| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
ethereal.com -> wireshark.org
mailing lists and addresses
ETHEREAL -> WIRESHARK
Man pages
Automake/Autoconf names
svn path=/trunk/; revision=18271
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. Use the new (good work!) 'nanosec' precision only for gig pods;
2. Rework 'struct netxray_hdr' to make it (somewhat) easier
to maintain and revise:
a. Declare known hdr fields such as 'captype' instead
of using offsets in 'xxx placeholder' fields.
d. Define 'unknown' hdr fields using placeholder names
based upon hex-offset in the netxray header record.
(This isn't perfect, but I hope it will make things
more manageable).
3. Update hdr field info (based upon examination of various
capture files):
a. Define a hdr field which appears to be 'time-zone'
[offset in hours from UTC] for the machine doing
the capture.
(Maybe this field can eventually be used for Ethereal
to display the (local) time as it was at the time
of the capture).
b. Describe certain hdr fields as being "file offsets"
(altho the exact use is still unclear).
Update some comments.
svn path=/trunk/; revision=15603
|
|
|
|
| |
svn path=/trunk/; revision=14862
|
|
|
|
|
|
|
| |
Modified to match the current codebase.
svn path=/trunk/; revision=14832
|
|
|
|
| |
svn path=/trunk/; revision=14025
|
|
|
|
|
|
|
| |
standard input. Opening it for random access isn't supported; we add a
new error for that.
svn path=/trunk/; revision=13189
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a number of Windows Sniffer captures - apparently the time stamp units
are in a field in the file header.
Add a capture type value seen in at least one ATM capture.
Update some comments, and add some comments.
Get rid of some redundant setting of "timeunit".
svn path=/trunk/; revision=12936
|
|
|
|
| |
svn path=/trunk/; revision=10038
|
|
|
|
|
|
|
|
| |
add the ability to read Ethernet captures;
add the ability to read hex-only dumps.
svn path=/trunk/; revision=9468
|
|
|
|
|
|
|
| |
Add a missing entry in "encap_table[]" for Bluetooth H4, and fix some
comments.
svn path=/trunk/; revision=9157
|
|
|
|
|
|
| |
file format (AiroPeek 2.x).
svn path=/trunk/; revision=9144
|
|
|
|
|
|
| |
capture files.
svn path=/trunk/; revision=8840
|
|
|
|
|
|
|
|
|
| |
"hcidump -w" traces.
Note that Jesper Peterson contributed support for reading Endace ERF
files.
svn path=/trunk/; revision=8824
|
|
|
|
| |
svn path=/trunk/; revision=8272
|
|
|
|
|
|
| |
agents.
svn path=/trunk/; revision=8093
|
|
|
|
| |
svn path=/trunk/; revision=7692
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Following fixes for nettl (HP-UX):
1) Fixed 11.X timestamp issue
there is no difference in 10.X/11.X timestamps, so no
need to shift 11.X timestamps
2) Fixed NS_LS_DRIVER trace record handling
now works rather than throwing "...network type that
Ethereal doesn't support" error
3) Fixed handling of traces with sliced packets (nettl -m xx)
now uses correct packet and capture lengths
4) Additional ethernet card support
now handles btlan[1,3-6],gelan,igelan,intl100 driver
trace records
svn path=/trunk/; revision=7642
|
|
|
|
| |
svn path=/trunk/; revision=6936
|
|
|
|
| |
svn path=/trunk/; revision=6166
|
|
|
|
| |
svn path=/trunk/; revision=5922
|
|
|
|
| |
svn path=/trunk/; revision=5771
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Added support for NS_LS_TCP, NS_LS_UDP, NS_LS_LOOPBACK, NS_LS_ICMP and
unnamed subsystem 0xb9 (which contains ethernet headers in my captures frames).
However, NS_LS_ICMP will not be dissected since we dont have a
RAW_ICMP wiretap encapsulation type.
Updated decoding of usec timestamp for HPUX11 since HPUX11 has 0.1us
resolution for the scalar in this field.
YMMV but all these ones works for me from nettl traces from HPUX11.
svn path=/trunk/; revision=5523
|
|
|
|
|
|
|
|
|
| |
Nisbet.
Make a comment in "wiretap/file.c" clearer, so people know where to put
the entries for their capture file type.
svn path=/trunk/; revision=4328
|
|
|
|
| |
svn path=/trunk/; revision=4199
|
|
|
|
| |
svn path=/trunk/; revision=4042
|
|
|
|
|
|
|
|
| |
Update the lists of known capture file formats in the Tethereal,
editcap, and mergecap man pages to match the current list (as found in
the Ethereal man page).
svn path=/trunk/; revision=4039
|
|
|
|
|
|
| |
wasn't involved with).
svn path=/trunk/; revision=3311
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
in some places use "guint64", on plaforms where it's available,
rather than floating point (we don't yet use it universally, as
we'd have to provide code to do 64-bit arithmetic on
platforms/compilers where 64-bit integral types aren't
supported);
use .838096 microseconds rather than 1 microseconds as the time
stamp units for NetXRay 2.x format, as those capture files seem
to use that time stamp (that's the Sniffer "PC" time stamp;
perhaps when Network Associates assimilated Cinco, they changed
the time stamp units).
svn path=/trunk/; revision=3027
|
|
|
|
| |
svn path=/trunk/; revision=2859
|
|
|
|
|
|
| |
From Daniel Thompson <daniel.thompson@st.com>
svn path=/trunk/; revision=2748
|
|
|
|
| |
svn path=/trunk/; revision=2335
|
|
|
|
|
|
| |
unreliable).
svn path=/trunk/; revision=2019
|
|
|
|
|
|
| |
Mayer, and yours truly.
svn path=/trunk/; revision=2002
|
|
|
|
| |
svn path=/trunk/; revision=1158
|
|
|
|
|
|
|
| |
provides. "Every problem in computer science can be solved by adding a
layer of indirection."
svn path=/trunk/; revision=1008
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
line of ISDN routers. Much like the ascend reader, this module reads an
ASCII hex dump of trace data.
Rearranged the order in which wiretap tries trace files, to keep the
ASCII-readers (ascend and toshiba) at the end, and put the binary-readers
(everything else) at the front of the list. If a telnet session of
and ascend trace or toshiba trace were captured near the beginning of
another trace, wiretap might think the trace was ascend or toshiba if it
tried that module first.
Fixed the way wtap_seek_read() selects functions to call. It was using
the encap type instead of the file type. We got lucky because
WTAP_ENCAP_ASCEND == WTAP_FILE_ASCEND
svn path=/trunk/; revision=952
|
|
|
|
|
|
|
|
|
| |
capture file code.
Add Ashok Narayanan to the list of contributors; he added the code to
read compressed files.
svn path=/trunk/; revision=880
|
|
|
|
|
|
| |
RADCOM WAN/LAN Analyzer capture files is his.
svn path=/trunk/; revision=527
|
|
|
|
| |
svn path=/trunk/; revision=112
|
|
because it is still in its infancy, but it can be compiled in optionally.
The library exists in its own subdirectory ethereal/wiretap. This patch also
edits all the packet-*.c files to remove the #include <pcap.h> line which is
unnecessary in these files. In the ethereal code, file.c is the most heavily
modified with #ifdef WITH_WIRETAP lines for the optional library.
svn path=/trunk/; revision=82
|