| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
the IP header as the reported length again, but make the actual length
be the minimum of the length of the tvbuff and the reported length, just
to keep from having a weird tvbuff that has more data than the packet
has.
svn path=/trunk/; revision=5876
|
|
|
|
|
|
|
|
|
|
|
|
| |
length of the data in the PPP packet, not the value from the IP header,
just in case there's extra crap at the end. (That appears to be the
case in at least one pppdump capture filel; that's probably either a bug
in the version of pppdump that produced the capture or in the pppdump
reading code, but, until we fix that, if we can, let's at least get this
right, so that the reported length of the tvbuff won't be less than the
length unless that was the case for the tvbuff handed to us.)
svn path=/trunk/; revision=5868
|
|
|
|
|
|
|
|
| |
in the "packet_info" structure instead, as we don't need a pointer for
every single frame in the capture file, just for each frame for which we
currently have an open "epan_dissect_t".
svn path=/trunk/; revision=5614
|
|
|
|
|
|
| |
turned off or we don't know the direction of the traffic.
svn path=/trunk/; revision=5522
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Put the array of connection states into the per-direction state
structure; its size is fixed, as the connection number field size is 1
byte. Get rid of the "rslot_limit" member, as the number is fixed.
Get rid of the per-state "next" pointer, as it's unused.
Process uncompressed frames even if VJ decompression is turned off, and
even if the "discard compressed frames" flag is set on the connection,
as there's no decompression to do.
If the full IP and TCP header isn't available in an uncompressed frame,
discard subsequent compressed frames.
Only use the "discard compressed frames" flag on the first pass through
the capture; on subsequent passes, the presence of an "uncompressed
header" item attached to the frame indicates whether we could decompress
it or not (the "discard compressed frames" flag would merely indicate
the *last* state it had for that connection, which might not have been
the state at the time we saw that frame).
svn path=/trunk/; revision=5520
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
that it's not included in the tvbuff handed to subdissectors. Use that
tvbuff to compute the FCS.
Properly handle the FCS in frames that don't include all the captured
data.
In VJ-compressed packets, put the VJ compression information into the
protocol tree, and set the Protocol and Info columns, and don't worry
about the CRC - as per the above, it's no longer in the tvbuff (and
never *was* in the tvbuff in some cases).
Also, clean up some other stuff in the VJ dissector.
svn path=/trunk/; revision=5510
|
|
|
|
| |
svn path=/trunk/; revision=5504
|
|
|
|
|
|
|
| |
Use "tvb_get_ntohs()" to fetch the checksum from a VJ compressed packet,
rather than doing the ntoh by hand.
svn path=/trunk/; revision=5163
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
"data source" has a name and a top-level tvbuff, and frames can have a
list of data sources associated with them.
Use the tvbuff pointer to determine which data source is the data source
for a given field; this means we don't have to worry about multiple data
sources with the same name - the only thing the name does is label the
notebook tab for the display of the data source, and label the hex dump
of the data source in print/Tethereal output.
Clean up a bunch of things discovered in the process of doing the above.
svn path=/trunk/; revision=4749
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
"epan/..." pathnames, so as to avoid collisions with header files in any
of the directories in which we look (e.g., "proto.h", as some other
package has its own "proto.h" file which it installs in the top-level
include directory).
Don't add "-I" flags to search "epan", as that's no longer necessary
(and we want includes of "epan" headers to fail if the "epan/" is left
out, so that we don't re-introduce includes lacking "epan/").
svn path=/trunk/; revision=4586
|
|
|
|
| |
svn path=/trunk/; revision=4517
|
|
|
|
| |
svn path=/trunk/; revision=4431
|
|
|
|
|
|
|
|
|
|
|
|
| |
containing a 4-byte offset and 128 bytes of data, rather than a 1-byte
offset and 128 bits of data, so that the data is aligned on a 4-byte
boundary and doesn't upset processors with strict alignment
requirements.
We don't free individual memory chunks containing those objects, so make
the memory chunk pool an "allocate-only" pool.
svn path=/trunk/; revision=4428
|
|
svn path=/trunk/; revision=4427
|