summaryrefslogtreecommitdiff
path: root/print-ether.c
Commit message (Collapse)AuthorAgeFilesLines
* print-ether: print 'ethertype IEEE1905.1' instead of 'ethertype Unknown'Francois-Xavier Le Bail2014-05-051-0/+2
| | | | | not a full decoder, uses default print reference: http://standards.ieee.org/develop/regauth/ethertype/eth.txt
* AoE: add version 1 decoder (GH #298)Denis Ovsienko2014-05-041-0/+5
| | | | | | | The sample capture was produced with two Linux hosts (aoetools version 36, kernel module version 85, vblade version 21). One of the hosts exported a 1MB block device containing a freshly created filesystem and the other mounted it, wrote a small file and then unmounted.
* u_intN_t is dead, long live uintN_t.Guy Harris2014-04-231-2/+2
| | | | | | | | | And, as we require at least autoconf 2.61, and as autoconf 2.61 and later have AC_TYPE_UINTn_T and AC_TYPE_INTn_T macros, we use them to define the uintN_t and intN_t macros if the system doesn't define them for us. This lets us get rid of bitypes.h as well.
* Netdissectify the to-name resolution routines.Guy Harris2014-04-041-2/+2
| | | | | | | | Have them take a netdissect_options * argument, and get the "no name resolution" flag from it. Move the declaration of dnaddr_string to addrtoname.h, along with the other XXX-to-string routines.
* NDOize LLDP, PPP and RSVP decodersDenis Ovsienko2014-04-021-2/+2
|
* NDOize DECnet, OSPF and TCP decodersDenis Ovsienko2014-04-021-1/+1
|
* NDOize EAP, IEEE CFM, lwres, SIP & Syslog decodersDenis Ovsienko2014-04-011-1/+1
|
* NDOize AppleTalk, CDP and Kerberos decodersDenis Ovsienko2014-03-281-2/+2
|
* NDOize ISO CLNS decoderDenis Ovsienko2014-03-281-3/+3
|
* make use of ND_DEFAULTPRINT()Denis Ovsienko2014-03-261-3/+3
|
* finalize some previous NDO conversionsDenis Ovsienko2014-03-261-7/+7
| | | | | | Eliminate a number of fputs(), putchar() and fflush() uses. Justify preprocessor directives. Don't typecast ND_PRINT() to void and fix some indentation.
* NDOize OpenFlow, IEEE slow and telnet decodersDenis Ovsienko2014-03-171-1/+1
|
* NDOize LLC decoderDenis Ovsienko2014-03-151-2/+2
|
* finish switching Ethernet decoder to NDODenis Ovsienko2014-03-151-5/+3
|
* NDOize FDDI, MPCP, Token Ring, VQP and Zephyr decodersDenis Ovsienko2014-03-141-1/+1
|
* NDOize 8 more small decodersDenis Ovsienko2014-03-131-3/+3
| | | | | This change converts ZeroMQ, IPX, MPLS, IPv6 options, PPPoE, RIPng, PFLOG and Sun RPC decoders.
* don't include pcap.h needlesslyDenis Ovsienko2014-02-281-1/+0
| | | | | | | | | | Both interface.h and netdissect.h include <pcap.h>, thus most files should not include it regardless if these need it or not. The only exceptions so far remain: * addrtoname.c * missing/datalinks.c * missing/dlnames.c * tcpdump.c
* add a decoder for Loopback/CTPDenis Ovsienko2014-01-091-0/+1
| | | | | | | tcpdump used to print an empty line for a Loopback (CTP) packet, which many Cisco switches send by default every 10 seconds. This commit adds a decoder for the protocol and a test case, which uses the sample capture from Wireshark wiki (configuration_test_protocol_aka_loop.pcap).
* remove tcpdump's own CVS keywordsDenis Ovsienko2014-01-031-4/+0
| | | | | | Remove lots of $Header's and a few $Id's that all belong to the former CVS repository of tcpdump itself. These keywords have been frozen since the migration to git in late 2008.
* whitespace changesMichael Richardson2014-01-011-4/+4
|
* Adding support for ISO CALM FAST and ETSI GeoNetworkingOla Martin Lykkja2013-06-251-0/+12
|
* fix function 'msnlb_print', unused parameter 'length'fxlb2013-03-151-1/+1
|
* Add MS NLB heartbeat ethertype, as well as a basic printerRomain Francoise2013-02-231-0/+5
| | | | | The protocol is undocumented but Wireshark extracts some useful bits of info from the packet, so it was used as a reference.
* TIPC support.ABHIMANYU2012-02-281-1/+5
| | | | Reviewed-and-much-modified-by: Guy Harris <guy@alum.mit.edu>
* Change name of Hilscher link types to say NETANALYER.Guy Harris2011-09-151-9/+9
| | | | | That makes the names a bit shorter, and mentions the specific Hilscher product to which they apply.
* Add printers for the Hilscher Ethernet link-layer types.Guy Harris2011-09-151-0/+57
|
* Convert the IPv6 printer to use netdissect.Guy Harris2010-11-071-1/+1
|
* Use ND_PRINT().Guy Harris2010-11-061-14/+14
|
* added support and test case for QinQ packetsMichael Richardson2010-10-071-1/+7
|
* reworked print-ether to use netdissectMichael Richardson2010-10-071-46/+52
|
* Process VLAN frames and Alteon jumbo frames in the Ethernet printer.Guy Harris2010-02-211-89/+86
| | | | | | | | | | | | | | | | | Instead of having the Ethernet-type handler process the VLAN and Alteon jumbo frame Ethernet type values, process them in the Ethernet (and Linux cooked-mode) dissectors. This makes it easier for the right MAC addresses to be printed for those packets. As part of that, rename ether_encap_print() to ethertype_print() - it doesn't print encapsulated Ethernet frames, it prints payloads whose packet type is indicated by an Ethernet type field value - and remove the no-longer-needed "extracted Ethernet type" argument. That also lets us eliminate it from the SNAP print routine. Make ether_print() take a function, and an argument to pass to that function, as parameters, so that, for example, the ATM LANE printer can use it and put the LEC ID into the link-layer headeer printout.
* Don't directly fetch multi-byte integers from packets.Guy Harris2010-02-211-13/+20
| | | | | | | | Use the EXTRACT_ macros to extract multi-byte integral values from packets, rather than just dereferencing pointers into the packet; there is no guarantee that the packet data will be aligned on the right boundary, and there is no guarantee that, if they're not, a direct access will work correctly.
* From FreeBSD: handle the non-standard Ethertypes for PPPoE that someGuy Harris2009-07-251-0/+2
| | | | 3Com hardware uses.
* From William J. Hulley: support for the Transparent Ethernet BridgeGuy Harris2009-02-261-0/+1
| | | | ethertype in GRE.
* From Andrew Silent: Realtek Remote Control Protocol support (seeguy2008-02-061-1/+6
| | | | OpenRRCP.org.ru for details).
* add basic support for the IEEE Link Discovery Protocol as per 802.1abhannes2007-08-031-1/+6
|
* change 802.1ag pre-standard codepoint to standard codepointhannes2007-07-231-1/+3
|
* add skeleton support for 802.1ag CFMhannes2006-10-121-1/+6
|
* hexdump only - if (unrecognized llc proto) && encapsulation == (jumbo || vlan)hannes2006-02-201-7/+10
|
* add basic support for MPCP 802.3ah frame printerhannes2006-02-101-1/+6
|
* Have print_llc() clear out the extracted_ethertype argument, rather thanguy2005-11-131-3/+2
| | | | | | | | | | | | | | having its callers do so - some of its callers *weren't* doing so, leaving random junk in that argument in some cases. When checking for "802.3-encapsulated" IPX, check the raw values of the SSAP and DSAP for 0xFF, don't check them after the low-order bit has been masked off. The "flag" values in the LLC header aren't bits, they're combinations of bits, including the combination "no bits"; don't use "bittok2str()" on them. Also, combine the proper bits, namely the C/R bit (which we weren't combining) and the P/F bit (which we were).
* add support for the IEEE slow protocols LACP, MARKER as per 802.3adhannes2005-07-101-1/+6
|
* Add a flag to suppress the "default_print()" call made in variousguy2005-07-071-5/+5
| | | | | | | | link-layer print routines if no other print routine claimed the packet. Test whether that flag is set rather than testing whether neither of -x or -q were specified, and have -x, -q, *and* -X set that flag, so that -X suppresses it just as -x does. That way you don't get those pckets dumped twice if -X was specified.
* do not auto-hexdump loopback packets as the payload is uninterestinghannes2005-07-011-2/+2
|
* Have separate "struct tok" PID-to-name tables for different OUIs; don'tguy2005-04-251-17/+1
|
* refactored ip_print() so that chained header parser (ESP/AH) canmcr2005-04-061-3/+5
| | | | more easily call the inner parts.
* -resolve (print the name) the OUI field in the SNAP printerhannes2005-01-251-1/+17
| | | | | | | -add the rfc 2684 PIDs as pseudo ethertypes -display cosmetics: place a ":" after the LLC printer to indicate that a new proto layer starts
* - hack the ethertype_values[] table to accomodate GRE flavourshannes2004-06-121-1/+2
| | | | | - call the IP6, IPX, ATALK, MPLS dissectors within the GRE dissector - be more verbose about the GRE proto-id (hidden under the eflag)
* NDO-ized print-arp.cmcr2004-04-301-2/+9
|
* removed explicit snapend definition.mcr2004-04-051-3/+1
|