* TCP desegmentation support, and changes to the ONC RPC and NBSSGuy Harris2001-09-136-63/+673
| | | | | | | | | | dissectors to use it, from Ronnie Sahlberg, with additional changes to handle the case where a frame contains messages that don't run past the end followed by one that does and where a reassembled chunk has, at the end, a message that runs past the end of that chunk (because the reassembly was for an earlier message). svn path=/trunk/; revision=3923
* Clean up the previous checkin a bit - there's no need to haveGuy Harris2001-09-121-22/+6
| | | | | | | | | | "dissect_rpc_common()" check, every time it's about to return FALSE, whether it's being used as a heuristic dissector and, if not, call "dissect_rpc_continuation()" - we can just have the non-heuristic dissector call it and, if it returned FALSE, call "dissect_rpc_continuation()". svn path=/trunk/; revision=3922
* When establishing or searching for a conversation for ONC RPC, use bothGuy Harris2001-09-121-33/+190
| | | | | | | | | | | | | source and destination addresses if the transport is TCP (we use that, for now, as a proxy for "if the transport is connection-oriented"), as the endpoint addresses should be the same for all packets. Have both a heuristic RPC dissector and a non-heuristic version, and make the non-heuristic version the dissector for the conversations we create; that version will, if the frame doesn't look like a call or reply, mark it as continuation data. svn path=/trunk/; revision=3921
* Fix from Tom Uijldert: scan TPI's to get proper WTP packet length andGuy Harris2001-09-113-8/+28
| | | | | | correct start of WSP-data. svn path=/trunk/; revision=3920
* GTPv1 support and GTPv0 improvements, from Michal Melerowicz and NicolasGuy Harris2001-09-113-795/+3570
| | | | | | Balkota. svn path=/trunk/; revision=3919
* Fix some bugs (and some indentation).Guy Harris2001-09-111-10/+8
| | | | svn path=/trunk/; revision=3918
* The byte count field in an SMB Write request counts not only the dataGuy Harris2001-09-111-4/+4
| | | | | | | | | being written, but the 2 bytes of data length and one byte of buffer type preceding that data; use the data length (which doesn't count itself or the buffer type byte), rather than the byte count, to determine how much data is being written. svn path=/trunk/; revision=3917
* From Frank Singleton: install idl2eth in "/usr/local/bin".Guy Harris2001-09-101-2/+2
| | | | svn path=/trunk/; revision=3916
* Man page update, from Frank Singleton, to mentionGuy Harris2001-09-101-4/+10
| | | | | | $PYTHONPATH/site-packages/. svn path=/trunk/; revision=3915
* Some WAP WTP naming fixes plus textual Transaction Class value decoding,Guy Harris2001-09-102-8/+15
| | | | | | from Olivier Biot. svn path=/trunk/; revision=3914
* The "Save only marked packets" checkbox should change as the file typeGuy Harris2001-09-101-1/+14
| | | | | | | changes, just as the "Save only packets currently being displayed" checkbox should. svn path=/trunk/; revision=3913
* From Jason Lango:Guy Harris2001-09-083-19/+127
| | | | | | | Clean up RTSP Transport parsing and sub-conversation code. Dissect RTP/MP4 (and other RTP/xxx) as RTP/AVP (for now). svn path=/trunk/; revision=3912
* OSPFv3 support, from Palle Lyckegaard.Guy Harris2001-09-053-191/+955
| | | | svn path=/trunk/; revision=3911
* Typo fix, from Martti Kuparinen.Guy Harris2001-09-051-2/+2
| | | | svn path=/trunk/; revision=3910
* Close the file to which we're writing before exiting, so that:Guy Harris2001-09-051-1/+11
| | | | | | | | | | | buffered data is written out to the file; headers are written if the capture file header depends on the number or sizes of the packets; etc.. svn path=/trunk/; revision=3909
* From Frank Singleton: first look in $PYTHONPATH/site-packages forGuy Harris2001-09-041-8/+33
| | | | | | ethereal_be.py and ethereal_gen.py, then look in the current directory. svn path=/trunk/; revision=3908
* HMIPv6 support, from Martti Kuparinen.Guy Harris2001-09-044-6/+90
| | | | svn path=/trunk/; revision=3907
* From Thomas Wittwer: add "prefs_register_string_preference()" to theGuy Harris2001-09-045-4/+11
| | | | | | list of functions available to plugins. svn path=/trunk/; revision=3906
* Change from Thomas Wittwer to register HTTP dissector by name, for otherGuy Harris2001-09-043-1/+8
| | | | | | dissectors to call. svn path=/trunk/; revision=3905
* Use cURL's strategy for parsing 227 responses.Guy Harris2001-09-031-91/+113
| | | | | | | | | Add comments noting the IPv6 issues for PASV responses. When adding the FTP dissector for the FTP port, give its protocol as "proto_ftp", not "proto_ftp_data". svn path=/trunk/; revision=3904
* Use "tvb_reported_length_remaining()" to check whether there's data leftGuy Harris2001-09-031-2/+2
| | | | | | | in the packet; this eliminates a signed vs. unsigned comparison warning in GCC. svn path=/trunk/; revision=3903
* Get rid of a no-longer-used #define.Guy Harris2001-09-031-5/+1
| | | | svn path=/trunk/; revision=3902
* Instead of having a single datum attached to a conversation, have a listGuy Harris2001-09-0325-169/+297
| | | | | | | | | | | of protocol-id-plus-datum pairs, so that multiple protocols can attach information to the same conversation. Dissectors that attach information to a conversation should not assume that if they find a conversation it has one of its data attached to it; the conversation might've been created by another dissector. svn path=/trunk/; revision=3901
* Squelch some compiler warnings.Guy Harris2001-09-031-2/+2
| | | | svn path=/trunk/; revision=3900
* Squelch some compiler warnings.Guy Harris2001-09-031-3/+4
| | | | svn path=/trunk/; revision=3899
* Make routines that are passed an unsigned integer as their last argumentGuy Harris2001-09-031-6/+6
| | | | | | | | | | have an unsigned integer as that argument; this squelches some compiler warnings, and it's the right thing to do in any case. Don't check whether an unsigned integer value is > 0 - that's the same as checking whether it's != 0. svn path=/trunk/; revision=3898
* Don't pass wildcarded arguments to "find_conversation()" to routinesGuy Harris2001-09-031-44/+181
| | | | | | | | | | | | | | | | that look up conversations in hash tables, unless they are arguments that will be ignored; if they're not being ignored, then if the argument is a null pointer you may get a crash if it's dereferenced, and if it's not a null pointer you'll only get a match if the conversation has whatever stuff the arguments points to as its first address or port. If you match a conversation with a wildcarded address and/or port, and the address and/or port matched a non-wildcarded search argument, and the conversation is for a connection-oriented transport protocol, set the wildcarded address and/or port for the conversation to the value that matched it. svn path=/trunk/; revision=3897
* Get the IP address, as well as the port, from a PASV reply, and use itGuy Harris2001-09-031-24/+32
| | | | | | | | | | | | | rather than the address from which the PASV reply came when setting up a conversation. Don't compare the reply code with "227" unless the reply code is 3 characters long. Set up the conversation for a PASV response only if we haven't already processed the packet (and thus haven't already set up the conversation). svn path=/trunk/; revision=3896
* Fix up the handling of data after the first token on the line.Guy Harris2001-09-031-16/+14
| | | | svn path=/trunk/; revision=3895
* Parse the address as well as the port in a PASV response.Guy Harris2001-09-031-65/+168
| | | | | | | Don't have two separate pieces of code that look at the response code of a response. svn path=/trunk/; revision=3894
* In "find_conversation()", do the same type of matching thatGuy Harris2001-09-031-91/+125
| | | | | | | | | "try_conversation_dissector()" does - start with as exact matches as possible, and then start doing wildcarding - so that it can find conversations with wildcard addresses or ports even if both address and port arguments are supplied to it. svn path=/trunk/; revision=3893
* Handle, as best we can, the case where the authentication flavor isGuy Harris2001-09-021-27/+72
| | | | | | | GSS-API but the RPCSEC_GSS procedure and service information isn't available in the captured data. svn path=/trunk/; revision=3892
* Don't attempt to fetch the authentication flavor from a call if it's notGuy Harris2001-09-021-8/+35
| | | | | | | | | | | available - just mark it as "authentication flavor unknown". Don't dissect the next protocol if the authentication flavor is unknown. This lets us get some more work done on short frames (although if you really want to analyze ONC RPC traffic, you should make the snapshot length large enough to capture enough of the frames). svn path=/trunk/; revision=3891
* Some new commands added. I found them in a recent trace of Q3A 1.27g.Uwe Girlich2001-09-011-4/+24
| | | | svn path=/trunk/; revision=3890
* From Frank Singleton: add some missing includes of <string.h>.Guy Harris2001-08-312-2/+5
| | | | svn path=/trunk/; revision=3889