summaryrefslogtreecommitdiff
path: root/print-sflow.c
Commit message (Collapse)AuthorAgeFilesLines
* SFLOW: Fix bounds checkingFrancois-Xavier Le Bail2015-05-081-3/+52
|
* u_intN_t is dead, long live uintN_t.Guy Harris2014-04-231-110/+110
| | | | | | | | | And, as we require at least autoconf 2.61, and as autoconf 2.61 and later have AC_TYPE_UINTn_T and AC_TYPE_INTn_T macros, we use them to define the uintN_t and intN_t macros if the system doesn't define them for us. This lets us get rid of bitypes.h as well.
* Netdissectify the to-name resolution routines.Guy Harris2014-04-041-2/+2
| | | | | | | | Have them take a netdissect_options * argument, and get the "no name resolution" flag from it. Move the declaration of dnaddr_string to addrtoname.h, along with the other XXX-to-string routines.
* NDOize BOOTP, DHCPv6, DNS, PIM and sFlow decodersDenis Ovsienko2014-03-251-107/+120
| | | | Also add/remove tabs in a few involved functions to justify indentation.
* remove tcpdump's own CVS keywordsDenis Ovsienko2014-01-031-5/+0
| | | | | | Remove lots of $Header's and a few $Id's that all belong to the former CVS repository of tcpdump itself. These keywords have been frozen since the migration to git in late 2008.
* ndo-ize print-ascii: hex_print_with_offset()Michael Richardson2014-01-011-3/+3
|
* whitespace changesMichael Richardson2014-01-011-31/+31
|
* print-sflow.c: print agent_id instead of samplesRuben Kerkhof2013-03-181-1/+1
|
* The ifSpeed field of a generic interface counter in sFlow is 64 bits.Rick Jones2011-06-021-2/+2
| | | | | | | | The "overlay" definition in print-sflow.c is correct, but the actual extract for printing is using EXTRACT_32BITS rather than EXTRACT_64BITS, which leads to an incorrect report for speed. Reviewed-By: Guy Harris <guy@alum.mit.edu>
* Handle the enterprise field of the sflow flow and counter record format.Rick Jones2011-04-151-66/+111
| | | | | | | | Thanks to some traces sent my way by Gavin McCullagh, and a comparison against the output of inMon's sflowtool, I can confidently say "Yes Virginia, there is an enterprise other than zero." Which means lest we start trying to decode something as what it is not, we best actually look at the enterprise field and make sure it is one we recognize.
* To enable printing of non-expanded samples I've shuffled a bunch of codeRick Jones2011-04-141-259/+528
| | | | | | | | | | around and created a bunch of smaller routines to more easily support printing of both expanded and non-expanded counter and flow samples. I've done simple testing of non-expanded counter and flow, and expanded counter, but I don't have expanded flow at present with which to test. So, that part of the change is only compile/eyeball tested. Reviewed-and-tweaked-by: Guy Harris <guy@alum.mit.edu>
* Check the sample, flow, and counter lengths.Guy Harris2011-04-041-18/+61
| | | | | | | | | | | When dissecting a sample, or a flow or counter within the sample, make sure we don't run past the length in the sample/flow/counter header. This also means we count the sample length down as we process the contents of the sample, so we only add what, if anything, remains of the sample to the pointer into the packet, and subtract that from the remaining data length in the packet, which means we properly handle packets with multiple samples.
* from Carles Kishimoto <carles.kishimoto@gmail.com>: add support for the ↵hannes2007-08-081-0/+577
SFLOW protocol
View Lorry Controller Status